last executing test programs: 8.010267841s ago: executing program 1 (id=5781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0xfffffffffffffce5, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000810000000800033aacc617d34c7cc3f9052ff126546e00", @ANYRES32=0x0, @ANYBLOB="1c003300080100000802110000010802110000010802110000001000"], 0x38}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000480)={r0, 0x4, 0x3, 0xffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc8, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x810}, 0x20008000) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="f9c5a167cb38dda420ea5c8df4a8cd54ee6a15dd703866bdf6941944c13871e24bf76ab70541cf1ba39fabff51d3066b24dd3d3e542ab2bfb5d149cc2e75a50b", 0x40}], 0x1}, 0x8001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xdc, r8, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x6c}}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="76c6cc6a7e4b9430bc841e83a78c9356"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ed77c6560553f2a9086a835e20358982"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0bf04f5714ca7b85a4a3a62078fd64f178d3e24c34b6f6b9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="86af634804a96743c538b1a2ff729f225a75d5baa6547ed2f959f83afb74c5ca"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5793bdbe83acf56aa1bab4586b05d21ab42471f6825a88e2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d01400a533a2958e"}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000044) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x24, r11, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r10, @ANYBLOB="90007f0a0a0002"], 0x30}, 0x1, 0x0, 0x0, 0x2bfdd7b83b402990}, 0x14) readv(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, 0xffffffffffffffff, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 7.066707933s ago: executing program 1 (id=5799): socket(0x23, 0x0, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x354, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75975374}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7bf}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ef1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44e0cf9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ad86f98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf73d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0bb}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x27, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a534055}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc964}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5426b0e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62cd95af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf758}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3201b260}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdced}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b75a3ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ef46fb3}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x158, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bc36a76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bcd7e33}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a7b45ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54ee04ac}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74940036}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53aa6abf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2789f6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x85791d6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d3fce7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a65f97b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x438df6e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54e8d6ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25c9ee48}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfc1acbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x603e0aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19f360c6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a11b62}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x124, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x668a4a3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x392e552c}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37205880}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x325a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x899e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x577dd132}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x706f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7109}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c9bd1fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fceea4b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bfc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1559}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf571}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x572a86df}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6efe3b40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4424495c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ac8ee95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36273a41}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x663b0456}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3424641d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c1aafc8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d18389}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a6066e9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x520cc51d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b86e0a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7122}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfcd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4845}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bc293a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x688d4}, 0x20004000) ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0) 6.977089598s ago: executing program 1 (id=5803): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="007f00000000009ef100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) r1 = socket(0x22, 0x2, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x40, 0x20, 0x6, 0x57, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast1, @remote}}}}) bind$bt_hci(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000030a010200000000000000000a000005140000001100010000000000000000000100000af5f4348945a12dca49465dd56c6a324a34315dbe15e9cefbeaebbbbf18765abf97f94ce5209a97ff664f761136f04a0bdf58ed01c34df1a8c1e9729ff6e137fdeeefb4b5e7cb9a3090bbc07cc31b45d1d07a31f6ff1ff1eee20395ab4d97b87bc5da90f08e304977b4cb0d951ff876c31474f946bc6500cbdf5414057ec391a72e2bea33e2b9de07a43cdb5c882e5fc2f7f81c5cc8554044b1243c7156331d851d884f380e6160b9ee6c417d60cb1549ace9e95d90e013b17faa27e3a2210712223bf53246b141cd2e632db8b8800c0f24cd"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="007f00000000009ef100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) (async) socket(0x22, 0x2, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x40, 0x20, 0x6, 0x57, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast1, @remote}}}}) (async) bind$bt_hci(r1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000030a010200000000000000000a000005140000001100010000000000000000000100000af5f4348945a12dca49465dd56c6a324a34315dbe15e9cefbeaebbbbf18765abf97f94ce5209a97ff664f761136f04a0bdf58ed01c34df1a8c1e9729ff6e137fdeeefb4b5e7cb9a3090bbc07cc31b45d1d07a31f6ff1ff1eee20395ab4d97b87bc5da90f08e304977b4cb0d951ff876c31474f946bc6500cbdf5414057ec391a72e2bea33e2b9de07a43cdb5c882e5fc2f7f81c5cc8554044b1243c7156331d851d884f380e6160b9ee6c417d60cb1549ace9e95d90e013b17faa27e3a2210712223bf53246b141cd2e632db8b8800c0f24cd"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) close(0x4) (async) 6.834636093s ago: executing program 1 (id=5807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa0}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 6.684119095s ago: executing program 1 (id=5810): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x20) (async) r2 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4c0ddb65}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe0000000}}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe0000000}}, 0x1c) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000211000118004000100"], 0xd4}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000211000118004000100"], 0xd4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x80000) (async) r5 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r5) sendmsg$alg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004080) recvfrom$inet(r5, &(0x7f0000000100)=""/252, 0xfc, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x9}) r6 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5cafbb19415082dc2d68ffed07036d0d5efb9b5b4aa4e9a4d27912e19aae487301239d3937561ccd182963aaec4f0da35db9774e343ed1481e4654a186e66f54441b06277fdce96084f808db6c16958d2e26bc2aed9ff05a186dd1275539ebe1290f9fe485bef994029e46888f17e178c7fee7c96eccf5ba47c10a0279e7ca7af27cc9916bd8c60fe999c0c2f044f8333028438bbf945070d290aa78a328d79addc16966ca29b99966324138b25de75739", 0xb1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8810) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4c, 0x0, 0xd) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x1000004, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x1000004, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYBLOB="d0c1f9d1927c21e01e9aa74fa43606a29de149d7f1c383cff9d969a0098a586ef9ff4083040759f6681b7e6283dcfd28c59c566a5508b30d9b7e90a016a3b5febb0b2f9da41b6ceeffb0105da05e4786361b91f1a850be8feb5a5887de41565187b2c01caf354e1f283cf766df21d33e9f999b279e4f7a29e9872c5c739d4fc2ee13ae96df68af171bf6833e", @ANYRESOCT], 0x150}, 0x1, 0x0, 0x0, 0x40048c3}, 0x24006041) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 6.495030272s ago: executing program 1 (id=5813): r0 = socket(0x1d, 0x3, 0xfc6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x40}}, 0x800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x24000050) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x40010) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x85000400}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1ac, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @private2, 0x1}}}}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "33a6554a0fdc957f5c72dfa689d1307479435dbddb778224fcdd5d1cccc888b84d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "5eb823898864d4c4ba29cfc753c5e6136f6d0b57e73fc0a7"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a630019186efd73746624ec022661c372d87650cb7e26ecf67c4a4b6055d4ddcd3f68d3a"}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6ac9}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff01}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)={0x404, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x62}}}}, [@NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x1, 0xa, 0x1, 0x5, 0x48, 0x24, 0x6c, 0x60, 0x12, 0x12, 0xb, 0x2, 0x48, 0x30, 0x6, 0x1d, 0x48, 0xb, 0x21, 0x0, 0x9, 0x2, 0xc, 0x12, 0x5, 0x1b, 0x24, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x2400, 0x8, 0x5, 0x8, 0x1000, 0x8]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x100, 0x8, 0xb, 0x5636, 0x8, 0x800, 0x23]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xea4, 0x2e70, 0x7, 0x0, 0xe, 0x3, 0x16e3, 0x1eb]}}]}]}, @NL80211_ATTR_TX_RATES={0x1cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x60, 0x5, 0x3, 0x1b, 0x16, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x9, 0x1ff, 0x9, 0x4, 0x8, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x20fe, 0x9, 0xbc, 0xfffb, 0x6, 0x5]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x5}, {0x3, 0xa}, {0x1, 0x3}, {0x5, 0x7}, {0x1, 0x6}, {0x6, 0x9}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x4}, {0x2, 0x9}, {0x3, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {}, {0x5, 0x2}, {0x4, 0xa}, {0x6, 0x5}, {0x6, 0x4}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x3}, {0x4, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x1}, {0x1, 0x8}, {0x7, 0x6}, {0x1, 0x6}, {0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x5}, {0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x6, 0xa}, {0x1}, {0x6, 0x3}, {0x5, 0x2}, {0x2, 0x5}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x2}, {0x7, 0x8}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x1}, {0x1, 0x8}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x2}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0xa}, {0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x5}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x5}, {0x4, 0x7}, {0x2, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x2}, {0x6, 0x5}, {0x3, 0x8}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x8}, {0x0, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x71e, 0x8, 0x0, 0x40, 0xcf1, 0x6800, 0xffff, 0x7]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x4}, {}, {0x6, 0xa}, {0x6, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x4, 0x3, 0x2, 0xb, 0x6c, 0xf, 0x4, 0x60, 0x16, 0x12, 0x6c, 0x2, 0x4e, 0x30, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa, 0x81, 0x358a, 0x99f2, 0x3, 0x1000, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xde7, 0xe, 0x6, 0x3, 0x9, 0x100, 0xfd90, 0xfff0]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xfff2, 0x94, 0xb, 0x9, 0xae, 0xca9, 0x7ff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x401, 0x7, 0xc0, 0x4, 0x2, 0x8, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x800615979ac0c20a, 0x6c, 0x1, 0x1a, 0x60, 0xa, 0x4, 0x0, 0xb, 0x16, 0x6c, 0x48, 0x1b, 0x3, 0x18, 0x5, 0x24]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x12, 0x2, 0x48, 0x12, 0x5, 0xc, 0x9, 0x1, 0x9, 0x9, 0x4, 0x36, 0x36, 0x0, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf6bd, 0x5, 0x8, 0x8001, 0x3, 0xfff, 0x4e4, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6e, 0x6c, 0x36, 0x60, 0x5, 0x48, 0x30, 0x48, 0x16, 0x0, 0x48, 0x36, 0xc, 0x18, 0x30, 0x30, 0x18, 0x1f, 0x12, 0x1b, 0x16, 0x6c, 0x36, 0x12, 0x18, 0x18, 0x2a, 0x30, 0xc, 0x5]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x14, 0x24, 0x24, 0x12]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x7}, {0x4, 0x4}, {0x2, 0x2}, {0x6, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x6, 0x2}, {0x5, 0x1}, {0x6, 0x7}, {0x6, 0x2}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x2}, {0x2, 0xa}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x2, 0x6}, {0x6, 0x3}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0xa}, {0x4, 0x3}, {0x4, 0x6}, {0x3, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x7}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0x5}, {0x3, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x3906, 0x7, 0x5c8, 0x8000, 0x3, 0x3]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x100, 0x3a8, 0x32d, 0x5, 0x7, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x3, 0x1, 0x2, 0xffff, 0x9bb, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) bind$alg(r0, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40015}, 0x64040051) r6 = accept$unix(r0, &(0x7f0000000d40), &(0x7f0000000dc0)=0x6e) recvmsg$unix(r6, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000e00)=""/28, 0x1c}, {&(0x7f0000000e40)=""/45, 0x2d}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/83, 0x53}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/204, 0xcc}], 0x6, &(0x7f00000020c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x140) clock_gettime(0x3, &(0x7f0000002180)) sendmmsg$alg(r0, &(0x7f00000031c0)=[{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000021c0)="cc6bbb154ff26138f0439290774a9e87530e250e11ede81ec8b7cfb357f0d25fbb151922172b76792d65e4a311433b9c7ea84812416efc32090b28949553b29e17255dd1ebe701dcaccca774c570739b33bf37a3db3373ae653210b62b701c6f37d5958c1ded026882e0d0aad71812d29ab1765358e0048c2a925f05b876c2d683b0c3194e3abd6c9aaa942d94548e210298cd225d13dfc33889861479a8f4483bd20401abc9d0967a2a2b58811609478c2974ee0601cb47836d98187d0cad8bf1e13c6641e4bb", 0xc7}, {&(0x7f00000022c0)="47ce6eac12bb19cbb2f40157c3b770f3dec0f02913182a40aed908cb68d14b249c95db7f099010077f6aac487da288b9edd8ead909e6813107a5fc51ebd85f2263c64648045f407b5d1d0385c23782141e5e225c3802844e092ef7a2061d7e8693b3ccd1333ca18fc1005ce81e99f9df76c4ac5a7081bbd2b1d995a8fc1652803ad5644e69b25b78e5b90f5a1c198bf0602a8e357abe54e5865a62f53c1a6bbbcd6826a4a7dcdd2f67e86e", 0xab}, {&(0x7f0000002380)="662b6f860d81a8bfe4e3659e376ab4ea862508b6b24544cef2a5da4214cac0712bd40bee8610a96c95421663eb", 0x2d}, {&(0x7f00000023c0)="74dfb8ce458bc7e1b507160e9ead", 0xe}], 0x4, &(0x7f0000002440)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x18, 0x117, 0x2, 0x3, "951bf9"}, @iv={0x30, 0x117, 0x2, 0x16, "9e32f614b7b53574bba03a78e5e0e4257bc6aa3251eb"}, @iv={0xb0, 0x117, 0x2, 0x9b, "6b5f233b7d71a4af90c1c0c703dbdf607ab1c90b92ac1bd0265bd121ff905f0924a659fef21d0a972a499fdaa24e5949d49d68f3d225e92b6c0675bc0596d2ac2b9d835da84cf88013443a59ef62d133c6878bb3f1f685f9e4283965202eb913c2c189d2dc49ba6f14090dd4461aad56ce4e3b0822f6155a0c64a7bd77e915361e168d35ac71930d5d1d81d8742dbccecc79f497474b1305d13a6f"}, @iv={0x110, 0x117, 0x2, 0xf8, "0463f2f7517e13e52bc5934bcf80ca491d27682cf5a70d349dbdf6afba9d0964e45cf44f77c62a15a76d3dd348d05ff9abdc2ccce6f1975e9c05408495e33e61fbffb74a9334fba016cecb5acd01720c89775b7ae974d90e48413192fccd2e780bf86b6454c61f9e51c0265ad7c6a67a136b343882804f5d35dd3816d6396ff7231b337eb275d5634295fb52b4533808d7eb3398945fffbd658d04c2621de74fda4a2a1103a9d78d70a2d7b4d4e4681852ec78de9285b56c036973f1042b83027bfb737461937f59c7d01d81bd14e529beca1b422c361a59ec432902e1f7ad4f002e87d6f3385a0ecf747c702bed067c4855b27c3391ba6e"}, @iv={0x38, 0x117, 0x2, 0x22, "7b7ca435ad2f411dd6a8eb3a4d69928b65ee3bf68b35a5f2b4f7ae67327e25a50910"}, @iv={0x50, 0x117, 0x2, 0x3a, "cbd9f919058b500a4bef3e31851fec73173fd4d9088721472e325e9dfed606dab800c2b22648e6d47807c00eecbc88e63ed82e1e3301e693ce7d"}], 0x2a8, 0x3000c011}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002700)="9431495dd750e7a8ad4a9c6d6eef6baabcf0e41bc537d8d822498d5123214eccb825acad0a15b2db814e929e1b155c9783187a18525c0b7a85a3f6e38dfd08364d0906c0d6d1b4bd4b9b1a0ff75a1b932b34b807066362f5ac3d80f4409a2aee2cefa2bca54433e37175401e5324f0168dc8dd84460698d5cbf0cac55d", 0x7d}, {&(0x7f0000002780)="7bf22c3084d82973f335dadcdeb3efbc595cd56c0706e1f5c9a88a99e1bf474dbbc4ca0f69b09ff7677c86d3f722a2932fb2dd569687909a283522", 0x3b}, {&(0x7f00000027c0)="645754e5eefd0802aa3656620eb5f8b4548b50e0767304c2a98579b64a6e93fad949422f3445b48c4a31cf809d47e6115861c8c9bbab24a042349a516926547b4cf07f21d75213f7cf3b4d150dd17e384d4c50dd01a857832c1374933c33cc0af5ac2f51d423", 0x66}, {&(0x7f0000002840)="9023b57d88f139ef192786271eb9948d0e556ac26bad64568e297fe6a8905e5477ded9691682dfbd2e9124cfac3ae93ce8f6cd1b696d", 0x36}, {&(0x7f0000002880)="aa016e28fe2a7e96745fb2555782302540e042dbc57c30667c05d440dcb8b1f5d8f0e6c4d32051c3e6ce99a153cde611ef50d69549d6c4a25285ba8f48e11d63ad5e88586e820255692b3c09f3a98f65ce78d9af", 0x54}], 0x5, 0x0, 0x0, 0x4001}, {0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002980)="8ba597b617701b6d7c3651dae1c87fd3f47950585cb28af4c923a2ca7607cc84ab213304c65b22a284bcfc8d65ae316b2bd0ea313de5c62e04796537fe6bd94595e6ef7a3b4da0dcba319f6b8a210440c4c52a36a414569d2e19ac6aacea4eb307830f83eec59bdc22074511b5ba1b0e5c0abc9965af56b7641cc0b6e9540861a9398502e8d06e8aa1faa634bdc8712ef91bd75cf3bd8542faf6915c525fdb82a7fc2192ea33923b8a58", 0xaa}, {&(0x7f0000002a40)="448f1d3360d703a0df01b0d577a54fe94aec8d4cf07857b1b50ea4f0563950350e53083821df9ad666ddb2279f5c04331af510ad67fd930f3d6c95b2e96375489766658fbbd178af92ea1f7ca41d97bb5471357ef46c0cec2f7bb206c51dfaf3947295f0913e6c81073be1cbbf708c56d4f4b057cca3c44b918c66d27d135e23d3dc388cb10229ce6fe6bc8344034a482a7940d5db70e299ba6c9a26261bf866b0482fdc1d7689a27070c85e2096f7bf70100148c670618d07230b96e26d38ba8c60c2b8ca2c95fda5100a6f1de18f54e5ee61c2e855ed69e64c9d9d7675217fb20fb4864a7bb99c393995de1d4696b4dea0c4", 0xf3}, {&(0x7f0000002b40)="12aa09ca57c03344deac2f6183da2a2934077d6fc607944e85064518b39bf4976726565d8aa20e66bf766f710b47e17e87ad1b787a5155adc779b5f4fb9997755679afd0f334065c8a9658eaa24a96a4e689dd59d503df20b81f4a058f64ba3967ec0e444077ffd443d89b974cfafb24d288f204bb8fbf7612d3e37a376810e3015350a1dc3498a6817ca6aa8af92d914516d14c1caeb49a760c825b35a70fb35792f9abefb02dd36818c0032979fd572b1c2c6c0dc60a8ce68e775ad3d573d38efabeddecffb0fa78bf3f43057b991ecc1317fbed2f38ace44087100ce3ebcff2f11f4795c66caa463d85", 