last executing test programs: 2m34.003029183s ago: executing program 3 (id=1914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0xfffc, 0x0, 0x1000}}}}}}, 0x0) 2m33.893765973s ago: executing program 3 (id=1916): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70d000000000306010000000000002133a65108027d8b7f1c60495d18fec3f83634cfe5cff0e0716010615e88f55306e4d10c4c406904261e0d3fb996e1714f3435bbdeb35b793cb42c3131463efbd3d852", 0x56}], 0x1, 0xe, 0x200004) 2m33.648402231s ago: executing program 3 (id=1917): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x0, 0x7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 2m33.527458785s ago: executing program 3 (id=1920): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 2m33.339366363s ago: executing program 3 (id=1924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 2m33.166112124s ago: executing program 3 (id=1928): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x5411, 0x1000000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd2e, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x20004018) 2m18.088582139s ago: executing program 32 (id=1928): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x5411, 0x1000000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd2e, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x20004018) 2.206135149s ago: executing program 5 (id=4274): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000000, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001380)="ad56b6c5910fae9d2c000000ea54c7b6ef915d564c90c200a8b0fd3f266f52f0bc747b493e8045d2945c841416a023e38273b5ddd81b698b364c5639645152044e12b3982ea3506c648fb440c033b5d3b3a05abd62f8e1", 0x57) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001340)={'erspan0\x00', 0x1000}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000001680)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x5cec9471c8fe4ca5}, 0xc, &(0x7f0000001640)={&(0x7f0000000100)={0x19c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0xf}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0xc}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0xfff6}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x3}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$inet6(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="29908231db0794467111ed689e0866f8fe322148afedf55e8765ea2b41d85d17f55285f4d73a9d86028cd80c59a6cdc148a0092564ac6b191138381eb17a606bb994a0f41c36283dad5331e3eefc6692", 0x50}], 0x1}, 0x40000) recvmsg$qrtr(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000740)=""/178, 0xb2}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x2) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="68120000130000042cbd7000fddbdf25110103804e204e23040000000500000006000000080000000200000000000000000000000600465ee0c61a881032caf1c30954039bc85607f1bed807105ba3b0ea9c591aebc9", @ANYRES32=0x0, @ANYBLOB="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"], 0x1268}, 0x1, 0x0, 0x0, 0x800}, 0x800) 2.00170368s ago: executing program 5 (id=4276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000f00000000000000000000000095000000313845737378a1d62346c27128"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000008}) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="35d3ab1cf013d7d6", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r5, 0x118, 0x2b, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r4, 0xf15f7000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x20000000}) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xd) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a080002400000000a0900010073797a30000000000900020073797a3200"], 0xc0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x39, 0x0, "35390074218cc2d7d9c95462b94557b3f418a0f841348673881609e8b07aa66a4101aa94603f4146d4abf6679647e756c1c4caceea144840b3092a4d9904e79cd43da7cd11c93f914ee8406f3b1d6246"}, 0xd8) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000680)={r9, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x42, 0x0, "d69a3fe82d45168edef382d0f6875446970bbdea805f0af95ba18fa21f8c55f4c3aeab6e4d5094c73e412345479d238cdb2cc09829eb51f757bb3c515ac5916967379715421571786d599acc198d4e88"}, 0xd8) setsockopt$inet6_int(r6, 0x29, 0x34, &(0x7f0000000040)=0x1000000b, 0x4) recvmmsg(r6, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r11 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r11, 0x80049367, &(0x7f00000002c0)=0x3) 1.955781754s ago: executing program 1 (id=4277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x0, 0x9, 0xc, 0x4, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x20, 0x3, 0xb57}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x9, 0x5, 0x1a, @mcast2, @private0, 0x20, 0x7, 0xfd, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x2f, 0x10, 0xfc, 0x2, 0x31, @private0, @private2, 0x10, 0x7800, 0x2, 0x3}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x10c, r2, 0x404, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x43facc04a9b1b95b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x180, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x80}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x40, 0xbe, "45330e4efe41d93122ece58eafd670f11d42c1501b665dd8eb3630b48441611c3193f6ca48be907a4a91f29cbf460a4ac0db4ae1d58ee00a13136fcd"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x2f, 0xac, "7c457de2814a050e6a37f0466ef423a15bce9cd701ac389b43a4c8dc8903244fdb047c12e56ba99432ffd7"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd1, 0xac, "a3cb7c0a36e226723859cea7a9a152e73b8f2cd9bd7203110275b71cefd1b61e1f1cce1b52fde371a19af2b1fac7bfdbb9d3baf91c83bbade170b53221672899e3db9a8cb2a3e7433835932bbf138ce803e0de76a089af3fa3ee18798b6adf7568cb927e59a1aadf3dc49afd9a9040d8a392a844866021a70b0895ce0b1f6ab7b08d1452ae0a4d612bbda1b23cf4e99520e530ae63eced219892753684692d55dab12cf382b36d5ca7286ae2d4efdd502c617699f25919a2423adc2c2697ba63674c65f335e7cb0d6e31342319"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x180}, 0x1, 0x0, 0x0, 0x8002}, 0x4810) r7 = socket(0xa, 0x4, 0x5) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x1409, 0x304, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000006}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = accept$inet6(r7, &(0x7f0000000980)={0xa, 0x0, 0x0, @remote}, &(0x7f00000009c0)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000a00)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000a40)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000a80)={r9, 0x70, "8fa77e7c99f2359e62bc3d6548f409759ecfc9eec7464149d41c045c8fa238d22fdb22b582ae0231809edd9a6a87460366b34cbf8b05c6225e072c2e21bfd61ad5706b4971cdfb4e877b32ee84556aadf02b7045631c3740b83d0d8adf432f43dc028ae4897b6bd364eb6e429c40f567"}, &(0x7f0000000b00)=0x78) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xe4, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40045}, 0x4000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r7) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb0, r11, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x10000, 0x3, 0x40, 0x6, 0x4]}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x33b9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfb20}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8000, 0x98, 0x8001, 0x40}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x20004800) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xc8, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8890}, 0x890) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r11, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x100, 0x40}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x7993cdc859bfe22f) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000001280)={r10, 0x5}, 0x8) sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x118, r11, 0x400, 0x70bd2d, 0x5, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_TESTDATA={0xf6, 0x45, "ba2735f637f7d726db91146092b37f4255bed3c231172634afc7019bfd86952a99dc9725db3c7f6b8d6220b8f5765a678cc69163aa08d2109bc8069cafe7025815ee9e45459dbf27215f28c93d77626c6746219dc320c5bd356197e8231d8b8c0fa1e2d6a2590e9a36a8710b760481ae1f92f26046c291498929b4073162052035b5a1e0b19759ad48df0c544d6f7d66f5d2f79c1cb4a3a8ba1369c6d5ed6b1da1b9212ebb6b0c2a5a168def8ba5651fce982f17969860a9601ea1bfcc2b523f2ba20601315d567d24c44fb50fc17944f5f06ed862d0151adc05a99cdca19ad39fa5b599ddf6602614ab03c52c51ebcbc22a"}]}, 0x118}, 0x1, 0x0, 0x0, 0x20004001}, 0x880) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000001700)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)={0x164, r12, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x43ac}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001800)={&(0x7f0000001740), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x15}}}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "1a8669afa7"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000001840)=0x8001, 0x2) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x38, r11, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x84000}, 0x801) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000001980), &(0x7f00000019c0)=0x4) 1.953470293s ago: executing program 0 (id=4280): socket$nl_route(0x10, 0x3, 0x0) 1.749037943s ago: executing program 0 (id=4281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3bf}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048040}, 0xc000) 1.685796075s ago: executing program 1 (id=4283): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000c2abd7000fddbdf258200000008000300", @ANYRES32=r3, @ANYBLOB="0c0009000000000000000000912d84e29ce1752598bc2ab428a94a7ea716be39db41ada2c2044849be7e8628d3932fcafcd9f16414e7bf0529713ed51b3a060d2ebdc1f00dd436cd5c5580890e819297752c850b4b7db5e6a76c0a27ff64cc0b08cc3587a0255ffa"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x24044000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 1.661495043s ago: executing program 0 (id=4284): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 1.560802042s ago: executing program 1 (id=4286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000006a19a1800000a50000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000000000040800034000000130140000001100010000000000000000000100000a00"/120], 0x78}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xa, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000600)="f1", 0x1}, {&(0x7f0000000280)="63c6b28a5bee93e9c01ffe61dfc0a2", 0xf}], 0x2}, 0x40004844) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x1e, &(0x7f0000000000)=0x2, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x58, 0xa, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1.301721356s ago: executing program 1 (id=4289): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000200)="1a00000002000000", 0x8) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) 1.271559912s ago: executing program 0 (id=4290): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendto$netrom(r0, &(0x7f0000000040)="8cb4d5717a66368ca3041716596ecc605580362b0bfb876f9800e2632117907973b3a9f322f47cc16012cdd5dcf5e1d6a793d3598a9e920943489111b14358fa2c3876369c6474afc8517cedd89def967340bd235eb5cc566705484578cd76a4aaa84ebb8570adc40979d0855f142b2544ca97", 0x73, 0x814, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast]}, 0x48) sendto$unix(r0, &(0x7f0000000140)="3bf09aceda108ff70002e39b4c77a02d6c096de6dee7e520a26418ce7fe506c204c126c4321c59d23fe5b2ec7076a7f97123efcecd109586c6a4b9917616b5f203113c50d0b41d1b6a3cdac953b834d284af6ddd3efe460f9cb1a2781ec16f30eb41e79377a7b1b384a8a1c076bc2ede45f1e647cd0c803d12a4d65a77c3a8152babdf1a0a", 0x85, 0x40081, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = accept4(r0, &(0x7f00000004c0)=@can={0x1d, 0x0}, &(0x7f0000000540)=0x80, 0x80000) recvfrom$unix(r0, &(0x7f0000000580)=""/196, 0xc4, 0x10043, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvfrom$unix(r0, &(0x7f0000000700)=""/139, 0x8b, 0x0, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x2}, 0x6e) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000840)=0x9) unshare(0x60100) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000880)={0x0, @empty, @remote}, &(0x7f00000008c0)=0xc) sendto$unix(r1, &(0x7f0000000900)="2c1e594668d11b934a4cdd6b1898031eadba0e91f9495a3fb2a24260cd24fec764007ff6027ee0536ddc47fa8e8319df62bb0549bee1125575da063efd868a4c8e977f22b05524a34a05b75318e7ef2d5a84c6404722e5fa2b9e0f5d44082cc591de399bfd5b09d5945f8d9cd80fb6ff05dcfab32b0cadd74c8b7e5f442f50feaf035ac3aa44a99b1041b3d35f5bed116d0d1a80125bb5f380482bf6c554ce5f4d8d5304043bc9d4ecf840dbef79b264fe3a78530e84f5b685f4fe1837203093d28ebfc9fb5d04da1ce953b43b69d43bff9392119e33074b7f849cf009b19c601bc79b2bd17ed08761", 0xe9, 0xc804, &(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto(r3, &(0x7f0000000a80)="4a5d234defba01fa9107354bdf66dc2221456b3c5b2d015187db0527ee21a29120f807624a7de5f7f8ae3b5d648fb7371bc85ddb7bcd080bea006aaa547a5e638d21d5f4f1c792178ddb326f1d38e20df8bb770c7d4e0c08faf8e69953a265de9056780d013b8e227441e5f7d06644e7574e726ab9777c758698f08717112265d136734a6f6ebf6e618c3076880a4e0b4733d26925340914dfa9a8dffd0c1f5065b47b5c464a91a755c061e16393f83137baeaeb319848de0b8100ff70c2bb972be0de75678d9d516db03f6c23e3d2b2ed07672a50aa6669ca24002f997e5d88904f0acc29807b805589af8e17aea5e7", 0xf0, 0x4040012, &(0x7f0000000b80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000c00)=@xdp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c80)=""/28, 0x1c}, {&(0x7f0000000cc0)=""/202, 0xca}, {&(0x7f0000000dc0)=""/36, 0x24}], 0x3, &(0x7f0000000e40)=""/233, 0xe9}, 0xfffffff5}, {{&(0x7f0000000f40)=@nfc, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000fc0)=""/243, 0xf3}, {&(0x7f00000010c0)=""/219, 0xdb}, {&(0x7f00000011c0)=""/248, 0xf8}], 0x3, &(0x7f0000001300)=""/37, 0x25}}, {{&(0x7f0000001340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/102, 0x66}], 0x1, &(0x7f0000001480)=""/186, 0xba}, 0x8001}, {{&(0x7f0000001540)=@rc, 0x80, &(0x7f0000001b40)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/31, 0x1f}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/191, 0xbf}, {&(0x7f0000001840)=""/210, 0xd2}, {&(0x7f0000001940)=""/93, 0x5d}, {&(0x7f00000019c0)=""/227, 0xe3}, {&(0x7f0000001ac0)=""/120, 0x78}], 0x8}, 0x8}], 0x4, 0x40000000, &(0x7f0000001d00)={r4, r5+60000000}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d80), r6) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000002000)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x1e4, r7, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x928}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc43}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$kcm(r1, &(0x7f00000023c0)={&(0x7f0000002040)=@phonet={0x23, 0x8, 0x92, 0x34}, 0x80, &(0x7f00000021c0)=[{&(0x7f00000020c0)="18cd37634c424c0418144261b948241fce66e9481a3a859f6f201a47b52e15cd56aefb2f30af88d9f3128a604a1dcd95e2666fbc6bef38d558190dccd2cf80a6e360aabe663d0982d50b9c41ce37723149ab5661c6636becff5d9f889f968f413e87fe9e60637d9d03ed7f0edd4a444c06893a1e236fecf72832e4ed078aadcf4dafd4ef6586e67b3954e9a5d2cb788fcabfaa7119bff7139d0a115bd5ff581cf06f596c40189e60f396c4a92b6a3acd968d027b54e9b092f0db4a37c16bab9599d3e8f6751c25fb04f62a8ea21e9d41b463bc345f2f09ea32bfc0689f03f979d938dd200df1e88f6fe07819cf1c3b", 0xef}], 0x1, &(0x7f0000002200)=[{0x78, 0x112, 0xfff, "3663be12b6e65bc9f0c720d37dde44c9da16f4df3399ecef37df642d6d2b71675a2b5e8560682160328c4992bfd988eb79c2bc793af8c452997e09e4523d156058d310b0476f63969120c5001604644afb1ae9dc42db8404fd3de8a466df67aa46"}, {0x28, 0x107, 0x22, "1112f30b9738aafc081962b4c2df6799dd4a7ff7bb4234da"}, {0x18, 0xff, 0xbe, "5dbf"}, {0xe8, 0x10f, 0x81, "dffb551ccc0b8a33026b159de2a0c3897592ccf3776165d6d271ca6df86aaa558cc673976fbd4670174ef889f1acfb860ee8c60bcab8070b1c1cbadec6672b936e0c103bfc122c9678d788158a76a8ce39f72855f4954279b7ff611dc72b5e30428bfa0f90c10858433c8a52f2cd8a1179c00969a0393cae19bed02c21c1c925cb00a6bfeb834b629449eed32ad8841c8de8921af9f144cb0d2aa2c8f9e6dee4c8e3dedfae752b0edb31edfed929bcad9cd5fe7d6b9adf3869f53b68b27d96a4af3a14e8203f8e1ed10816522b051f288bca152d1e533c38"}], 0x1a0}, 0x204c890) r8 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002400)={{{@in=@rand_addr=0x64010102, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x3, 0x4e20, 0x3, 0x2, 0x20, 0xa0, 0x0, 0x0, r8}, {0x8, 0x1, 0x7b, 0x6, 0x9, 0x9, 0xffffffff80000000, 0x246a}, {0x2, 0x1000, 0xf, 0x6}, 0x8, 0x6e6bb8, 0x1, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x33}, 0x0, @in6=@mcast2, 0x3502, 0x1, 0x3, 0x1, 0x5, 0x3}}, 0xe8) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002500)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000002580)={0x0, @xdp={0x2c, 0x9, r10, 0x26}, @l2={0x1f, 0x0, @none, 0x3, 0x1}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x4, 0x0, 0x0, 0x0, 0xbb, &(0x7f0000002540)='nicvf0\x00', 0x3, 0x6, 0x6f81}) sendto$inet6(r3, &(0x7f0000002600)="56a3295732ea70c13af3495ef91536a9cce184ec638bc6e48fdea79145577c2d3f015e1e1197b09ddf821a249459", 0x2e, 0x40008, &(0x7f0000002640)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}, 0x1c) sendmmsg$inet(r9, &(0x7f0000004780)=[{{&(0x7f0000002680)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000002740)=[{&(0x7f00000026c0)="37cfaeb68e6025841a76671cc0c74484971c4373046f15d1228cd25283c70d992dee232d9e9c97ca2b51ab3a7ab13f1e1eb5e355791b51689025495abdd16794262c410fac5127c47d029064e2f7f16b603efde1afbead3e64a460aa2f09", 0x5e}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002ac0)=[{&(0x7f00000027c0)="68ddc776cef21d176e69ba6bcedcf1cde1f26e500791e25e6634e2d4af8ed433902937628dd1ad5e411dc11667c2734388790a473c74badf8a19419971f3ab8060bd5dda791f250dd83cb62cccfec51de47b15f8fadeb2e79463cc9dbbf6687950cfcaa32f1f489345e6c886baed70e3880666d60c163894abcd290d9bd20668ae07a8a22031e2a062c77ae49903d0e7f6c737c9baccfacad3252ac1b5e73496799b152e003b59e2883e43f2172a94cb890c31e1c93c8a0805206090da41a41e4d9e31a271", 0xc5}, {&(0x7f00000028c0)="2f2498b38546f5013978af629de21bf283efe77579b6eea18e72801be0372e0eb99364342ab6b5846566e649cceb1afd16ff3d6fcdfc9611499072a37750f3fe04f2a4b21262827a17530351e0ef46f9439bde691638d908e0bd4e30524ea3d0397f691bb169b2c8cca26f8886ffbdcc51456133a1b63fa7a83868859737a3dd5ea0681eeb3c45736db5da5eb2f682e019b0a4fa51821e46a676181af07b699a35f2389e289d3b816cb2e96e7fa0c077e9e8101fb9a45d321d7b50c5", 0xbc}, {&(0x7f0000002980)="e1618d5215702798eaf88caf3ae777ad10e0632598f531b46ec679e25b5e136fc6406119b4ef382b068a4de4c64ba8f2b4347cd24a16528b454ac769e74203d1403e1adac13f79859ca468ad56", 0x4d}, {&(0x7f0000002a00)="f10aae2172f47680addf27e0e5ad0ee22b5a7d4d1f45286d7c02b4f79b914754eed6fd17fb516e29baf47a3808d59e3d9dc423996b5df02a35aee15a9ef4228a6eaf4311c368f5b7fc9569bc9377294a04cbaa3004965848855a0881cc33e2b285c82beac959ae4b618679e1d32ce6aaedd5b9cd14f3fa46e59c6f2f8cda15ea743d848b23c321", 0x87}], 0x4, &(0x7f0000002b00)=[@ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x30, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0xc}, 0xfff}]}, @timestamp_prespec={0x44, 0x54, 0xe5, 0x3, 0x4, [{@remote, 0xb}, {@multicast2, 0x5}, {@local, 0x7}, {@rand_addr=0x64010102}, {@loopback, 0x6}, {@multicast1, 0x7}, {@multicast2, 0xb}, {@multicast1, 0x2}, {@multicast1, 0x1}, {@broadcast, 0x1}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8c2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x84}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1e}}], 0x100}}, {{&(0x7f0000002c00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002c40)="dc2d1af02f26e53ab3c6265c024560a643be24b473ad020e77d4df83ccccf4dfba9248f6960a5df7f1", 0x29}, {&(0x7f0000002c80)="5976921bcdf4b320a9bb84f9d7f8db23610361f16c192c5f15800f33b0c86cc3adbe47e3c0ed13289a118a0c90750f13a6ddce14ee67e1379e85469c190254860c9897c9518c283d33abb04c31bd87451a6e4ea3135037327851dfc49d6e1a2c9b76fdf85047f6dea12f21d3901f13ad5ac4dc67607963c113004e8f14af82b41a1fdcee9d36f092e075b501f51001f66258a4ac31f661ac2772e5d81e2ebec36fb5a70a2520ab1cbc3295b9538f9c766d984b5cf90a5f7d989d2c30dac15388f2463461a24dde1c87eb2a33", 0xcc}, {&(0x7f0000002d80)="734fae206e191869392d3b32804933fdde2e9fc89f5e5900640782b12a857a2f0e9e0516a0e55e99e5f4ec329eb3df8135f2ed53e5e968b3baeb0d8a0bd718552a796759be754b41d266d22801fb8bef77b5a95850c769", 0x57}], 0x3, &(0x7f0000002e40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x64}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @private=0xa010100}}}], 0x50}}, {{&(0x7f0000002ec0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000004280)=[{&(0x7f0000002f00)="8bf336a6393f5378fd20d46c3e3b008c269c414a164fed598120eace09140ad19c750670004ea08770ae51a4e50486853401fce049db2a05ea2dcd387152636923c5b53a09d822a23531747a48bd49d92343b184c24335039cb4a99fd01f23fee91a7c647a5329b0f79a23569c322386b44425d82f297ce2ffcbbaad3adcd1b3433ac31cff6134ad61aa259726173ee385edae559e2312c4c1db003a5b5d8e9c8eb8c6773618a50c199d94ae4d850f793ace674301ea4fbd43af3d9d6dfa6d2fb16a0080ee09f0dc22400f0efa8944d8df910e", 0xd3}, {&(0x7f0000003000)="e64da0d2357ee159604e96be5d8f4e8702bbf9f23fa3cc98f92c889ab2939af69b79fca822ce0b280eaefd8b2eb7784e185e9051b090481c66e85884cb2e815da057daee8cee989e50819b5a4d0ab7d9fdaca165e0d7e131af1c5ba8067c7f13f57e55849db8861ca20bcbd01bfe", 