last executing test programs: 1m11.688788398s ago: executing program 4 (id=2649): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x400, 0xfffd, 0x3, 0x2, 0x89}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r1, 0x22, "df57624d7ac3dcbfb4be8d11962e9d914bb4717258873823a47112627c6767f01896"}, &(0x7f00000000c0)=0x2a) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000100)={0x1, 0x1}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r2, 0xfffd, 0x3, 0xfffffffc, 0x4, 0x6}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@dev, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x700, 0x8, 0x9, 0xd, {{0x2e, 0x4, 0x0, 0x10, 0xb8, 0x68, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @broadcast, {[@cipso={0x86, 0x58, 0x3, [{0x5, 0xc, "2dc0f809119bca63c1e7"}, {0x2, 0xa, "f70c7231304727fa"}, {0x1, 0xb, "7548a2b329cd36751d"}, {0x7, 0xd, "22330ca9c73b176401eccd"}, {0x2, 0x2}, {0x6, 0x12, "05595d5c326431ac3f0e6255598281c2"}, {0x6, 0x9, "134928b233f681"}, {0x1, 0x7, "7fa5469cc9"}]}, @end, @generic={0x86, 0x11, "0e33cf93f065eff83327b73fc1a10d"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0x6, [{@rand_addr=0x64010101, 0xfffffffd}, {@private=0xa010102, 0x3}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb0b7}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000500)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000540)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000580)={@private2, 0x0}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x1, 0xca0, 0x1c, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x10, 0x4, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xd, 0x7, 0x1, 0x60, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x80, 0x1, 0x7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0xd9, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a80)={0x0, @rand_addr, @loopback}, &(0x7f0000000ac0)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000b00)={@broadcast, @remote, 0x0}, &(0x7f0000000b40)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x1, 0x80, 0x3, 0x0, {{0xe, 0x4, 0x3, 0x1, 0x38, 0x64, 0x0, 0x2, 0x29, 0x0, @loopback, @loopback, {[@rr={0x7, 0x23, 0xba, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @rand_addr=0x64010100, @empty, @broadcast, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)=0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000d00)={0x0, @empty, @private}, &(0x7f0000000d40)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000001040)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001000)={&(0x7f0000000dc0)={0x214, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1711689f46696b6c}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4084840}, 0x0) r21 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r21, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001080)="dc32732f242ab760a52f2c969ad6174774de5651a44eca2aba93fdac73b936303391988b1dc268cf8d9101fc85c675c41c142e3c136c5ffee72d15798820f0ab9f58f68c403720fd16ec279946742e6c16fc1ee015024d726caffa7527bb601ec40d37c31564c58a15d0c72a1ee05399a8c858b0dda001b4cb06760ee70cb5c8cc71fdc88c301c572c6743cbab64c772b6cd1d23c1a9b1da39ed45eb4e", 0x9d}], 0x1, &(0x7f0000001180)=[{0x70, 0x10d, 0x10001, "7d87b00b2020f1c3c1aa912dab762061f5d5cbcc76870ed9eb5962f792f8b4461e3609d4c181c76984b1b580ca68eaf56dd691b6a8c94d81c0d0a57a0e5051e3fe5eaab114d71b3af239479aaaab69d9034f6a867c7c1448c539ac6b1b8f"}], 0x70}, 0x800) getsockopt$kcm_KCM_RECV_DISABLE(r21, 0x119, 0x1, &(0x7f0000001240), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000001280)={'bond_slave_0\x00', {0x2, 0x0, @remote}}) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x4080) 1m11.501447803s ago: executing program 4 (id=2653): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x3b, 0xfc, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x20, 0x10, 0x9, 0xffff}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in6=@loopback, 0x4e22, 0x10, 0x4e23, 0x0, 0xa, 0xa0, 0xe0, 0x1d, r1, r3}, {0x7, 0x6, 0x7, 0x4, 0x100, 0x4, 0xb2f, 0x7ff}, {0x7f1, 0x3, 0x0, 0x6}, 0x2, 0x6e6bbc, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d6, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3500, 0x4, 0x3, 0x81, 0x5, 0x9, 0x6}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x3b, 0xfc, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x20, 0x10, 0x9, 0xffff}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a0500f434b9eaafdc0a00e9bfde908990817b364e51afe9c01a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9453c0eeba864400000000000000d8e5b1dc91c5499bea097700400000000000000000000000000000000000002819788d86205d947db7ad62b6e98f722ec61dc101adbfa8d0d057e307342511e1e33c25fead122ddacd0aaff826821627a99e8e9c65c5086bcb1df5ea822fb450ef904aed1c6822f05b7604ec9691e8d0c471fba901bf90dea634b2edea2e25c09fbae059aca9ace1b3baf1baf1f0a4f5f1386cd30b9f7019527f91379c1662dcb8"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in6=@loopback, 0x4e22, 0x10, 0x4e23, 0x0, 0xa, 0xa0, 0xe0, 0x1d, r1, r3}, {0x7, 0x6, 0x7, 0x4, 0x100, 0x4, 0xb2f, 0x7ff}, {0x7f1, 0x3, 0x0, 0x6}, 0x2, 0x6e6bbc, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d6, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3500, 0x4, 0x3, 0x81, 0x5, 0x9, 0x6}}, 0xe8) (async) 1m11.385737512s ago: executing program 4 (id=2655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.331438801s ago: executing program 4 (id=2664): sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x2, 0x70bd2d, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESHEX=r1], 0x1c}}, 0x49087) 1m10.172892114s ago: executing program 4 (id=2669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000300df253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740009008300000000007c3a9468d4202ad6a25af0a5107906614750bb06161a7aa09a3fbb"], 0x58}}, 0x110) 1m10.016913613s ago: executing program 4 (id=2674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) close(r2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00', 0x800}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r12, &(0x7f0000000000)=0x8, 0x12) close(r12) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r11, 0x0, r12, 0x0, 0x6, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 54.842950687s ago: executing program 32 (id=2674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) close(r2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00', 0x800}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r12, &(0x7f0000000000)=0x8, 0x12) close(r12) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r11, 0x0, r12, 0x0, 0x6, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.770216698s ago: executing program 5 (id=3372): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f72024fc60", 