0xeb}, {&(0x7f0000002c40)="ad1a93d33015511703ad738c58f7a59a75c5b6073d16f3c67e89d1b8b81f648a6c278f2700a6f9706d9df0c9fbe36907eaae", 0x32}, {&(0x7f0000002c80)="5992ce4da5033f225375be578efd167d0dc1a662c550137fd11b44cce366571ba61975f78a6b90ebe3ed1670f46914fef1cae9c662aeea71db929f6b298e191c19e32edcb714fcaf6839ef3bbdda47eebf19b71c4ebd8ec429e43d7353d6879796f512c80fab2026ecb25848abb9683003c97c909dd99c72b657f2f7c1a0838266fe051229e30d73e7ebf0788762e97d182793cec48ebd89f5821de50a435a97de73d2", 0xa3}, {&(0x7f0000002d40)="7a010c4a6514df5596359fa8ac703d514cb4ef9ad11e5e6a5ea07dcd6b4297d0b71cc09dbee5149d61d7dbcbd9cab6f270b7c525f5a28fb34d3fca3b7832fb1323d588d3c211ff6727770675135d754941c8ba682bfacdb4964b0c3cdbdda5587c2abd9b34337fabbd0aadc9afafdcfae92e83165e1345f7e3631bab381b8445", 0x80}, {&(0x7f0000002dc0)="5766c08680a091b18537bb8e3e4930af24dd01839e72df55b2fd2ea40fde4cf5b5bdc8a0310c89e221787c61bd5a1562032e86a3", 0x34}, {&(0x7f0000002e00)="7961281edcc52dffd070c5bbfa00f10012e74bbf9088611421854ace9f2569382337cfd81b3432861401ee96dd4a7edd5869de26ca492d13024ba52ae074712ebd8f2668119d2a54d6f07e42b793355f536e3249f6d764f438755b481632a53812d44152f2b9f7f73fe8c76264743baabc2b8105b9a452135267ac723da7960dc78bf8ac33cfb273e03f234ccdace0b94c91460519898a7da95e47969ff926056405260ed5", 0xa5}, {&(0x7f0000002ec0)="cd350149c6e0cb91393c7488c1e6e08d36a087042670cb05a0733659f51a7f3a48b5c378a61827f8b532aee58f119dfac7cecd2b768ebdb7857703c08d46f7699539910491ab9f18d8c61f9b1e6d0ac1b6fc9f6be19ad4661bb06e1e80a1e0ae8a205bbc83ba623d671fc4ee6eef45ff1b143da921521c981987dfd62a2174440238f63e", 0x84}, {&(0x7f0000002f80)="5b030dfe328706a50d19b36d1824f76797c18745953bc7f8954cf18762052762304775", 0x23}], 0xa, &(0x7f0000003080)=[@iv={0x68, 0x117, 0x2, 0x53, "391364d2183f2bcc55653641f517fd50a791bd07027e63a9018e64df2b8e2bae4f31df8803e7f7a1a9c23eabe9c6173afe43e033d52625af345a59bd3bf059a8f6fd242e902844bf2d1e754a85938b97c80f72"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x90, 0x117, 0x2, 0x76, "635f21e9771f9f545fb32480495fa47f0c597902a02af4869ba18848a7d0793ded4b65d145603e58532cf357f2342d65a9f8b2e726ce8ae0cc939e06c42d99d4790ace0fb1d1c0345eb928f6ac54b4a3c5f49b97c85ceb2f1f179ea58130ca5f4a186acf64c4e833a0b4671d7de89f3b493371127956"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x140, 0x8000}], 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000032c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000003300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000003400)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003340)={0x50, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3ff}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}}, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000003500)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x18, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000003600)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x20, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003680), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x48, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x48}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000037c0)) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x14, r9, 0x4, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48b0}, 0x4040804) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000003900)=0x5, 0x4) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000003940), &(0x7f0000003980)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x18, 0x140d, 0x800, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x200008e0) 5.543387725s ago: executing program 2 (id=5828): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000000)={r3, 0x2}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r4, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x74}}, 0x20000004) 4.939426444s ago: executing program 4 (id=5831): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2004c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0xa, 0x3, 0x5, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x9}, [@nested={0x10, 0x1b, 0x0, 0x1, [@nested={0x4, 0x2c}, @typed={0x8, 0x12e, 0x0, 0x0, @u32}]}, @typed={0xa, 0x3f, 0x0, 0x0, @str='/%!]!\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x2000c001) 4.56851482s ago: executing program 4 (id=5835): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52) unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x24, 0x22, 0x601, 0x70bd2a, 0xfffffffc, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x24}], 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket(0x26, 0x800, 0x8) recvfrom$ax25(r2, &(0x7f0000000200)=""/99, 0x63, 0x40, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0x18, 0xfffffffc, 0x1e, 0x8}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000300)={r4, 0x50, "e529f03aa07fc2ee0494dfabdff7067af56204b43782355984e256cd4d50388b70a0d860919d19b0d093403d3f609fe3b7feddfb357c2bdd120feb7b6ed3fc298fd878e92d8f837dbd43ea82ada78ddb"}, &(0x7f0000000380)=0x58) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) 4.554936945s ago: executing program 2 (id=5836): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140006"], 0x48}}, 0x0) 4.282053584s ago: executing program 3 (id=5838): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r2, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r1, r2, 0x2f, 0x8, 0x4}, 0x20) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r2, r1, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r1, r2, 0x2f, 0x8, 0x4}, 0x20) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 3.158819679s ago: executing program 2 (id=5840): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e21, 0x8000, 0x4e24, 0x9, 0xfcf8d278083eddec, 0xa0}, {0x5, 0x1000, 0x5, 0x8001, 0x7, 0x3, 0x98, 0x2}, {0x9, 0x0, 0x9, 0x73}, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xf701a192b5f05b74, 0x3, 0x40, 0x9, 0x10001, 0x2}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x3}}]}, 0x3c}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0xe, @mcast2, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="04b0eb579b99c8b20341e93a1be68e4914309578f85a1041744536b9e7b3b721e55889ed5048f747d295469647889e98f6ec7a67e79586e68a3574382d4dd54b47f8fc299eba2dbc865f7fbdc52fa58b0ec3545b9daeddb726daeb68eb7eab94dc6ba6c5eb1c916a3b74e467810abb0a5fd27f63069989301c69635b94ad8589976af134a523462736725bdf529160e89f7bcb5da435d50c4423844ae39ac4e643562eaef2f0556add4f9dbd52f2ba41617f8b598d1aaffc36ca8e59d782b9207badc6c57e35ebcaa2ec9d8ba0842d3e18fe89896784943d1764ad1905e2", 0xde}, {&(0x7f0000000240)="de727469d79cc8f90a17c90edbb445cacff1849599551200618eb7e5ee8f73a62a8a5be13c925506996e551dc3b3dd8c41459d94a99465876ec2ac626b0a465bf09ebc2acb3c483d8aa0ca510498d8776d9d943e3fedde3f81bc08dd6986fad01d12b36b2dc49e906a1b7e3fde6f3fc54b113a52db238d4986b583916c6c35d09ac25724a241f518a6aa621051d7ef70349befeb18c1b8abb9468a8f54cd24b8a467b22161c0f9328c0e19942d8314ddb3", 0xb1}], 0x2, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x1, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000001}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}, @ra={0x5, 0x2, 0x8000}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x2c, 0x6, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x26, 0x8000, [0x7, 0xffffffffffffffff]}}, @enc_lim={0x4, 0x1, 0xd2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7fff}, @enc_lim={0x4, 0x1, 0xc}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r6}}}], 0x118}}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000040)={r9, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r7, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r10) sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x100, r11, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa87a089}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x15}, 0x0) 3.158186655s ago: executing program 3 (id=5841): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x6, 0x5, 0x19, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7, 0x7800}}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8000, 0x80000000, 0x0, 0x4000, 0xffffffffffffffff, 0x5d7d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xd}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x7, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pi6 \x00'}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x12, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9a4b, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0xb, &(0x7f0000000200)=""/11, 0x41100, 0x4, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4, r5, r6, r7, r8, r9, r10], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000740)={r1}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000780)) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r13) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'ip_vti0\x00', r3, 0x7, 0x80, 0x2f, 0x10, {{0x9, 0x4, 0x3, 0x21, 0x24, 0x65, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @local, {[@timestamp={0x44, 0xc, 0xae, 0x0, 0x0, [0x4, 0x7ff]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000900)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xcc, r14, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000084) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r13, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x120}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0xc020662a, &(0x7f0000000c40)={0x28000000000, 0xff, 0x6, 0x18000000, 0x4, 0x0, [{0xf4b, 0x7ff, 0x9, '\x00', 0x901}, {0x7ff, 0xd2d, 0xd, '\x00', 0x501}, {0x1, 0xe4, 0x7, '\x00', 0x1}, {0xffffffffffffff01, 0x1b, 0xc7f6, '\x00', 0x2400}]}) r17 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d80), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r17, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r16}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r18 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@const={0x5, 0x0, 0x0, 0xa, 0x5}, @ptr={0x2, 0x0, 0x0, 0x2, 0x2}, @struct={0x10, 0x3, 0x0, 0x4, 0x0, 0x1ff, [{0xa, 0x0, 0xe}, {0xa, 0x0, 0xf}, {0xb, 0x3, 0x9}]}, @union={0x7, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x7, 0x1, 0x7}, {0x3, 0x3, 0x4}, {0x9, 0x2, 0x101}, {0x10, 0x1, 0x6}, {0x1, 0x3, 0x2}, {0x8, 0x1, 0x7ff}]}]}, {0x0, [0x5f, 0x6d]}}, &(0x7f0000001000)=""/164, 0xb8, 0xa4, 0x1, 0x8}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0x20, &(0x7f0000001280)={&(0x7f0000001180)=""/93, 0x5d, 0x0, &(0x7f0000001200)=""/109, 0x6d}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r6, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%pI4 \x00'}, 0x20) r21 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x10, 0x0, r8, 0x7, '\x00', r15, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000e80)=@raw=[@ldst={0x3, 0x2, 0x1, 0xa, 0x0, 0x18, 0xfffffffffffffff0}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc328}}], &(0x7f0000000f00)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x3, '\x00', r16, 0x1b, r18, 0x8, &(0x7f0000001100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x2, 0x2, 0x3, 0x6}, 0x10, r19, 0x0, 0x0, &(0x7f0000001440)=[r8, r2, r20, r6, r8, r12, r7, r21], 0x0, 0x10, 0x3}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000001540), 0x3) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 3.038276189s ago: executing program 3 (id=5842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba", 0x2}], 0x1}}], 0x2, 0x400c404) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa7fed}]}}}]}, 0x40}}, 0x0) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @bcast, 0x1, @null}, &(0x7f0000000040)=0x1c, 0xc00) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @lsrr={0x83, 0xb, 0x7b, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @address_request={0x11, 0x0, 0x0, 0x576}}}}}, 0x0) r5 = epoll_create1(0x0) close(r5) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000300)={0x12, 0x4, 0xfffffa9d, 0x0, 0xa6, 0x0, 0xfffffffffffff594}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @null, @netrom={'nr', 0x0}, 0x2, [@bcast, @null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) 2.873502032s ago: executing program 3 (id=5843): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0xb, 0x0, 0x3}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4040804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r9, 0x1, 0xd8, 0x6, @random="32b40c6fc44c"}, 0x14) sendto$packet(r10, &(0x7f0000000380)="c1858aec1d0a06756f6608f23687", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0x19, r9, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, 0x0, 0x0) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000000000000100032001e000000000000000000000010003300000000000000000000000000fc02000000000000000000000000000003000500000000000200000dac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r12, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r12, 0x0) r13 = socket$inet(0x2, 0x2, 0x1) bind$inet(r13, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 2.786325561s ago: executing program 0 (id=5845): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x6a3f, 0x4, 0x8, 0x101}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x800, 0x4) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 2.665918857s ago: executing program 0 (id=5846): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1415, 0x1}, 0x10}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x1a0, 0x30, 0x9, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x100, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x1a0}}, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="d2e6725d5a247c3375665f1451949cc0010b176ef3809d61ad2274871c22ce161543c7f570b8da73c2f78b97b8f3c5eba999144be36a42aac7cf35"]) 2.182943724s ago: executing program 2 (id=5847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080400338008000900", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.143860181s ago: executing program 0 (id=5848): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @multicast2}}}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x0, 0x8e, "73fb576b91a437c14809f6379db68c3dd5cb72ab8c5491219b99fa1e70392b68eafd7559ae8592549d3eedfa137c3c79845b3a0ffcf6fb21986834fd74aed69206da368b229bfabfc3d6d9f7846d8b09c73a803c57aa7b9a072c979f8e7b588945213e137846cb674ee683bb9124231731d4b7b0fba34fc972c01ded9ad5ed2c7f29cdd4e5231e9f1c3e9d0af04c"}}) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @rand_addr=0x64010101}, {0x6, @broadcast}, 0x4a, {0x2, 0x0, @private=0xa010101}, 'syz_tun\x00'}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r3, 0x58, &(0x7f0000002600)}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) close(0xffffffffffffffff) 1.58837898s ago: executing program 0 (id=5849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, 0x42, 0x1, 0x70bd25, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x38, 0x0, 0x1, [@nested={0x4, 0x6}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 1.46331254s ago: executing program 0 (id=5850): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x84, @empty, 0x4e20, 0x3, 'sed\x00', 0x3, 0x1, 0x5f}, 0x2c) 1.266399875s ago: executing program 0 (id=5851): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x27, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x44004) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x27, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x44004) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) (async) 1.260034025s ago: executing program 2 (id=5852): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x129, 0x3, [0x101, 0x100, 0x20]}, &(0x7f00000001c0)=0xe) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xe2b, 0xee, 0x2, 0x21f, 0xe, 0xf, 0x9, 0x0, r1}, &(0x7f0000000240)=0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x5, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.171527968s ago: executing program 4 (id=5853): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 1.065937013s ago: executing program 3 (id=5854): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2}}, 0x3, 0x0, 0x20000, 0x81, 0xb1, 0x0, 0x4}, 0x9c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_newnexthop={0x18, 0x68, 0x100, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, 0x8}}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00154a", @ANYRES16=r4, @ANYRESDEC=r2], 0x6c}, 0x1, 0x0, 0x0, 0x2004c001}, 0x4000000) 1.062874777s ago: executing program 4 (id=5855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x4) listen(r0, 0x200) (async) listen(r0, 0x200) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) getsockname$ax25(r1, &(0x7f0000000040)={{0x3, @rose}, [@netrom, @rose, @rose, @remote, @default, @netrom, @rose, @bcast]}, &(0x7f00000000c0)=0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0xd8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0xd8}}, 0x0) 949.375289ms ago: executing program 4 (id=5856): r0 = socket(0x28, 0x1, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10008044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x17c, 0x31, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffe37a}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 968.726µs ago: executing program 2 (id=5857): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x11, 0x4, [0x25a, 0x10, 0x0, 0x6]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 350.513µs ago: executing program 4 (id=5858): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'vlan0\x00', &(0x7f00000002c0)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r7, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) (async) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) close(r8) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$bt_hci(r9, 0x0, 0x1, &(0x7f0000000080)=""/36, &(0x7f0000000100)=0x24) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r10, 0x0, 0x48a, &(0x7f0000000180)={0x556, 0x5950, 0xd1e}, 0xc) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) r12 = socket(0x2d, 0x2, 0x0) close(r12) recvmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r6, 0xff, 0x30}, 0xc) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x6, @loopback}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0xb5c, @loopback, 0x4}, @in6={0xa, 0x4e20, 0xff, @mcast2, 0x48}, @in6={0xa, 0x4e24, 0x59c1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40047d57}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x3}], 0xbc) 0s ago: executing program 3 (id=5859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000880) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x2000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) kernel console output (not intermixed with test programs): ctive interface with an up link [ 441.467106][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 441.475134][ C0] lec:lec_tx_timeout: lec0 [ 441.479850][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 444.232691][ T5189] udevd[5189]: worker [10398] /devices/virtual/block/nbd2 is taking a long time [ 446.497041][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 446.505152][ C0] lec:lec_tx_timeout: lec0 [ 446.509812][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 452.596992][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6090 ms [ 452.605036][ C0] lec:lec_tx_timeout: lec0 [ 452.612704][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 458.356976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 458.365008][ C0] lec:lec_tx_timeout: lec0 [ 458.371351][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 463.387013][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 463.395397][ C0] lec:lec_tx_timeout: lec0 [ 463.400026][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 466.687075][ T5158] block nbd2: Possible stuck request ffff888026240000: control (read@0,1024B). Runtime 150 seconds [ 466.697966][ T5158] block nbd2: Possible stuck request ffff888026240200: control (read@1024,1024B). Runtime 150 seconds [ 466.709213][ T5158] block nbd2: Possible stuck request ffff888026240400: control (read@2048,1024B). Runtime 150 seconds [ 466.720829][ T5158] block nbd2: Possible stuck request ffff888026240600: control (read@3072,1024B). Runtime 150 seconds [ 468.407137][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 468.415155][ C0] lec:lec_tx_timeout: lec0 [ 468.419873][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 473.426995][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 