0x6e}, {&(0x7f0000003080)="c39db47f5a61ae850e1a6ff673c24ff290f1d945c4b27b359bb9e7e0209eefdeac009504f095afc15220bdaa9b7828aeed8d5ffb9cba5e4523d54359d45ae4439cbfed69f19eccbd4669442fd31ef6c38d510ddb1bf8d23fb1c95e0cdc146293c76ccc0020e67819c032470b5613ad863e5875979e0eca1eada56aa9289689dc95f1a4528a7c8a81595ae48ef0d862599ffd9059277833b7800b5fdb4118f29c861640318e7f4661e200c144d8bf5d2508d299d89d3cb28de65f274d9215d0e889cde2928a82c5141b380862460da3c880b74fc7fbd21b8238105980561df8124aaf2bb6f61fc14f", 0xe8}, {&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000004180)="6f05f9f7f4eb9582457fb181384912e9d50b3e721dddfb13118f8a379556c5eaf11931bd98e1a4f26ad4b80a001373cd903688271ebf0fc51c3927856743e04187128d7717e9844369ea2c2b7b20bd4d1f143207227c90a81abd1794e3a9c4b3a3f1382b0b5dff7d24d1fc80ee13654f8f9df5bb57795cf155fc19f681c65e0458b5e252ff047a29c240426e041c7a7595f2be49d81ecc3cd5b696946514e5188460bd873bd5279a048b86b800b6dfb4287a9d7435caa1ec7f1d77eb9f6a01afcb5791cb2b527a953a6ffc6fce1209b42dea4aab9efa9f70", 0xd8}], 0x5}}, {{&(0x7f0000004300)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000004700)=[{&(0x7f0000004340)="eb4566283b456b7e01befa599ac68dd29a35c42d2d1e983662af3c4ae8107406abfe6d234d923dcfa38fdb8e4a8f95857a41f134dccc", 0x36}, {&(0x7f0000004380)="2b43a89be6255563153e519798afef0d0c2ae1b31f6580ab3217f4a7086a07e12cab58e563c035f6684b9d121e21a049a976c525fd32b6c8b5239c032c718195d4fd54ce75e5b7095f5db3819fa0777425fe3a77a1cdaafa2c2ff9201eb82c1af0ca749b8f704ebded78ccf0e39977c40dd974017b124808e9d0ba24dcd2d7574c0fe5567bb5bbe40b029a1bc52582574f8945", 0x93}, {&(0x7f0000004440)="0ae3be9215d84d6e9afd3544f6347201c40fe1c2e6d7c242dbcffbe14f5e3bd54fb9db344b7364bcbfbd3914aaa7eb4983790d8c9deb66da593545e4a93656a27876f7da5890be3f0f6bf6b4d30e8ebc4221b8e69b1fb4afb73f72a7698eda4dd1350fe999054735669c1507b5d1455b4caba9788366b69a148c5f938e2a4a88b11dc0832200612b389f7ef53b368ddbd6fab6cf9d316c66da644a0450c2bdd3c52eed5d36329463a152cbe1bfd70fd23ef53bd30197163e000ccc6a5319b967ffe8c6f83f58730974307f2612ae45320432224bef08e53bf153a0570d55dc1682dc35046151334c83a3f089f9314f9b267b0f0b4d4bccf6", 0xf8}, {&(0x7f0000004540)="30b9a90a1ea7f40f165f9a98e9f67fd73e9caaae1a96ff9f160b72caa36ab4f3b70a5539cab6a662e0c6600085821d3d00fec9d3d1c70d03b45218af3a7355519f2990c06faa40014961c4856a66e0ee459b88eb7e1d15ea2da4f97c3d5d8657951ed4be5914d4ede33815b5ee1fb4af40b9734307381be0ade338768da1a4cf38665941dfd17b140af2c7185a61434b9d3efef88173f683e8bf686bdf2cf799d89001c45f750cbee4fcbcc9a2c98aa195ec6037c37ec49c11aac9706406302d592b4e6c944d80e76fafcd7039d22b4f75063a3f0fca1426178fd7076317815b60d93113c6dd364a17f3f8", 0xeb}, {&(0x7f0000004640)="1dfef93c7115110ceb28d3168073d4962c19b5aef7640664dc9fac0e", 0x1c}, {&(0x7f0000004680)="8c65ec3ffe2f8fc1280751c398fe3a105e1c7d12b53e785915c32f98362a2bf6be5b7e68529ac58888a41f2fd1aaf9784a90f7b1017adc1bdab0debed82eea8791bf6436f6a4467c54b5439c6526", 0x4e}], 0x6}}], 0x5, 0x20000000) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000048c0)={'veth1_virt_wifi\x00', 0x1}) sendmsg$qrtr(r1, &(0x7f0000006ec0)={&(0x7f0000004900)={0x2a, 0x4, 0x1}, 0xc, &(0x7f0000005dc0)=[{&(0x7f0000004940)="52a3c559df07b1f558a27190a728f4d495a070f76bd1db787da87b4b23ab6de61ebe07812ef25903b06b81e13b310b24c7ae08f88eae3517f2ffd7001c38e32a70aab93ff6f86ad6656785c532bedd9f50c2f02c8a984917f103400295769697660de9c09405e7485f5e4d5167224fbbf944db3ffa495f06abe31526610ed98dbdc9a3fba0b0a04325b8bc5a59d04059b8968fa9eeff911b0b08af40dd428fc0fb707c8c380e1ea01b651c4a5eb38bbd2fb04864bea9808105f67d1b3b19f0e350160296eabc2b09a5257b767cf01ee000c3ee7064cca236fe0fe18699f406", 0xdf}, {&(0x7f0000004a40)="18f501f2b373cf95d2cb2e4ad5a3035c8d28ccd65d34bc80d9aefa1a94c871c610a0c5c7a243d182688a9c7be10a9fc24d065b2869767ac309527fedc37dbf13be", 0x41}, {&(0x7f0000004ac0)="75d5f5ba0502a3b9c942a478d3db6f122a6eb89f8a35917cea7f67cfe624d83c916d8d80a17bd0559f3c6c4f7c355300ea31eec0c9c911cffddb97d136e7b07357b283d12f379c6d07975bc683f57e7802a3120127d8f3fc0fb0f3bdc3a0db0bf428770fea4554bb3a28fa511623e20f5f6db45e8be8aaced67a98c761a3d0058e68226e1f309b3e1cc1d3c14eb3d64f01161308813a4957", 0x98}, {&(0x7f0000004b80)="40bd348c91c001f5d98daa35f1c8e748567adf3696caa5c5f4b1e162bbee4d6fc2ebf5c22764a1700e6dfd04aba94557ad56dc249929dd9fc5532d4a979d6f698ce53147fca7072d34cb69a5ac1c0ea48da0c17f83a0d12e581328efd27286511c160349f78d8f618285bfbcb392e9ffb5759a2ee39e683c0df598cdf1835b1826e2c97243cd25c5485ca5cb901bdfc8fa91fa74045dd963c2cb7d344a34f1e031a95b3d05f643d4605170f106a4927c08c9a2b88cebd45aff1c52e2095426566248b1e8d87cb30f94e36309ff20d65ffbb551", 0xd3}, {&(0x7f0000004c80)="e7274e10077e37e6aad2b3910d1b4de6c5d53a24bda7876e273d89f4eb3b1a1d806c", 0x22}, {&(0x7f0000004cc0)="a732d583cfbd81e3b9be986075615ae95c9813e941af80b77dec986ce40affefb90e7e85b1eb521a8fd6daf05e824f0ab1a314a7e3ff6cdaf4534270a9204f4b40936ba5b6d4398eea423a4543bb10b1e0d654cd20b1f0a3dbc87eacfeab50068396906d24a7248a7dab8c46f6aace8f180db2724a3f8c7acfec2d8c9e42091eb3c392e52b17aa768de2576dfd0fd923e3a39587b7a54faf9fd0778aa69ff756c060588da5d99a56c216482e5bcc4d67f81655d4b4", 0xb5}, {&(0x7f0000004d80)="84a67c71", 0x4}, {&(0x7f0000004dc0)="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", 0x1000}], 0x8, &(0x7f0000005e40)=[{0x60, 0x117, 0x3ff, "2dc312524aac2b11f49fde51569ce2e1ea9d9027a136196158885fe3d8e9608c08c250b56229c34277b3fe392369a370627b926511f265b9b364f2dde3a108ffc13158dbc7c0bee357cfe7"}, {0x1010, 0x10d, 0x8, "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"}], 0x1070}, 0x38) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000006f00)={0x1}, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000007040)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007000)={&(0x7f0000006f80)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$netlink(0x10, 0x3, 0x7) 1.211173913s ago: executing program 2 (id=4291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x80) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x80) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}}, 0x20008040) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}}, 0x20008040) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff7fff}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4050) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff7fff}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4050) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1104800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r4, 0xf55a86b68f99df4a, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1b52a0e7ecfc5b2b}, 0xc0000) write(0xffffffffffffffff, &(0x7f0000000500)="926c8cfa8f6131320bdb146af260e742ed08776b208633d96693e504f9778cdd85ba5b665b6a3dc7563b46f29d58ae5856d241798d1e18be058048412f7c976e48c384c2ff081afa0d0e51f8891c2ed9632a3ad7f699", 0x56) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x35c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x258, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0x7, 0x1, '@@+'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x7, 0x1, '](,'}]}, {0x80, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0x8, 0x1, 'nfc\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0x17, 0x1, '.&&%!/}}^\'\xcf\xcc\'*,)#\x8d^'}, {0x7, 0x1, '$,('}, {0xd, 0x1, 'nl802154\x00'}, {0xd, 0x1, '\'&\\[{,$%:'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}]}, {0x70, 0x0, 0x0, 0x1, [{0x6, 0x1, ')&'}, {0x4}, {0xc, 0x1, ':+{/*-$&'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, '-\xa9&^'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x9, 0x1, '\x8a@*)]'}, {0xd, 0x1, 'nl802154\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0x8, 0x1, 'nfc\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0x8, 0x1, '@.!^'}]}, {0x70, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x5, 0x1, '\x15'}, {0x4}, {0xd, 0x1, 'nl802154\x00'}, {0x5, 0x1, '+'}, {0xa, 0x1, '!#-!#/'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0xd, 0x1, 'nl802154\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x5, 0x1, '}'}, {0xd, 0x1, 'nl802154\x00'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x8, 0x1, '|\\{.'}, {0xc, 0x1, '&**,@\\@*'}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xf0, 0x13, 0x0, 0x1, [{0x4}, {0x50, 0x0, 0x0, 0x1, [{0xd, 0x1, '\\%{[&\'|{+'}, {0xa, 0x1, '{)-*/!'}, {0x5, 0x1, '\\'}, {0x4}, {0x4}, {0xa, 0x1, '*3!\xd6%@'}, {0xa, 0x1, '!]/%}&'}, {0x8, 0x1, 'nfc\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}, {0x4}]}, {0x20, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '@('}]}, {0x5c, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0x6, 0x1, '!/'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x8, 0x1, 'nfc\x00'}, {0xd, 0x1, 'nl802154\x00'}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x845}, 0x4004042) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x1b8, r6, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc0, 0x3, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb5, 0x2, "af852390eb1b169161bd483de0fc80501e590f821b546706221e49e6ade764b03ca24bdb7edff4f3f4f119a33fffcb30fd698886312fbd475f07acc5b5f6327c116b603288cc70ebea7bd8777472f7a30d343766d56b72fb1147ed2ac91eb19fb83470be41aff369cb1a7d070900d40d4cb329127a9bf5cba564ac79f879db35c8879aaf1033e23ad1a1a674ef709de7b0d0167d5edadbc644766bd485f8a36977b5409008557061f9f8ea18f14af35220"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb4, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x2a, 0x2, "1890f78a5974b4cbfcd3952f607ddee46a25bc0215e0784eef11321fd45021c6ee2441b26f0d"}}, {0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7a, 0x1, "8002b0270245b24bd09c69e4eb2ce03f26d39a7ab8d28e48ba0a0aa2f47fbcc3c634f316f619b4398a03c21ee8953a3253be938921b83762c5bfa4a00b648063808e0166c105533851ff9fc95cc72019018ef34050df61fbfbcd2fd234740cd3908fe99bcbd3e8b2044e5b26a7a2ab9b1a0ff99d4bcc"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008841) socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000cc0)={0x2c, 0x1, r8, 0x14, r9}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000d00)={r9, 0x8, 0x10, 0xd}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000d00)={r9, 0x8, 0x10, 0xd}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d40)={0x1, [0x0]}, &(0x7f0000000d80)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d40)={0x1, [0x0]}, &(0x7f0000000d80)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f0000000dc0)={r11, 0x3}, 0x8) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r12, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xb1, 0x2d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b436302ef48169ad103effadd80544e972a866f6f0af2a0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d188464ef3fa7138a6bb25b81bb5c2a00d3ecfa3e8e58e70"}]]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r3) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r14, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x40081) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x40, r14, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x40}}, 0x401) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000000) 1.145750775s ago: executing program 1 (id=4293): r0 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltclass={0x34, 0x29, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0x8, 0xfff2}, {0xf, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x80, 0x2b}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r5, 0x900}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000080000000000000000000003000000000100000003000000020000000200000000000008"], 0x0, 0x74, 0x0, 0x1, 0x8}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x480141, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000140)=0xe8) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, &(0x7f00000000c0)=0x86, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40010142, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x66}]}, &(0x7f0000000240)='GPL\x00', 0x4}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000070000000c0001800600010002000000dc09e5007b885f9297c04ffaa6ad966d077dd69f34c47d948572e3a74cf9f0e9759b01016c473ea60000"], 0x20}}, 0x0) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xf7, r5, 0x5}, 0xc) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r12, 0x400454de, &(0x7f0000000000)=0x1) 1.027324852s ago: executing program 5 (id=4295): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x6, 0x3}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) socket(0xf, 0x6, 0x7ac2) 878.867958ms ago: executing program 1 (id=4296): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = epoll_create(0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x771, &(0x7f00000000c0)={[0x5]}, 0x8) 875.0443ms ago: executing program 4 (id=4297): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x40000}, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 804.184028ms ago: executing program 2 (id=4298): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x17}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 748.449997ms ago: executing program 5 (id=4299): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (fail_nth: 1) 684.429358ms ago: executing program 2 (id=4300): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56543, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 631.509102ms ago: executing program 4 (id=4301): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r0]) syz_emit_ethernet(0x149, &(0x7f0000000100)={@empty, @multicast, @void, {@mpls_uc={0x8847, {[{0x200}, {0x8001, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3, 0x0, 0x1}], @ipv6=@generic={0x6, 0x6, "fcffff", 0x103, 0x2, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x32, 0x6, 0x1, 0xa, 0x0, [@rand_addr=' \x01\x00', @private1, @mcast1]}, @fragment={0x4f57c65dee6ca9c2, 0x0, 0xf3, 0x0, 0x0, 0x3, 0x66}, @hopopts={0x2f, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x3, [0x3]}}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, @routing={0xff, 0xe, 0x2, 0x10, 0x0, [@private0, @private2, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}]}], "bc2a57ae7b3e550b72dfa61b523f0122bdf59033927f17b5bea2b23515691bb3af75fc7098647a7161fe21"}}}}}}, 0x0) 444.878515ms ago: executing program 5 (id=4302): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x1, 0x2, 0x2, 0x6, 0xfffe, 0x4}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) accept4$rose(0xffffffffffffffff, &(0x7f0000000300)=@full={0xb, @dev, @bcast, 0x0, [@null, @null, @rose, @rose, @remote, @rose]}, &(0x7f0000000340)=0x40, 0x80000) (async) r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000300)=@full={0xb, @dev, @bcast, 0x0, [@null, @null, @rose, @rose, @remote, @rose]}, &(0x7f0000000340)=0x40, 0x80000) connect$rose(r3, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) (async) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f00000002c0)={0x4, 0x8}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 411.384779ms ago: executing program 4 (id=4303): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="6ccd66be2af62eb45cb09aedf8312edcdc7f65ff7f232469c2c85da1e3ff5f6e7c9773ec9b35775fea12e4c5cc2ef9cab5f5a8a969ab46524536ad189f46e9e2723b6a45e96f5d94a6034ea3c86297a02f8bbb94a79a2a8589546763c283a9d107e5f89e0e1bb3f6109605fff6e596f57359edcb47d2da8a4e68dac9c25e5a5047507413fda787ab38871f87a3b59bbf8c757901d2696eab12671c202ae7535d8e67d9bb", 0xa4}, {&(0x7f0000001180)="710b7ef36da5b5a34ef64e85e0", 0xd}, {&(0x7f00000011c0)="11cbef5f861a3909c2da05f9deee85016763c77d4bf38ebf99de9b27ae3583097df31f66d556e4c390180f278533f4ca5f35711d157fb7b1f343ef80347d524775c1ef6e4f14d321c3bf1fb9ee23a02c630f3efe276f693e80cb6ece03827a9d16fff06a5f08961270a5f853100d3277606efc634d23f82b965de86de1a89365116469222cff88098f89a3b8f4af82ddd398210c3e043bce957fcfad867a3b66c1b75d2e3cc524bed522da674d8f1a9a78", 0xb1}, {&(0x7f0000001280)="396622152e2e11620c3055831d6a65e061cdacac5fc34d", 0x17}, {&(0x7f00000012c0)="ffbc37b4bd7a2d01973884d6c505ef1470fa8abe79c0b51d742ccf319fa2127ec708aad69736c39eb10b170b2236eba6178c4186f863107ca781e7d7399716b16973d40982d7269525dbda1b4c93a637b4037286f633bf2602a1b776d768f2ceaa847b74ff800e2647cecf22172ded49a41ee64bff848023ed0f52eb41820a64fc06445231b3286dbc277410dde67b5f84adfe42ec87a374b950b07519c087ec", 0xa0}, {&(0x7f0000001380)="afc66504f278f239d9a2bd1eeea2d2fecf3a39e792aa30e3bb8bec125eec5fa2573a19c6b27baf8f6612f99d44da9d5f7428381bc87be03a62e58dd77da9f0c371514a276df3009b5588d9e670b4845d411564fa38c69191c6a1fdfe42a7b46e304e2aac90c67662546bf6203ce652016d62d51974eb79abbf410bef5f7105a08d0c1c8817b5145c5aec3349aca84c92fe3dfbf847488212fd03c145065a0e9cd78cf75af5129cf541c505dfe88cf4c23de44b9984f076222a905f914dbf603cfaa57dd674c1c12e2cefd83b5c3c5696e29120ab", 0xd4}, {&(0x7f0000001480)="5d37fcd3ac54561529643f6c2a35c63c05a07022ec6c150ed233b2b8cd61777e017a0abcd40160ec10c5c0387b3133522f4b9dc8f60bf6d2d5f4169cbbe8b6090a480128f113b902076fed4fb89e449d74d33cc06a65a5612091c5892d9ad43f6eae1f001c3d713dad9d724fa88406fcaca931e90f521bc0efb4dcb153bd8063a594a898e719e715f359a46287f3645dee793383a591a7b819d8527b2935995600050c5fa5", 0xa5}], 0x8) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) 347.937652ms ago: executing program 2 (id=4304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64040844}, 0x404c000) 331.525665ms ago: executing program 4 (id=4305): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e8b02d66efc80bb"}}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2, 0x0, &(0x7f0000000240)=0x26) 282.39571ms ago: executing program 0 (id=4306): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000003e400000000000000000000000000000302208fbea2669d2d65d6e0e76e59fee830802608a8f18b00331c4016755ba62c674e797ec67338b57bc2c4275a5bedc708f3a0ba497ac390d88c254c1aee45ad7831b46edcf2755a87edd37832bf8c72a18632b516a0b00d5692", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) 230.176948ms ago: executing program 5 (id=4307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001840)={0x1f, 0x1000, 0x3}, 0xffffffffffffff7f) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000440)="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") r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, 0x0) bind$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x40001) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d8b9af6b0000000014000300776c616e300000000099ecdaa00000000a0001"], 0x40}}, 0x0) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffffffffffffffff}, 0x6) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f0000000280)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x2}, 0x14) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000300)={@rand_addr, @empty, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_mreqn(r5, 0x0, 0x4, &(0x7f0000000380)={@empty, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'ip6_vti0\x00', 0x0, 0x4, 0xab, 0x2, 0x87e, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x10, 0x10, 0x8, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000015c0)={'gre0\x00', &(0x7f0000001500)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x8, 0xa4a4, {{0x27, 0x4, 0x3, 0x9, 0x9c, 0x64, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty, {[@rr={0x7, 0x17, 0xe2, [@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101, @empty]}, @rr={0x7, 0x1b, 0x9b, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x18}, @local, @dev={0xac, 0x14, 0x14, 0x2c}]}, @timestamp_addr={0x44, 0x14, 0xa2, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010102}]}, @timestamp_prespec={0x44, 0xc, 0x88, 0x3, 0x2, [{@local, 0x4}]}, @timestamp_addr={0x44, 0x34, 0x9b, 0x1, 0xb, [{@loopback}, {@private=0xa010102, 0xff}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0xa}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x4}, {@multicast1, 0xe}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25150000004400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f310000140002007866726d3000000000000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r9, @ANYBLOB="48000180140002006e72300000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000300060000000800030002000000080003000200000008000100", @ANYRES32=r11, @ANYBLOB="08000300010000001c0001800822030001000000080003000200000008000300010000000c00018008000300010000007800018014000200776730000000000000000000000000000800030001000000140002006272696467653000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="14000200766c616e30000000000000000000000014000200000000000000000000000000000000001400020074756e6c3000000000000000000000002000018008000100", @ANYRES32=r13, @ANYBLOB="1400020062617461647630000000000000000000"], 0x188}, 0x1, 0x0, 0x0, 0x24000804}, 0x40004815) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x70}}, 0x0) 228.635046ms ago: executing program 2 (id=4308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3bf}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048040}, 0xc000) 176.632901ms ago: executing program 4 (id=4309): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @local, 