0x14}], 0x1}, 0x0) socket$phonet(0x23, 0x2, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000850000002300000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, ')\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x2, 0x5, {{0x8, 0x4, 0x3, 0x4, 0x20, 0x66, 0x0, 0x3e, 0x29, 0x0, @private=0xa010110, @loopback, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x7, 0x2}]}, @timestamp_prespec={0x44, 0x4, 0x4c, 0x3, 0x4}]}}}}}) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000f0000000000000081000000950000000000000085000000cd0000008ab33400f0ffffff185800000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000186100000b000000000000000002000085100000050000009500000000000000fcdbaeb5e496f289899598d8a9429a0bc9d1708ab86d06ad4dcd23c1e491daa04cb9d1924cf64d2ae7295b4adf6bd451d4f72256ab4c6a04d1f82042840761af709e2e7cc049349d4ec4f7ca52"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x4d, &(0x7f0000000080)=""/77, 0x0, 0x30, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000440)=[{0x4, 0x3, 0x8, 0x5}, {0x0, 0x5, 0x5, 0x5}, {0x3, 0x5, 0x7, 0x8}, {0x3, 0x4, 0x1, 0x3}, {0x2, 0x4, 0x8, 0x8}, {0x3, 0x4, 0xb, 0x3}, {0x0, 0x3, 0x10, 0x17}, {0x4, 0x5, 0x3, 0x2}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 2.631315705s ago: executing program 2 (id=3374): r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="010a05000101040008001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 2.404399491s ago: executing program 5 (id=3378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) socket$netlink(0x10, 0x3, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000020103090000000080cac70f00000000e7ff000008000480040002790800034000002002060012400800000004000f80e8c10492f4c88c8ab6295890550af1c4b08177fc00820ee5f4"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r5, 0xfffffffd}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x20, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8806}, 0x14008004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x28010000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x40084) 2.26753938s ago: executing program 2 (id=3382): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc82b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, 0x0, 0x0) close(r6) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r11, 0x109, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x97de6e04ce971f7f}, 0x8000) 2.06919891s ago: executing program 5 (id=3385): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x41000}, 0x84) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000180), 0xc, &(0x7f0000000980)={&(0x7f00000001c0)={0x784, r0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x63}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb7}], @NL80211_ATTR_CSA_IES={0x728, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x10, 0x7, 0xfffc, 0x8001, 0x5]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xf7, 0x80, [@ssid={0x0, 0x6, @default_ap_ssid}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x0, 0x0, {0x8, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x5, 0x6}}, @cf={0x4, 0x6, {0xc5, 0x9f, 0x8, 0x3}}, @fast_bss_trans={0x37, 0xa4, {0x7, 0x4, "0431fd0e0327a4af14d44a3ae69c22f9", "a96d373cb4e49849785d1a71d223f5f1a6463f8ea7f358f5380608d1595fd552", "bcbbf0f064adff04c025ad649d7aa082d92dfc277815c994b73b86dad314c567", [{0x2, 0x14, "4b26b553173213d8f132b4db15d3feffe7305a7c"}, {0x4, 0x9, "63d41a7b3c263385c9"}, {0x1, 0xa, "abbfd6a4da3e35116620"}, {0x3, 0x23, "b589c61701698bca2f1f9e64db27afa757e5ebf34f8939e895d3872ced62238251c168"}]}}, @prep={0x83, 0x1f, {{}, 0x8, 0x7, @broadcast, 0x5, @void, 0xffffffff, 0x6, @device_a, 0x5}}]}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x6}, 0xd2, 0xd, @device_b, 0x4000, 0x6, 0x7}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x2ee, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x8}}, 0x200, @default, 0x4e, @void, @void, @void, @void, @val={0x6, 0x2, 0x81}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x4, 0x30, 0x6}}, @val={0x2d, 0x1a, {0x8, 0x1, 0x6, 0x0, {0x400000, 0x5, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x101, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x2, 0x6, 0x69}}, @void, [{0xdd, 0x97, "09c2675068e867f0ef7034e61ea75a9d5cfd18295072c38faebbcde4996026ef853f4c49eda863d735d5458845dde4348b75c14da9861dbacaed4432948d3292d09480d420ab7759e4500152a8fa9eca8aba459c581837e3fc961572c37ed52a6ef16c2d1d4ae9f37478bba9931f300c08dc15c17c2ae387d23d7a275509623f56a3f2b3e7e07a3cf7ebbc4b521c28676ea122bd5088c2"}, {0xdd, 0x4d, "774e9e35d3e136d0ac340288a60e4d913adb1ff24c852cdb888c5529b0b97fe4a748aa27b097b839e114d0e9fcb9b58ef86c1cb29fa7fc1a97f9e0a2ceb4e0a80d3fb7a7f304c8890c606b2833"}, {0xdd, 0x9d, "379a1e18b1bd1226684cb5e713d6cea5a2af8ac0a77f8e3c8927afc972effae0f3db1d03433f88b374ae7d6bfa7d3410fc6c75fe52e436cbfcfdfbb7cb3bc9719fe51a584b2fd47ad4b3c6ef1d14e8d5feafb1ccf51ecf87e1c7cd4e91b97aaf5ade0d922ec6ac96ca150e4176a7583ec6af2a42259ed5afe313b0d2f2a776fa92529e59803ccd4aa7d8dc10e774bf9fa426bba4b5b42710460d37439c"}, {0xdd, 0x7e, "c937ff8903a4a600bbe16f50d466904b90f6c36e4144336a7761c6375de0f984b43de942c9f2399d8631809975beee90dbd1b4bcecdc7537049c3dc923fb01f15e9cd7eb7e6c5912a4bf6702cd3b6d82065e5b83bc6db03e2df98854b4230d1f24fefcd3c0b4043db5f02c3b40b2d2e879dfb474fe87432b66dc73a74ff6"}, {0xdd, 0x83, "9a3f82150439f2651c3e7d8cb05e2e1310a83dd370735e11c5bbcac0a857436f845076bb44bfe329ea68d304fd3ff9c9060cd74153ce78e122892947ba2e2cb7d32ba378fc5f706ee6779d15e97a07bf66d71b9d388814e632fd753265178c25e45785e0819beed833857462a16243de2bb2c549057b1993958140e81c4a0527e9049f"}]}}, @NL80211_ATTR_BEACON_HEAD={0x163, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @device_a, @initial, {0xc, 0xb60}}, 0x6, @default, 0x4040, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0xbd}, @val={0x5, 0xb9, {0x8, 0x10, 0x7, "4d91a9846ec233cfb4f684b171b779d34a8e440cc499d101fa2a62cbb8bc062360cedabcd330c2f019ce3e1b0735053b37413f569a2fc248e5d08a0a58f1678a7ea1516582272b437a83cecc4495129bd232e67694e71fbd95547937c4970a9dff1560d1db4294d2220638e9971eb0e98d0fc96ee3dc6a1a5a26ebfcc2649ef8f3667514f99ae2a969164d97ecd4eb51b02b130229f984fdf41d8050cd59859e54d0f248b4d9b6f9bda8c70bb12b3e240f781622b53e"}}, @val={0x25, 0x3, {0x0, 0x1, 0x8}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x8000, 0x2, 0x3, 0x0, {0x2, 0x40, 0x0, 0x32a, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x0, 0x8}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x8}}, @val={0x76, 0x6, {0x1, 0xf, 0x2d, 0x9}}, [{0xdd, 0x3d, "14a1e66c1bc5a9d75bf99d05d69c3c9aeb3edd7e8b1a3e8ace85fcc27e2e5fa04aaae5984a119eed29fa768254a7ef4eef25dc0835d0c551c295617257"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x95, 0x80, [@measure_req={0x26, 