473.435011][ C0] lec:lec_tx_timeout: lec0 [ 473.439689][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 478.447081][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 478.455078][ C0] lec:lec_tx_timeout: lec0 [ 478.459964][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 483.467131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 483.475155][ C0] lec:lec_tx_timeout: lec0 [ 483.479835][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 488.497010][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 488.505059][ C0] lec:lec_tx_timeout: lec0 [ 488.509680][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 492.866671][T18112] openvswitch: netlink: Flow key attr not present in new flow. [ 492.904599][T18118] __nla_validate_parse: 4 callbacks suppressed [ 492.904614][T18118] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3422'. [ 492.921992][T18112] sctp: [Deprecated]: syz.1.3419 (pid 18112) Use of int in max_burst socket option. [ 492.921992][T18112] Use struct sctp_assoc_value instead [ 493.042505][T18118] bond1 (unregistering): Released all slaves [ 493.097945][T18127] netlink: 'syz.2.3423': attribute type 1 has an invalid length. [ 493.188591][T18127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 493.742650][T18176] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 [ 493.813795][T18178] netlink: 'syz.2.3438': attribute type 2 has an invalid length. [ 493.964288][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3441'. [ 494.014740][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3444'. [ 494.091678][T18197] team0 (unregistering): Port device team_slave_0 removed [ 494.115253][T18197] team0 (unregistering): Port device team_slave_1 removed [ 494.144620][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'. [ 494.161077][T18204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3447'. [ 494.185920][T18204] block nbd5: Unsupported socket: should be TCP or UNIX. [ 494.357700][T18214] block nbd5: Unsupported socket: should be TCP or UNIX. [ 494.596417][T18241] netlink: 492 bytes leftover after parsing attributes in process `syz.3.3456'. [ 494.655720][T18247] netlink: 'syz.2.3460': attribute type 2 has an invalid length. [ 494.836908][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6330 ms [ 494.845053][ C0] lec:lec_tx_timeout: lec0 [ 494.850384][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 494.892549][T18238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.923160][T18253] ip6gretap0: Device is already in use. [ 495.011008][T18238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.061304][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 495.081757][T18259] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 495.122638][T18264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.161827][T18259] team0: entered promiscuous mode [ 495.168424][T18259] team0: entered allmulticast mode [ 495.177587][T18269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3469'. [ 495.195349][T18238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.324369][T18238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.343263][T18274] netlink: 'syz.1.3471': attribute type 6 has an invalid length. [ 495.373397][T18274] netlink: 'syz.1.3471': attribute type 6 has an invalid length. [ 495.487977][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.515368][ T9265] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.553302][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.584786][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 495.594388][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.764220][T18296] openvswitch: netlink: Message has 8 unknown bytes. [ 495.771572][T18296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.844714][T18300] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3479'. [ 495.943168][T18304] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 496.186216][T18318] C: renamed from lo (while UP) [ 496.221294][T18318] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 496.287412][T18329] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 496.419830][T18333] bond3: entered promiscuous mode [ 496.425249][T18333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.470201][T18329] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 496.589890][T18344] netlink: 'syz.3.3493': attribute type 32 has an invalid length. [ 496.591200][T18329] netlink: 'syz.1.3488': attribute type 11 has an invalid length. [ 496.659889][T18344] bond3: Setting coupled_control to off (0) [ 496.693119][T18353] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.700813][T18353] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.751584][T18344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.778200][ T5158] block nbd2: Possible stuck request ffff888026240000: control (read@0,1024B). Runtime 180 seconds [ 496.789781][ T5158] block nbd2: Possible stuck request ffff888026240200: control (read@1024,1024B). Runtime 180 seconds [ 496.802402][ T5158] block nbd2: Possible stuck request ffff888026240400: control (read@2048,1024B). Runtime 180 seconds [ 496.813551][ T5158] block nbd2: Possible stuck request ffff888026240600: control (read@3072,1024B). Runtime 180 seconds [ 497.100944][T18367] syzkaller0: entered promiscuous mode [ 497.106499][T18367] syzkaller0: entered allmulticast mode [ 497.345403][T18388] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 497.392858][T18390] sctp: [Deprecated]: syz.4.3510 (pid 18390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.392858][T18390] Use struct sctp_sack_info instead [ 497.500008][T18396] syzkaller0: entered allmulticast mode [ 497.548371][T18396] syzkaller0 (unregistering): left allmulticast mode [ 497.997727][T18431] bridge0: port 3(ipvlan2) entered blocking state [ 498.014647][T18431] bridge0: port 3(ipvlan2) entered disabled state [ 498.034268][T18431] ipvlan2: entered allmulticast mode [ 498.041298][T18431] bridge0: entered allmulticast mode [ 498.063534][T18431] ipvlan2: left allmulticast mode [ 498.076517][T18431] bridge0: left allmulticast mode [ 498.085857][T18438] __nla_validate_parse: 10 callbacks suppressed [ 498.085874][T18438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3523'. [ 498.179005][T18440] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3524'. [ 498.185074][T18442] netlink: 'syz.0.3525': attribute type 5 has an invalid length. [ 498.276720][T18443] ip_vti0: entered promiscuous mode [ 498.290741][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'. [ 498.402501][T18453] netlink: 'syz.1.3528': attribute type 4 has an invalid length. [ 498.627272][T18465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.634851][T18465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.663418][T18465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.673449][T18465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.759249][T18476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3537'. [ 498.792588][T18476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3537'. [ 498.818921][T18478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3539'. [ 498.852795][T18481] netlink: 'syz.2.3540': attribute type 5 has an invalid length. [ 498.880091][T18481] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 498.930639][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 498.974869][T18483] netlink: 'syz.4.3541': attribute type 2 has an invalid length. [ 498.999977][T18483] 9: entered promiscuous mode [ 499.219784][T18494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3545'. [ 499.343146][T18514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3550'. [ 499.650928][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3556'. [ 499.723895][T18537] syz_tun: entered allmulticast mode [ 499.730288][T18536] syz_tun: left allmulticast mode [ 500.596901][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 500.604970][ C0] lec:lec_tx_timeout: lec0 [ 500.610211][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 500.680530][T18575] netlink: 'syz.0.3572': attribute type 1 has an invalid length. [ 500.699923][T18575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.382807][ T8930] IPVS: starting estimator thread 0... [ 501.388483][T18610] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 501.486342][T18614] bond_slave_0: entered promiscuous mode [ 501.487073][T18611] IPVS: using max 57 ests per chain, 136800 per kthread [ 501.492363][T18614] bond_slave_1: entered promiscuous mode [ 501.521746][T18614] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.532173][T18614] bond_slave_0: left promiscuous mode [ 501.537631][T18614] bond_slave_1: left promiscuous mode [ 501.561656][T18617] syzkaller0: entered promiscuous mode [ 501.568852][T18617] syzkaller0: entered allmulticast mode [ 502.121905][T18653] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 502.144779][T18653] IPv6: addrconf: prefix option has invalid lifetime [ 502.151563][T18653] IPv6: addrconf: prefix option has invalid lifetime [ 502.257959][T18660] syzkaller0: entered promiscuous mode [ 502.263466][T18660] syzkaller0: entered allmulticast mode [ 502.266802][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880202cac00: rx timeout, send abort [ 502.392193][T18660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.403269][T18660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.664100][ T3507] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.684618][ T3507] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.705781][T18662] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 502.725477][T18662] syzkaller0: entered promiscuous mode [ 502.731247][T18662] syzkaller0: entered allmulticast mode [ 502.739973][ T3507] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.768151][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805332fc00: rx timeout, send abort [ 502.776455][ T3507] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.785459][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880202cac00: abort rx timeout. Force session deactivation [ 502.928798][T18692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.100871][T18709] __nla_validate_parse: 17 callbacks suppressed [ 503.100891][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3615'. [ 503.129042][T18709] gtp0: entered promiscuous mode [ 503.134116][T18709] gtp0: entered allmulticast mode [ 503.239245][T18718] tc_dump_action: action bad kind [ 503.250665][T18720] netlink: 'syz.4.3618': attribute type 1 has an invalid length. [ 503.276972][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805332fc00: abort rx timeout. Force session deactivation [ 503.290155][T18720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.333358][T18720] bond2: (slave gretap1): making interface the new active one [ 503.343648][T18720] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 503.580859][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3623'. [ 503.665295][T18745] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3626'. [ 503.679932][T18745] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3626'. [ 503.738375][T18750] netlink: 'syz.4.3628': attribute type 21 has an invalid length. [ 503.746435][T18750] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3628'. [ 503.945944][T18758] veth5: entered allmulticast mode [ 503.946596][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'. [ 504.007107][T18762] IPv6: sit1: Disabled Multicast RS [ 504.535433][T18799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3646'. [ 504.799417][T18806] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3649'. [ 505.034802][T18824] netlink: 'syz.3.3653': attribute type 28 has an invalid length. [ 505.046693][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3653'. [ 505.216277][T18793] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 505.377574][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'. [ 505.699278][T18860] Cannot find set identified by id 0 to match [ 505.813812][T18856] openvswitch: netlink: Flow key attr not present in new flow. [ 505.854607][T18872] ipt_REJECT: ECHOREPLY no longer supported. [ 506.080416][T18890] vlan3: entered promiscuous mode [ 506.085609][T18890] bridge0: entered promiscuous mode [ 506.356910][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 506.364994][ C0] lec:lec_tx_timeout: lec0 [ 506.370124][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.437436][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 506.453055][T18910] bond3: Unable to set down delay as MII monitoring is disabled [ 506.462383][T18910] bond3 (unregistering): Released all slaves [ 508.641162][T18859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.816830][T18921] "syz.4.3680" (18921) uses obsolete ecb(arc4) skcipher [ 508.827288][T18925] x_tables: duplicate underflow at hook 2 [ 508.855859][T18925] netlink: 'syz.0.3682': attribute type 29 has an invalid length. [ 508.878926][T18925] __nla_validate_parse: 3 callbacks suppressed [ 508.878943][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 508.918311][T18925] netlink: 'syz.0.3682': attribute type 29 has an invalid length. [ 508.929511][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 508.987826][T18932] ipt_REJECT: TCP_RESET invalid for non-tcp [ 509.015932][T18932] syzkaller0: entered promiscuous mode [ 509.021677][T18932] syzkaller0: entered allmulticast mode [ 509.132205][ T29] audit: type=1107 audit(1771352672.544:6): pid=18939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ŒmVW¦Ò*ßX—iz7\ëÀõ4épƉ •mðÎÖ””.!•LÖO~â¥cWBuûÄnv)|¸çRÉŽâ.ψá X/üɺ›1»Š”ѯJ<ÏE†J]hÝ)t¢„„˜šdW¼:EcYX™n^Iý«=NJiåÎfòe±[B1t8îÇCÍôÇÿ‹ ø ã<¯šæ˜mrZ' [ 509.165914][T18938] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.173603][T18938] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.250156][T18947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3691'. [ 509.319160][T18946] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3691'. [ 509.624714][T18977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'. [ 509.637708][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3700'. [ 509.742397][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3704'. [ 509.849837][T18988] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.3705'. [ 509.865952][T18993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.894366][T18988] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.3705'. [ 509.950340][T18999] xt_hashlimit: overflow, try lower: 3/0 [ 510.103531][T19005] bond1: option all_slaves_active: invalid value (222) [ 510.124797][T19005] bond1 (unregistering): Released all slaves [ 510.161864][T19010] bridge_slave_0: entered promiscuous mode [ 510.337394][T19021] netlink: 'syz.4.3715': attribute type 5 has an invalid length. [ 510.364113][T19021] Bluetooth: MGMT ver 1.23 [ 510.385109][T19026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3717'. [ 510.410224][T19023] netlink: 'syz.2.3716': attribute type 1 has an invalid length. [ 510.511160][T19034] netlink: 'syz.4.3720': attribute type 9 has an invalid length. [ 510.744648][T19048] gre1: entered promiscuous mode [ 510.749895][T19048] gre1: entered allmulticast mode [ 510.858627][T19059] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 510.935668][T19071] sctp: [Deprecated]: syz.3.3734 (pid 19071) Use of int in max_burst socket option deprecated. [ 510.935668][T19071] Use struct sctp_assoc_value instead [ 511.035520][T19081] netlink: 'syz.3.3736': attribute type 1 has an invalid length. [ 511.376945][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 511.385022][ C0] lec:lec_tx_timeout: lec0 [ 511.389746][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 511.405028][T19105] tc_dump_action: action bad kind [ 511.515481][T19108] netlink: 'syz.1.3746': attribute type 4 has an invalid length. [ 511.932958][T19137] syzkaller0: entered promiscuous mode [ 511.969251][T19137] syzkaller0: entered allmulticast mode [ 512.304613][T19160] netlink: 'syz.3.3762': attribute type 1 has an invalid length. [ 512.471798][T19172] netlink: 'syz.3.3767': attribute type 10 has an invalid length. [ 512.698530][T19189] netlink: 'syz.2.3770': attribute type 12 has an invalid length. [ 512.871037][T19194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 513.845677][T19271] bond0: (slave gre0): Error: Device type is different from other slaves [ 514.098117][T19291] syzkaller1: entered promiscuous mode [ 514.104109][T19291] syzkaller1: entered allmulticast mode [ 514.207019][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 514.265641][T19301] __nla_validate_parse: 12 callbacks suppressed [ 514.265659][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 514.354814][T19302] tipc: Enabling of bearer rejected, failed to enable media [ 514.385670][T19308] delete_channel: no stack [ 514.690217][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.715603][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.736350][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.765751][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.012175][T19352] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3829'. [ 515.034520][T19352] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3829'. [ 515.042279][T19353] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.3831'. [ 515.088761][T19357] validate_nla: 4 callbacks suppressed [ 515.088779][T19357] netlink: 'syz.4.3832': attribute type 10 has an invalid length. [ 515.089374][T19359] netlink: 'syz.4.3832': attribute type 10 has an invalid length. [ 515.130754][T19357] team0: Port device dummy0 added [ 515.356059][ T3507] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.388815][ T3507] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.413317][ T3507] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.440942][T19377] netlink: 'syz.3.3838': attribute type 83 has an invalid length. [ 515.464394][ T3507] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.646494][T19397] netlink: 'syz.2.3845': attribute type 10 has an invalid length. [ 515.678892][T19394] netlink: 'syz.2.3845': attribute type 10 has an invalid length. [ 515.734506][T19401] tipc: Started in network mode [ 515.759533][T19401] tipc: Node identity 466cfdf6bd46, cluster identity 4711 [ 515.798821][T19401] tipc: Enabled bearer , priority 0 [ 515.818342][T19404] netlink: 'syz.0.3846': attribute type 39 has an invalid length. [ 515.861386][T19389] tipc: Disabling bearer [ 516.396950][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 516.405022][ C0] lec:lec_tx_timeout: lec0 [ 516.410089][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 516.492706][T19460] xt_TCPMSS: Only works on TCP SYN packets [ 516.526418][T19462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3866'. [ 516.537842][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 516.548058][T19462] chnl_net:caif_netlink_parms(): no params data found [ 516.930655][T19489] netlink: 'syz.1.3877': attribute type 1 has an invalid length. [ 517.051852][T19496] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.062232][T19497] bond5: option mode: unable to set because the bond device is up [ 517.082731][T19502] netlink: 'syz.0.3881': attribute type 7 has an invalid length. [ 517.285133][T19516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3884'. [ 517.604972][T19541] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3891'. [ 517.777832][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'. [ 517.809137][T19554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 517.870508][T19559] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3898'. [ 518.290664][T19594] syzkaller0: entered promiscuous mode [ 518.317145][T19594] syzkaller0: entered allmulticast mode [ 518.396112][T19580] tipc: Started in network mode [ 518.401308][T19580] tipc: Node identity 86818a291109, cluster identity 4711 [ 518.415129][T19580] tipc: Enabled bearer , priority 0 [ 518.444791][T19602] netlink: 'syz.2.3913': attribute type 2 has an invalid length. [ 518.465647][T19598] ipt_REJECT: TCP_RESET invalid for non-tcp [ 518.527500][T19579] tipc: Resetting bearer [ 518.599314][T19579] tipc: Disabling bearer [ 518.787765][T19622] 8021q: VLANs not supported on lo [ 518.918943][T19631] erspan0: entered allmulticast mode [ 518.972614][T19633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.990858][T19637] netlink: 