0x48}}, {{0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}, 0x80000}}}, 0x108) close(r0) (async) close(r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x3c5d, {0x24, 0x9, 0x9747, 0x6, 0x7}}) 169.571624ms ago: executing program 0 (id=4310): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x17}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 93.15551ms ago: executing program 2 (id=4311): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, 0x0, &(0x7f0000001380)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x9, 0xf, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@mcast1, 0x0, 0x4, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @loopback}}]}, 0x78}}, 0x0) 0s ago: executing program 4 (id=4312): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (fail_nth: 2) kernel console output (not intermixed with test programs): T14841] simple_read_from_buffer+0xe1/0x170 [ 273.807673][T14841] proc_fail_nth_read+0x1b3/0x220 [ 273.807699][T14841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.807725][T14841] ? rw_verify_area+0x2a6/0x4d0 [ 273.807750][T14841] ? tun_chr_write_iter+0xe0/0x200 [ 273.807773][T14841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.807796][T14841] vfs_read+0x200/0xa30 [ 273.807815][T14841] ? fdget_pos+0x247/0x320 [ 273.807847][T14841] ? __pfx___mutex_lock+0x10/0x10 [ 273.807871][T14841] ? __pfx_vfs_read+0x10/0x10 [ 273.807903][T14841] ? __fget_files+0x2a/0x420 [ 273.807936][T14841] ? __fget_files+0x3a0/0x420 [ 273.807962][T14841] ? __fget_files+0x2a/0x420 [ 273.808000][T14841] ksys_read+0x145/0x250 [ 273.808023][T14841] ? __pfx_ksys_read+0x10/0x10 [ 273.808057][T14841] do_syscall_64+0xec/0xf80 [ 273.808080][T14841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.808101][T14841] ? trace_irq_disable+0x37/0x100 [ 273.808129][T14841] ? clear_bhb_loop+0x60/0xb0 [ 273.808157][T14841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.808178][T14841] RIP: 0033:0x7f03b478e15c [ 273.808198][T14841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.808217][T14841] RSP: 002b:00007f03b563f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.808239][T14841] RAX: ffffffffffffffda RBX: 00007f03b49e5fa0 RCX: 00007f03b478e15c [ 273.808255][T14841] RDX: 000000000000000f RSI: 00007f03b563f0a0 RDI: 0000000000000004 [ 273.808268][T14841] RBP: 00007f03b563f090 R08: 0000000000000000 R09: 0000000000000000 [ 273.808282][T14841] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 273.808295][T14841] R13: 00007f03b49e6038 R14: 00007f03b49e5fa0 R15: 00007fffe274e238 [ 273.808331][T14841] [ 274.103261][T14835] vlan3: entered promiscuous mode [ 274.410218][T14844] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 274.751991][T14887] syzkaller0: entered promiscuous mode [ 274.758118][T14887] syzkaller0: entered allmulticast mode [ 275.528938][T14939] __nla_validate_parse: 24 callbacks suppressed [ 275.528959][T14939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2608'. [ 275.667870][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2610'. [ 275.741373][T14949] macvlan0: entered promiscuous mode [ 275.857088][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 275.941441][T14934] Unsupported ieee802154 address type: 0 [ 275.984707][T14934] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 276.271400][T14977] nbd: illegal input index 2958377 [ 276.589923][T14986] vlan2: entered allmulticast mode [ 276.687727][T14986] IPv6: NLM_F_CREATE should be specified when creating new route [ 277.228024][T15025] tipc: Enabling of bearer rejected, failed to enable media [ 277.303681][T15031] tipc: Enabling of bearer rejected, media not registered [ 277.355265][T15033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2638'. [ 277.384139][T15033] bond0: entered promiscuous mode [ 277.406064][T15033] bond_slave_0: entered promiscuous mode [ 277.427074][T15033] bond_slave_1: entered promiscuous mode [ 277.443071][T15033] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 277.459783][T15039] netlink: 'syz.2.2639': attribute type 8 has an invalid length. [ 277.468588][T15033] gretap0: entered promiscuous mode [ 277.478787][T15033] debugfs: 'hsr1' already exists in 'hsr' [ 277.484895][T15033] Cannot create hsr debugfs directory [ 277.490925][T15033] hsr1: entered promiscuous mode [ 277.603768][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 277.625917][T15047] vxcan2: entered promiscuous mode [ 277.687602][T15052] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20004 [ 277.731314][T15054] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2643'. [ 277.780533][T15057] FAULT_INJECTION: forcing a failure. [ 277.780533][T15057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.845960][T15057] CPU: 1 UID: 0 PID: 15057 Comm: syz.1.2646 Not tainted syzkaller #0 PREEMPT(full) [ 277.845989][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.846003][T15057] Call Trace: [ 277.846011][T15057] [ 277.846020][T15057] dump_stack_lvl+0xe8/0x150 [ 277.846053][T15057] should_fail_ex+0x414/0x560 [ 277.846093][T15057] _copy_to_user+0x31/0xb0 [ 277.846122][T15057] simple_read_from_buffer+0xe1/0x170 [ 277.846173][T15057] proc_fail_nth_read+0x1b3/0x220 [ 277.846200][T15057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.846227][T15057] ? rw_verify_area+0x2a6/0x4d0 [ 277.846247][T15057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.846273][T15057] vfs_read+0x200/0xa30 [ 277.846293][T15057] ? fdget_pos+0x247/0x320 [ 277.846326][T15057] ? __pfx___mutex_lock+0x10/0x10 [ 277.846350][T15057] ? __pfx_vfs_read+0x10/0x10 [ 277.846373][T15057] ? __fget_files+0x2a/0x420 [ 277.846406][T15057] ? __fget_files+0x3a0/0x420 [ 277.846433][T15057] ? __fget_files+0x2a/0x420 [ 277.846471][T15057] ksys_read+0x145/0x250 [ 277.846495][T15057] ? __pfx_ksys_read+0x10/0x10 [ 277.846529][T15057] do_syscall_64+0xec/0xf80 [ 277.846552][T15057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.846573][T15057] ? trace_irq_disable+0x37/0x100 [ 277.846608][T15057] ? clear_bhb_loop+0x60/0xb0 [ 277.846640][T15057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.846659][T15057] RIP: 0033:0x7f03b478e15c [ 277.846677][T15057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 277.846696][T15057] RSP: 002b:00007f03b563f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.846717][T15057] RAX: ffffffffffffffda RBX: 00007f03b49e5fa0 RCX: 00007f03b478e15c [ 277.846733][T15057] RDX: 000000000000000f RSI: 00007f03b563f0a0 RDI: 0000000000000004 [ 277.846748][T15057] RBP: 00007f03b563f090 R08: 0000000000000000 R09: 0000000000000000 [ 277.846761][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.846775][T15057] R13: 00007f03b49e6038 R14: 00007f03b49e5fa0 R15: 00007fffe274e238 [ 277.846812][T15057] [ 278.138794][T15062] macvtap1: entered allmulticast mode [ 278.144472][T15062] veth0_macvtap: entered allmulticast mode [ 278.285402][T15074] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.2650'. [ 278.333588][T15077] netlink: 'syz.5.2652': attribute type 58 has an invalid length. [ 278.342006][T15077] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2652'. [ 278.472431][T15084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2655'. [ 278.506497][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2656'. [ 278.525865][T15084] bond0: entered promiscuous mode [ 278.557935][T15084] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 278.580129][T15084] gretap0: entered promiscuous mode [ 278.599294][T15084] debugfs: 'hsr1' already exists in 'hsr' [ 278.612848][T15084] Cannot create hsr debugfs directory [ 278.638425][T15084] hsr1: entered promiscuous mode [ 278.884034][T15107] C: left promiscuous mode [ 279.170739][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2663'. [ 279.264263][T15107] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 279.856639][T15152] netlink: Unknown conntrack attr (type=2304, max=9) [ 280.170307][T15164] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 280.187590][T15164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.209883][T15167] IPVS: length: 24 != 110616 [ 280.228446][T15167] netlink: 'syz.1.2677': attribute type 12 has an invalid length. [ 280.774416][T15205] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.919183][T15205] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.009641][T15205] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.099985][T15205] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.234949][T15232] netlink: 'syz.5.2695': attribute type 1 has an invalid length. [ 281.310973][T15240] __nla_validate_parse: 9 callbacks suppressed [ 281.310992][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2695'. [ 281.347276][T15232] bond1: entered promiscuous mode [ 281.353659][T15232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.361333][T10843] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.373118][T15240] bond1: entered allmulticast mode [ 281.441400][T15232] bond1: (slave bridge1): making interface the new active one [ 281.449958][T15232] bridge1: entered promiscuous mode [ 281.459353][T15232] bridge1: entered allmulticast mode [ 281.467276][T15232] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 281.487872][T10846] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.533400][T10846] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.568878][ T6023] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.826507][T15256] dvmrp0: entered allmulticast mode [ 281.840640][T15260] 8021q: VLANs not supported on ip6_vti0 [ 281.923737][T15262] netlink: 'syz.5.2704': attribute type 21 has an invalid length. [ 281.932082][T15262] netlink: 'syz.5.2704': attribute type 22 has an invalid length. [ 281.951928][T15262] netlink: 'syz.5.2704': attribute type 23 has an invalid length. [ 281.970367][T15262] netlink: 'syz.5.2704': attribute type 25 has an invalid length. [ 281.988395][T15262] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2704'. [ 282.009784][T15265] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2704'. [ 282.181987][T15270] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2707'. [ 282.488899][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2715'. [ 282.764023][T15316] ipt_REJECT: ECHOREPLY no longer supported. [ 283.054716][T15334] syzkaller0: entered promiscuous mode [ 283.078442][T15334] syzkaller0: entered allmulticast mode [ 283.114087][T15334] netlink: 'syz.5.2729': attribute type 1 has an invalid length. [ 283.165640][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2731'. [ 283.427303][T15352] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 283.504022][T15352] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.573345][T15352] bond9: (slave gretap2): making interface the new active one [ 283.588190][T15352] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 283.628257][T15352] syz.0.2734 (15352) used greatest stack depth: 18184 bytes left [ 283.656145][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 283.998930][T15385] bridge0: port 1(veth4) entered blocking state [ 284.021619][T15385] bridge0: port 1(veth4) entered disabled state [ 284.038475][T15385] veth4: entered allmulticast mode [ 284.071102][T15385] veth4: entered promiscuous mode [ 284.154564][T15395] net veth1_virt_wifi .: renamed from virt_wifi0 (while UP) [ 284.239642][T15394] netlink: 'syz.5.2747': attribute type 3 has an invalid length. [ 284.255276][T15394] netlink: 'syz.5.2747': attribute type 1 has an invalid length. [ 284.360140][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 284.379148][T15402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'. [ 284.564944][T15405] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.729184][T15412] lo: entered allmulticast mode [ 284.762315][T15412] tunl0: entered allmulticast mode [ 284.799306][T15412] gre0: entered allmulticast mode [ 284.898974][T15412] gretap0: entered allmulticast mode [ 284.931032][T15412] erspan0: entered allmulticast mode [ 284.988289][T15412] ip_vti0: entered allmulticast mode [ 285.002144][T15412] ip6_vti0: entered allmulticast mode [ 285.032797][T15412] sit0: entered allmulticast mode [ 285.058330][T15412] ip6tnl0: entered allmulticast mode [ 285.073755][T15431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2760'. [ 285.084744][T15412] ip6gre0: entered allmulticast mode [ 285.095220][T15412] syz_tun: entered allmulticast mode [ 285.107384][T15412] ip6gretap0: entered allmulticast mode [ 285.117568][T15412] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.125235][T15412] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.133660][T15412] bridge0: entered allmulticast mode [ 285.143187][T15412] vcan0: entered allmulticast mode [ 285.155334][T15412] bond0: entered allmulticast mode [ 285.161618][T15412] bond_slave_0: entered allmulticast mode [ 285.167879][T15412] bond_slave_1: entered allmulticast mode [ 285.181287][T15412] team0: entered allmulticast mode [ 285.186852][T15412] team_slave_0: entered allmulticast mode [ 285.192645][T15412] team_slave_1: entered allmulticast mode [ 285.202913][T15412] nlmon0: entered allmulticast mode [ 285.211328][T15412] caif0: entered allmulticast mode [ 285.218110][T15412] batadv0: entered allmulticast mode [ 285.228837][T15412] vxcan0: entered allmulticast mode [ 285.235707][T15412] vxcan1: entered allmulticast mode [ 285.243675][T15412] veth0: entered allmulticast mode [ 285.252951][T15412] veth1: entered allmulticast mode [ 285.263007][T15412] wg0: entered allmulticast mode [ 285.271699][T15412] wg1: entered allmulticast mode [ 285.280079][T15412] wg2: entered allmulticast mode [ 285.287976][T15412] veth0_to_bridge: entered allmulticast mode [ 285.302256][T15412] veth1_to_bridge: entered allmulticast mode [ 285.314201][T15412] veth0_to_bond: entered allmulticast mode [ 285.325067][T15412] veth1_to_bond: entered allmulticast mode [ 285.339329][T15412] veth0_to_team: entered allmulticast mode [ 285.352580][T15412] veth1_to_team: entered allmulticast mode [ 285.365182][T15412] veth0_to_batadv: entered allmulticast mode [ 285.374727][T15412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.384076][T15412] batadv_slave_0: entered allmulticast mode [ 285.395315][T15412] veth1_to_batadv: entered allmulticast mode [ 285.404494][T15412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.413518][T15412] batadv_slave_1: entered allmulticast mode [ 285.423287][T15412] xfrm0: entered allmulticast mode [ 285.433917][T15412] veth0_to_hsr: entered allmulticast mode [ 285.444140][T15412] hsr_slave_0: entered allmulticast mode [ 285.453182][T15412] veth1_to_hsr: entered allmulticast mode [ 285.462868][T15412] hsr_slave_1: entered allmulticast mode [ 285.473683][T15412] hsr0: entered allmulticast mode [ 285.482912][T15412] veth1_virt_wifi: entered allmulticast mode [ 285.493065][T15412] veth0_virt_wifi: entered allmulticast mode [ 285.502349][T15412] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 285.511584][T15412] veth1_vlan: entered allmulticast mode [ 285.521077][T15412] veth0_vlan: entered allmulticast mode [ 285.548442][T15412] vlan0: entered allmulticast mode [ 285.553820][T15412] vlan1: entered allmulticast mode [ 285.560582][T15412] macvlan0: entered allmulticast mode [ 285.569968][T15412] macvlan1: entered allmulticast mode [ 285.580598][T15412] ipvlan0: entered allmulticast mode [ 285.586213][T15412] ipvlan1: entered allmulticast mode [ 285.592928][T15412] veth1_macvtap: entered allmulticast mode [ 285.606206][T15412] macvtap0: entered allmulticast mode [ 285.616267][T15412] macsec0: entered allmulticast mode [ 285.625797][T15412] geneve0: entered allmulticast mode [ 285.637776][T15412] geneve1: entered allmulticast mode [ 285.647260][T15412] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 285.661188][T15412] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 285.671664][T15412] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 285.683062][T15412] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 285.698655][T15412] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 285.715157][T15412] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 285.724918][T15412] hsr1: left promiscuous mode [ 285.731731][T15412] hsr1: entered allmulticast mode [ 285.737849][T15412] ip6gre1: entered allmulticast mode [ 285.748473][T15412] bond1: left promiscuous mode [ 285.753281][T15412] bridge1: left promiscuous mode [ 285.779710][T15417] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 285.788737][T15417] team0: Device macvtap1 is already an upper device of the team interface [ 285.875207][ T6401] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.897511][ T6401] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.930464][ T6401] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.947968][ T6401] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.051300][T15442] netlink: 'syz.0.2763': attribute type 10 has an invalid length. [ 286.315353][T15461] syzkaller0: entered promiscuous mode [ 286.321770][T15461] syzkaller0: entered allmulticast mode [ 286.353884][T15465] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.472329][T15473] wg1 speed is unknown, defaulting to 1000 [ 286.830097][T15438] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 287.043128][T15491] validate_nla: 27 callbacks suppressed [ 287.043149][T15491] netlink: 'syz.2.2779': attribute type 1 has an invalid length. [ 287.101223][T15491] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.142122][T15495] syzkaller0: entered promiscuous mode [ 287.161482][T15495] syzkaller0: entered allmulticast mode [ 287.222792][T15506] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.233830][T15505] --map-set only usable from mangle table [ 287.364175][T15508] Can't find ip_set type hsh:ip,port [ 287.377041][T15507] Can't find ip_set type hsh:ip,port [ 288.097434][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 288.195146][T15568] xt_hashlimit: invalid rate [ 288.357370][T15573] __nla_validate_parse: 1 callbacks suppressed [ 288.357390][T15573] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2797'. [ 288.386603][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'. [ 288.415744][T15576] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2798'. [ 288.553503][T15581] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2801'. [ 288.596968][T15581] netlink: 'syz.0.2801': attribute type 1 has an invalid length. [ 288.619198][T15581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2801'. [ 289.351716][T15635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2819'. [ 289.374419][T15640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.394629][T15640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.635311][T15650] sctp: [Deprecated]: syz.2.2824 (pid 15650) Use of int in maxseg socket option. [ 289.635311][T15650] Use struct sctp_assoc_value instead [ 289.676439][T15650] tipc: Enabled bearer , priority 10 [ 289.709632][T15652] ip6gre2: entered allmulticast mode [ 289.737638][T15652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2825'. [ 289.856313][T15662] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2829'. [ 289.893315][T15662] vlan3: entered allmulticast mode [ 289.899121][T15662] gretap0: entered allmulticast mode [ 290.010724][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'. [ 290.021805][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'. [ 290.053152][T15674] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 290.301521][T15684] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.309410][ T8646] IPVS: starting estimator thread 0... [ 290.316493][T15686] netlink: 'syz.0.2838': attribute type 29 has an invalid length. [ 290.326465][T15684] IPVS: nq: FWM 3 0x00000003 - no destination available [ 290.335397][T15686] netlink: 'syz.0.2838': attribute type 29 has an invalid length. [ 290.346926][T15686] netlink: 'syz.0.2838': attribute type 29 has an invalid length. [ 290.355550][T15686] netlink: 'syz.0.2838': attribute type 29 has an invalid length. [ 290.364032][T15686] netlink: 'syz.0.2838': attribute type 29 has an invalid length. [ 290.372543][T15686] netlink: 'syz.0.2838': attribute type 29 has an invalid length. [ 290.407148][T15688] IPVS: using max 26 ests per chain, 62400 per kthread [ 290.440018][T15686] netlink: 'syz.0.2838': attribute type 1 has an invalid length. [ 290.676392][T15707] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 291.628626][T15737] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 292.141440][ T5150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.151574][ T5150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.161953][ T5150] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.170471][ T5150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.178497][ T5150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.233474][T15761] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 