0x8f, {0x1, 0x8, 0x83, "598e2c80dc51363a594f68a68f1d63984d5b989cfc5415112b040e08d43234145a1a427654162100e69d802951b0c4d594ebe6c2d963ee2c85c3cac4bb245f784b597d18f9aba6bb1b862e0061aef112f40188c7969b56afc0d039a1550cd57f157235a5945eaf5e5cddd7c7e3588ecf5e1fb496fa5ae92e16d81f57dedaeefee447166cbea66e7b5077979f"}}]}, @NL80211_ATTR_PROBE_RESP={0xf1, 0x91, "c4680b36862b93ad58112f38974eafe27b30323a36431be193b2dffa274a5647a7a4389d195ba0286ed174162e0bde78157700d30b11d37ed941d80c41d4000e15d9ddee2908ad00f1b02c0cc38d8b22bcf53e0c94ef7a213565b9c427f3661acbfa5af97df582e2b955d8ecafb29f352d07b054a2115564d7f863b2f4a7b4b5177d9eb5d4334cb5deba89b84641b772e534e8280162db30210afe2bb9124f37c2c7216fa69e3b6e727105897bce5293aecd8a8e2d50943be0e77062506c4421e81c368ec3bea989267fa3766c29f41003a92252f81b66628daab6a2a6bc10adb731130565c13b285fa2b44da0"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x100, 0x9, 0x7f, 0x8, 0xacc2, 0x400, 0x0, 0xa0]}]}]}, 0x784}, 0x1, 0x0, 0x0, 0x40}, 0x8040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x80, r3, 0x15, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa1d30ddeeb1a428a}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0xc4) r4 = accept$phonet_pipe(r2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000c40)) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000c80)={'pimreg\x00', 0x2}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000001040)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000d40)={0x284, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffffff63}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x709c}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xaef1}, {0x5}, {0x6, 0x11, 0x14}, {0x8, 0xb, 0x2d}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xe71}, {0x5}, {0x6, 0x11, 0x4d}, {0x8, 0xb, 0x10}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0xbaef}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xaebc}}]}, 0x284}, 0x1, 0x0, 0x0, 0x200000d0}, 0x884) socketpair(0x5, 0x5, 0x9, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r2) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0xd81cb56513d2fd5b}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r8, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x9, &(0x7f0000001240)={@dev, 0x0}, &(0x7f0000001280)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000012c0)=0x0) sendmsg$nl_xfrm(r6, &(0x7f0000001600)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001300)=@newae={0x284, 0x1e, 0x1, 0x70bd2c, 0x25dfdbff, {{@in=@multicast1, 0x4d2, 0x2, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6216, 0x34ff}, [@policy={0xac, 0x7, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x108, 0x4e20, 0x0, 0x2, 0x30, 0x40, 0x8, r9, r10}, {0x6, 0x7fffffff, 0x9, 0x3ff, 0x7c, 0x7, 0x9, 0x7}, {0x8100000000, 0x3, 0x0, 0x1000}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x2}}, @tmpl={0x104, 0x5, [{{@in=@local, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x3, 0x3, 0x9, 0x9, 0xaea, 0x4}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x33}, 0xa, @in=@local, 0x3502, 0x1, 0x1, 0xe, 0x8, 0x0, 0x8001}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0xff}, 0x0, @in6=@mcast2, 0x3500, 0x0, 0x3, 0xb3, 0x100, 0xe, 0x7}, {{@in=@rand_addr=0x64010101, 0x4d3}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x3, 0x3, 0x4, 0x1}]}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd25, 0x6}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x9}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x0, 0xa}}, @proto={0x5, 0x19, 0x33}, @coaddr={0x14, 0xe, @in=@multicast1}, @extra_flags={0x8, 0x18, 0x4017}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2d, 0x70bd28, 0x70bd2a, 0x70bd26, 0x6, [0x7, 0xd7f219a]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000010}, 0x810) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000001880)={&(0x7f0000001640), 0xc, &(0x7f0000001840)={&(0x7f0000001680)={0x188, r5, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfff}, @DEVLINK_ATTR_RATE_NODE_NAME={0x102, 0xa8, @random="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"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x188}, 0x1, 0x0, 0x0, 0x24044000}, 0x4001000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000018c0)=0x7353, 0x4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000001980)={0xfffffffffffffffc, 0x0, &(0x7f0000001940)={&(0x7f0000001900)={0x20, r0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000019c0)=0x9, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4020}, 0x1a711c5f49b51328) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000001b00)={@null, 0xa, 'dummy0\x00'}) sendto$inet(r7, &(0x7f0000001c00)="595a38f3d24bb93070ecec2a40b431519d6b6a0b47dc5a3f59b9cf5bc14cbf95c9cff8a1eddc95d2d43564e64c7430f3ff8d3acd46a94915b00d55784550ed6583614c220f352aaf55577c0239423a302c4ab3adface905bca85a369a7db802a2c9a4a5c4cf5e9789d66238cc6c75291e3f27a9126792a63aa729ebd7865555c0b4ab2fc4af93a469768b60ee83369092e9b532824495a1d7e751a684738e91f22c1c4e4ec41a07873420ee7887fbfe45e3f34495ba548467bbad644daa31f5f81d9f6e7ea3a9b12b3ad79d6247e376e6ffe", 0xd2, 0x4810, &(0x7f0000001d00)={0x2, 0x4e21, @empty}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r12, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x48, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x8000010) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x54, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x39}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xff}, @NL80211_ATTR_HE_OBSS_PD={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x4000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000002000)=0x80, 0x4) 1.91731015s ago: executing program 5 (id=3387): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4000014) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000034000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80) socket(0x10, 0x3, 0x0) 1.71286102s ago: executing program 5 (id=3390): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x5, 0x5, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x13, 0x0, 0x2, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}]}, 0x70}}, 0x40) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000000600)=""/219, 0xdb}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000800)=""/17, 0x11}, {&(0x7f0000000840)=""/71, 0x47}, {&(0x7f00000008c0)=""/56, 0x38}], 0x8, &(0x7f0000001780)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/32, 0x20}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/116, 0x74}, {&(0x7f0000000a40)=""/130, 0x82}, {&(0x7f0000000b00)=""/152, 0x98}], 0x5}, 0x400}, {{&(0x7f0000000c40)=@caif, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/77, 