last executing test programs: 7.608544423s ago: executing program 4 (id=15292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x83, 0x7, 0x1, 0x0, "76bbcdc659125711406a55bff062dcbe2dc5bfff90340580edffc31adf0d8727efce614facdcaf7db9d77b115f74685ff5802ba36ee0f1bc806af0b855c210802320adb85831606a49fd63ef93149c1ac7f14cda19c50db0e6ca36e0b91f64f16bdb287d0c557c773bb133f73b1febcbfe8178fe6fc96e3c0105f5adb4e44b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x128}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x78}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x80, r3, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bf028a8860dbb9b40acc548e5f"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "ed0e41f6662e6a"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "5586"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, "1748"}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "5463ae0ad50e7783f925ffa150"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0)="ca", 0x1006, r5, 0x0, 0xd88d02a0}, 0x38) (async) recvmsg(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff61, 0x0}, 0x10163) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000000)=@default) 7.410403496s ago: executing program 4 (id=15294): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, 0x0, 0x22020) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 7.210654266s ago: executing program 4 (id=15295): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c001480080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x3e0, 0x15, 0x100, 0x70bd25, 0x25dfdbfd, {0x4}, [@generic="a83550e50c2baa5a9e31235a3c6cd5cb5f245fba2e30251e01c19e60f57f5faaffa185810a0f39f3a4b9136383d85f0838260a9735c3f092b28449c18bcce6877c302ad7f21dc6552d9203a77439cbc54b4d2cf59dc22781897c71bbb8eff0a9b8f207ceea96f9bb7960d8c3db4451cd80e8a22827129c43998132abc1d6a1c656d215f69991e5f94c394e31637248dfe3d17b3258c7f174c57841e1ad4f0aa32bab74651c65b4537f047401ef2647653eefbcb9fd11f7ccca2b5ff4ef3c5d70c2793f439f7442d186027704cc5a46eb6e22e77dd076538b7715919fcace45a7936acb6c288e93c985b7", @generic="426e307d57c7febf7d63e34edf3d3ec05c1d50b915378473e9decbbb207f0216c40bb3983ef5200a813f9c9e5a3c4455225dcfa7e5", @nested={0x17a, 0x5, 0x0, 0x1, [@generic="50b4d2cff6f0943399e9f0bb37471e33377757ee4234efab4e7281f141c5295534855f50c3ce16da67f5102b4242fd0e2becd8bc1901f43af9f627bf592dbacf79a5e214f6f67b956196ea942c9ea055a6d30e2fb637241dedd28c03a40d14ff316c2feb3df209780afedcad64786ef2aa89dfc73cfab54696b47049877021b4865d64d5b7a8f622a12011403990a02e637fdb2bc98fb2934cc5a324b276b9634ac87aed5ce7671bf37c439d012a890756b98282c0089acc7aadaeae202c6eb2cefe53ca967dc1052089157b7e0917c10a46c960c5d9936e3504d34bf3aaab58e070f98bd615f68eb21e7cba2d", @generic="99254c9cc3e8843b572b43fe3d0a581e280e45f038d9d8365b10ab45879dd701577b189b6ecfb35e3d6f2fa330f88fa1f065e94381a0ebe2ab1e01ba712c6e5ea61a928afa1d6c48fdc1317d000da1216ee61b09e23802b6d95aeba71f032c5c54faaff14de99b34a8c419c3f335d7c7603e08d12048eaa967ae5d59e92c8a4529095f4db2921f9c7b"]}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@loopback}, @nested={0x53, 0x145, 0x0, 0x1, [@generic="face732257fa64fb5591071089d18ca7eec80d2834c5f7867ac578cc8b7840610bd25634a16924e0b6e6e10d5b838912497334ce120e5c5bfeb9c3571926331ab87ee9fdc67a21", @typed={0x8, 0x10b, 0x0, 0x0, @pid=r1}]}, @generic="00c55db925ae5e544fcebcaa6bab6986b9e620036a2344cce3af1dc771c5ffe47ee4be58603d", @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x96, 0x13a, 0x0, 0x1, [@generic="1dbf0ce03533e1ee40ba2cae1f32a15c076875bddc97974cfe3daf1a2f7a88526f69c961da3c83214781b39c41f6764d4a89da1462dd70480ee24c65f2b7de74c1a23f5c84f96c9c21a017f8077375e5ac5d90a06992866d9d6d779e0204ac06ea90724b18ed4261575965425eb79feb7f8d799e8f27ade30648f6805fc0f708711d0f7a01e34c483f5c408e1bbb50f93561"]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 6.836711937s ago: executing program 4 (id=15299): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x1000, 0x81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb59c}, [@alu={0x4, 0x1, 0xd, 0xb, 0x9, 0x0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xf, 0x6, 0x8, 0xfffffffffffffffc, 0xfffffffffffffff0}, @generic={0x6, 0x8, 0x4, 0x9, 0x7fffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @generic={0x4, 0x3, 0x0, 0x100, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x101, 0x33, &(0x7f00000000c0)=""/51, 0x40f00, 0x12, '\x00', r1, 0x6, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0x4, 0xfffffe00, 0x8}, 0x10, 0x1bc7a, r0, 0x1, &(0x7f0000000200)=[r0, r0, r2, r0, r0], &(0x7f0000000240)=[{0x2, 0x1, 0x1, 0x1}], 0x10, 0x89b}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x1000, 0x81) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb59c}, [@alu={0x4, 0x1, 0xd, 0xb, 0x9, 0x0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xf, 0x6, 0x8, 0xfffffffffffffffc, 0xfffffffffffffff0}, @generic={0x6, 0x8, 0x4, 0x9, 0x7fffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @generic={0x4, 0x3, 0x0, 0x100, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x101, 0x33, &(0x7f00000000c0)=""/51, 0x40f00, 0x12, '\x00', r1, 0x6, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0x4, 0xfffffe00, 0x8}, 0x10, 0x1bc7a, r0, 0x1, &(0x7f0000000200)=[r0, r0, r2, r0, r0], &(0x7f0000000240)=[{0x2, 0x1, 0x1, 0x1}], 0x10, 0x89b}, 0x94) (async) 6.372179328s ago: executing program 4 (id=15302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000240cd"], 0x40}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) getsockname$packet(r3, 0x0, &(0x7f0000000240)) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000240)="e79a3b042bf27c6633a94cf9e667eb809cd704844e3c201a7c84b6506ff10e803f469e2b49bf9cc435e32c0c4303d337bbd1745c2a1a7d1234d5eeda044564123d4d77c8004c31450cb85cf6065509edb9f47195a6235814eb07e060ea6adad83e96b26b3b6e23ea7cf3903e8dd74e1488923ba20bfdb7df82c4ded3b1f8e75389c71a6165cab8edbec03325131e49b942bad602e5d7838abda4053c8f9a95d5e49016dd57b622041de3f57ec9c16c4a152da4630f4cde70f2a57d383fc7812150abecd200343ec679abaab0eeff64cdd9fd6324e1437aed66aff4b4de243e160f19726e2f6e5c1b4c7a78bca9010a7176cd360bd35c41c46f6725dc08ba7342373d96c992683b6a50df21340d59326c8fe4da2dfc50fefcbe837e7af8dab7202b26131ab638114ee6bf75c6239a70f974b40620c426921dd77a28feb7cf0cf72277f50a2fdb433347b8a42ca0d17f1750a9c9679f1d3d8947786237a90d4bb4487e9e3521c650300692ec0ba512c2b4fdbd4400d49ede9db59ac3d187c2431d8e8b9d4426059acdf97eeebcf513d989824287f6de515528b894e9a6a52f06a97f182e3a833fa5f74a83966832bb42fca6f369ded1f1fe2f5d0b6c0321370c92ede9d66a2017ceb94bd643d082c86f8ea1ba58e4c19ac0d6c4818f6259e1406b63bbe6ffd1e1641a0f4a3deafa27bed9a34312b1f73c2da5faaddb044ba093a9c97e83eac3a4c740d04a4c7aadfe38d217b4eaa34ccde161cf9e8e39dd34c4fdd13faa509ee06a99f4d9dab4d62f911a0aa3f2ab83c8941ee7bee365b4c293ef8b966a764bfabb36b5e2577fe54149aff32ed057d2861f11ff6ec153cba59a67b18cadf55a1b8471329372489e948ee88c4d02ed7142e0ccb4bce35bfcb39302fa9ce88ebf70631480e1a706d45bfaffef03e8c75ea317cfa2e858f3015a2616d7f90b8842109761e1158beffbae1cbf9df0aed45ddb5390fe2ae481d20c938092595fa44cf4dc7b22ed4afadb704c9524288be268d8f7507d2aa9f5c86a1bf956bc1cbdae79877f96f8a6a381a29b822639beccd6556b22be1487cc848ffda269ba20696819404a89ef2ca5c5b7eaa9d76ee19337a214bae54d828c412e1f887e0486ead88b935b0d7a4f7d3942019efb35648c9418cdd149e88db8d91546a1347c11221ae0e4e099607a8d66be3409bdc2a13dd28cbe2a9edabf5f3a588480ed89f763c00ef06ff021a3ceadfd122a4c8cb9a945581742f5b00e6a2356b5ba0f9f67b8268391c78b2a8306f56dad08b601bcacb4528e3b8ea9e05fd6e1521d76e40d18a2a2d75f884715f9c5817177bfa061aaa57f99deda434d34fd4763653d3c26cf9aae0c5a23ea358a9395c1903dd65933432b919116e5bfd2bc1f8eda21c16db1e702a6f0cf6ce69e09a1f39d3bddb2fa0e04a13f147f9e4bd2874b1a9b5474410b7c4cb6a6557db987c78ba496d398f15b66499e56f6f34edcd249d792add902ab065c6090291d0454b1bdc142d6e94785986158dc9ddda85e79ad6459e134356df833dd1b86d288e097eeeae4462e095e4786de8e7464c52df968fe8841ad65e19acc8f74ea556c5e722a9c34d72d4430a170c00e7f5b810372fbe469f7dd578ab0f20c1ccf65e49ab470c05d014aeb81baa179856f8f38c9885c389e207807a76f88431de528c5a01f91464b463ce09ec1b3d7ce499be09f5fe823036d95bcc62af1cb724c8cecc98c30efb2402a98127b7ac1170646313d2698bc2d266419a4a7401273bdec932eb71e7dde0989cb55ffd148d92860e7f92fb7cb974765f40aa56682559f6f9afaef47e90b4928d21c5f0d4be08bd650c51a471efdf577e5e638e16c8ca0f0cebe29676eff1d8f41dba257da8a391ee66e70aa137d5e9398c00c18f85082415e4afafcd39e17ae0b8ad91bf2f2a2535718dd3a58a404b096239f920fcdbb192a7c18a23f6c69d4e508f654b2ddf776979b7dfaa8a0bbc205d0c4fc7d3b5dfc95c30410f619cd83717058813cf4aa873ef9e056a43d6f2364cb659a3bd9fffcf6f7fe9219fb405e4a94659a261edc45621e25a07ed042aafcee8e31a3f9711848deb18934afbc17db15dd6ce67c80b7af427f463f8e1af9501ba34206eb9b0d3c9eeb2e4ebde9d3196b32e2cfbb541cc37580d49461ec212b6e2c5e598fee2225686ba7776bf9f10b74a48440c6a2d46de15d5485253219c38029b9303615156ae686ab85f45729bb1177c9f7524b73adee4c0389306ccf77438193264670d82787620ee6f12f59a29c624c2c77eecd13e6961597281358b987d78fc147705cda1ea381d12c3df60cfd6c3ee805c009f6fdc6ef35ed466c7feb6456e5dbfbfbcb48593f3d7f8902479e311cd91b18055b0e70696ad84e03f16aa3359cc3c73268d6e8cb3aeb6b7982ac514329af3dc42aef5ffc1b5ba8a640e561f50e117349a3d449c1d455fd86db9d5f4f3f2354f21bbad995f32b8c14a18b07e988b6e2645264b340a440d8057a0bbd1cc8757bd3d7c5fb23cd6f35f17a89f376ffb5e41abde206c71fdb9eccbfed21042da32acec184518eaae401b5b735656ff68d538e9df9124c07c550cb2b3ffbead0377c4753917f43d8ab5970ce62518a3db53edfa1640cc9e292b938257715c96c4fa658d2573f2da52d5624644802e5a1cce789c8032e7f21e050e6751894226f4c1ec021f466c27fc6a322dc44dfd8ca89f68fc71f6434ef537c874721423ee11ffae16a3bf36cbc9b1322c353b72a6c5b5c7750550b44078286598eca8596273f161f4a4511416f3f9b029c223e6111e4c9684142929e69852f8dae363a13d206870ae421cff261901803569f9adc8a9d1feab620cbd0afc1affe85fa0c44de323e215e33ba587d14643dd1e0a6f8f5c77271cbd558151e0ece8086e0231a94dcfb4738e282859762869abb4e1ec5fd9fbc73ac730e863e67fbddca95a14cec774402d01d3f51da22bea1e7cf8101d66b44b9e63ec0ce00c27e73db0144214691d101552238a12bceb3e4a752d56f595a71cbc13dffb6999f1f629808cd42ac43a0546b2557b3a553f914669ed2c559856289a7a8a0ebb7d6f05f33540ed72a16fca37d1423ed655c23f4cbc9b5698552f82269cd49d95eecf5b6be269fe3a15b296f5de66aa26d1bdb40e1665a46dd979bf13deec7e26dac36a7ff09602767d2edc0650732c88baff1af78138d1fefcd0253533d610c71eb935fa188bc73f8a2a37bf8278935a8fdc5a168292fa908a665a6f847fef543e88de6e92323cfa8338c9d612ad27370c7b40e65e7d5322b08259f1c82a357da95e861381a9d5ee85291d82e850902b1cb7c9d69d27f2a02cfdb9667845de392b32839aca4eb4a77513f1b7fe1628d3e36b4f8fccf7744d62aac8fe45be9587cc99b73d2c85603138428335012cca99b9a54d697fe78c3d0ffd23d4d7d715f79f51e25536289a2fcd5cdb51a26eb78961147bec185df4b8c69f59d078ade06801e95486be09321b82caaca79a8faef06b51159fec00b41af88e5f1738b658b83be0150587688ca93fc58bde5a4b047a911cf12ecdfe22bb05d62b5e0ca3c221b083739d1bb516e3fe9af6c8e46aa1ea8850d56b358b228cf5419f3d0046b91b82f57536bedbf57e91fc5afeb09886d34dfeb2908288435b4729ccde0f4c93bf89f546344a0faa738b31309c0eb7405e7f3983f01d2f727fb083c48f8f956b9c361c9019775175e5d40f03ac922dcdaf7f6f0f919529de111e9c30af0d7f6819b0cb73ad81fe90c20d172e47166e081ba036356c1f08e54a2cff7d4a75f980a1196781f6c394b643a1502a35b8cce4c81389706f4d5635f0e408fb3f3daf5ec3b158422bf06a625dd5e6b4ac03f2c09d533033c9b4150ec7b2af76c07785f938f2517aa61cc03b78450dc5016ca3f0bdf7dd268ef2a3be14ff58500668690671e99700367fab60c41ad00dfca04b8a17f3efd02028625d6c0370b1839d81f080a9d3bcc7d533c5484f8c477da3ba6d8ad936f38b9c6349def8510039eb3ebf51a6b87eb326950eb07a23201d512bc55ebea4fcd76d1c0ea753a06664721f7e6f17a523ac8bd46efca9f83356f822fffb68902312ac71f1f04c2e6e981c8171fc385ddda1c3d2245159d862434c24b67484f1b1d21ae51151545708e6715bebb17a3649c715f4f76a634a7265ab0614ad58d33e1f1ec644e3416ac6927b97061ffa97143aae01fdbb04d5c0e9556673323ef0e80f2374b7d5089ed4fa6a998a9d370a6d505f1446371a35d487ed322fb2ee3fcafa8d98fd3b7578e2acd8829b800fea325ca78cd37b71cab9f2752ff27786558328846454376374b076aa80a38c0158768e395a7de026a0285c134c826be1cf63a8c8894ecdd69ea370340c72a96aee4c8af4290c7994843f5a74efb9507e97d73ca14940148695713cb1235d85e22232089c740ffd325a795acf23fa06cffd105927be61543e4935439da14e72e0edc6e1eea1f093ec972d2f209354cfeaeaee603a072d6b8b16b6619fefe44079db260bd1c5689c8284f3179dc1ba5aeafe2666e68874b7ee37ca01fb16925ac9e8fcb57084ac18e2551768b03946857f0a28b9648c131c473584de68cd7033fda2ae79fdb446b4ec26e5fb6872b52ac37c768c69346e732697804a817de3391a70369e9f43ecae9b9fae9b79cd5abf1980497fb2ed8dc7847d09e7a1c3f3a3cfc8818392f6c23a1e2820b4796b1df6cc35222a933812308fad609fd21c8574cd5c658069040193cbab90102424ba6a86916d4f3ea24dfbd1f49aa7c37b6192f77ece56d8021d6ae4849211784b4b5165b2425a7ae9e0037de3de16eccfb4a3da7cb4e59cfd06a0e085c6d90e0b3c17b9e47963452870e8e4ecc1086deff50b78599e14f538c7a78ebb34179d653e92e566a29327d06cbc4ce8e975371c20c2001e9ab23b55852ea0218eb234fb020aeaecfba9277274e84750ed23ea32357ee34cbbfc9b98ed7ce4b988d1032f31f535bf74b95f1f059b1bf50d575744342f510d338c7150aed1bda8fd3b50962b3c1c588f4554e4273e1952321a228fed55462dcaf771a09882ad45665f4e24f62294a7d7a4f84acbcad8f3128b5df3f855013985814ee97f3c6664355dd201cf63b48856f329664f870cae487892bfa4ca54b8fe14dc122dcfc68bf70fc7b5f2e7e87aa752bb3c4980efa50b4ca22bc74cb9ec308ba4e8da16b3963ff1536f2b96634e158d7edbbadd4f93f5fae570b4a705f67f6d9c41a2057d244745f8173063a35f963f6e455d4e4d0fe7f54afaeb10c5177f4f0727ddaf06b643b8993112e0cf2077c2709cb9c367d5752c63737de2e8b1deea4b1806618f74800dc74ef22069c1bce603b9046883ab2b28b0e76fabd06bbb468eb7bb98101f0cab1901af1f2d87641a14f6089d0977aaf841f2f0e525091dffc9f10d198320cae24379055c5f7ee73f7394bcefc82213cf1cce58f3c53311d5694f0fb7f1befe8b0e132ebbc187b5fec5ad5ca5c3f6beb6dbc54ae9e3eb26e6371604db16ab49b245fd7ebe4aae28a10259d9b23cd07398c3bb59b2b079fe4a498d6667a9006984a7c0128371dc06d3c3c71969c42436121dd8e3f8e2d8de8e81806f8678efa41a1f9feb3b387335ae0fda4d83fa07cc0ac159ba27e261a66e418bb031d2ef215030865c50d31761ea38f72b4b82e4cd20784de4fd6d741604bf774d9a492ebe7327af9b27d752151412bc00fb4e407cfdfdcc4a6a89f7e6a22ecb608313b7c2c88dff8a451", 0x1000}, {&(0x7f0000001240)="326fb740871098443c749d3af3db839af7faa14a8ce8839efe343fddbd220a235624ed9446a6054a51488e7e8a91b6b72c85101a19950f326ee5ec38ea339fc70e47eda1bacff1655cf32327fc8f514374f647f1a4eb1321f5cf6f1674263307bda5e442e3d48b57c323342b4ec0595aa519aec7707a32fc1bdc9edfe6a881ef68505483f6acb9bb788a01523cd075d45cd32f38fce09821823ed4ca88149cbf7e4c1077c34c16846d9c46a4fe4369801b03daa140fe11783b0b441a2a299c461aa9b1c9fe6ee2bc37bf7d3063d139316d3031deed1c2e6209fa3d4483b830194d07a448d2e4f19a3f3dc46911", 0xed}, {&(0x7f0000001340)="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", 0xfa}, {&(0x7f00000000c0)="11a0183154000cd7cc2693933ef078f1453e4cf8bb348bb95db9057cecf66225f708e88e0a7bdec9cb45bdd940fc9e366de6bfafd26302d6f8be54a6b59d7a816e5ba4a2189c3b6ab4ca6dc3cfe891e48a2c52d996e63fea935e86bf83e813349a108203aac5fdd4d2f7d07a398930d16d", 0x71}, {&(0x7f0000001440)="69ca887f3befd61892b1d8f1830dc8ed331f0c000cbd99cd80029be471295d559461bd237b39d5f91dd3048bd9f560d6a30c014059c42509b539560ed3dfd41e71fa06a3904af05dc0d1734dbbfba458772342778c8ac1d54dec61993c4140a516227d976dcfab5e1770d7eba73b739354800e78a144537a", 0x78}], 0x5}, 0x8044) r5 = accept4$inet6(r2, &(0x7f0000001540)={0xa, 0x0, 0x0, @local}, &(0x7f0000001580)=0x1c, 0x81000) ioctl(r5, 0xfffffffe, &(0x7f00000015c0)="045bc74fe4fa2132b187a8ac46616e1f5c4e0aaa8839f975508543ae25ae") r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010700000000000000006700000008001c01"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) connect$can_bcm(r7, &(0x7f0000000180), 0x10) 6.117003371s ago: executing program 4 (id=15306): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000400000000dd3f0009010000000000008d0000000a0000006c411610083c0ecd1ffeb50cfa52fb3c8bf208684a0e73c257a6507f058806111bb3edee77c09b5b9addf673b24095bcb5ac62923c5a40fef4c4bac2c345f853323743379318602bdc5e5723f83dea5e1577b7a093b672e84b433be024cbea344d476159b0ed4fea5ef2fdbfc4a06153d2bb55a5116d2046ff0c281b6b17635d12a1d161ae"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000400000018210000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ce000000bf090000000000005509010000007c0188e4e1ddc958a500fc05fae052d2b18800950000000a000000bf91000000000000b7020000000000008500000084000000b70000166b000000"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff01"], 0x38}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') unshare(0x6a040000) socketpair(0x3, 0x100000005, 0x0, &(0x7f00000002c0)) unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, 0x0, 0x4041011) sendmmsg$alg(r3, &(0x7f0000005ec0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1b44bbfa5f7b2", 0x8}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', r4, 0x20, 0x700, 0x4, 0x58, {{0x28, 0x4, 0x3, 0x9, 0xa0, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0xa0100fd, @multicast2, {[@timestamp={0x44, 0x10, 0x13, 0x0, 0x6, [0x9, 0xfffffffd, 0x100]}, @rr={0x7, 0xb, 0xa3, [@multicast1, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x2, 0x0}, 0x1}, {@empty, 0x80000000}]}, @generic={0x44, 0xc, "eab2a2f991e0ca8fd029"}, @generic={0x89, 0xa, "4f404cdb5c157510"}, @rr={0x7, 0x13, 0x62, [@broadcast, @broadcast, @remote, @broadcast]}, @ssrr={0x89, 0x13, 0xee, [@multicast2, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x2, 0x11, "f7a1c21e78038787a614a036a3a8ed"}, {0x1, 0x6, "4720339d"}]}]}}}}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 3.672613597s ago: executing program 0 (id=15326): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) recvmmsg(r0, &(0x7f0000002fc0), 0x0, 0x10060, &(0x7f0000003080)={0x77359400}) 3.567315913s ago: executing program 0 (id=15327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x22, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x0, 0x1, "5c4c9a03900810a544ee"}, @NFTA_DATA_VALUE={0x0, 0x1, "7792de06a9e093feba8928605b84be0264f75ae58332c519527e681dcf1ab862cfd87a846b34563b6577300ef3b2e79ab12100da78e8a6fd83f6995e693e8a00d2aa2a346d622dffe65ddcd4420cdc91d58fae3d09b9b62c2c999426478a55dfcff5b0"}, @NFTA_DATA_VALUE={0x0, 0x1, "2bbe0e7f4e82af1002688c713d4cc6d76ac56469671715ae133d161ef3da21772656eeeb5603fb212b5a851b7868a8f83ca1e3a755c6375a91ceee4212ae68c098a2095946a900b73c45fb090da25ab19dab76e563bef7980af3a33863929dd39448fe87a55bba7549a4aa5b77125e470dc3832da2aafed1d5253695d936a3e31580433612dc09fbbaa40cbcf3a2abc4ef96189495c11d7b8fa6020e74"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.428624205s ago: executing program 3 (id=15328): getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) listen(r0, 0x7) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, r0, 0x5, 0x1, 0x4}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast2, @private}, &(0x7f00000002c0)=0xc) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0], 0x0, 0x6a, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700), 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x5, 0x8}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x4, 0xfffffffa, 0x26, 0x9, 0x800, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x4, 0x0, 0x10001, 0x2, 0x6800, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x94, &(0x7f00000001c0)=""/148, 0x40f00, 0x41, '\x00', r2, @fallback=0x7, r3, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x8, 0x1000, 0x9}, 0x10, r5, r6, 0x7, &(0x7f00000009c0)=[r7, 0x1, r8, r9, r10, r11, 0x1], &(0x7f0000000a00)=[{0x0, 0x4, 0xf, 0xc}, {0x0, 0x2, 0x10, 0x1}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x2, 0x10, 0x4}, {0x4, 0x4, 0x2, 0x9}, {0x4, 0x3, 0xc, 0x6}, {0x4, 0x2, 0xa, 0x5}], 0x10, 0x4}, 0x94) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000cc0)={&(0x7f0000000b40), 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xac, r12, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x6, 0x0, r7, 0x6, '\x00', r2, r3, 0x1, 0x2, 0x2}, 0x50) r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r13, 0x29, 0xcf, &(0x7f0000000d80)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x6, '\x00', r4, r3, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x62, '\x00', 0x0, r3, 0x5, 0x4, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000ec0)={0x0, 0x2}, &(0x7f0000000f00)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000f40)={r14, 0x2}, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x0, [0xc, 0x8000, 0x6]}, &(0x7f0000001000)=0x44) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r15, 0x10e, 0x8, &(0x7f0000001080)=0x9, 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f00000010c0), &(0x7f0000001100)=0x4) 3.252682978s ago: executing program 0 (id=15330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe70a, 0x7}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="35d64d8f9a66"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40408c0) 3.116265593s ago: executing program 3 (id=15331): r0 = socket(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x81) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xfc7f, 0x0, &(0x7f0000000200)="347e78c60441889b40393cb963b9ff151fff93e9aac26f0731a7e4a78d452eca80337e7fd44381aa80b8eb380b980df5a82ad400f6c17f6bd84ba07c94b1d5254e920050a4ea832b9e58188f2ef3676cd78ac5084d09c5511e6f39ec2cefddd35a57dd1754ac618fc246e0a229", 0x0, 0xfa, 0x60000000, 0x4c, 0x1d, 0x0, 0x0, 0x6}, 0x71) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x69a4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x4, 0x10}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000100000095006e5fae6ed2746cfeefcaadb87c6b3591f53dffd86f75ab4889f5ff1c1b"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%-010d \x00'}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r13}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000004000000000000000", @ANYRES32, @ANYBLOB="0160ecbe77024a5b67000000007c411800000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="04000000040000000300"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1a, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff84b7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x1, 0xae, &(0x7f00000006c0)=""/174, 0x41100, 0x18, '\x00', r5, 0x25, r10, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x3, 0x400, 