292.240726][T15757] wg1 speed is unknown, defaulting to 1000 [ 292.339817][T15765] bond9: (slave veth5): Enslaving as an active interface with a down link [ 292.422981][T15761] bond9: (slave veth0_to_bond): making interface the new active one [ 292.433367][T15761] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 292.463528][T15761] bond9: entered promiscuous mode [ 292.485538][T15761] veth0_to_bond: entered promiscuous mode [ 292.491986][T15761] bond9: entered allmulticast mode [ 292.499905][T15761] veth0_to_bond: entered allmulticast mode [ 292.891929][T15757] chnl_net:caif_netlink_parms(): no params data found [ 292.920194][T15794] netlink: 'syz.2.2872': attribute type 12 has an invalid length. [ 292.928726][T15794] netlink: 'syz.2.2872': attribute type 29 has an invalid length. [ 292.938936][T15794] netlink: 'syz.2.2872': attribute type 2 has an invalid length. [ 293.314960][T15757] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.333565][T15757] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.350785][T15757] bridge_slave_0: entered allmulticast mode [ 293.369179][T15757] bridge_slave_0: entered promiscuous mode [ 293.393399][T15757] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.409306][T15757] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.437223][T15757] bridge_slave_1: entered allmulticast mode [ 293.466134][T15757] bridge_slave_1: entered promiscuous mode [ 293.629771][T15837] __nla_validate_parse: 18 callbacks suppressed [ 293.629792][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2884'. [ 293.721146][T15757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.734914][T15834] xt_CT: No such helper "syz1" [ 293.758014][T15842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.822538][T15757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.994180][T15840] bond10: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 294.028050][T15840] bond10: (slave C): Enslaving as a backup interface with an up link [ 294.051893][T15840] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 294.250066][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2895'. [ 294.257221][ T5150] Bluetooth: hci6: command tx timeout [ 294.291024][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2895'. [ 294.371876][T15874] netlink: 'syz.2.2896': attribute type 1 has an invalid length. [ 294.433849][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 294.801507][T15861] bond10: entered allmulticast mode [ 294.822513][T15861] 8021q: adding VLAN 0 to HW filter on device bond10 [ 294.852442][T15874] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 294.875272][T15757] team0: Port device team_slave_0 added [ 294.910276][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2897'. [ 294.930029][T15757] team0: Port device team_slave_1 added [ 294.956801][T15881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2897'. [ 295.008934][T15888] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 3, id = 0 [ 295.033687][T15881] erspan0: entered promiscuous mode [ 295.046554][T15881] erspan0: left promiscuous mode [ 295.097419][T15893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.179495][T15757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.186616][T15757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.232344][T15757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.248682][T15900] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2905'. [ 295.261630][T15757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.269712][T15757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.296942][T15757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.512146][T15757] hsr_slave_0: entered promiscuous mode [ 295.519835][T15757] hsr_slave_1: entered promiscuous mode [ 295.526356][T15757] debugfs: 'hsr0' already exists in 'hsr' [ 295.543436][T15757] Cannot create hsr debugfs directory [ 295.589475][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2909'. [ 295.598248][T15911] netlink: 'syz.2.2910': attribute type 21 has an invalid length. [ 295.637693][T15911] netlink: 'syz.2.2910': attribute type 6 has an invalid length. [ 295.647113][T15911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2910'. [ 295.703305][T15914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2912'. [ 295.763269][T15916] tipc: Started in network mode [ 295.768531][T15916] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 295.787736][T15916] tipc: Enabling of bearer rejected, failed to enable media [ 295.902652][T15917] wg1: left promiscuous mode [ 295.909823][T15917] wg1: left allmulticast mode [ 296.101842][T15917] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 296.335540][T15757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.347746][ T5150] Bluetooth: hci6: command tx timeout [ 296.353339][T15757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.364807][T15757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 296.376473][T15757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 296.457155][T15922] syzkaller0: entered promiscuous mode [ 296.462703][T15922] syzkaller0: entered allmulticast mode [ 296.514425][T15757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.526200][T15757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.556744][T15757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 296.567659][T15757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 297.983846][T15757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.994533][T15757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.005653][T15757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 298.016465][T15757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 298.209132][T15757] bond0: (slave netdevsim0): Releasing backup interface [ 298.225961][T15976] sctp: [Deprecated]: syz.5.2927 (pid 15976) Use of int in maxseg socket option. [ 298.225961][T15976] Use struct sctp_assoc_value instead [ 298.241539][T15757] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 298.264881][T15757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.297085][T15757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.314276][T15757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 298.328912][T15757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 298.416927][ T5150] Bluetooth: hci6: command tx timeout [ 298.613491][T15757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.644757][T15757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.670348][T15757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.691902][T15757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.780246][T16002] netlink: 'syz.2.2935': attribute type 1 has an invalid length. [ 298.788320][T16002] netlink: 'syz.2.2935': attribute type 2 has an invalid length. [ 298.899656][T15757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.935057][T15757] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.966261][T10849] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.973552][T10849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.003046][T10849] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.010320][T10849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.162108][T16012] __nla_validate_parse: 7 callbacks suppressed [ 299.162129][T16012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2939'. [ 299.185438][T16015] netlink: 'syz.5.2940': attribute type 5 has an invalid length. [ 299.426163][T15757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.804961][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 299.814340][T16048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2948'. [ 300.037336][T16055] netlink: 'syz.2.2951': attribute type 1 has an invalid length. [ 300.329775][T16077] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2958'. [ 300.468170][T15757] veth0_vlan: entered promiscuous mode [ 300.495320][T15757] veth1_vlan: entered promiscuous mode [ 300.501769][ T5150] Bluetooth: hci6: command tx timeout [ 300.505191][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2961'. [ 300.664092][T15757] veth0_macvtap: entered promiscuous mode [ 300.699646][T15757] veth1_macvtap: entered promiscuous mode [ 300.746323][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 300.781265][T15757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.865343][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 300.865693][T15757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.918570][T10845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.947703][T10845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.964227][T10845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.978873][T10845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.009021][T16108] syzkaller1: entered promiscuous mode [ 301.014562][T16108] syzkaller1: entered allmulticast mode [ 301.134301][T10850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.153728][T10850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.204037][T10845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.214793][T10845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.339026][T16119] netlink: 'syz.2.2975': attribute type 3 has an invalid length. [ 301.584565][T16126] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2978'. [ 301.661395][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.683064][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.692423][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.702539][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.712039][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.784538][T16128] wg1 speed is unknown, defaulting to 1000 [ 301.971108][T16140] tipc: Enabled bearer , priority 10 [ 302.039954][T16139] wg1 speed is unknown, defaulting to 1000 [ 302.296292][T16128] chnl_net:caif_netlink_parms(): no params data found [ 302.503347][T16128] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.511312][T16128] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.518901][T16128] bridge_slave_0: entered allmulticast mode [ 302.528280][T16128] bridge_slave_0: entered promiscuous mode [ 302.544331][T16128] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.562375][T16128] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.579072][T16128] bridge_slave_1: entered allmulticast mode [ 302.598509][T16128] bridge_slave_1: entered promiscuous mode [ 302.707872][T16128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.741857][T16128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.768127][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'. [ 302.896964][T16179] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2992'. [ 302.922741][T16128] team0: Port device team_slave_0 added [ 302.945217][T16128] team0: Port device team_slave_1 added [ 302.961090][T16185] netlink: 'syz.2.2994': attribute type 83 has an invalid length. [ 303.078888][T16186] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 303.113670][T16128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.136200][T16128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.179810][T16128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.193184][ T5961] tipc: Node number set to 1 [ 303.257453][T16128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.273645][T16128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.330324][T16128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.369464][T16198] team1: entered promiscuous mode [ 303.374579][T16198] team1: entered allmulticast mode [ 303.410694][T16199] team2: entered promiscuous mode [ 303.415807][T16199] team2: entered allmulticast mode [ 303.428914][T16203] netlink: 'syz.4.2997': attribute type 72 has an invalid length. [ 303.510315][T16128] hsr_slave_0: entered promiscuous mode [ 303.521118][T16128] hsr_slave_1: entered promiscuous mode [ 303.527936][T16128] debugfs: 'hsr0' already exists in 'hsr' [ 303.533711][T16128] Cannot create hsr debugfs directory [ 303.665207][T16128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.675975][T16128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.777878][ T5846] Bluetooth: hci4: command tx timeout [ 303.807487][T16128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.818274][T16128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.952374][T16128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.987552][T16128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.154038][T16128] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 304.171331][T16128] batman_adv: batadv0: Removing interface: netdevsim0 [ 304.181547][T16128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.193168][T16128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.353201][T16246] __nla_validate_parse: 8 callbacks suppressed [ 304.353221][T16246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3008'. [ 304.432674][T16248] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3009'. [ 304.563123][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 304.582498][T16128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.605071][T16252] pimreg3: entered allmulticast mode [ 304.623389][T16128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.652445][T16128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.691590][T16128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.993325][T16128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.024013][T16281] netlink: 'syz.5.3017': attribute type 1 has an invalid length. [ 305.033721][T16283] netlink: 181328 bytes leftover after parsing attributes in process `syz.2.3016'. [ 305.068616][T16128] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.084254][T10844] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.091507][T10844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.152596][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.159853][T10844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.258886][T16293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3020'. [ 305.421815][T16302] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3022'. [ 305.459932][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'. [ 305.592688][T16309] syzkaller1: entered promiscuous mode [ 305.619282][T16309] syzkaller1: entered allmulticast mode [ 305.640959][T16305] netlink: 'syz.2.3023': attribute type 30 has an invalid length. [ 305.762086][T16128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.823246][T16316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3025'. [ 305.867407][ T5846] Bluetooth: hci4: command tx timeout [ 305.879327][T16128] veth0_vlan: entered promiscuous mode [ 305.903561][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3027'. [ 305.919786][T16128] veth1_vlan: entered promiscuous mode [ 305.946591][T16322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3027'. [ 305.965030][T16128] veth0_macvtap: entered promiscuous mode [ 305.976002][T16128] veth1_macvtap: entered promiscuous mode [ 306.022261][T16128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.046421][T16128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.074842][ T2060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.099074][ T2060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.116928][ T2060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.163968][ T2060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.260389][T16334] openvswitch: netlink: IP tunnel dst address not specified [ 306.325097][T10850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.360115][T10850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.439695][T10850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.468871][T10850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.027893][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.038589][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.066810][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.074922][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.083408][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.319413][T16368] wg1 speed is unknown, defaulting to 1000 [ 307.730977][T16368] chnl_net:caif_netlink_parms(): no params data found [ 307.936965][ T5150] Bluetooth: hci4: command tx timeout [ 308.109173][T16417] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 308.122691][T16417] bond12 (unregistering): Released all slaves [ 308.146613][T16368] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.154883][T16368] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.163719][T16368] bridge_slave_0: entered allmulticast mode [ 308.173188][T16368] bridge_slave_0: entered promiscuous mode [ 308.286559][T16368] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.304288][T16368] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.312895][T16368] bridge_slave_1: entered allmulticast mode [ 308.321497][T16368] bridge_slave_1: entered promiscuous mode [ 308.338203][T16429] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.356850][T16429] bond1: (slave lo): Enslaving as a backup interface with an up link [ 308.373665][T16429] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 308.491941][T16368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.515861][T16368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.633172][T16442] macvtap0: Device is already in use. [ 308.649836][T16368] team0: Port device team_slave_0 added [ 308.678562][T16368] team0: Port device team_slave_1 added [ 308.849337][T16368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.856357][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.932898][T16368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.983952][T16368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.017154][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.069682][T16368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.138772][ T5150] Bluetooth: hci0: command tx timeout [ 309.201777][T16368] hsr_slave_0: entered promiscuous mode [ 309.209756][T16368] hsr_slave_1: entered promiscuous mode [ 309.216334][T16368] debugfs: 'hsr0' already exists in 'hsr' [ 309.223057][T16368] Cannot create hsr debugfs directory [ 309.343958][T16481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.665498][T16498] __nla_validate_parse: 14 callbacks suppressed [ 309.665520][T16498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3083'. [ 309.748327][T16368] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.843255][T16368] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.935417][T16368] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.021919][ T5150] Bluetooth: hci4: command tx timeout [ 310.054671][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3089'. [ 310.077780][T16368] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.111689][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 310.384057][T16368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.410106][T16368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.452280][T16368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.465175][T16539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3094'. [ 310.482529][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 310.511383][T16539] bond0: entered promiscuous mode [ 310.518810][T16539] bond_slave_0: entered promiscuous mode [ 310.524684][T16539] bond_slave_1: entered promiscuous mode [ 310.531218][T16540] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3093'. [ 310.551099][T16539] gretap0: entered promiscuous mode [ 310.558181][T16539] debugfs: 'hsr1' already exists in 'hsr' [ 310.563969][T16539] Cannot create hsr debugfs directory [ 310.569560][T16539] hsr1: entered promiscuous mode [ 310.574831][T16368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.641052][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3096'. [ 310.909155][T16368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.939384][T16368] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.959292][T16570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3101'. [ 310.993448][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.000878][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.053108][T16576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.071600][T16573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3102'. [ 311.130104][T10842] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.137427][T10842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.218454][ T5150] Bluetooth: hci0: command tx timeout [ 311.257190][T16584] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 311.281575][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 311.416623][T16599] netlink: 'syz.1.3109': attribute type 21 has an invalid length. [ 311.712356][T16612] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 311.736283][T16614] openvswitch: netlink: Flow actions attr not