'syz.2.3925': attribute type 1 has an invalid length. [ 519.041816][T19637] 8021q: adding VLAN 0 to HW filter on device bond6 [ 519.099846][T19641] bond1: (slave ip6gretap0): making interface the new active one [ 519.109045][T19641] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 519.319102][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 519.363598][T19658] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 519.421460][T19661] __nla_validate_parse: 4 callbacks suppressed [ 519.421479][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 519.448331][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 519.473568][T19665] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3937'. [ 519.699211][T19669] xt_CT: No such helper "snmp_trap" [ 519.729582][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3942'. [ 519.883142][T19696] wireguard0: entered promiscuous mode [ 519.889542][T19696] wireguard0: entered allmulticast mode [ 519.906738][T19696] team0: Device wireguard0 is of different type [ 519.967227][T19699] syzkaller1: entered promiscuous mode [ 519.972818][T19699] syzkaller1: entered allmulticast mode [ 520.312552][T19724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3954'. [ 520.554205][T19739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.833389][T19771] validate_nla: 1 callbacks suppressed [ 520.833401][T19771] netlink: 'syz.1.3969': attribute type 19 has an invalid length. [ 520.848629][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3969'. [ 520.863802][T19771] netlink: 'syz.1.3969': attribute type 19 has an invalid length. [ 520.871908][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3969'. [ 520.919718][T19775] syzkaller0: entered promiscuous mode [ 520.925332][T19775] syzkaller0: entered allmulticast mode [ 521.023745][T19777] IPv6: sit2: Disabled Multicast RS [ 521.029962][T19777] sit2: entered allmulticast mode [ 521.226792][T19790] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3975'. [ 521.238431][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 521.273896][T19791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.416931][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 521.425020][ C0] lec:lec_tx_timeout: lec0 [ 521.431257][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 521.468223][T19805] netlink: 'syz.2.3979': attribute type 4 has an invalid length. [ 521.475987][T19805] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3979'. [ 521.764659][T19826] syzkaller0: entered allmulticast mode [ 521.802089][T19830] netlink: 'syz.2.3987': attribute type 1 has an invalid length. [ 521.811026][T19825] syzkaller0: left allmulticast mode [ 521.865142][T19830] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.928258][T19836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.945173][T19838] netlink: 'syz.4.3990': attribute type 1 has an invalid length. [ 522.007385][T19838] bond3: entered promiscuous mode [ 522.013702][T19838] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.058262][T19838] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.067866][T19838] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 522.079957][T19838] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 522.096306][T19838] bond3: (slave vti0): making interface the new active one [ 522.142460][T19838] vti0: entered promiscuous mode [ 522.150329][T19838] bond3: (slave vti0): Enslaving as an active interface with an up link [ 522.440037][T19871] Cannot find add_set index 0 as target [ 522.456708][T19872] Cannot find add_set index 0 as target [ 522.835110][T19894] netlink: 'syz.1.4008': attribute type 2 has an invalid length. [ 522.885205][T19900] netlink: 'syz.2.4010': attribute type 33 has an invalid length. [ 522.937871][T19905] openvswitch: netlink: Message has -2 unknown bytes. [ 522.967171][T19900] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 522.980579][T19900] bond8 (unregistering): Released all slaves [ 523.321022][T19934] netem: change failed [ 523.682373][T19961] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 523.702315][T19961] tipc: Enabled bearer , priority 10 [ 523.729278][T19961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.849761][T19972] netlink: 'syz.4.4034': attribute type 1 has an invalid length. [ 523.856428][T19973] gretap2: entered promiscuous mode [ 523.898882][T19975] syzkaller0: entered promiscuous mode [ 523.904715][T19975] syzkaller0: entered allmulticast mode [ 523.921455][T19972] macvlan2: entered promiscuous mode [ 523.928594][T19972] macvlan2: entered allmulticast mode [ 523.936005][T19972] bond4: entered promiscuous mode [ 523.944422][T19972] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 523.956022][T19972] bond4: left promiscuous mode [ 524.385369][T19993] nbd: must specify a device to reconfigure [ 524.562977][T20004] __nla_validate_parse: 16 callbacks suppressed [ 524.562998][T20004] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4045'. [ 524.723596][T20012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4048'. [ 524.752644][T20015] openvswitch: netlink: IP tunnel dst address not specified [ 524.765589][T20017] sctp: [Deprecated]: syz.1.4050 (pid 20017) Use of int in maxseg socket option. [ 524.765589][T20017] Use struct sctp_assoc_value instead [ 524.827038][ T8908] tipc: Node number set to 2542307881 [ 525.061230][ T8925] IPVS: starting estimator thread 0... [ 525.068120][T20036] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4057'. [ 525.153065][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4059'. [ 525.167779][T20037] IPVS: using max 30 ests per chain, 72000 per kthread [ 525.172634][T20046] veth0_virt_wifi: entered promiscuous mode [ 525.267315][T20055] delete_channel: no stack [ 525.336066][T20058] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 525.354912][T20065] xt_policy: too many policy elements [ 525.450233][T20070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4066'. [ 525.509414][T20078] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4067'. [ 525.676309][T20085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.863045][T20107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.921445][T20110] netlink: 'syz.3.4078': attribute type 4 has an invalid length. [ 525.930491][T20106] xfrm1: left allmulticast mode [ 525.941324][T20106] bond3: left promiscuous mode [ 525.960270][ T3507] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.973512][ T3507] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.019071][ T3507] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.047916][ T3507] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.072412][T20115] netlink: 'syz.3.4081': attribute type 21 has an invalid length. [ 526.096398][T20115] netlink: 'syz.3.4081': attribute type 22 has an invalid length. [ 526.175351][T20125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4081'. [ 526.189580][T20115] netlink: 'syz.3.4081': attribute type 23 has an invalid length. [ 526.218837][T20115] netlink: 'syz.3.4081': attribute type 25 has an invalid length. [ 526.227500][T20115] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4081'. [ 526.242318][T20123] netlink: 'syz.3.4081': attribute type 13 has an invalid length. [ 526.278325][T20123] netlink: 'syz.3.4081': attribute type 14 has an invalid length. [ 526.286389][T20123] netlink: 'syz.3.4081': attribute type 15 has an invalid length. [ 526.328098][T20123] netlink: 'syz.3.4081': attribute type 16 has an invalid length. [ 526.344388][T20123] netlink: 'syz.3.4081': attribute type 17 has an invalid length. [ 526.374520][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4081'. [ 526.446966][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 526.455029][ C0] lec:lec_tx_timeout: lec0 [ 526.460087][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 526.515466][T20144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4092'. [ 526.858349][ T5158] block nbd2: Possible stuck request ffff888026240000: control (read@0,1024B). Runtime 210 seconds [ 526.869266][ T5158] block nbd2: Possible stuck request ffff888026240200: control (read@1024,1024B). Runtime 210 seconds [ 526.880572][ T5158] block nbd2: Possible stuck request ffff888026240400: control (read@2048,1024B). Runtime 210 seconds [ 526.892027][ T5158] block nbd2: Possible stuck request ffff888026240600: control (read@3072,1024B). Runtime 210 seconds [ 526.974105][T20179] netlink: 'syz.3.4102': attribute type 11 has an invalid length. [ 527.980407][T20261] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 528.002697][T20261] openvswitch: netlink: IPv4 tunnel dst address is zero [ 528.076636][T20267] syzkaller0: entered promiscuous mode [ 528.082712][T20267] syzkaller0: entered allmulticast mode [ 528.198179][T20276] IPv6: NLM_F_CREATE should be specified when creating new route [ 528.488611][T20296] team0: Device gtp0 is up. Set it down before adding it as a team port [ 528.536100][T20299] team0: Device gtp0 is up. Set it down before adding it as a team port [ 528.565038][T20295] vcan0: entered promiscuous mode [ 528.573590][T20295] vcan0: entered allmulticast mode [ 528.602673][T20303] s5ÿÿø: renamed from vlan1 (while UP) [ 528.620171][T20301] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 528.833159][T20318] ip6gre2: entered allmulticast mode [ 528.982156][T20327] syzkaller0: entered promiscuous mode [ 528.987824][T20327] syzkaller0: entered allmulticast mode [ 529.379942][T20363] syzkaller0: entered promiscuous mode [ 529.395920][T20363] syzkaller0: entered allmulticast mode [ 529.718536][T20385] __nla_validate_parse: 13 callbacks suppressed [ 529.718555][T20385] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4163'. [ 529.772213][T20387] syzkaller0: entered promiscuous mode [ 529.809058][T20387] syzkaller0: entered allmulticast mode [ 530.058678][T20400] syzkaller0: entered promiscuous mode [ 530.064172][T20400] syzkaller0: entered allmulticast mode [ 530.190069][T20417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4172'. [ 530.217394][T20417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4172'. [ 531.467976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 531.475973][ C0] lec:lec_tx_timeout: lec0 [ 531.480681][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 531.635115][T20436] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 531.649322][T20437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4176'. [ 531.763757][T20449] vcan0: entered promiscuous mode [ 531.778135][T20449] vcan0: entered allmulticast mode [ 531.798078][T20453] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 532.027110][T20466] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4187'. [ 532.290318][ T5835] Bluetooth: hci2: link tx timeout [ 532.295895][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.300930][T20485] bond6: entered promiscuous mode [ 532.320422][ T51] Bluetooth: hci2: link tx timeout [ 532.326576][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.334797][ T51] Bluetooth: hci2: link tx timeout [ 532.341264][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.350226][ T51] Bluetooth: hci2: link tx timeout [ 532.355361][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.355499][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4199'. [ 532.368012][ T51] Bluetooth: hci2: link tx timeout [ 532.379072][T20485] bond6: entered allmulticast mode [ 532.380526][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.392640][ T51] Bluetooth: hci2: link tx timeout [ 532.398065][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.400392][T20485] 8021q: adding VLAN 0 to HW filter on device bond6 [ 532.405815][ T51] Bluetooth: hci2: link tx timeout [ 532.419201][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.427855][ T51] Bluetooth: hci2: link tx timeout [ 532.433313][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.534063][T20498] validate_nla: 8 callbacks suppressed [ 532.534084][T20498] netlink: 'syz.1.4199': attribute type 6 has an invalid length. [ 532.682048][T20519] Bluetooth: MGMT ver 1.23 [ 532.729395][T20519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4204'. [ 532.754186][T20519] team0: Port device dummy0 removed [ 532.913172][T20530] IPv6: NLM_F_CREATE should be specified when creating new route [ 533.044587][T20541] bond0: (slave gre0): Error: Device type is different from other slaves [ 533.234271][T20550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4213'. [ 533.322645][T20550] bond7: entered promiscuous mode [ 533.333815][T20550] bond7: entered allmulticast mode [ 533.339494][T20550] 8021q: adding VLAN 0 to HW filter on device bond7 [ 533.370847][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4214'. [ 533.698764][T20581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4220'. [ 533.710687][T20579] pimreg: entered allmulticast mode [ 534.045017][T20598] netlink: 'syz.2.4226': attribute type 1 has an invalid length. [ 534.112592][T20598] bond8: entered promiscuous mode [ 534.119036][T20598] bond8: entered allmulticast mode [ 534.124606][T20598] 8021q: adding VLAN 0 to HW filter on device bond8 [ 534.189346][T20606] erspan1: entered allmulticast mode [ 534.242410][T20606] bond8: (slave erspan1): making interface the new active one [ 534.279337][T20606] erspan1: entered promiscuous mode [ 534.299351][T20606] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 534.357208][T20511] Bluetooth: hci2: command 0x0406 tx timeout [ 534.685270][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 535.401910][T20683] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 535.643982][T20701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4251'. [ 535.811070][T20711] netlink: 'syz.3.4253': attribute type 1 has an invalid length. [ 535.843097][T20717] netlink: 'syz.2.4255': attribute type 1 has an invalid length. [ 535.956162][T20728] openvswitch: netlink: IP tunnel dst address not specified [ 535.960489][T20711] bond8: entered promiscuous mode [ 535.969243][T20711] bond8: entered allmulticast mode [ 535.974808][T20711] 8021q: adding VLAN 0 to HW filter on device bond8 [ 536.082787][T20734] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 536.340097][T20757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4266'. [ 536.352558][T20757] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4266'. [ 536.367836][T20757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4266'. [ 536.487004][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 536.495049][ C0] lec:lec_tx_timeout: lec0 [ 536.499967][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 536.884478][T20774] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 536.912160][T20774] syzkaller0: entered promiscuous mode [ 536.924853][T20774] syzkaller0: entered allmulticast mode [ 537.285082][T20799] tipc: Started in network mode [ 537.295027][T20799] tipc: Node identity 7632efead4b8, cluster identity 4711 [ 537.307621][T20799] tipc: Enabled bearer , priority 0 [ 537.379631][T20815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4280'. [ 537.452831][T20808] syzkaller0: entered promiscuous mode [ 537.472041][T20808] syzkaller0: entered allmulticast mode [ 537.482143][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 537.506503][T20798] tipc: Resetting bearer [ 537.533967][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4281'. [ 537.562077][T20798] tipc: Disabling bearer [ 537.587682][T20815] tipc: Started in network mode [ 537.592567][T20815] tipc: Node identity 1ef1649ddbbb, cluster identity 4711 [ 537.602140][T20815] tipc: Enabled bearer , priority 0 [ 537.618377][T20826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.676178][T20826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.734119][T20821] syzkaller0: entered promiscuous mode [ 537.743464][T20821] syzkaller0: entered allmulticast mode [ 537.755910][T20820] syzkaller1: entered promiscuous mode [ 537.763157][T20820] syzkaller1: entered allmulticast mode [ 537.784409][T20827] tipc: Resetting bearer [ 537.818868][T20814] tipc: Resetting bearer [ 537.838207][T20814] tipc: Disabling bearer [ 537.984807][T20839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4287'. [ 537.994332][T20839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4287'. [ 538.435723][T20881] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4299'. [ 538.654135][T20888] netlink: 'syz.2.4301': attribute type 21 has an invalid length. [ 538.670146][T20888] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.810675][T20902] syzkaller0: entered promiscuous mode [ 538.840738][T20902] syzkaller0: entered allmulticast mode [ 538.909352][T20910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.942136][T20912] netlink: 'syz.3.4309': attribute type 4 has an invalid length. [ 539.055675][T20914] netlink: 'syz.1.4311': attribute type 24 has an invalid length. [ 539.164633][T20920] netlink: 'syz.2.4313': attribute type 8 has an invalid length. [ 539.171855][T20925] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 539.452918][T20951] netlink: 'syz.1.4323': attribute type 1 has an invalid length. [ 540.001564][T20968] tipc: Enabling of bearer rejected, failed to enable media [ 540.063389][T20971] netlink: 'syz.0.4329': attribute type 1 has an invalid length. [ 540.091780][T20971] gretap1: entered promiscuous mode [ 540.102321][T20971] bond2: (slave gretap1): making interface the new active one [ 540.111549][T20971] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 540.127902][T20971] macvlan2: entered promiscuous mode [ 540.133289][T20971] macvlan2: entered allmulticast mode [ 540.140689][T20971] bond2: entered promiscuous mode [ 540.147973][T20971] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 540.156162][T20971] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 540.174559][T20971] bond2: left promiscuous mode [ 540.315249][T20980] netlink: 'syz.0.4333': attribute type 10 has an invalid length. [ 540.450054][T20984] : entered promiscuous mode [ 540.662396][T21000] __nla_validate_parse: 11 callbacks suppressed [ 540.662415][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4341'. [ 540.968580][T21027] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4348'. [ 541.294500][T21055] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4357'. [ 541.305397][T21056] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4357'. [ 541.334649][T21055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4357'. [ 541.455141][T21067] netlink: 'syz.4.4359': attribute type 4 has an invalid length. [ 541.828562][T21079] syz.0.4360 (21079) used obsolete PPPIOCDETACH ioctl [ 541.870460][T21082] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 542.079959][T21090] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4366'. [ 542.329689][T21108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4372'. [ 542.443462][T21117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4374'. [ 542.476738][T21117] bond0: entered promiscuous mode [ 542.502303][T21117] bond_slave_0: entered promiscuous mode [ 542.524740][T21117] bond_slave_1: entered promiscuous mode [ 542.534708][T21117] bond0: left promiscuous mode [ 542.540229][T21117] bond_slave_0: left promiscuous mode [ 542.546096][T21117] bond_slave_1: left promiscuous mode [ 542.592402][T21126] netlink: 'syz.1.4376': attribute type 13 has an invalid length. [ 542.787236][T21140] bridge0: entered allmulticast mode [ 542.838126][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 542.846218][ C0] lec:lec_tx_timeout: lec0 [ 542.852189][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 543.095506][T21156] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4385'. [ 543.109912][T21160] nbd: must specify at least one socket [ 543.178485][T21164] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4386'. [ 543.236299][T21165] netlink: 'syz.2.4384': attribute type 1 has an invalid length. [ 543.342649][T21176] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 543.349654][T21176] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 543.385552][T21181] openvswitch: netlink: Flow actions attr not present in new flow. [ 543.630351][T21196] bond9: (slave veth7): Enslaving as an active interface with a down link [ 543.671915][T21192] bond9: (slave veth9): Enslaving as an active interface with a down link [ 543.712933][T21208] dvmrp0: entered allmulticast mode [ 