0x401}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000009c0)=[r11, r12, r13, r14], &(0x7f0000000a00)=[{0x5, 0x2, 0xe, 0xa}, {0x3, 0x3, 0x2, 0x8}, {0x0, 0x3, 0xd, 0x4}, {0x1, 0x1, 0x2, 0x7}, {0x5, 0x2, 0xf, 0x7}], 0x10, 0x80000001}, 0x94) 2.897106955s ago: executing program 0 (id=15333): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x1b, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x1, 0x0, 0x3}}, {@generic={0x88e7, 'b5+}8'}}}, &(0x7f00000000c0)={0x1, 0x2, [0xafd, 0x51e, 0x94f, 0x1ea]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x69}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet_sctp(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @authinfo={0x12, 0x84, 0x6, {0xfbab}}], 0x30, 0x20000000}, 0x0) 2.780741668s ago: executing program 3 (id=15335): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x1cc, 0x24, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff5}, {0xf, 0xffec}, {0x9, 0xfff1}}, [@TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb2, 0x7, 0x0, 0x7ff, 0x0, 0x8, 0x9, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x5, 0x5, 0x3, 0x46, 0x0, 0x8, 0x7, 0x5}}, {0xe, 0x2, [0xff, 0x28f, 0xa, 0x1, 0x4]}}, {{0x1c, 0x1, {0x2, 0x4, 0x0, 0x7, 0x0, 0x2, 0x8, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x7, 0x9, 0x9, 0x6, 0x1, 0x3, 0x9, 0x4}}, {0xc, 0x2, [0x43, 0x8, 0x200, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x40, 0x401, 0x1, 0x2, 0x3, 0x6}}, {0x10, 0x2, [0x1, 0x3, 0x7, 0x8588, 0x4, 0xf]}}, {{0x1c, 0x1, {0x81, 0x54, 0x7fff, 0x0, 0x0, 0x5, 0xd7, 0x9}}, {0x16, 0x2, [0x9, 0x8, 0x7, 0x6, 0x7c92, 0xc9, 0x8000, 0x6, 0x40]}}, {{0x1c, 0x1, {0xe, 0x7, 0x100, 0xbc2, 0xb5c842234963d05, 0x3, 0x4, 0x6}}, {0x10, 0x2, [0x1ff, 0x4, 0x25, 0xe44c, 0x9, 0x7]}}, {{0x1c, 0x1, {0x54, 0x9, 0x2, 0xfffffff8, 0x1, 0x0, 0x7f, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x1, 0x8, 0x680, 0x0, 0x0, 0xfffffffb, 0x7, 0x1}}, {0x6, 0x2, [0x634b]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7f, 0x614, 0x0, 0x0, 0x1, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x3ff, 0x6]}}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'caif0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x19}}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x80800) bind$x25(r2, &(0x7f00000001c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.672281984s ago: executing program 0 (id=15336): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000008c0)="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") close(0x4) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x48804) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x10002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x180, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad63, 0x6, 0x1}, {0x0, 0x2, 0x8000, 0x5, 0xe}, 0x1, 0x100, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r9, &(0x7f0000000080)='syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) 2.24428389s ago: executing program 3 (id=15337): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000083d750f01b0d544561730800000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mkdirat$cgroup(r6, &(0x7f00000004c0)='syz1\x00', 0x1ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180060200a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000240)) 1.648779896s ago: executing program 0 (id=15341): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff", 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.464707578s ago: executing program 3 (id=15344): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @loopback}], 0x3c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3041, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], &(0x7f0000000700), 0x4, 0x100000}}, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x20044091) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000094}, 0xc0c0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) write(r6, &(0x7f0000000040)="71954eff4aa21a0d49d1fab315ca081fb7093baffcac6c7a901a1a53a50c4a416686ee62f5c16b3d837bb5b1408c796d3dd0f61cce1c8028cbfe7e56226153bd751152930e33f6e45d8ee77ea253e6633ab9bca50133a898b2e72909ede317f8d4b72746fd6cc722be63fdab398ed4e02e4584f9c859986a9394893a28739eae115fc01c6eb76d61cef8cab1c95d67137d0ed40089214ddcd1", 0x99) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000002000)) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYRESHEX=r5], 0x0) 1.287933362s ago: executing program 1 (id=15345): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x4e1d, @loopback}}]}, 0x50}}, 0x0) r1 = socket(0x11, 0xa, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000180)=0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0xf0000000, 0xd}}, @IFA_LOCAL={0x8, 0x2, @empty}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000480)=@assoc_value, &(0x7f00000004c0)=0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r7, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', r7, 0x7, 0x7820, 0xce24, 0x6, {{0x1f, 0x4, 0x2, 0x4, 0x7c, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0x75, 0x3, 0x0, [{@private=0xa010101, 0x9}, {@multicast2, 0xfffffffb}, {@remote, 0xff}, {@empty, 0xfff}, {@local, 0x3}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x8}, {@private=0xa010100, 0x401}, {@private=0xa010101, 0xa3fc}, {@broadcast, 0x4bd}]}, @generic={0x118, 0xf, "39072ad2ebb227d289c2a99779"}]}}}}}) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r11, 0x50083}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @local}}}], 0x20}}], 0x2, 0x4880) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911a800000000005e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r12, 0xffffffffffffffff, 0x8000000000000000, 0x10001}) sendmsg$NL80211_CMD_SET_QOS_MAP(r13, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x0, 0x6}, {0xb, 0x6}, {0x7, 0x1}, {0x55, 0x1}, {0x1, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x5, 0x4}, {0x99, 0x4}, {0x8, 0x7}, {0x8, 0x3}, {0x4, 0x2}, {0x57}, {0x8, 0x1}, {0x7f, 0x5}, {0x6, 0x1}], "00b3b0d7118e5c72"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xa}, {0x3, 0x7}, {0x10, 0x1}, {0x6, 0x4}, {0xd3, 0x7}, {0x9, 0x5}, {0x0, 0x2}, {0x40, 0x4}, {0xb, 0x4}], "1b86a80f39aa1cb5"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x7, 0x5}, {0x3, 0x3}, {0x10, 0x3}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x6}, {0x2, 0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x2}, {0x9, 0x4}, {0x1, 0x2}, {0x10}, {0x5, 0x1}, {0x1, 0x3}, {0x5, 0x6}], "c344103cf3406c3e"}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.132167675s ago: executing program 2 (id=15346): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000540)={@void, @void, @ipv4=@generic={{0x5, 0x4, 0x3, 0x0, 0x14, 0xe6, 0x0, 0x9, 0x25, 0x0, @multicast2, @multicast2}}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x24, 0x0, "930fb7203045e2061589857a495fa53fbb6980dc3533fffebf0c4c604606490bfd95dbf2905093187bbedce218bc1a89dfe5e0c0e8c43d1c7fcc8c88fa08b99c346230ab6d61693686d8e74b273d8362"}, 0xd8) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@private=0xa010101, @multicast1, 0xffffffff, 0xffffffff, 'veth1_to_hsr\x00', 'bridge0\x00', {0xff}, {0xff}, 0x32, 0x2, 0x80}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x5, 0x2, 0x0, 0x4, 0x4], 0x2, 0x7}, {0x2, [0x4, 0xae6819b42cb7987e, 0x1, 0x0, 0x1], 0x4, 0x2}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x41}, 0xffffff00, 0xff, 'veth0\x00', 'veth0_to_bond\x00', {}, {}, 0xbc, 0x1, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x3, 0x4, 0x3, 0x4, 0x1, 0x3], 0x6, 0x2}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r7 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @bcast, 0x1, @null}, &(0x7f0000000100)=0x1c, 0x180800) bind$rose(r7, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYRES16=r6], 0x9e) recvfrom(r2, &(0x7f0000000680)=""/73, 0x49, 0x40000000, 0x0, 0x0) 1.005135322s ago: executing program 1 (id=15347): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x3, {0x1, 0xf0, 0x1}, 0xfe}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f0000008a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x0, 0x3}, {0x7, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000008b40)=""/8, 0x3f, 0x8, 0x1, 0x3}, 0x28) 944.953551ms ago: executing program 1 (id=15348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0xffffffff00000003}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$alg(0x26, 0x5, 0x0) 929.810419ms ago: executing program 2 (id=15349): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000140)={0x3}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 792.359956ms ago: executing program 1 (id=15350): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0xa, 0xffe0}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 688.052377ms ago: executing program 2 (id=15351): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x170, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x12e5}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0x28, 0x0, &(0x7f00000002c0)="52e1119c000000002bf0543786dd", 0x0, 0x4007, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000800000001f00000071028000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 428.976785ms ago: executing program 2 (id=15352): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x401}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x2e6, @mcast2, 0x2}}}, &(0x7f0000000180)=0x84) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) (async) write$cgroup_subtree(r0, &(0x7f00000002c0)={[{0x2d, 'cpuacct'}, {0x2d, 'cpuacct'}]}, 0x12) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x6030}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x4) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$qrtr(r6, &(0x7f0000000600), &(0x7f0000000640)=0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x24}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ee02b8d3d5"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "c26cf67955c9e291875a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xb, 0x4, "ccb102b8c2676b"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8d018b71af"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x4001) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r8) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000880)) (async, rerun: 32) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000000900)={0x0, 0x3, 0x10}) (async) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000940), &(0x7f0000000980)=0x8) (async, rerun: 64) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e23, @broadcast}, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe8, r10, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x4, 0x6}, {0x7, 0x7}, {0x74, 0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x6}, {0x30, 0x4}, {0xfe, 0x5}, {0x9, 0x4}, {0xa, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0xc, 0x7}], "3f0eed772074c2a4"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x3}, {0x2, 0x3}, {0xf, 0x6}, {0x6, 0x7}, {0xff, 0x6}, {0x1, 0x7}, {0x7f, 0x6}, {0x5f, 0x6}, {0x6, 0x2}, {0xd, 0x6}, {0x10, 0x5}, {0x5, 0x2}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x4}, {0x6}, {0x1, 0x3}, {0x5}, {0x2, 0x3}, {0x4, 0x5}], "9b0a68cbd8fb7510"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xff, 0x7}, {0x10, 0x3}, {0x8, 0x6}, {0xb, 0x1}, {0xff, 0x3}, {0x7, 0x7}, {0x7, 0x1}, {0x3, 0x4}, {0x0, 0x2}, {0x5}, {0x7}, {0xa, 0x6}, {0x8, 0x1}, {0xf3, 0x7}, {0x3, 0x2}, {0x0, 0x6}], "39555e522ef1ec02"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x5, 0x1}], "2b0c2ff6372940b0"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x7, 0x3}, {0x80, 0x5}, {0x2, 0x7}], "cbfeed5384f38bf2"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x9, 0x1}, {0x6, 0x4}, {0x8, 0x3}, {0x5e, 0x2}, {0xb, 0x6}, {0x7, 0x4}, {0x8, 0x1}, {0xf9, 0x2}, {0xf8, 0x1}, {0x9}, {0x1, 0x7}, {0xd, 0x7}], "0117b03d7a2105b3"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000010}, 0xc804) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000c00)={'\x00', {0x2, 0x4e24, @private=0xa010100}}) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000000d40)={r5, &(0x7f0000000c40)='\x00', 0x0, &(0x7f0000000c80)={@align=0x1, {0xe, 0xff, 0x1, 0x7}}, 0x3, &(0x7f0000000cc0)={@_ha_fsid}, &(0x7f0000000d00)=0x5}) bind$bt_hci(r11, &(0x7f0000000d80)={0x1f, 0x3}, 0x6) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000dc0)="31d1aa90b22893d35190fa5f060e0b7c2ee28545480ded8a2ac1eaa0cfb1d6014ba6054cfc8be28ae8f196d035c716bac6ad59e1c35eae9433dddee23a743009a6d5959db5df225fa3f2091ecac916aa491179334bc79ef24c09e4bda9f83f0b1ee3c48493990a9f04ad2f5a4cac8fb15b0940f3fd67208c230722ccd6e641d47b285f7cd38af95c7052b4f6ddf9adf26da0bb6efc717ecea6df8202aee21c2942dbec5029a12652a076148965506c7712c2f83cdfc5b20f59bf8815c2190195c4aa941e51c71bffa939695139941182ad937e", 0xd3) 414.885064ms ago: executing program 1 (id=15353): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000140)) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) r3 = accept$ax25(r1, &(0x7f0000000080)={{0x3, @netrom}, [@default, @rose, @netrom, @bcast, @remote, @netrom, @null, @rose]}, &(0x7f0000000100)=0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00'}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r2, 0x9, 0x4}, 0x8) 209.000726ms ago: executing program 1 (id=15354): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000100)={'ip6gretap0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r2) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030529bd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="000040000610000014001280090001007663696e000004000400028008000a002367365e788dee85e485264472fae073ff6c6bcc559ada295b29ec6c91a2c0", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x18, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00006842400400"], 0x18}, 0x404f444) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x80, 0x10, 0x2, 0x7, {{0x1f, 0x4, 0x3, 0x2, 0x7c, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, {[@ssrr={0x89, 0x1b, 0xdc, [@rand_addr=0x64010101, @local, @multicast2, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp_prespec={0x44, 0x1c, 0xad, 0x3, 0xb, [{@multicast2, 0x7}, {@local, 0x2}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x17, 0xdc, [@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010101, @loopback, @empty, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xd9, 0x3, 0x7, [{@multicast2}]}, @timestamp_addr={0x44, 0xc, 0xa1, 0x1, 0xd, [{@loopback, 0xc77c}]}]}}}}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6, @ANYRES32=r6, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r7}, 0x94) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) pipe(&(0x7f0000000400)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000500)={0x0, 0x0, 0x20, 0x0, 0x564c}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000680)={r10, 0x8, 0x0, 0x9, 0x1, 0x9}, 0x14) 208.344538ms ago: executing program 2 (id=15355): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000080)={@rand_addr=0x64010101, @local}, 0x8) 13.132744ms ago: executing program 2 (id=15356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c08000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000007000000000000000000000009000000000000000000000009000000000000000000000009020000000000c3e5c94c1958a821e7768944a79b11cbfa25ff775f1adaeb70d6079618"], 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 0s ago: executing program 3 (id=15357): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8681985ff97b8745e9bd4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3f}, 0x1c) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x20180, 0x0) (async) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x20180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x44891}, 0x44) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) unshare(0x20000400) (async) unshare(0x20000400) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r5, 0x0, 0x0, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r5, 0x0, 0x0, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001080)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001080)={0x0, 0x0, "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", "eaeacb6756f4c2d346d64e2749344009b7ce3ec82fb76b46cf48bf88c5137796da73ce2407b6e57241a26f4601f99cfa2a2e655586590f84062831838eab26946c51a46364aa5deadc4864ad4e0c72e2ba957336cffd1ea44475d146da446e8f1dca9332e002e4685d9839bfc38ea8101f9fdceacd9d0f04079b734ccc4389de664dd55ba62872c8995c6631de33c0fdaf66d4b6ae5b47708b201817dc47be8e15c7247f72d2b999e050f3c8540aec02fed83cc29b5d8a8dbf3c7d052e0ca27e40f2122745a5466f7e209d0a3b8b7a1cb0dff86813f8afdfde927f19006161d7bca9f5b4315f21ad0057a76dcfdbdb33240e2fc91ebab91cf694e89e0484c49426e666655a554e242c6766193a77d83a2808f70e3d7d95bb862b34ee415bae6746205fc35abf2425b652f194b2879d096555bb5e2912ce9f7d48cd24aa719a3c6cfa90f953086d6efc85291e2e72f2f0eb42d8bfa44cdedc9a4425ad04e351e788974c6e9db98190f084e7f10e2f7bb7e4498a7a8e07e9c7a46170ce0da4a69ff9d6c1d0dd1ff702442da2c28c42d4947624c01c8f8ef0ce1afd47990a0bb958165d82426b83637ca71530ee773b83107edf3b1fb20f83592392185c02d3a9f2c18173659aeba76216e9d7547912edf2d2df14cc56b245ff223fe9839865cbfd4c3e8862353ae6fb18ac0c895f46e77b984994dd90d5c86868212de53abb2638c0b2705ce47ec960ea0a5c8b032f4181580c269d180fbedc2524b94de65d7ed2fa71ce070289d69a6a5abae49c3d44b8ac8197d8558455fe9f5575bbc952da99fdcd3b6b4351f99a142ec7e1a64187865e01eb1b50cab085dddab7a92eb4662024b3e96c6fe244ed08b5c65f7b25090050d9b00dac0486c6562ab36d9230737a2a6913a872c8aa9fd0cd5e2c472aeca3fe2b75b0306eb2d641e61b8825c7ec79cc177eab95a67dee74ee899351408a27a8f2795c0b32e6caa0da12121c219678e1f25c51dbebaae4c9919e6b4003a9f0aefe8a36a39802f15440a799a9dc52dd65b21876de56ffe733ff3a82aca785f9ed5652fed8606b9a9f276b66ee6a022dbde0c8911976ede366415df0809746b3f8fc2f768bf02148a1dd1d84d1a975b10079a930d8a489db8c041c2160de0c5eb18df0e80763eaad5614506f16fb5ff1b8032904a831608823ad843fd9830cf78f92b5d970c8158ec1fb942c3bfc8facb2c5670455c7a3eaade5d2c5e7ac4922a650e8d7adcb90ac3328148aba3b4a2eb6a3ca44bf33a2902babe61296a4fe13f773373852e462e70cca5d587f50975ba0835494dfa260a3c183bedb2c71a5c913113c2caf78f764760b3af7300bc11b182dd96a6b3bae9dafe9658ca0230b5d1c42622b5f80924adea0536f4860faac34dca04cc2e56d97687800c42837cc20f763f9b181ea0f58fd90817ded2f0b02a00387417613e37b187e628a19feed5c5150f92594ed1fdfa4e7b4c38b6c3ea9cae1d384ef9ede131adfdfd064e675cc634579cc6fc228224158026860e94142989889099513ed4af43e8fe8b8abd8f0c681c895058899c9aa5192befb00bcccaa00ef9a58392800991e86985b7d7de8b8d862801314a4c80f6732b823667f44947557ea618465fb06ee0db1c8fef3f7b04e7c20c9143241e5a166af64713efce032de7b894b7e7716d3ac049a07d6f65c8c9fa55e8f273d7e792ded8f9392ca7cfd7dab0ff46500193d6bb61d3a0c12f4c83a866ff10104c86257f7bd149d35c730ead5f30a1f63173ccc9b993504f9d7aa8cd1ba75bbae7d8400258b15b09937760f8e58ffd883468724d3bd7757b4f5196092745cde83552b917eabaf76ce4eaea2d5103fd2e8714252f5c6345deda75418771cf28f3253c27989adb6c3db7e7cbb57226fa95b217bdaae10e6e22e99eb96616900ad8c715fa47e52bad996d08e12e20bf26cff0a0842135541b3b4c8d9767a8b7982caddb6a35841d12e7d6262093b249def30cd2b8993962fc430d2845d5e4d4c32bc0f575d24ac28efacfad95224512a9d55ef69e040337069ce8f960b4e439fda4072ab00e70029b388bcc491f56c017ad523503f1499d9b6381a64d52b769fa199282ec825f16868c2b5bf0df9b911812dafae75ee9cbc2894a9fe683cb956f12b2d75954beb3190a57d2c3f6c731b197d313c5f2d9731dec4aa74a2bf074f634f8f817f54df7f9370e1cf84cbcd22fa8d6dbab732a1b60d9211b1d90255a289b088c5b19b55c1e192c948a1da5c898af8aa5486a1c079d7ba3f782d3d4132c7a7eca3f8c8de1ce98332202c0c754d7bc60ad4e9be7c40162ae7cab3a7cf2bd110e6bfcbcd8093ea7e969c5d6618698c9da9bd87073eb79d92c2db2e79fd4cbf3088d094ea7dd8725dc95b8ef3723a9626fa9f3f16d08518b52dc26f57adeaf347a78227db40ef3c13ce7e3163886ca0735ff9435c657d126c611f44a50910ca893d5609627a181e4aad714e36b0dc9ba88836df9024e55f191131dfd60eeb5366ce165ed95fdab809c68779f28838cd07ffd9792f52c128ec311cd19dfc9b5897f65f2aefc029fb5ac2281fb1b46d4f7d8dfb379c8feb9188381b55f3bdcf26c2f0c4b274473fecd5c3fb86cc0c7505a1ed54604bd059bbb93c56195b501837077cab7a12b671120f304e07853c1ab60e2e1076b64036d0de9d92b3a06953d0d1f19c53956df20e65d8899fc4e6a214435339b49202dd8092d2ae137959a89be060224635be01921c0e7e3351e8a7a8e0ac637ea5d060060b4860bcf7f320c608869f1d92d0a91be84440a57a4919e9fe4fe9967d1df4a305ed45f9bcdd0b367d2a0251852e93fb74ce6a5b6942f94198b5c6eaa0913f49f0cf0bd09c82e299aaffe65b8cb8149259f363563100ab4142d0af569249c9a9479fd2d6bd9162783fb2ffc17a59064ae4b1c3123d9f77717ce83573c4c9766216bf97549651550778ac55212905f8ae474745140e043efcd67165b24e306fd395d32b383f22fea0331682a04b7c61fe38e57bc28d7669966944dcd912439536bd83d30d0ed5a06a458fad655535d3a6b1ae215d81c364e13d8ca9cef44c7b851f16b28bf4676f529c0805d50953e3704ada73897002e3a04634e6c407ae95bcd1943bbb7583af4e9484a52b5dc1b9e4392c756c32446fe7d1dc705d99d2e7d402b2f8e775a61b2ad0bd1bb61611087239a14aab12266aa8df3bb20a8f3dcb25bd4ffde358b6012aca6849b06778049c124b5dfe43d71909934a3ffc2b11d0cabf1c62bb031bf4f3e8c5f88b978186dd78c6d0355e2932d6d838f65c26f86b72ab04f5681c4e6a01aed2f197eedce7c10f880ecd0472ecfe8faf8ce5450f6411bf79271c22fa58a5caedd03e1229e9789a1d4d1dc077f006a00d90b2f30da54e3055b619be28cf018dc86fcc993b3ff0f8e6a385c17c241df740c74af441c65bdecc03151a50ea27d1023e1e15343950481b9d7e98696c103ff16950a6630e9cada0f3cfd9893aeb1df2aff97b78c1a5ed209cc1f88f39bd7ca4fa5b6b93919881cbe016d6851541d96e2f06cb8ce14dad8c52bdcd17ba5f7d0a71adb8f4929a44e7b5c405bac24a080281e7c891d0e8333c834fcb005ee2d72de7ef81c87f0fe5720854f2639e22903367d1cdd52db90e00c2dd051d05f243d25b75a88b258bcabdbf8d136a5fb000db8a7c8abaf3e041165f5faa168f02b674bc92292e26d8901b58ab50e60b97fd760a189d59a1be0523cf581dce3b9b767a446288dbd231186cf30baf23f02fb9a0cf0b0bf95789fff367f4b935994be9c33c3395109e55af8f3a39d616839dca4c61f14fecef0ea324e11219594cc19837b48d4e8507cf247453dca1970aa027c292b4cd07614681296280464320a330f9cbc13c10ae7f28c12dab9798fa7f4d2a0a50903f394246a22961d93a6753cd823c2452471101635f1846243d6a576883df7b009c64dc75b87126c7e85b097fefc688965e4da27d6ff7f8d27b4ef3667c5944b03aacb83c5bdf3a99614a70fe009100a4b5aa306c07e737832147d6af5e887286b1fd5e2d1569d1b47d133febb3e519b956dfb0303ffab815ac405a6a0025240a2dcb3923ed199c826af09fe13d72362a6e2461db67ded37411c224606e05dbe40fb84af7e8a25234e1f9c868b0fcf603776c038ef55b83422336481edb5b2b0f7dd1aedebd5d3facc315134c5632a700b4fdae87cb41040d72ff17ae6976c6b638fda2ec72921454919dabaeb87485c27256929c374321a91544ad6c9fc565fd7c00a765cc46ee27bcb6f1c01474fe91579a180e4ab744b2c46139550ca052598c975a1c01deb0b0914da948d1d386de0f38117c68874aaf01d379fb2ee8420157033bc21931f0870c39cb9861d8c5d841d32d841c71b6c0afa224de2e075d8d850257bcbec4b54e3d80c4e1210b4166194b4246e2d96e8c76c81b426c9aaeaa8a3e13ecb38ec6b8748f188751efa6ed893db0ac2c420cff208c80d3490f400c572733619d45e4f07a0405f7bce3ae67099a8308b676b5bc9492faa3f22c87b0f657ad19ed540699d226edbcdb6d8559365561c93768ae26b85b1289576fd001a27203d156245ed2490d7591f3ccffa28969150fe07d423745c1574b7dc3807f19fc5585032cfc5643612e71a8d25b759bd2b036a0061d05ab59803e2206c3ea80653e3df05dd19efe85fa700a99efd7615bbcce70dd7f48bb31756cdb86a18d4056ba3bdfe9cd8ecfa50472c7f02552b0d72cfcefc4c888818b87f5a2b1690412831ad0ad7d4bf1270370a61a5359a49e8766b7d405e8f2b994e847c09c0cddcbf5c1fab808a156e87f470b08f5300cf82cbc83e4ab61410767f695e1969fe199427a0b8c66db6e4a908b81644ab3f5b688943a48d4c8053750b4647f2e6a5f6568c79871882a33cfd37dad890ce6dd90a688ed13a56ab3da2c90ede2ff78b3246f794ee3d3eb1816583d50fc8e993e25034d6ab0299870956d6de397cfb00e5bd460feb132b124300e2a074874c6f8eb1d8e4be0876e208d8b800accd3e2d84749b06d94e0b2e11abea5d670c90677e82fed097ff46a439d163464e6d15027d403472e61843210e666df2de1604814e3d2f2f27e0093e3d37d11a3382ceda253573cf842deec843e734c9c69a043c19f2b926588f22f0f5360597c476dace53cf9a4679585b5794062ddb91b467b1c16dd72298202b8a32a617b76f44bf6881033eed5b4d4336d7bd2ff576da66fe1b5c7c6967d42268b116e6eb988c1d739f70e4452fffe230685fc31d56fc19583aba7afaa72df14a1fbeb16ea4838b7701ca4933b7bda5ede42f2b4e2dd88ed02f0d51ba590efd30ca4972b865f3d9af1665864ebb0941912749a642ac700"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000180)={{r7, 