0x4d}, {&(0x7f0000000d40)=""/27, 0x1b}, {&(0x7f0000000d80)=""/20, 0x14}], 0x3}, 0x1}, {{&(0x7f0000000e00)=@can, 0x80, &(0x7f0000001100)=[{&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/19, 0x13}, {&(0x7f0000000ec0)=""/66, 0x42}, {&(0x7f0000000f40)=""/31, 0x1f}, {&(0x7f0000000f80)=""/255, 0xff}, {&(0x7f0000001080)=""/116, 0x74}], 0x6, &(0x7f0000001180)=""/74, 0x4a}, 0x4}], 0x4, 0x300, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000000)=0x1, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x9, 0x2, 0x6, 0x2}, 0x10}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) sendmmsg$inet(r4, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x5e23, @loopback}, 0x10, 0x0}}], 0x1, 0x4004) pselect6(0x40, &(0x7f0000000100)={0x9, 0x47f, 0x7, 0x7, 0x9, 0x10001, 0x1, 0xf8}, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003980)={'wlan0\x00'}) r6 = accept(r3, &(0x7f0000003780)=@nfc_llcp, &(0x7f0000003800)=0x80) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003880), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6a39}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000814) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x0, 0xbe, 0x82, &(0x7f0000000040)="4dff3c9117b569baadbcc42fce1a9949fb4d7a04b95969706186aa84c20d390e699a0665aafa6be1fc8ac26bcad30bc5ae191c02e1c614259cbb3942f8e8b7974e96e657afa2073377f6e9e4a83b3a3d60545da487f783c624d4bc74b5f445265d9e5eb58f673d1b92fd2e77f42d709e5aa320b6e28386c33ce6e4ca887a45858cd4d49c674f78dc693abafcacb07b9178022fc2f2b4a2074c4c63af77fd3193bb56546b4dba1c4a84be73789d86f2d6a6f7595585daa4f9784ebe445d86", &(0x7f0000000100)=""/130, 0x3, 0x0, 0xa7, 0x7a, &(0x7f00000001c0)="7b7059c931aa1e55957710180a7122b60a02c8a5bcc74b8601c400f98f7d0f69e5a56f0205cb7389e0d5d525daa236b1f577b0d1f58c71649afe52f1b6a20e425c47a25c96a2a360953bf748534a9c047ce89e8592a64f0d7691fdc128ea0c250164060266aec63e900a030ba6192bda209fa5671e4fe4d2f6cd9a1d51af45532ded41694584427e14b22162e141ff6fd5247ea260d18eb19a0543ecc284ac2730f831afaa9b1d", &(0x7f0000000280)="8348722222290594f3f268491de32e89860176f713959482eaf5c8f7d5be7d24ddf48aa2bb1e83ee70612f003a903b4a40722c88146aaaebdea72c4e8ef2ec19a4cb3f44c6f8727825514c4fe286a14c33e8c1d4b23a6648f4e1a76aa70d207d4273bf7f8987d489fd3f86bc9442ed998b81f5acea096e2a9f1a", 0x7, 0x0, 0x100}, 0x50) 1.455396279s ago: executing program 1 (id=3392): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xea, 0xea, 0x8, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @datasec={0x8, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x80, 0x401}, {0x5, 0x1ff, 0x4}], "a391"}, @enum={0x0, 0x9, 0x0, 0x6, 0x4, [{0xf, 0x2}, {0x1, 0x5}, {0x7, 0xfffffdf0}, {0x9, 0xfe9}, {0x8, 0x3}, {0x7, 0xb}, {0xe, 0x2}, {0xa}, {0x4, 0x5}]}, @struct={0x7, 0x1, 0x0, 0x4, 0x1, 0x5, [{0x2, 0x3, 0x7}]}, @fwd={0xa}, @enum64={0x4, 0x4, 0x0, 0x13, 0x1, 0x8, [{0x9, 0x0, 0x40}, {0xc, 0x5db}, {0xd, 0x7fffffff, 0x7}, {0x4, 0x4, 0x5}]}]}, {0x0, [0x10, 0x2e, 0x30, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000200)=""/99, 0x10c, 0x63, 0x0, 0xfffffffe, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.454542655s ago: executing program 0 (id=3393): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a090400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) 1.43434881s ago: executing program 5 (id=3394): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b0200000000001c0012800b0001007d656eeab1280f25150f65766500000c000280060005004e1f0000"], 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3d8e, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x0, 0x0, 0x0, 0xa, 0x3, 0xc, 0xffffffffffffffff}], &(0x7f0000000200)='GPL\x00', 0x3ff, 0x0, &(0x7f0000000240), 0x41000, 0xb, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x0, 0x7}, 0x10, 0x21af6, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x4, 0x4, 0x8, 0x4}, {0x1, 0x2, 0x5, 0x9}, {0x1, 0x3, 0x3, 0x5}], 0x10, 0x10001}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x840) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000004c0)=r4) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000001880)={r6}) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1.291324487s ago: executing program 2 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x48, 0x2d, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0x1}, {0x0, 0x1}, {0x2, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6c}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x101}]}}, @TCA_RATE={0x6, 0x5, {0x32, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8021}, 0x44000811) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) (async) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x2c}}, 0x0) (async) socket(0x23, 0x6, 0x8) 1.283047309s ago: executing program 0 (id=3397): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32], 0x20}}, 0x0) 1.281555367s ago: executing program 1 (id=3398): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000340)=0x1, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c0000000000000000000000000008000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x0) 1.117622446s ago: executing program 1 (id=3399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000240)='./file0\x00', r4, 0x4000, r1}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000600000500050002000000050004000000000010000300686173683a6970"], 0x54}}, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 1.098290001s ago: executing program 0 (id=3400): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000940)=[{&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/207, 0xcf}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f0000000880)=""/160, 0xa0}], 0x8, &(0x7f00000009c0)=""/215, 0xd7}, 0x10120) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000d00)={'tunl0\x00', 0x0, 0x20, 0x1, 0x1, 0x7, {{0x22, 0x4, 0x0, 0x1c, 0x88, 0x65, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@generic={0x94, 0xa, "fa27813c08964905"}, @timestamp_addr={0x44, 0xc, 0xb7, 0x1, 0xc, [{@local, 0xd21e}]}, @ssrr={0x89, 0xf, 0xf2, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x2a, [@local, @local, @rand_addr=0x64010101, @loopback, @broadcast, @remote, @private=0xa010101]}, @noop, @timestamp={0x44, 0x10, 0x9b, 0x0, 0x4, [0x7ff, 0x3, 0x5]}, @rr={0x7, 0x1f, 0x6d, [@remote, @empty, @empty, @remote, @local, @private=0xa010101, @rand_addr=0x64010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000e00)={'wg1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e40)={0x0, @multicast1, @multicast1}, &(0x7f0000000e80)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001000)={'gre0\x00', &(0x7f0000000ec0)={'sit0\x00', 0x0, 0x10, 0x8, 0x80000000, 0xfffffffd, {{0x39, 0x4, 0x2, 0x5, 0xe4, 0x67, 0x0, 0x9, 0x29, 0x0, @remote, @loopback, {[@noop, @rr={0x7, 