543.728751][T21212] netlink: 'syz.1.4400': attribute type 4 has an invalid length. [ 543.934050][T21229] syzkaller0: entered promiscuous mode [ 543.939925][T21229] syzkaller0: entered allmulticast mode [ 544.539785][T21264] netlink: 'syz.4.4415': attribute type 13 has an invalid length. [ 544.609245][T21271] netlink: 'syz.4.4415': attribute type 16 has an invalid length. [ 544.618578][T21271] netlink: 'syz.4.4415': attribute type 17 has an invalid length. [ 544.753096][T21271] erspan0: left allmulticast mode [ 544.794815][T21271] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.802069][T21271] bridge0: port 2(bridge_slave_1) entered listening state [ 544.809549][T21271] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.816711][T21271] bridge0: port 1(bridge_slave_0) entered listening state [ 544.840878][T21271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.921102][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 545.096507][T21291] netlink: 'syz.4.4420': attribute type 10 has an invalid length. [ 546.453847][T21290] bridge2: port 1(veth3) entered blocking state [ 546.461243][T21290] bridge2: port 1(veth3) entered disabled state [ 546.468509][T21290] veth3: entered allmulticast mode [ 546.475995][T21290] veth3: entered promiscuous mode [ 546.651534][T21310] __nla_validate_parse: 13 callbacks suppressed [ 546.651553][T21310] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4427'. [ 546.662976][T21311] syzkaller0: Caught tx_queue_len zero misconfig [ 546.689122][T21311] tipc: Enabled bearer , priority 0 [ 546.991800][T21333] netlink: 'syz.1.4433': attribute type 10 has an invalid length. [ 547.225972][T21352] delete_channel: no stack [ 547.426716][T21367] netlink: 'syz.4.4441': attribute type 1 has an invalid length. [ 547.445101][T21367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4441'. [ 547.459562][T21368] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4443'. [ 547.493485][T21372] netlink: 'syz.4.4441': attribute type 1 has an invalid length. [ 547.529564][T21372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4441'. [ 547.691535][T21383] xt_HMARK: proto mask must be zero with L3 mode [ 547.723735][T21383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4446'. [ 547.788710][T21385] nbd: must specify a device to reconfigure [ 547.926629][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4449'. [ 547.974290][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'. [ 548.151124][T21406] netlink: 'syz.0.4451': attribute type 2 has an invalid length. [ 548.500372][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 548.518786][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 548.583994][T21427] syzkaller0: entered promiscuous mode [ 548.595194][T21427] syzkaller0: entered allmulticast mode [ 548.600879][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 548.600913][ C0] lec:lec_tx_timeout: lec0 [ 548.610022][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 548.639465][T21439] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4461'. [ 548.665174][T21427] tipc: Started in network mode [ 548.673058][T21439] xt_policy: neither incoming nor outgoing policy selected [ 548.682241][T21427] tipc: Node identity 9ea8f2fd8df6, cluster identity 4711 [ 548.692086][T21427] tipc: Enabled bearer , priority 0 [ 548.765039][T21439] vti0: entered promiscuous mode [ 548.897993][T21426] tipc: Resetting bearer [ 548.917168][T21450] blkio.reset_stats is deprecated [ 549.003984][T21457] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 549.035231][T21426] tipc: Disabling bearer [ 549.146796][T21457] 8021q: adding VLAN 0 to HW filter on device bond4 [ 549.412549][T21480] openvswitch: netlink: EtherType 50a is less than min 600 [ 549.696483][T21497] openvswitch: netlink: IP tunnel TTL not specified. [ 550.735919][T21577] netlink: 'syz.2.4498': attribute type 26 has an invalid length. [ 550.761031][T21584] FAULT_INJECTION: forcing a failure. [ 550.761031][T21584] name failslab, interval 1, probability 0, space 0, times 0 [ 550.777726][T21577] netlink: 'syz.2.4498': attribute type 26 has an invalid length. [ 550.815805][T21584] CPU: 1 UID: 0 PID: 21584 Comm: syz.0.4501 Not tainted syzkaller #0 PREEMPT(full) [ 550.815831][T21584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.815842][T21584] Call Trace: [ 550.815848][T21584] [ 550.815857][T21584] dump_stack_lvl+0xe8/0x150 [ 550.815884][T21584] should_fail_ex+0x412/0x560 [ 550.815912][T21584] should_failslab+0xa8/0x100 [ 550.815938][T21584] __kmalloc_noprof+0xe8/0x760 [ 550.815960][T21584] ? kernfs_fop_write_iter+0x158/0x540 [ 550.815983][T21584] kernfs_fop_write_iter+0x158/0x540 [ 550.816006][T21584] vfs_write+0x61d/0xb90 [ 550.816032][T21584] ? __pfx_vfs_write+0x10/0x10 [ 550.816063][T21584] ? __fget_files+0x2a/0x420 [ 550.816089][T21584] ksys_write+0x150/0x270 [ 550.816111][T21584] ? __pfx_ksys_write+0x10/0x10 [ 550.816142][T21584] do_syscall_64+0x14d/0xf80 [ 550.816163][T21584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.816179][T21584] ? trace_irq_disable+0x37/0x100 [ 550.816198][T21584] ? clear_bhb_loop+0x40/0x90 [ 550.816217][T21584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.816234][T21584] RIP: 0033:0x7fee07f9c629 [ 550.816250][T21584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.816265][T21584] RSP: 002b:00007fee08ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.816284][T21584] RAX: ffffffffffffffda RBX: 00007fee08215fa0 RCX: 00007fee07f9c629 [ 550.816296][T21584] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 550.816307][T21584] RBP: 00007fee08ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 550.816318][T21584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.816329][T21584] R13: 00007fee08216038 R14: 00007fee08215fa0 R15: 00007ffe8e624308 [ 550.816359][T21584] [ 551.189558][T21592] set match dimension is over the limit! [ 551.221533][T21592] lo: Caught tx_queue_len zero misconfig [ 551.465541][T21604] bridge0: port 3(ipvlan2) entered blocking state [ 551.490098][T21604] bridge0: port 3(ipvlan2) entered disabled state [ 551.499587][T21604] ipvlan2: entered allmulticast mode [ 551.503542][T21608] xt_cluster: node mask cannot exceed total number of nodes [ 551.504972][T21604] bridge0: entered allmulticast mode [ 551.522209][T21604] ipvlan2: left allmulticast mode [ 551.527392][T21604] bridge0: left allmulticast mode [ 551.656405][T21600] syzkaller0: entered promiscuous mode [ 551.663458][T21600] syzkaller0: entered allmulticast mode [ 551.671356][T21619] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 551.678809][T21619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.692678][T21622] FAULT_INJECTION: forcing a failure. [ 551.692678][T21622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.709154][T21622] CPU: 1 UID: 0 PID: 21622 Comm: syz.2.4513 Not tainted syzkaller #0 PREEMPT(full) [ 551.709179][T21622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.709197][T21622] Call Trace: [ 551.709204][T21622] [ 551.709211][T21622] dump_stack_lvl+0xe8/0x150 [ 551.709238][T21622] should_fail_ex+0x412/0x560 [ 551.709264][T21622] _copy_from_iter+0x1d3/0x1670 [ 551.709298][T21622] ? __pfx__copy_from_iter+0x10/0x10 [ 551.709322][T21622] ? rcu_is_watching+0x15/0xb0 [ 551.709341][T21622] ? trace_kmalloc+0x1f/0xb0 [ 551.709359][T21622] ? __kmalloc_noprof+0x37d/0x760 [ 551.709378][T21622] ? kernfs_fop_write_iter+0x158/0x540 [ 551.709394][T21622] ? __kmalloc_noprof+0x1b8/0x760 [ 551.709417][T21622] kernfs_fop_write_iter+0x19b/0x540 [ 551.709440][T21622] vfs_write+0x61d/0xb90 [ 551.709469][T21622] ? __pfx_vfs_write+0x10/0x10 [ 551.709498][T21622] ? __fget_files+0x2a/0x420 [ 551.709524][T21622] ksys_write+0x150/0x270 [ 551.709545][T21622] ? __pfx_ksys_write+0x10/0x10 [ 551.709576][T21622] do_syscall_64+0x14d/0xf80 [ 551.709596][T21622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.709612][T21622] ? trace_irq_disable+0x37/0x100 [ 551.709629][T21622] ? clear_bhb_loop+0x40/0x90 [ 551.709650][T21622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.709665][T21622] RIP: 0033:0x7f18c239c629 [ 551.709681][T21622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.709695][T21622] RSP: 002b:00007f18c3280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 551.709713][T21622] RAX: ffffffffffffffda RBX: 00007f18c2615fa0 RCX: 00007f18c239c629 [ 551.709729][T21622] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 551.709740][T21622] RBP: 00007f18c3280090 R08: 0000000000000000 R09: 0000000000000000 [ 551.709751][T21622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.709760][T21622] R13: 00007f18c2616038 R14: 00007f18c2615fa0 R15: 00007ffcc0960808 [ 551.709790][T21622] [ 552.035075][T21630] __nla_validate_parse: 8 callbacks suppressed [ 552.035093][T21630] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4514'. [ 552.497572][T21644] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4516'. [ 552.722700][T21648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4517'. [ 553.883940][T21614] syz_tun: entered allmulticast mode [ 553.890614][T21614] syz_tun: left allmulticast mode [ 554.135898][T21667] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 554.144117][T21667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.249011][T21676] FAULT_INJECTION: forcing a failure. [ 554.249011][T21676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.279190][T21676] CPU: 0 UID: 0 PID: 21676 Comm: syz.1.4524 Not tainted syzkaller #0 PREEMPT(full) [ 554.279216][T21676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.279226][T21676] Call Trace: [ 554.279233][T21676] [ 554.279240][T21676] dump_stack_lvl+0xe8/0x150 [ 554.279267][T21676] should_fail_ex+0x412/0x560 [ 554.279295][T21676] _copy_to_user+0x31/0xb0 [ 554.279315][T21676] simple_read_from_buffer+0xe1/0x170 [ 554.279345][T21676] proc_fail_nth_read+0x1bb/0x230 [ 554.279370][T21676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.279395][T21676] ? rw_verify_area+0x2a6/0x4d0 [ 554.279413][T21676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.279435][T21676] vfs_read+0x20c/0xa70 [ 554.279452][T21676] ? fdget_pos+0x246/0x320 [ 554.279474][T21676] ? __pfx___mutex_lock+0x10/0x10 [ 554.279496][T21676] ? __pfx_vfs_read+0x10/0x10 [ 554.279517][T21676] ? __fget_files+0x2a/0x420 [ 554.279537][T21676] ? __fget_files+0x3a0/0x420 [ 554.279553][T21676] ? __fget_files+0x2a/0x420 [ 554.279577][T21676] ksys_read+0x150/0x270 [ 554.279599][T21676] ? __pfx_ksys_read+0x10/0x10 [ 554.279629][T21676] do_syscall_64+0x14d/0xf80 [ 554.279649][T21676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.279663][T21676] ? trace_irq_disable+0x37/0x100 [ 554.279682][T21676] ? clear_bhb_loop+0x40/0x90 [ 554.279702][T21676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.279718][T21676] RIP: 0033:0x7f26dd75cece [ 554.279734][T21676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 554.279748][T21676] RSP: 002b:00007f26de67afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.279767][T21676] RAX: ffffffffffffffda RBX: 00007f26de67b6c0 RCX: 00007f26dd75cece [ 554.279779][T21676] RDX: 000000000000000f RSI: 00007f26de67b0a0 RDI: 0000000000000005 [ 554.279790][T21676] RBP: 00007f26de67b090 R08: 0000000000000000 R09: 0000000000000000 [ 554.279801][T21676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.279811][T21676] R13: 00007f26dda16038 R14: 00007f26dda15fa0 R15: 00007ffc7c6651b8 [ 554.279841][T21676] [ 554.319541][T21678] IPv6: addrconf: prefix option has invalid lifetime [ 554.366878][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 554.502547][T21682] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4528'. [ 554.510372][ C0] lec:lec_tx_timeout: lec0 [ 554.511540][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 554.904718][T21709] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4538'. [ 554.954113][T21702] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 554.991520][T21702] bond5 (unregistering): Released all slaves [ 555.055296][T21710] Cannot find add_set index 1 as target [ 555.293351][ T9271] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.313264][ T9271] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.332513][ T9271] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.351685][ T9271] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.459165][T21737] netlink: 'syz.4.4546': attribute type 1 has an invalid length. [ 555.467416][T21737] netlink: 'syz.4.4546': attribute type 2 has an invalid length. [ 555.691969][T21754] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 555.841390][T21756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4551'. [ 556.024470][T21776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4555'. [ 556.301911][T21797] sctp: [Deprecated]: syz.1.4561 (pid 21797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.301911][T21797] Use struct sctp_sack_info instead [ 556.515936][T21814] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 556.747969][T21827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4573'. [ 556.856245][T21831] x_tables: unsorted underflow at hook 3 [ 556.863111][T21830] x_tables: unsorted underflow at hook 3 [ 556.918894][ T5158] block nbd2: Possible stuck request ffff888026240000: control (read@0,1024B). Runtime 240 seconds [ 556.930203][ T5158] block nbd2: Possible stuck request ffff888026240200: control (read@1024,1024B). Runtime 240 seconds [ 556.941382][ T5158] block nbd2: Possible stuck request ffff888026240400: control (read@2048,1024B). Runtime 240 seconds [ 556.952500][ T5158] block nbd2: Possible stuck request ffff888026240600: control (read@3072,1024B). Runtime 240 seconds [ 557.030394][T21841] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4576'. [ 557.356517][T21861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4584'. [ 557.405425][T21863] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4585'. [ 557.422603][T21863] netlink: 'syz.0.4585': attribute type 1 has an invalid length. [ 557.448856][T21863] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4585'. [ 557.469597][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 557.496793][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 557.708849][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4592'. [ 557.775482][T21886] ipt_REJECT: ECHOREPLY no longer supported. [ 557.904874][T21890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4594'. [ 557.948101][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4594'. [ 558.294876][T21904] netlink: 'syz.4.4599': attribute type 18 has an invalid length. [ 558.628145][T21909] ipt_ECN: cannot use operation on non-tcp rule [ 558.891432][T21922] netlink: 'syz.1.4603': attribute type 1 has an invalid length. [ 560.276869][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 560.284991][ C0] lec:lec_tx_timeout: lec0 [ 560.730099][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4607'. [ 560.742074][T21928] netlink: 'syz.2.4606': attribute type 1 has an invalid length. [ 560.881088][T21936] bond10: (slave gretap2): making interface the new active one [ 560.894845][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4607'. [ 560.916008][T21936] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 561.168090][T21957] netlink: 'syz.2.4616': attribute type 29 has an invalid length. [ 561.182343][T21957] netlink: 'syz.2.4616': attribute type 29 has an invalid length. [ 561.535448][T21982] netlink: 'syz.4.4622': attribute type 1 has an invalid length. [ 561.605410][T21989] set match dimension is over the limit! [ 561.811271][T21996] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 562.141426][T22021] x_tables: duplicate underflow at hook 2 [ 562.300371][T22024] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 562.488244][T22040] __nla_validate_parse: 6 callbacks suppressed [ 562.488262][T22040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4640'. [ 562.863939][T22067] netlink: 'syz.0.4652': attribute type 9 has an invalid length. [ 562.873576][T22069] netlink: 'syz.0.4652': attribute type 9 has an invalid length. [ 563.047750][T22077] netlink: 'syz.4.4656': attribute type 4 has an invalid length. [ 563.060629][T22077] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4656'. [ 563.209124][T22087] syzkaller0: entered promiscuous mode [ 563.214630][T22087] syzkaller0: entered allmulticast mode [ 563.323640][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 563.516499][T22105] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4664'. [ 563.542340][T22106] netlink: 'syz.0.4664': attribute type 4 has an invalid length. [ 563.611013][T22113] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.4666'. [ 563.646036][T22113] openvswitch: netlink: Message has 6 unknown bytes. [ 563.672817][T22116] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4668'. [ 563.739899][T22120] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4666'. [ 563.966536][T22136] Cannot find map_set index 65533 as target [ 564.037470][T22133] Cannot find map_set index 65533 as target [ 564.458788][T22168] delete_channel: no stack [ 564.737966][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4690'. [ 564.765887][T22188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4691'. [ 564.826156][ T5835] block nbd5: Receive control failed (result -107) [ 565.082411][T22204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4694'. [ 565.118707][T22207] syzkaller0: entered promiscuous mode [ 565.131928][T22206] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 565.148005][T22207] syzkaller0: entered allmulticast mode [ 565.273684][T22216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4700'. [ 565.422330][T22231] netlink: 'syz.0.4704': attribute type 1 has an invalid length. [ 565.430542][T22229] macsec1: entered promiscuous mode [ 565.435974][T22229] macsec1: entered allmulticast mode [ 565.442446][T22229] bridge0: port 3(macsec1) entered blocking state [ 565.449324][T22229] bridge0: port 3(macsec1) entered disabled state [ 565.500541][T22231] bond3: entered promiscuous mode [ 565.512104][T22231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 565.938869][T22261] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 566.238367][T22274] veth5: entered promiscuous mode [ 566.259253][T22274] veth5: entered allmulticast mode [ 566.289903][T22267] netlink: 'syz.0.4714': attribute type 4 has an invalid length. [ 566.355732][T22278] netlink: 'syz.0.4714': attribute type 4 has an invalid length. [ 566.484542][T22267] netlink: 'syz.0.4714': attribute type 1 has an invalid length. [ 566.662127][T22296] netlink: 'syz.1.4723': attribute type 10 has an invalid length. [ 566.687846][T22296] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.701816][T22296] bond0: (slave team0): Enslaving as an active interface with an up link [ 567.004220][T22307] sctp: [Deprecated]: syz.1.4727 (pid 22307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.004220][T22307] Use struct sctp_sack_info instead [ 567.190077][T22318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.386516][T22341] syzkaller1: entered promiscuous mode [ 567.404998][T22341] syzkaller1: entered allmulticast mode [ 567.429979][T22336] tipc: Enabling of bearer rejected, already enabled [ 567.504361][T22348] __nla_validate_parse: 17 callbacks suppressed [ 567.504378][T22348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4740'. [ 567.523852][T22341] Cannot find add_set index 65532 as target [ 567.612688][T22350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4741'. [ 567.716577][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.732625][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.759615][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.777926][T22361] sctp: [Deprecated]: syz.0.4745 (pid 22361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.777926][T22361] Use struct sctp_sack_info instead [ 567.777937][ T49] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.843528][T22367] sctp: [Deprecated]: syz.0.4745 (pid 22367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.843528][T22367] Use struct sctp_sack_info instead [ 567.938674][T22371] ipvlan2: entered promiscuous mode [ 567.952261][T22375] netlink: 'syz.3.4750': attribute type 1 has an invalid length. [ 568.018691][T22375] 8021q: adding VLAN 0 to HW filter on device bond9 [ 568.180237][T22385] netlink: 'syz.1.4755': attribute type 