0x1000, 0x0, 0xbc6, 0xb, 0x81, 0x6, 0x200, 0x3, 0x0, 0x7, 0x2, 0x3, 0x80, 0x1c}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r8, 0x8, 0x52}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10) unshare(0x22020400) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000000800, 0x401, 0x800010100000}, 0x0, &(0x7f0000000340)={0x1c, 0x40000, 0x80000, 0x0, 0x0, 0x200000000, 0x8, 0xfffffffffffffffe}, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) socket$inet6(0xa, 0x7, 0x8) (async) r10 = socket$inet6(0xa, 0x7, 0x8) sendto$inet6(r10, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1}, 0x1c) shutdown(r3, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, 0x0, 0x4000004) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, 0x0, 0x4000004) socket(0x28, 0x2, 0x8) kernel console output (not intermixed with test programs): id length. [ 1604.132219][T25058] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1604.161173][T29314] netlink: 'syz.3.14082': attribute type 2 has an invalid length. [ 1604.232281][T29322] netlink: 'syz.3.14082': attribute type 3 has an invalid length. [ 1604.264199][T25058] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1604.375168][T25064] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1604.621243][T29330] netlink: 'syz.2.14087': attribute type 46 has an invalid length. [ 1604.636951][T29328] batman_adv: batadv0: Adding interface: macvtap1 [ 1604.643612][T29328] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.669627][T29328] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1604.695865][T29330] vcan1: entered promiscuous mode [ 1604.700968][T29330] vcan1: entered allmulticast mode [ 1605.130455][T29348] syzkaller0: entered promiscuous mode [ 1605.146353][T29348] syzkaller0: entered allmulticast mode [ 1607.069088][T29366] tun0: tun_chr_ioctl cmd 1074025675 [ 1607.074650][T29366] tun0: persist enabled [ 1608.084898][T25058] net_ratelimit: 13 callbacks suppressed [ 1608.084921][T25058] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1608.191489][T29416] netlink: zone id is out of range [ 1608.202743][T29416] netlink: zone id is out of range [ 1608.236920][T17740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1608.354124][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1608.377555][T29419] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1608.464399][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1608.574086][T17740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1608.680654][T29440] validate_nla: 1 callbacks suppressed [ 1608.680676][T29440] netlink: 'syz.4.14112': attribute type 13 has an invalid length. [ 1608.715118][T29440] __nla_validate_parse: 7 callbacks suppressed [ 1608.715150][T29440] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.14112'. [ 1608.774270][T17740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1608.805009][T29444] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14111'. [ 1608.853283][T29435] wlan1 speed is unknown, defaulting to 1000 [ 1608.911541][T29448] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1608.994575][T29448] pim6reg1: linktype set to 805 [ 1608.999987][T17740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1609.307798][T29435] lo speed is unknown, defaulting to 1000 [ 1609.335601][T29435] lo speed is unknown, defaulting to 1000 [ 1609.367170][T29457] hsr0: entered promiscuous mode [ 1609.525905][T29462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14120'. [ 1610.310229][T29476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14124'. [ 1610.763579][T29478] syzkaller0: entered promiscuous mode [ 1610.778216][T29478] syzkaller0: entered allmulticast mode [ 1610.806520][T29478] netlink: 220 bytes leftover after parsing attributes in process `syz.4.14125'. [ 1611.257208][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14130'. [ 1612.486507][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1612.924972][T29506] netlink: 'syz.3.14133': attribute type 2 has an invalid length. [ 1612.959966][T29506] hmac(sha224): entered promiscuous mode [ 1613.023742][T29507] wlan1 speed is unknown, defaulting to 1000 [ 1613.088858][T29520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1613.190513][T29520] batman_adv: batadv0: Removing interface: macvtap1 [ 1613.239325][T29520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1613.354389][T25058] net_ratelimit: 15 callbacks suppressed [ 1613.354413][T25058] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1613.482254][T29547] netlink: 'syz.0.14143': attribute type 1 has an invalid length. [ 1613.568689][T29547] bond2: entered promiscuous mode [ 1613.574346][T29547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1613.581821][T29507] lo speed is unknown, defaulting to 1000 [ 1613.605392][T29507] lo speed is unknown, defaulting to 1000 [ 1613.614661][T17740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1613.655084][T29560] netlink: 'syz.4.14146': attribute type 1 has an invalid length. [ 1613.677176][T29547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1613.693861][T29547] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 1613.724142][T29547] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1613.749558][T29547] bond2: (slave vcan1): making interface the new active one [ 1613.757530][T29547] vcan1: entered promiscuous mode [ 1613.769572][T29547] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 1614.559219][T29560] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1614.625827][T25064] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1614.670634][T29577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14151'. [ 1614.774162][T25058] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1614.888856][T25058] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1615.024500][T25058] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1615.135225][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1615.251631][T25064] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1615.311471][T29606] netlink: 'syz.3.14156': attribute type 28 has an invalid length. [ 1615.334397][T29606] netlink: 'syz.3.14156': attribute type 3 has an invalid length. [ 1615.342276][T29606] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14156'. [ 1615.374394][T17740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1615.494504][T25058] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1615.900437][T29627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14162'. [ 1615.942556][T29639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14164'. [ 1616.308500][T29659] netlink: 'syz.1.14168': attribute type 7 has an invalid length. [ 1616.396116][T29659] netlink: 'syz.1.14168': attribute type 7 has an invalid length. [ 1616.426302][T29665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14171'. [ 1617.119673][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14174'. [ 1617.369646][T29722] netlink: 'syz.4.14179': attribute type 6 has an invalid length. [ 1617.381947][T29724] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14177'. [ 1617.430025][T29722] pimreg3: entered allmulticast mode [ 1617.485867][T29726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14179'. [ 1617.834033][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 1617.842132][ C0] lec:lec_tx_timeout: lec0 [ 1617.854369][T29757] netlink: 'syz.3.14183': attribute type 1 has an invalid length. [ 1617.896124][T29752] netlink: 88 bytes leftover after parsing attributes in process `syz.4.14187'. [ 1617.948192][T29764] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14187'. [ 1617.975252][T29758] wlan1 speed is unknown, defaulting to 1000 [ 1617.995104][T29764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.002343][T29764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.009979][T29764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.017211][T29764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1618.329115][T29775] : renamed from veth0_to_bond (while UP) [ 1618.427106][T25057] net_ratelimit: 17 callbacks suppressed [ 1618.427128][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1618.574618][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1618.765793][T25059] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1618.783090][T29758] lo speed is unknown, defaulting to 1000 [ 1618.835976][T29758] lo speed is unknown, defaulting to 1000 [ 1618.898979][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1618.915862][T29796] syzkaller0: entered promiscuous mode [ 1618.931708][T29796] syzkaller0: entered allmulticast mode [ 1619.075254][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1619.191294][T29810] netlink: 'syz.0.14201': attribute type 1 has an invalid length. [ 1619.216518][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1619.295561][T29815] netlink: 'syz.4.14200': attribute type 9 has an invalid length. [ 1619.354750][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1619.475260][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1619.676187][T25059] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1619.848948][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1620.014863][T29846] __nla_validate_parse: 6 callbacks suppressed [ 1620.014883][T29846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14211'. [ 1620.044547][T29848] netlink: 112 bytes leftover after parsing attributes in process `syz.3.14212'. [ 1620.264975][T29857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14217'. [ 1620.786149][T29886] netlink: 'syz.0.14210': attribute type 4 has an invalid length. [ 1620.884298][T29891] sctp: [Deprecated]: syz.1.14226 (pid 29891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1620.884298][T29891] Use struct sctp_sack_info instead [ 1620.922491][T29891] sctp: [Deprecated]: syz.1.14226 (pid 29891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1620.922491][T29891] Use struct sctp_sack_info instead [ 1620.985290][T29892] wlan1 speed is unknown, defaulting to 1000 [ 1621.366281][T29892] lo speed is unknown, defaulting to 1000 [ 1621.391922][T29892] lo speed is unknown, defaulting to 1000 [ 1621.549910][T29918] wlan1 speed is unknown, defaulting to 1000 [ 1622.298042][T29918] lo speed is unknown, defaulting to 1000 [ 1622.365441][T29918] lo speed is unknown, defaulting to 1000 [ 1622.539791][T29942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14239'. [ 1622.738839][T29945] netlink: 'syz.4.14240': attribute type 83 has an invalid length. [ 1623.382885][T29954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14242'. [ 1623.487736][T29956] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14242'. [ 1623.497074][T25064] net_ratelimit: 23 callbacks suppressed [ 1623.497094][T25064] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1623.510420][T29956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14242'. [ 1623.538232][T29954] wlan1 speed is unknown, defaulting to 1000 [ 1623.608843][T29960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14243'. [ 1623.644051][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1623.690637][ T30] audit: type=1800 audit(1771349236.068:45): pid=29964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14243" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=2126 res=0 errno=0 [ 1623.730906][T29965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14244'. [ 1623.812715][ T30] audit: type=1804 audit(1771349236.068:46): pid=29964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.14243" name="/newroot/414/x000000000000000700000000000000000000007" dev="tmpfs" ino=2126 res=1 errno=0 [ 1623.904135][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1624.017351][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1624.225959][T29984] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1624.232023][T29984] syzkaller1: linktype set to 768 [ 1624.239576][T29984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14249'. [ 1624.249480][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1624.426055][ T6434] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1624.438667][T29954] lo speed is unknown, defaulting to 1000 [ 1624.446662][T29993] ip6tnl0: Caught tx_queue_len zero misconfig [ 1624.494327][T29954] lo speed is unknown, defaulting to 1000 [ 1624.544232][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1624.654338][ T6434] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1624.774110][T25064] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1624.859107][T30006] netlink: 'syz.0.14255': attribute type 2 has an invalid length. [ 1625.338166][T30006] !: entered promiscuous mode [ 1625.350639][T30012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14257'. [ 1625.544401][ T6434] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1625.714819][T30028] wlan1 speed is unknown, defaulting to 1000 [ 1626.000688][T30028] lo speed is unknown, defaulting to 1000 [ 1626.024635][T30028] lo speed is unknown, defaulting to 1000 [ 1626.050772][T30055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14268'. [ 1626.297656][T30057] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1626.888665][T30068] lo: Caught tx_queue_len zero misconfig [ 1627.791336][T30103] x_tables: duplicate underflow at hook 3 [ 1627.888600][T30114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14285'. [ 1628.115527][T30129] mac80211_hwsim hwsim170 wlan0: entered promiscuous mode [ 1628.152042][T30129] netlink: 2 bytes leftover after parsing attributes in process `syz.4.14286'. [ 1628.220265][T30127] wlan1 speed is unknown, defaulting to 1000 [ 1628.546524][T30127] lo speed is unknown, defaulting to 1000 [ 1628.551377][T30132] wlan1 speed is unknown, defaulting to 1000 [ 1628.562893][T30127] lo speed is unknown, defaulting to 1000 [ 1628.584685][ T6434] net_ratelimit: 23 callbacks suppressed [ 1628.584705][ T6434] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1628.649170][T30135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14289'. [ 1628.704121][ T6434] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1628.814727][ T6434] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1628.878821][T30132] lo speed is unknown, defaulting to 1000 [ 1628.889076][T30132] lo speed is unknown, defaulting to 1000 [ 1628.967371][ T6434] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1629.164196][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1629.390300][T30150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14292'. [ 1629.534125][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1629.724140][T25064] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1629.837934][T25059] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1629.995332][T25059] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1630.105678][T25064] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1630.425552][T30182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14299'. [ 1630.425560][T30181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14299'. [ 1630.598100][T30187] wlan1 speed is unknown, defaulting to 1000 [ 1630.751237][T30187] lo speed is unknown, defaulting to 1000 [ 1630.759037][T30187] lo speed is unknown, defaulting to 1000 [ 1630.799524][T30104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1631.514438][T30207] netlink: 'syz.3.14305': attribute type 1 has an invalid length. [ 1631.532963][T30207] netlink: 124 bytes leftover after parsing attributes in process `syz.3.14305'. [ 1631.644912][T30220] tipc: Enabled bearer , priority 0 [ 1631.662875][T30220] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1631.706337][T30221] syzkaller0: entered promiscuous mode [ 1631.724731][T30221] syzkaller0: entered allmulticast mode [ 1631.747384][T30223] lo: Caught tx_queue_len zero misconfig [ 1631.835203][T30221] tipc: Resetting bearer [ 1631.864212][T30218] tipc: Resetting bearer [ 1631.955024][T30218] tipc: Disabling bearer [ 1632.022380][T30228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14311'. [ 1632.155865][T30234] nbd: nbd2 already in use [ 1632.219883][T30240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14315'. [ 1632.286250][T30243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14316'. [ 1632.292667][T30244] netlink: 'syz.0.14315': attribute type 1 has an invalid length. [ 1632.516704][T30256] bond3: option lacp_rate: invalid value (192) [ 1632.526504][T30256] bond3 (unregistering): Released all slaves [ 1632.612843][T30260] "syz.4.14321" (30260) uses obsolete ecb(arc4) skcipher [ 1632.696058][T30262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14322'. [ 1632.759453][T30267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1632.781112][T30260] netlink: 84 bytes leftover after parsing attributes in process `syz.4.14321'. [ 1632.803353][T30270] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14324'. [ 1632.826473][T30270] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14324'. [ 1633.386055][T30312] wlan1 speed is unknown, defaulting to 1000 [ 1633.535865][T30316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.609441][T30316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.650992][T30312] lo speed is unknown, defaulting to 1000 [ 1633.659081][T30312] lo speed is unknown, defaulting to 1000 [ 1633.677125][T30315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.698702][T25064] net_ratelimit: 25 callbacks suppressed [ 1633.698722][T25064] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1633.835444][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1633.946794][T25061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1634.104119][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1634.452697][T25064] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1634.604293][ T6434] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1634.758370][T30370] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 1634.888762][T25059] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1634.940160][T30362] wlan1 speed is unknown, defaulting to 1000 [ 1635.024570][T25059] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1635.174122][T17743] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1635.295988][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1635.635677][T30397] __nla_validate_parse: 9 callbacks suppressed [ 1635.635698][T30397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14356'. [ 1635.945560][T30408] netlink: 'syz.1.14361': attribute type 1 has an invalid length. [ 1635.964905][T30405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14360'. [ 1635.968152][T30408] netlink: 'syz.1.14361': attribute type 2 has an invalid length. [ 1636.012617][T30408] netlink: 'syz.1.14361': attribute type 1 has an invalid length. [ 1636.043785][T30408] netlink: 'syz.1.14361': attribute type 3 has an invalid length. [ 1636.232837][T30402] wlan1 speed is unknown, defaulting to 1000 [ 1636.246681][T30362] lo speed is unknown, defaulting to 1000 [ 1636.278245][T30362] lo speed is unknown, defaulting to 1000 [ 1636.339377][T30415] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14363'. [ 1636.832406][T30402] lo speed is unknown, defaulting to 1000 [ 1636.854624][T30402] lo speed is unknown, defaulting to 1000 [ 1637.219779][T30413] siw: device registration error -23 [ 1637.226531][T30424] wlan1 speed is unknown, defaulting to 1000 [ 1637.522876][T30424] lo speed is unknown, defaulting to 1000 [ 1637.531378][T30424] lo speed is unknown, defaulting to 1000 [ 1637.946677][T30434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14368'. [ 1638.086924][T30440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14368'. [ 1638.355108][T30448] netlink: 180 bytes leftover after parsing attributes in process `syz.0.14370'. [ 1638.391300][T30448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14370'. [ 1638.407461][T30448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14370'. [ 