0x7, 0x65, [@private=0xa010102]}, @noop, @cipso={0x86, 0x32, 0x0, [{0x6, 0x7, "22626a8457"}, {0x2, 0xf, "c51b2dfa8cf51301f2996980e4"}, {0x1, 0x10, "e03a3885399f8a42d019eea6dfa7"}, {0x5, 0x6, "83d8ebea"}]}, @timestamp_prespec={0x44, 0x4c, 0x62, 0x3, 0xb, [{@rand_addr=0x64010102, 0xffffffff}, {@rand_addr=0x64010102, 0xc}, {@multicast2}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1cb}, {@remote}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xfff}, {@multicast1, 0xa}]}, @timestamp_prespec={0x44, 0x2c, 0x61, 0x3, 0xb, [{@empty, 0x5}, {@loopback, 0x25}, {@multicast1, 0x10000}, {@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x1c, 0x1d, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3b29}, {@private=0xa010101, 0x2}, {@remote, 0x101}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001100)={'ip_vti0\x00', &(0x7f0000001040)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x9, 0x7, {{0x1b, 0x4, 0x0, 0x1, 0x6c, 0x67, 0x0, 0x10, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@rr={0x7, 0xb, 0xc2, [@multicast2, @empty]}, @end, @timestamp_prespec={0x44, 0x4c, 0x22, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x9}, {@multicast2, 0xec}, {@multicast1}, {@empty, 0x7}, {@empty, 0x9}, {@multicast1, 0x8}, {@loopback, 0xfffffff0}, {@multicast2, 0x4}, {@loopback, 0xffffffff}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001140)={@rand_addr, @local, 0x0}, &(0x7f0000001180)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f00000011c0)={'tunl0\x00', 0x0, 0x1, 0x1, 0x4, 0x5, {{0x2f, 0x4, 0x3, 0x9, 0xbc, 0x67, 0x0, 0x40, 0x2f, 0x0, @remote, @remote, {[@rr={0x7, 0xb, 0xa0, [@private=0xa010100, @loopback]}, @noop, @lsrr={0x83, 0xf, 0xce, [@loopback, @broadcast, @multicast2]}, @end, @cipso={0x86, 0x75, 0xffffffffffffffff, [{0x1, 0x10, "4060dd307b1642eeb54426fec2dd"}, {0x5, 0x6, 't^.H'}, {0x1, 0xe, "0e4a01c86f2b3a44fd9c6fbe"}, {0x2, 0x10, "01f66ac2a6e61ab9a98a12d54e81"}, {0x0, 0x10, "35f2ee71b245a679b0db872f0448"}, {0x2, 0xa, "b28aad3b031857f3"}, {0xa3c0017dc1028e06, 0x7, "6a9b8b0c53"}, {0x1, 0x8, "d2d7c2deddc8"}, {0x7, 0x12, "bc6e7c60e310926275510c3977e93555"}]}, @cipso={0x86, 0x14, 0x3, [{0x2, 0xe, "f1d832b729d29be0644af759"}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000001500)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f00000014c0)={&(0x7f0000001340)={0x16c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x32}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x77}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xd}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001580), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000001640)={&(0x7f0000001540), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001680)={@empty, 0x3c, r6}) syz_genetlink_get_family_id$team(&(0x7f00000016c0), r2) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000001700)={'ah\x00'}, &(0x7f0000001740)=0x1e) r14 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r14, 0x4008941a, &(0x7f0000001780)=0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000017c0)={r1, 0xd9, "19807d8b71de6f7154907ffcfc027344beea74740dd8e9292430ab3b19517fa3104ec8fc109a740014ad43d8f2d97ac1e5f61fcfb797c5a9f29c8c56de7840193040138bfb546d5f9c18496a0db9401cd174321a6d9d91a370798bdfbca2ed2f4d75378c02233460e067ba1cecb00d7cd6ebecd01c2265c382d14b6074787ed2a58d46d54809d62b64e2fe7cc95b9e225cd1576f35e358e99c5fb00c92e62ed59224163042ad146bf8ee72b381848f04543e9f25043d2d82357f2e7d1a6ef012ec3fca35c71625d8c3ffc08f4d1bd3e853c11bcf1f5f46cdb9"}, &(0x7f00000018c0)=0xe1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0xc0040000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x38, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xc4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x90) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000001a00)={r0, 0x10, 0x4, "57f1c99d57c2a599d21813fa6f4aee604d0b8b31a54d0be9a297650e9b2c3d21be0df530503c81949efb1b87d881930c81686776195aabb8c89a66188db2d7d609b4cb00e2e1bf7876a1f964d965457d0ca54a422adec4aebb46c0a17cf577c74d4932fedd1f7b7ebf355e6ab962fd50a4be22b3894fb71f0107e0d40775"}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r15, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x14) 991.186125ms ago: executing program 3 (id=3401): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x44) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) (async) accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000a888e3009bfb83f2ac1400010500000070616e050010"], 0x40}}, 0x0) 990.182281ms ago: executing program 2 (id=3402): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x140d, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24044848) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 935.078743ms ago: executing program 1 (id=3403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001008661562af1294d3a0100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000060900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000108000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c0001006269747769736500200002800800034000000002080001400000001408000240000000c9040004800900010073797a30"], 0x104}}, 0x0) 890.731971ms ago: executing program 3 (id=3404): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x6}, 0x6}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000002900000005"], 0x10}, 0x20800) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}], 0x2}, 0x60}], 0x1, 0x10042, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0xffffffffffffff68) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 767.561207ms ago: executing program 0 (id=3405): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="850000002e0006009c0a0000000000002500000000000000cbaff5ed30cbde3b709500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x3, 0x2}, 0x10}}, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000100)={@rand_addr=0x64010100, @private=0xa010100, 0x0, "a6b5763cfb3aed7224fe8588b5f84cbaadb946c24939169d6d95a07d23c1ee08", 0x80000001, 0x6, 0xffff, 0xeeba}, 0x3c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) (async) accept4$inet6(r2, 0x0, 0x0, 0x800) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) r5 = socket(0x2a, 0x2, 0xfffffffe) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x100, 0x70b92b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0xfff1, 0xffea}, {0x10, 0xd}}}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) (async) getsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000240), &(0x7f0000000300)=0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=@newtfilter={0x68, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x652f}, @TCA_FLOW_MASK={0x8, 0x6, 0x7}]}}]}, 0x68}}, 