16 has an invalid length. [ 568.190830][T22385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4755'. [ 568.206741][T22387] xt_CT: No such helper "snmp_trap" [ 568.226468][T22390] syzkaller0: entered promiscuous mode [ 568.237923][T22390] syzkaller0: entered allmulticast mode [ 568.246699][T22393] netlink: 'syz.4.4756': attribute type 9 has an invalid length. [ 568.303192][T22395] ip6tnl0: Caught tx_queue_len zero misconfig [ 568.336902][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.344958][ C0] lec:lec_tx_timeout: lec0 [ 568.422268][T22402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4759'. [ 568.954948][T22432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4769'. [ 569.167748][T22442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4774'. [ 569.212192][T22443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4774'. [ 569.327570][T22454] netlink: 'syz.4.4778': attribute type 1 has an invalid length. [ 569.544972][T22457] netlink: 'syz.0.4779': attribute type 2 has an invalid length. [ 569.592727][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4779'. [ 569.596207][T22470] netlink: 'syz.1.4782': attribute type 1 has an invalid length. [ 569.605212][T22455] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 569.611122][T22470] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4782'. [ 569.912853][T22489] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4788'. [ 570.336658][T11675] lec:lec_start_xmit: lec0:No lecd attached [ 570.380223][T22518] openvswitch: netlink: Flow actions attr not present in new flow. [ 570.401323][T22519] openvswitch: netlink: Flow actions attr not present in new flow. [ 570.940320][T22550] bond0: Device is already in use. [ 571.013946][T22558] nbd: nbd0 already in use [ 571.202997][T22567] ipt_ECN: cannot use operation on non-tcp rule [ 571.802043][T22605] validate_nla: 4 callbacks suppressed [ 571.802063][T22605] netlink: 'syz.0.4829': attribute type 1 has an invalid length. [ 571.841381][T22607] geneve2: entered promiscuous mode [ 571.858849][T22607] geneve2: entered allmulticast mode [ 571.865744][ T9271] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 571.883801][ T9271] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 571.945426][T22605] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.966156][ T9271] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 571.976448][ T9271] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 572.119675][T22629] : renamed from hsr0 (while UP) [ 572.126014][T22631] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 572.133911][T22631] netlink: 'syz.2.4836': attribute type 1 has an invalid length. [ 572.210625][T22634] netlink: 'syz.4.4837': attribute type 12 has an invalid length. [ 572.411425][T22647] macvlan2: entered promiscuous mode [ 572.423820][T22647] macvlan2: entered allmulticast mode [ 572.445240][T22647] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 572.510507][T22656] __nla_validate_parse: 15 callbacks suppressed [ 572.510527][T22656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4846'. [ 572.645675][T22659] ip6t_srh: unknown srh match flags 4000 [ 572.722355][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4850'. [ 572.729990][T22669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4851'. [ 572.922217][T22673] vlan8: entered allmulticast mode [ 572.937052][T22673] bridge1: entered allmulticast mode [ 573.176767][T22694] netlink: 'syz.1.4859': attribute type 1 has an invalid length. [ 573.365793][T22706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4864'. [ 573.423317][T22713] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4867'. [ 573.499895][T22709] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4866'. [ 573.509206][T22709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4866'. [ 573.732458][T22734] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4872'. [ 574.244401][T22752] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 574.345913][T22752] bond7 (unregistering): Released all slaves [ 574.486595][T22764] netlink: 'syz.2.4882': attribute type 1 has an invalid length. [ 574.516681][T22764] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4882'. [ 574.547665][T22764] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4882'. [ 574.577310][T22764] netlink: 'syz.2.4882': attribute type 1 has an invalid length. [ 574.606378][T22764] netlink: 'syz.2.4882': attribute type 8 has an invalid length. [ 574.790341][T22776] geneve3: entered promiscuous mode [ 574.836946][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 574.844640][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 575.247809][T22806] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 575.329215][T22816] bond11: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 575.346993][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 575.355044][ C0] lec:lec_tx_timeout: lec0 [ 575.385895][T22816] bond11 (unregistering): Released all slaves [ 575.424214][T22813] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 575.607810][T22837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.743080][T22845] sock: sock_timestamping_bind_phc: sock not bind to device [ 576.109447][T22859] syzkaller0: entered promiscuous mode [ 576.125602][T22859] syzkaller0: entered allmulticast mode [ 576.188877][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.205673][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.221806][T22859] netlink: 'syz.0.4912': attribute type 6 has an invalid length. [ 576.239964][T22859] netlink: 'syz.0.4912': attribute type 6 has an invalid length. [ 576.714181][T22903] netlink: 'syz.1.4927': attribute type 1 has an invalid length. [ 577.020413][T22910] bond5: (slave ip6gretap1): making interface the new active one [ 577.056878][T22910] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 577.089961][T22910] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 577.115816][T22910] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 577.213228][T22929] netlink: 'syz.4.4932': attribute type 5 has an invalid length. [ 577.254191][T22937] netlink: 'syz.1.4937': attribute type 1 has an invalid length. [ 577.276516][T22926] tipc: Resetting bearer [ 577.324219][T22931] netlink: 'syz.0.4934': attribute type 7 has an invalid length. [ 577.403197][T22937] 8021q: adding VLAN 0 to HW filter on device bond6 [ 577.592758][T22955] __nla_validate_parse: 17 callbacks suppressed [ 577.592777][T22955] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4942'. [ 577.609895][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4943'. [ 577.635855][ T9263] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.644974][ T9263] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.657353][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4943'. [ 577.705242][T22964] netlink: 'syz.4.4945': attribute type 5 has an invalid length. [ 577.719243][ T9263] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.747425][ T9263] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.782087][T22966] netlink: 'syz.3.4946': attribute type 2 has an invalid length. [ 577.808399][T22966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4946'. [ 577.921386][T22975] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4950'. [ 578.080762][T22987] netlink: 'syz.1.4953': attribute type 1 has an invalid length. [ 578.102961][T22991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4954'. [ 578.135013][T22990] syzkaller1: entered promiscuous mode [ 578.150197][T22990] syzkaller1: entered allmulticast mode [ 578.211839][T23000] x_tables: duplicate underflow at hook 2 [ 578.232794][T22987] 8021q: adding VLAN 0 to HW filter on device bond7 [ 578.356030][T23009] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4958'. [ 578.424044][T23015] syzkaller0: entered promiscuous mode [ 578.437408][T23015] syzkaller0: entered allmulticast mode [ 578.461483][T23015] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 578.478583][T23015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4959'. [ 578.519926][T23017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4960'. [ 578.530763][T23017] IPv6: Can't replace route, no match found [ 578.605280][T23026] nftables ruleset with unbound chain [ 578.983351][T23050] xt_connbytes: Forcing CT accounting to be enabled [ 579.016633][T23054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.039235][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4974'. [ 579.424378][T23083] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 580.545520][T23160] syz.4.5003: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 580.563569][T23160] CPU: 1 UID: 0 PID: 23160 Comm: syz.4.5003 Not tainted syzkaller #0 PREEMPT(full) [ 580.563605][T23160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.563617][T23160] Call Trace: [ 580.563623][T23160] [ 580.563631][T23160] dump_stack_lvl+0xe8/0x150 [ 580.563663][T23160] warn_alloc+0x249/0x340 [ 580.563691][T23160] ? stack_trace_save+0xa9/0x100 [ 580.563721][T23160] ? __pfx_warn_alloc+0x10/0x10 [ 580.563753][T23160] ? kasan_save_track+0x4f/0x80 [ 580.563775][T23160] ? kasan_save_track+0x3e/0x80 [ 580.563797][T23160] ? __kasan_kmalloc+0x93/0xb0 [ 580.563818][T23160] ? __kmalloc_cache_noprof+0x31c/0x660 [ 580.563841][T23160] ? xskq_create+0x56/0x170 [ 580.563861][T23160] ? xsk_setsockopt+0x54c/0x990 [ 580.563879][T23160] ? do_sock_setsockopt+0x17c/0x1b0 [ 580.563900][T23160] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 580.563921][T23160] ? do_syscall_64+0x14d/0xf80 [ 580.563948][T23160] __vmalloc_node_range_noprof+0x132/0x1730 [ 580.564004][T23160] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 580.564036][T23160] ? __kasan_kmalloc+0x93/0xb0 [ 580.564066][T23160] vmalloc_user_noprof+0xad/0xe0 [ 580.564089][T23160] ? xskq_create+0xbf/0x170 [ 580.564112][T23160] xskq_create+0xbf/0x170 [ 580.564136][T23160] xsk_init_queue+0xad/0x110 [ 580.564159][T23160] xsk_setsockopt+0x54c/0x990 [ 580.564182][T23160] ? __pfx_xsk_setsockopt+0x10/0x10 [ 580.564202][T23160] ? __pfx_aa_sk_perm+0x10/0x10 [ 580.564231][T23160] ? aa_sock_opt_perm+0xff/0x1a0 [ 580.564259][T23160] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 580.564286][T23160] ? __pfx_xsk_setsockopt+0x10/0x10 [ 580.564308][T23160] do_sock_setsockopt+0x17c/0x1b0 [ 580.564342][T23160] __x64_sys_setsockopt+0x13d/0x1b0 [ 580.564371][T23160] do_syscall_64+0x14d/0xf80 [ 580.564396][T23160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.564414][T23160] ? trace_irq_disable+0x37/0x100 [ 580.564435][T23160] ? clear_bhb_loop+0x40/0x90 [ 580.564458][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.564477][T23160] RIP: 0033:0x7f4c9359c629 [ 580.564495][T23160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.564511][T23160] RSP: 002b:00007f4c943c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 580.564530][T23160] RAX: ffffffffffffffda RBX: 00007f4c93815fa0 RCX: 00007f4c9359c629 [ 580.564545][T23160] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 580.564556][T23160] RBP: 00007f4c93632b39 R08: 0000000000000004 R09: 0000000000000000 [ 580.564568][T23160] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.564580][T23160] R13: 00007f4c93816038 R14: 00007f4c93815fa0 R15: 00007ffd570b5aa8 [ 580.564610][T23160] [ 580.564618][T23160] Mem-Info: [ 580.849053][T23160] active_anon:6845 inactive_anon:0 isolated_anon:0 [ 580.849053][T23160] active_file:3022 inactive_file:40526 isolated_file:0 [ 580.849053][T23160] unevictable:768 dirty:192 writeback:0 [ 580.849053][T23160] slab_reclaimable:13072 slab_unreclaimable:120575 [ 580.849053][T23160] mapped:30159 shmem:1795 pagetables:1356 [ 580.849053][T23160] sec_pagetables:0 bounce:0 [ 580.849053][T23160] kernel_misc_reclaimable:0 [ 580.849053][T23160] free:1303541 free_pcp:8849 free_cma:0 [ 580.896202][T23160] Node 0 active_anon:27380kB inactive_anon:0kB active_file:12088kB inactive_file:161904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120636kB dirty:768kB writeback:0kB shmem:5644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15600kB pagetables:5292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.930627][T23160] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.962901][T23160] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.057924][T23160] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 581.063734][T23160] Node 0 DMA32 free:1259156kB boost:0kB min:34204kB low:42752kB high:51300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28780kB inactive_anon:0kB active_file:12088kB inactive_file:161904kB unevictable:1536kB writepending:768kB zspages:0kB present:3129332kB managed:2554008kB mlocked:0kB bounce:0kB free_pcp:32512kB local_pcp:13716kB free_cma:0kB [ 581.179445][T23160] lowmem_reserve[]: 0 0 0 0 0 [ 581.196456][T23160] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:924kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 581.317368][T23160] lowmem_reserve[]: 0 0 0 0 0 [ 581.322138][T23160] Node 1 Normal free:3939368kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:1508kB free_cma:0kB [ 581.415437][T23160] lowmem_reserve[]: 0 0 0 0 0 [ 581.443005][T23160] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 581.487040][T23160] Node 0 DMA32: 4979*4kB (UME) 4961*8kB (UM) 1982*16kB (UME) 333*32kB (UME) 181*64kB (UME) 64*128kB (UME) 138*256kB (UME) 119*512kB (UM) 107*1024kB (UME) 45*2048kB (UM) 204*4096kB (M) = 1255316kB [ 581.587143][T23160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 581.667066][T23160] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 5*16kB (ME) 6*32kB (UME) 2*64kB (UM) 7*128kB (UME) 5*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 959*4096kB (UM) = 3939368kB [ 581.757056][T23160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.766786][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.775746][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.800483][T23160] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 581.814088][T23160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.823886][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.849279][T23160] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 581.876533][T23160] 48412 total pagecache pages [ 581.890196][T23160] 0 pages in swap cache [ 581.914052][T23160] Free swap = 124996kB [ 581.930463][T23160] Total swap = 124996kB [ 581.934726][T23160] 2097051 pages RAM [ 581.945912][T23160] 0 pages HighMem/MovableOnly [ 581.959278][T23160] 426703 pages reserved [ 581.963648][T23160] 0 pages cma reserved [ 582.123336][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.295248][T23218] openvswitch: netlink: EtherType 50a is less than min 600 [ 582.470440][T23239] bond5: option mode: invalid value (133) [ 582.491074][T23239] bond5 (unregistering): Released all slaves [ 582.575660][T23246] IPVS: persistence engine module ip_vs_pe_À not found [ 582.858014][T23269] __nla_validate_parse: 6 callbacks suppressed [ 582.858033][T23269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 582.861680][T23263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5035'. [ 582.882876][T23272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5034'. [ 583.290223][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5042'. [ 583.303037][T23292] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5042'. [ 583.336203][T23294] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5043'. [ 583.593336][T23308] tipc: Enabled bearer , priority 0 [ 583.605550][T23307] tipc: Disabling bearer [ 583.663538][T23314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5047'. [ 583.848097][T23317] bond5 (unregistering): Released all slaves [ 583.883203][T23322] netlink: 'syz.1.5052': attribute type 2 has an invalid length. [ 583.912108][T23319] tipc: Enabling of bearer rejected, already enabled [ 584.073520][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5059'. [ 584.116348][T23348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5058'. [ 584.160124][T23348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5058'. [ 584.310411][T23353] block nbd6: server does not support multiple connections per device. [ 584.339138][T23353] block nbd6: shutting down sockets [ 584.704880][T23389] lo: MTU too low for tipc bearer [ 584.712503][T23389] tipc: Enabling of bearer rejected, failed to enable media [ 585.029614][T23415] netlink: 'syz.4.5075': attribute type 1 has an invalid length. [ 585.149306][T23422] bond7: (slave ip6gretap0): making interface the new active one [ 585.159727][T23422] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 585.168463][T23422] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 585.176779][T23422] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 585.288425][T23437] sctp: [Deprecated]: syz.4.5082 (pid 23437) Use of int in maxseg socket option. [ 585.288425][T23437] Use struct sctp_assoc_value instead [ 585.401817][T23444] syzkaller0: entered promiscuous mode [ 585.421910][T23444] syzkaller0: entered allmulticast mode [ 585.716332][T23462] syzkaller0: entered promiscuous mode [ 585.730630][T23462] syzkaller0: entered allmulticast mode [ 585.857714][T23476] netlink: 'syz.0.5094': attribute type 1 has an invalid length. [ 586.040574][T23476] 8021q: adding VLAN 0 to HW filter on device bond5 [ 586.174167][T23488] bond5: (slave gretap2): making interface the new active one [ 586.184632][T23488] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 586.204620][T23495] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 586.233666][T23495] team1: entered promiscuous mode [ 586.253354][T23495] team1: entered allmulticast mode [ 586.449973][T23517] bond0: (slave gre0): Error: Device type is different from other slaves [ 586.533691][T23527] sock: sock_timestamping_bind_phc: sock not bind to device [ 586.961802][T23546] netlink: 'syz.1.5111': attribute type 1 has an invalid length. [ 586.991655][T23546] 8021q: adding VLAN 0 to HW filter on device bond8 [ 587.011628][ T5158] block nbd2: Possible stuck request ffff888026240000: control (read@0,1024B). Runtime 270 seconds [ 587.022736][ T5158] block nbd2: Possible stuck request ffff888026240200: control (read@1024,1024B). Runtime 270 seconds [ 587.034057][ T5158] block nbd2: Possible stuck request ffff888026240400: control (read@2048,1024B). Runtime 270 seconds [ 587.045554][ T5158] block nbd2: Possible stuck request ffff888026240600: control (read@3072,1024B). Runtime 270 seconds [ 587.123800][T23554] tipc: Enabling of bearer rejected, failed to enable media [ 587.273173][T23565] netlink: 'syz.3.5119': attribute type 6 has an invalid length. [ 587.314032][T23565] sit1: entered promiscuous mode [ 587.321541][T23565] sit1: entered allmulticast mode [ 587.550098][T23592] netlink: 'syz.0.5126': attribute type 1 has an invalid length. [ 587.585718][T23592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 587.819293][T23612] veth7: entered promiscuous mode [ 587.920229][T23624] netlink: 'syz.3.5135': attribute type 10 has an invalid length. [ 587.945785][T23624] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.953297][T23624] bridge0: port 2(bridge_slave_1) entered listening state [ 587.960830][T23624] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.968013][T23624] bridge0: port 1(bridge_slave_0) entered listening state [ 587.986549][T23624] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 588.412820][T23649] __nla_validate_parse: 34 callbacks suppressed [ 588.412838][T23649] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5141'. [ 588.573183][T23662] netlink: 'syz.2.5144': attribute type 3 has an invalid length. [ 588.600544][T23662] netlink: 'syz.2.5144': attribute type 1 has an invalid length. [ 588.619879][T23662] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5144'. [ 588.679810][T23662] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5144'. [ 588.689796][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5144'. [ 588.939691][T23682] veth3: entered allmulticast mode [ 589.537095][T23729] syzkaller0: create flow: hash 3973542189 index 1 [ 589.566304][T23724] xt_TPROXY: Can be used only with -p tcp or -p udp [ 589.627237][T23734] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5162'. [ 589.674356][T23734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5162'. [ 589.719458][T23734] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5162'. [ 