present in new flow. [ 311.752780][T16368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.882164][T16368] veth0_vlan: entered promiscuous mode [ 311.898139][T16368] veth1_vlan: entered promiscuous mode [ 311.962430][T16368] veth0_macvtap: entered promiscuous mode [ 311.998230][T16368] veth1_macvtap: entered promiscuous mode [ 312.028851][T16368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.047829][T16368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.072142][T10842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.105804][T10842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.130657][ T2060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.145489][ T2060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.390664][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.417685][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.438781][T16647] FAULT_INJECTION: forcing a failure. [ 312.438781][T16647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.498281][ T2060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.521129][T16647] CPU: 1 UID: 0 PID: 16647 Comm: syz.5.3123 Not tainted syzkaller #0 PREEMPT(full) [ 312.521167][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.521181][T16647] Call Trace: [ 312.521190][T16647] [ 312.521199][T16647] dump_stack_lvl+0xe8/0x150 [ 312.521234][T16647] should_fail_ex+0x414/0x560 [ 312.521283][T16647] _copy_from_user+0x2d/0xb0 [ 312.521312][T16647] ___sys_sendmsg+0x158/0x2a0 [ 312.521342][T16647] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.521410][T16647] ? __fget_files+0x2a/0x420 [ 312.521437][T16647] ? __fget_files+0x3a0/0x420 [ 312.521477][T16647] __x64_sys_sendmsg+0x19b/0x260 [ 312.521506][T16647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.521544][T16647] ? __pfx_ksys_write+0x10/0x10 [ 312.521579][T16647] do_syscall_64+0xec/0xf80 [ 312.521602][T16647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.521622][T16647] ? trace_irq_disable+0x37/0x100 [ 312.521651][T16647] ? clear_bhb_loop+0x60/0xb0 [ 312.521678][T16647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.521699][T16647] RIP: 0033:0x7f87e7b8f749 [ 312.521718][T16647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.521737][T16647] RSP: 002b:00007f87e8970038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.521761][T16647] RAX: ffffffffffffffda RBX: 00007f87e7de6090 RCX: 00007f87e7b8f749 [ 312.521777][T16647] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000003 [ 312.521792][T16647] RBP: 00007f87e8970090 R08: 0000000000000000 R09: 0000000000000000 [ 312.521806][T16647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.521819][T16647] R13: 00007f87e7de6128 R14: 00007f87e7de6090 R15: 00007ffe1dbf9918 [ 312.521856][T16647] [ 312.538695][ T2060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.080537][T16667] tipc: Started in network mode [ 313.086078][T16667] tipc: Node identity ae421861fed6, cluster identity 4711 [ 313.100756][T16667] tipc: Enabled bearer , priority 0 [ 313.112619][T16668] syzkaller1: entered promiscuous mode [ 313.119057][T16668] syzkaller1: entered allmulticast mode [ 313.127690][T16671] bridge_slave_0: invalid flags given to default FDB implementation [ 313.297003][ T5150] Bluetooth: hci0: command tx timeout [ 313.314805][T16667] syzkaller0: entered promiscuous mode [ 313.320565][T16667] syzkaller0: entered allmulticast mode [ 313.330139][T16667] tipc: Resetting bearer [ 313.397893][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.416902][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.426122][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.438795][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.446609][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.493487][T16666] tipc: Resetting bearer [ 314.974952][T16666] tipc: Disabling bearer [ 315.129366][T16704] __nla_validate_parse: 4 callbacks suppressed [ 315.129387][T16704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3139'. [ 315.155437][T16691] syzkaller0: entered promiscuous mode [ 315.161509][T16691] syzkaller0: entered allmulticast mode [ 315.169372][ T5919] tipc: Node number set to 1351882849 [ 315.377318][ T5846] Bluetooth: hci0: command tx timeout [ 315.537046][ T5846] Bluetooth: hci1: command tx timeout [ 316.569827][T16682] wg1 speed is unknown, defaulting to 1000 [ 317.061691][T16741] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3150'. [ 317.221054][T16682] chnl_net:caif_netlink_parms(): no params data found [ 317.419443][T16682] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.437257][T16682] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.446074][T16682] bridge_slave_0: entered allmulticast mode [ 317.464277][T16682] bridge_slave_0: entered promiscuous mode [ 317.485170][T16682] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.500253][T16682] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.527544][T16682] bridge_slave_1: entered allmulticast mode [ 317.545853][T16682] bridge_slave_1: entered promiscuous mode [ 317.617549][ T5846] Bluetooth: hci1: command tx timeout [ 317.629763][T16762] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 317.642712][T16762] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3156'. [ 317.673168][T16682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.723776][T16682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.861111][T16682] team0: Port device team_slave_0 added [ 317.889016][T16682] team0: Port device team_slave_1 added [ 317.925820][T16780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3162'. [ 317.948101][T16781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3162'. [ 317.962712][T16682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.972413][T16682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.001231][T16682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.027173][T16682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.041832][T16682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.085518][T16682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.323141][T16682] hsr_slave_0: entered promiscuous mode [ 318.359110][T16682] hsr_slave_1: entered promiscuous mode [ 318.365581][T16682] debugfs: 'hsr0' already exists in 'hsr' [ 318.390926][T16682] Cannot create hsr debugfs directory [ 319.320088][T16824] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 319.473183][T16682] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.505263][T16682] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 319.535563][T16682] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.650192][T16836] netlink: 'syz.4.3176': attribute type 1 has an invalid length. [ 319.671912][T16682] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.678617][T16836] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3176'. [ 319.697528][ T5846] Bluetooth: hci1: command tx timeout [ 319.713534][T16682] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 319.716914][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 319.738661][T16682] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.833791][T16682] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.854710][T16682] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 319.882982][T16682] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.976251][T16682] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.994338][T16682] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 320.013452][T16682] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.504004][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 320.588873][T16863] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3183'. [ 321.777607][ T5846] Bluetooth: hci1: command tx timeout [ 321.805418][T16682] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.831661][T16682] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.881255][T16682] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.918905][T16887] delete_channel: no stack [ 321.923761][T16682] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.976140][T16885] tun0: tun_chr_ioctl cmd 1074025675 [ 321.982622][T16887] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 322.008558][T16885] tun0: persist disabled [ 322.065406][T16892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3189'. [ 322.106906][T16892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3189'. [ 322.285579][T16682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.364303][T16682] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.385057][T10842] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.392324][T10842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.421945][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.430947][T16913] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 322.445645][T10842] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.453009][T10842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.462980][T16914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3195'. [ 322.685139][T16919] netlink: 'syz.1.3198': attribute type 3 has an invalid length. [ 322.708036][T16919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3198'. [ 322.835064][T16924] sctp: [Deprecated]: syz.0.3200 (pid 16924) Use of int in max_burst socket option deprecated. [ 322.835064][T16924] Use struct sctp_assoc_value instead [ 323.125023][T16938] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3205'. [ 323.139510][T16936] xt_hashlimit: size too large, truncated to 1048576 [ 323.177215][T16682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.307885][T16682] veth0_vlan: entered promiscuous mode [ 323.345650][T16682] veth1_vlan: entered promiscuous mode [ 323.447916][T16682] veth0_macvtap: entered promiscuous mode [ 323.487742][T16682] veth1_macvtap: entered promiscuous mode [ 323.589863][T16682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.628487][T16682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.664740][T10848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.695585][T10848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.731303][T10848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.764923][T10848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.856561][T16961] netlink: 'syz.4.3210': attribute type 3 has an invalid length. [ 323.874981][T16961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3210'. [ 324.022809][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.065032][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.195937][T16972] siw: device registration error -23 [ 324.215386][T16978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3214'. [ 324.228499][T10844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.245543][T10844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.405516][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3215'. [ 324.487696][T16983] syzkaller0: entered promiscuous mode [ 324.493243][T16983] syzkaller0: entered allmulticast mode [ 324.517171][T16987] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 324.534875][T16987] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 324.581055][ T6141] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.594366][ T6141] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.615079][ T6141] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.635187][ T6141] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.120350][T17003] IPVS: set_ctl: invalid protocol: 182 100.1.1.1:20004 [ 325.523821][T17029] xt_TPROXY: Can be used only with -p tcp or -p udp [ 325.618799][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.743068][T17038] __nla_validate_parse: 8 callbacks suppressed [ 325.743088][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3233'. [ 325.772530][T17044] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3236'. [ 325.798152][T17046] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3238'. [ 325.818062][T17050] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3236'. [ 326.020209][T17058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.029654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.164008][T17069] netlink: 'syz.2.3243': attribute type 1 has an invalid length. [ 326.174357][T17068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3244'. [ 326.183595][T17068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3244'. [ 326.193299][T17069] netlink: 'syz.2.3243': attribute type 2 has an invalid length. [ 326.195207][T17067] netlink: 'syz.2.3243': attribute type 7 has an invalid length. [ 326.236814][T17067] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3243'. [ 326.276424][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.395952][T17079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.511117][T17082] netlink: 'syz.5.3250': attribute type 30 has an invalid length. [ 326.561123][T17090] veth1_macvtap: left promiscuous mode [ 326.777678][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3256'. [ 326.802147][T17101] bond0: entered promiscuous mode [ 326.807475][T17101] bond_slave_0: entered promiscuous mode [ 326.813670][T17101] bond_slave_1: entered promiscuous mode [ 326.825779][T17101] gretap0: entered promiscuous mode [ 326.835167][T17101] debugfs: 'hsr1' already exists in 'hsr' [ 326.842473][T17101] Cannot create hsr debugfs directory [ 326.848887][T17101] hsr1: entered promiscuous mode [ 327.239960][T17113] sctp: [Deprecated]: syz.0.3260 (pid 17113) Use of int in maxseg socket option. [ 327.239960][T17113] Use struct sctp_assoc_value instead [ 327.563717][T17120] FAULT_INJECTION: forcing a failure. [ 327.563717][T17120] name failslab, interval 1, probability 0, space 0, times 0 [ 327.581586][T17120] CPU: 1 UID: 0 PID: 17120 Comm: syz.4.3263 Not tainted syzkaller #0 PREEMPT(full) [ 327.581617][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.581630][T17120] Call Trace: [ 327.581638][T17120] [ 327.581648][T17120] dump_stack_lvl+0xe8/0x150 [ 327.581680][T17120] should_fail_ex+0x414/0x560 [ 327.581719][T17120] should_failslab+0xa8/0x100 [ 327.581747][T17120] kmem_cache_alloc_noprof+0x88/0x710 [ 327.581777][T17120] ? __netlink_lookup+0xbd/0x8a0 [ 327.581805][T17120] ? skb_clone+0x212/0x3a0 [ 327.581832][T17120] skb_clone+0x212/0x3a0 [ 327.581856][T17120] __netlink_deliver_tap+0x404/0x850 [ 327.581886][T17120] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.581910][T17120] netlink_deliver_tap+0x19c/0x1b0 [ 327.581931][T17120] netlink_unicast+0x7fa/0x9e0 [ 327.581957][T17120] ? __pfx_netlink_unicast+0x10/0x10 [ 327.581976][T17120] ? __alloc_skb+0x198/0x3a0 [ 327.581992][T17120] ? netlink_sendmsg+0x642/0xb30 [ 327.582012][T17120] ? skb_put+0x11b/0x210 [ 327.582033][T17120] netlink_sendmsg+0x805/0xb30 [ 327.582063][T17120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.582090][T17120] ? aa_sock_msg_perm+0xf1/0x1b0 [ 327.582115][T17120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.582132][T17120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.582156][T17120] __sock_sendmsg+0x21c/0x270 [ 327.582184][T17120] ____sys_sendmsg+0x505/0x820 [ 327.582211][T17120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.582241][T17120] ? import_iovec+0x74/0xa0 [ 327.582266][T17120] ___sys_sendmsg+0x21f/0x2a0 [ 327.582290][T17120] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.582346][T17120] ? __fget_files+0x2a/0x420 [ 327.582369][T17120] ? __fget_files+0x3a0/0x420 [ 327.582405][T17120] __x64_sys_sendmsg+0x19b/0x260 [ 327.582434][T17120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.582477][T17120] ? trace_sys_enter+0x5e/0xf0 [ 327.582503][T17120] ? rcu_is_watching+0x15/0xb0 [ 327.582529][T17120] ? trace_sys_enter+0x25/0xf0 [ 327.582559][T17120] do_syscall_64+0xec/0xf80 [ 327.582582][T17120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.582600][T17120] ? trace_irq_disable+0x37/0x100 [ 327.582626][T17120] ? clear_bhb_loop+0x60/0xb0 [ 327.582651][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.582671][T17120] RIP: 0033:0x7fe7f298f749 [ 327.582691][T17120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.582719][T17120] RSP: 002b:00007fe7f3877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.582740][T17120] RAX: ffffffffffffffda RBX: 00007fe7f2be5fa0 RCX: 00007fe7f298f749 [ 327.582754][T17120] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 327.582765][T17120] RBP: 00007fe7f3877090 R08: 0000000000000000 R09: 0000000000000000 [ 327.582777][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.582806][T17120] R13: 00007fe7f2be6038 R14: 00007fe7f2be5fa0 R15: 00007fff89c299b8 [ 327.582843][T17120] [ 328.127698][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 328.148210][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 329.469250][T17198] netlink: 'syz.0.3289': attribute type 1 has an invalid length. [ 329.584928][T17208] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 329.606907][T17203] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 329.741774][T17214] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 329.748582][T17214] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 329.762684][T17214] smc: net device gre0 applied user defined pnetid SYZ1 [ 329.787741][T17214] smc: net device gre0 erased user defined pnetid SYZ1 [ 329.836941][T17219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.901701][T17223] pimreg: entered allmulticast mode [ 330.270772][T17245] FAULT_INJECTION: forcing a failure. [ 330.270772][T17245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.273868][T17242] x_tables: duplicate underflow at hook 1 [ 330.310625][T17245] CPU: 1 UID: 0 PID: 17245 Comm: syz.5.3302 Not tainted syzkaller #0 PREEMPT(full) [ 330.310661][T17245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.310675][T17245] Call Trace: [ 330.310684][T17245] [ 330.310694][T17245] dump_stack_lvl+0xe8/0x150 [ 330.310729][T17245] should_fail_ex+0x414/0x560 [ 330.310770][T17245] _copy_from_user+0x2d/0xb0 [ 330.310799][T17245] kstrtouint_from_user+0xc4/0x170 [ 330.310824][T17245] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 330.310866][T17245] proc_fail_nth_write+0x88/0x200 [ 330.310892][T17245] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 330.310922][T17245] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 330.310949][T17245] vfs_write+0x27e/0xb30 [ 330.310981][T17245] ? __pfx_vfs_write+0x10/0x10 [ 330.311004][T17245] ? __fget_files+0x2a/0x420 [ 330.311045][T17245] ? __fget_files+0x3a0/0x420 [ 330.311071][T17245] ? __fget_files+0x2a/0x420 [ 330.311110][T17245] ksys_write+0x145/0x250 [ 330.311135][T17245] ? __pfx_ksys_write+0x10/0x10 [ 330.311170][T17245] do_syscall_64+0xec/0xf80 [ 330.311193][T17245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.311214][T17245] ? trace_irq_disable+0x37/0x100 [ 330.311243][T17245] ? clear_bhb_loop+0x60/0xb0 [ 330.311270][T17245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.311292][T17245] RIP: 0033:0x7f87e7b8e1ff [ 330.311311][T17245] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 330.311330][T17245] RSP: 002b:00007f87e8991030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 330.311353][T17245] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f87e7b8e1ff [ 330.311369][T17245] RDX: 0000000000000001 RSI: 00007f87e89910a0 RDI: 0000000000000004 [ 330.311383][T17245] RBP: 00007f87e8991090 R08: 0000000000000000 R09: 0000000000000000 [ 330.311397][T17245] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 330.311410][T17245] R13: 00007f87e7de6038 R14: 00007f87e7de5fa0 R15: 00007ffe1dbf9918 [ 330.311448][T17245] [ 331.054680][T17270] bridge_slave_0: invalid flags given to default FDB implementation [ 331.160907][T17286] openvswitch: netlink: Multiple metadata blocks provided [ 331.252886][T17290] x_tables: duplicate entry at hook 3 [ 331.284404][T17292] __nla_validate_parse: 9 callbacks suppressed [ 331.284428][T17292] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3314'. [ 331.506777][T17307] netlink: 'syz.5.3319': attribute type 58 has an invalid length. [ 331.519510][T17307] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3319'. [ 331.608814][T17311] netlink: 'syz.0.3317': attribute type 1 has an invalid length. [ 331.823676][T17320] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3323'. [ 331.872095][T17330] delete_channel: no stack [ 331.895094][T17330] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3322'. [ 332.053336][T17337] netlink: 'syz.4.3327': attribute type 13 has an invalid length. [ 332.073434][T17340] netlink: 'syz.1.3328': attribute type 22 has an invalid length. [ 332.079766][T17337] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3327'. [ 332.115264][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'. [ 332.127694][T17337] syz_tun: refused to change device tx_queue_len [ 332.165948][T17337] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 