last executing test programs: 40.956372471s ago: executing program 4 (id=10482): getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000180)) 40.685626854s ago: executing program 4 (id=10485): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket(0x10, 0x803, 0x8) (async) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000740)={0x18, 0x0, {0x3, @link_local, 'syz_tun\x00'}}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r4, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) (async) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r7, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060100080020000402000094a2d10b94a8a74b05559f633efff8e21f7a9afb254f9adb6431692117e40cf1d97e917c7dd1bd217dade3c2240c6ddea12eef591cdb37267c5c"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r7, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060100080020000402000094a2d10b94a8a74b05559f633efff8e21f7a9afb254f9adb6431692117e40cf1d97e917c7dd1bd217dade3c2240c6ddea12eef591cdb37267c5c"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x208, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff, 0x0, 0x2000000000000}, {}, 0x70bd2d, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0xfc, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x580, 0x60, "210466d38547aa140db90100000000c542cb7a7db03db53320d36967b88848c18519f6516997b7a358ea37f391a3ef0acba616c503e48d50875d8ad2d60e2afd5b52c64b586f6dd9f7787bb65879848c53dc6f70922e9aaa5b97e41ae8875eb53423b28738991e65b3af6a0fe946af1a3c1af71e1637f2e6c025f181b69b16a65c193b70a3b8104e155cf41db9a1067ec9007940bda5fb6d686a793f426f739bb26a99769b0c5192ba59d4d68f66af00"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@rand_addr=' \x01\x00'}}]}, 0x208}, 0x1, 0x0, 0x0, 0x800}, 0x800) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000002c0)="b160ced1", 0x4}], 0x1}, 0x0) (async) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000002c0)="b160ced1", 0x4}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0), 0x4) 39.960480396s ago: executing program 4 (id=10489): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0xc49e, 0x7897da92, 0xeeda, 0x3, 0xe, 0x774, 0xe24, 0x6}, &(0x7f0000000040)={0x3, 0xb, 0x7, 0x1ff, 0x9, 0x2, 0xc, 0x300000}, &(0x7f0000000080)={0x800, 0x2d, 0x0, 0x2, 0x4, 0xfff, 0x808, 0x7fffffff}, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={[0xf]}, 0x8}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x3ff) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {0x0, 0xfff3}, {0xe, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x3, {{0xa, 0x4e25, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r4 = socket(0x29, 0x80805, 0x8000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x99, 0x9}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x4, 0x1c}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc1888000) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x12123, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 38.989381059s ago: executing program 4 (id=10502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x50, r4, 0x1, 0x4, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e30}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x50}}, 0x3000c000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9239}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffbff}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000180001002abd7000fcdbdf250a", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bb69a510}, 0x4000) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0x7, 0x6, @multicast}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xffffffff}]}}]}, 0x38}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 38.440719198s ago: executing program 4 (id=10507): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) unshare(0x8040480) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{}, 0x2fcbea5e, 0x5, 0x7fff}) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000008c0)=[{r4, 0x1}, {r4, 0x46c2}], 0x2, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000640)={0x0, {{0xa, 0x4e24, 0x480, @mcast2, 0xeb1d}}}, 0x90) accept4(r2, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, &(0x7f0000001700)) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@local, @local, @void, {@can={0xc, {{0x4, 0x1}, 0x6, 0x0, 0x0, 0x0, "4a95c07b2536ff7f"}}}}, 0x0) 37.444523798s ago: executing program 4 (id=10522): unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) ppoll(&(0x7f00000000c0)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 20.280915974s ago: executing program 32 (id=10522): unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) ppoll(&(0x7f00000000c0)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 11.184936895s ago: executing program 3 (id=10594): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffff58) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x204, 0x64f2, 0x9, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001540)={r1, 0xdc, "474a009e6f59eaf23f6c5c559c569ff6492026903f2b512e7806ca051a5d45a2e0defaf5dad9588a036912e2ae351549c67e2921267e41311b932f77afcf928b2d33fbea61f912cedbf52b5b79b9cb9ef73697c407e824fd1ee13043d775b268889b4fdb877a2d0586827a3e1fd8cf69247a2bc82f1abf4dfc4f376eaeb8f5211c8f59bd165b55f6a422400501ef2dcea563d7c80afa9075aa618c975eb032b7c0cd99b6d44cadce9e1d54f689de0704eca7b4204ecc89f1c05d283cf8331e2c362e7bf18bc25dd253096a316797400b4590c939bc549b962501b102"}, &(0x7f0000001640)=0xe4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x800000, 0x11, r3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001480)={{r3, &(0x7f0000000380)='@\\\x00', 0x400000, &(0x7f00000003c0)={@align, {0xe, 0x21, 0x1, 0x8}}, 0x200, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x52}, {[0x1000, 0x9, 0x3, 0x5]}, 0x1000, 0x1000, &(0x7f0000000480)=""/4096}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001500)={&(0x7f0000000100)="c3b70c962d658245e7e9766d871438d574b580c7b9ac76b18c6602e4df528875b3619866b1fbffb5d89ca7ac630f006d0f82891f5c8ec32b18724bf2d3c3347ba4984951705ecc588ab25d4ff4b6c9f22090044d602919d826c206caffc60f6dc0f91ccdae7f018188c7129e9fccfd80aadcb4ec9ce1d09ae1132276b0539e8525b7ba9089acaa2d3433cc831c7d1dc6df4a9156a88a0fcec2d873f9352735a691f3b3028046a6706d7a96c9eb3943ddec2b34dcde12103ba2e2de7d5011d7a74f9ae0016064a6d7a6609fd0ddde767619196bcc0cb13fcff173106a6b245023a09ef4", &(0x7f0000000200)=""/101, &(0x7f0000000280)="ca93736f3a32bb0bfe6cf2f092403f71be8cd382aa0d2a3b5a5b051099de689e8413a161ef966af6115e46c92e297375ecddeef0fed8c1956b2c354c1f55a5a00a", &(0x7f0000000300)="e39f92ec32c51babfaa5eedeacca408f7e64aa3433696d69aa2c006450ffc9af1da7db3ba9168ebee85f6d3a100033168bff4021940caac8d3c46f4a22ce880564b0465b4ac1a21a708029a96aeb553b940c5ea76123d5159ef7b96ab722f8e43451d6bf2709f4d220822298e5fbbe599314b0a6de832f0e49", 0x4, r4}, 0x38) 11.003993884s ago: executing program 3 (id=10595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7f03, 0x20, 0x4f4, 0x5, {{0x15, 0x4, 0x1, 0x8, 0x54, 0x67, 0x0, 0xdd, 0x3d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end, @timestamp={0x44, 0x24, 0xc3, 0x0, 0x0, [0x6, 0x4, 0xc, 0xff, 0x2, 0x9, 0x9a, 0x8]}, @rr={0x7, 0x1b, 0x6c, [@empty, @rand_addr=0x64010102, @loopback, @private=0xa010100, @multicast1, @remote]}]}}}}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x8, '\x00', r2, r0, 0x3, 0x1, 0x4}, 0x50) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) socket$inet6(0xa, 0x1, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, 0x0}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xe7c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40841}, 0x4000000) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r9, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7f, 0x7d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x64}}, 0x801) 10.729405679s ago: executing program 3 (id=10596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) (async) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 10.657410769s ago: executing program 2 (id=10597): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400074020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x80) 10.378271172s ago: executing program 2 (id=10599): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0x5}, {0x0}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x40800) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 10.194460846s ago: executing program 3 (id=10601): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c001280090001007600616e000000000c000280060001000100040008000500", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, 0x0) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r9, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 9.248568096s ago: executing program 2 (id=10604): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf25030000000c0003000300000000000000080001"], 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x40004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0xac}, 0x1, 0x0, 0x0, 0x884}, 0x1) 9.07958988s ago: executing program 2 (id=10606): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x10048, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89c}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_tracing={0x1a, 0xd, 0x0, 0x0, 0x2, 0x18, &(0x7f00000012c0)=""/24, 0x40f00, 0x3, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002700)={0x3, 0x3, 0x1, 0x3ff}, 0x10, 0x1108, r1, 0x0, &(0x7f0000002740)=[r0, r0, r0, r0], &(0x7f0000002780), 0x10, 0x7}, 0x94) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x400) socket(0x1d, 0x2, 0x6) socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000480)={r4, r3, 0xd6f0, 0xc0, &(0x7f00000003c0)="d1efa60d3ec18e29fec796258be45f3c6bbc38bedd817daa21ebe6fb7cde2186396ef67ab38ded86543cd0ad510132a825c62b754872a353323217838283941e85830255ee984ab60545bb5402b176b5c81045d7c0c2222e42a586058e2067a0b2e56ee516e865ec234c67e8ff83a6d7c481d639442eb00c3401736bc3732fc4b941d624ee746ef48aa5372bf8442cd9e1607d0f5b5d7b196943c8dc0e380dfa458f2de7d448b76bf8f9b38e323276ca9f0bbd7732eadf336b51f5c10783fd6d", 0xf8, 0x0, 0x7, 0x7, 0x8, 0x2, 0x55f, 'syz1\x00'}) splice(r4, 0x0, r5, 0x0, 0xf3c, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000180)={0xb075, 0x2, 0x26c39bd6}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000020000000851000000600000018000000", @ANYRES8=r5, @ANYBLOB="00000000000300006608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) 8.038032799s ago: executing program 2 (id=10612): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x7ea11167df8711ce) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56", 0x8b}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.110718617s ago: executing program 2 (id=10616): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xffff, @empty, 0x1}}, 0x7}, &(0x7f0000000200)=0x90) r4 = socket(0x1e, 0x1, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10) sendto$inet6(r6, &(0x7f0000000040)="78d6", 0x2, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3201818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r4) 5.02766746s ago: executing program 0 (id=10617): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000480)='\xde(\x86\xc2\t\xc0\x89\xba\x9ei\x98\xd9j\x17\x00\x00\x00\xbe\x80\x98\xa4\x9a\xf4\xe3b\xff\xff\xff\xe8y4\xcaf\xbf\xd8~\x05\x051\xdb[\x9b\xa4w\xc2s\x00\x00\x00\x00\x80\x00\x00\x00N\xcfg\x83\x82h7\x8bF\x81@\xdf\xb8b\xf5rXb\x90]\x1c\xadt\xab\x1c\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x42442, &(0x7f0000000080)={@align=0x6, {0x78, 0xf6, 0x10000}}, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x7}, {[0xfffffffd, 0x9, 0x10, 0xd61a]}, 0x0, 0xb8, &(0x7f00000001c0)=""/184}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) close(r4) socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526d", 0x61}, {0x0}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c", 0x14}], 0x3}, 0xc854) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendfile(r1, r5, 0x0, 0xfffffffeffd) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0xfffffffffffffea7, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010000304fdff01010000000000000000", @ANYRESOCT=0x0, @ANYBLOB="00000000a04d060028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00020000100000000800200001"], 0x50}, 0x1, 0xba01}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="040000004000000003000000d933d05a121f12f5", @ANYRES32, @ANYBLOB="ffffff1a09000002000000d4649ecf76c7f63b19", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000400021000"/28], 0x50) 3.670982648s ago: executing program 0 (id=10620): socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.202207049s ago: executing program 0 (id=10621): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r2 = socket(0x11, 0x1, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=ANY=[@ANYBLOB="1400000000000000000000000500000a14000000e903010000000000000070212f28000b5cc79da30e75e48bb303da2052bc89108cb08aa0cf7399a61160ce29471bd1f1356a62203540c446f1515663c6d04c7b74c9cc78a4e7b1eeed8e9b459dd1d29aad517feae5ce14ad4f6c61ad775697807fcca818924d74451d9e13ad8644b327e631658ca3046e9ea8292e08f71b852439da8664478639369781548ea4aed7031dae022a30bfecd654dfff145f9f160892b0f272ac0975b5ec97951e97294379297df156150f9385238e93a5d9580104ca0ea7e6c31bfe7b2957ebb8365938e12ead5dc4b629bd02fc669170c99341e64426d100"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000317c41200000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="a70e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200e6ff0300000000000000000000000000000000000000ca6b9a692d004e8a88f632c9febd76f5062a5f40df3458fea2f033af961695685e0743a23bf62fde86412671357c0750465f9059e102e39a74e33d43a4db28f9727783"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000880)='\xc4?', 0x4042c0, &(0x7f0000000300)={@align=0x77, {0x7, 0x2, 0x4, 0x4000000000003}}, 0x6, &(0x7f0000000900), &(0x7f0000000940)=0xffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000065000000183800000200a35d732400000000000018540000100000000000000000000000bf91000000000000b702000001000000000000000000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x3, 0xe4, &(0x7f0000000700)=""/228, 0x41100, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000a80)=[r5, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x0, 0x3, 0x0, 0x7}, {0x1, 0x2, 0x7, 0xb}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x217}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) ppoll(&(0x7f0000000240)=[{r6, 0x201}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='c', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, &(0x7f00000001c0)=0x10) shutdown(r6, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}, {&(0x7f0000003ac0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="10006a800c003c8008002100ac1414bb6c35311b0b73204e77678722400abcb9aaa43b442184b8c04396b92ef83fce3a5526217540a05de06c950405777fbe721b1b249c3a100ac842b5d7f75608000a00", @ANYRES32=0x0, @ANYRES16=r4, @ANYRESOCT=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="f88981bbd06f248e5cba743a1a5f2b3db8c9725508003800", @ANYRES32=0x0, @ANYBLOB="0400aa8004002780000000"], 0x12f8}, {&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x218}], 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRES64=r3, @ANYRES16=r1, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) socket$nl_netfilter(0x10, 0x3, 0xc) 2.458368844s ago: executing program 1 (id=10624): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x8) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$tcp_mem(r1, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=""/131, 0x83}], 0x1}, 0x2}], 0x1, 0x10122, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0xffc0}) shutdown(r0, 0x0) 2.22054285s ago: executing program 0 (id=10625): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x7ea11167df8711ce) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e", 0xa2}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.196126507s ago: executing program 1 (id=10626): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x3f, 0x7fffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x3f, 0x7fffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x0, 0x1, 0x9, 0xa, 0xffffffffffffffe0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x4, 0x0, 0x8, 0x7, 0xfffffffc}, @map_val], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x5f, 0x2e, 0x0, 0x0]}}, &(0x7f0000000500)=""/201, 0x2b, 0xc9, 0x1, 0x463064e8, 0x10000}, 0x28) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x17c, 0x4, 0x0, 0x18018, r4, 0xb98, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xd, @value=r5, @void, @value=r6}, 0x50) 2.007119437s ago: executing program 1 (id=10627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x2300}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) getsockopt$netlink(r6, 0x10e, 0xa, 0x0, &(0x7f0000000100)) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000000)=0x1000, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x9}, 0x1c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40081, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040000000c2"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0), &(0x7f0000000bc0), 0x4, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x7, r7}, 0x38) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000180)="b2210b6b", 0x4}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[], 0xfdef) socket$nl_netfilter(0x10, 0x3, 0xc) 1.635827031s ago: executing program 1 (id=10628): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xeb6, 0x1, 0x4}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960207142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe8023c889fd4cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337bc5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35db96c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae374bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0c4367ef4124bfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de589020000dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161520b7e7d37b581a0f51fe26167e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800af3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09229dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a411347051460326f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9c5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba33770ce3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f24600000000a80455f324746048ea24c0df0375e2cf333fa90a51cb4cc307e208a93d56368c920c239d0b3a21136d20d4c3ac328254adc96753ab34c4e31b500f71a49a75d9d598035765a72278bc823f63f770ee055e35c367be5301fcaf733e0caad10e0e1eb103b4783243c299729b4c9e26a4a6e0f2e1170e07c63fb58bcc8e145d9d9e54291361cd906ad379fa99b345a3002a2769af372eeadb9c8ebfd4402866f278781cc0d71ecbfcb16b0dfab8043f39b44cf8cc98266e6ffd9122fe16acf0b9071e359ff2fe351601c4ef491fc21cec175d0ed34885b80e8ab975f0552756be2ead3f963487d04a0fdf28aa7f59330c2f0c78ed3800d5eeaa9627472480af1e688e79bb873503c1aecdb0b5d3dda8cb3f0c189fad95955438c0fad34d4f60755d80e3977767be97443e95f7b7982c19a731a07cda09df5b746d5ad96c3e0b84493d94bd211ff1f0e30fc959322317aff59e86e512140a9cae22becca0f195b508905fce03ab6dd01dfb1c91600ef6119aeff341d04ee74c02a717b2f6107479989cd5075e806ea2c5aad0e02db9dc43b10d2792db042e7a2cc55779403b65e442a26d1ec0227fe5d05d0d63f4b0c1ae44f391b6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x400000}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r7, &(0x7f00000003c0), 