0x0) (async) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xd1, 0x0, 0x0) (async) bind$xdp(r4, &(0x7f0000000080)={0x2c, 0x0, r6, 0x3d}, 0x10) (async) r8 = socket$inet(0x2, 0x2, 0x1) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xeb, [@private=0xa010102, @broadcast, @remote, @local, @local]}, @timestamp={0x44, 0x4, 0x6a, 0x0, 0xf}]}}}], 0x30}, 0x0) 721.388303ms ago: executing program 1 (id=3406): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x24044010) (async) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x24044010) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x8, 0x7ff}, 0xc) r1 = socket(0xe, 0xa, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="000008000100000000a2001e0000004500002800000000078490783fffffffac1414aa000000f4109d516fe58ea9f8be8f35cd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="540000049078001c"], 0x36) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYRES32], 0x3c}}, 0x40000) pipe(&(0x7f0000000100)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003a00010a00000000010000000a000000116244a605cda3abc3096476abd7fe21e645ea96664db2ae9199ec90"], 0x14}}, 0x40000) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000180)={0x200, 0x4, 0x1, 0x2, r8}, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\r\x00'/12, @ANYRES32, @ANYBLOB="ff2fa429d2fd0e99995d477b7d7fd971ae1f277b51183f25bfed1c72ab7aa5b72f00ca4be5dbdfefc1bdc588a03c5e24b82c5d5c42dbfd4a9d32a2cc5c2aa81726569dcf9288a0b3114259c2632dbbfd9c4c6231d905bca608fc44cffe7feb2f7687c7f1b001d85f3f1118b992995246829323d5837d42d5f0e0e8aa16691f1954f4c59fea508a13fb5f94441c5dfed4e3ac69c83a793b2afcaafe7550be", @ANYRES64=0x0], 0x20) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000300)={r8, 0xffff, 0x2, 0x401, 0x0, 0x236c, 0x1000, 0x3, {r8, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x3, 0x9, 0x3, 0xffd7f8d, 0x80}}, &(0x7f00000000c0)=0xb0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000480)={'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000480)={'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r8, 0x6}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r8, 0x6}, &(0x7f00000001c0)=0x8) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000000606010325bdb5da591ff44f99a0d83da8e68cfb237d56"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) (async) sendmsg$IPSET_CMD_SWAP(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000000606010325bdb5da591ff44f99a0d83da8e68cfb237d56"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 675.390038ms ago: executing program 3 (id=3407): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) getsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="616895b92cc3d8cb6c0600000000000000c0e16cfa", @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x4e22, 0x0, 0x6, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r10, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 451.421097ms ago: executing program 0 (id=3408): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x97a75000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x86, 0x4) sendmmsg$inet(r0, &(0x7f0000003200)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="d2466bf778ed00febaa1b92cb8215428eb8487cf7f6004a9d2e06a2cebe080b82a84f768371ecfe95439134b79cc4cf8934745e3b895b783d03ee28fefef352dc87a68ab4c2e3ff30774d2e3cabc64c03cbad323a6d9717123b116ffacaac0ea3ce91b86be1e279e111fae810a4dc55ee4b7f44769953077fca00e9d31bdf7b2021838b1a66375911b69a96a7b7d4666b4a8ee8180cc55ee8cc4ca9da3bd68d37c93450c786b46cc1a80422496833267b1ad4f15d4c13c80837155910dffd7978f76cc2d0e64137566f6a458296e878ace05f3c8df0bd6fd19ae1cdc7e2aa087527e0f1c078291d53a36b305820ff5f8cb560ad92e5a4e3c364f4f78dcf64f3c1bd89100d5f6c851287df2b5d7195702620ac198fd8ff84a55152e30accf6acad0c8df9ee1737e5498a008f0eb6825dbb5c1b3d0e503937905160fefb944b06e3c62bc14d4e25a31f5d06cac92cad088333838a9c73ee667aecfd511ca619d6eeddcfe6351ad86c2b38993c41b70f1a04100a5c1c08c8bccbd0492a4d97dd907b81b9b3d716f46d9f461755ec6961d77d1b8d0dfc48dfd720717f1623c3224c502a78d140f907237b6e8a69664718102a1d4464dd646d4cb59abb50d60418e44e3d5edcc87903a733bb35f41d731c7ed2880ebd292cee44f796c39db04cf401f76d6901c892129cc479ed60da157cb15827b11578e86c492c0ad4233b872f598f3145d3eacdbd24989e173ac1b4a60a757641012ba5e794f01bd335ed3417370fbddd3c9f2b6bfcc4ae8aa60f963e0bb46568754bdf6c87747a1105553a9c42f88851d49d6fa96543e57f28f20edc4088f4b32eb123969248fe2d9c66545f8a2cf9e2fb196c83ca00868fb8e331f8a88f374ab7dc4565758a21db57fa49c291c243969dce08f75e005d04f0b7025756d4ffeff54d228f31718d6f0654efbc3e5f13a641c0d048104e7d9fabc1ea1f26080d6ca34ed810196e9cce75341255cbeecbd5a056cfde5e6eb072dbf5b269f73fbd81c5662b7073714495190fecfe3c90661319235086000b823d7b4594a35f5c8645710e8de0fb591123b7acb0a2b47a9c7888ac2d452de1203d1d8b7eadaa745432931ffe95b56bbdf7281acf2e2f01d24921e77cdd4df45a6155ccd5acb4276eea5b2d4c8b4d87b67c5298a9aea323956738fd74fcb02aefba7936549a29085925e4ba42437cda38dd0ce866f29dfe0204c08e2da8a92a18197b0dfbd485aac90372c408e1392b63798a85e9dea5b50d2128cf142abeff9ab0da1e7c977deded8094fe074087bf715bf09502194b2cf0b12d3362d5ae8e8848282301e84f61d2ae32b5bf36b30d4bceac51ebc0fdf3d7e3a1ce17344b41f7d9003c433c69ebf917e1a91f8caa2ea7eac063d352d588f97158ec5a891fb988aa817261b46b582d640f620327b6717aa8613e77d10389c557967a05b16c59e37a99feb4d0ccc1bf0155ed097a0ac8ac8113219462ebe7c320fb0c23a5d97091a2049b273e00a7009f625ed5c1c4e4c7e821a2c0e7a4218060b2ed4fe94fc765175678055b06cae4bad01159be18caff02f5f065be196a4e3d10b26776ec1ae173aeb19e7168043f03306675b298c4fd5e06af1532d43377f5929e3ff5b5e7b6197920c3e5930b1d826d082b9baf2900a01614aacf9ff64fb21e04a76c847d3e9a5e0f6142a23fe02f7250ca051e9cac14be7c828c153954ddb7af498937498d04b1ee4a8440254e9fcfe7338cce7d2d5fc359fed4febd7286e5eaa07d8d07239891c2cb2a37c568eebe7b7b8c0aad289eff613ea0137efe6f34dfba13762411266a5b5d9de910f678966e9a2f20092858aebc5480bf88976f5825cb67d8cb4b7886c58b9b9299799887168ca7172e15aab1f18963de66ba29c2c2d4e5cd4722333db65620342a67016f40de3b4250eb1cc4171ab9d5a3437d670d6687af48f80c9e64ae10226d9cd15d0f482cd29a12098e6defbd734a5d60faad43b3b6f336432adc5bd95a332dd322ef197d8d6c5408a212df67193862567fd1f4ebc68ee379e66aaed3c7e92c246c60581436bd5a3b82b4f1ff30b444a0ad9ff9732f36b62712ba410836ee4cc7a1c09072a4aab3178a9bcce0395d56676ed401e28c592e076e4ff16cc2dc3e1784ed2b383cfe53242d93ec16573886962221411a1a82f540c1f1598e01e62d3124e4166d10c1f2cd78461c4b91c0f49846bda2d57117e23894e1e8be6ca8a0891877a2758670a60bec5a2861149c1ac284e1af9c60afc8a72d23b5e4bc0bcac99bc5fa8b5737ef8371a59769aa0971fd8b74f24a9525db851b78e7e78b84a4995a707761504bca1b3e22c79a07f59e87ed80a521ad644c26a4b5abe06483e9cfbfd06f08a88eeb67f5ebb3fffaeaa3d0b062c86944e273aa80a77dd631fde34267d9901db6b591d97a5c18c83e16263cd6d3d7343f2820f8ed21366a037fc77507235292481c84bcd627fd254baee3ef55d