1638.805088][T25057] net_ratelimit: 23 callbacks suppressed [ 1638.805109][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1638.964905][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1639.067796][T30461] syzkaller0: entered promiscuous mode [ 1639.073307][T30461] syzkaller0: entered allmulticast mode [ 1639.128069][T30461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1639.324540][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1639.434776][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1639.544466][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1639.685239][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1639.816353][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1639.934437][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1640.054801][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1640.186825][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1640.758705][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14388'. [ 1640.779935][T30509] netlink: 'syz.0.14386': attribute type 12 has an invalid length. [ 1640.797918][T30509] netlink: 'syz.0.14386': attribute type 5 has an invalid length. [ 1640.824610][T30509] netlink: 'syz.0.14386': attribute type 2 has an invalid length. [ 1640.833508][T30509] netlink: 'syz.0.14386': attribute type 7 has an invalid length. [ 1640.846745][T30509] netlink: 108 bytes leftover after parsing attributes in process `syz.0.14386'. [ 1640.952396][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14389'. [ 1640.984494][T30522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14391'. [ 1640.999501][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14391'. [ 1641.034298][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14389'. [ 1641.316025][T30543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14395'. [ 1641.330661][T30543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14395'. [ 1641.344111][T30543] tipc: Cannot configure node identity twice [ 1641.351430][T30543] tipc: Cannot configure node identity twice [ 1641.384119][T30540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14395'. [ 1641.395894][T30540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14395'. [ 1641.405339][T30540] tipc: Cannot configure node identity twice [ 1641.411485][T30540] tipc: Cannot configure node identity twice [ 1641.645413][T30559] netlink: 'syz.0.14401': attribute type 1 has an invalid length. [ 1641.820560][T30559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1641.980999][T30563] bond3: (slave veth11): Enslaving as an active interface with a down link [ 1643.031891][T30618] sit0: entered promiscuous mode [ 1643.104885][T30618] netlink: 'syz.2.14412': attribute type 1 has an invalid length. [ 1643.151752][T30610] wlan1 speed is unknown, defaulting to 1000 [ 1643.176447][T30622] netlink: 'syz.3.14414': attribute type 1 has an invalid length. [ 1643.650598][T30648] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20001 [ 1643.852766][T30658] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1643.871839][T30658] syzkaller1: linktype set to 778 [ 1643.878814][T30610] lo speed is unknown, defaulting to 1000 [ 1643.927152][T30658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1643.936652][T30610] lo speed is unknown, defaulting to 1000 [ 1643.954359][T25057] net_ratelimit: 27 callbacks suppressed [ 1643.954378][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1644.084514][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1644.214046][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1644.364138][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1644.477297][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1644.526332][T30692] netlink: 'syz.3.14428': attribute type 1 has an invalid length. [ 1644.784412][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1644.929420][T30717] tipc: Enabled bearer , priority 0 [ 1644.938507][T30717] mac80211_hwsim hwsim174 syzkaller0: entered promiscuous mode [ 1644.946723][T30717] mac80211_hwsim hwsim174 syzkaller0: entered allmulticast mode [ 1644.964502][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1644.972404][T30717] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1644.983322][T30718] wlan1 speed is unknown, defaulting to 1000 [ 1645.074124][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1645.194506][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1645.242058][T30718] lo speed is unknown, defaulting to 1000 [ 1645.256887][T30724] wlan1 speed is unknown, defaulting to 1000 [ 1645.258086][T30718] lo speed is unknown, defaulting to 1000 [ 1645.314134][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1645.657227][T30740] tipc: Enabling of bearer rejected, failed to enable media [ 1645.859836][T30749] __nla_validate_parse: 12 callbacks suppressed [ 1645.859865][T30749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14443'. [ 1645.960671][T30724] lo speed is unknown, defaulting to 1000 [ 1646.118717][T30724] lo speed is unknown, defaulting to 1000 [ 1646.802989][T30795] sctp: [Deprecated]: syz.0.14453 (pid 30795) Use of int in max_burst socket option deprecated. [ 1646.802989][T30795] Use struct sctp_assoc_value instead [ 1647.046232][T30811] netlink: 'syz.1.14455': attribute type 4 has an invalid length. [ 1647.054483][T30811] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.14455'. [ 1647.065551][T30799] wlan1 speed is unknown, defaulting to 1000 [ 1647.494926][T30809] wlan1 speed is unknown, defaulting to 1000 [ 1647.692862][T30809] lo speed is unknown, defaulting to 1000 [ 1647.701371][T30799] lo speed is unknown, defaulting to 1000 [ 1647.702426][T30809] lo speed is unknown, defaulting to 1000 [ 1648.019624][T30799] lo speed is unknown, defaulting to 1000 [ 1648.870213][T30822] wlan1 speed is unknown, defaulting to 1000 [ 1648.984140][T25057] net_ratelimit: 25 callbacks suppressed [ 1648.984164][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1649.087247][T30822] lo speed is unknown, defaulting to 1000 [ 1649.095144][T30822] lo speed is unknown, defaulting to 1000 [ 1649.114509][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1649.224121][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1649.334108][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1649.444365][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1649.554452][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1649.664182][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1649.774102][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1649.843267][T30797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1649.980832][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1650.127227][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1650.309671][T30841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14464'. [ 1650.427042][T30846] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14465'. [ 1650.655534][T30871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14470'. [ 1650.717051][T30861] wlan1 speed is unknown, defaulting to 1000 [ 1651.305124][T30861] lo speed is unknown, defaulting to 1000 [ 1651.312847][T30861] lo speed is unknown, defaulting to 1000 [ 1652.516496][T30908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1652.528029][T30938] netlink: 'syz.4.14487': attribute type 11 has an invalid length. [ 1652.538179][T30938] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.14487'. [ 1652.733558][T30946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14489'. [ 1652.755388][T30946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14489'. [ 1652.795163][T30942] wlan1 speed is unknown, defaulting to 1000 [ 1653.088478][T30961] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1653.349085][T30942] lo speed is unknown, defaulting to 1000 [ 1653.369925][T30942] lo speed is unknown, defaulting to 1000 [ 1653.574283][T31546] lec:lec_start_xmit: lec0:No lecd attached [ 1653.920279][T30973] bond5: option updelay: invalid value (18446744072924056005) [ 1653.945847][T30973] bond5: option updelay: allowed values 0 - 2147483647 [ 1653.975656][T30973] bond5 (unregistering): Released all slaves [ 1654.177887][T30983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14502'. [ 1654.194119][ T6429] net_ratelimit: 27 callbacks suppressed [ 1654.194139][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1654.254878][T30970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14499'. [ 1654.364190][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1654.477084][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1654.582494][T30990] syzkaller0: entered promiscuous mode [ 1654.606926][T30990] syzkaller0: entered allmulticast mode [ 1654.674266][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1654.802429][T30998] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14507'. [ 1654.812223][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1654.924189][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1655.094071][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1655.230169][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1655.414698][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1655.554142][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1655.656581][T31030] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14514'. [ 1655.885709][T31034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14517'. [ 1655.904984][T31034] vlan3: entered promiscuous mode [ 1655.913629][T31034] erspan0: entered promiscuous mode [ 1656.016469][T31039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14519'. [ 1656.672382][T31060] wlan1 speed is unknown, defaulting to 1000 [ 1656.755780][T31068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14527'. [ 1656.765231][T31068] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1657.245612][T31073] wlan1 speed is unknown, defaulting to 1000 [ 1657.254611][T31060] lo speed is unknown, defaulting to 1000 [ 1657.276213][T31060] lo speed is unknown, defaulting to 1000 [ 1657.844477][T31087] wlan1 speed is unknown, defaulting to 1000 [ 1657.854038][T31073] lo speed is unknown, defaulting to 1000 [ 1657.868808][T31073] lo speed is unknown, defaulting to 1000 [ 1658.436695][T31087] lo speed is unknown, defaulting to 1000 [ 1658.505256][T31087] lo speed is unknown, defaulting to 1000 [ 1658.873961][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5300 ms [ 1658.882065][ C0] lec:lec_tx_timeout: lec0 [ 1659.018258][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14538'. [ 1659.037507][T31106] netlink: 'syz.3.14538': attribute type 298 has an invalid length. [ 1659.444982][T31116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14542'. [ 1659.464471][ T7403] net_ratelimit: 25 callbacks suppressed [ 1659.464494][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1659.654358][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1659.753829][T31120] netlink: 'syz.1.14543': attribute type 30 has an invalid length. [ 1659.805722][T31122] netlink: 'syz.1.14543': attribute type 1 has an invalid length. [ 1659.813846][T31122] netlink: 'syz.1.14543': attribute type 2 has an invalid length. [ 1659.890972][T31120] bond8: option arp_missed_max: invalid value (0) [ 1659.898024][T31120] bond8: option arp_missed_max: allowed values 1 - 255 [ 1659.916285][T31120] bond8 (unregistering): Released all slaves [ 1660.044296][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1660.074988][T31126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14544'. [ 1660.154896][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1660.283751][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1660.557396][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1660.674783][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1660.805504][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1660.934526][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1661.088205][T31167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14555'. [ 1661.156890][T31165] syzkaller0: entered promiscuous mode [ 1661.162459][T31165] syzkaller0: entered allmulticast mode [ 1661.286641][T31180] netlink: 'syz.4.14556': attribute type 8 has an invalid length. [ 1661.395853][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1661.640291][T31188] wlan1 speed is unknown, defaulting to 1000 [ 1661.921251][T31202] batadv_slave_0: entered promiscuous mode [ 1661.960170][T31202] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14562'. [ 1662.001286][T31203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14564'. [ 1662.163534][T31214] netlink: 'syz.4.14567': attribute type 3 has an invalid length. [ 1662.192338][T31214] netlink: 'syz.4.14567': attribute type 3 has an invalid length. [ 1662.223195][T31194] batadv_slave_0: left promiscuous mode [ 1662.545551][T31226] netlink: 'syz.3.14570': attribute type 4 has an invalid length. [ 1662.675365][T31188] lo speed is unknown, defaulting to 1000 [ 1662.728827][T31188] lo speed is unknown, defaulting to 1000 [ 1662.767268][T31240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14573'. [ 1662.784609][T31238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14576'. [ 1662.830141][T31240] netlink: 'syz.3.14573': attribute type 9 has an invalid length. [ 1662.856737][T31245] netlink: 'syz.0.14577': attribute type 11 has an invalid length. [ 1662.879848][T31240] netlink: 'syz.3.14573': attribute type 11 has an invalid length. [ 1662.907191][T31240] netlink: 211912 bytes leftover after parsing attributes in process `syz.3.14573'. [ 1662.939209][T31238] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1662.991353][T31246] bond8: (slave batadv1): Opening slave failed [ 1663.113603][T31251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14578'. [ 1663.421552][T31256] siw: device registration error -23 [ 1663.551313][T31267] syzkaller0: entered promiscuous mode [ 1663.557125][T31267] syzkaller0: entered allmulticast mode [ 1664.198045][T31285] __nla_validate_parse: 4 callbacks suppressed [ 1664.198064][T31285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14587'. [ 1664.374687][T31289] wlan1 speed is unknown, defaulting to 1000 [ 1664.437206][T31297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14590'. [ 1664.504960][T17733] net_ratelimit: 19 callbacks suppressed [ 1664.504980][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1664.667066][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1664.797086][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1664.856350][T31307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14595'. [ 1664.948001][ T7409] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1664.970062][T31312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14596'. [ 1664.982051][ T7409] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.017414][T31307] bond9: (slave syz_tun): Enslaving as an active interface with an up link [ 1665.047728][T31289] lo speed is unknown, defaulting to 1000 [ 1665.057838][ T7409] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.084887][T31307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14595'. [ 1665.094631][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1665.121885][ T7409] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.138231][T31289] lo speed is unknown, defaulting to 1000 [ 1665.229144][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1665.305604][T31336] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14600'. [ 1665.354923][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1665.389023][T31337] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14601'. [ 1665.472552][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1665.597101][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1665.660751][T31346] syzkaller0: entered promiscuous mode [ 1665.688122][T31346] syzkaller0: entered allmulticast mode [ 1665.858035][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1665.995162][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1666.703669][T31387] validate_nla: 1 callbacks suppressed [ 1666.703690][T31387] netlink: 'syz.0.14614': attribute type 1 has an invalid length. [ 1666.753702][T31391] netlink: 'syz.4.14615': attribute type 1 has an invalid length. [ 1666.762802][T31391] netlink: 'syz.4.14615': attribute type 2 has an invalid length. [ 1666.773628][T31391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14615'. [ 1667.035329][T31402] netlink: 65648 bytes leftover after parsing attributes in process `syz.1.14613'. [ 1667.045487][T31402] netlink: 38772 bytes leftover after parsing attributes in process `syz.1.14613'. [ 1667.149883][T31412] wlan1 speed is unknown, defaulting to 1000 [ 1667.617096][T31412] lo speed is unknown, defaulting to 1000 [ 1667.624984][T31412] lo speed is unknown, defaulting to 1000 [ 1669.258117][T31472] netlink: 'syz.1.14635': attribute type 21 has an invalid length. [ 1669.284664][T31472] __nla_validate_parse: 6 callbacks suppressed [ 1669.284684][T31472] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14635'. [ 1669.344315][T31472] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14635'. [ 1669.594239][ T7403] net_ratelimit: 23 callbacks suppressed [ 1669.594260][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1669.638088][T31486] wlan1 speed is unknown, defaulting to 1000 [ 1669.666080][T31492] openvswitch: netlink: Message has 8 unknown bytes. [ 1669.778843][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1669.840665][T31500] netlink: 'syz.3.14644': attribute type 10 has an invalid length. [ 1669.924590][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1669.990530][T31506] sctp: [Deprecated]: syz.3.14646 (pid 31506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1669.990530][T31506] Use struct sctp_sack_info instead [ 1670.044350][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1670.066601][T31506] sctp: [Deprecated]: syz.3.14646 (pid 31506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1670.066601][T31506] Use struct sctp_sack_info instead [ 1670.154163][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1670.222428][T31509] xt_hashlimit: size too large, truncated to 1048576 [ 1670.243809][T31491] wlan1 speed is unknown, defaulting to 1000 [ 1670.250199][T31486] lo speed is unknown, defaulting to 1000 [ 1670.264308][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1670.314634][T31509] xt_hashlimit: max too large, truncated to 1048576 [ 1670.369407][T31486] lo speed is unknown, defaulting to 1000 [ 1670.408878][T31511] ip6erspan0: entered allmulticast mode [ 1670.426584][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1670.544222][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1670.837479][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1671.104633][T31532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14656'. [ 1671.143214][T31532] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14656'. [ 1671.195302][T31532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14656'. [ 1671.404859][T31542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14655'. [ 1671.524947][T31491] lo speed is unknown, defaulting to 1000 [ 1671.586549][T31544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14660'. [ 1671.597207][T31549] netlink: 'syz.4.14662': attribute type 1 has an invalid length. [ 1671.625279][T31549] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14662'. [ 1671.672615][T31547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14661'. [ 1671.709447][T31491] lo speed is unknown, defaulting to 1000 [ 1671.727653][T31554] netlink: 'syz.2.14660': attribute type 27 has an invalid length. [ 1671.995628][T31560] m1Ie5nè‹Ò: entered promiscuous mode [ 1672.254999][T31571] netlink: 'syz.1.14667': attribute type 4 has an invalid length. [ 1672.302978][T31571] netlink: 'syz.1.14667': attribute type 4 has an invalid length. [ 1672.319053][T31571] netlink: 'syz.1.14667': attribute type 4 has an invalid length. [ 1672.328028][T31572] netlink: 'syz.1.14667': attribute type 4 has an invalid length. [ 1672.784235][T31580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14669'. [ 1672.907750][T31589] netlink: 'syz.2.14671': attribute type 1 has an invalid length. [ 1672.916671][T31590] netlink: 'syz.2.14671': attribute type 1 has an invalid length. [ 1672.926483][T31591] xt_policy: output policy not valid in PREROUTING and INPUT [ 1673.341722][ T2648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1673.353528][ T2648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1673.363282][ T2648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1673.371669][ T2648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1673.379827][ T2648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1673.590992][T31607] wlan1 speed is unknown, defaulting to 1000 [ 1673.840080][T20142] bond9: (slave syz_tun): Releasing backup interface [ 1673.928724][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1673.941182][ T1295] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1674.066346][T31607] lo speed is unknown, defaulting to 1000 [ 1674.079199][T31607] lo speed is unknown, defaulting to 1000 [ 1674.478722][T31607] chnl_net:caif_netlink_parms(): no params data found [ 1674.622979][T31607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.630387][T31607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.643710][T31607] bridge_slave_0: entered allmulticast mode [ 1674.656613][T31607] bridge_slave_0: entered promiscuous mode [ 1674.676714][T31607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.684451][T31607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.691801][T31607] bridge_slave_1: entered allmulticast mode [ 1674.706188][T31607] bridge_slave_1: entered promiscuous mode [ 1674.764658][T31607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.775094][T31642] __nla_validate_parse: 