589.750368][T23734] netlink: 'syz.0.5162': attribute type 2 has an invalid length. [ 589.790821][T23734] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5162'. [ 589.830581][T23728] syzkaller0: entered promiscuous mode [ 589.836144][T23728] syzkaller0: entered allmulticast mode [ 589.843652][ T9265] syzkaller0: tun_net_xmit 76 [ 589.849406][ T9265] syzkaller0: tun_net_xmit 48 [ 589.855073][T23744] syzkaller0: delete flow: hash 3973542189 index 1 [ 591.826228][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5168'. [ 592.758271][ T5189] udevd[5189]: worker [10398] /devices/virtual/block/nbd2 timeout; kill it [ 592.767946][ T5189] udevd[5189]: seq 15203 '/devices/virtual/block/nbd2' killed [ 593.240390][T23797] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5169'. [ 593.399639][T23806] syzkaller0: entered promiscuous mode [ 593.408827][T23806] syzkaller0: entered allmulticast mode [ 593.472535][T23812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5175'. [ 593.476326][T23814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5176'. [ 593.484828][T23812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5175'. [ 593.501063][T23810] netlink: 'syz.2.5174': attribute type 9 has an invalid length. [ 593.501543][T23809] syzkaller0: entered promiscuous mode [ 593.515017][T23809] syzkaller0: entered allmulticast mode [ 593.542124][T23814] : entered promiscuous mode [ 593.551022][T23812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5175'. [ 593.598008][T23809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5173'. [ 593.617780][T23809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5173'. [ 593.746586][T23827] x_tables: duplicate underflow at hook 1 [ 593.802567][T23830] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5181'. [ 593.822701][T23830] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5181'. [ 593.836660][T23830] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5181'. [ 593.849984][T23830] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5181'. [ 594.024460][T23842] netlink: 'syz.3.5184': attribute type 10 has an invalid length. [ 594.051089][T23843] netlink: 'syz.3.5184': attribute type 10 has an invalid length. [ 594.072764][T23850] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 594.072790][T23842] bond0: (slave wlan1): Opening slave failed [ 594.110564][T23843] bond0: (slave wlan1): Opening slave failed [ 594.119751][T23852] tc_dump_action: action bad kind [ 594.256095][T23861] netlink: 'syz.1.5190': attribute type 29 has an invalid length. [ 595.588904][T23947] sctp: [Deprecated]: syz.1.5215 (pid 23947) Use of int in maxseg socket option. [ 595.588904][T23947] Use struct sctp_assoc_value instead [ 595.605788][T23950] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 595.623598][T23950] bond8 (unregistering): Released all slaves [ 596.055039][T23988] tipc: Enabling of bearer rejected, already enabled [ 596.201868][T23998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.353684][T24006] netlink: 'syz.4.5236': attribute type 3 has an invalid length. [ 596.359767][T24007] netlink: 'syz.1.5238': attribute type 1 has an invalid length. [ 596.364524][T24006] netlink: 'syz.4.5236': attribute type 1 has an invalid length. [ 596.377854][T24006] NCSI netlink: No device for ifindex 813332738 [ 596.459228][T24007] 8021q: adding VLAN 0 to HW filter on device bond9 [ 596.860823][T24044] : renamed from hsr0 (while UP) [ 596.961002][T24047] : entered promiscuous mode [ 597.227862][T24063] dvmrp0: left allmulticast mode [ 597.282692][T24065] bond0: Caught tx_queue_len zero misconfig [ 597.590173][T24086] syzkaller0: entered promiscuous mode [ 597.595783][T24086] syzkaller0: entered allmulticast mode [ 597.612054][T24091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.235444][T24090] tipc: Enabled bearer , priority 0 [ 599.357686][T24099] syzkaller0: entered promiscuous mode [ 599.363313][T24099] syzkaller0: entered allmulticast mode [ 599.370370][T24099] tipc: Resetting bearer [ 599.411510][T24117] syzkaller1: entered promiscuous mode [ 599.417323][T24117] syzkaller1: entered allmulticast mode [ 599.426475][T24087] tipc: Resetting bearer [ 600.871982][T24087] tipc: Disabling bearer [ 600.908393][ T8931] tipc: Node number set to 3309986973 [ 600.999713][T24136] __nla_validate_parse: 75 callbacks suppressed [ 600.999732][T24136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5272'. [ 601.018204][T24136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5272'. [ 601.051979][T24140] x_tables: unsorted underflow at hook 2 [ 601.200232][T24148] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5277'. [ 601.238259][T24153] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5278'. [ 601.264970][T24153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5278'. [ 601.302262][T24153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.328427][T24153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.371325][T24153] bond0 (unregistering): Released all slaves [ 601.643138][T24189] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 601.732539][T24195] netlink: 'syz.3.5285': attribute type 10 has an invalid length. [ 601.783073][T24195] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.819120][T24195] bond0: (slave team0): Enslaving as an active interface with an up link [ 601.901880][T24205] syzkaller0: entered promiscuous mode [ 601.904053][T24206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5292'. [ 601.911412][T24205] syzkaller0: entered allmulticast mode [ 602.141168][T24219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5296'. [ 602.232775][T24219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5296'. [ 602.271500][T24230] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 602.299796][T24223] can: request_module (can-proto-4) failed. [ 602.395012][T24241] netlink: 'syz.2.5299': attribute type 4 has an invalid length. [ 602.641640][T24256] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5305'. [ 602.710516][T24263] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5305'. [ 602.786502][T24252] xt_hashlimit: size too large, truncated to 1048576 [ 602.837699][T24261] –: renamed from vxcan1 [ 602.994629][T24269] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 603.020243][T24269] bond7 (unregistering): Released all slaves [ 603.174572][T24286] syzkaller1: entered promiscuous mode [ 603.196303][T24286] syzkaller1: entered allmulticast mode [ 604.917223][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.924500][ C1] bridge0: topology change detected, propagating [ 604.932855][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.940111][ C1] bridge0: topology change detected, propagating [ 605.048881][T24414] netlink: 'syz.2.5353': attribute type 83 has an invalid length. [ 605.306784][T24441] ipt_REJECT: TCP_RESET invalid for non-tcp [ 605.422206][T24445] veth0: Caught tx_queue_len zero misconfig [ 605.472889][T24452] netlink: 'syz.4.5363': attribute type 3 has an invalid length. [ 605.615755][T24462] netlink: 'syz.1.5368': attribute type 63 has an invalid length. [ 605.637567][T24462] netlink: 'syz.1.5368': attribute type 63 has an invalid length. [ 605.809570][T24474] bond10: option miimon: invalid value (18446744073709551585) [ 605.819095][T24474] bond10: option miimon: allowed values 0 - 2147483647 [ 605.828675][T24474] bond10 (unregistering): Released all slaves [ 606.149637][T24497] openvswitch: netlink: Missing key (keys=40, expected=100) [ 606.550934][T24534] x_tables: duplicate entry at hook 3 [ 606.599632][T24536] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 606.662176][T24540] 8021q: VLANs not supported on lo [ 606.787104][T24546] nbd: couldn't find a device at index 3 [ 606.899887][T24552] __nla_validate_parse: 14 callbacks suppressed [ 606.899904][T24552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5397'. [ 606.971585][T24556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5393'. [ 607.055656][T24553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5397'. [ 607.425832][T24568] macvtap0: entered promiscuous mode [ 607.724246][T24582] x_tables: duplicate underflow at hook 4 [ 608.038387][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5415'. [ 608.100377][T24615] netlink: 'syz.1.5418': attribute type 3 has an invalid length. [ 608.127091][T24615] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5418'. [ 608.152786][T24615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5418'. [ 608.163101][T24615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5418'. [ 608.210713][T24626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5422'. [ 608.221808][T24620] sit1: entered promiscuous mode [ 608.226781][T24620] sit1: entered allmulticast mode [ 608.286395][T24626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5422'. [ 608.407809][T24636] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5423'. [ 609.035612][T24695] netlink: 'syz.3.5440': attribute type 4 has an invalid length. [ 609.088925][T24698] netlink: 'syz.3.5440': attribute type 4 has an invalid length. [ 609.595969][T24731] netlink: 'syz.2.5449': attribute type 10 has an invalid length. [ 609.805374][T24748] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 609.920770][T24756] netlink: 'syz.3.5457': attribute type 4 has an invalid length. [ 609.971976][T24757] netlink: 'syz.3.5457': attribute type 4 has an invalid length. [ 610.053298][T24759] FAULT_INJECTION: forcing a failure. [ 610.053298][T24759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.066940][T24759] CPU: 1 UID: 0 PID: 24759 Comm: syz.1.5458 Not tainted syzkaller #0 PREEMPT(full) [ 610.066963][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.066972][T24759] Call Trace: [ 610.066979][T24759] [ 610.066986][T24759] dump_stack_lvl+0xe8/0x150 [ 610.067011][T24759] should_fail_ex+0x412/0x560 [ 610.067036][T24759] _copy_from_user+0x2d/0xb0 [ 610.067054][T24759] ___sys_sendmsg+0x1c6/0x360 [ 610.067073][T24759] ? __lock_acquire+0x6b5/0x2cf0 [ 610.067094][T24759] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.067141][T24759] ? __fget_files+0x2a/0x420 [ 610.067157][T24759] ? __fget_files+0x3a0/0x420 [ 610.067180][T24759] __x64_sys_sendmsg+0x1bd/0x2a0 [ 610.067202][T24759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.067230][T24759] ? __pfx_ksys_write+0x10/0x10 [ 610.067261][T24759] do_syscall_64+0x14d/0xf80 [ 610.067281][T24759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.067297][T24759] ? trace_irq_disable+0x37/0x100 [ 610.067315][T24759] ? clear_bhb_loop+0x40/0x90 [ 610.067335][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.067351][T24759] RIP: 0033:0x7f26dd79c629 [ 610.067367][T24759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.067382][T24759] RSP: 002b:00007f26de67b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.067401][T24759] RAX: ffffffffffffffda RBX: 00007f26dda15fa0 RCX: 00007f26dd79c629 [ 610.067414][T24759] RDX: 0000000000048000 RSI: 0000200000000440 RDI: 0000000000000003 [ 610.067425][T24759] RBP: 00007f26de67b090 R08: 0000000000000000 R09: 0000000000000000 [ 610.067435][T24759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.067445][T24759] R13: 00007f26dda16038 R14: 00007f26dda15fa0 R15: 00007ffc7c6651b8 [ 610.067473][T24759] [ 610.792885][T24806] netlink: 'syz.0.5472': attribute type 4 has an invalid length. [ 610.833529][T24806] netlink: 'syz.0.5472': attribute type 4 has an invalid length. [ 611.028735][T24825] netlink: 'syz.3.5480': attribute type 1 has an invalid length. [ 611.075402][T24825] bond10: entered promiscuous mode [ 611.086979][T24825] bond10: entered allmulticast mode [ 611.094995][T24825] 8021q: adding VLAN 0 to HW filter on device bond10 [ 611.124103][T24828] erspan1: entered allmulticast mode [ 611.346354][T24852] netlink: 'syz.3.5488': attribute type 4 has an invalid length. [ 611.652758][T24870] 8021q: adding VLAN 0 to HW filter on device bond9 [ 611.968974][T24902] __nla_validate_parse: 9 callbacks suppressed [ 611.968991][T24902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5500'. [ 612.070250][T24906] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5502'. [ 612.580479][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5508'. [ 612.612929][T24933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5511'. [ 612.669500][T24930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5508'. [ 612.848184][T24945] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 612.896441][T24945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5515'. [ 613.089487][T24911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5502'. [ 613.091425][T24955] netem: unknown loss type 0 [ 613.126964][T24955] netem: change failed [ 613.138873][T24953] validate_nla: 8 callbacks suppressed [ 613.138891][T24953] netlink: 'syz.3.5518': attribute type 4 has an invalid length. [ 613.189828][T24958] netlink: 'syz.3.5518': attribute type 4 has an invalid length. [ 613.691075][T24989] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5532'. [ 613.779337][T24994] netlink: 'syz.2.5533': attribute type 4 has an invalid length. [ 613.808497][T24994] netlink: 'syz.2.5533': attribute type 4 has an invalid length. [ 613.860738][T25002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5535'. [ 613.974017][T25006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5536'. [ 614.031006][T25008] bridge0: entered allmulticast mode [ 614.057287][T25006] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 614.550153][T25036] netlink: 'syz.1.5547': attribute type 4 has an invalid length. [ 614.575894][T25036] netlink: 'syz.1.5547': attribute type 4 has an invalid length. [ 614.770578][T25066] netlink: 'syz.2.5553': attribute type 16 has an invalid length. [ 614.788903][T25066] netlink: 'syz.2.5553': attribute type 17 has an invalid length. [ 614.885467][T25066] bridge0: left allmulticast mode [ 614.903933][T25066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.888458][T25152] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 616.045379][T25164] xt_TPROXY: Can be used only with -p tcp or -p udp [ 616.055225][T25164] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 616.068533][T25166] ipvlan2: entered promiscuous mode [ 616.427221][T25183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.468136][T25183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.583566][T25188] syzkaller1: entered promiscuous mode [ 616.590592][T25188] syzkaller1: entered allmulticast mode [ 616.875620][T25213] netlink: 'syz.3.5594': attribute type 1 has an invalid length. [ 617.030044][T25213] 8021q: adding VLAN 0 to HW filter on device bond11 [ 617.082063][ T5158] block nbd2: Possible stuck request ffff888026240000: control (read@0,1024B). Runtime 300 seconds [ 617.093019][ T5158] block nbd2: Possible stuck request ffff888026240200: control (read@1024,1024B). Runtime 300 seconds [ 617.106043][ T5158] block nbd2: Possible stuck request ffff888026240400: control (read@2048,1024B). Runtime 300 seconds [ 617.117298][ T5158] block nbd2: Possible stuck request ffff888026240600: control (read@3072,1024B). Runtime 300 seconds [ 617.278966][T25238] __nla_validate_parse: 12 callbacks suppressed [ 617.278987][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5598'. [ 617.392204][T25245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.404587][T25245] netlink: 'syz.3.5601': attribute type 10 has an invalid length. [ 617.442074][T25245] bond0: (slave team0): Releasing backup interface [ 617.509431][T25245] team0 (unregistering): Port device team_slave_0 removed [ 617.563721][T25258] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5604'. [ 617.576557][T25245] team0 (unregistering): Port device team_slave_1 removed [ 617.604065][T25263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5602'. [ 617.658880][T25258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5604'. [ 617.697421][T25258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5604'. [ 617.857056][T25278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5607'. [ 617.949562][T25278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.974532][T25288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 618.065523][T25282] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.210660][T25307] validate_nla: 1 callbacks suppressed [ 618.210680][T25307] netlink: 'syz.4.5619': attribute type 21 has an invalid length. [ 618.357545][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 618.364856][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 618.417866][T25320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5620'. [ 618.424845][T25319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5622'. [ 618.472432][T25325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5623'. [ 618.480317][T25319] bond10: entered promiscuous mode [ 618.491613][T25319] 8021q: adding VLAN 0 to HW filter on device bond10 [ 618.634343][T25327] 8021q: adding VLAN 0 to HW filter on device bond10 [ 618.643291][T25327] bond10: (slave sit2): The slave device specified does not support setting the MAC address [ 618.655688][T25327] bond10: (slave sit2): Error -95 calling set_mac_address [ 618.876611][T25345] netlink: 'syz.0.5628': attribute type 4 has an invalid length. [ 618.896785][T25347] openvswitch: netlink: IP tunnel dst address not specified [ 619.604280][T25396] netlink: 'syz.4.5648': attribute type 13 has an invalid length. [ 619.642045][T25396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 619.850327][T25406] 8021q: adding VLAN 0 to HW filter on device bond11 [ 619.895082][T25406] 8021q: adding VLAN 0 to HW filter on device bond11 [ 619.928638][T25406] bond11: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 619.978730][T25406] bond11: (slave ip6tnl0): Error -95 calling set_mac_address [ 620.051239][T25410] bond11 (unregistering): Released all slaves [ 620.207820][ T5835] block nbd6: Receive control failed (result -32) [ 620.613208][T25446] mac80211_hwsim hwsim28 wlan1: Caught tx_queue_len zero misconfig [ 620.667343][T25446] tipc: Failed to remove unknown binding: 66,0,0/0:1080510675/1080510676 [ 620.715477][T25446] tipc: Failed to remove unknown binding: 66,0,0/0:1080510675/1080510676 [ 621.358868][T25477] syzkaller1: entered promiscuous mode [ 621.364377][T25477] syzkaller1: entered allmulticast mode [ 621.400410][T25480] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002 [ 621.538412][T25490] netlink: 'syz.4.5677': attribute type 10 has an invalid length. [ 621.561727][T25492] netlink: 'syz.2.5678': attribute type 1 has an invalid length. [ 621.593108][T25492] netlink: 'syz.2.5678': attribute type 1 has an invalid length. [ 621.611109][T25492] netlink: 'syz.2.5678': attribute type 8 has an invalid length. [ 622.188908][T25531] netlink: 'syz.4.5690': attribute type 11 has an invalid length. [ 622.428359][T25549] x_tables: unsorted entry at hook 1 [ 622.599203][T25560] __nla_validate_parse: 22 callbacks suppressed [ 622.599223][T25560] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5698'. [ 622.656190][T25560] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 622.680921][T25557] netlink: 'syz.1.5699': attribute type 1 has an invalid length. [ 622.707894][T25557] netlink: 704 bytes leftover after parsing attributes in process `syz.1.5699'. [ 622.751080][T25568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5702'. [ 622.785584][T25568] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5702'. [ 622.808817][T25570] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5703'. [ 622.822578][T25568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5702'. [ 622.833232][T25572] xt_ipcomp: unknown flags 1D [ 622.841469][T25572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5705'. [ 622.858395][T25568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5702'. [ 622.880805][T25574] netlink: 'syz.2.5704': attribute type 1 has an invalid length. [ 622.991758][T25578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5706'. [ 623.002631][T25578] tipc: Invalid UDP bearer configuration [ 623.002683][T25578] tipc: Enabling of bearer rejected, failed to enable media [ 623.099168][T25587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.115306][T25590] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5710'. [ 623.876127][T25645] openvswitch: netlink: Key type 31 is not supported [ 