1b6465a6ab42c384e715ffb56efb36f9a7fb11b8cf9442c190f8163028e5c2c2c59bfa57b98a1239ee68e56375808e6fc266fb6b697b3cd548d7eb756b3d4e06e7d4da6adc6a4abc2ca6c70d050b47f7a4a61429e77a58293c6d76bef3f8673b8f53f7cba1937deb78450268d8ac94df07daa49893ec8185bc3c963ba6aff9945e970bf786e59decf43807aa082186c15941243cd8e8a316ff9a77022f40cbf25d8502cabc440d0b9ce6a33719e25ae6a27cc4fb31efe182e297a472ebdac9294b63c5fcab2191e5c0bf82a61ec13219eae0aca200f37c1ab614389857b5a5fde613f56bec2204e286c4b35cae7734c2ef0a9de4121bf56ccdeb9b460d0b2224ad719858e6fbf8922014768698206ce7f5f33a2be63564f17b59a886dad5f956486363fff06efaedaecd77a8f36fabc7440906cffa72b66258e27329ad805a8e07f45966cedaa6e1e6cb45d042e559570e121f869b5413068b303b9c747bf88815cc6ca70a5e5e5840089a3a9f6b4739ee1323dcfde46dbcacddb88bd23acfa9f1a882d4eda00c971d9d5bf80fb8fe3afa2fa32a235e69feb1ae5417f38c8c60eeb053a25f6137c1a2e664020ac0c74619b5ed0d2b7a0ab091ad2f64e4413074e06986c186a3c11de12e57611e849628d201d644f4e33ceb5b5b601ac5f678813d9432095b51ab0a982ecd82e1ec5cad74fb17b20ca005305b27430c452d4f3f140ae1e1a67c67502bd433d9e20908291537fa860e6559b4d21fc320c4a327996d894262658f40dccedf7987bb0153935723cfbc1d8813bc7931aed90cc1dce93b88fb89de8944c9c8f91970a1fdf290b72c7522b19b3d25b33a86330e384375bb73b8cac95fd9fb1b8be5a998ab75a08326853c3b4d1fee515639c21f622e0cd5e86adc67101d5b2491402e0b61a9910fec14ec4f2975546e0913c7365dbfe50fd59a7f946e1a96a479bc59223a83300703da3b1db88a732e19a458fa71fb569910818ea0a86582f5941607117820384f85011aad07297e5a7869fe111818f4c0ddf85d2a91cf31236205683b4cb7d2c362d00bf1fe68aba41030fcc2addfba3277c6d3f719aba117fe5f5def9f13f2bbd90513d088ff49e8d0471fb3ab32538cdb34a5a8a04a1a7454c5e1e1f6bc127a192c4355e1a9f6f00777d03c60fe39a64d8ebcdf216a99802c8e5d514083ccf4d86c0ea5d4f612b4633f277bc421a0014f845b1daa2e5e3a2ac11e547b1f3969f69e9f002d505454c312bf7f9201bd03e72575aa363acebbc8ff2c31cb2a7216dbb7644e1d72763e98bbedae65efb1866952e2c6f50b5b1fb3d955ad90b4cdf72f5b35d4a874a6c6e01530d51bc299fd74abe5997b11ca7cc95443c342abea69bced7e730e64115fae1fe942e02111e1d159efbaba9e471bb67178b70f53132463081cbb939080e07779f8f4c8ada6821704306c28c00b9109123bbd8af4f9702084f14e01ca3d4f4762439e1f14f45b429a8bb692a6e178403166a34ad40455631f2888e58ba576d46e8bd85978f9a6ad22879401ec4125be8959bd990e7335beff9a5ce452c5c1c439d38aa07f98d6d5ba138b0d2421e6e83d223084ed37d8fcd593c1775f017efd4a85c17b148cc3ac58042e400a1f34cd4bcdc1d32559e0d2a442fdbdf3b3006aa10bee0eb465fa116596ed92e73b7057085ceaa1f5a7ddfc8b047e041abf95a5e6e88df1067040aff92494ada39032ac8aaedc4bbb46bf82b0e732b96a6221b58b73a6f14f80d3d499548f916a89a39fdd2b4aec7231fdf5bda8192f0e0c512e7ea8d676f563e9bee39d8ad62a35fa9cd19c3378f9b4aa5d5222e9f79cee2535610dadb9e18d0af1ae2499b384c0d2664f73bcbf5863795d5c4893df110059e23e437fbc3e94e14dc049ba5816af087b3caad7902b3c5b77b81486fdac905155bb4c079c5441eafb92f7b408866ac4212128739e923b71dce98b9c8a570df12e07f0ce62d879120ca27d340c92d35543df2b7b7e8d8ea6efefaee6d737fb26ab9e872ebf0ccca66f8f8364685773e08fc7f24c71daa83e67200a6be4a59b9fb07f84200c41f7f76258a8aeac6355e956c33a63ad2a6f66df4ef952e502f854446c0a41", 0xcc1}], 0x1}}], 0x2, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 450.667418ms ago: executing program 3 (id=3409): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000001780)) bind$packet(r5, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000040000000800000000000c9b8171000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x800}, [@map_fd={0x18, 0x6, 0x1, 0x0, r10}, @map_val={0x18, 0xe, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xfffffff8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0xe, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x5, 0x4, 0x4}, {0x1, 0x3, 0xe, 0x4}, {0x3, 0x2, 0x2, 0xc}], 0x10, 0x5a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='sched_process_exec\x00', r13, 0x0, 0x401}, 0x18) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00fcc403", @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4, @ANYRES64=r5], 0x28}}, 0x80) 353.340807ms ago: executing program 2 (id=3410): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) 317.133165ms ago: executing program 0 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1bc, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x158, 0x1, [@m_connmark={0xec, 0x15, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x0, 0xf2, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x6, 0x9, 0x800}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0xd3f, 0x6, 0x40, 0x80000001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x5, 0xffffffffffffffff, 0x5, 0x850}, 0x7f}}]}, {0x49, 0x6, "4eebdf2408e8952792009f587075f394796b87f5e6c0508e4deec5a86d24a64dacafd73234200ce6fe5d4aea9687c8c641b998a1c77c0f725ce22b72f10b8a2d3a770951c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x68, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x37, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d235cfa416f9d81"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 251.364058ms ago: executing program 1 (id=3412): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4000014) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x23, "4a36c73a3be56cd588a51917b4252afb76811777d1924508ee5e092574aaf9b1533cff"}, &(0x7f00000002c0)=0x2b) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r7, 0x72d8}, 0x8) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket(0x10, 0x3, 0x0) 240.758958ms ago: executing program 3 (id=3413): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e20, 0x3, 'none\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2c}, {@loopback, 0x4e22, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000380)='cpuacct.stat\x00', 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f00000003c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r8}, 0x10) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x1000}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) 138.562288ms ago: executing program 2 (id=3414): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00080000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) (async) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r4}, &(0x7f0000000140), &(0x7f0000000000)='%pI4 \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000066625e5ad9559c107e00250001002f14a2aa20ab72dae65268b6ca4ffecf7b5f8c6475181b871d502585d4977c00ff042905f1143207014704e245a1"], 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=3415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) (async) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0xd, 