0x364, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x41}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400130000000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48d4) 1.25625394s ago: executing program 1 (id=10629): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_batadv\x00'}]}, 0x50}}, 0x44) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000100)={0x80}) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)={0x48, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2f, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @nested={0x4, 0x95}]}]}]}, 0x48}], 0x1, 0x0, 0x0, 0x84}, 0x300) 1.191868384s ago: executing program 0 (id=10630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0x18, 0x4, @remote}, {0xa}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) shutdown(r3, 0x1) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000401000008001e00300b00000800010082"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2000}) readv(r4, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'geneve1\x00', 0x20}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280)=0x656, 0x4) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006d00)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x64, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r6, 0x300, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x4) 1.038696612s ago: executing program 3 (id=10631): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x0, 0xfffffffe}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000100)=0x3, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000440)={r5, 0x4e8}, &(0x7f00000004c0)=0x8) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000300)={r5, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x7, 0x7}, &(0x7f0000000040)=0x8) 190.941262ms ago: executing program 0 (id=10632): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d6, 0x3c}, 0xa, @in=@local, 0x4000, 0x3, 0x3, 0x1, 0x4, 0x81}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x20006801}, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x80) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x140a, 0x100, 0x1070bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4000001) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0x10}, {0x10, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x79c, 0x0, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x81) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 67.505713ms ago: executing program 1 (id=10633): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000004a00030009000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100feda"], 0x54}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRESDEC=r3, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 0s ago: executing program 3 (id=10634): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): cause=ToMToU comm="syz.1.9374" name="/newroot/59/memory.events" dev="tmpfs" ino=320 res=1 errno=0 [ 1247.430599][T11222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.515359][T11465] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9379'. [ 1247.516112][T11222] veth0_vlan: entered promiscuous mode [ 1247.576343][T11469] xfrm0: entered promiscuous mode [ 1247.582087][T11469] xfrm0: entered allmulticast mode [ 1247.591601][T11222] veth1_vlan: entered promiscuous mode [ 1247.595194][T11469] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9381'. [ 1247.628761][T11222] veth0_macvtap: entered promiscuous mode [ 1247.646623][T11222] veth1_macvtap: entered promiscuous mode [ 1247.695033][T20917] Bluetooth: hci5: command tx timeout [ 1247.717574][T11469] bond0 (unregistering): Released all slaves [ 1247.778044][T11222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.848097][T11222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.922874][T11492] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1247.933473][T11492] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1247.954246][T11492] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 1247.968183][ T6439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.010646][ T6439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.052312][ T6439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.056510][ T4597] IPVS: starting estimator thread 0... [ 1248.080265][T11502] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1248.180457][T11503] IPVS: using max 34 ests per chain, 81600 per kthread [ 1248.189182][ T6439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.409487][T11486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.437374][T11486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.502097][T11514] syzkaller1: entered promiscuous mode [ 1248.531718][T11514] syzkaller1: entered allmulticast mode [ 1248.609840][T11515] veth0_virt_wifi: entered allmulticast mode [ 1248.664429][ T6439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.693301][ T6439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.722891][T11520] syzkaller1: entered allmulticast mode [ 1249.489939][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1249.508337][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1249.519850][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1249.532638][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1249.545376][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1249.704549][T11546] lo speed is unknown, defaulting to 1000 [ 1249.728578][T11546] lo speed is unknown, defaulting to 1000 [ 1249.749184][T20917] Bluetooth: hci5: command tx timeout [ 1249.770848][T11554] __nla_validate_parse: 2 callbacks suppressed [ 1249.770868][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9400'. [ 1249.821704][T11556] netlink: 'syz.0.9402': attribute type 3 has an invalid length. [ 1250.242308][T11546] chnl_net:caif_netlink_parms(): no params data found [ 1250.489123][T11546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.496583][T11546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.504018][T11546] bridge_slave_0: entered allmulticast mode [ 1250.512287][T11546] bridge_slave_0: entered promiscuous mode [ 1250.521631][T11546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.529135][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.537151][T11546] bridge_slave_1: entered allmulticast mode [ 1250.545254][T11546] bridge_slave_1: entered promiscuous mode [ 1250.595327][T11546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.635179][T11546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.753910][T11546] team0: Port device team_slave_0 added [ 1250.775532][T11591] lo speed is unknown, defaulting to 1000 [ 1250.788391][T11546] team0: Port device team_slave_1 added [ 1250.796554][T11591] lo speed is unknown, defaulting to 1000 [ 1250.872070][T11546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.887438][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.947698][T11546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.969007][T11607] netlink: 'syz.0.9412': attribute type 4 has an invalid length. [ 1250.983027][T11546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.007155][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.057092][T11546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.172310][T11606] lo speed is unknown, defaulting to 1000 [ 1251.216259][T11614] netlink: 'syz.2.9415': attribute type 11 has an invalid length. [ 1251.265448][T11606] lo speed is unknown, defaulting to 1000 [ 1251.321666][T11546] hsr_slave_0: entered promiscuous mode [ 1251.328921][T11546] hsr_slave_1: entered promiscuous mode [ 1251.335442][T11546] debugfs: 'hsr0' already exists in 'hsr' [ 1251.343882][T11546] Cannot create hsr debugfs directory [ 1251.351518][T11616] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1251.621109][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9419'. [ 1251.669299][T20917] Bluetooth: hci3: command tx timeout [ 1251.755776][T11628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1251.949698][T11639] netlink: 'syz.0.9422': attribute type 1 has an invalid length. [ 1252.013776][T11643] netlink: 136 bytes leftover after parsing attributes in process `syz.2.9419'. [ 1252.064664][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9419'. [ 1252.081212][T11643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9419'. [ 1252.099065][T11639] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9422'. [ 1252.133617][T11644] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1252.174969][T11644] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1252.283690][T11546] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.458995][T11646] macvlan2: entered promiscuous mode [ 1252.464498][T11646] macvlan2: entered allmulticast mode [ 1252.478079][T11646] bond3: entered promiscuous mode [ 1252.484728][T11646] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1252.497154][T11646] bond3: left promiscuous mode [ 1252.537279][T11546] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.673721][T11546] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.785106][T11546] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.817088][T11655] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9426'. [ 1252.872500][T11655] No such timeout policy "syz0" [ 1253.176381][T11669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9427'. [ 1253.300745][T11546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1253.322576][T11546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1253.341928][T11546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1253.361401][T11546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.371512][T11546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1253.386448][T11546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1253.395187][T11546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1253.417091][T11546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1253.466782][T11677] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1253.477064][T11677] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1253.635132][T11687] netlink: 'syz.1.9433': attribute type 1 has an invalid length. [ 1253.749972][T20917] Bluetooth: hci3: command tx timeout [ 1253.815959][T11692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.823817][T11692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.993578][T11692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.026731][T11692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.295400][T11706] netlink: 'syz.2.9435': attribute type 13 has an invalid length. [ 1254.311176][T11706] netlink: 'syz.2.9435': attribute type 17 has an invalid length. [ 1254.367276][T11546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.405838][T11694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1254.493238][T11488] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.504972][T11488] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.557594][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9436'. [ 1254.643023][T11715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9436'. [ 1254.688702][T11706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.700619][T11706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.713006][T11706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1254.749794][T11488] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.760984][T11721] xt_ecn: cannot match TCP bits for non-tcp packets [ 1254.824613][T11488] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.899172][T11546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.939512][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.946736][T11487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.986039][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.993386][T11487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.232626][T11729] veth5: entered promiscuous mode [ 1255.273690][T11483] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.295597][T11483] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.502549][T11741] __nla_validate_parse: 1 callbacks suppressed [ 1255.502569][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9443'. [ 1255.519563][T11741] tipc: Enabling of bearer rejected, failed to enable media [ 1255.541823][T11745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9444'. [ 1255.577398][T11745] nbd: must specify a device to reconfigure [ 1255.602885][T11745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9444'. [ 1255.608249][T11546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.829919][T20917] Bluetooth: hci3: command tx timeout [ 1256.049821][T11772] veth1_to_bridge: entered allmulticast mode [ 1256.063986][T11772] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 1256.124610][T11769] syzkaller0: entered promiscuous mode [ 1256.133669][T11769] syzkaller0: entered allmulticast mode [ 1256.312239][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1256.334671][T11781] bond0: Unable to set down delay as MII monitoring is disabled [ 1256.406887][T11546] veth0_vlan: entered promiscuous mode [ 1256.438114][T11546] veth1_vlan: entered promiscuous mode [ 1256.506852][T11546] veth0_macvtap: entered promiscuous mode [ 1256.531882][T11546] veth1_macvtap: entered promiscuous mode [ 1256.594463][T11546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.619503][T11546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.651758][T11488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.676470][T11488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.706182][T11488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.774118][T11488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.803017][T11795] lo speed is unknown, defaulting to 1000 [ 1256.837970][T11795] lo speed is unknown, defaulting to 1000 [ 1256.993143][ T6436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.010881][T11810] netlink: 'syz.2.9459': attribute type 2 has an invalid length. [ 1257.016003][ T6436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.106660][T11483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.116272][T11483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.529796][T11827] lo speed is unknown, defaulting to 1000 [ 1257.546232][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9465'. [ 1257.553035][T11827] lo speed is unknown, defaulting to 1000 [ 1257.785467][T11838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1257.857875][T11838] netlink: 'syz.3.9467': attribute type 4 has an invalid length. [ 1257.906145][T11838] netlink: 'syz.3.9467': attribute type 4 has an invalid length. [ 1257.920253][T20917] Bluetooth: hci3: command tx timeout [ 1258.191544][T11855] netlink: 'syz.2.9473': attribute type 1 has an invalid length. [ 1258.390804][T11855] netlink: 'syz.2.9473': attribute type 1 has an invalid length. [ 1258.479318][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9478'. [ 1258.491818][T11873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9478'. [ 1258.689667][T11882] lo speed is unknown, defaulting to 1000 [ 1258.735725][T11882] lo speed is unknown, defaulting to 1000 [ 1258.813815][T11887] ksmbd: Unknown IPC event: 4, ignore. [ 1258.825749][T11889] openvswitch: netlink: Missing valid actions attribute. [ 1258.858113][T11889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.018823][T11893] x_tables: duplicate underflow at hook 1 [ 1259.144905][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9485'. [ 1259.170319][T11902] netlink: 200 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1259.185901][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1259.227543][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1259.561891][T11933] nbd: must specify a device to reconfigure [ 1259.653570][T11934] netlink: 'syz.2.9493': attribute type 1 has an invalid length. [ 1259.696402][T11936] mac80211_hwsim hwsim105 syzkaller0: Caught tx_queue_len zero misconfig [ 1259.783381][T11942] bridge_slave_0: left allmulticast mode [ 1259.817474][T11942] bridge_slave_0: left promiscuous mode [ 1259.845722][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.871599][T11942] bridge_slave_1: left allmulticast mode [ 1259.878702][T11942] bridge_slave_1: left promiscuous mode [ 1259.898122][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.926188][T11942] team0: Port device team_slave_0 removed [ 1259.935411][T11942] team0: Port device team_slave_1 removed [ 1259.951071][T11942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.969924][T11942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.988017][T11942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1260.063532][T11953] bond1: Removing last ns target with arp_interval on [ 1260.072581][T11950] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1260.083190][T11956] tipc: Started in network mode [ 1260.092145][T11956] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1260.101440][T11956] tipc: Enabling of bearer rejected, failed to enable media [ 1260.245291][T11970] bond0: Unable to set down delay as MII monitoring is disabled [ 1260.287533][T11972] netlink: 'syz.0.9506': attribute type 1 has an invalid length. [ 1260.307419][T11972] netlink: 'syz.0.9506': attribute type 2 has an invalid length. [ 1261.140288][T12010] block nbd0: reconnected socket [ 1261.174370][T20917] block nbd0: Receive control failed (result -104) [ 1262.283203][T12071] xt_hashlimit: size too large, truncated to 1048576 [ 1262.295837][T12064] xt_hashlimit: size too large, truncated to 1048576 [ 1262.516842][T12094] __nla_validate_parse: 10 callbacks suppressed [ 1262.516862][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9536'. [ 1262.592582][T12071] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1262.843589][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9539'. [ 1263.006105][T12114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9540'. [ 1263.082501][T12854] lec:lec_start_xmit: lec0:No lecd attached [ 1263.203032][T12116] bond4: entered promiscuous mode [ 1263.208142][T12116] bond4: entered allmulticast mode [ 1263.271623][T12116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1263.812714][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9550'. [ 