332.277091][T17352] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3329'. [ 332.382665][T17359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3330'. [ 332.395223][T17361] netlink: 'syz.1.3332': attribute type 26 has an invalid length. [ 332.603933][T17370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3334'. [ 332.852531][T17387] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3340'. [ 332.899271][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.906790][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.918720][T17388] netlink: 'syz.4.3341': attribute type 3 has an invalid length. [ 332.944559][T17388] netlink: 'syz.4.3341': attribute type 3 has an invalid length. [ 332.968848][T17394] netlink: 'syz.1.3342': attribute type 1 has an invalid length. [ 332.979416][T17388] netlink: 'syz.4.3341': attribute type 3 has an invalid length. [ 332.991067][T17388] netlink: 'syz.4.3341': attribute type 3 has an invalid length. [ 333.283645][T17409] bridge: RTM_NEWNEIGH with invalid ether address [ 333.347162][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.366201][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.373510][T17408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.803432][T17445] openvswitch: netlink: IP tunnel dst address not specified [ 334.157130][T17467] tipc: Started in network mode [ 334.164779][T17467] tipc: Node identity 4a0622e1cc69, cluster identity 4711 [ 334.174129][T17467] tipc: Enabled bearer , priority 0 [ 334.271949][T17467] syzkaller0: entered promiscuous mode [ 334.279227][T17467] syzkaller0: entered allmulticast mode [ 334.285605][T17467] tipc: Resetting bearer [ 334.531495][T10848] tipc: Resetting bearer [ 334.540000][T17466] tipc: Resetting bearer [ 335.982328][T17466] tipc: Disabling bearer [ 336.070205][T17498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.121310][T17501] bond2: (slave veth3): Enslaving as an active interface with a down link [ 336.148818][T17514] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 336.167773][T17506] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 336.174992][T17506] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 336.239730][ T5919] tipc: Node number set to 2255430369 [ 336.648580][T17535] validate_nla: 65 callbacks suppressed [ 336.648600][T17535] netlink: 'syz.1.3383': attribute type 1 has an invalid length. [ 336.669572][T17537] __nla_validate_parse: 79 callbacks suppressed [ 336.669610][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 336.751094][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'. [ 337.044281][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3389'. [ 337.056366][T17568] netlink: 'syz.4.3389': attribute type 7 has an invalid length. [ 337.065197][T17567] Bluetooth: MGMT ver 1.23 [ 337.103388][T10850] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.113982][T10850] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.144210][T10850] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.170952][T10850] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.181747][T17571] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3394'. [ 337.190069][T17572] tipc: Started in network mode [ 337.195782][T17572] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 337.205388][T17572] tipc: Enabled bearer , priority 10 [ 337.375068][T17585] 8021q: VLANs not supported on ip_vti0 [ 337.394636][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3398'. [ 337.492471][T17591] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3400'. [ 337.600793][T17598] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3404'. [ 337.634601][T17598] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3404'. [ 337.675248][T17598] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 337.738652][T17598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3404'. [ 337.759209][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 338.208206][ T39] tipc: Node number set to 10005162 [ 338.217742][T17616] netlink: 'syz.2.3409': attribute type 9 has an invalid length. [ 338.475248][T17644] netlink: 'syz.4.3418': attribute type 1 has an invalid length. [ 338.974941][T17679] netlink: 'syz.4.3427': attribute type 5 has an invalid length. [ 339.105283][T17691] tipc: Enabled bearer , priority 13 [ 339.297772][T17701] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 339.351663][T17701] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 339.419187][T17709] tipc: Enabled bearer , priority 0 [ 339.447884][T17709] syzkaller0: entered promiscuous mode [ 339.467568][T17709] syzkaller0: entered allmulticast mode [ 339.482053][T17709] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 339.563903][T17719] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 339.599997][T17709] tipc: Resetting bearer [ 339.637811][T17707] tipc: Resetting bearer [ 339.676229][T17707] tipc: Disabling bearer [ 339.754729][T17733] netlink: 'syz.1.3448': attribute type 8 has an invalid length. [ 340.048546][T17748] tipc: MTU too low for tipc bearer [ 340.076423][T17750] netlink: 'syz.2.3453': attribute type 16 has an invalid length. [ 340.084882][T17750] netlink: 'syz.2.3453': attribute type 17 has an invalid length. [ 340.178355][T17750] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.185693][T17750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.193340][T17750] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.200792][T17750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.225873][T17750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.285308][T17761] gre1: entered promiscuous mode [ 340.300802][T17761] gre1: entered allmulticast mode [ 340.507045][T17775] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 340.774172][T17788] syzkaller0: entered promiscuous mode [ 340.782792][T17788] syzkaller0: entered allmulticast mode [ 341.042005][T17802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.049394][T17802] IPv6: NLM_F_CREATE should be set when creating new route [ 341.056699][T17802] IPv6: NLM_F_CREATE should be set when creating new route [ 341.085115][T17802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.004277][T17861] openvswitch: netlink: Flow key attr not present in new flow. [ 342.164128][T17870] __nla_validate_parse: 24 callbacks suppressed [ 342.164150][T17870] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3490'. [ 342.202429][T17870] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3490'. [ 342.477846][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'. [ 342.490740][T17890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3496'. [ 342.674573][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3499'. [ 342.719130][T17906] bond0: entered promiscuous mode [ 342.734605][T17906] bond_slave_0: entered promiscuous mode [ 342.744957][T17906] bond_slave_1: entered promiscuous mode [ 342.763389][T17906] gretap0: entered promiscuous mode [ 342.781805][T17906] debugfs: 'hsr1' already exists in 'hsr' [ 342.792553][T17906] Cannot create hsr debugfs directory [ 342.802666][T17906] hsr1: entered promiscuous mode [ 342.814186][ T5949] IPVS: starting estimator thread 0... [ 342.926811][T17913] IPVS: using max 29 ests per chain, 69600 per kthread [ 343.204948][T17934] validate_nla: 3 callbacks suppressed [ 343.204967][T17934] netlink: 'syz.4.3511': attribute type 1 has an invalid length. [ 343.506235][T17956] Cannot find add_set index 65532 as target [ 343.843741][T17973] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3524'. [ 343.854571][T17973] block nbd0: reconnected socket [ 343.870288][ T5150] block nbd0: Receive control failed (result -32) [ 344.222850][T17997] netlink: 'syz.2.3530': attribute type 2 has an invalid length. [ 344.234153][T17997] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 344.274850][T17998] netlink: 'syz.4.3531': attribute type 29 has an invalid length. [ 344.299269][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 344.360596][T18004] netlink: 'syz.2.3534': attribute type 1 has an invalid length. [ 344.462153][T18013] netlink: 'syz.5.3537': attribute type 2 has an invalid length. [ 344.494105][T18013] 9: entered promiscuous mode [ 344.529364][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3537'. [ 344.621440][T18016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3538'. [ 344.744872][T18027] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3542'. [ 344.849791][T18021] wg1 speed is unknown, defaulting to 1000 [ 345.140987][ T5150] Bluetooth: hci1: command 0x0405 tx timeout [ 345.163416][T18050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.250287][T18050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.527074][T18067] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 346.158087][T18118] netlink: 'syz.2.3570': attribute type 1 has an invalid length. [ 346.174227][T18118] netlink: 'syz.2.3570': attribute type 2 has an invalid length. [ 346.301408][T18124] tipc: Failed to remove unknown binding: 66,0,0/2255430369:2443909003/2443909004 [ 346.313161][T18124] tipc: Failed to remove unknown binding: 66,0,0/2255430369:2443909003/2443909004 [ 346.445207][T18137] xt_hashlimit: max too large, truncated to 1048576 [ 346.632168][T18152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.897008][ T5150] Bluetooth: hci0: command tx timeout [ 347.031905][T18165] syzkaller0: entered promiscuous mode [ 347.040734][T18163] x_tables: unsorted entry at hook 3 [ 347.046765][T18165] syzkaller0: entered allmulticast mode [ 347.062260][T18163] netlink: 'syz.4.3587': attribute type 2 has an invalid length. [ 347.112349][T18167] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 347.173930][T18171] __nla_validate_parse: 16 callbacks suppressed [ 347.173951][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'. [ 347.227814][T18172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3590'. [ 347.324106][T18171] hsr_slave_1 (unregistering): left promiscuous mode [ 347.346409][T18177] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3591'. [ 347.412113][T18175] wg1 speed is unknown, defaulting to 1000 [ 347.565618][T18186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3595'. [ 347.576528][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3593'. [ 347.616247][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'. [ 347.657952][T18190] IPVS: length: 86 != 8 [ 347.755958][T18197] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.778904][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3598'. [ 348.121684][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3605'. [ 348.136292][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3605'. [ 348.210133][T18228] netlink: 'syz.5.3606': attribute type 30 has an invalid length. [ 348.284215][T18228] bond3: option arp_missed_max: invalid value (0) [ 348.298819][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3604'. [ 348.318962][T18228] bond3: option arp_missed_max: allowed values 1 - 255 [ 348.332671][T18228] bond3 (unregistering): Released all slaves [ 348.495516][T18243] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 348.640954][T18246] netlink: 'syz.1.3611': attribute type 1 has an invalid length. [ 348.659020][T18248] netlink: 'syz.5.3612': attribute type 1 has an invalid length. [ 348.731229][T18246] bond2: entered promiscuous mode [ 348.747759][T18246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.840375][T18248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.433722][T18305] syzkaller1: entered promiscuous mode [ 349.444756][T18305] syzkaller1: entered allmulticast mode [ 349.979884][T18345] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 350.022433][T18345] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 350.071139][T18345] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 350.097920][T18345] netlink: 'syz.2.3637': attribute type 2 has an invalid length. [ 350.257876][T18360] SET target dimension over the limit! [ 350.285537][T18355] netlink: 'syz.4.3643': attribute type 2 has an invalid length. [ 350.297316][T18361] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 350.905401][T18398] netlink: 'syz.5.3656': attribute type 6 has an invalid length. [ 350.914592][T18401] netlink: 'syz.1.3657': attribute type 1 has an invalid length. [ 351.010269][T18408] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 351.220588][T10841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.279071][T10841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.287925][T10841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.297544][T10841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.400042][T18429] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 351.444744][T18429] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 351.455663][T18429] gretap1: entered promiscuous mode [ 351.466947][T18429] gretap1: entered allmulticast mode [ 352.023957][T18461] sctp: [Deprecated]: syz.4.3672 (pid 18461) Use of int in maxseg socket option. [ 352.023957][T18461] Use struct sctp_assoc_value instead [ 352.160220][T18469] bond4: option mode: invalid value (133) [ 352.168816][T18469] bond4 (unregistering): Released all slaves [ 352.312894][T18473] openvswitch: netlink: EtherType 50a is less than min 600 [ 352.330283][T18473] __nla_validate_parse: 21 callbacks suppressed [ 352.330303][T18473] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3675'. [ 352.358027][T18473] ip6gre1: entered promiscuous mode [ 352.363921][T18473] ip6gre1: entered allmulticast mode [ 352.570702][T18486] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 352.585924][T18486] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 352.743985][T18456] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 352.976864][T18497] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 353.003245][T18497] tipc: Started in network mode [ 353.018052][T18497] tipc: Node identity 5eba446f27a9, cluster identity 4711 [ 353.041682][T18497] tipc: Enabled bearer , priority 0 [ 353.069223][T18505] syzkaller0: entered promiscuous mode [ 353.081559][T18505] syzkaller0: entered allmulticast mode [ 353.088898][T18507] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3688'. [ 353.099536][T18507] xt_hashlimit: size too large, truncated to 1048576 [ 353.118788][T18497] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 353.141643][ T5846] Bluetooth: hci1: command 0x0405 tx timeout [ 353.424760][T18495] tipc: Resetting bearer [ 353.489163][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3693'. [ 353.521451][T18495] tipc: Disabling bearer [ 353.687470][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3697'. [ 353.737307][T18532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3696'. [ 353.746549][T18529] validate_nla: 4 callbacks suppressed [ 353.746568][T18529] netlink: 'syz.4.3697': attribute type 7 has an invalid length. [ 353.800052][T18533] netlink: 'syz.4.3697': attribute type 25 has an invalid length. [ 353.825040][T18529] netlink: 'syz.4.3697': attribute type 25 has an invalid length. [ 353.846937][T18534] netlink: 'syz.4.3697': attribute type 25 has an invalid length. [ 353.860649][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 353.889673][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 353.927042][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 354.060974][T18533] netlink: 'syz.4.3697': attribute type 25 has an invalid length. [ 354.075317][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 354.167971][T18555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 354.207789][T18534] netlink: 'syz.4.3697': attribute type 25 has an invalid length. [ 354.235481][T18555] bond0: entered promiscuous mode [ 354.253301][T18555] bond_slave_0: entered promiscuous mode [ 354.259810][T18555] bond_slave_1: entered promiscuous mode [ 354.270718][T18555] gretap0: entered promiscuous mode [ 354.278495][T18555] debugfs: 'hsr1' already exists in 'hsr' [ 354.284357][T18555] Cannot create hsr debugfs directory [ 354.295221][T18555] hsr1: entered promiscuous mode [ 354.335203][T18562] netlink: 'syz.0.3708': attribute type 1 has an invalid length. [ 354.398541][T18568] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 354.431218][T18570] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 354.539322][T18570] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 354.593975][T18570] bond4: (slave xfrm1): making interface the new active one [ 354.614315][T18570] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 354.634702][T18562] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 354.650229][T18562] bond4 (unregistering): Released all slaves [ 354.809764][T18582] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 354.835775][T18590] openvswitch: netlink: Multiple metadata blocks provided [ 354.866190][T18582] syzkaller0: entered promiscuous mode [ 354.878873][T18582] syzkaller0: entered allmulticast mode [ 355.270829][T18624] IPv6: sit5: Disabled Multicast RS [ 355.278440][T18624] sit5: entered allmulticast mode [ 355.336382][T18627] tipc: New replicast peer: 255.255.255.255 [ 355.361274][T18627] tipc: Enabled bearer , priority 10 [ 355.622518][T18651] netlink: 'syz.4.3737': attribute type 1 has an invalid length. [ 355.653858][T18644] bond1: option mode: invalid value (133) [ 355.663011][T18644] bond1 (unregistering): Released all slaves [ 355.902062][T18657] bond2: option all_slaves_active: invalid value (222) [ 355.952014][T18657] bond2 (unregistering): Released all slaves [ 356.325235][T18669] netlink: 'syz.1.3742': attribute type 6 has an invalid length. [ 356.464069][T18679] nbd: nbd64 already in use [ 356.797165][T18462] udevd[18462]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 357.101866][T18709] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.110856][T18709] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.329719][T18729] netlink: 'syz.2.3757': attribute type 33 has an invalid length. [ 357.398065][T18729] __nla_validate_parse: 23 callbacks suppressed [ 357.398084][T18729] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3757'. [ 357.559644][T18742] bond2: (slave lo): Device is not our slave [ 357.568408][T18747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3762'. [ 357.579221][T18742] bond2: option active_slave: invalid value (lo) [ 357.610392][T18742] bond2 (unregistering): Released all slaves [ 357.813852][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 357.832663][T18759] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3764'. [ 357.864984][T18759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3764'. [ 357.912227][T18763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3766'. [ 357.937181][T18764] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3764'. [ 357.970364][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3764'. [ 358.166525][T18776] x_tables: duplicate underflow at hook 1 [ 358.275245][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'. [ 358.385243][T18789] syzkaller1: entered promiscuous mode [ 358.411795][T18789] syzkaller1: entered allmulticast mode [ 358.448550][T18797] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 56 [ 358.739383][T18802] wg1 speed is unknown, defaulting to 1000 [ 358.836960][T18809] netlink: 'syz.1.3781': attribute type 6 has an invalid length. [ 358.858747][T18809] netlink: 'syz.1.3781': attribute type 6 has an invalid length. [ 358.876586][T18809] sctp: [Deprecated]: syz.1.3781 (pid 18809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.876586][T18809] Use struct sctp_sack_info instead [ 359.129581][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3784'. [ 359.240666][T18821] netlink: 'syz.0.3784': attribute type 5 has an invalid length. [ 359.358372][T18837] netlink: 'syz.2.3790': attribute type 13 has an invalid length. [ 359.386978][T18837] netlink: 'syz.2.3790': attribute type 58 has an invalid length. [ 359.489055][T18844] netlink: 'syz.2.3793': attribute type 10 has an invalid length. [ 359.502696][T18844] bridge_slave_1: left allmulticast mode [ 359.508654][T18844] bridge_slave_1: left promiscuous mode [ 359.514518][T18844] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.546175][T18844] bridge_slave_1: entered promiscuous mode [ 359.569186][T18844] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 359.773807][T18857] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 360.043902][T18876] netem: incorrect ge model size [ 360.065663][T18876] netem: change failed [ 360.090442][T18836] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 360.112162][T18880] netlink: 'syz.2.3802': attribute type 14 has an invalid length. [ 360.169834][T18881] netlink: 'syz.2.3802': attribute type 14 has an invalid length. [ 360.592955][T18903] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 360.743034][T18910] netlink: 'syz.4.3812': attribute type 21 has an invalid length. [ 360.761088][T18910] nft_compat: unsupported protocol 36 [ 