4 callbacks suppressed [ 1674.775113][T31642] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.14682'. [ 1674.796114][T31607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.821099][T31642] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.14682'. [ 1674.855923][T31607] team0: Port device team_slave_0 added [ 1674.865629][T31607] team0: Port device team_slave_1 added [ 1674.905167][T17719] net_ratelimit: 23 callbacks suppressed [ 1674.905187][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1674.921645][T31607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.929653][T31607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.956554][T31607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.971860][T31607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.979193][T31607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.007693][T31607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.071810][T31607] hsr_slave_0: entered promiscuous mode [ 1675.080240][T31607] hsr_slave_1: entered promiscuous mode [ 1675.087446][T31607] debugfs: 'hsr0' already exists in 'hsr' [ 1675.093527][T31607] Cannot create hsr debugfs directory [ 1675.244130][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1675.285494][T31607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1675.380304][T31607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1675.414232][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1675.451452][T31607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1675.514347][ T2648] Bluetooth: hci3: command tx timeout [ 1675.533575][T31607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1675.564265][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1675.694125][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1675.804188][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1675.914368][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1676.024234][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1676.048696][T31596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1676.067129][T31607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1676.138715][T31607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1676.176911][T31607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1676.233566][T31607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1676.255889][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1676.395141][T31675] wlan1 speed is unknown, defaulting to 1000 [ 1676.416256][T31677] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14690'. [ 1676.538254][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1676.581294][T31607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.636470][T31607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.712297][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.719583][ T6429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.768686][T25057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.775977][T25057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.806423][T31698] sock: sock_timestamping_bind_phc: sock not bind to device [ 1676.817194][T31698] tipc: Enabling of bearer rejected, failed to enable media [ 1677.183101][T31698] syzkaller0: entered promiscuous mode [ 1677.214306][T31698] syzkaller0: entered allmulticast mode [ 1677.229441][T31675] lo speed is unknown, defaulting to 1000 [ 1677.600943][ T2648] Bluetooth: hci3: command tx timeout [ 1678.946869][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1678.954972][ C0] lec:lec_tx_timeout: lec0 [ 1679.299264][T31675] lo speed is unknown, defaulting to 1000 [ 1679.675291][ T2648] Bluetooth: hci3: command tx timeout [ 1679.785705][T31607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.881953][T31725] wlan1 speed is unknown, defaulting to 1000 [ 1680.016124][ T7409] net_ratelimit: 7 callbacks suppressed [ 1680.016145][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1680.049625][T31729] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1680.099101][T31732] gretap1: entered promiscuous mode [ 1680.200148][T31607] veth0_vlan: entered promiscuous mode [ 1680.230585][T31607] veth1_vlan: entered promiscuous mode [ 1680.305199][T31725] lo speed is unknown, defaulting to 1000 [ 1680.374480][T31725] lo speed is unknown, defaulting to 1000 [ 1680.381926][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1680.395800][T31607] veth0_macvtap: entered promiscuous mode [ 1680.454540][T31607] veth1_macvtap: entered promiscuous mode [ 1680.499199][T31607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1680.539161][T31607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.578439][T17719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.625433][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1680.642774][ T7403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.678106][ T7403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.720099][ T7403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.814161][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1680.908482][T31750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14706'. [ 1680.924475][ T7409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.935635][ T7409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.173309][ T7403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.184564][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1681.197822][ T7403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.374168][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1681.507246][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1681.586053][T31772] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14712'. [ 1681.656684][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1681.666432][T31772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14712'. [ 1681.686707][T31775] netlink: 'syz.4.14713': attribute type 1 has an invalid length. [ 1681.695600][T31775] netlink: 216 bytes leftover after parsing attributes in process `syz.4.14713'. [ 1681.696979][T31772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14712'. [ 1681.755856][ T2648] Bluetooth: hci3: command tx timeout [ 1681.836757][T31778] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1681.883166][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1681.900816][T31789] netlink: 'syz.4.14716': attribute type 1 has an invalid length. [ 1682.285040][T31810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14719'. [ 1682.477905][T31820] syzkaller0: entered promiscuous mode [ 1682.483653][T31820] syzkaller0: entered allmulticast mode [ 1682.903193][T31836] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14728'. [ 1682.975958][T31836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14728'. [ 1683.100140][T31844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14729'. [ 1683.130492][T31844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14729'. [ 1683.154850][T31798] lec:lec_atm_close: lec0: Shut down! [ 1683.556639][T31857] vlan0: entered allmulticast mode [ 1683.562183][T31857] bridge0: port 3(vlan0) entered blocking state [ 1683.574274][T31857] bridge0: port 3(vlan0) entered disabled state [ 1683.584342][T31857] vlan0: entered promiscuous mode [ 1685.124897][ T7409] net_ratelimit: 24 callbacks suppressed [ 1685.124919][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1685.140418][T31918] IPVS: length: 177 != 8 [ 1685.261882][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1685.395317][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1685.524146][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1685.534761][T31940] netlink: 'syz.0.14758': attribute type 2 has an invalid length. [ 1685.877756][T31953] can: request_module (can-proto-0) failed. [ 1685.959462][T31948] wg1: entered promiscuous mode [ 1685.965404][T31948] wg1: entered allmulticast mode [ 1685.984047][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1686.106169][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1686.133336][T31968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1686.205551][T31971] __nla_validate_parse: 6 callbacks suppressed [ 1686.205571][T31971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14765'. [ 1686.235424][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1686.269636][T31969] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1686.310287][T31969] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1686.347567][T31976] syzkaller0: entered promiscuous mode [ 1686.353122][T31976] syzkaller0: entered allmulticast mode [ 1686.405266][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1686.574540][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1686.765912][T32002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14773'. [ 1686.776666][T32002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14773'. [ 1686.858737][T32007] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1687.056142][T32019] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1687.226378][ T30] audit: type=1804 audit(1771349299.588:47): pid=32029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.14781" name="memory.events" dev="tmpfs" ino=2157 res=1 errno=0 [ 1687.256876][ T30] audit: type=1800 audit(1771349299.588:48): pid=32029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14781" name="memory.events" dev="tmpfs" ino=2157 res=0 errno=0 [ 1687.373376][T32036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1687.405549][T32036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1687.416841][T32037] netlink: 'syz.3.14784': attribute type 2 has an invalid length. [ 1687.526656][T32045] sch_tbf: burst 32855 is lower than device lo mtu (327700) ! [ 1687.800913][T32061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14788'. [ 1687.819989][T32065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14784'. [ 1687.849546][T32068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14788'. [ 1687.899659][T32068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14788'. [ 1687.967401][T32070] wlan1 speed is unknown, defaulting to 1000 [ 1688.185708][T32075] tipc: Enabled bearer , priority 0 [ 1688.209088][T32080] syzkaller0: entered promiscuous mode [ 1688.228192][T32080] syzkaller0: entered allmulticast mode [ 1688.304541][T32084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14793'. [ 1688.322156][T32070] lo speed is unknown, defaulting to 1000 [ 1688.332189][T32084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14793'. [ 1688.343820][T32070] lo speed is unknown, defaulting to 1000 [ 1688.357632][T32084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14793'. [ 1688.625837][T32076] siw: device registration error -23 [ 1688.690224][T32076] tipc: Resetting bearer [ 1688.767053][T32076] tipc: Disabling bearer [ 1688.870628][T32100] netlink: 'syz.2.14800': attribute type 1 has an invalid length. [ 1688.878637][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 1688.878677][ C0] lec:lec_tx_timeout: lec0 [ 1689.381679][T32105] tunl0: Caught tx_queue_len zero misconfig [ 1689.984378][T32137] netlink: 'syz.0.14811': attribute type 13 has an invalid length. [ 1690.138444][T32148] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1690.149726][T32149] netlink: 'syz.2.14816': attribute type 1 has an invalid length. [ 1690.161101][T32143] tipc: Invalid UDP bearer configuration [ 1690.161157][T32143] tipc: Enabling of bearer rejected, failed to enable media [ 1690.264240][T17719] net_ratelimit: 22 callbacks suppressed [ 1690.264261][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1690.340309][T32153] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1690.366384][T32153] bond6: (slave bond7): making interface the new active one [ 1690.439914][T32153] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1690.527524][T32159] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 1690.567265][T32149] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1690.640747][T32172] vlan1: entered promiscuous mode [ 1690.655895][T32172] bond6: entered promiscuous mode [ 1690.661354][T32172] bond7: entered promiscuous mode [ 1690.984220][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1691.124724][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1691.193714][T32189] team0 (unregistering): Port device C removed [ 1691.211530][T32198] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1691.221347][T32189] team0 (unregistering): Port device team_slave_1 removed [ 1691.234836][T32201] __nla_validate_parse: 6 callbacks suppressed [ 1691.234858][T32201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14829'. [ 1691.275564][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1691.398339][T17731] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1691.534133][ T7409] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1691.627352][T32225] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14833'. [ 1691.694109][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1691.904770][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1691.989022][T32242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1692.034119][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1692.156587][T32251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14843'. [ 1692.222645][T32257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14844'. [ 1692.241653][T32259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14843'. [ 1692.456216][T32262] netlink: 'syz.1.14845': attribute type 16 has an invalid length. [ 1692.509291][T32262] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1692.526267][T32272] netlink: 'syz.1.14845': attribute type 1 has an invalid length. [ 1692.534210][T32272] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1692.664901][T32275] bridge0: entered promiscuous mode [ 1692.945038][T32286] netlink: 'syz.1.14852': attribute type 1 has an invalid length. [ 1693.043464][T32289] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1693.094738][T32294] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.14847'. [ 1693.199459][T32286] veth3: entered promiscuous mode [ 1693.214642][T32286] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1693.387734][T32306] syzkaller0: entered promiscuous mode [ 1693.393286][T32306] syzkaller0: entered allmulticast mode [ 1693.571837][T32316] sctp: [Deprecated]: syz.2.14859 (pid 32316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1693.571837][T32316] Use struct sctp_sack_info instead [ 1693.987111][T32340] bond7: Unable to set up delay as MII monitoring is disabled [ 1694.017326][T32340] bond7 (unregistering): Released all slaves [ 1694.102994][T32352] tipc: Enabled bearer , priority 0 [ 1694.110975][T32352] syzkaller0: entered promiscuous mode [ 1694.116999][T32352] syzkaller0: entered allmulticast mode [ 1694.180423][T32352] tipc: Resetting bearer [ 1694.256863][T17733] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 1694.291872][T32351] tipc: Resetting bearer [ 1694.311837][T32357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14868'. [ 1694.347352][T32351] tipc: Disabling bearer [ 1694.358701][T32365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14872'. [ 1694.731577][ T6435] tipc: Subscription rejected, illegal request [ 1695.251068][T32423] wlan1 speed is unknown, defaulting to 1000 [ 1695.271446][T32429] tipc: Failed to remove unknown binding: 66,0,0/141087988:4084588159/4084588160 [ 1695.304267][T32429] tipc: Failed to remove unknown binding: 66,0,0/141087988:4084588159/4084588160 [ 1695.314710][T17731] net_ratelimit: 84 callbacks suppressed [ 1695.314729][T17731] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1695.456689][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1695.601033][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1695.734416][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1695.753767][T32464] batadv_slave_0: entered promiscuous mode [ 1695.790851][T32423] lo speed is unknown, defaulting to 1000 [ 1695.800037][T32423] lo speed is unknown, defaulting to 1000 [ 1695.808618][T32464] netlink: 'syz.3.14896': attribute type 5 has an invalid length. [ 1695.854596][T17731] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1695.955768][T32464] batadv1: entered promiscuous mode [ 1696.174144][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1696.191943][T32462] batadv_slave_0: left promiscuous mode [ 1696.286145][T32480] __nla_validate_parse: 4 callbacks suppressed [ 1696.286167][T32480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14899'. [ 1696.324312][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1696.354475][T32480] tipc: Enabled bearer , priority 0 [ 1696.405709][T32480] syzkaller0: entered promiscuous mode [ 1696.411212][T32480] syzkaller0: entered allmulticast mode [ 1696.439832][T32493] geneve3: entered promiscuous mode [ 1696.454022][T32493] geneve3: entered allmulticast mode [ 1696.595530][T32480] tipc: Resetting bearer [ 1696.627190][T32479] tipc: Resetting bearer [ 1696.689131][T32479] tipc: Disabling bearer [ 1696.767698][T32501] wlan1 speed is unknown, defaulting to 1000 [ 1696.784675][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1696.904490][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1697.027399][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1697.054754][T32518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14909'. [ 1697.209547][T32522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14910'. [ 1697.362254][T32530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14914'. [ 1697.506881][T32501] lo speed is unknown, defaulting to 1000 [ 1697.516232][T32501] lo speed is unknown, defaulting to 1000 [ 1697.530058][T32537] netlink: 'syz.2.14916': attribute type 10 has an invalid length. [ 1697.599180][T32537] team0: Port device dummy0 added [ 1697.627340][T32530] netlink: 'syz.4.14914': attribute type 2 has an invalid length. [ 1697.636983][T32048] block nbd64: NBD_DISCONNECT [ 1697.659208][T32542] netlink: 'syz.2.14916': attribute type 10 has an invalid length. [ 1697.771556][T32542] team0: Port device dummy0 removed [ 1697.788500][T32534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 1697.919783][T32048] udevd[32048]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1697.947853][T32546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14917'. [ 1698.000286][T32531] wlan1 speed is unknown, defaulting to 1000 [ 1698.252407][T32562] SET target dimension over the limit! [ 1698.612512][T32578] netlink: 'syz.4.14925': attribute type 6 has an invalid length. [ 1698.708669][T32580] netlink: 'syz.4.14925': attribute type 1 has an invalid length. [ 1698.825038][T32580] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1698.912065][T32585] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1698.923780][T32531] lo speed is unknown, defaulting to 1000 [ 1698.946680][T32531] lo speed is unknown, defaulting to 1000 [ 1699.350884][T32604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14932'. [ 1699.363777][T32604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14932'. [ 1699.412342][T32604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.420138][T32604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.450275][T32604] bridge0: entered allmulticast mode [ 1699.491351][T32606] bridge_slave_1: left allmulticast mode [ 1699.535956][T32606] bridge_slave_1: left promiscuous mode [ 1699.535976][T32608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14933'. [ 1699.562769][T32608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14933'. [ 1699.614268][T32606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.663053][T32606] bridge_slave_0: left allmulticast mode [ 1699.669267][T32606] bridge_slave_0: left promiscuous mode [ 1699.682010][T32606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.829185][T32605] pim6reg1: entered promiscuous mode [ 1699.844493][T32605] pim6reg1: entered allmulticast mode [ 1700.134548][T32632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14939'. [ 1700.374416][ T6429] net_ratelimit: 17 callbacks suppressed [ 1700.374438][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1700.514129][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1700.624240][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1700.734689][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1700.894373][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1701.004817][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1701.138008][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1701.264381][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1701.374307][T17731] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1701.462688][T32668] sctp: [Deprecated]: syz.3.14949 (pid 32668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1701.462688][T32668] Use struct sctp_sack_info instead [ 1701.494248][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1701.739966][T32674] __nla_validate_parse: 4 callbacks suppressed [ 1701.739987][T32674] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14950'. [ 1701.774632][T32674] .70·: renamed from hsr0 (while UP) [ 1701.782365][T32674] .70·: entered allmulticast mode [ 1701.790279][T32674] hsr_slave_0: entered allmulticast mode [ 1701.804302][T32674] hsr_slave_1: entered allmulticast mode [ 1701.907849][T32680] FAULT_INJECTION: forcing a failure. [ 1701.907849][T32680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1701.924316][T32680] CPU: 0 UID: 0 PID: 32680 Comm: syz.2.14952 Not tainted syzkaller #0 PREEMPT(full) [ 1701.924345][T32680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1701.924359][T32680] Call Trace: [ 1701.924367][T32680] [ 1701.924376][T32680] dump_stack_lvl+0xe8/0x150 [ 1701.924411][T32680] should_fail_ex+0x412/0x560 [ 1701.924447][T32680] _copy_from_iter+0x1d3/0x1670 [ 1701.924486][T32680] ? rcu_is_watching+0x15/0xb0 [ 1701.924520][T32680] ? __pfx__copy_from_iter+0x10/0x10 [ 1701.924559][T32680] ? netlink_sendmsg+0x650/0xb40 [ 1701.924579][T32680] ? skb_put+0x11b/0x210 [ 1701.924607][T32680] netlink_sendmsg+0x6c0/0xb40 [ 1701.924638][T32680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1701.924663][T32680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1701.924693][T32680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1701.924724][T32680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1701.924744][T32680] ____sys_sendmsg+0xa68/0xad0 [ 1701.924770][T32680] ? __might_fault+0xaf/0x130 [ 1701.924801][T32680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1701.924837][T32680] ? import_iovec+0x73/0xa0 [ 1701.924861][T32680] ___sys_sendmsg+0x2a5/0x360 [ 1701.924886][T32680] ? __lock_acquire+0x6b5/0x2cf0 [ 1701.924913][T32680] ? __pfx____sys_sendmsg+0x10/0x10 [ 1701.924978][T32680] ? __fget_files+0x2a/0x420 [ 1701.924997][T32680] ? __fget_files+0x3a0/0x420 [ 1701.925029][T32680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1701.925058][T32680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1701.925094][T32680] ? __pfx_ksys_write+0x10/0x10 [ 1701.925130][T32680] do_syscall_64+0x14d/0xf80 [ 1701.925156][T32680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.925175][T32680] ? trace_irq_disable+0x37/0x100 [ 1701.925198][T32680] ? clear_bhb_loop+0x40/0x90 [ 1701.925223][T32680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.925243][T32680] RIP: 0033:0x7f857a39bf79 [ 1701.925262][T32680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.925279][T32680] RSP: 002b:00007f857b327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1701.925301][T32680] RAX: ffffffffffffffda RBX: 00007f857a615fa0 RCX: 00007f857a39bf79 [ 1701.925317][T32680] RDX: 0000000020044000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1701.925330][T32680] RBP: 00007f857b327090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.925349][T32680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.925361][T32680] R13: 00007f857a616038 R14: 00007f857a615fa0 R15: 00007fff429b3548 [ 1701.925403][T32680] [ 1702.550871][T32691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14955'. [ 1702.979925][T32697] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14957'. [ 1702.991367][T32697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14957'. [ 1703.001450][T32697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14957'. [ 1703.031642][T32631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1703.248528][T32713] FAULT_INJECTION: forcing a failure. [ 1703.248528][T32713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1703.296280][T32713] CPU: 0 UID: 0 PID: 32713 Comm: syz.2.14963 Not tainted syzkaller #0 PREEMPT(full) [ 1703.296309][T32713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1703.296323][T32713] Call Trace: [ 1703.296332][T32713] [ 1703.296349][T32713] dump_stack_lvl+0xe8/0x150 [ 1703.296384][T32713] should_fail_ex+0x412/0x560 [ 1703.296419][T32713] _copy_from_iter+0x1d3/0x1670 [ 1703.296460][T32713] ? rcu_is_watching+0x15/0xb0 [ 1703.296487][T32713] ? __pfx__copy_from_iter+0x10/0x10 [ 1703.296526][T32713] ? netlink_sendmsg+0x650/0xb40 [ 1703.296546][T32713] ? skb_put+0x11b/0x210 [ 1703.296574][T32713] netlink_sendmsg+0x6c0/0xb40 [ 1703.296607][T32713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.296633][T32713] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1703.296665][T32713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1703.296696][T32713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.296717][T32713] ____sys_sendmsg+0xa68/0xad0 [ 1703.296744][T32713] ? __might_fault+0xaf/0x130 [ 1703.296776][T32713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1703.296813][T32713] ? import_iovec+0x73/0xa0 [ 1703.296839][T32713] ___sys_sendmsg+0x2a5/0x360 [ 1703.296864][T32713] ? __lock_acquire+0x6b5/0x2cf0 [ 1703.296892][T32713] ? __pfx____sys_sendmsg+0x10/0x10 [ 1703.296957][T32713] ? __fget_files+0x2a/0x420 [ 1703.296976][T32713] ? __fget_files+0x3a0/0x420 [ 1703.297008][T32713] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1703.297037][T32713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1703.297076][T32713] ? __pfx_ksys_write+0x10/0x10 [ 1703.297116][T32713] do_syscall_64+0x14d/0xf80 [ 1703.297144][T32713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.297164][T32713] ? trace_irq_disable+0x37/0x100 [ 1703.297188][T32713] ? clear_bhb_loop+0x40/0x90 [ 1703.297211][T32713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.297231][T32713] RIP: 0033:0x7f857a39bf79 [ 1703.297251][T32713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.297269][T32713] RSP: 002b:00007f857b327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.297292][T32713] RAX: ffffffffffffffda RBX: 00007f857a615fa0 RCX: 00007f857a39bf79 [ 1703.297307][T32713] RDX: 0000000020044000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1703.297321][T32713] RBP: 00007f857b327090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.297343][T32713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.297356][T32713] R13: 00007f857a616038 R14: 00007f857a615fa0 R15: 00007fff429b3548 [ 1703.297393][T32713] [ 1703.616164][T32719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14964'. [ 1703.707386][T32728] x_tables: duplicate underflow at hook 1 [ 1703.781814][T32734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14968'. [ 1703.854909][T32743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14970'. [ 1703.888714][ T6435] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 1703.900458][ T6435] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 1703.916043][ T6435] bond0: active interface up! [ 1703.960118][T32746] syzkaller0: entered promiscuous mode [ 1703.966110][T32746] syzkaller0: entered allmulticast mode [ 1704.163793][T32753] netlink: 'syz.4.14974': attribute type 1 has an invalid length. [ 1704.189801][T32757] netlink: 'syz.4.14974': attribute type 1 has an invalid length. [ 1704.226724][T32760] FAULT_INJECTION: forcing a failure. [ 1704.226724][T32760] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.240585][T32760] CPU: 1 UID: 0 PID: 32760 Comm: syz.0.14975 Not tainted syzkaller #0 PREEMPT(full) [ 1704.240613][T32760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1704.240626][T32760] Call Trace: [ 1704.240635][T32760] [ 1704.240644][T32760] dump_stack_lvl+0xe8/0x150 [ 1704.240677][T32760] should_fail_ex+0x412/0x560 [ 1704.240713][T32760] should_failslab+0xa8/0x100 [ 1704.240742][T32760] ? skb_clone+0x212/0x3a0 [ 1704.240768][T32760] kmem_cache_alloc_noprof+0x87/0x650 [ 1704.240790][T32760] ? __netlink_lookup+0xc6/0x8b0 [ 1704.240815][T32760] skb_clone+0x212/0x3a0 [ 1704.240839][T32760] __netlink_deliver_tap+0x404/0x850 [ 1704.240866][T32760] ? netlink_deliver_tap+0x2e/0x1b0 [ 1704.240885][T32760] netlink_deliver_tap+0x19c/0x1b0 [ 1704.240903][T32760] netlink_unicast+0x7e3/0x9b0 [ 1704.240954][T32760] ? __pfx_netlink_unicast+0x10/0x10 [ 1704.240981][T32760] ? netlink_sendmsg+0x650/0xb40 [ 1704.240997][T32760] ? skb_put+0x11b/0x210 [ 1704.241019][T32760] netlink_sendmsg+0x813/0xb40 [ 1704.241045][T32760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.241066][T32760] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1704.241092][T32760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1704.241118][T32760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.241135][T32760] ____sys_sendmsg+0xa68/0xad0 [ 1704.241157][T32760] ? __might_fault+0xaf/0x130 [ 1704.241182][T32760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.241212][T32760] ? import_iovec+0x73/0xa0 [ 1704.241233][T32760] ___sys_sendmsg+0x2a5/0x360 [ 1704.241253][T32760] ? __lock_acquire+0x6b5/0x2cf0 [ 1704.241282][T32760] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.241335][T32760] ? __fget_files+0x2a/0x420 [ 1704.241351][T32760] ? __fget_files+0x3a0/0x420 [ 1704.241377][T32760] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1704.241402][T32760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1704.241437][T32760] ? __pfx_ksys_write+0x10/0x10 [ 1704.241469][T32760] do_syscall_64+0x14d/0xf80 [ 1704.241492][T32760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.241510][T32760] ? trace_irq_disable+0x37/0x100 [ 1704.241529][T32760] ? clear_bhb_loop+0x40/0x90 [ 1704.241550][T32760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.241567][T32760] RIP: 0033:0x7f2bee59bf79 [ 1704.241583][T32760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.241598][T32760] RSP: 002b:00007f2bef3d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.241618][T32760] RAX: ffffffffffffffda RBX: 00007f2bee815fa0 RCX: 00007f2bee59bf79 [ 1704.241630][T32760] RDX: 0000000020044000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1704.241642][T32760] RBP: 00007f2bef3d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.241653][T32760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.241664][T32760] R13: 00007f2bee816038 R14: 00007f2bee815fa0 R15: 00007ffed464eee8 [ 1704.241692][T32760] [ 1704.241869][T32760] macvtap0: entered promiscuous mode [ 1704.616057][T32763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14976'. [ 1704.637722][T32763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14976'. [ 1704.815863][T32763] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1704.857489][ T309] netlink: 'syz.1.14979': attribute type 7 has an invalid length. [ 1707.544168][ T6435] net_ratelimit: 22 callbacks suppressed [ 1707.544188][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1707.694413][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1707.761562][ T368] netlink: 'syz.1.14993': attribute type 1 has an invalid length. [ 1707.894707][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1708.024141][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1708.152236][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1708.269022][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1708.354576][T17719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.370668][T17719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.434231][ T423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1708.444732][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1708.476795][ T427] __nla_validate_parse: 5 callbacks suppressed [ 1708.476817][ T427] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15005'. [ 1708.555190][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1708.726840][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1708.844117][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1708.852558][ T30] audit: type=1800 audit(1771349321.218:49): pid=406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15001" name="memory.events" dev="tmpfs" ino=2419 res=0 errno=0 [ 1708.951576][ T443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15011'. [ 1709.117193][ T451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15014'. [ 1709.199721][ T459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15016'. [ 1709.506607][ T480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15021'. [ 1709.961325][ T493] can: request_module (can-proto-0) failed. [ 1710.185207][ T508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15027'. [ 1710.675564][ T524] netlink: 'syz.2.15031': attribute type 1 has an invalid length. [ 1710.729282][ T530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15031'. [ 1710.738694][ T524] bond8: entered promiscuous mode [ 1710.744717][ T524] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1710.752604][ T530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15031'. [ 1710.830778][ T533] syzkaller0: entered promiscuous mode [ 1710.837497][ T533] syzkaller0: entered allmulticast mode [ 1710.849172][ T533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15035'. [ 1711.180546][ T551] netlink: 'syz.1.15040': attribute type 6 has an invalid length. [ 1711.256670][ T535] wlan1 speed is unknown, defaulting to 1000 [ 1711.370231][ T562] netlink: 'syz.3.15042': attribute type 1 has an invalid length. [ 1711.407826][ T562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1711.452640][ T562] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1711.462351][ T562] bond8: (slave batadv1): making interface the new active one [ 1711.471795][ T562] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 1711.497742][ T562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15042'. [ 1711.618554][ T554] wlan1 speed is unknown, defaulting to 1000 [ 1711.625826][ T535] lo speed is unknown, defaulting to 1000 [ 1711.633467][ T535] lo speed is unknown, defaulting to 1000 [ 1711.864474][ T572] bond9: option min_links: invalid value (18446744073709551612) [ 1711.872185][ T572] bond9: option min_links: allowed values 0 - 2147483647 [ 1711.916925][ T572] bond9 (unregistering): Released all slaves [ 1712.025086][ T554] lo speed is unknown, defaulting to 1000 [ 1712.034373][ T555] wlan1 speed is unknown, defaulting to 1000 [ 1712.102404][ T554] lo speed is unknown, defaulting to 1000 [ 1712.617527][ T557] wlan1 speed is unknown, defaulting to 1000 [ 1712.654186][ T6435] net_ratelimit: 28 callbacks suppressed [ 1712.654207][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1712.774416][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1712.817749][ T583] netlink: 'syz.3.15046': attribute type 3 has an invalid length. [ 1712.904799][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1712.974843][ T555] lo speed is unknown, defaulting to 1000 [ 1713.000514][ T555] lo speed is unknown, defaulting to 1000 [ 1713.024447][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1713.138954][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1713.264352][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1713.375100][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1713.463611][ T557] lo speed is unknown, defaulting to 1000 [ 1713.493450][ T590] wlan1 speed is unknown, defaulting to 1000 [ 1713.549951][ T557] lo speed is unknown, defaulting to 1000 [ 1713.784717][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1714.207635][ T619] netlink: 'syz.3.15054': attribute type 5 has an invalid length. [ 1714.284474][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1714.334390][ T617] sctp: [Deprecated]: syz.3.15054 (pid 617) Use of int in max_burst socket option. [ 1714.334390][ T617] Use struct sctp_assoc_value instead [ 1714.526499][ T590] lo speed is unknown, defaulting to 1000 [ 1714.742557][ T590] lo speed is unknown, defaulting to 1000 [ 1714.754088][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1714.921867][ T30] audit: type=1107 audit(1771349327.298:50): pid=631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1715.066215][ T634] batadv0: entered promiscuous mode [ 1715.334804][ T652] __nla_validate_parse: 1 callbacks suppressed [ 1715.334824][ T652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15062'. [ 1715.354915][ T651] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15063'. [ 1715.364867][ T651] netlink: 13 bytes leftover after parsing attributes in process `syz.0.15063'. [ 1716.716345][ T674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15069'. [ 1716.761780][ T674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15069'. [ 1716.801969][ T674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15069'. [ 1716.864950][ T674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15069'. [ 1716.882951][ T674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15069'. [ 1716.901081][ T674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15069'. [ 1716.924799][ T674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15069'. [ 1716.937391][ T674] sit0: left promiscuous mode [ 1716.986698][ T674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.143195][ T686] lo: entered allmulticast mode [ 1717.725789][ T7403] net_ratelimit: 21 callbacks suppressed [ 1717.725812][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1717.808320][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1717.820033][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1717.840620][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1717.852677][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1717.862357][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1718.012824][ T717] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1718.065101][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1718.090839][ T710] wlan1 speed is unknown, defaulting to 1000 [ 1718.185905][ T715] geneve2: entered promiscuous mode [ 1718.191206][ T715] geneve2: entered allmulticast mode [ 1718.224512][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1718.312496][ T726] bond9: option mode: invalid value (254) [ 1718.341350][ T726] bond9 (unregistering): Released all slaves [ 1718.405810][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1718.514093][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1718.544166][T31546] lec:lec_start_xmit: lec0:No lecd attached [ 1718.604536][ T720] wlan1 speed is unknown, defaulting to 1000 [ 1718.611732][ T710] lo speed is unknown, defaulting to 1000 [ 1718.628929][ T710] lo speed is unknown, defaulting to 1000 [ 1718.635011][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1718.744062][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1718.854085][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1718.964365][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1719.008830][ T720] lo speed is unknown, defaulting to 1000 [ 1719.009503][ T735] wlan1 speed is unknown, defaulting to 1000 [ 1719.091268][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1719.217802][ T720] lo speed is unknown, defaulting to 1000 [ 1719.416911][ T735] lo speed is unknown, defaulting to 1000 [ 1719.423625][ T741] wlan1 speed is unknown, defaulting to 1000 [ 1719.642012][ T710] chnl_net:caif_netlink_parms(): no params data found [ 1719.739597][ T735] lo speed is unknown, defaulting to 1000 [ 1719.849380][ T710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.864076][ T710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.871454][ T710] bridge_slave_0: entered allmulticast mode [ 1719.895789][ T710] bridge_slave_0: entered promiscuous mode [ 1719.914601][ T2648] Bluetooth: hci2: command tx timeout [ 1719.919422][ T710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.950967][ T710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.965115][ T710] bridge_slave_1: entered allmulticast mode [ 1719.976084][ T710] bridge_slave_1: entered promiscuous mode [ 1719.997138][ T741] lo speed is unknown, defaulting to 1000 [ 1720.117215][ T710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.133678][ T710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.178685][ T710] team0: Port device team_slave_0 added [ 1720.188427][ T710] team0: Port device team_slave_1 added [ 1720.221508][ T741] lo speed is unknown, defaulting to 1000 [ 1720.276509][ T710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.293879][ T710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.354852][ T710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1720.372206][ T710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1720.384634][ T710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.443989][ T710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.842365][ T710] hsr_slave_0: entered promiscuous mode [ 1720.859858][ T710] hsr_slave_1: entered promiscuous mode [ 1720.888759][ T710] debugfs: 'hsr0' already exists in 'hsr' [ 1720.896534][ T710] Cannot create hsr debugfs directory [ 1721.636934][ T766] wlan1 speed is unknown, defaulting to 1000 [ 1721.816630][ T710] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60620 - 0 [ 1721.829471][ T710] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1721.979144][ T766] lo speed is unknown, defaulting to 1000 [ 1721.995486][ T2648] Bluetooth: hci2: command tx timeout [ 1722.046060][ T710] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60620 - 0 [ 1722.064281][ T710] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1722.116077][ T766] lo speed is unknown, defaulting to 1000 [ 1722.209871][ T710] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60620 - 0 [ 1722.248523][ T710] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1722.385197][ T782] bond3: option ad_user_port_key: invalid value (13483) [ 1722.392228][ T782] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 1722.438275][ T782] bond3 (unregistering): Released all slaves [ 1722.525982][ T710] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60620 - 0 [ 1722.546877][ T710] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1722.774783][ T6435] net_ratelimit: 11 callbacks suppressed [ 1722.774804][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1722.848721][ T786] netlink: 'syz.1.15097': attribute type 1 has an invalid length. [ 1723.054146][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1723.314255][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1723.356330][ T710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1723.389936][ T710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1723.428841][ T710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1723.530835][ T710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1723.565567][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1723.578781][ T806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1723.674428][ T806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1723.690182][ T820] netlink: 'syz.2.15104': attribute type 1 has an invalid length. [ 1723.814387][ T820] bond9: entered promiscuous mode [ 1723.819969][ T820] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1723.833978][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5290 