1264.121235][T12152] bridge0: port 4(hsr0) entered disabled state [ 1264.127681][T12152] bridge0: port 3(dummy0) entered disabled state [ 1264.134278][T12152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.896226][ T6436] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.922773][ T6436] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.933338][ T6436] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.942832][ T6436] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.010438][ T6436] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1265.034248][ T6436] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.064186][T12173] lo speed is unknown, defaulting to 1000 [ 1265.078949][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9555'. [ 1265.091227][T12173] lo speed is unknown, defaulting to 1000 [ 1265.381144][T12194] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9558'. [ 1265.704488][T12214] IPVS: set_ctl: invalid protocol: 47 172.30.1.4:20001 [ 1265.729074][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9564'. [ 1265.743439][T12203] lo speed is unknown, defaulting to 1000 [ 1265.807250][T12217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9566'. [ 1265.833003][T12203] lo speed is unknown, defaulting to 1000 [ 1265.881433][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9566'. [ 1266.051073][T12223] vlan5: entered allmulticast mode [ 1266.056895][T12223] macvtap0: entered allmulticast mode [ 1266.063792][T12223] veth0_macvtap: entered allmulticast mode [ 1266.347351][T12239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9571'. [ 1266.730180][T12250] lo speed is unknown, defaulting to 1000 [ 1266.802469][T12270] netlink: 'syz.2.9577': attribute type 1 has an invalid length. [ 1266.880203][T12270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1266.923058][T12264] bond2 (unregistering): Released all slaves [ 1267.515020][ T1763] block nbd0: Connection timed out, retrying (0/1 alive) [ 1267.523318][ T1763] block nbd0: Dead connection, failed to find a fallback [ 1267.569232][T12250] lo speed is unknown, defaulting to 1000 [ 1267.590341][T12275] geneve1: entered promiscuous mode [ 1267.713086][T12276] lo speed is unknown, defaulting to 1000 [ 1267.751581][T12276] lo speed is unknown, defaulting to 1000 [ 1268.144491][T12306] netlink: 'syz.0.9585': attribute type 2 has an invalid length. [ 1268.213082][T12306] !: entered promiscuous mode [ 1268.424114][T12311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1268.681922][T12318] __nla_validate_parse: 2 callbacks suppressed [ 1268.681944][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9589'. [ 1268.799648][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 1268.807784][ C1] lec:lec_tx_timeout: lec0 [ 1268.955458][T12332] netlink: 7 bytes leftover after parsing attributes in process `syz.2.9592'. [ 1269.210837][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9596'. [ 1269.284200][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9597'. [ 1269.305333][T12348] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9597'. [ 1269.367523][T12348] vlan2: entered allmulticast mode [ 1269.382351][T12348] macvtap0: entered allmulticast mode [ 1269.392067][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9598'. [ 1269.395079][T12348] veth0_macvtap: entered allmulticast mode [ 1269.438812][T12350] SET target dimension over the limit! [ 1269.560628][T11486] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef [ 1269.596156][T11486] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef [ 1269.625958][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1269.664504][T12360] delete_channel: no stack [ 1269.686952][T12363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1269.733255][T12364] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 1269.989406][T20917] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1270.011900][T12385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9605'. [ 1270.033540][T12385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9605'. [ 1270.268179][T12352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1270.488840][T12404] xt_hashlimit: size too large, truncated to 1048576 [ 1272.819924][T12399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1273.006319][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9618'. [ 1273.047892][T12427] openvswitch: netlink: Flow actions attr not present in new flow. [ 1273.346598][T12451] netlink: 'syz.4.9626': attribute type 1 has an invalid length. [ 1273.414595][T12451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1273.448156][T12451] netlink: 'syz.4.9626': attribute type 1 has an invalid length. [ 1273.460296][T12451] netlink: 'syz.4.9626': attribute type 2 has an invalid length. [ 1273.549360][T12473] Cannot find set identified by id 65534 to match [ 1273.555940][T12451] bond2: (slave gretap1): making interface the new active one [ 1273.571101][T12451] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1273.913055][T12494] __nla_validate_parse: 7 callbacks suppressed [ 1273.913076][T12494] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9635'. [ 1273.990433][T12493] lo speed is unknown, defaulting to 1000 [ 1274.000371][T12493] lo speed is unknown, defaulting to 1000 [ 1274.012951][T12499] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 1274.020358][T12494] netlink: 'syz.4.9635': attribute type 1 has an invalid length. [ 1274.033412][T12494] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9635'. [ 1274.042941][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9637'. [ 1274.539619][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9644'. [ 1274.593517][T12525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9645'. [ 1274.918585][T12542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9650'. [ 1275.224717][T12557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9654'. [ 1275.616061][T12588] netlink: 'syz.4.9663': attribute type 10 has an invalid length. [ 1275.644529][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9662'. [ 1275.715903][T12588] team0 (unregistering): Port device team_slave_0 removed [ 1275.781276][T12588] team0 (unregistering): Port device team_slave_1 removed [ 1275.831277][T12599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1275.863168][T12591] gretap0: refused to change device tx_queue_len [ 1275.880038][T12591] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1275.986495][T12595] netlink: 'syz.1.9664': attribute type 2 has an invalid length. [ 1276.035384][T12595] netlink: 'syz.1.9664': attribute type 2 has an invalid length. [ 1276.105014][T12595] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1277.082981][T12641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1277.127662][T12643] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 1277.140980][T12640] wg1: entered allmulticast mode [ 1277.176299][T12648] gretap0: entered promiscuous mode [ 1277.348790][T11483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.363023][T11483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.427836][T12652] lo speed is unknown, defaulting to 1000 [ 1277.436762][T12652] lo speed is unknown, defaulting to 1000 [ 1277.444890][T12659] lo speed is unknown, defaulting to 1000 [ 1277.465022][T12659] lo speed is unknown, defaulting to 1000 [ 1277.493045][T12659] lo speed is unknown, defaulting to 1000 [ 1277.936530][T12659] infiniband syz0: set active [ 1277.941739][ T5943] lo speed is unknown, defaulting to 1000 [ 1277.947852][T12659] infiniband syz0: added lo [ 1278.014138][T12659] RDS/IB: syz0: added [ 1278.020095][T12659] smc: adding ib device syz0 with port count 1 [ 1278.026597][T12659] smc: ib device syz0 port 1 has no pnetid [ 1278.034849][ T6548] lo speed is unknown, defaulting to 1000 [ 1278.042993][T12659] lo speed is unknown, defaulting to 1000 [ 1278.319696][T12690] netlink: 'syz.1.9688': attribute type 1 has an invalid length. [ 1278.503690][T12691] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1278.563701][T12703] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 1278.574333][T12691] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1278.654881][T12659] lo speed is unknown, defaulting to 1000 [ 1278.686646][T12698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1278.757694][T12709] ip6gre1: entered promiscuous mode [ 1278.775157][T12709] ip6gre1: entered allmulticast mode [ 1278.818917][T12709] netlink: 'syz.2.9693': attribute type 6 has an invalid length. [ 1278.983246][T12709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.169282][T12659] lo speed is unknown, defaulting to 1000 [ 1279.183450][T12731] __nla_validate_parse: 6 callbacks suppressed [ 1279.183469][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9700'. [ 1279.346103][T12740] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9703'. [ 1279.680512][T12659] lo speed is unknown, defaulting to 1000 [ 1280.000480][T12765] netlink: 'syz.0.9710': attribute type 1 has an invalid length. [ 1280.118319][T12659] lo speed is unknown, defaulting to 1000 [ 1280.318680][T12778] netlink: 'syz.2.9714': attribute type 58 has an invalid length. [ 1280.357735][T12778] netlink: 'syz.2.9714': attribute type 58 has an invalid length. [ 1280.560537][T12791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9718'. [ 1280.587573][T12792] dummy0: mtu less than device minimum [ 1280.603175][T12659] lo speed is unknown, defaulting to 1000 [ 1280.609620][ T24] IPVS: starting estimator thread 0... [ 1280.685466][T12796] netlink: 'syz.2.9717': attribute type 3 has an invalid length. [ 1280.707913][T12796] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9717'. [ 1280.720026][T12794] IPVS: using max 35 ests per chain, 84000 per kthread [ 1280.745156][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9720'. [ 1280.927977][T12803] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9722'. [ 1281.015769][T12659] lo speed is unknown, defaulting to 1000 [ 1281.145989][T12814] sctp: [Deprecated]: syz.1.9724 (pid 12814) Use of int in maxseg socket option. [ 1281.145989][T12814] Use struct sctp_assoc_value instead [ 1281.262376][T12817] netlink: 'syz.0.9726': attribute type 10 has an invalid length. [ 1281.265074][T12818] netlink: 'syz.0.9726': attribute type 10 has an invalid length. [ 1281.296387][T12817] syz_tun: entered promiscuous mode [ 1281.365039][T12659] lo speed is unknown, defaulting to 1000 [ 1281.395711][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9727'. [ 1281.422856][T12820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9727'. [ 1281.564279][T12659] lo speed is unknown, defaulting to 1000 [ 1281.733351][T12659] lo speed is unknown, defaulting to 1000 [ 1281.902972][T12659] lo speed is unknown, defaulting to 1000 [ 1282.091480][T12825] netlink: 'syz.1.9729': attribute type 13 has an invalid length. [ 1282.176615][T12659] lo speed is unknown, defaulting to 1000 [ 1282.507927][T12659] lo speed is unknown, defaulting to 1000 [ 1282.575774][T12833] netlink: 'syz.1.9732': attribute type 29 has an invalid length. [ 1282.584868][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9732'. [ 1282.673105][T12835] syzkaller1: entered promiscuous mode [ 1282.688644][T12835] syzkaller1: entered allmulticast mode [ 1282.942059][T12793] lo speed is unknown, defaulting to 1000 [ 1282.970965][T12746] lo speed is unknown, defaulting to 1000 [ 1282.979041][T12793] lo speed is unknown, defaulting to 1000 [ 1283.048403][T12746] lo speed is unknown, defaulting to 1000 [ 1283.091999][T12848] hsr0: entered promiscuous mode [ 1283.253440][T12848] hsr0: left promiscuous mode [ 1283.259265][T12846] lo speed is unknown, defaulting to 1000 [ 1283.307314][T12846] lo speed is unknown, defaulting to 1000 [ 1283.348302][T12846] lo speed is unknown, defaulting to 1000 [ 1283.400821][T12853] syzkaller1: entered promiscuous mode [ 1283.407616][T12853] syzkaller1: entered allmulticast mode [ 1283.578671][ T6436] vlan0: left allmulticast mode [ 1283.586696][ T6436] geneve0: left allmulticast mode [ 1283.599880][ T6436] bridge0: port 3(vlan0) entered disabled state [ 1284.367317][ T6436] gretap0 (unregistering): left promiscuous mode [ 1284.723900][ T6436] bond5 (unregistering): (slave bridge6): Releasing active interface [ 1284.964282][ T6436] bond0 (unregistering): left promiscuous mode [ 1284.975040][ T6436] bond0 (unregistering): Released all slaves [ 1284.986434][ T6436] bond1 (unregistering): Released all slaves [ 1285.005281][ T6436] bond2 (unregistering): Released all slaves [ 1285.022311][ T6436] bond3 (unregistering): Released all slaves [ 1285.038339][ T6436] bond4 (unregistering): Released all slaves [ 1285.057496][ T6436] bond5 (unregistering): Released all slaves [ 1285.078291][ T6436] bond6 (unregistering): Released all slaves [ 1285.094516][ T6436] bond7 (unregistering): Released all slaves [ 1285.294767][ T6436] tipc: Disabling bearer [ 1285.300380][ T6436] tipc: Left network mode [ 1285.617687][T12873] Can't find ip_set type bitmap:ip,mac [ 1285.813847][ T6436] IPVS: stopping master sync thread 647 ... [ 1285.892700][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9745'. [ 1285.960364][T12887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.030869][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9746'. [ 1286.083007][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9746'. [ 1286.588184][T12907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9749'. [ 1286.768443][T12913] netlink: 'syz.1.9751': attribute type 6 has an invalid length. [ 1287.319899][T12934] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9753'. [ 1287.360479][T12940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1287.483167][T12940] veth6: entered allmulticast mode [ 1287.517049][ T6436] hsr_slave_0: left promiscuous mode [ 1287.548952][ T6436] hsr_slave_1: left promiscuous mode [ 1288.201546][T12951] syzkaller1: entered promiscuous mode [ 1288.208654][T12951] syzkaller1: entered allmulticast mode [ 1288.226271][T12959] pimreg0: tun_chr_ioctl cmd 1074025681 [ 1288.603275][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9767'. [ 1288.775455][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1288.827047][T12985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9769'. [ 1288.838369][T12979] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1288.874191][T12979] bond7 (unregistering): Released all slaves [ 1288.942918][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9767'. [ 1288.962500][T12981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9767'. [ 1288.973032][T12981] netlink: 'syz.0.9767': attribute type 6 has an invalid length. [ 1288.986897][T12982] bond0: entered promiscuous mode [ 1288.997723][T12982] bond_slave_0: entered promiscuous mode [ 1289.041056][T12982] bond_slave_1: entered promiscuous mode [ 1289.060917][T12982] bond0: left promiscuous mode [ 1289.066219][T12982] bond_slave_0: left promiscuous mode [ 1289.072622][T12982] bond_slave_1: left promiscuous mode [ 1289.132486][ T6436] IPVS: stop unused estimator thread 0... [ 1289.386396][T13008] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1289.420358][T13011] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1289.582879][T13014] tipc: Enabled bearer , priority 10 [ 1290.184037][T13040] syzkaller0: entered promiscuous mode [ 1290.206915][T13040] syzkaller0: entered allmulticast mode [ 1290.623151][T13058] 0ªî{X¹¦: left allmulticast mode [ 1290.664510][T13058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.678964][T13058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.694515][T13058] bridge0: port 3(dummy0) entered blocking state [ 1290.702270][T13058] bridge0: port 3(dummy0) entered forwarding state [ 1290.714581][T13058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1291.006728][T13082] netlink: 'syz.4.9794': attribute type 3 has an invalid length. [ 1291.041145][T13078] syzkaller0: entered promiscuous mode [ 1291.047858][T13078] syzkaller0: entered allmulticast mode [ 1291.091705][T13084] veth0_vlan: left allmulticast mode [ 1291.419666][T13097] __nla_validate_parse: 19 callbacks suppressed [ 1291.419686][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9800'. [ 1291.492542][T13097] macvtap1: entered promiscuous mode [ 1291.524767][T13097] veth1_to_hsr: entered promiscuous mode [ 1291.552872][T13097] macvtap1: entered allmulticast mode [ 1291.569485][T13097] veth1_to_hsr: entered allmulticast mode [ 1291.663407][T13105] netlink: 'syz.0.9804': attribute type 4 has an invalid length. [ 1291.683260][T13105] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9804'. [ 1291.844247][T13113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9806'. [ 1292.003973][T20917] Bluetooth: hci1: command 0x0406 tx timeout [ 1292.205254][T13133] netlink: 'syz.0.9812': attribute type 1 has an invalid length. [ 1292.286243][T13133] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1292.559624][T13149] lo speed is unknown, defaulting to 1000 [ 1292.571104][T13149] lo speed is unknown, defaulting to 1000 [ 1292.586613][T13149] lo speed is unknown, defaulting to 1000 [ 1292.787864][T13140] IPv6: addrconf: prefix option has invalid lifetime [ 1293.118428][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9819'. [ 1293.132300][T13172] netlink: 'syz.2.9821': attribute type 1 has an invalid length. [ 1293.248046][T13177] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1293.311297][T13177] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1293.339334][T13172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9821'. [ 1293.409293][T13177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9821'. [ 1293.438893][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9824'. [ 1293.561846][T13172] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 1293.600362][T13177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1293.706626][T13182] macvlan3: entered promiscuous mode [ 1293.716653][T13182] macvlan3: entered allmulticast mode [ 1293.723745][T13182] bond2: entered promiscuous mode [ 1293.730534][T13182] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1293.741051][T13182] bond2: left promiscuous mode [ 1294.290044][T13180] lo speed is unknown, defaulting to 1000 [ 1294.331030][T13176] lo speed is unknown, defaulting to 1000 [ 1294.332937][T13180] lo speed is unknown, defaulting to 1000 [ 1294.433612][T13180] lo speed is unknown, defaulting to 1000 [ 1294.441162][T13213] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1294.456250][T13176] lo speed is unknown, defaulting to 1000 [ 1294.549245][T13217] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1294.619427][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9832'. [ 1294.872607][T13221] team0: Failed to send options change via