361.070437][T18929] xt_cgroup: xt_cgroup: no path or classid specified [ 361.444738][T18950] tipc: Enabling of bearer rejected, already enabled [ 361.903904][T18986] batadv_slave_1: left allmulticast mode [ 361.947509][T18986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.174859][T18999] macvtap1: entered promiscuous mode [ 362.182641][T18999] macvtap1: entered allmulticast mode [ 362.191206][T18999] veth1_vlan: entered allmulticast mode [ 362.250919][T18997] macvtap2: entered promiscuous mode [ 362.276533][T18997] macvtap2: entered allmulticast mode [ 362.329664][T19000] macvtap2: entered promiscuous mode [ 362.350872][T19000] macvtap2: entered allmulticast mode [ 362.357806][ T8653] IPVS: starting estimator thread 0... [ 362.457321][T19011] IPVS: using max 26 ests per chain, 62400 per kthread [ 362.662720][T19021] __nla_validate_parse: 17 callbacks suppressed [ 362.662744][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3844'. [ 362.753838][T19036] openvswitch: netlink: Multiple metadata blocks provided [ 363.224711][T19066] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 2, id = 0 [ 363.888445][T19101] xt_recent: Unsupported userspace flags (000000b1) [ 363.910220][T19101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.930485][T19105] sch_fq: defrate 0 ignored. [ 363.935974][T19104] xt_recent: Unsupported userspace flags (000000b1) [ 364.033779][T19108] mac80211_hwsim hwsim24 : renamed from wlan1 (while UP) [ 364.113843][T19112] netlink: 'syz.0.3874': attribute type 27 has an invalid length. [ 364.149848][T19116] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.260509][T19116] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.305659][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3879'. [ 364.338432][T19116] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.360959][T19128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3879'. [ 364.435717][T19116] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.638584][T10845] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.647225][T10845] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.682562][ T2060] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.787826][T10842] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.889995][T19158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 365.027587][T19170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.603766][T19206] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3903'. [ 365.623441][T19206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3903'. [ 365.635550][T19206] netlink: 'syz.4.3903': attribute type 11 has an invalid length. [ 365.728853][T19215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3906'. [ 365.779218][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3907'. [ 365.822573][T19218] bond1: option xmit_hash_policy: invalid value (64) [ 365.845271][T19218] bond1 (unregistering): Released all slaves [ 365.953814][T19226] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.3909'. [ 366.003257][T19229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.004771][T19230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.212149][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3911'. [ 366.830475][T19277] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 366.846341][T19277] bond2 (unregistering): Released all slaves [ 366.996458][T19288] netlink: 'syz.4.3928': attribute type 2 has an invalid length. [ 367.018241][T19289] netlink: 'syz.4.3928': attribute type 2 has an invalid length. [ 367.090551][T19292] netlink: 'syz.2.3929': attribute type 1 has an invalid length. [ 367.160880][T19292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.602467][T19322] netlink: 'syz.2.3939': attribute type 9 has an invalid length. [ 367.630934][ T39] IPVS: starting estimator thread 0... [ 367.738314][T19331] __nla_validate_parse: 16 callbacks suppressed [ 367.738336][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3941'. [ 367.757080][T19329] IPVS: using max 26 ests per chain, 62400 per kthread [ 367.947792][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3946'. [ 368.093912][T19350] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3949'. [ 368.219424][T19360] netlink: 'syz.0.3952': attribute type 1 has an invalid length. [ 368.228765][T19360] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3952'. [ 368.562672][T19380] bond2: Unable to set up delay as MII monitoring is disabled [ 368.573686][T19380] bond2 (unregistering): Released all slaves [ 368.605362][T19382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3958'. [ 368.939878][T19402] sctp: [Deprecated]: syz.0.3961 (pid 19402) Use of int in maxseg socket option. [ 368.939878][T19402] Use struct sctp_assoc_value instead [ 368.960207][T19402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3961'. [ 369.081532][T19412] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3965'. [ 369.092853][T19414] netlink: 'syz.2.3962': attribute type 13 has an invalid length. [ 369.193524][T19415] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.3962'. [ 369.342982][T19414] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 369.407050][T19414] gretap1: left promiscuous mode [ 369.414749][T19414] gretap1: left allmulticast mode [ 369.428095][T19414] hsr1: left promiscuous mode [ 369.483152][T19429] ip6gre1: entered allmulticast mode [ 369.588497][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3970'. [ 369.721990][T19440] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3970'. [ 369.990409][T19456] netlink: 'syz.1.3979': attribute type 8 has an invalid length. [ 370.191393][T19470] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 370.330647][ T30] audit: type=1804 audit(1767726067.104:4): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3985" name="/newroot/150/cgroup.controllers" dev="tmpfs" ino=779 res=1 errno=0 [ 370.365981][ T30] audit: type=1800 audit(1767726067.134:5): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3985" name="cgroup.controllers" dev="tmpfs" ino=779 res=0 errno=0 [ 372.024805][T19590] nbd: couldn't find a device at index 2 [ 372.119615][T19590] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 372.581059][T19614] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 372.806445][T19632] tipc: Enabled bearer , priority 0 [ 372.833290][T19632] syzkaller0: entered promiscuous mode [ 372.839970][T19632] syzkaller0: entered allmulticast mode [ 372.852158][T19632] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 372.882731][T19632] tipc: Resetting bearer [ 372.900694][T19631] tipc: Resetting bearer [ 372.954370][T19631] tipc: Disabling bearer [ 373.133166][T19646] netlink: 'syz.4.4039': attribute type 10 has an invalid length. [ 373.142310][T19646] __nla_validate_parse: 13 callbacks suppressed [ 373.142330][T19646] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4039'. [ 373.160589][T19645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4039'. [ 373.246703][T19646] bond2 (unregistering): Released all slaves [ 373.351490][T19655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4040'. [ 373.374873][T19655] block nbd1: Unsupported socket: should be TCP or UNIX. [ 373.389508][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4041'. [ 373.400826][T19657] syzkaller0: entered promiscuous mode [ 373.413707][T19657] syzkaller0: entered allmulticast mode [ 373.827024][T19666] netlink: 'syz.5.4044': attribute type 9 has an invalid length. [ 373.845245][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4044'. [ 374.201669][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4055'. [ 374.247158][T19706] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4055'. [ 374.320967][T19715] netlink: 'syz.1.4058': attribute type 12 has an invalid length. [ 374.555275][T19730] netlink: 'syz.1.4062': attribute type 8 has an invalid length. [ 374.564905][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4062'. [ 374.836489][T19748] team0: No ports can be present during mode change [ 375.086358][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4069'. [ 375.117894][T19764] netlink: 'syz.2.4071': attribute type 1 has an invalid length. [ 375.146334][T19764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4071'. [ 375.170839][T19764] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 375.176203][T19758] 8021q: adding VLAN 0 to HW filter on device bond5 [ 375.297255][T19770] FAULT_INJECTION: forcing a failure. [ 375.297255][T19770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.311416][T19770] CPU: 1 UID: 0 PID: 19770 Comm: syz.0.4076 Not tainted syzkaller #0 PREEMPT(full) [ 375.311457][T19770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.311476][T19770] Call Trace: [ 375.311485][T19770] [ 375.311495][T19770] dump_stack_lvl+0xe8/0x150 [ 375.311528][T19770] should_fail_ex+0x414/0x560 [ 375.311568][T19770] _copy_from_iter+0x1cd/0x1630 [ 375.311604][T19770] ? __pfx__copy_from_iter+0x10/0x10 [ 375.311628][T19770] ? __build_skb_around+0x22d/0x3c0 [ 375.311653][T19770] ? __alloc_skb+0x198/0x3a0 [ 375.311675][T19770] ? netlink_sendmsg+0x642/0xb30 [ 375.311701][T19770] ? skb_put+0x11b/0x210 [ 375.311728][T19770] netlink_sendmsg+0x6b2/0xb30 [ 375.311766][T19770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.311797][T19770] ? aa_sock_msg_perm+0xf1/0x1b0 [ 375.311827][T19770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.311848][T19770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.311877][T19770] __sock_sendmsg+0x21c/0x270 [ 375.311911][T19770] ____sys_sendmsg+0x505/0x820 [ 375.311943][T19770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.311979][T19770] ? import_iovec+0x74/0xa0 [ 375.312014][T19770] ___sys_sendmsg+0x21f/0x2a0 [ 375.312042][T19770] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.312102][T19770] ? __fget_files+0x2a/0x420 [ 375.312128][T19770] ? __fget_files+0x3a0/0x420 [ 375.312165][T19770] __x64_sys_sendmsg+0x19b/0x260 [ 375.312193][T19770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.312227][T19770] ? __pfx_ksys_write+0x10/0x10 [ 375.312259][T19770] do_syscall_64+0xec/0xf80 [ 375.312281][T19770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.312300][T19770] ? trace_irq_disable+0x37/0x100 [ 375.312341][T19770] ? clear_bhb_loop+0x60/0xb0 [ 375.312366][T19770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.312390][T19770] RIP: 0033:0x7f2b4718f749 [ 375.312408][T19770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.312426][T19770] RSP: 002b:00007f2b453f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.312448][T19770] RAX: ffffffffffffffda RBX: 00007f2b473e5fa0 RCX: 00007f2b4718f749 [ 375.312462][T19770] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 375.312475][T19770] RBP: 00007f2b453f6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.312487][T19770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.312499][T19770] R13: 00007f2b473e6038 R14: 00007f2b473e5fa0 R15: 00007fff6b03d808 [ 375.312533][T19770] [ 375.835733][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 375.866804][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 375.874756][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 375.887176][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 375.905238][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 375.926877][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 375.934464][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 375.945963][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 375.963895][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 375.987339][T19788] xt_cluster: node mask cannot exceed total number of nodes [ 376.174620][T19806] FAULT_INJECTION: forcing a failure. [ 376.174620][T19806] name failslab, interval 1, probability 0, space 0, times 0 [ 376.205152][T19806] CPU: 1 UID: 0 PID: 19806 Comm: syz.4.4087 Not tainted syzkaller #0 PREEMPT(full) [ 376.205183][T19806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.205197][T19806] Call Trace: [ 376.205206][T19806] [ 376.205215][T19806] dump_stack_lvl+0xe8/0x150 [ 376.205249][T19806] should_fail_ex+0x414/0x560 [ 376.205288][T19806] should_failslab+0xa8/0x100 [ 376.205317][T19806] kmem_cache_alloc_noprof+0x88/0x710 [ 376.205349][T19806] ? __netlink_lookup+0xbd/0x8a0 [ 376.205378][T19806] ? skb_clone+0x212/0x3a0 [ 376.205410][T19806] skb_clone+0x212/0x3a0 [ 376.205441][T19806] __netlink_deliver_tap+0x404/0x850 [ 376.205481][T19806] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.205509][T19806] netlink_deliver_tap+0x19c/0x1b0 [ 376.205538][T19806] netlink_unicast+0x7fa/0x9e0 [ 376.205572][T19806] ? __pfx_netlink_unicast+0x10/0x10 [ 376.205595][T19806] ? __alloc_skb+0x198/0x3a0 [ 376.205617][T19806] ? netlink_sendmsg+0x642/0xb30 [ 376.205642][T19806] ? skb_put+0x11b/0x210 [ 376.205669][T19806] netlink_sendmsg+0x805/0xb30 [ 376.205707][T19806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.205739][T19806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 376.205769][T19806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.205789][T19806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.205818][T19806] __sock_sendmsg+0x21c/0x270 [ 376.205853][T19806] ____sys_sendmsg+0x505/0x820 [ 376.205885][T19806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.205930][T19806] ? import_iovec+0x74/0xa0 [ 376.205960][T19806] ___sys_sendmsg+0x21f/0x2a0 [ 376.205989][T19806] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.206055][T19806] ? __fget_files+0x2a/0x420 [ 376.206081][T19806] ? __fget_files+0x3a0/0x420 [ 376.206123][T19806] __x64_sys_sendmsg+0x19b/0x260 [ 376.206152][T19806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.206190][T19806] ? __pfx_ksys_write+0x10/0x10 [ 376.206224][T19806] do_syscall_64+0xec/0xf80 [ 376.206246][T19806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.206266][T19806] ? trace_irq_disable+0x37/0x100 [ 376.206294][T19806] ? clear_bhb_loop+0x60/0xb0 [ 376.206320][T19806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.206341][T19806] RIP: 0033:0x7fe7f298f749 [ 376.206359][T19806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.206378][T19806] RSP: 002b:00007fe7f3877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.206401][T19806] RAX: ffffffffffffffda RBX: 00007fe7f2be5fa0 RCX: 00007fe7f298f749 [ 376.206417][T19806] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 376.206431][T19806] RBP: 00007fe7f3877090 R08: 0000000000000000 R09: 0000000000000000 [ 376.206444][T19806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.206457][T19806] R13: 00007fe7f2be6038 R14: 00007fe7f2be5fa0 R15: 00007fff89c299b8 [ 376.206493][T19806] [ 377.281591][T19855] netlink: 'syz.0.4105': attribute type 1 has an invalid length. [ 377.436448][T19867] Cannot find del_set index 49151 as target [ 377.829078][T19895] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 377.872327][T19887] ip6gretap1: entered promiscuous mode [ 377.878355][T19887] ip6gretap1: entered allmulticast mode [ 377.884689][T19887] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 378.149263][T19908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.165478][T19913] FAULT_INJECTION: forcing a failure. [ 378.165478][T19913] name failslab, interval 1, probability 0, space 0, times 0 [ 378.180676][T19913] CPU: 1 UID: 0 PID: 19913 Comm: syz.0.4124 Not tainted syzkaller #0 PREEMPT(full) [ 378.180707][T19913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.180721][T19913] Call Trace: [ 378.180730][T19913] [ 378.180740][T19913] dump_stack_lvl+0xe8/0x150 [ 378.180784][T19913] should_fail_ex+0x414/0x560 [ 378.180825][T19913] should_failslab+0xa8/0x100 [ 378.180855][T19913] kmem_cache_alloc_noprof+0x88/0x710 [ 378.180890][T19913] ? skb_clone+0x212/0x3a0 [ 378.180923][T19913] skb_clone+0x212/0x3a0 [ 378.180956][T19913] __netlink_deliver_tap+0x404/0x850 [ 378.180999][T19913] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.181029][T19913] netlink_deliver_tap+0x19c/0x1b0 [ 378.181058][T19913] netlink_sendskb+0x68/0x140 [ 378.181083][T19913] netlink_unicast+0x397/0x9e0 [ 378.181117][T19913] ? __asan_memcpy+0x40/0x70 [ 378.181143][T19913] ? __pfx_netlink_unicast+0x10/0x10 [ 378.181177][T19913] netlink_rcv_skb+0x28c/0x470 [ 378.181201][T19913] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 378.181222][T19913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.181252][T19913] ? bpf_lsm_capable+0x9/0x20 [ 378.181272][T19913] ? security_capable+0x7e/0x2e0 [ 378.181298][T19913] nfnetlink_rcv+0x282/0x2590 [ 378.181326][T19913] ? lockdep_hardirqs_on+0x7b/0x110 [ 378.181343][T19913] ? __dev_queue_xmit+0x289/0x31c0 [ 378.181364][T19913] ? __local_bh_enable_ip+0xd0/0x130 [ 378.181380][T19913] ? __dev_queue_xmit+0x289/0x31c0 [ 378.181401][T19913] ? __dev_queue_xmit+0x19cb/0x31c0 [ 378.181422][T19913] ? ___sys_sendmsg+0x21f/0x2a0 [ 378.181453][T19913] ? __dev_queue_xmit+0x289/0x31c0 [ 378.181479][T19913] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 378.181503][T19913] ? __pfx___dev_queue_xmit+0x10/0x10 [ 378.181532][T19913] ? ref_tracker_free+0x63a/0x7d0 [ 378.181549][T19913] ? __asan_memcpy+0x40/0x70 [ 378.181564][T19913] ? __pfx_ref_tracker_free+0x10/0x10 [ 378.181593][T19913] ? skb_clone+0x246/0x3a0 [ 378.181617][T19913] ? __netlink_deliver_tap+0x807/0x850 [ 378.181638][T19913] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.181664][T19913] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.181692][T19913] netlink_unicast+0x82f/0x9e0 [ 378.181718][T19913] ? __pfx_netlink_unicast+0x10/0x10 [ 378.181736][T19913] ? __alloc_skb+0x198/0x3a0 [ 378.181753][T19913] ? netlink_sendmsg+0x642/0xb30 [ 378.181778][T19913] ? skb_put+0x11b/0x210 [ 378.181799][T19913] netlink_sendmsg+0x805/0xb30 [ 378.181829][T19913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.181853][T19913] ? aa_sock_msg_perm+0xf1/0x1b0 [ 378.181877][T19913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.181892][T19913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.181915][T19913] __sock_sendmsg+0x21c/0x270 [ 378.181942][T19913] ____sys_sendmsg+0x505/0x820 [ 378.181967][T19913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.181994][T19913] ? import_iovec+0x74/0xa0 [ 378.182018][T19913] ___sys_sendmsg+0x21f/0x2a0 [ 378.182047][T19913] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.182114][T19913] ? __fget_files+0x2a/0x420 [ 378.182136][T19913] ? __fget_files+0x3a0/0x420 [ 378.182167][T19913] __x64_sys_sendmsg+0x19b/0x260 [ 378.182190][T19913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.182219][T19913] ? __pfx_ksys_write+0x10/0x10 [ 378.182247][T19913] do_syscall_64+0xec/0xf80 [ 378.182264][T19913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.182281][T19913] ? trace_irq_disable+0x37/0x100 [ 378.182304][T19913] ? clear_bhb_loop+0x60/0xb0 [ 378.182325][T19913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.182342][T19913] RIP: 0033:0x7f2b4718f749 [ 378.182358][T19913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.182373][T19913] RSP: 002b:00007f2b453f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.182392][T19913] RAX: ffffffffffffffda RBX: 00007f2b473e5fa0 RCX: 00007f2b4718f749 [ 378.182405][T19913] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 378.182416][T19913] RBP: 00007f2b453f6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.182426][T19913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.182437][T19913] R13: 00007f2b473e6038 R14: 00007f2b473e5fa0 R15: 00007fff6b03d808 [ 378.182466][T19913] [ 378.707947][T19918] __nla_validate_parse: 13 callbacks suppressed [ 378.707969][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4126'. [ 378.853572][T19925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4128'. [ 378.894683][T19925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4128'. [ 378.994004][T19934] geneve2: entered promiscuous mode [ 379.006538][T19936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4132'. [ 379.206256][T19948] tipc: Enabling of bearer rejected, failed to enable media [ 379.311868][T19948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4133'. [ 379.367043][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4133'. [ 379.380531][T19948] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.387791][T19948] bridge0: port 1(bridge_slave_0) entered listening state [ 379.595339][T19962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4137'. [ 379.634156][T19962] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 379.743731][T19966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4140'. [ 379.801194][T19972] netlink: 'syz.5.4141': attribute type 5 has an invalid length. [ 379.918437][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4142'. [ 380.013845][T19980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4145'. [ 380.051297][T19984] netlink: 'syz.5.4147': attribute type 5 has an invalid length. [ 