ms [ 1723.842073][ C0] lec:lec_tx_timeout: lec0 [ 1723.880474][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1724.076120][ T2648] Bluetooth: hci2: command tx timeout [ 1724.088901][ T710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.102358][ T834] Cannot find add_set index 0 as target [ 1724.200203][ T710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.246132][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1724.261417][T17733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.268716][T17733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.293286][T17733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.300680][T17733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.325231][ T834] wlan1 speed is unknown, defaulting to 1000 [ 1724.386742][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1724.525305][T17733] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1724.635641][ T6435] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1724.754958][ T6429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1725.049032][ T888] __nla_validate_parse: 10 callbacks suppressed [ 1725.049054][ T888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15117'. [ 1725.092908][ T710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.139793][ T888] syzkaller1: entered promiscuous mode [ 1725.146488][ T888] syzkaller1: entered allmulticast mode [ 1725.323339][ T834] lo speed is unknown, defaulting to 1000 [ 1725.332763][ T834] lo speed is unknown, defaulting to 1000 [ 1725.992458][ T710] veth0_vlan: entered promiscuous mode [ 1726.098536][ T927] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1726.126130][ T927] bond10 (unregistering): Released all slaves [ 1726.126836][ T939] sctp: [Deprecated]: syz.0.15129 (pid 939) Use of int in max_burst socket option. [ 1726.126836][ T939] Use struct sctp_assoc_value instead [ 1726.163123][ T2648] Bluetooth: hci2: command tx timeout [ 1726.177396][ T710] veth1_vlan: entered promiscuous mode [ 1726.345717][ T710] veth0_macvtap: entered promiscuous mode [ 1726.380311][ T710] veth1_macvtap: entered promiscuous mode [ 1726.380553][ T943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15130'. [ 1726.418046][ T943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15130'. [ 1726.467114][ T710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.513552][ T710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.579313][ T6435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.604136][ T6435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.628633][ T6435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.668401][ T6435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.872551][ T962] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15133'. [ 1726.899871][ T962] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1726.910867][ T962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15133'. [ 1726.948283][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15134'. [ 1727.028617][ T972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15134'. [ 1727.072870][ T973] netlink: 'syz.3.15135': attribute type 9 has an invalid length. [ 1727.339163][ T980] netlink: 'syz.0.15137': attribute type 1 has an invalid length. [ 1727.361724][ T980] sctp: [Deprecated]: syz.0.15137 (pid 980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1727.361724][ T980] Use struct sctp_sack_info instead [ 1727.518796][ T993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15142'. [ 1727.529174][ T993] netlink: 'syz.1.15142': attribute type 30 has an invalid length. [ 1727.548180][ T993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15142'. [ 1727.548186][T17731] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.548260][T17731] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.557321][ T993] netlink: 'syz.1.15142': attribute type 30 has an invalid length. [ 1727.592428][T17731] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.604811][T17731] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.854392][T25057] net_ratelimit: 20 callbacks suppressed [ 1727.854417][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1727.974412][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1728.084860][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1728.194206][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1728.304404][T17731] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1728.414474][T17731] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1728.524198][T17719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1728.655275][T17731] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1728.774978][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1728.884236][T25057] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1729.805650][ T962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1729.881395][ T990] netlink: 'syz.0.15141': attribute type 1 has an invalid length. [ 1729.892062][T25057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.894227][ T990] netlink: 240 bytes leftover after parsing attributes in process `syz.0.15141'. [ 1729.904189][T25057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.028686][T17731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.044736][T17731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.096943][ T1006] atomic_op ffff888034438198 conn xmit_atomic 0000000000000000 [ 1730.230261][ T1018] xt_hashlimit: size too large, truncated to 1048576 [ 1730.321171][ T1024] __nla_validate_parse: 1 callbacks suppressed [ 1730.321194][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15080'. [ 1730.474785][ T1038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15147'. [ 1730.619971][ T1036] syzkaller0: entered promiscuous mode [ 1730.629065][ T1036] syzkaller0: entered allmulticast mode [ 1730.711405][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1730.725906][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1730.738838][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1730.748685][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1730.758235][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1730.956327][ T1045] wlan1 speed is unknown, defaulting to 1000 [ 1731.201871][ T1068] netlink: 'syz.1.15154': attribute type 1 has an invalid length. [ 1731.323297][ T1078] netlink: 56 bytes leftover after parsing attributes in process `syz.4.15157'. [ 1731.370145][ T1068] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1731.420339][ T1078] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15157'. [ 1731.461850][ T1069] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1731.476705][ T1045] lo speed is unknown, defaulting to 1000 [ 1731.600263][ T1045] lo speed is unknown, defaulting to 1000 [ 1731.802432][ T6435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.868415][ T6435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.909909][ T6435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1731.943255][ T6435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1732.195531][ T1102] netlink: 'syz.1.15163': attribute type 20 has an invalid length. [ 1732.222817][ T6435] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 1732.245324][ T6435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.271784][ T6435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.314087][ T6435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1732.329236][ T6435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1732.556351][ T6435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.587380][ T6435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.614334][ T6435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1732.633812][ T6435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1732.770122][ T6435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.790916][ T6435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.802964][ T51] Bluetooth: hci0: command tx timeout [ 1732.822946][ T6435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1732.836373][ T6435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1733.059690][ T1146] syzkaller0: entered promiscuous mode [ 1733.077606][ T1146] syzkaller0: entered allmulticast mode [ 1733.102586][T17733] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1733.116413][ T1151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.126719][ T7403] net_ratelimit: 18 callbacks suppressed [ 1733.126738][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1733.157273][T17733] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1733.235311][T25057] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1733.296501][ T1045] chnl_net:caif_netlink_parms(): no params data found [ 1733.372198][ T6429] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1733.686415][ T6435] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1733.707822][ T6435] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1733.945939][ T6435] bond6 (unregistering): (slave gretap3): Releasing backup interface [ 1733.977611][ T6435] dvmrp1 (unregistering): left allmulticast mode [ 1733.992036][ T6435] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1734.169549][ T6435] team0: Port device bond0 removed [ 1734.176516][ T6435] bond0 (unregistering): Released all slaves [ 1734.188286][ T6435] bond1 (unregistering): Released all slaves [ 1734.203788][ T6435] bond2 (unregistering): Released all slaves [ 1734.230913][ T6435] bond3 (unregistering): (slave veth3): Releasing active interface [ 1734.244769][ T6435] bond3 (unregistering): (slave veth5): Releasing active interface [ 1734.255296][ T6435] bond3 (unregistering): Released all slaves [ 1734.273481][ T6435] bond4 (unregistering): Released all slaves [ 1734.290901][ T6435] bond5 (unregistering): Released all slaves [ 1734.312044][ T6435] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1734.320257][ T6435] bond7 (unregistering): left promiscuous mode [ 1734.329188][ T6435] bond6 (unregistering): Released all slaves [ 1734.349331][ T6435] bond7 (unregistering): Released all slaves [ 1734.368939][ T6435] bond8 (unregistering): Released all slaves [ 1734.386621][ T6435] bond9 (unregistering): Released all slaves [ 1734.447465][ T1172] pim6reg1: entered promiscuous mode [ 1734.462715][ T1172] pim6reg1: entered allmulticast mode [ 1734.680976][ T6435] : left promiscuous mode [ 1734.737550][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.745637][ T1045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.752992][ T1045] bridge_slave_0: entered allmulticast mode [ 1734.787089][ T1045] bridge_slave_0: entered promiscuous mode [ 1734.796623][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.803790][ T1045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.845732][ T1045] bridge_slave_1: entered allmulticast mode [ 1734.853783][ T1045] bridge_slave_1: entered promiscuous mode [ 1734.874610][ T51] Bluetooth: hci0: command tx timeout [ 1734.907877][ T6435] tipc: Disabling bearer [ 1734.963271][ T6435] tipc: Disabling bearer [ 1734.975445][ T6435] tipc: Disabling bearer [ 1735.008103][ T6435] tipc: Left network mode [ 1735.158719][ T1045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.228628][ T1045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.369325][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1735.379412][ T1295] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1735.407292][ T1223] bond6: option lacp_active: invalid value (8) [ 1735.450389][ T1223] bond6 (unregistering): Released all slaves [ 1735.458176][ T1230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15191'. [ 1735.677594][ T1045] team0: Port device team_slave_0 added [ 1735.702476][ T1045] team0: Port device team_slave_1 added [ 1735.767130][ T1240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15193'. [ 1736.041279][ T1045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.062770][ T1045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.092885][ T1045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.280331][ T1045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.298861][ T1045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.385337][ T1045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.686657][T17731] tipc: Subscription rejected, illegal request [ 1736.868777][ T1286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15197'. [ 1736.954339][ T51] Bluetooth: hci0: command tx timeout [ 1737.026136][ T1297] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15204'. [ 1737.049538][ T1297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15204'. [ 1737.102133][ T1045] hsr_slave_0: entered promiscuous mode [ 1737.135297][ T1045] hsr_slave_1: entered promiscuous mode [ 1737.172300][ T1045] debugfs: 'hsr0' already exists in 'hsr' [ 1737.178330][ T1045] Cannot create hsr debugfs directory [ 1737.645029][ T1325] netlink: 'syz.4.15210': attribute type 11 has an invalid length. [ 1737.669704][ T1325] netlink: 'syz.4.15210': attribute type 1 has an invalid length. [ 1737.683478][ T1325] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15210'. [ 1737.851422][ T6435] veth1_macvtap: left promiscuous mode [ 1738.160410][ T1359] openvswitch: netlink: Flow actions attr not present in new flow. [ 1738.741060][ T6433] smc: removing ib device syz0 [ 1738.963178][ T1347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1738.981488][ T1348] tipc: Started in network mode [ 1738.994068][ T1348] tipc: Node identity 5614ad213c79, cluster identity 4711 [ 1739.001666][ T1348] tipc: Enabled bearer , priority 0 [ 1739.014848][T17419] lo speed is unknown, defaulting to 1000 [ 1739.019242][ T1354] syzkaller0: entered promiscuous mode [ 1739.034335][ T51] Bluetooth: hci0: command tx timeout [ 1739.054550][T17419] syz0: Port: 1 Link DOWN [ 1739.064107][ T1354] syzkaller0: entered allmulticast mode [ 1739.344634][ T1354] tipc: Resetting bearer [ 1739.406951][ T1354] tipc: Disabling bearer [ 1739.842982][ T1045] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1739.933549][ T1393] wlan1 speed is unknown, defaulting to 1000 [ 1740.027009][ T1045] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1740.219645][ T1045] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1740.383200][ T1045] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1740.817673][ T1045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1740.861379][ T1045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1740.873975][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 1740.882063][ C0] lec:lec_tx_timeout: lec0 [ 1740.890582][ T1045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1740.938590][ T1393] lo speed is unknown, defaulting to 1000 [ 1740.947303][ T1045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1741.367437][ T1045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.432730][ T1045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.467639][T17731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.474997][T17731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1741.509658][T17731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.516927][T17731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1741.906702][ T1045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.027607][ T1045] veth0_vlan: entered promiscuous mode [ 1742.057445][ T1045] veth1_vlan: entered promiscuous mode [ 1742.139088][ T1045] veth0_macvtap: entered promiscuous mode [ 1742.150626][ T1045] veth1_macvtap: entered promiscuous mode [ 1742.183253][ T1045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1742.212856][ T1045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1742.241387][T17731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.271747][T25057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.283195][T25057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.322247][T25057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.515656][ T7403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.527135][ T7403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.640502][ T7403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.666582][ T7403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.958344][ T6435] IPVS: stop unused estimator thread 0... [ 1745.934489][ T6433] batman_adv: batadv0: Removing interface: gretap2 [ 1746.010877][ T6433] batman_adv: batadv0: Removing interface: geneve2 [ 1746.294727][ T6433] bond5 (unregistering): (slave macvlan0): Releasing active interface [ 1746.315528][ T6433] bond0 (unregistering): Released all slaves [ 1746.327056][ T6433] bond1 (unregistering): Released all slaves [ 1746.341705][ T6433] bond2 (unregistering): Released all slaves [ 1746.360064][ T6433] bond3 (unregistering): Released all slaves [ 1746.380205][ T6433] bond4 (unregistering): Released all slaves [ 1746.401032][ T6433] bond5 (unregistering): Released all slaves [ 1746.418142][ T6433] bond6 (unregistering): Released all slaves [ 1746.439025][ T6433] bond7 (unregistering): Released all slaves [ 1746.453821][ T6433] bond8 (unregistering): Released all slaves [ 1746.470060][ T6433] bond9 (unregistering): Released all slaves [ 1746.583379][ T6433] m1Ie5nè‹Ò: left promiscuous mode [ 1746.671156][ T6433] tipc: Left network mode [ 1747.466316][ T6433] hsr_slave_0: left promiscuous mode [ 1748.221478][ T6433] IPVS: stop unused estimator thread 0... [ 1755.565264][ T1597] x_tables: unsorted entry at hook 2 [ 1755.591362][ T1587] wlan1 speed is unknown, defaulting to 1000 [ 1755.797399][ T1602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15228'. [ 1755.907224][ T1609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15228'. [ 1756.009548][ T1608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1756.021446][ T1608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1756.031727][ T1608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1756.041513][ T1608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1756.050993][ T1608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1756.056631][ T1613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15227'. [ 1756.555060][ T1587] lo speed is unknown, defaulting to 1000 [ 1756.678131][ T1604] wlan1 speed is unknown, defaulting to 1000 [ 1756.691811][ T1623] netlink: 260 bytes leftover after parsing attributes in process `syz.0.15230'. [ 1757.347880][ T1604] lo speed is unknown, defaulting to 1000 [ 1757.514565][ T1642] syzkaller0: entered promiscuous mode [ 1757.520929][ T1642] syzkaller0: entered allmulticast mode [ 1757.526797][ T2648] Bluetooth: hci0: command 0x0405 tx timeout [ 1757.739631][ T1645] wlan1 speed is unknown, defaulting to 1000 [ 1758.074098][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 1758.336323][ T1604] chnl_net:caif_netlink_parms(): no params data found [ 1758.400683][ T51] Bluetooth: hci5: command tx timeout [ 1758.703370][ T1657] wlan1 speed is unknown, defaulting to 1000 [ 1758.703384][ T1645] lo speed is unknown, defaulting to 1000 [ 1759.060577][ T1657] lo speed is unknown, defaulting to 1000 [ 1759.067989][ T1604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.089975][ T1604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.108050][ T1604] bridge_slave_0: entered allmulticast mode [ 1759.144636][ T1604] bridge_slave_0: entered promiscuous mode [ 1759.191453][ T1604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.230554][ T1604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.261063][ T1604] bridge_slave_1: entered allmulticast mode [ 1759.299613][ T1604] bridge_slave_1: entered promiscuous mode [ 1759.471017][ T1604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1759.522307][ T1710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15245'. [ 1759.596271][ T1711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15245'. [ 1759.628108][ T1604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1759.748074][ T1705] wlan1 speed is unknown, defaulting to 1000 [ 1759.839701][ T1604] team0: Port device team_slave_0 added [ 1759.860081][ T1711] tipc: Enabled bearer , priority 0 [ 1759.877240][ T1714] syzkaller0: entered promiscuous mode [ 1759.885538][ T1714] syzkaller0: entered allmulticast mode [ 1759.896745][ T1604] team0: Port device team_slave_1 added [ 1759.992602][ T1710] tipc: Resetting bearer [ 1760.006117][ T1604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1760.023706][ T1604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1760.063051][ T1604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1760.082163][ T1708] tipc: Resetting bearer [ 1760.247768][ T1708] tipc: Disabling bearer [ 1760.267149][ T1604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1760.291251][ T1604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1760.354005][ T1604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.384338][ T1705] lo speed is unknown, defaulting to 1000 [ 1760.474514][ T1049] Bluetooth: hci5: command tx timeout [ 1762.560526][ T1049] Bluetooth: hci5: command tx timeout [ 1763.635701][ T1604] hsr_slave_0: entered promiscuous mode [ 1763.642931][ T1604] hsr_slave_1: entered promiscuous mode [ 1763.652821][ T1733] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.15247'. [ 1764.012620][ T1748] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15252'. [ 1764.135573][ T1763] netlink: 872 bytes leftover after parsing attributes in process `syz.2.15252'. [ 1764.169457][ T1763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15252'. [ 1764.634585][ T1049] Bluetooth: hci5: command tx timeout [ 1764.667641][ T1766] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 1764.678008][ T1765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15255'. [ 1764.688720][ T1765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.698217][ T1765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.712779][ T1765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15255'. [ 1765.088471][ T1777] netlink: 'syz.4.15259': attribute type 1 has an invalid length. [ 1765.145809][ T1777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1765.328777][ T1792] caif0: entered promiscuous mode [ 1765.693064][ T1814] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15265'. [ 1766.092021][ T1819] bond3: entered promiscuous mode [ 1766.114514][ T1819] bond3: entered allmulticast mode [ 1766.120120][ T1819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1766.148291][ T1820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15265'. [ 1766.312751][ T1820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15265'. [ 1766.505657][ T1830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15267'. [ 1766.607353][ T1839] batadv0: entered promiscuous mode [ 1766.636112][ T1839] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1766.753817][ T1840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.942557][ T1840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.101679][ T1840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.167746][ T1604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1767.280763][ T1840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.376529][ T1604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1767.440440][ T1604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1767.469795][ T1604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1767.684460][T25057] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.742049][T25057] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.847188][ T7403] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.956133][T17733] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.971040][ T1604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1768.077681][ T1604] 8021q: adding VLAN 0 to HW filter on device team0 [ 1768.112875][ T1898] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1768.136034][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.143228][ T7403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1768.188880][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.196141][ T7403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.385475][ T1914] netlink: 'syz.2.15285': attribute type 1 has an invalid length. [ 1768.415297][ T1913] netlink: 'syz.2.15285': attribute type 1 has an invalid length. [ 1768.462117][ T1913] erspan1: entered allmulticast mode [ 1768.618198][ T1914] erspan1: entered allmulticast mode [ 1768.931224][ T1943] __nla_validate_parse: 1 callbacks suppressed [ 1768.931245][ T1943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15289'. [ 1768.967870][ T1944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15289'. [ 1769.006063][ T1943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15289'. [ 1769.314335][ T1604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1769.499350][ T1604] veth0_vlan: entered promiscuous mode [ 1769.516277][ T1961] netlink: 'syz.1.15293': attribute type 83 has an invalid length. [ 1769.558515][ T1604] veth1_vlan: entered promiscuous mode [ 1769.677726][ T1604] veth0_macvtap: entered promiscuous mode [ 1769.707201][ T1604] veth1_macvtap: entered promiscuous mode [ 1769.772530][ T1968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15295'. [ 1769.785902][ T1604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1769.811904][ T1604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1769.819799][ T1970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15296'. [ 1769.820291][ T1968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1769.879727][T25057] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.908686][T25057] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.944220][T25057] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.007696][T25057] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.121306][ T1974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15298'. [ 1770.130953][ T1972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15298'. [ 1770.291728][T25057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.316131][T25057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.468679][T17719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.514756][T17719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.705864][ T1996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15304'. [ 1770.756697][ T1999] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15305'. [ 1770.813629][ T1999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15305'. [ 1770.952918][ T2012] netlink: 'syz.4.15306': attribute type 1 has an invalid length. [ 1771.019675][ T2006] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1771.064553][ T2006] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 1771.108522][ T2006] bond1 (unregistering): Released all slaves [ 1771.174264][ T2020] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1771.650186][ T2011] wlan1 speed is unknown, defaulting to 1000 [ 1772.556246][ T2011] lo speed is unknown, defaulting to 1000 [ 1772.609154][ T2012] wlan1 speed is unknown, defaulting to 1000 [ 1773.000954][ T2083] netlink: 'syz.1.15323': attribute type 32 has an invalid length. [ 1773.241427][ T2096] ipt_ECN: cannot use operation on non-tcp rule [ 1773.454089][ T2094] tipc: Started in network mode [ 1773.459081][ T2094] tipc: Node identity 562cc40026a1, cluster identity 4711 [ 1773.499021][ T2094] tipc: Enabled bearer , priority 0 [ 1773.756208][ T2097] syzkaller0: entered promiscuous mode [ 1773.762904][ T2097] syzkaller0: entered allmulticast mode [ 1773.875491][ T2022] wlan1 speed is unknown, defaulting to 1000 [ 1774.026585][ T2087] tipc: Resetting bearer [ 1774.250945][ T2087] tipc: Disabling bearer [ 1774.358327][ T2121] bond6: entered promiscuous mode [ 1774.373398][ T2122] vcan1: entered promiscuous mode [ 1774.378915][ T2122] vcan1: entered allmulticast mode [ 1774.691060][ T2022] lo speed is unknown, defaulting to 1000 [ 1774.835954][ T2144] netlink: 'syz.3.15337': attribute type 2 has an invalid length. [ 1774.915593][ T2012] lo speed is unknown, defaulting to 1000 [ 1774.951549][ T2137] team0 (unregistering): Port device team_slave_0 removed [ 1774.994702][ T2137] team0 (unregistering): Port device team_slave_1 removed [ 1775.032849][ T2149] __nla_validate_parse: 7 callbacks suppressed [ 1775.032869][ T2149] netlink: 548 bytes leftover after parsing attributes in process `syz.2.15339'. [ 1775.128853][ T2144] : entered promiscuous mode [ 1775.134219][ T2146] netlink: 'syz.2.15339': attribute type 29 has an invalid length. [ 1775.261363][ T2148] netlink: 'syz.2.15339': attribute type 29 has an invalid length. [ 1775.421513][ T2158] m1Ie5èÿá: entered promiscuous mode [ 1775.604893][ T2166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15343'. [ 1775.706592][ T2157] wlan1 speed is unknown, defaulting to 1000 [ 1776.096247][ T2181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15350'. [ 1776.244805][ T2181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15350'. [ 1776.444246][ T2157] lo speed is unknown, defaulting to 1000 [ 1776.722515][ T2192] netlink: 'syz.1.15354': attribute type 1 has an invalid length. [ 1776.907150][ T2192] bond7: entered promiscuous mode [ 1776.937503][ T2192] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1777.065449][ T6433] [ 1777.067853][ T6433] ============================================ [ 1777.074031][ T6433] WARNING: possible recursive locking detected [ 1777.080211][ T6433] syzkaller #0 Not tainted [ 1777.084658][ T6433] -------------------------------------------- [ 1777.090839][ T6433] kworker/u8:10/6433 is trying to acquire lock: [ 1777.097227][ T6433] ffff88803219c4a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 1777.106601][ T6433] [ 1777.106601][ T6433] but task is already holding lock: [ 1777.114179][ T6433] ffff88803219c4a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1777.123892][ T6433] [ 1777.123892][ T6433] other info that might help us debug this: [ 1777.131983][ T6433] Possible unsafe locking scenario: [ 1777.131983][ T6433] [ 1777.139467][ T6433] CPU0 [ 1777.142774][ T6433] ---- [ 1777.146089][ T6433] lock(k-sk_lock-AF_INET6); [ 1777.150806][ T6433] lock(k-sk_lock-AF_INET6); [ 1777.155514][ T6433] [ 1777.155514][ T6433] *** DEADLOCK *** [ 1777.155514][ T6433] [ 1777.164375][ T6433] May be due to missing lock nesting notation [ 1777.164375][ T6433] [ 1777.172718][ T6433] 4 locks held by kworker/u8:10/6433: [ 1777.178098][ T6433] #0: ffff888060f63148 ((wq_completion)krds_cp_wq#26/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1777.190056][ T6433] #1: ffffc9000d4a7c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1777.202867][ T6433] #2: ffff88803219c4a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1777.212898][ T6433] #3: ffff88803219c648 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x950 [ 1777.222927][ T6433] [ 1777.222927][ T6433] stack backtrace: [ 1777.228918][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1777.228938][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1777.228951][ T6433] Workqueue: krds_cp_wq#26/0 rds_send_worker [ 1777.228975][ T6433] Call Trace: [ 1777.228982][ T6433] [ 1777.228990][ T6433] dump_stack_lvl+0xe8/0x150 [ 1777.229013][ T6433] print_deadlock_bug+0x279/0x290 [ 1777.229036][ T6433] __lock_acquire+0x253f/0x2cf0 [ 1777.229056][ T6433] ? unwind_next_frame+0xa5/0x23c0 [ 1777.229077][ T6433] ? lock_acquire+0x106/0x330 [ 1777.229096][ T6433] ? unwind_next_frame+0xa5/0x23c0 [ 1777.229117][ T6433] ? lock_acquire+0x106/0x330 [ 1777.229135][ T6433] ? unwind_next_frame+0xa5/0x23c0 [ 1777.229157][ T6433] ? inet6_getname+0x15d/0x650 [ 1777.229182][ T6433] lock_acquire+0x106/0x330 [ 1777.229198][ T6433] ? inet6_getname+0x15d/0x650 [ 1777.229224][ T6433] ? unwind_next_frame+0xa5/0x23c0 [ 1777.229244][ T6433] ? unwind_next_frame+0x1aaf/0x23c0 [ 1777.229270][ T6433] lock_sock_nested+0x48/0x100 [ 1777.229285][ T6433] ? inet6_getname+0x15d/0x650 [ 1777.229311][ T6433] inet6_getname+0x15d/0x650 [ 1777.229340][ T6433] rds_tcp_conn_slots_available+0x288/0x470 [ 1777.229369][ T6433] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1777.229403][ T6433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1777.229423][ T6433] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1777.229451][ T6433] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1777.229468][ T6433] ? process_scheduled_works+0xaec/0x17a0 [ 1777.229485][ T6433] ? worker_thread+0xa50/0xfc0 [ 1777.229502][ T6433] ? kthread+0x388/0x470 [ 1777.229528][ T6433] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1777.229553][ T6433] rds_recv_incoming+0x9f6/0x12d0 [ 1777.229575][ T6433] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1777.229593][ T6433] ? skb_copy_bits+0x7e5/0x8f0 [ 1777.229622][ T6433] rds_tcp_data_recv+0x7f1/0xa40 [ 1777.229647][ T6433] __tcp_read_sock+0x196/0x970 [ 1777.229674][ T6433] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1777.229691][ T6433] rds_tcp_data_ready+0x369/0x950 [ 1777.229706][ T6433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1777.229726][ T6433] ? __pfx_sock_def_readable+0x10/0x10 [ 1777.229752][ T6433] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1777.229775][ T6433] tcp_rcv_established+0x19e9/0x2670 [ 1777.229805][ T6433] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1777.229827][ T6433] ? ip6_dst_check+0x10/0x7e0 [ 1777.229845][ T6433] ? ip6_dst_check+0xe2/0x7e0 [ 1777.229862][ T6433] ? ip6_dst_check+0x5e3/0x7e0 [ 1777.229879][ T6433] ? __pfx_ip6_dst_check+0x10/0x10 [ 1777.229897][ T6433] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1777.229926][ T6433] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1777.229949][ T6433] __release_sock+0x1b8/0x3a0 [ 1777.229976][ T6433] release_sock+0x5f/0x1f0 [ 1777.229992][ T6433] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1777.230010][ T6433] rds_send_xmit+0x207e/0x28d0 [ 1777.230045][ T6433] ? __pfx_rds_send_xmit+0x10/0x10 [ 1777.230063][ T6433] ? process_scheduled_works+0xa0f/0x17a0 [ 1777.230085][ T6433] rds_send_worker+0x7d/0x2e0 [ 1777.230104][ T6433] ? process_scheduled_works+0xa0f/0x17a0 [ 1777.230123][ T6433] process_scheduled_works+0xaec/0x17a0 [ 1777.230153][ T6433] ? __pfx_process_scheduled_works+0x10/0x10 [ 1777.230174][ T6433] ? assign_work+0x3d5/0x5e0 [ 1777.230193][ T6433] worker_thread+0xa50/0xfc0 [ 1777.230224][ T6433] kthread+0x388/0x470 [ 1777.230247][ T6433] ? __pfx_worker_thread+0x10/0x10 [ 1777.230264][ T6433] ? __pfx_kthread+0x10/0x10 [ 1777.230287][ T6433] ret_from_fork+0x51e/0xb90 [ 1777.230307][ T6433] ? __pfx_ret_from_fork+0x10/0x10 [ 1777.230325][ T6433] ? __switch_to+0xc7d/0x1400 [ 1777.230342][ T6433] ? __pfx_kthread+0x10/0x10 [ 1777.230365][ T6433] ret_from_fork_asm+0x1a/0x30 [ 1777.230396][ T6433] [ 1777.586365][ T6433] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 1777.595192][ T6433] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6433, name: kworker/u8:10 [ 1777.604530][ T6433] preempt_count: 201, expected: 0 [ 1777.609589][ T6433] RCU nest depth: 0, expected: 0 [ 1777.614584][ T6433] INFO: lockdep is turned off. [ 1777.619376][ T6433] Preemption disabled at: [ 1777.619390][ T6433] [<0000000000000000>] 0x0 [ 1777.628228][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1777.628255][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1777.628270][ T6433] Workqueue: krds_cp_wq#26/0 rds_send_worker [ 1777.628301][ T6433] Call Trace: [ 1777.628310][ T6433] [ 1777.628319][ T6433] dump_stack_lvl+0xe8/0x150 [ 1777.628348][ T6433] __might_resched+0x378/0x4d0 [ 1777.628377][ T6433] lock_sock_nested+0x5d/0x100 [ 1777.628399][ T6433] inet6_getname+0x15d/0x650 [ 1777.628435][ T6433] rds_tcp_conn_slots_available+0x288/0x470 [ 1777.628472][ T6433] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1777.628514][ T6433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1777.628539][ T6433] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1777.628573][ T6433] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1777.628595][ T6433] ? process_scheduled_works+0xaec/0x17a0 [ 1777.628616][ T6433] ? worker_thread+0xa50/0xfc0 [ 1777.628637][ T6433] ? kthread+0x388/0x470 [ 1777.628669][ T6433] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1777.628700][ T6433] rds_recv_incoming+0x9f6/0x12d0 [ 1777.628727][ T6433] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1777.628749][ T6433] ? skb_copy_bits+0x7e5/0x8f0 [ 1777.628780][ T6433] rds_tcp_data_recv+0x7f1/0xa40 [ 1777.628817][ T6433] __tcp_read_sock+0x196/0x970 [ 1777.628848][ T6433] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1777.628870][ T6433] rds_tcp_data_ready+0x369/0x950 [ 1777.628888][ T6433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1777.628911][ T6433] ? __pfx_sock_def_readable+0x10/0x10 [ 1777.628941][ T6433] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1777.628968][ T6433] tcp_rcv_established+0x19e9/0x2670 [ 1777.629006][ T6433] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1777.629034][ T6433] ? ip6_dst_check+0x10/0x7e0 [ 1777.629056][ T6433] ? ip6_dst_check+0xe2/0x7e0 [ 1777.629077][ T6433] ? ip6_dst_check+0x5e3/0x7e0 [ 1777.629099][ T6433] ? __pfx_ip6_dst_check+0x10/0x10 [ 1777.629121][ T6433] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1777.629158][ T6433] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1777.629187][ T6433] __release_sock+0x1b8/0x3a0 [ 1777.629218][ T6433] release_sock+0x5f/0x1f0 [ 1777.629253][ T6433] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1777.629276][ T6433] rds_send_xmit+0x207e/0x28d0 [ 1777.629321][ T6433] ? __pfx_rds_send_xmit+0x10/0x10 [ 1777.629344][ T6433] ? process_scheduled_works+0xa0f/0x17a0 [ 1777.629371][ T6433] rds_send_worker+0x7d/0x2e0 [ 1777.629397][ T6433] ? process_scheduled_works+0xa0f/0x17a0 [ 1777.629419][ T6433] process_scheduled_works+0xaec/0x17a0 [ 1777.629458][ T6433] ? __pfx_process_scheduled_works+0x10/0x10 [ 1777.629483][ T6433] ? assign_work+0x3d5/0x5e0 [ 1777.629506][ T6433] worker_thread+0xa50/0xfc0 [ 1777.629545][ T6433] kthread+0x388/0x470 [ 1777.629572][ T6433] ? __pfx_worker_thread+0x10/0x10 [ 1777.629592][ T6433] ? __pfx_kthread+0x10/0x10 [ 1777.629619][ T6433] ret_from_fork+0x51e/0xb90 [ 1777.629644][ T6433] ? __pfx_ret_from_fork+0x10/0x10 [ 1777.629666][ T6433] ? __switch_to+0xc7d/0x1400 [ 1777.629687][ T6433] ? __pfx_kthread+0x10/0x10 [ 1777.629714][ T6433] ret_from_fork_asm+0x1a/0x30 [ 1777.629753][ T6433] [ 1777.629765][ T6433] BUG: scheduling while atomic: kworker/u8:10/6433/0x00000202 [ 1777.934291][ T6433] INFO: lockdep is turned off. [ 1777.939116][ T6433] Modules linked in: [ 1777.943047][ T6433] Preemption disabled at: [ 1777.943060][ T6433] [<0000000000000000>] 0x0 [ 1777.951902][ T6433] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 1777.960694][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(full) [ 1777.971850][ T6433] Tainted: [W]=WARN [ 1777.975707][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1777.985802][ T6433] Workqueue: krds_cp_wq#26/0 rds_send_worker [ 1777.991841][ T6433] Call Trace: [ 1777.995153][ T6433] [ 1777.998121][ T6433] vpanic+0x1e0/0x670 [ 1778.002149][ T6433] panic+0xc5/0xd0 [ 1778.005919][ T6433] ? __pfx_panic+0x10/0x10 [ 1778.010383][ T6433] ? __pfx__printk+0x10/0x10 [ 1778.015017][ T6433] ? vprintk_emit+0x4eb/0x560 [ 1778.019743][ T6433] ? __pfx_vprintk_emit+0x10/0x10 [ 1778.024807][ T6433] ? __irq_work_queue_local+0x1f2/0x540 [ 1778.030397][ T6433] check_panic_on_warn+0x89/0xb0 [ 1778.035384][ T6433] __schedule_bug+0xf6/0x150 [ 1778.040024][ T6433] __schedule+0x168c/0x5290 [ 1778.044568][ T6433] ? __wake_up_klogd+0xe6/0x120 [ 1778.049468][ T6433] ? vprintk_emit+0x4eb/0x560 [ 1778.054192][ T6433] ? rcu_is_watching+0x15/0xb0 [ 1778.058995][ T6433] ? __pfx_vprintk_emit+0x10/0x10 [ 1778.064060][ T6433] ? unwind_next_frame+0xa5/0x23c0 [ 1778.069308][ T6433] ? do_raw_spin_lock+0x12b/0x2f0 [ 1778.074373][ T6433] ? prepare_to_wait_exclusive+0x45/0x240 [ 1778.080131][ T6433] ? __pfx___schedule+0x10/0x10 [ 1778.084994][ T6433] ? schedule+0x90/0x360 [ 1778.089252][ T6433] ? rcu_is_watching+0x15/0xb0 [ 1778.094042][ T6433] ? rcu_is_watching+0x15/0xb0 [ 1778.098865][ T6433] ? lock_release+0x4b/0x3a0 [ 1778.103491][ T6433] ? schedule+0x90/0x360 [ 1778.107762][ T6433] ? wq_worker_sleeping+0x63/0x250 [ 1778.112887][ T6433] schedule+0x164/0x360 [ 1778.117064][ T6433] __lock_sock+0x161/0x2c0 [ 1778.121589][ T6433] ? __pfx___lock_sock+0x10/0x10 [ 1778.126544][ T6433] ? do_raw_spin_lock+0x12b/0x2f0 [ 1778.131588][ T6433] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1778.137665][ T6433] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1778.143048][ T6433] ? dump_stack_lvl+0x135/0x150 [ 1778.147906][ T6433] ? lock_sock_nested+0x6a/0x100 [ 1778.152853][ T6433] lock_sock_nested+0x9f/0x100 [ 1778.157669][ T6433] inet6_getname+0x15d/0x650 [ 1778.162312][ T6433] rds_tcp_conn_slots_available+0x288/0x470 [ 1778.168246][ T6433] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1778.174771][ T6433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1778.180589][ T6433] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1778.187024][ T6433] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1778.192163][ T6433] ? process_scheduled_works+0xaec/0x17a0 [ 1778.197927][ T6433] ? worker_thread+0xa50/0xfc0 [ 1778.202720][ T6433] ? kthread+0x388/0x470 [ 1778.206979][ T6433] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1778.212699][ T6433] rds_recv_incoming+0x9f6/0x12d0 [ 1778.217844][ T6433] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1778.223322][ T6433] ? skb_copy_bits+0x7e5/0x8f0 [ 1778.228116][ T6433] rds_tcp_data_recv+0x7f1/0xa40 [ 1778.233106][ T6433] __tcp_read_sock+0x196/0x970 [ 1778.237896][ T6433] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1778.243402][ T6433] rds_tcp_data_ready+0x369/0x950 [ 1778.248440][ T6433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1778.254263][ T6433] ? __pfx_sock_def_readable+0x10/0x10 [ 1778.259750][ T6433] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1778.265321][ T6433] tcp_rcv_established+0x19e9/0x2670 [ 1778.270657][ T6433] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1778.276302][ T6433] ? ip6_dst_check+0x10/0x7e0 [ 1778.280984][ T6433] ? ip6_dst_check+0xe2/0x7e0 [ 1778.285666][ T6433] ? ip6_dst_check+0x5e3/0x7e0 [ 1778.290437][ T6433] ? __pfx_ip6_dst_check+0x10/0x10 [ 1778.295554][ T6433] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1778.300248][ T6433] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1778.305381][ T6433] __release_sock+0x1b8/0x3a0 [ 1778.310107][ T6433] release_sock+0x5f/0x1f0 [ 1778.314558][ T6433] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1778.320826][ T6433] rds_send_xmit+0x207e/0x28d0 [ 1778.325614][ T6433] ? __pfx_rds_send_xmit+0x10/0x10 [ 1778.330742][ T6433] ? process_scheduled_works+0xa0f/0x17a0 [ 1778.336488][ T6433] rds_send_worker+0x7d/0x2e0 [ 1778.341225][ T6433] ? process_scheduled_works+0xa0f/0x17a0 [ 1778.346957][ T6433] process_scheduled_works+0xaec/0x17a0 [ 1778.352567][ T6433] ? __pfx_process_scheduled_works+0x10/0x10 [ 1778.358579][ T6433] ? assign_work+0x3d5/0x5e0 [ 1778.363214][ T6433] worker_thread+0xa50/0xfc0 [ 1778.367862][ T6433] kthread+0x388/0x470 [ 1778.371954][ T6433] ? __pfx_worker_thread+0x10/0x10 [ 1778.377082][ T6433] ? __pfx_kthread+0x10/0x10 [ 1778.381706][ T6433] ret_from_fork+0x51e/0xb90 [ 1778.386305][ T6433] ? __pfx_ret_from_fork+0x10/0x10 [ 1778.391444][ T6433] ? __switch_to+0xc7d/0x1400 [ 1778.396129][ T6433] ? __pfx_kthread+0x10/0x10 [ 1778.400740][ T6433] ret_from_fork_asm+0x1a/0x30 [ 1778.405541][ T6433] [ 1778.409190][ T6433] Kernel Offset: disabled [ 1778.413538][ T6433] Rebooting in 86400 seconds..