netlink (err -105) [ 1294.899129][T13221] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1294.912373][T13221] team0: Port device team_slave_0 removed [ 1294.978693][T13176] lo speed is unknown, defaulting to 1000 [ 1298.051762][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9839'. [ 1298.328369][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9841'. [ 1298.996033][T13294] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 1299.356540][T13303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9853'. [ 1299.376220][T13303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9853'. [ 1299.555560][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1299.574796][T13309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9854'. [ 1299.613952][T13309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9854'. [ 1299.646144][T13309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9854'. [ 1299.703451][T13309] xt_hashlimit: size too large, truncated to 1048576 [ 1300.153420][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.167049][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1300.176914][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1300.659278][T13358] lo speed is unknown, defaulting to 1000 [ 1300.698214][T13358] lo speed is unknown, defaulting to 1000 [ 1300.721697][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9865'. [ 1300.788894][T13358] lo speed is unknown, defaulting to 1000 [ 1300.973769][T13365] lo speed is unknown, defaulting to 1000 [ 1301.050662][T13365] lo speed is unknown, defaulting to 1000 [ 1301.079964][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9867'. [ 1301.454287][T13365] lo speed is unknown, defaulting to 1000 [ 1301.749904][T13388] tipc: Enabling of bearer rejected, failed to enable media [ 1301.765177][T13392] netlink: 'syz.4.9877': attribute type 1 has an invalid length. [ 1301.823175][T13390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.855476][T13390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1301.982342][T13392] bond3: entered promiscuous mode [ 1301.987890][T13392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1302.010905][T13393] bond3: entered allmulticast mode [ 1302.297019][ T2789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.305508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.355051][ T2789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.363531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.403398][ T6439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.412282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.442668][ T6439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.451166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.047301][T13428] netlink: 'syz.3.9887': attribute type 21 has an invalid length. [ 1303.077480][T13428] __nla_validate_parse: 7 callbacks suppressed [ 1303.077499][T13428] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9887'. [ 1303.103644][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9887'. [ 1303.115810][T13428] netlink: 'syz.3.9887': attribute type 5 has an invalid length. [ 1303.124041][T13428] netlink: 'syz.3.9887': attribute type 6 has an invalid length. [ 1303.132807][T13428] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9887'. [ 1303.364388][T13439] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9890'. [ 1303.374964][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9890'. [ 1303.436763][T13443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9888'. [ 1303.484519][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9888'. [ 1303.518883][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9888'. [ 1303.541383][T13443] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9888'. [ 1303.625820][T13448] tipc: Enabling of bearer rejected, failed to enable media [ 1303.653289][T13448] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9891'. [ 1303.769028][T13459] siw: device registration error -23 [ 1303.794232][T13457] ip6t_srh: unknown srh invflags BA61 [ 1304.633095][T13527] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1304.996595][T13551] netlink: 'syz.2.9919': attribute type 1 has an invalid length. [ 1305.074272][T13551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1305.112919][T13555] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 1305.164969][T13551] team0: Device vlan2 is already an upper device of the team interface [ 1305.320641][T13566] netlink: 'syz.3.9925': attribute type 5 has an invalid length. [ 1305.329225][T13566] sctp: [Deprecated]: syz.3.9925 (pid 13566) Use of int in maxseg socket option. [ 1305.329225][T13566] Use struct sctp_assoc_value instead [ 1305.367445][T13566] netlink: 'syz.3.9925': attribute type 5 has an invalid length. [ 1305.828639][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1305.836797][ C1] lec:lec_tx_timeout: lec0 [ 1305.842867][T13595] x_tables: duplicate underflow at hook 2 [ 1305.860914][T13595] x_tables: duplicate underflow at hook 2 [ 1305.874143][T13594] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1305.881931][T13595] x_tables: duplicate underflow at hook 2 [ 1305.887820][T13595] x_tables: duplicate underflow at hook 2 [ 1305.895492][T13595] x_tables: duplicate underflow at hook 2 [ 1305.909962][T13595] x_tables: duplicate underflow at hook 2 [ 1305.916364][T13595] x_tables: duplicate underflow at hook 2 [ 1305.924391][T13595] x_tables: duplicate underflow at hook 2 [ 1305.931579][T13595] x_tables: duplicate underflow at hook 2 [ 1305.938448][T13595] x_tables: duplicate underflow at hook 2 [ 1305.953382][T13589] lo speed is unknown, defaulting to 1000 [ 1305.980110][T13589] lo speed is unknown, defaulting to 1000 [ 1306.001056][T13589] lo speed is unknown, defaulting to 1000 [ 1306.885633][T13641] net_ratelimit: 7 callbacks suppressed [ 1306.885657][T13641] netlink: set zone limit has 4 unknown bytes [ 1307.021770][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.029530][T13655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.128432][T13655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.145545][T13655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.231967][T13655] veth0_macvtap: left allmulticast mode [ 1307.288171][ T2791] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.323469][ T2791] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.358178][ T2791] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.380361][ T2791] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.632504][T13672] block nbd5: server does not support multiple connections per device. [ 1307.742924][T13672] block nbd5: shutting down sockets [ 1308.073214][T13703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1308.913905][T13748] __nla_validate_parse: 6 callbacks suppressed [ 1308.913927][T13748] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9978'. [ 1308.939098][T13748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9978'. [ 1309.006690][T13748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9978'. [ 1309.044399][T13752] --map-set only usable from mangle table [ 1309.214813][T13759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9981'. [ 1309.224075][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9983'. [ 1309.412301][T13773] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 1309.441761][T13773] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 1309.462206][T13778] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9988'. [ 1309.484281][T13773] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 1309.591152][T13781] IPv6: NLM_F_CREATE should be specified when creating new route [ 1309.600471][T13781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1309.607744][T13781] IPv6: NLM_F_CREATE should be set when creating new route [ 1309.615097][T13781] IPv6: NLM_F_CREATE should be set when creating new route [ 1309.622396][T13781] IPv6: NLM_F_CREATE should be set when creating new route [ 1309.667402][T13782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1309.683275][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9991'. [ 1309.709656][T13781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9991'. [ 1309.732431][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9991'. [ 1309.755326][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9991'. [ 1309.785816][T13781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.818623][T13782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1310.025656][T13801] veth7: entered allmulticast mode [ 1310.033068][T13803] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1310.198030][T13813] lo speed is unknown, defaulting to 1000 [ 1310.218767][T13813] lo speed is unknown, defaulting to 1000 [ 1310.247294][T13813] lo speed is unknown, defaulting to 1000 [ 1310.500927][T13819] lo speed is unknown, defaulting to 1000 [ 1310.545691][T13819] lo speed is unknown, defaulting to 1000 [ 1310.556415][T13826] lo speed is unknown, defaulting to 1000 [ 1310.606021][T13826] lo speed is unknown, defaulting to 1000 [ 1310.800909][T13835] lo speed is unknown, defaulting to 1000 [ 1310.833759][T13835] lo speed is unknown, defaulting to 1000 [ 1310.989948][T13849] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1311.134563][T13856] sock: sock_timestamping_bind_phc: sock not bind to device [ 1311.236352][T13853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1311.281924][T13819] lo speed is unknown, defaulting to 1000 [ 1311.796826][T13826] lo speed is unknown, defaulting to 1000 [ 1312.188149][T13879] netlink: 'syz.2.10015': attribute type 4 has an invalid length. [ 1312.204769][T13835] lo speed is unknown, defaulting to 1000 [ 1312.224549][T13879] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1312.565048][T13877] lo speed is unknown, defaulting to 1000 [ 1312.614425][T13877] lo speed is unknown, defaulting to 1000 [ 1312.662942][T13877] lo speed is unknown, defaulting to 1000 [ 1313.435168][T13890] netlink: 'syz.1.10018': attribute type 1 has an invalid length. [ 1313.443917][T13889] netlink: 'syz.1.10018': attribute type 1 has an invalid length. [ 1314.260802][T13906] xt_TCPMSS: Only works on TCP SYN packets [ 1314.269827][T13902] __nla_validate_parse: 23 callbacks suppressed [ 1314.269890][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10022'. [ 1314.292300][T13910] xt_TCPMSS: Only works on TCP SYN packets [ 1314.373574][T13908] openvswitch: netlink: Flow actions attr not present in new flow. [ 1314.405105][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10025'. [ 1314.488049][T13914] syzkaller0: entered promiscuous mode [ 1314.506728][T13914] syzkaller0: entered allmulticast mode [ 1315.145040][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10032'. [ 1315.290539][T13948] netlink: 'syz.0.10034': attribute type 1 has an invalid length. [ 1315.377584][T13948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1315.440369][T13954] vlan2: entered allmulticast mode [ 1315.465750][T13954] bond8: entered allmulticast mode [ 1315.576266][T13950] IPVS: Scheduler module ip_vs_sip not found [ 1315.621298][T13967] syzkaller0: entered promiscuous mode [ 1315.658963][T13967] syzkaller0: entered allmulticast mode [ 1315.750443][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10043'. [ 1315.765119][T13977] netlink: 'syz.3.10043': attribute type 25 has an invalid length. [ 1315.776782][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10043'. [ 1316.022272][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10043'. [ 1316.076638][T13995] FAULT_INJECTION: forcing a failure. [ 1316.076638][T13995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.090747][T13995] CPU: 0 UID: 0 PID: 13995 Comm: syz.0.10047 Not tainted syzkaller #0 PREEMPT(full) [ 1316.090776][T13995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1316.090791][T13995] Call Trace: [ 1316.090800][T13995] [ 1316.090809][T13995] dump_stack_lvl+0xe8/0x150 [ 1316.090847][T13995] should_fail_ex+0x412/0x560 [ 1316.090882][T13995] _copy_from_iter+0x1d3/0x1670 [ 1316.090919][T13995] ? rcu_is_watching+0x15/0xb0 [ 1316.090957][T13995] ? __pfx__copy_from_iter+0x10/0x10 [ 1316.090998][T13995] ? netlink_sendmsg+0x650/0xb40 [ 1316.091028][T13995] ? skb_put+0x11b/0x210 [ 1316.091064][T13995] netlink_sendmsg+0x6c0/0xb40 [ 1316.091104][T13995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1316.091140][T13995] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1316.091171][T13995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1316.091207][T13995] ____sys_sendmsg+0x972/0x9f0 [ 1316.091244][T13995] ? __might_fault+0xaf/0x130 [ 1316.091281][T13995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1316.091322][T13995] ? import_iovec+0x73/0xa0 [ 1316.091347][T13995] ___sys_sendmsg+0x2a5/0x360 [ 1316.091378][T13995] ? __lock_acquire+0x6b5/0x2cf0 [ 1316.091412][T13995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1316.091482][T13995] ? __fget_files+0x2a/0x420 [ 1316.091509][T13995] ? __fget_files+0x3a0/0x420 [ 1316.091547][T13995] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1316.091583][T13995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1316.091631][T13995] ? __pfx_ksys_write+0x10/0x10 [ 1316.091671][T13995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.091694][T13995] do_syscall_64+0x15f/0xf80 [ 1316.091720][T13995] ? trace_irq_disable+0x3b/0x140 [ 1316.091743][T13995] ? clear_bhb_loop+0x40/0x90 [ 1316.091769][T13995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.091790][T13995] RIP: 0033:0x7f6e6c79c819 [ 1316.091810][T13995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.091827][T13995] RSP: 002b:00007f6e6d72a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1316.091849][T13995] RAX: ffffffffffffffda RBX: 00007f6e6ca15fa0 RCX: 00007f6e6c79c819 [ 1316.091864][T13995] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1316.091878][T13995] RBP: 00007f6e6d72a090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.091891][T13995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.091903][T13995] R13: 00007f6e6ca16038 R14: 00007f6e6ca15fa0 R15: 00007ffeb3ce6bc8 [ 1316.091936][T13995] [ 1316.366888][T13984] tunl0: Caught tx_queue_len zero misconfig [ 1316.423674][T13986] syzkaller1: entered promiscuous mode [ 1316.438396][T13986] syzkaller1: entered allmulticast mode [ 1316.473844][T13993] vlan0: entered promiscuous mode [ 1316.565757][T14012] netlink: 'syz.2.10052': attribute type 1 has an invalid length. [ 1316.581751][T14012] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10052'. [ 1316.772641][T14019] syzkaller0: entered promiscuous mode [ 1316.778351][T14019] syzkaller0: entered allmulticast mode [ 1316.795715][T14017] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1316.805962][T14017] CPU: 1 UID: 0 PID: 14017 Comm: syz.2.10054 Not tainted syzkaller #0 PREEMPT(full) [ 1316.805995][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1316.806009][T14017] Call Trace: [ 1316.806019][T14017] [ 1316.806030][T14017] dump_stack_lvl+0xe8/0x150 [ 1316.806078][T14017] sysfs_warn_dup+0x8e/0xa0 [ 1316.806108][T14017] sysfs_do_create_link_sd+0xc0/0x110 [ 1316.806138][T14017] device_add_class_symlinks+0x1cf/0x240 [ 1316.806168][T14017] device_add+0x475/0xb70 [ 1316.806199][T14017] wiphy_register+0x1dc5/0x2dc0 [ 1316.806239][T14017] ? __pfx_wiphy_register+0x10/0x10 [ 1316.806263][T14017] ? __pfx_netdev_run_todo+0x10/0x10 [ 1316.806296][T14017] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1316.806332][T14017] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1316.806362][T14017] ieee80211_register_hw+0x3d82/0x4a70 [ 1316.806402][T14017] ? ieee80211_register_hw+0x1981/0x4a70 [ 1316.806450][T14017] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1316.806480][T14017] ? __asan_memset+0x22/0x50 [ 1316.806510][T14017] ? __hrtimer_setup+0x1b7/0x260 [ 1316.806543][T14017] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1316.806581][T14017] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 1316.806640][T14017] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1316.806668][T14017] ? kstrndup+0xbf/0x160 [ 1316.806740][T14017] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1316.806793][T14017] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1316.806830][T14017] ? rcu_is_watching+0x15/0xb0 [ 1316.806861][T14017] ? trace_kmalloc+0x2a/0xf0 [ 1316.806897][T14017] ? __nla_parse+0x40/0x60 [ 1316.806922][T14017] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1316.806947][T14017] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1316.806979][T14017] genl_family_rcv_msg_doit+0x22a/0x330 [ 1316.807009][T14017] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1316.807044][T14017] ? bpf_lsm_capable+0x9/0x20 [ 1316.807069][T14017] ? security_capable+0x7e/0x2c0 [ 1316.807103][T14017] genl_rcv_msg+0x61c/0x7a0 [ 1316.807134][T14017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1316.807155][T14017] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1316.807199][T14017] netlink_rcv_skb+0x232/0x4b0 [ 1316.807230][T14017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1316.807255][T14017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1316.807310][T14017] ? down_read+0x270/0x2e0 [ 1316.807343][T14017] ? genl_rcv+0xd/0x40 [ 1316.807366][T14017] genl_rcv+0x28/0x40 [ 1316.807386][T14017] netlink_unicast+0x75c/0x8e0 [ 1316.807452][T14017] netlink_sendmsg+0x813/0xb40 [ 1316.807498][T14017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1316.807531][T14017] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1316.807562][T14017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1316.807608][T14017] ____sys_sendmsg+0x972/0x9f0 [ 1316.807642][T14017] ? __might_fault+0xaf/0x130 [ 1316.807681][T14017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1316.807725][T14017] ? import_iovec+0x73/0xa0 [ 1316.807751][T14017] ___sys_sendmsg+0x2a5/0x360 [ 1316.807784][T14017] ? __lock_acquire+0x6b5/0x2cf0 [ 1316.807820][T14017] ? __pfx____sys_sendmsg+0x10/0x10 [ 1316.807869][T14017] ? futex_wake+0x4ac/0x580 [ 1316.807918][T14017] ? __fget_files+0x2a/0x420 [ 1316.807947][T14017] ? __fget_files+0x3a0/0x420 [ 1316.807985][T14017] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1316.808021][T14017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1316.808063][T14017] ? rcu_is_watching+0x15/0xb0 [ 1316.808107][T14017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.808132][T14017] do_syscall_64+0x15f/0xf80 [ 1316.808159][T14017] ? trace_irq_disable+0x3b/0x140 [ 1316.808185][T14017] ? clear_bhb_loop+0x40/0x90 [ 1316.808213][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.808234][T14017] RIP: 0033:0x7ff5b1d9c819 [ 1316.808255][T14017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.808285][T14017] RSP: 