624.144361][T25659] netlink: 'syz.2.5732': attribute type 15 has an invalid length. [ 624.168516][T25056] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 624.178136][T25659] netlink: 'syz.2.5732': attribute type 15 has an invalid length. [ 624.199322][T25056] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 624.209221][T25056] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 624.239681][T25056] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 624.486041][T25683] netlink: 'syz.0.5736': attribute type 7 has an invalid length. [ 624.489616][T25679] syzkaller0: entered promiscuous mode [ 624.519377][T25679] syzkaller0: entered allmulticast mode [ 624.624637][T25689] netlink: 'syz.0.5738': attribute type 39 has an invalid length. [ 624.712598][T25691] syzkaller0: entered promiscuous mode [ 624.719671][T25691] syzkaller0: entered allmulticast mode [ 624.764534][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 624.773497][T25691] tipc: Enabled bearer , priority 0 [ 624.795350][T25690] tipc: Resetting bearer [ 624.875545][T25690] tipc: Disabling bearer [ 624.981419][T25707] netlink: 'syz.3.5745': attribute type 1 has an invalid length. [ 625.205077][T25725] macsec2: entered promiscuous mode [ 625.453842][T25748] xt_HMARK: proto mask must be zero with L3 mode [ 625.549207][T25752] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001 [ 625.574057][T25752] x_tables: duplicate underflow at hook 1 [ 625.608923][T25757] netlink: 'syz.0.5762': attribute type 4 has an invalid length. [ 626.058588][T25786] openvswitch: netlink: EtherType 50a is less than min 600 [ 626.209522][T25790] veth0: entered promiscuous mode [ 626.226285][T25789] veth0: left promiscuous mode [ 627.169736][T25835] syzkaller0: entered promiscuous mode [ 627.178008][T25835] syzkaller0: entered allmulticast mode [ 627.191915][T25835] tipc: Enabled bearer , priority 0 [ 627.230422][T25834] tipc: Resetting bearer [ 627.328211][T25834] tipc: Disabling bearer [ 627.355266][T25837] can: request_module (can-proto-4) failed. [ 627.518579][T25856] bridge: RTM_NEWNEIGH with invalid ether address [ 627.625508][T25861] __nla_validate_parse: 24 callbacks suppressed [ 627.625525][T25861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5783'. [ 627.698353][T25861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5783'. [ 628.024804][T25897] team_slave_0: entered promiscuous mode [ 628.030921][T25897] team_slave_1: entered promiscuous mode [ 628.041242][T25901] netlink: 'syz.0.5796': attribute type 5 has an invalid length. [ 628.058393][T25897] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 628.072433][T25897] team0: Device macvlan3 is already an upper device of the team interface [ 628.083107][T25897] team_slave_0: left promiscuous mode [ 628.088587][T25897] team_slave_1: left promiscuous mode [ 628.126477][T25907] netlink: 'syz.2.5795': attribute type 24 has an invalid length. [ 628.135507][T25904] bond11: option packets_per_slave: invalid value (18446744073709551615) [ 628.144273][T25904] bond11: option packets_per_slave: allowed values 0 - 65535 [ 628.155191][T25904] bond11 (unregistering): Released all slaves [ 628.209724][T25911] ipt_ECN: cannot use operation on non-tcp rule [ 628.356172][T25919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5800'. [ 628.794771][ T8931] IPVS: starting estimator thread 0... [ 628.887582][T25952] IPVS: using max 36 ests per chain, 86400 per kthread [ 629.216602][T25990] IPv6: addrconf: prefix option has invalid lifetime [ 629.850267][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 629.871991][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 629.880644][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 629.891595][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 629.899465][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 629.959883][T15796] syz_tun (unregistering): left promiscuous mode [ 630.005146][T26014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5828'. [ 630.051944][ T9263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.091332][T26017] tipc: Enabling of bearer rejected, already enabled [ 630.144434][ T9263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.248981][ T9263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.287207][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 630.295234][ C0] lec:lec_tx_timeout: lec0 [ 630.372211][ T9263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.474931][T26030] netlink: zone id is out of range [ 630.498971][T26030] netlink: zone id is out of range [ 630.513141][T26030] netlink: zone id is out of range [ 630.538030][T26030] netlink: zone id is out of range [ 630.561582][T26030] netlink: zone id is out of range [ 630.572938][T26030] netlink: zone id is out of range [ 630.578581][T26030] netlink: zone id is out of range [ 630.584147][T26030] netlink: zone id is out of range [ 630.590534][T26030] netlink: zone id is out of range [ 630.628449][T26030] netlink: 'syz.4.5831': attribute type 2 has an invalid length. [ 630.876359][T26042] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.5834'. [ 630.952023][ T9263] bridge_slave_1: left allmulticast mode [ 630.961437][ T9263] bridge_slave_1: left promiscuous mode [ 630.982396][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.984896][T26054] atomic_op ffff8880560ff198 conn xmit_atomic 0000000000000000 [ 630.999690][T26050] netlink: 'syz.2.5836': attribute type 6 has an invalid length. [ 631.023545][ T9263] bridge_slave_0: left allmulticast mode [ 631.044526][ T9263] bridge_slave_0: left promiscuous mode [ 631.058224][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.215915][ T9263] ip6gretap0 (unregistering): left promiscuous mode [ 631.231347][T26066] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5838'. [ 631.263877][ T9263] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 631.464793][ T9263] bond1 (unregistering): (slave gretap1): Releasing active interface [ 631.848828][ T9263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.861081][ T9263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.873020][ T9263] bond0 (unregistering): (slave team0): Releasing backup interface [ 631.884992][ T9263] bond0 (unregistering): Released all slaves [ 631.902616][ T9263] bond1 (unregistering): Released all slaves [ 631.915184][ T9263] bond2 (unregistering): Released all slaves [ 631.930590][ T9263] bond3 (unregistering): Released all slaves [ 631.953461][ T9263] bond4 (unregistering): Released all slaves [ 631.959941][ T51] Bluetooth: hci3: command tx timeout [ 631.975507][ T9263] bond5 (unregistering): Released all slaves [ 631.995025][ T9263] bond6 (unregistering): Released all slaves [ 632.012273][ T9263] bond7 (unregistering): Released all slaves [ 632.038364][ T9263] bond8 (unregistering): Released all slaves [ 632.052060][ T9263] bond9 (unregistering): Released all slaves [ 632.064292][ T9263] bond10 (unregistering): Released all slaves [ 632.077597][ T9263] bond11 (unregistering): Released all slaves [ 632.179224][ T9263] tipc: Left network mode [ 632.299715][T26086] IPv6: NLM_F_CREATE should be specified when creating new route [ 632.399334][T26010] chnl_net:caif_netlink_parms(): no params data found [ 632.409247][ T9263] IPVS: stopping backup sync thread 17673 ... [ 632.764180][T26096] syzkaller0: entered promiscuous mode [ 632.769767][T26096] syzkaller0: entered allmulticast mode [ 632.795347][T26102] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5846'. [ 632.806078][T26102] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5846'. [ 632.816333][T26102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5846'. [ 632.864382][T26010] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.871676][T26010] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.879268][T26010] bridge_slave_0: entered allmulticast mode [ 632.886643][T26010] bridge_slave_0: entered promiscuous mode [ 632.904073][T26010] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.923920][T26010] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.949748][T26010] bridge_slave_1: entered allmulticast mode [ 632.969271][T26010] bridge_slave_1: entered promiscuous mode [ 633.278918][T26010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.354457][T26116] netlink: 'syz.0.5848': attribute type 1 has an invalid length. [ 633.362485][T26116] netlink: 'syz.0.5848': attribute type 4 has an invalid length. [ 633.370582][T26116] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5848'. [ 633.405145][T26010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.569198][T26114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5847'. [ 633.819037][T26134] netlink: 'syz.0.5849': attribute type 1 has an invalid length. [ 633.872807][T26121] syzkaller0: entered promiscuous mode [ 633.879207][T26121] syzkaller0: entered allmulticast mode [ 633.912395][T26010] team0: Port device team_slave_0 added [ 633.984450][T26010] team0: Port device team_slave_1 added [ 634.033055][T11675] lec:lec_start_xmit: lec0:No lecd attached [ 634.040629][ T51] Bluetooth: hci3: command tx timeout [ 634.216642][T26010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.249071][T26010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.251500][T26144] netlink: 'syz.2.5852': attribute type 13 has an invalid length. [ 634.319551][T26010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.327454][T26145] netlink: 'syz.2.5852': attribute type 16 has an invalid length. [ 634.346607][T26010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.357459][T26145] netlink: 'syz.2.5852': attribute type 17 has an invalid length. [ 634.366769][T26010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.412680][T26154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5854'. [ 634.427881][T26010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.592691][T26147] ip_vti0: left promiscuous mode [ 634.642845][ T9263] hsr_slave_0: left promiscuous mode [ 634.652184][ T9263] hsr_slave_1: left promiscuous mode [ 634.836032][ T9271] smc: removing ib device  [ 634.969436][ T9263] team0 (unregistering): Port device team_slave_1 removed [ 634.993022][ T9263] team0 (unregistering): Port device team_slave_0 removed [ 635.166702][ T9263] team0 (unregistering): Port device dummy0 removed [ 635.222747][T26145] net_ratelimit: 46 callbacks suppressed [ 635.222757][T26145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.412386][ T8931] ================================================================== [ 635.420492][ T8931] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 635.429790][ T8931] Read of size 8 at addr ffff88807de922f0 by task kworker/1:13/8931 [ 635.437757][ T8931] [ 635.440067][ T8931] CPU: 1 UID: 0 PID: 8931 Comm: kworker/1:13 Not tainted syzkaller #0 PREEMPT(full) [ 635.440084][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.440094][ T8931] Workqueue: events smc_ib_port_event_work [ 635.440114][ T8931] Call Trace: [ 635.440120][ T8931] [ 635.440126][ T8931] dump_stack_lvl+0xe8/0x150 [ 635.440144][ T8931] print_report+0xba/0x230 [ 635.440159][ T8931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 635.440175][ T8931] kasan_report+0x117/0x150 [ 635.440193][ T8931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 635.440210][ T8931] __ethtool_get_link_ksettings+0x5e/0x170 [ 635.440227][ T8931] ib_get_eth_speed+0x180/0x7f0 [ 635.440241][ T8931] ? rxe_query_port+0x7e/0x3d0 [ 635.440260][ T8931] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 635.440276][ T8931] ? do_raw_spin_unlock+0xf5/0x210 [ 635.440297][ T8931] rxe_query_port+0x93/0x3d0 [ 635.440316][ T8931] ib_query_port+0x170/0x830 [ 635.440332][ T8931] smc_ib_port_event_work+0x15a/0x940 [ 635.440349][ T8931] ? process_scheduled_works+0xa0f/0x17a0 [ 635.440363][ T8931] ? process_scheduled_works+0xa0f/0x17a0 [ 635.440377][ T8931] process_scheduled_works+0xaec/0x17a0 [ 635.440400][ T8931] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.440415][ T8931] ? assign_work+0x3d5/0x5e0 [ 635.440429][ T8931] worker_thread+0xa50/0xfc0 [ 635.440451][ T8931] kthread+0x388/0x470 [ 635.440468][ T8931] ? __pfx_worker_thread+0x10/0x10 [ 635.440480][ T8931] ? __pfx_kthread+0x10/0x10 [ 635.440496][ T8931] ret_from_fork+0x51e/0xb90 [ 635.440512][ T8931] ? __pfx_ret_from_fork+0x10/0x10 [ 635.440526][ T8931] ? __switch_to+0xc7d/0x1400 [ 635.440539][ T8931] ? __pfx_kthread+0x10/0x10 [ 635.440555][ T8931] ret_from_fork_asm+0x1a/0x30 [ 635.440577][ T8931] [ 635.440582][ T8931] [ 635.612632][ T8931] Allocated by task 15796: [ 635.617028][ T8931] kasan_save_track+0x3e/0x80 [ 635.621695][ T8931] __kasan_kmalloc+0x93/0xb0 [ 635.626266][ T8931] __kvmalloc_node_noprof+0x528/0x8a0 [ 635.631621][ T8931] alloc_netdev_mqs+0xa6/0x11b0 [ 635.636458][ T8931] rtnl_create_link+0x31f/0xd70 [ 635.641292][ T8931] rtnl_newlink_create+0x277/0xb70 [ 635.646383][ T8931] rtnl_newlink+0x1666/0x1be0 [ 635.651044][ T8931] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 635.655962][ T8931] netlink_rcv_skb+0x232/0x4b0 [ 635.660705][ T8931] netlink_unicast+0x80f/0x9b0 [ 635.665450][ T8931] netlink_sendmsg+0x813/0xb40 [ 635.670195][ T8931] __sys_sendto+0x709/0x7a0 [ 635.674681][ T8931] __x64_sys_sendto+0xde/0x100 [ 635.679424][ T8931] do_syscall_64+0x14d/0xf80 [ 635.683998][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.689943][ T8931] [ 635.692263][ T8931] Freed by task 9263: [ 635.696231][ T8931] kasan_save_track+0x3e/0x80 [ 635.700906][ T8931] kasan_save_free_info+0x46/0x50 [ 635.705921][ T8931] __kasan_slab_free+0x5c/0x80 [ 635.710669][ T8931] kfree+0x1c1/0x610 [ 635.714549][ T8931] device_release+0x9e/0x1d0 [ 635.719146][ T8931] kobject_put+0x228/0x560 [ 635.723555][ T8931] netdev_run_todo+0xc75/0xde0 [ 635.728308][ T8931] default_device_exit_batch+0x986/0xa00 [ 635.733921][ T8931] ops_undo_list+0x52b/0x940 [ 635.738490][ T8931] cleanup_net+0x56b/0x800 [ 635.742890][ T8931] process_scheduled_works+0xaec/0x17a0 [ 635.748414][ T8931] worker_thread+0xa50/0xfc0 [ 635.752988][ T8931] kthread+0x388/0x470 [ 635.757165][ T8931] ret_from_fork+0x51e/0xb90 [ 635.761747][ T8931] ret_from_fork_asm+0x1a/0x30 [ 635.766600][ T8931] [ 635.768916][ T8931] The buggy address belongs to the object at ffff88807de92000 [ 635.768916][ T8931] which belongs to the cache kmalloc-cg-4k of size 4096 [ 635.783309][ T8931] The buggy address is located 752 bytes inside of [ 635.783309][ T8931] freed 4096-byte region [ffff88807de92000, ffff88807de93000) [ 635.797173][ T8931] [ 635.799483][ T8931] The buggy address belongs to the physical page: [ 635.805881][ T8931] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7de90 [ 635.814620][ T8931] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 635.823107][ T8931] memcg:ffff88807de91011 [ 635.827331][ T8931] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 635.834869][ T8931] page_type: f5(slab) [ 635.838835][ T8931] raw: 00fff00000000040 ffff88813feb6500 dead000000000100 dead000000000122 [ 635.847396][ T8931] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88807de91011 [ 635.855961][ T8931] head: 00fff00000000040 ffff88813feb6500 dead000000000100 dead000000000122 [ 635.864710][ T8931] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88807de91011 [ 635.873365][ T8931] head: 00fff00000000003 ffffea0001f7a401 00000000ffffffff 00000000ffffffff [ 635.882016][ T8931] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 635.890660][ T8931] page dumped because: kasan: bad access detected [ 635.897086][ T8931] page_owner tracks the page as allocated [ 635.902807][ T8931] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15921, tgid 15919 (syz.3.2855), ts 392567663735, free_ts 392546658138 [ 635.924319][ T8931] post_alloc_hook+0x228/0x280 [ 635.929074][ T8931] get_page_from_freelist+0x24dc/0x2580 [ 635.934608][ T8931] __alloc_frozen_pages_noprof+0x18d/0x380 [ 635.940397][ T8931] allocate_slab+0x77/0x660 [ 635.944892][ T8931] refill_objects+0x331/0x3c0 [ 635.949544][ T8931] __pcs_replace_empty_main+0x2b9/0x620 [ 635.955070][ T8931] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 635.961485][ T8931] kmemdup_noprof+0x2b/0x70 [ 635.965967][ T8931] __addrconf_sysctl_register+0xa7/0x4d0 [ 635.971667][ T8931] addrconf_sysctl_register+0x168/0x1c0 [ 635.977195][ T8931] ipv6_add_dev+0xd26/0x13a0 [ 635.981779][ T8931] addrconf_notify+0x771/0x1050 [ 635.986619][ T8931] notifier_call_chain+0x19d/0x3a0 [ 635.991725][ T8931] register_netdevice+0x173a/0x1cf0 [ 635.996908][ T8931] tun_set_iff+0x844/0xf00 [ 636.001313][ T8931] __tun_chr_ioctl+0x7bb/0x1e10 [ 636.006148][ T8931] page last free pid 11919 tgid 11919 stack trace: [ 636.012624][ T8931] __free_frozen_pages+0xbf8/0xd70 [ 636.017721][ T8931] __slab_free+0x263/0x2b0 [ 636.022124][ T8931] qlist_free_all+0x97/0x100 [ 636.026695][ T8931] kasan_quarantine_reduce+0x148/0x160 [ 636.032135][ T8931] __kasan_slab_alloc+0x22/0x80 [ 636.036973][ T8931] __kmalloc_noprof+0x316/0x760 [ 636.041807][ T8931] tomoyo_realpath_from_path+0xe3/0x5d0 [ 636.047337][ T8931] tomoyo_path_number_perm+0x246/0x630 [ 636.052800][ T8931] tomoyo_path_mknod+0x14a/0x1a0 [ 636.057720][ T8931] security_path_mknod+0x176/0x370 [ 636.062826][ T8931] may_o_create+0x2d/0x370 [ 636.067225][ T8931] path_openat+0x1041/0x3860 [ 636.071809][ T8931] do_file_open+0x23e/0x4a0 [ 636.076309][ T8931] do_sys_openat2+0x113/0x200 [ 636.080965][ T8931] __x64_sys_openat+0x138/0x170 [ 636.085813][ T8931] do_syscall_64+0x14d/0xf80 [ 636.090565][ T8931] [ 636.092870][ T8931] Memory state around the buggy address: [ 636.098484][ T8931] ffff88807de92180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.106612][ T8931] ffff88807de92200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.114651][ T8931] >ffff88807de92280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.122689][ T8931] ^ [ 636.130392][ T8931] ffff88807de92300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.138441][ T8931] ffff88807de92380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.146477][ T8931] ================================================================== [ 636.155007][ T51] Bluetooth: hci3: command tx timeout [ 636.198936][ T8931] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 636.206140][ T8931] CPU: 1 UID: 0 PID: 8931 Comm: kworker/1:13 Not tainted syzkaller #0 PREEMPT(full) [ 636.215666][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.225706][ T8931] Workqueue: events smc_ib_port_event_work [ 636.231501][ T8931] Call Trace: [ 636.235195][ T8931] [ 636.238117][ T8931] vpanic+0x1e0/0x670 [ 636.242106][ T8931] panic+0xc5/0xd0 [ 636.245817][ T8931] ? __pfx_panic+0x10/0x10 [ 636.250223][ T8931] ? preempt_schedule_thunk+0x16/0x30 [ 636.255580][ T8931] ? preempt_schedule_thunk+0x16/0x30 [ 636.260945][ T8931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 636.266957][ T8931] check_panic_on_warn+0x89/0xb0 [ 636.271904][ T8931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 636.277865][ T8931] end_report+0x6f/0x140 [ 636.282093][ T8931] kasan_report+0x128/0x150 [ 636.286583][ T8931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 636.292546][ T8931] __ethtool_get_link_ksettings+0x5e/0x170 [ 636.298359][ T8931] ib_get_eth_speed+0x180/0x7f0 [ 636.303222][ T8931] ? rxe_query_port+0x7e/0x3d0 [ 636.307991][ T8931] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 636.313367][ T8931] ? do_raw_spin_unlock+0xf5/0x210 [ 636.318480][ T8931] rxe_query_port+0x93/0x3d0 [ 636.323069][ T8931] ib_query_port+0x170/0x830 [ 636.327656][ T8931] smc_ib_port_event_work+0x15a/0x940 [ 636.333015][ T8931] ? process_scheduled_works+0xa0f/0x17a0 [ 636.338716][ T8931] ? process_scheduled_works+0xa0f/0x17a0 [ 636.344418][ T8931] process_scheduled_works+0xaec/0x17a0 [ 636.349970][ T8931] ? __pfx_process_scheduled_works+0x10/0x10 [ 636.355935][ T8931] ? assign_work+0x3d5/0x5e0 [ 636.360512][ T8931] worker_thread+0xa50/0xfc0 [ 636.365094][ T8931] kthread+0x388/0x470 [ 636.369328][ T8931] ? __pfx_worker_thread+0x10/0x10 [ 636.374420][ T8931] ? __pfx_kthread+0x10/0x10 [ 636.378993][ T8931] ret_from_fork+0x51e/0xb90 [ 636.383568][ T8931] ? __pfx_ret_from_fork+0x10/0x10 [ 636.388660][ T8931] ? __switch_to+0xc7d/0x1400 [ 636.393321][ T8931] ? __pfx_kthread+0x10/0x10 [ 636.397896][ T8931] ret_from_fork_asm+0x1a/0x30 [ 636.402653][ T8931] [ 636.406062][ T8931] Kernel Offset: disabled [ 636.410371][ T8931] Rebooting in 86400 seconds..