380.183736][T19991] tc_dump_action: action bad kind [ 380.258595][T19998] netlink: 'syz.5.4149': attribute type 4 has an invalid length. [ 380.267753][T19998] netlink: 'syz.5.4149': attribute type 1 has an invalid length. [ 380.605087][T20022] netlink: 'syz.1.4158': attribute type 1 has an invalid length. [ 381.161868][T20038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.455937][T20069] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 381.983703][T20112] netlink: 'syz.1.4185': attribute type 62 has an invalid length. [ 382.204767][T20124] syzkaller0: entered promiscuous mode [ 382.210506][T20124] syzkaller0: entered allmulticast mode [ 382.327065][T20134] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 382.395552][T20134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 383.385353][T20200] sit0: entered allmulticast mode [ 383.585067][T20212] netlink: 'syz.4.4217': attribute type 7 has an invalid length. [ 383.593442][T20212] netlink: 'syz.4.4217': attribute type 8 has an invalid length. [ 383.612009][T20212] erspan0: entered promiscuous mode [ 383.625152][T20212] batadv_slave_1: entered promiscuous mode [ 383.634674][T20212] batadv_slave_1: left promiscuous mode [ 383.651860][T20212] erspan0: left promiscuous mode [ 383.702198][T20222] netlink: 'syz.0.4220': attribute type 2 has an invalid length. [ 383.739436][T20222] __nla_validate_parse: 22 callbacks suppressed [ 383.739457][T20222] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4220'. [ 383.787340][T20222] netlink: 'syz.0.4220': attribute type 2 has an invalid length. [ 383.928258][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4223'. [ 383.993848][T20241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4225'. [ 384.019505][T20241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4225'. [ 384.035614][T20233] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 384.202994][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4227'. [ 384.418762][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'. [ 384.449369][T20273] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4234'. [ 384.461121][T20273] netem: invalid attributes len -24 [ 384.466382][T20273] netem: change failed [ 384.680735][T20290] netlink: 'syz.0.4237': attribute type 21 has an invalid length. [ 384.755142][T20290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4237'. [ 384.807634][T20298] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4240'. [ 384.833815][T20295] bond2: (slave ip6gretap1): making interface the new active one [ 384.848315][T20295] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 385.274269][T20328] macsec0: left allmulticast mode [ 385.409023][ T2060] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.419911][ T2060] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.106282][T20340] validate_nla: 2 callbacks suppressed [ 387.106302][T20340] netlink: 'syz.2.4253': attribute type 14 has an invalid length. [ 387.122969][T20361] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4257'. [ 387.144293][T20363] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 387.174896][T20363] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 387.439364][T20381] team0: Device ipvlan2 failed to register rx_handler [ 387.874756][T20397] bond6 (unregistering): Released all slaves [ 387.998007][T20419] netlink: 'syz.4.4273': attribute type 10 has an invalid length. [ 388.016446][T20419] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 388.624737][T20454] vlan2: entered promiscuous mode [ 388.652078][T20454] bridge0: entered promiscuous mode [ 388.666402][T20453] tipc: Enabling of bearer rejected, failed to enable media [ 389.284576][T20496] __nla_validate_parse: 3 callbacks suppressed [ 389.284599][T20496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4295'. [ 389.413865][T20501] xt_hashlimit: size too large, truncated to 1048576 [ 389.459926][T20504] FAULT_INJECTION: forcing a failure. [ 389.459926][T20504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.487093][T20504] CPU: 0 UID: 0 PID: 20504 Comm: syz.5.4299 Not tainted syzkaller #0 PREEMPT(full) [ 389.487125][T20504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.487144][T20504] Call Trace: [ 389.487154][T20504] [ 389.487162][T20504] dump_stack_lvl+0xe8/0x150 [ 389.487196][T20504] should_fail_ex+0x414/0x560 [ 389.487235][T20504] _copy_from_user+0x2d/0xb0 [ 389.487270][T20504] ___sys_sendmsg+0x158/0x2a0 [ 389.487300][T20504] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.487332][T20504] ? kstrtouint+0x6e/0xe0 [ 389.487396][T20504] ? __fget_files+0x2a/0x420 [ 389.487421][T20504] ? __fget_files+0x3a0/0x420 [ 389.487459][T20504] __sys_sendmmsg+0x227/0x430 [ 389.487492][T20504] ? __pfx___sys_sendmmsg+0x10/0x10 [ 389.487514][T20504] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 389.487567][T20504] ? ksys_write+0x22a/0x250 [ 389.487590][T20504] ? __pfx_ksys_write+0x10/0x10 [ 389.487619][T20504] __x64_sys_sendmmsg+0xa0/0xc0 [ 389.487648][T20504] do_syscall_64+0xec/0xf80 [ 389.487671][T20504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.487691][T20504] ? trace_irq_disable+0x37/0x100 [ 389.487720][T20504] ? clear_bhb_loop+0x60/0xb0 [ 389.487746][T20504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.487767][T20504] RIP: 0033:0x7f87e7b8f749 [ 389.487787][T20504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.487806][T20504] RSP: 002b:00007f87e8991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 389.487829][T20504] RAX: ffffffffffffffda RBX: 00007f87e7de5fa0 RCX: 00007f87e7b8f749 [ 389.487845][T20504] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 0000000000000004 [ 389.487858][T20504] RBP: 00007f87e8991090 R08: 0000000000000000 R09: 0000000000000000 [ 389.487871][T20504] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 389.487883][T20504] R13: 00007f87e7de6038 R14: 00007f87e7de5fa0 R15: 00007ffe1dbf9918 [ 389.487917][T20504] [ 389.860380][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4304'. [ 390.082827][T20534] netlink: 'syz.5.4307': attribute type 24 has an invalid length. [ 390.200901][T20539] FAULT_INJECTION: forcing a failure. [ 390.200901][T20539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.233904][T20539] CPU: 0 UID: 0 PID: 20539 Comm: syz.4.4312 Not tainted syzkaller #0 PREEMPT(full) [ 390.233933][T20539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.233954][T20539] Call Trace: [ 390.233962][T20539] [ 390.233971][T20539] dump_stack_lvl+0xe8/0x150 [ 390.234005][T20539] should_fail_ex+0x414/0x560 [ 390.234042][T20539] _copy_from_user+0x2d/0xb0 [ 390.234068][T20539] __copy_msghdr+0x3c5/0x5b0 [ 390.234099][T20539] ___sys_sendmsg+0x1a5/0x2a0 [ 390.234126][T20539] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.234154][T20539] ? kstrtouint+0x6e/0xe0 [ 390.234213][T20539] ? __fget_files+0x2a/0x420 [ 390.234239][T20539] ? __fget_files+0x3a0/0x420 [ 390.234275][T20539] __sys_sendmmsg+0x227/0x430 [ 390.234306][T20539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 390.234329][T20539] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 390.234379][T20539] ? ksys_write+0x22a/0x250 [ 390.234403][T20539] ? __pfx_ksys_write+0x10/0x10 [ 390.234431][T20539] __x64_sys_sendmmsg+0xa0/0xc0 [ 390.234459][T20539] do_syscall_64+0xec/0xf80 [ 390.234481][T20539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.234501][T20539] ? trace_irq_disable+0x37/0x100 [ 390.234529][T20539] ? clear_bhb_loop+0x60/0xb0 [ 390.234555][T20539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.234574][T20539] RIP: 0033:0x7fe7f298f749 [ 390.234592][T20539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.234611][T20539] RSP: 002b:00007fe7f3877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 390.234634][T20539] RAX: ffffffffffffffda RBX: 00007fe7f2be5fa0 RCX: 00007fe7f298f749 [ 390.234649][T20539] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 0000000000000004 [ 390.234664][T20539] RBP: 00007fe7f3877090 R08: 0000000000000000 R09: 0000000000000000 [ 390.234677][T20539] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 390.234690][T20539] R13: 00007fe7f2be6038 R14: 00007fe7f2be5fa0 R15: 00007fff89c299b8 [ 390.234726][T20539] [ 390.437708][ T31] INFO: task syz.3.1928:12867 blocked for more than 143 seconds. [ 390.446067][ T31] Not tainted syzkaller #0 [ 390.451116][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.460009][ T31] task:syz.3.1928 state:D stack:24648 pid:12867 tgid:12865 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 390.472159][ T31] Call Trace: [ 390.475500][ T31] [ 390.478530][ T31] __schedule+0x149b/0x4fd0 [ 390.483142][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 390.488318][ T31] ? trace_sched_exit_tp+0x36/0xf0 [ 390.494336][ T31] ? __schedule+0x14b1/0x4fd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 390.499264][ T31] ? __pfx___schedule+0x10/0x10 [ 390.504273][ T31] ? schedule+0x91/0x360 [ 390.508650][ T31] schedule+0x165/0x360 [ 390.512958][ T31] schedule_timeout+0x9a/0x270 [ 390.517861][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 390.523289][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 390.528792][ T31] ? preempt_schedule_common+0x83/0xd0 [ 390.534295][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 390.539784][ T31] ? wait_for_completion+0x267/0x5d0 [ 390.545150][ T31] wait_for_completion+0x2bf/0x5d0 [ 390.550425][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 390.556112][ T31] ? disable_device+0x137/0x320 [ 390.561070][ T31] ? remove_client_context+0xc0/0x1e0 [ 390.566500][ T31] disable_device+0x1c6/0x320 [ 390.571749][ T31] ? __pfx_disable_device+0x10/0x10 [ 390.577058][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 390.582487][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 390.588708][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 390.595320][ T31] nldev_dellink+0x2d1/0x320 [ 390.600790][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 390.606067][ T31] ? apparmor_capable+0x137/0x1a0 [ 390.611213][ T31] ? bpf_lsm_capable+0x9/0x20 [ 390.615933][ T31] ? security_capable+0x7e/0x2e0 [ 390.620971][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 390.626160][ T31] rdma_nl_rcv+0x6ae/0x980 [ 390.630745][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 390.635790][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.641118][ T31] netlink_unicast+0x82f/0x9e0 [ 390.645946][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 390.651409][ T31] ? __alloc_skb+0x198/0x3a0 [ 390.656071][ T31] ? netlink_sendmsg+0x642/0xb30 [ 390.661197][ T31] ? skb_put+0x11b/0x210 [ 390.665487][ T31] netlink_sendmsg+0x805/0xb30 [ 390.670856][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.676237][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.681351][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.686819][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.692171][ T31] __sock_sendmsg+0x21c/0x270 [ 390.697893][ T31] ____sys_sendmsg+0x505/0x820 [ 390.702748][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.797033][ T31] ? import_iovec+0x74/0xa0 [ 390.826736][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 390.831605][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.886830][ T31] ? futex_wait+0x285/0x360 [ 390.891481][ T31] ? __fget_files+0x2a/0x420 [ 390.896121][ T31] ? __fget_files+0x3a0/0x420 [ 390.927210][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 390.932263][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.937981][ T31] ? rcu_is_watching+0x15/0xb0 [ 390.944373][ T31] do_syscall_64+0xec/0xf80 [ 390.956541][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.962995][ T31] ? trace_irq_disable+0x37/0x100 [ 390.968186][ T31] ? clear_bhb_loop+0x60/0xb0 [ 390.972914][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.979326][ T31] RIP: 0033:0x7f117358f749 [ 390.983793][ T31] RSP: 002b:00007f11743e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.992342][ T31] RAX: ffffffffffffffda RBX: 00007f11737e5fa0 RCX: 00007f117358f749 [ 391.000748][ T31] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000003 [ 391.010528][ T31] RBP: 00007f1173613f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.019503][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.027798][ T31] R13: 00007f11737e6038 R14: 00007f11737e5fa0 R15: 00007ffc27dc1f38 [ 391.035882][ T31] [ 391.058667][ T5846] Bluetooth: hci5: command 0x0405 tx timeout [ 391.076852][ T31] [ 391.076852][ T31] Showing all locks held in the system: [ 391.084680][ T31] 1 lock held by khungtaskd/31: [ 391.089674][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 391.121455][ T31] 6 locks held by kworker/u9:1/5150: [ 391.131293][ T31] #0: ffff888069c43148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 391.143093][ T31] #1: ffffc9000f14fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 391.155925][ T31] #2: ffff888026b5cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 391.166391][ T31] #3: ffff888026b5c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 391.176368][ T31] #4: ffffffff8f483948 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 391.197183][ T31] #5: ffff888054c9cb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 391.224284][ T31] 2 locks held by getty/5588: [ 391.229482][ T31] #0: ffff88814d8cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 391.257025][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 391.287084][ T31] 2 locks held by kworker/1:10/8646: [ 391.292533][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 391.336662][ T31] #1: ffffc90002f87bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 391.377399][ T31] 4 locks held by kworker/u8:31/10852: [ 391.382933][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 391.419204][ T31] #1: ffffc90003c4fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 391.458193][ T31] #2: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 391.497007][ T31] #3: ffff88807516c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 391.530537][ T31] 2 locks held by syz.3.1928/12867: [ 391.535822][ T31] #0: ffffffff99c80df8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 391.586996][ T31] #1: ffff88807516c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 391.617058][ T31] 1 lock held by syz-executor/13652: [ 391.626931][ T31] 1 lock held by syz-executor/15757: [ 391.632371][ T31] 1 lock held by syz-executor/16128: [ 391.639973][ T31] 1 lock held by syz-executor/16368: [ 391.645325][ T31] 1 lock held by syz.2.4311/20535: [ 391.650877][ T31] #0: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 391.662853][ T31] [ 391.665287][ T31] ============================================= [ 391.665287][ T31] [ 391.674176][ T31] NMI backtrace for cpu 1 [ 391.674195][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.674218][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.674229][ T31] Call Trace: [ 391.674237][ T31] [ 391.674245][ T31] dump_stack_lvl+0xe8/0x150 [ 391.674275][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 391.674300][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.674333][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 391.674361][ T31] sys_info+0x135/0x170 [ 391.674380][ T31] watchdog+0xf95/0xfe0 [ 391.674408][ T31] ? watchdog+0x20a/0xfe0 [ 391.674437][ T31] kthread+0x711/0x8a0 [ 391.674463][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.674487][ T31] ? __pfx_kthread+0x10/0x10 [ 391.674511][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.674538][ T31] ? __pfx_kthread+0x10/0x10 [ 391.674560][ T31] ret_from_fork+0x510/0xa50 [ 391.674579][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.674594][ T31] ? __switch_to+0xc9e/0x1480 [ 391.674622][ T31] ? __pfx_kthread+0x10/0x10 [ 391.674646][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.674686][ T31] [ 391.674692][ T31] Sending NMI from CPU 1 to CPUs 0: [ 391.800954][ C0] NMI backtrace for cpu 0 [ 391.800974][ C0] CPU: 0 UID: 0 PID: 13652 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 391.800995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.801007][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 391.801037][ C0] Code: e8 bf eb 1f 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 a0 f3 d8 10 e8 db ae b2 09 89 c3 83 f8 08 73 65 [ 391.801059][ C0] RSP: 0018:ffffc9000545f788 EFLAGS: 00000202 [ 391.801075][ C0] RAX: 0000000000000001 RBX: ffffffff8184abac RCX: ffff888053983d00 [ 391.801089][ C0] RDX: 000000005a44979c RSI: ffffffff8d975f50 RDI: ffffffff8bc083e0 [ 391.801102][ C0] RBP: dffffc0000000000 R08: ffffffff8173fd65 R09: ffffffff8df41aa0 [ 391.801117][ C0] R10: ffffc9000545f8b8 R11: ffffffff81acf3d0 R12: 1ffff92000a8bf0d [ 391.801130][ C0] R13: ffffc9000545f8a0 R14: ffffc9000545f868 R15: ffffffff8173fd65 [ 391.801144][ C0] FS: 0000000000000000(0000) GS:ffff888125e21000(0000) knlGS:0000000000000000 [ 391.801159][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.801172][ C0] CR2: 0000555d22df5000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 391.801188][ C0] Call Trace: [ 391.801195][ C0] [ 391.801201][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 391.801223][ C0] unwind_next_frame+0xd4/0x23d0 [ 391.801249][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 391.801270][ C0] ? do_exit+0x694/0x22f0 [ 391.801295][ C0] ? do_group_exit+0x21c/0x2d0 [ 391.801321][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 391.801350][ C0] arch_stack_walk+0x11c/0x150 [ 391.801375][ C0] ? do_group_exit+0x21c/0x2d0 [ 391.801402][ C0] stack_trace_save+0x9c/0xe0 [ 391.801429][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 391.801463][ C0] save_stack+0xf5/0x1f0 [ 391.801483][ C0] ? __pfx_save_stack+0x10/0x10 [ 391.801499][ C0] ? __free_frozen_pages+0xbc8/0xd30 [ 391.801517][ C0] ? vfree+0x25a/0x400 [ 391.801542][ C0] ? kcov_close+0x28/0x50 [ 391.801566][ C0] ? __fput+0x44c/0xa70 [ 391.801588][ C0] ? task_work_run+0x1d4/0x260 [ 391.801612][ C0] ? do_exit+0x694/0x22f0 [ 391.801634][ C0] ? do_group_exit+0x21c/0x2d0 [ 391.801669][ C0] __reset_page_owner+0x71/0x1f0 [ 391.801689][ C0] __free_frozen_pages+0xbc8/0xd30 [ 391.801713][ C0] vfree+0x25a/0x400 [ 391.801754][ C0] ? __pfx_kcov_close+0x10/0x10 [ 391.801778][ C0] kcov_close+0x28/0x50 [ 391.801800][ C0] __fput+0x44c/0xa70 [ 391.801831][ C0] task_work_run+0x1d4/0x260 [ 391.801858][ C0] ? __pfx_task_work_run+0x10/0x10 [ 391.801884][ C0] ? kmem_cache_free+0x197/0x620 [ 391.801902][ C0] ? do_exit+0x68f/0x22f0 [ 391.801928][ C0] do_exit+0x694/0x22f0 [ 391.801957][ C0] ? __pfx_do_exit+0x10/0x10 [ 391.801979][ C0] ? do_raw_spin_lock+0x121/0x290 [ 391.802011][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.802041][ C0] do_group_exit+0x21c/0x2d0 [ 391.802074][ C0] __x64_sys_exit_group+0x3f/0x40 [ 391.802098][ C0] x64_sys_call+0x2210/0x2210 [ 391.802123][ C0] do_syscall_64+0xec/0xf80 [ 391.802141][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.802158][ C0] ? trace_irq_disable+0x37/0x100 [ 391.802182][ C0] ? clear_bhb_loop+0x60/0xb0 [ 391.802202][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.802219][ C0] RIP: 0033:0x7f87e7b8f749 [ 391.802234][ C0] Code: Unable to access opcode bytes at 0x7f87e7b8f71f. [ 391.802243][ C0] RSP: 002b:00007ffe1dbf9b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 391.802260][ C0] RAX: ffffffffffffffda RBX: 00007f87e7c1585d RCX: 00007f87e7b8f749 [ 391.802273][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 391.802284][ C0] RBP: 00007f87e7c1586f R08: 00007ffe1dbf7927 R09: 00000000000927c0 [ 391.802296][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 391.802307][ C0] R13: 00000000000927c0 R14: 000000000005f42c R15: 00007ffe1dbf9d30 [ 391.802330][ C0] [ 392.309603][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 392.316550][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 392.325701][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.335804][ T31] Call Trace: [ 392.339119][ T31] [ 392.342079][ T31] vpanic+0x1e0/0x670 [ 392.346117][ T31] panic+0xb9/0xc0 [ 392.349886][ T31] ? __pfx_panic+0x10/0x10 [ 392.354348][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 392.359771][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 392.365976][ T31] watchdog+0xfdf/0xfe0 [ 392.370708][ T31] ? watchdog+0x20a/0xfe0 [ 392.375129][ T31] kthread+0x711/0x8a0 [ 392.379256][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.383977][ T31] ? __pfx_kthread+0x10/0x10 [ 392.388617][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.393880][ T31] ? __pfx_kthread+0x10/0x10 [ 392.398530][ T31] ret_from_fork+0x510/0xa50 [ 392.403162][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.408319][ T31] ? __switch_to+0xc9e/0x1480 [ 392.413047][ T31] ? __pfx_kthread+0x10/0x10 [ 392.417685][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.422511][ T31] [ 392.426175][ T31] Kernel Offset: disabled [ 392.430528][ T31] Rebooting in 86400 seconds..