002b:00007ff5b2ca0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1316.808309][T14017] RAX: ffffffffffffffda RBX: 00007ff5b2015fa0 RCX: 00007ff5b1d9c819 [ 1316.808325][T14017] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 1316.808340][T14017] RBP: 00007ff5b1e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1316.808354][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.808368][T14017] R13: 00007ff5b2016038 R14: 00007ff5b2015fa0 R15: 00007ffd170fbb28 [ 1316.808403][T14017] [ 1317.432554][T14037] FAULT_INJECTION: forcing a failure. [ 1317.432554][T14037] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.447541][T14037] CPU: 0 UID: 0 PID: 14037 Comm: syz.3.10059 Not tainted syzkaller #0 PREEMPT(full) [ 1317.447569][T14037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1317.447584][T14037] Call Trace: [ 1317.447593][T14037] [ 1317.447613][T14037] dump_stack_lvl+0xe8/0x150 [ 1317.447652][T14037] should_fail_ex+0x412/0x560 [ 1317.447706][T14037] should_failslab+0xa8/0x100 [ 1317.447729][T14037] ? skb_clone+0x212/0x3a0 [ 1317.447751][T14037] kmem_cache_alloc_noprof+0x87/0x650 [ 1317.447781][T14037] ? apparmor_capable+0x126/0x170 [ 1317.447811][T14037] skb_clone+0x212/0x3a0 [ 1317.447830][T14037] ? nfnetlink_rcv+0x4b0/0x27b0 [ 1317.447862][T14037] nfnetlink_rcv+0x4de/0x27b0 [ 1317.447903][T14037] ? lockdep_hardirqs_on+0x7a/0x110 [ 1317.447930][T14037] ? __local_bh_enable_ip+0xd0/0x130 [ 1317.447959][T14037] ? __dev_queue_xmit+0x2b6/0x3950 [ 1317.447981][T14037] ? __dev_queue_xmit+0x1fe5/0x3950 [ 1317.448002][T14037] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1317.448042][T14037] ? __dev_queue_xmit+0x2b6/0x3950 [ 1317.448071][T14037] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1317.448118][T14037] ? ref_tracker_free+0x693/0x840 [ 1317.448154][T14037] ? __pfx_ref_tracker_free+0x10/0x10 [ 1317.448205][T14037] ? skb_clone+0x246/0x3a0 [ 1317.448230][T14037] ? __netlink_deliver_tap+0x807/0x850 [ 1317.448262][T14037] ? netlink_deliver_tap+0x2e/0x1b0 [ 1317.448300][T14037] ? netlink_deliver_tap+0x2e/0x1b0 [ 1317.448331][T14037] ? netlink_deliver_tap+0x2e/0x1b0 [ 1317.448368][T14037] netlink_unicast+0x75c/0x8e0 [ 1317.448408][T14037] netlink_sendmsg+0x813/0xb40 [ 1317.448450][T14037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.448497][T14037] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1317.448528][T14037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1317.448564][T14037] ____sys_sendmsg+0x972/0x9f0 [ 1317.448597][T14037] ? __might_fault+0xaf/0x130 [ 1317.448633][T14037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1317.448677][T14037] ? import_iovec+0x73/0xa0 [ 1317.448704][T14037] ___sys_sendmsg+0x2a5/0x360 [ 1317.448737][T14037] ? __lock_acquire+0x6b5/0x2cf0 [ 1317.448771][T14037] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.448842][T14037] ? __fget_files+0x2a/0x420 [ 1317.448869][T14037] ? __fget_files+0x3a0/0x420 [ 1317.448919][T14037] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1317.448954][T14037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1317.448997][T14037] ? __pfx_ksys_write+0x10/0x10 [ 1317.449037][T14037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.449061][T14037] do_syscall_64+0x15f/0xf80 [ 1317.449087][T14037] ? trace_irq_disable+0x3b/0x140 [ 1317.449109][T14037] ? clear_bhb_loop+0x40/0x90 [ 1317.449136][T14037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.449158][T14037] RIP: 0033:0x7f304cd9c819 [ 1317.449177][T14037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.449196][T14037] RSP: 002b:00007f304db80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.449221][T14037] RAX: ffffffffffffffda RBX: 00007f304d015fa0 RCX: 00007f304cd9c819 [ 1317.449237][T14037] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1317.449251][T14037] RBP: 00007f304db80090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.449265][T14037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.449278][T14037] R13: 00007f304d016038 R14: 00007f304d015fa0 R15: 00007fff4bf82928 [ 1317.449312][T14037] [ 1317.969913][T14045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10060'. [ 1317.996205][T14045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10060'. [ 1318.108248][T14054] netlink: 'syz.4.10065': attribute type 8 has an invalid length. [ 1318.166423][T14056] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1318.462005][T14076] FAULT_INJECTION: forcing a failure. [ 1318.462005][T14076] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.475895][T14076] CPU: 0 UID: 0 PID: 14076 Comm: syz.3.10072 Not tainted syzkaller #0 PREEMPT(full) [ 1318.475925][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1318.475939][T14076] Call Trace: [ 1318.475948][T14076] [ 1318.475958][T14076] dump_stack_lvl+0xe8/0x150 [ 1318.475997][T14076] should_fail_ex+0x412/0x560 [ 1318.476034][T14076] should_failslab+0xa8/0x100 [ 1318.476058][T14076] ? skb_clone+0x212/0x3a0 [ 1318.476080][T14076] kmem_cache_alloc_noprof+0x87/0x650 [ 1318.476112][T14076] ? apparmor_capable+0x126/0x170 [ 1318.476161][T14076] skb_clone+0x212/0x3a0 [ 1318.476207][T14076] ? nfnetlink_rcv+0x4b0/0x27b0 [ 1318.476237][T14076] nfnetlink_rcv+0x4de/0x27b0 [ 1318.476275][T14076] ? lockdep_hardirqs_on+0x7a/0x110 [ 1318.476300][T14076] ? __local_bh_enable_ip+0xd0/0x130 [ 1318.476326][T14076] ? __dev_queue_xmit+0x2b6/0x3950 [ 1318.476347][T14076] ? __dev_queue_xmit+0x1fe5/0x3950 [ 1318.476365][T14076] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1318.476403][T14076] ? __dev_queue_xmit+0x2b6/0x3950 [ 1318.476428][T14076] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1318.476470][T14076] ? ref_tracker_free+0x693/0x840 [ 1318.476504][T14076] ? __pfx_ref_tracker_free+0x10/0x10 [ 1318.476551][T14076] ? skb_clone+0x246/0x3a0 [ 1318.476574][T14076] ? __netlink_deliver_tap+0x807/0x850 [ 1318.476602][T14076] ? netlink_deliver_tap+0x2e/0x1b0 [ 1318.476637][T14076] ? netlink_deliver_tap+0x2e/0x1b0 [ 1318.476665][T14076] ? netlink_deliver_tap+0x2e/0x1b0 [ 1318.476699][T14076] netlink_unicast+0x75c/0x8e0 [ 1318.476736][T14076] netlink_sendmsg+0x813/0xb40 [ 1318.476793][T14076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1318.476828][T14076] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1318.476859][T14076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1318.476895][T14076] ____sys_sendmsg+0x972/0x9f0 [ 1318.476928][T14076] ? __might_fault+0xaf/0x130 [ 1318.476964][T14076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1318.477007][T14076] ? import_iovec+0x73/0xa0 [ 1318.477032][T14076] ___sys_sendmsg+0x2a5/0x360 [ 1318.477063][T14076] ? __lock_acquire+0x6b5/0x2cf0 [ 1318.477096][T14076] ? __pfx____sys_sendmsg+0x10/0x10 [ 1318.477166][T14076] ? __fget_files+0x2a/0x420 [ 1318.477200][T14076] ? __fget_files+0x3a0/0x420 [ 1318.477247][T14076] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1318.477281][T14076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1318.477320][T14076] ? __pfx_ksys_write+0x10/0x10 [ 1318.477357][T14076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.477379][T14076] do_syscall_64+0x15f/0xf80 [ 1318.477403][T14076] ? trace_irq_disable+0x3b/0x140 [ 1318.477424][T14076] ? clear_bhb_loop+0x40/0x90 [ 1318.477448][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.477468][T14076] RIP: 0033:0x7f304cd9c819 [ 1318.477487][T14076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.477503][T14076] RSP: 002b:00007f304db80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1318.477525][T14076] RAX: ffffffffffffffda RBX: 00007f304d015fa0 RCX: 00007f304cd9c819 [ 1318.477539][T14076] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1318.477552][T14076] RBP: 00007f304db80090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.477564][T14076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.477576][T14076] R13: 00007f304d016038 R14: 00007f304d015fa0 R15: 00007fff4bf82928 [ 1318.477626][T14076] [ 1318.826890][T14079] netlink: 'syz.1.10074': attribute type 1 has an invalid length. [ 1318.879190][T14079] bond3: entered promiscuous mode [ 1318.901938][T14079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1318.913463][T14081] tipc: Resetting bearer [ 1319.005580][T14079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10074'. [ 1319.038191][T14079] bond3: entered allmulticast mode [ 1319.198104][T14084] bond3: (slave bridge2): making interface the new active one [ 1319.231433][T14084] bridge2: entered promiscuous mode [ 1319.265454][T14084] bridge2: entered allmulticast mode [ 1319.301201][T14102] netlink: 'syz.0.10080': attribute type 7 has an invalid length. [ 1319.317333][T14084] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1319.462879][T14114] __nla_validate_parse: 2 callbacks suppressed [ 1319.462900][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10084'. [ 1319.559567][T14120] netlink: 272 bytes leftover after parsing attributes in process `syz.3.10087'. [ 1319.575750][T14120] gre0 speed is unknown, defaulting to 1000 [ 1319.585841][T14120] gre0 speed is unknown, defaulting to 1000 [ 1319.593233][T14120] gre0 speed is unknown, defaulting to 1000 [ 1319.950333][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10091'. [ 1319.970441][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10091'. [ 1320.058103][T14144] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10092'. [ 1320.074096][T14144] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10092'. [ 1320.095321][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10094'. [ 1320.185524][T14152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10095'. [ 1320.195704][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10095'. [ 1320.223133][T14120] infiniband syz1: set active [ 1320.228167][ T5916] gre0 speed is unknown, defaulting to 1000 [ 1320.250484][T14120] infiniband syz1: added gre0 [ 1320.276029][T14157] hsr0: entered promiscuous mode [ 1320.282108][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10096'. [ 1320.346616][T14120] RDS/IB: syz1: added [ 1320.351360][T14120] smc: adding ib device syz1 with port count 1 [ 1320.368417][T14120] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 1320.423414][ T6548] gre0 speed is unknown, defaulting to 1000 [ 1320.430650][T14120] gre0 speed is unknown, defaulting to 1000 [ 1320.621864][ T29] audit: type=1804 audit(1776426855.149:32): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10098" name="/newroot/251/memory.events" dev="tmpfs" ino=1296 res=1 errno=0 [ 1320.648134][ T29] audit: type=1800 audit(1776426855.149:33): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10098" name="memory.events" dev="tmpfs" ino=1296 res=0 errno=0 [ 1320.688448][ T29] audit: type=1804 audit(1776426855.179:34): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.10098" name="/newroot/251/memory.events" dev="tmpfs" ino=1296 res=1 errno=0 [ 1320.797119][T14120] gre0 speed is unknown, defaulting to 1000 [ 1321.195111][T14180] erspan0: entered promiscuous mode [ 1321.211097][T14185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.233526][T14185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.252093][T14180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.263382][T14187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.281018][T14180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1321.297919][T14187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.303883][T14120] gre0 speed is unknown, defaulting to 1000 [ 1321.329025][T14187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.337849][T14187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.364013][T14187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.401148][T14187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.411241][T14187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.454609][T14189] bond4: entered promiscuous mode [ 1321.469089][T14189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1321.563705][T14191] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1321.595770][T14191] bond5: entered promiscuous mode [ 1321.613799][T14191] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1321.665810][T14193] lo: Caught tx_queue_len zero misconfig [ 1321.973683][T14120] gre0 speed is unknown, defaulting to 1000 [ 1322.587939][T14227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.617174][T14227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.642194][T14227] bond0 (unregistering): Released all slaves [ 1322.659336][T14120] gre0 speed is unknown, defaulting to 1000 [ 1322.959442][T14253] batman_adv: batadv0: Adding interface: macvtap1 [ 1322.966238][T14253] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.992950][T14253] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1323.048436][T14120] gre0 speed is unknown, defaulting to 1000 [ 1323.148823][T14258] ip6gretap0: entered promiscuous mode [ 1323.405317][T14120] gre0 speed is unknown, defaulting to 1000 [ 1323.638648][T14120] gre0 speed is unknown, defaulting to 1000 [ 1323.753763][T14279] netlink: 'syz.4.10132': attribute type 13 has an invalid length. [ 1323.762077][T14279] netlink: 'syz.4.10132': attribute type 17 has an invalid length. [ 1323.823489][ T5943] lo speed is unknown, defaulting to 1000 [ 1323.877059][T14120] gre0 speed is unknown, defaulting to 1000 [ 1324.164802][T14284] lo speed is unknown, defaulting to 1000 [ 1324.179443][T14284] lo speed is unknown, defaulting to 1000 [ 1324.186452][T14285] lo speed is unknown, defaulting to 1000 [ 1324.191119][T14284] lo speed is unknown, defaulting to 1000 [ 1324.199849][T14285] lo speed is unknown, defaulting to 1000 [ 1324.348235][T14284] gre0 speed is unknown, defaulting to 1000 [ 1324.348244][T14285] lo speed is unknown, defaulting to 1000 [ 1324.621942][T14285] gre0 speed is unknown, defaulting to 1000 [ 1324.930075][T14293] __nla_validate_parse: 11 callbacks suppressed [ 1324.930098][T14293] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10135'. [ 1325.405227][T14229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1325.541230][T14305] pim6reg: entered allmulticast mode [ 1325.583285][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10140'. [ 1325.587547][T14305] pim6reg: left allmulticast mode [ 1325.762957][T14311] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1325.787968][T14315] IPv6: Can't replace route, no match found [ 1325.822626][T14315] IPv6: Can't replace route, no match found [ 1325.996126][T14324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1326.784378][T14359] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10152'. [ 1326.819172][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10152'. [ 1327.069215][T14374] FAULT_INJECTION: forcing a failure. [ 1327.069215][T14374] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.110645][T14374] CPU: 0 UID: 0 PID: 14374 Comm: syz.2.10157 Not tainted syzkaller #0 PREEMPT(full) [ 1327.110672][T14374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1327.110686][T14374] Call Trace: [ 1327.110694][T14374] [ 1327.110703][T14374] dump_stack_lvl+0xe8/0x150 [ 1327.110740][T14374] should_fail_ex+0x412/0x560 [ 1327.110775][T14374] should_failslab+0xa8/0x100 [ 1327.110800][T14374] __kmalloc_cache_noprof+0x88/0x660 [ 1327.110832][T14374] ? nfnetlink_rcv+0xfdf/0x27b0 [ 1327.110865][T14374] nfnetlink_rcv+0xfdf/0x27b0 [ 1327.110929][T14374] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1327.110974][T14374] ? ref_tracker_free+0x693/0x840 [ 1327.111036][T14374] ? __netlink_deliver_tap+0x807/0x850 [ 1327.111075][T14374] ? netlink_deliver_tap+0x2e/0x1b0 [ 1327.111104][T14374] ? netlink_deliver_tap+0x2e/0x1b0 [ 1327.111138][T14374] netlink_unicast+0x75c/0x8e0 [ 1327.111176][T14374] netlink_sendmsg+0x813/0xb40 [ 1327.111216][T14374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1327.111249][T14374] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1327.111280][T14374] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1327.111315][T14374] ____sys_sendmsg+0x972/0x9f0 [ 1327.111346][T14374] ? __might_fault+0xaf/0x130 [ 1327.111380][T14374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1327.111422][T14374] ? import_iovec+0x73/0xa0 [ 1327.111453][T14374] ___sys_sendmsg+0x2a5/0x360 [ 1327.111483][T14374] ? __lock_acquire+0x6b5/0x2cf0 [ 1327.111514][T14374] ? __pfx____sys_sendmsg+0x10/0x10 [ 1327.111583][T14374] ? __fget_files+0x2a/0x420 [ 1327.111608][T14374] ? __fget_files+0x3a0/0x420 [ 1327.111664][T14374] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1327.111701][T14374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1327.111746][T14374] ? __pfx_ksys_write+0x10/0x10 [ 1327.111788][T14374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.111812][T14374] do_syscall_64+0x15f/0xf80 [ 1327.111839][T14374] ? trace_irq_disable+0x3b/0x140 [ 1327.111863][T14374] ? clear_bhb_loop+0x40/0x90 [ 1327.111890][T14374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.111922][T14374] RIP: 0033:0x7ff5b1d9c819 [ 1327.111941][T14374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.111959][T14374] RSP: 002b:00007ff5b2ca0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.112000][T14374] RAX: ffffffffffffffda RBX: 00007ff5b2015fa0 RCX: 00007ff5b1d9c819 [ 1327.112017][T14374] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1327.112031][T14374] RBP: 00007ff5b2ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.112045][T14374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1327.112058][T14374] R13: 00007ff5b2016038 R14: 00007ff5b2015fa0 R15: 00007ffd170fbb28 [ 1327.112106][T14374] [ 1327.446745][T14377] net_ratelimit: 1263 callbacks suppressed [ 1327.446764][T14377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1327.586433][T14393] netlink: 'syz.2.10160': attribute type 13 has an invalid length. [ 1327.595139][T14393] netlink: 'syz.2.10160': attribute type 17 has an invalid length. [ 1327.912796][T14393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1327.942591][T12854] lec:lec_start_xmit: lec0:No lecd attached [ 1328.065817][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10163'. [ 1328.256491][T14427] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10166'. [ 1328.277502][T14420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10165'. [ 1328.315977][T14427] ksmbd: Unknown IPC event: 1, ignore. [ 1328.469601][T14418] syzkaller0: entered promiscuous mode [ 1328.480275][T14418] syzkaller0: entered allmulticast mode [ 1331.636836][T14468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10178'. [ 1331.662174][T14477] netlink: 'syz.3.10177': attribute type 1 has an invalid length. [ 1332.403486][ T5194] udevd[5194]: worker [10643] /devices/virtual/block/nbd0 is taking a long time [ 1332.958828][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1332.960396][T14537] netlink: 'syz.4.10193': attribute type 1 has an invalid length. [ 1332.966935][ C1] lec:lec_tx_timeout: lec0 [ 1333.293581][T14537] bond4: entered promiscuous mode [ 1333.331307][T14537] bond4: entered allmulticast mode [ 1333.352626][T14537] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1333.660500][T14564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10198'. [ 1333.696829][T14564] syzkaller0: entered promiscuous mode [ 1333.707097][T14564] syzkaller0: entered allmulticast mode [ 1334.082585][T14585] netlink: 'syz.4.10203': attribute type 13 has an invalid length. [ 1334.432583][T14585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.440381][T14585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.560995][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1334.577582][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.384730][T14585] veth0_macvtap: left allmulticast mode [ 1335.544289][ T24] lo speed is unknown, defaulting to 1000 [ 1335.551931][ T24] syz0: Port: 1 Link DOWN [ 1335.636787][ T2789] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.657904][ T24] lo speed is unknown, defaulting to 1000 [ 1335.752138][ T2789] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.773536][ T2789] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.787786][ T2789] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.941022][T14633] veth1_to_bond: entered allmulticast mode [ 1335.960234][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10214'. [ 1335.985780][T14630] sctp: [Deprecated]: syz.1.10213 (pid 14630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1335.985780][T14630] Use struct sctp_sack_info instead [ 1336.032454][T14633] veth1_to_bond (unregistering): left allmulticast mode [ 1336.049752][T14635] sctp: [Deprecated]: syz.1.10213 (pid 14635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1336.049752][T14635] Use struct sctp_sack_info instead [ 1336.067779][T14633] bond0: (slave bond_slave_1): Releasing backup interface [ 1336.155698][T14630] lo speed is unknown, defaulting to 1000 [ 1336.166533][T14630] lo speed is unknown, defaulting to 1000 [ 1336.175047][T14630] lo speed is unknown, defaulting to 1000 [ 1336.233230][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10217'. [ 1336.703538][T14660] netlink: 'syz.3.10221': attribute type 1 has an invalid length. [ 1336.761067][T14660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1336.772549][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10221'. [ 1336.782858][T14664] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10222'. [ 1336.792715][T14664] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10222'. [ 1336.806524][T14630] gre0 speed is unknown, defaulting to 1000 [ 1336.821068][T14665] bond3 (unregistering): Released all slaves [ 1337.044412][T14675] openvswitch: netlink: Missing valid actions attribute. [ 1337.071087][T14675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1337.281293][T14681] netlink: 41 bytes leftover after parsing attributes in process `syz.0.10227'. [ 1337.308973][T14681] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10227'. [ 1337.385435][T14681] netlink: 41 bytes leftover after parsing attributes in process `syz.0.10227'. [ 1337.687449][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10230'. [ 1337.977638][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10235'. [ 1337.997240][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10235'. [ 1338.018067][T14717] netlink: 'syz.0.10235': attribute type 18 has an invalid length. [ 1338.213790][T14725] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1338.350770][T14733] FAULT_INJECTION: forcing a failure. [ 1338.350770][T14733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.390792][T14733] CPU: 0 UID: 0 PID: 14733 Comm: syz.0.10239 Not tainted syzkaller #0 PREEMPT(full) [ 1338.390822][T14733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1338.390836][T14733] Call Trace: [ 1338.390854][T14733] [ 1338.390864][T14733] dump_stack_lvl+0xe8/0x150 [ 1338.390904][T14733] should_fail_ex+0x412/0x560 [ 1338.390942][T14733] _copy_to_user+0x31/0xb0 [ 1338.390969][T14733] simple_read_from_buffer+0xe1/0x170 [ 1338.391004][T14733] proc_fail_nth_read+0x1bb/0x230 [ 1338.391039][T14733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1338.391074][T14733] ? rw_verify_area+0x2a6/0x4d0 [ 1338.391109][T14733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1338.391143][T14733] vfs_read+0x20c/0xa70 [ 1338.391182][T14733] ? __pfx___mutex_lock+0x10/0x10 [ 1338.391212][T14733] ? __pfx_vfs_read+0x10/0x10 [ 1338.391247][T14733] ? __fget_files+0x2a/0x420 [ 1338.391281][T14733] ? __fget_files+0x3a0/0x420 [ 1338.391308][T14733] ? __fget_files+0x2a/0x420 [ 1338.391347][T14733] ksys_read+0x150/0x270 [ 1338.391382][T14733] ? __pfx_ksys_read+0x10/0x10 [ 1338.391425][T14733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.391451][T14733] do_syscall_64+0x15f/0xf80 [ 1338.391477][T14733] ? trace_irq_disable+0x3b/0x140 [ 1338.391502][T14733] ? clear_bhb_loop+0x40/0x90 [ 1338.391530][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.391552][T14733] RIP: 0033:0x7f6e6c75d04e [ 1338.391574][T14733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1338.391593][T14733] RSP: 002b:00007f6e6d729fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1338.391618][T14733] RAX: ffffffffffffffda RBX: 00007f6e6d72a6c0 RCX: 00007f6e6c75d04e [ 1338.391635][T14733] RDX: 000000000000000f RSI: 00007f6e6d72a0a0 RDI: 0000000000000004 [ 1338.391649][T14733] RBP: 00007f6e6d72a090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.391664][T14733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1338.391678][T14733] R13: 00007f6e6ca16038 R14: 00007f6e6ca15fa0 R15: 00007ffeb3ce6bc8 [ 1338.391715][T14733] [ 1338.849730][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10242'. [ 1339.001857][T14754] sctp: [Deprecated]: syz.0.10243 (pid 14754) Use of int in maxseg socket option. [ 1339.001857][T14754] Use struct sctp_assoc_value instead [ 1339.122665][T14758] lo speed is unknown, defaulting to 1000 [ 1339.134126][T14758] lo speed is unknown, defaulting to 1000 [ 1339.144843][T14758] lo speed is unknown, defaulting to 1000 [ 1339.821344][T14794] bond5 (unregistering): Released all slaves [ 1339.871072][T14758] gre0 speed is unknown, defaulting to 1000 [ 1339.911508][T14803] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1340.015903][T14801] lo speed is unknown, defaulting to 1000 [ 1340.046591][T14801] lo speed is unknown, defaulting to 1000 [ 1340.070765][T14801] lo speed is unknown, defaulting to 1000 [ 1340.083341][T14812] netlink: 'syz.4.10255': attribute type 1 has an invalid length. [ 1340.302757][T14817] netlink: 'syz.3.10256': attribute type 1 has an invalid length. [ 1340.337404][T14817] netlink: 'syz.3.10256': attribute type 3 has an invalid length. [ 1340.640905][T14828] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1340.747413][T14801] gre0 speed is unknown, defaulting to 1000 [ 1341.040752][T11483] nci: nci_rsp_packet: unsupported rsp opcode 0xf35 [ 1341.097930][T14845] lo speed is unknown, defaulting to 1000 [ 1341.151946][T14845] lo speed is unknown, defaulting to 1000 [ 1341.422039][T14845] lo speed is unknown, defaulting to 1000 [ 1341.776313][T14845] gre0 speed is unknown, defaulting to 1000 [ 1343.254944][T14869] lo speed is unknown, defaulting to 1000 [ 1343.271086][T14869] lo speed is unknown, defaulting to 1000 [ 1343.279439][T14869] lo speed is unknown, defaulting to 1000 [ 1343.463798][T14869] gre0 speed is unknown, defaulting to 1000 [ 1343.623324][T14831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1344.360208][T14903] tipc: Enabled bearer , priority 10 [ 1344.436758][T14903] netlink: 'syz.2.10271': attribute type 14 has an invalid length. [ 1344.450121][T14903] __nla_validate_parse: 5 callbacks suppressed [ 1344.450158][T14903] netlink: 120 bytes leftover after parsing attributes in process `syz.2.10271'. [ 1344.492912][T14906] tap0: tun_chr_ioctl cmd 1074025677 [ 1344.503687][T14906] tap0: linktype set to 776 [ 1344.975779][T14925] netlink: 'syz.3.10278': attribute type 7 has an invalid length. [ 1344.995888][T14925] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10278'. [ 1345.020322][T14917] bond0: Removing last ns target with arp_interval on [ 1345.080890][T14925] netlink: 'syz.3.10278': attribute type 7 has an invalid length. [ 1345.110423][T14925] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10278'. [ 1345.191091][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10280'. [ 1345.250890][T14936] openvswitch: netlink: Multiple metadata blocks provided [ 1345.381745][T14942] batadv_slave_0: entered promiscuous mode [ 1345.478969][T30551] tipc: Node number set to 1 [ 1345.489312][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10284'. [ 1345.553269][T14944] mac80211_hwsim hwsim105 syzkaller0: Caught tx_queue_len zero misconfig [ 1345.562116][T14948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.594772][T14944] geneve1: Caught tx_queue_len zero misconfig [ 1345.601448][T14944] sch_tbf: burst 0 is lower than device geneve1 mtu (1514) ! [ 1345.809635][T14962] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1345.913641][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10295'. [ 1346.126687][T14985] dummy0: entered allmulticast mode [ 1346.256593][T14991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.311334][T14991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.472181][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10301'. [ 1346.587624][T15007] nbd: socks must be embedded in a SOCK_ITEM attr [ 1347.235101][T15034] lo speed is unknown, defaulting to 1000 [ 1347.252710][T15034] lo speed is unknown, defaulting to 1000 [ 1347.267767][T15034] lo speed is unknown, defaulting to 1000 [ 1347.660000][T15034] gre0 speed is unknown, defaulting to 1000 [ 1349.817698][T15016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1350.350053][T15058] lo speed is unknown, defaulting to 1000 [ 1350.372463][T15058] lo speed is unknown, defaulting to 1000 [ 1350.390586][T15058] lo speed is unknown, defaulting to 1000 [ 1350.484637][T15065] tipc: Enabling of bearer rejected, already enabled [ 1350.756161][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10321'. [ 1350.840102][T15058] gre0 speed is unknown, defaulting to 1000 [ 1351.603650][T15093] netlink: 'syz.0.10327': attribute type 6 has an invalid length. [ 1351.629344][T15093] netlink: 'syz.0.10327': attribute type 7 has an invalid length. [ 1351.658192][T15093] netlink: 'syz.0.10327': attribute type 8 has an invalid length. [ 1351.849698][T15099] tipc: Resetting bearer [ 1351.891837][T15099] mac80211_hwsim hwsim105 syzkaller0: left promiscuous mode [ 1351.918348][T15101] netlink: zone id is out of range [ 1351.949039][T15101] netlink: zone id is out of range [ 1351.958861][T15101] netlink: zone id is out of range [ 1351.984744][T15101] netlink: zone id is out of range [ 1352.014141][T15101] netlink: zone id is out of range [ 1352.042512][T15101] netlink: zone id is out of range [ 1352.060526][T15101] netlink: zone id is out of range [ 1352.073094][T15101] netlink: zone id is out of range [ 1352.087706][T15101] netlink: zone id is out of range [ 1352.109545][T15101] netlink: zone id is out of range [ 1353.196017][T15129] lo speed is unknown, defaulting to 1000 [ 1353.268123][T15129] lo speed is unknown, defaulting to 1000 [ 1353.295847][T15156] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10345'. [ 1353.328027][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10342'. [ 1353.340352][T15129] lo speed is unknown, defaulting to 1000 [ 1353.565698][T15157] bridge0: port 3(dummy0) entered disabled state [ 1353.678933][T15157] batadv_slave_0: left promiscuous mode [ 1353.704069][T15157] veth0_virt_wifi: left allmulticast mode [ 1353.731774][T15157] vlan0: left promiscuous mode [ 1353.764196][T15157] geneve1: left promiscuous mode [ 1353.793201][T15157] veth5: left promiscuous mode [ 1353.823768][T15157] veth7: left allmulticast mode [ 1353.855579][T30548] gre0 speed is unknown, defaulting to 1000 [ 1353.863348][T30548] syz1: Port: 1 Link DOWN [ 1353.878166][T30548] gre0 speed is unknown, defaulting to 1000 [ 1354.342834][T15177] batman_adv: batadv0: Adding interface: vlan2 [ 1354.372562][T15177] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.430380][T15177] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1354.450647][T15129] gre0 speed is unknown, defaulting to 1000 [ 1354.666459][T15182] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 1354.927263][T15187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10352'. [ 1354.988862][T15189] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 1355.053923][T15198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10351'. [ 1355.159902][T15198] veth1_to_team: entered promiscuous mode [ 1355.182313][T15188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 1355.211636][T15198] veth1_to_team: left promiscuous mode [ 1355.397654][T15204] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10354'. [ 1355.436160][T15204] netlink: 'syz.3.10354': attribute type 1 has an invalid length. [ 1355.468219][T15204] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10354'. [ 1355.908758][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10358'. [ 1357.021666][T15259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10367'. [ 1357.035502][T15259] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10367'. [ 1357.447645][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10370'. [ 1358.115109][T15247] veth1_to_hsr: left allmulticast mode [ 1358.130679][T15247] veth1_to_hsr: left promiscuous mode [ 1358.504818][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10371'. [ 1358.549210][T20917] Bluetooth: hci4: command 0x0406 tx timeout [ 1358.892107][T15280] syzkaller0: entered promiscuous mode [ 1358.926405][T15280] syzkaller0: entered allmulticast mode [ 1358.961560][T20312] net_ratelimit: 345 callbacks suppressed [ 1358.961582][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.976072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.057601][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.066160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.134493][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.143287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.207663][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.216380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.257323][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.266143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.838369][T15296] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1359.918392][T15296] bond3 (unregistering): Released all slaves [ 1360.353465][T15323] sctp: [Deprecated]: syz.4.10382 (pid 15323) Use of int in maxseg socket option. [ 1360.353465][T15323] Use struct sctp_assoc_value instead [ 1360.677975][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10385'. [ 1360.700072][T15337] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10386'. [ 1360.763812][T15337] gretap0: entered promiscuous mode [ 1360.796447][T15337] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10386'. [ 1360.833406][T15337] 0ªî{X¹¦: renamed from gretap0 [ 1360.896061][T15337] 0ªî{X¹¦: left promiscuous mode [ 1360.910232][T15337] 0ªî{X¹¦: entered allmulticast mode [ 1361.180514][T15347] lo speed is unknown, defaulting to 1000 [ 1361.194734][T15347] lo speed is unknown, defaulting to 1000 [ 1361.219519][T15347] lo speed is unknown, defaulting to 1000 [ 1361.607144][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1361.614235][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1362.078751][T15347] gre0 speed is unknown, defaulting to 1000 [ 1362.256340][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10394'. [ 1362.323321][T15361] netlink: 592 bytes leftover after parsing attributes in process `syz.3.10394'. [ 1362.340186][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10393'. [ 1362.349901][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10393'. [ 1362.362669][T15360] netlink: 47 bytes leftover after parsing attributes in process `syz.1.10393'. [ 1362.587161][T15367] netlink: 27 bytes leftover after parsing attributes in process `syz.4.10395'. [ 1362.845726][ T29] audit: type=1107 audit(1776426897.379:35): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1363.053752][T15373] netlink: 160 bytes leftover after parsing attributes in process `syz.1.10398'. [ 1363.308207][T15376] bond3: entered promiscuous mode [ 1363.353195][T15376] bond3: entered allmulticast mode [ 1363.404755][T15376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1363.682381][ T5145] Bluetooth: hci5: command 0x0406 tx timeout [ 1363.743966][T15390] lo speed is unknown, defaulting to 1000 [ 1363.754449][T15390] lo speed is unknown, defaulting to 1000 [ 1363.762461][T15390] lo speed is unknown, defaulting to 1000 [ 1364.282675][T15390] gre0 speed is unknown, defaulting to 1000 [ 1364.447535][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10410'. [ 1364.563297][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10411'. [ 1364.751854][T15420] team0: Port device team_slave_0 removed [ 1364.832906][T15428] batman_adv: batadv0: Adding interface: ipvlan2 [ 1364.871475][T15428] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.931477][T15428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.958976][T15428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.980469][T15428] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 1365.497446][T15452] netlink: 'syz.1.10419': attribute type 1 has an invalid length. [ 1365.998643][T15462] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.10421'. [ 1366.028289][T15462] net_ratelimit: 8 callbacks suppressed [ 1366.028315][T15462] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1366.799011][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1366.807140][ C1] lec:lec_tx_timeout: lec0 [ 1366.905397][T15484] ip6tnl0: Caught tx_queue_len zero misconfig [ 1367.336501][T15504] __nla_validate_parse: 3 callbacks suppressed [ 1367.336522][T15504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10432'. [ 1367.920214][T15523] netlink: 'syz.4.10436': attribute type 1 has an invalid length. [ 1367.934408][T11511] udevd[11511]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1367.982789][T15523] netlink: 'syz.4.10436': attribute type 1 has an invalid length. [ 1368.213558][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10441'. [ 1368.257745][T15539] netlink: 580 bytes leftover after parsing attributes in process `syz.1.10441'. [ 1368.283819][T15541] veth1: Caught tx_queue_len zero misconfig [ 1368.301772][T15545] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10442'. [ 1368.339324][T15539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10441'. [ 1368.341335][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10443'. [ 1368.367917][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10442'. [ 1368.372625][T15539] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10441'. [ 1368.615620][T15566] netlink: 'syz.1.10447': attribute type 2 has an invalid length. [ 1368.630977][T15558] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1368.631587][T15566] netlink: 'syz.1.10447': attribute type 1 has an invalid length. [ 1368.651016][T15566] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10447'. [ 1368.985938][T15581] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1369.036503][T15584] netlink: 'syz.1.10449': attribute type 3 has an invalid length. [ 1369.090595][T15581] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1369.123060][T15584] netlink: 'syz.1.10449': attribute type 1 has an invalid length. [ 1369.165754][T15581] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.208756][T15584] netlink: 232 bytes leftover after parsing attributes in process `syz.1.10449'. [ 1369.248330][T15581] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1369.282322][T15598] netlink: 'syz.3.10453': attribute type 10 has an invalid length. [ 1369.312298][T15599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1370.329372][T15644] lo speed is unknown, defaulting to 1000 [ 1370.352257][T15644] lo speed is unknown, defaulting to 1000 [ 1370.370929][T15644] lo speed is unknown, defaulting to 1000 [ 1370.907854][T15644] gre0 speed is unknown, defaulting to 1000 [ 1371.107350][T15661] netlink: 'syz.4.10470': attribute type 1 has an invalid length. [ 1371.216126][T15661] bond5: entered promiscuous mode [ 1371.222050][T15661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1371.372069][T15664] bond5: entered allmulticast mode [ 1371.530553][T15664] bond5: (slave bridge5): making interface the new active one [ 1371.561687][T15664] bridge5: entered promiscuous mode [ 1371.613098][T15664] bridge5: entered allmulticast mode [ 1371.653234][T15664] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1372.151494][T15697] macsec1: entered promiscuous mode [ 1372.867325][T15725] __nla_validate_parse: 14 callbacks suppressed [ 1372.867345][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10485'. [ 1373.363860][T15741] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 1373.516318][T15743] lo speed is unknown, defaulting to 1000 [ 1373.530383][T15743] lo speed is unknown, defaulting to 1000 [ 1373.557277][T15743] lo speed is unknown, defaulting to 1000 [ 1373.656604][T15729] netlink: 'syz.1.10486': attribute type 2 has an invalid length. [ 1373.669615][T15729] netlink: 'syz.1.10486': attribute type 1 has an invalid length. [ 1373.687712][T15729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10486'. [ 1373.869869][T15755] tipc: Enabling of bearer rejected, failed to enable media [ 1374.071128][T15743] gre0 speed is unknown, defaulting to 1000 [ 1374.630186][T15790] syzkaller0: entered promiscuous mode [ 1374.635960][T15790] syzkaller0: entered allmulticast mode [ 1374.724025][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10502'. [ 1374.737749][T15800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10505'. [ 1374.765860][T15802] bond0: (slave batadv_slave_0): Releasing backup interface [ 1375.011655][T15809] syzkaller0: entered promiscuous mode [ 1375.023970][T15809] syzkaller0: entered allmulticast mode [ 1375.323381][T15824] netlink: 'syz.2.10510': attribute type 2 has an invalid length. [ 1375.434163][T15824] hmac(sha224: entered promiscuous mode [ 1375.559003][T15826] syzkaller0: entered promiscuous mode [ 1375.565450][T15826] syzkaller0: entered allmulticast mode [ 1375.600622][T15826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10511'. [ 1375.651285][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10515'. [ 1375.665318][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10515'. [ 1376.101418][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10523'. [ 1376.874533][T15868] netlink: 'syz.2.10525': attribute type 1 has an invalid length. [ 1377.012907][T15868] bond6: entered promiscuous mode [ 1377.039276][T15868] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1377.080808][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10528'. [ 1377.121495][T15870] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1377.149998][T15870] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1377.192151][T15870] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1377.233395][T15870] bond6: (slave ip6gre2): making interface the new active one [ 1377.256761][T15881] netlink: 'syz.3.10526': attribute type 1 has an invalid length. [ 1377.270126][T15870] ip6gre2: entered promiscuous mode [ 1377.300843][T15870] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 1377.391271][T15886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.415603][T15878] netlink: 364 bytes leftover after parsing attributes in process `syz.3.10526'. [ 1377.436479][T15886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.459147][T15886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.841545][T15901] netlink: 'syz.2.10531': attribute type 4 has an invalid length. [ 1378.056144][T15906] netlink: 'syz.2.10534': attribute type 1 has an invalid length. [ 1378.070133][T15907] __nla_validate_parse: 2 callbacks suppressed [ 1378.070154][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10532'. [ 1378.140585][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10532'. [ 1378.192046][T15906] bond7: entered promiscuous mode [ 1378.217671][T15906] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1378.253062][T15908] batman_adv: batadv0: Adding interface: dummy0 [ 1378.272023][T15908] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.299933][T15908] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1378.339546][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10532'. [ 1378.354589][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10532'. [ 1378.489820][T15920] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1378.509250][T15920] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 1378.530845][T15920] bond7: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1378.552263][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10532'. [ 1378.568119][T15920] bond7: (slave vcan0): making interface the new active one [ 1378.575918][T15920] vcan0: entered promiscuous mode [ 1378.577693][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10532'. [ 1378.591239][T15920] bond7: (slave vcan0): Enslaving as an active interface with an up link [ 1379.001026][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10542'. [ 1379.032301][T15951] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10544'. [ 1379.067943][T15953] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.10543'. [ 1379.209885][T15956] mac80211_hwsim hwsim105 syzkaller0: entered promiscuous mode [ 1379.232378][T15927] syzkaller1: entered promiscuous mode [ 1379.268872][T15927] syzkaller1: entered allmulticast mode [ 1379.394484][T15968] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.10548'. [ 1379.406032][T15968] netlink: Unknown conntrack attr (type=2304, max=9) [ 1379.922787][T15985] netlink: 'syz.1.10552': attribute type 16 has an invalid length. [ 1379.981212][T15985] netlink: 'syz.1.10552': attribute type 17 has an invalid length. [ 1380.118531][T15985] 0ªî{X¹¦: left allmulticast mode [ 1380.226073][T15985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.255750][T15985] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.582830][T15985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1383.098498][T15997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1384.113840][ C1] sched: DL replenish lagged too much [ 1393.145570][T12854] lec:lec_start_xmit: lec0:No lecd attached [ 1393.450163][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1393.464763][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1393.474773][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1393.501714][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1393.511401][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1393.701101][T16022] lo speed is unknown, defaulting to 1000 [ 1393.732405][T16022] lo speed is unknown, defaulting to 1000 [ 1393.751356][T16022] lo speed is unknown, defaulting to 1000 [ 1394.526477][T16022] gre0 speed is unknown, defaulting to 1000 [ 1397.090519][T20917] Bluetooth: hci2: command tx timeout [ 1397.115681][T16054] lo speed is unknown, defaulting to 1000 [ 1397.173417][T16054] lo speed is unknown, defaulting to 1000 [ 1397.190676][T16059] syzkaller0: entered promiscuous mode [ 1397.204323][T16059] syzkaller0: entered allmulticast mode [ 1397.227653][T16054] lo speed is unknown, defaulting to 1000 [ 1397.269280][T16061] xt_cgroup: invalid path, errno=-2 [ 1397.304583][T16059] __nla_validate_parse: 3 callbacks suppressed [ 1397.304604][T16059] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10567'. [ 1397.810584][T16072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10571'. [ 1397.845610][T16072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10571'. [ 1397.856502][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10572'. [ 1397.867487][T16074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10572'. [ 1397.900561][T16054] gre0 speed is unknown, defaulting to 1000 [ 1397.907581][T16074] netlink: 31 bytes leftover after parsing attributes in process `syz.0.10572'. [ 1397.930431][T16074] netlink: 'syz.0.10572': attribute type 3 has an invalid length. [ 1397.940047][T16074] netlink: 'syz.0.10572': attribute type 2 has an invalid length. [ 1397.947982][T16074] netlink: 31 bytes leftover after parsing attributes in process `syz.0.10572'. [ 1397.959197][T16074] netlink: 'syz.0.10572': attribute type 2 has an invalid length. [ 1398.095995][T16087] netlink: 'syz.2.10573': attribute type 1 has an invalid length. [ 1398.165185][T16080] netlink: 'syz.2.10573': attribute type 2 has an invalid length. [ 1398.326243][T16087] bond8: entered promiscuous mode [ 1398.336084][T16087] bond8: entered allmulticast mode [ 1398.343111][T16087] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1398.386335][T16088] erspan1: entered allmulticast mode [ 1398.398416][T16088] bond8: (slave erspan1): making interface the new active one [ 1398.406417][T16088] erspan1: entered promiscuous mode [ 1398.414855][T16088] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 1398.493681][T16096] xt_CT: No such helper "syz0" [ 1398.542199][T16100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10576'. [ 1398.788627][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 1398.796746][ C1] lec:lec_tx_timeout: lec0 [ 1398.862938][T16105] netem: change failed [ 1398.873390][T16106] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1399.025005][T16110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10578'. [ 1399.045041][T16110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10578'. [ 1399.109582][T20917] Bluetooth: hci2: command tx timeout [ 1399.208208][T16022] chnl_net:caif_netlink_parms(): no params data found [ 1399.299620][ T2789] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.369336][T16122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1399.744214][T20312] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.021188][ T6436] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.075387][T16022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.089146][T16022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.096611][T16022] bridge_slave_0: entered allmulticast mode [ 1400.120742][T16022] bridge_slave_0: entered promiscuous mode [ 1400.141216][T16022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.150840][T16022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.165838][T16022] bridge_slave_1: entered allmulticast mode [ 1400.181041][T16022] bridge_slave_1: entered promiscuous mode [ 1400.256561][ T6436] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.286236][ T2796] bridge_slave_1: left allmulticast mode [ 1400.293272][ T2796] bridge_slave_1: left promiscuous mode [ 1400.303069][ T2796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.317860][ T2796] bridge_slave_0: left allmulticast mode [ 1400.323681][ T2796] bridge_slave_0: left promiscuous mode [ 1400.330118][ T2796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.620530][ T2796] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1400.956292][ T2796] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 1400.964905][ T2796] bridge5 (unregistering): left promiscuous mode [ 1400.972648][ T2796] bridge5 (unregistering): left allmulticast mode [ 1401.036493][ T2796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.047435][ T2796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.057168][ T2796] bond0 (unregistering): Released all slaves [ 1401.069632][ T2796] bond1 (unregistering): Released all slaves [ 1401.093053][ T2796] bond2 (unregistering): Released all slaves [ 1401.111241][ T2796] bond3 (unregistering): Released all slaves [ 1401.127741][ T2796] bond4 (unregistering): Released all slaves [ 1401.144716][ T2796] bond5 (unregistering): Released all slaves [ 1401.169895][ T2796] bond6 (unregistering): Released all slaves [ 1401.189486][T20917] Bluetooth: hci2: command tx timeout [ 1401.239680][T16155] bridge5: entered promiscuous mode [ 1401.250978][T16155] bridge5: entered allmulticast mode [ 1401.310161][T16155] team0: Port device bridge5 added [ 1401.412259][T16022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.435736][T16022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.711711][T16022] team0: Port device team_slave_0 added [ 1401.722735][T16022] team0: Port device team_slave_1 added [ 1401.832665][ T2796] batman_adv: batadv0: Removing interface: macvtap1 [ 1401.869038][T16022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.876294][T16022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.909797][T16022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.923080][T16022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.930208][T16022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.956546][T16022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.981456][T16182] netlink: 'syz.2.10590': attribute type 10 has an invalid length. [ 1402.163046][T16022] hsr_slave_0: entered promiscuous mode [ 1402.181419][T16022] hsr_slave_1: entered promiscuous mode [ 1402.191437][T16022] debugfs: 'hsr0' already exists in 'hsr' [ 1402.201698][T16022] Cannot create hsr debugfs directory [ 1402.908516][T16208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1403.005200][T16206] tap0: tun_chr_ioctl cmd 1074025677 [ 1403.020063][T16206] tap0: linktype set to 6 [ 1403.034397][T16205] tap0: tun_chr_ioctl cmd 1074025677 [ 1403.049428][T16205] tap0: linktype set to 6 [ 1403.230467][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.269400][T20917] Bluetooth: hci2: command tx timeout [ 1403.282953][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.515138][T16225] netlink: 'syz.3.10601': attribute type 1 has an invalid length. [ 1403.693046][T16238] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1403.917460][T16241] __nla_validate_parse: 2 callbacks suppressed [ 1403.917481][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10603'. [ 1403.993371][ T6439] smc: removing ib device syz0 [ 1404.065769][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1404.203032][T16225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1404.221266][T16247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10604'. [ 1404.257673][T16235] bond4: (slave geneve2): making interface the new active one [ 1404.282168][T16235] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1404.426087][ T2789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.448112][ T2789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.669818][T16258] sctp: [Deprecated]: syz.0.10608 (pid 16258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1404.669818][T16258] Use struct sctp_sack_info instead [ 1404.900788][ T2789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.929803][T16228] lo speed is unknown, defaulting to 1000 [ 1404.961298][T16264] netlink: 'syz.1.10609': attribute type 1 has an invalid length. [ 1405.120938][T16228] lo speed is unknown, defaulting to 1000 [ 1405.246202][T16264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1405.333435][T16228] gre0 speed is unknown, defaulting to 1000 [ 1405.466606][T16022] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1405.508690][T16022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1405.524739][T16022] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1405.554883][T16022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1405.563980][T16022] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1405.587486][T16022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1405.626497][T16022] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1405.671615][T16022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1405.772810][T16289] netlink: 'syz.0.10614': attribute type 1 has an invalid length. [ 1408.475359][T16022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.566284][T16022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.611700][ T2789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.618950][ T2789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.691595][T16310] netlink: 'syz.2.10616': attribute type 1 has an invalid length. [ 1408.984230][T16308] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1409.005500][T16321] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10617'. [ 1409.020005][T16308] bond5: option arp_ip_target: invalid value (0) [ 1409.051754][T16308] bond5 (unregistering): Released all slaves [ 1409.365699][T16303] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1409.376901][T16303] bond5: option arp_ip_target: invalid value (0) [ 1409.395325][T16303] bond5 (unregistering): Released all slaves [ 1409.476498][T20312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.483725][T20312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.729462][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1409.784091][ T6436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.802252][ T6436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.808256][T16330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.620705][T16022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1411.357026][T16370] ip6tnl0: Caught tx_queue_len zero misconfig [ 1411.596312][T16022] veth0_vlan: entered promiscuous mode [ 1411.653183][T16022] veth1_vlan: entered promiscuous mode [ 1411.742909][T16022] veth0_macvtap: entered promiscuous mode [ 1411.774139][T16022] veth1_macvtap: entered promiscuous mode [ 1411.856703][T16022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.906127][T16022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.945705][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1411.986219][ T6436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.008593][ T6436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.034318][ T6436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.053860][ T6436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.371527][T16387] vcan0: entered promiscuous mode [ 1412.393185][T16387] vcan0: entered allmulticast mode [ 1412.413729][ T2791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.432306][ T2791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.501566][T16386] nbd: socks must be embedded in a SOCK_ITEM attr [ 1412.537602][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10630'. [ 1412.540685][T16387] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1412.550352][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10630'. [ 1412.586837][T16387] CPU: 0 UID: 0 PID: 16387 Comm: syz.1.10629 Not tainted syzkaller #0 PREEMPT(full) [ 1412.586881][T16387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1412.586897][T16387] Call Trace: [ 1412.586907][T16387] [ 1412.586917][T16387] dump_stack_lvl+0xe8/0x150 [ 1412.586959][T16387] sysfs_warn_dup+0x8e/0xa0 [ 1412.586990][T16387] sysfs_do_create_link_sd+0xc0/0x110 [ 1412.587024][T16387] device_add_class_symlinks+0x1cf/0x240 [ 1412.587058][T16387] device_add+0x475/0xb70 [ 1412.587090][T16387] wiphy_register+0x1dc5/0x2dc0 [ 1412.587136][T16387] ? __pfx_wiphy_register+0x10/0x10 [ 1412.587163][T16387] ? __pfx_netdev_run_todo+0x10/0x10 [ 1412.587187][T16387] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1412.587227][T16387] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1412.587259][T16387] ieee80211_register_hw+0x3d82/0x4a70 [ 1412.587303][T16387] ? ieee80211_register_hw+0x1981/0x4a70 [ 1412.587357][T16387] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1412.587410][T16387] ? __asan_memset+0x22/0x50 [ 1412.587442][T16387] ? __hrtimer_setup+0x1b7/0x260 [ 1412.587474][T16387] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1412.587521][T16387] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 1412.587582][T16387] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1412.587610][T16387] ? kstrndup+0xbf/0x160 [ 1412.587646][T16387] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1412.587703][T16387] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1412.587745][T16387] ? rcu_is_watching+0x15/0xb0 [ 1412.587777][T16387] ? trace_kmalloc+0x2a/0xf0 [ 1412.587818][T16387] ? __nla_parse+0x40/0x60 [ 1412.587845][T16387] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1412.587875][T16387] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1412.587907][T16387] genl_family_rcv_msg_doit+0x22a/0x330 [ 1412.587938][T16387] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1412.587974][T16387] ? bpf_lsm_capable+0x9/0x20 [ 1412.587997][T16387] ? security_capable+0x7e/0x2c0 [ 1412.588030][T16387] genl_rcv_msg+0x61c/0x7a0 [ 1412.588058][T16387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1412.588081][T16387] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1412.588128][T16387] netlink_rcv_skb+0x232/0x4b0 [ 1412.588161][T16387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1412.588188][T16387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1412.588239][T16387] ? down_read+0x270/0x2e0 [ 1412.588269][T16387] ? genl_rcv+0xd/0x40 [ 1412.588294][T16387] genl_rcv+0x28/0x40 [ 1412.588316][T16387] netlink_unicast+0x75c/0x8e0 [ 1412.588357][T16387] netlink_sendmsg+0x813/0xb40 [ 1412.588401][T16387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1412.588438][T16387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1412.588471][T16387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1412.588509][T16387] ____sys_sendmsg+0x972/0x9f0 [ 1412.588552][T16387] ? __might_fault+0xaf/0x130 [ 1412.588589][T16387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1412.588634][T16387] ? import_iovec+0x73/0xa0 [ 1412.588662][T16387] ___sys_sendmsg+0x2a5/0x360 [ 1412.588695][T16387] ? __lock_acquire+0x6b5/0x2cf0 [ 1412.588730][T16387] ? __pfx____sys_sendmsg+0x10/0x10 [ 1412.588780][T16387] ? futex_wait+0x2a2/0x390 [ 1412.588835][T16387] ? __fget_files+0x2a/0x420 [ 1412.588862][T16387] ? __fget_files+0x3a0/0x420 [ 1412.588905][T16387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1412.588945][T16387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1412.588992][T16387] ? rcu_is_watching+0x15/0xb0 [ 1412.589034][T16387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.589059][T16387] do_syscall_64+0x15f/0xf80 [ 1412.589086][T16387] ? trace_irq_disable+0x3b/0x140 [ 1412.589111][T16387] ? clear_bhb_loop+0x40/0x90 [ 1412.589139][T16387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.589163][T16387] RIP: 0033:0x7fc48af9c819 [ 1412.589184][T16387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.589204][T16387] RSP: 002b:00007fc48bec4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1412.589229][T16387] RAX: ffffffffffffffda RBX: 00007fc48b215fa0 RCX: 00007fc48af9c819 [ 1412.589247][T16387] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 1412.589262][T16387] RBP: 00007fc48b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1412.589277][T16387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1412.589291][T16387] R13: 00007fc48b216038 R14: 00007fc48b215fa0 R15: 00007ffec3ce3cb8 [ 1412.589328][T16387] [ 1413.072262][T20312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.126822][T20312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.439124][ T30] INFO: task kworker/0:1H:1763 blocked for more than 144 seconds. [ 1413.447246][ T30] Not tainted syzkaller #0 [ 1413.466825][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1413.497085][ T30] task:kworker/0:1H state:D stack:26504 pid:1763 tgid:1763 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1413.538513][ T30] Workqueue: kblockd blk_mq_requeue_work [ 1413.550488][ T30] Call Trace: [ 1413.558559][ T30] [ 1413.566300][ T30] __schedule+0x17b4/0x5680 [ 1413.576359][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1413.582157][ T30] ? __pfx___schedule+0x10/0x10 [ 1413.587079][ T30] ? schedule+0x90/0x360 [ 1413.593236][ T30] schedule+0x164/0x360 [ 1413.597506][ T30] schedule_timeout+0x158/0x2c0 [ 1413.604002][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1413.610337][ T30] ? __pfx_process_timeout+0x10/0x10 [ 1413.615714][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1413.621907][ T30] ? prepare_to_wait_event+0x436/0x480 [ 1413.627465][ T30] nbd_queue_rq+0x857/0x1100 [ 1413.632293][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1413.637409][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1413.644809][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1413.653435][ T30] ? sbitmap_get+0x229/0x390 [ 1413.659692][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1413.666340][T16410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10633'. [ 1413.676178][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1413.685035][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1413.693492][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10633'. [ 1413.703944][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1413.717509][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 1413.723690][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1413.738580][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1413.749943][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1413.771265][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1413.779493][T16415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10633'. [ 1413.783001][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 1413.815110][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 1413.829153][ T30] blk_mq_requeue_work+0x71c/0x780 [ 1413.848495][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 1413.857197][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1413.876313][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1413.888843][ T30] process_scheduled_works+0xb5d/0x1860 [ 1413.902482][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1413.916727][ T30] ? assign_work+0x3d5/0x5e0 [ 1413.927155][ T30] worker_thread+0xa53/0xfc0 [ 1413.940852][ T30] kthread+0x388/0x470 [ 1413.949869][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1413.959390][ T30] ? __pfx_kthread+0x10/0x10 [ 1413.970268][ T30] ret_from_fork+0x514/0xb70 [ 1413.980220][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1413.998480][ T30] ? __switch_to+0xc79/0x1410 [ 1414.003296][ T30] ? __pfx_kthread+0x10/0x10 [ 1414.007955][ T30] ret_from_fork_asm+0x1a/0x30 [ 1414.028826][ T30] [ 1414.032181][ T30] [ 1414.032181][ T30] Showing all locks held in the system: [ 1414.062664][ T30] 1 lock held by khungtaskd/30: [ 1414.088642][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1414.130697][ T30] 4 locks held by kworker/0:1H/1763: [ 1414.143528][ T30] #0: ffff88801fe90540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1414.178528][ T30] #1: ffffc90006997c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1414.207697][ T30] #2: ffff88802706d198 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1414.221891][ T30] #3: ffff8880272f9478 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1414.232796][ T30] 2 locks held by getty/5580: [ 1414.244232][ T30] #0: ffff888036ca70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1414.268567][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1414.289263][ T30] 3 locks held by kworker/u8:12/6436: [ 1414.298573][ T30] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1414.325072][ T30] #1: ffffc90004217c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1414.347956][ T30] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1414.360318][ T30] 3 locks held by kworker/u8:15/6439: [ 1414.365768][ T30] #0: ffff888031758940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1414.379495][ T30] #1: ffffc90003257c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1414.394228][ T30] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1414.404180][ T30] 1 lock held by udevd/10643: [ 1414.409985][ T30] #0: ffff88802715e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1414.419654][ T30] 2 locks held by syz.2.10616/16305: [ 1414.425006][ T30] 1 lock held by syz.0.10632/16399: [ 1414.430707][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1414.440670][ T30] 2 locks held by syz.0.10632/16400: [ 1414.446019][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1414.456070][ T30] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1414.467512][ T30] 2 locks held by syz.0.10632/16405: [ 1414.486734][ T30] #0: ffffffff8f583280 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1b20 [ 1414.496025][ T30] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xa6a/0x1b20 [ 1414.506345][ T30] 1 lock held by syz.0.10632/16409: [ 1414.511888][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1414.521561][ T30] 1 lock held by syz.0.10632/16411: [ 1414.526825][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 1414.537187][ T30] 1 lock held by syz.0.10632/16416: [ 1414.543183][ T30] #0: ffffffff8f583280 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1b20 [ 1414.556347][ T30] 1 lock held by syz.0.10632/16419: [ 1414.562706][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1414.572613][ T30] 1 lock held by syz.1.10633/16403: [ 1414.577865][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1414.588185][ T30] 1 lock held by syz.1.10633/16406: [ 1414.599777][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1414.609580][ T30] 2 locks held by syz.1.10633/16410: [ 1414.614933][ T30] #0: ffffffff90324f50 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1414.625585][ T30] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1414.635270][ T30] 1 lock held by syz.1.10633/16415: [ 1414.640800][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1414.651008][ T30] 2 locks held by syz.1.10633/16417: [ 1414.656361][ T30] #0: ffffffff8f50e6c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1414.666359][ T30] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1414.675832][ T30] 1 lock held by syz.3.10634/16404: [ 1414.683320][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1414.693235][ T30] [ 1414.695634][ T30] ============================================= [ 1414.695634][ T30] [ 1414.709161][ T30] NMI backtrace for cpu 1 [ 1414.709177][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1414.709197][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1414.709209][ T30] Call Trace: [ 1414.709216][ T30] [ 1414.709224][ T30] dump_stack_lvl+0xe8/0x150 [ 1414.709256][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1414.709286][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1414.709314][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1414.709345][ T30] sys_info+0x135/0x170 [ 1414.709372][ T30] watchdog+0xfaa/0x1000 [ 1414.709396][ T30] ? watchdog+0x209/0x1000 [ 1414.709423][ T30] kthread+0x388/0x470 [ 1414.709442][ T30] ? __pfx_watchdog+0x10/0x10 [ 1414.709459][ T30] ? __pfx_kthread+0x10/0x10 [ 1414.709478][ T30] ret_from_fork+0x514/0xb70 [ 1414.709506][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1414.709531][ T30] ? __switch_to+0xc79/0x1410 [ 1414.709555][ T30] ? __pfx_kthread+0x10/0x10 [ 1414.709575][ T30] ret_from_fork_asm+0x1a/0x30 [ 1414.709628][ T30] [ 1414.709635][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1414.824075][ C0] NMI backtrace for cpu 0 [ 1414.824092][ C0] CPU: 0 UID: 0 PID: 5810 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1414.824113][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1414.824124][ C0] RIP: 0010:__lock_acquire+0xd39/0x2cf0 [ 1414.824153][ C0] Code: 3d 1b c2 90 0e 00 0f 84 0f 07 00 00 41 f6 45 22 10 75 2c 49 89 ae 80 0b 00 00 41 8b 86 88 0b 00 00 ff c0 41 89 86 88 0b 00 00 <83> f8 30 0f 83 51 18 00 00 3b 05 a0 02 a4 12 0f 87 a4 18 00 00 bd [ 1414.824169][ C0] RSP: 0018:ffffc90003927840 EFLAGS: 00000002 [ 1414.824187][ C0] RAX: 0000000000000002 RBX: 000000000002a50d RCX: c522f806648ecbad [ 1414.824199][ C0] RDX: 000000004362dd00 RSI: 00000000921ce543 RDI: ffff88807e8b9ec0 [ 1414.824212][ C0] RBP: c522f806648ecbad R08: ffffffff81b2a065 R09: ffffffff9a4d55c8 [ 1414.824245][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88807e8baa78 [ 1414.824257][ C0] R13: ffff88807e8baa78 R14: ffff88807e8b9ec0 R15: 0000000000000001 [ 1414.824271][ C0] FS: 00005555918c2540(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 1414.824287][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1414.824300][ C0] CR2: 0000200000e83030 CR3: 0000000075a6e000 CR4: 00000000003526f0 [ 1414.824317][ C0] Call Trace: [ 1414.824330][ C0] [ 1414.824346][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1414.824375][ C0] ? ktime_get+0x45/0x220 [ 1414.824393][ C0] lock_acquire+0x106/0x350 [ 1414.824416][ C0] ? ktime_get+0x45/0x220 [ 1414.824437][ C0] ? tcp_recvmsg+0x210/0x7e0 [ 1414.824461][ C0] ? ktime_get+0x45/0x220 [ 1414.824480][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 1414.824501][ C0] ? ktime_get+0x45/0x220 [ 1414.824520][ C0] ktime_get+0x45/0x220 [ 1414.824541][ C0] clockevents_program_event+0x290/0x5f0 [ 1414.824569][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1414.824600][ C0] ? tick_program_event+0x8f/0x120 [ 1414.824622][ C0] hrtimer_start_range_ns+0x940/0xed0 [ 1414.824657][ C0] do_nanosleep+0x189/0x620 [ 1414.824677][ C0] ? do_nanosleep+0x80/0x620 [ 1414.824694][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1414.824711][ C0] ? __asan_memset+0x22/0x50 [ 1414.824735][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 1414.824762][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1414.824781][ C0] hrtimer_nanosleep+0x18f/0x3a0 [ 1414.824811][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1414.824843][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1414.824863][ C0] ? irqentry_exit+0x218/0x730 [ 1414.824888][ C0] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1414.824908][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1414.824936][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.824955][ C0] do_syscall_64+0x15f/0xf80 [ 1414.824978][ C0] ? clear_bhb_loop+0x40/0x90 [ 1414.824999][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.825017][ C0] RIP: 0033:0x7f50fb957997 [ 1414.825032][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1414.825049][ C0] RSP: 002b:00007ffc17aff060 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1414.825067][ C0] RAX: ffffffffffffffda RBX: 00005555918c2540 RCX: 00007f50fb957997 [ 1414.825081][ C0] RDX: 00007ffc17aff0a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.825093][ C0] RBP: 00007ffc17aff580 R08: 0000000000000000 R09: 0000000000000000 [ 1414.825104][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 1414.825116][ C0] R13: 00007ffc17aff0dc R14: 00007ffc17aff170 R15: 0000000000000000 [ 1414.825138][ C0] [ 1415.200008][T16403] macsec0: entered allmulticast mode [ 1415.213118][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1415.220026][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1415.229162][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1415.239247][ T30] Call Trace: [ 1415.242547][ T30] [ 1415.245501][ T30] vpanic+0x56c/0xa60 [ 1415.249515][ T30] ? __pfx___schedule+0x10/0x10 [ 1415.254402][ T30] ? __pfx_vpanic+0x10/0x10 [ 1415.258931][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1415.264167][ T30] panic+0xc5/0xd0 [ 1415.267919][ T30] ? __pfx_panic+0x10/0x10 [ 1415.272383][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1415.277803][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1415.283992][ T30] watchdog+0xff4/0x1000 [ 1415.288274][ T30] ? watchdog+0x209/0x1000 [ 1415.292733][ T30] kthread+0x388/0x470 [ 1415.296829][ T30] ? __pfx_watchdog+0x10/0x10 [ 1415.301526][ T30] ? __pfx_kthread+0x10/0x10 [ 1415.306142][ T30] ret_from_fork+0x514/0xb70 [ 1415.310761][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1415.315918][ T30] ? __switch_to+0xc79/0x1410 [ 1415.320622][ T30] ? __pfx_kthread+0x10/0x10 [ 1415.325231][ T30] ret_from_fork_asm+0x1a/0x30 [ 1415.330038][ T30] [ 1415.333669][ T30] Kernel Offset: disabled [ 1415.338002][ T30] Rebooting in 86400 seconds..