0x0, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r6, @ANYBLOB="0800a6002af8b27d78a2e9f36e12526ce7ff000a000600ffffffffffff000008003500070000000a0034000101010101010000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000104010100000000e1000000000000070500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000101050000000000000000000000000534000f8008000200000108000140000000060800014000000078f60508000240000000020800034000000002080003400000000108001a400000c7791b49c5392650fe9618c762bce21b66a826d4fc25d935b63ee1097f2584adf1ef105ad3cbc51542f2dbe129965c870ebb07ee4273fb553e03a52778dab3545bcc86ada3c101ecb00c4648373a35087e26d06da26c04817866b4e26e7bbe5e86362de4b1703fca76c2709573e81cab8b128684"], 0x50}}, 0x4804) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0f00ff0000000071108e00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) kernel console output (not intermixed with test programs): 4606] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 317.013891][T14606] __nla_validate_parse: 2 callbacks suppressed [ 317.013908][T14606] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2634'. [ 317.421215][T14633] IPv6: sit1: Disabled Multicast RS [ 317.452389][T14633] sit1: entered allmulticast mode [ 317.547459][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 317.595577][T14637] dummy0: entered promiscuous mode [ 317.607544][T14645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2642'. [ 317.653777][T14637] batadv_slave_1: entered promiscuous mode [ 317.674853][T14645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2642'. [ 317.755256][T14657] sctp: [Deprecated]: syz.4.2649 (pid 14657) Use of int in maxseg socket option. [ 317.755256][T14657] Use struct sctp_assoc_value instead [ 318.207995][T14681] netlink: 'syz.2.2657': attribute type 1 has an invalid length. [ 318.235677][T14683] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2658'. [ 318.260485][T14683] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20004 [ 318.491259][T14691] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2659'. [ 318.506876][T14691] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2659'. [ 319.004337][T14700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2662'. [ 319.291118][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2669'. [ 319.426918][T14721] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>PRaG' [ 319.447763][T14721] CPU: 1 UID: 0 PID: 14721 Comm: syz.2.2672 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 319.447788][T14721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.447800][T14721] Call Trace: [ 319.447808][T14721] [ 319.447816][T14721] dump_stack_lvl+0x189/0x250 [ 319.447850][T14721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.447876][T14721] ? __pfx__printk+0x10/0x10 [ 319.447925][T14721] ? kernfs_path_from_node+0x2f/0x290 [ 319.447949][T14721] ? kernfs_path_from_node+0x250/0x290 [ 319.447972][T14721] ? kernfs_path_from_node+0x2f/0x290 [ 319.448000][T14721] sysfs_warn_dup+0x8e/0xa0 [ 319.448022][T14721] sysfs_do_create_link_sd+0xc0/0x110 [ 319.448048][T14721] device_add_class_symlinks+0x1cf/0x240 [ 319.448090][T14721] device_add+0x475/0xb50 [ 319.448126][T14721] wiphy_register+0x1ba6/0x28d0 [ 319.448170][T14721] ? __pfx_wiphy_register+0x10/0x10 [ 319.448194][T14721] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 319.448234][T14721] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 319.448269][T14721] ieee80211_register_hw+0x3425/0x4080 [ 319.448319][T14721] ? ieee80211_register_hw+0x1401/0x4080 [ 319.448360][T14721] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 319.448396][T14721] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 319.448428][T14721] ? __hrtimer_setup+0x187/0x210 [ 319.448447][T14721] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 319.448476][T14721] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 319.448531][T14721] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 319.448552][T14721] ? trace_kmalloc+0x1f/0xd0 [ 319.448575][T14721] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 319.448604][T14721] ? kstrndup+0xbf/0x160 [ 319.448635][T14721] hwsim_new_radio_nl+0xea4/0x1b10 [ 319.448661][T14721] ? __pfx___nla_validate_parse+0x10/0x10 [ 319.448703][T14721] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 319.448741][T14721] ? __nla_parse+0x40/0x60 [ 319.448771][T14721] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 319.448802][T14721] genl_family_rcv_msg_doit+0x212/0x300 [ 319.448829][T14721] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 319.448865][T14721] ? bpf_lsm_capable+0x9/0x20 [ 319.448897][T14721] ? security_capable+0x7e/0x2e0 [ 319.448931][T14721] genl_rcv_msg+0x60e/0x790 [ 319.448959][T14721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.448977][T14721] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 319.449015][T14721] netlink_rcv_skb+0x208/0x470 [ 319.449038][T14721] ? __lock_acquire+0xab9/0xd20 [ 319.449089][T14721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.449112][T14721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.449161][T14721] ? down_read+0x1ad/0x2e0 [ 319.449194][T14721] genl_rcv+0x28/0x40 [ 319.449225][T14721] netlink_unicast+0x82f/0x9e0 [ 319.449261][T14721] ? __pfx_netlink_unicast+0x10/0x10 [ 319.449289][T14721] ? netlink_sendmsg+0x642/0xb30 [ 319.449315][T14721] ? skb_put+0x11b/0x210 [ 319.449350][T14721] netlink_sendmsg+0x805/0xb30 [ 319.449408][T14721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.449441][T14721] ? aa_sock_msg_perm+0xf1/0x1d0 [ 319.449475][T14721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.449500][T14721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.449531][T14721] __sock_sendmsg+0x219/0x270 [ 319.449560][T14721] ____sys_sendmsg+0x505/0x830 [ 319.449601][T14721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.449648][T14721] ? import_iovec+0x74/0xa0 [ 319.449675][T14721] ___sys_sendmsg+0x21f/0x2a0 [ 319.449712][T14721] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.449793][T14721] ? __fget_files+0x2a/0x420 [ 319.449826][T14721] ? __fget_files+0x3a0/0x420 [ 319.449875][T14721] __x64_sys_sendmsg+0x19b/0x260 [ 319.449923][T14721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.449970][T14721] ? rcu_is_watching+0x15/0xb0 [ 319.450000][T14721] ? do_syscall_64+0xbe/0x3b0 [ 319.450035][T14721] do_syscall_64+0xfa/0x3b0 [ 319.450063][T14721] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.450091][T14721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.450127][T14721] ? clear_bhb_loop+0x60/0xb0 [ 319.450156][T14721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.450178][T14721] RIP: 0033:0x7f877fb8ebe9 [ 319.450217][T14721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.450237][T14721] RSP: 002b:00007f8780a4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.450259][T14721] RAX: ffffffffffffffda RBX: 00007f877fdb5fa0 RCX: 00007f877fb8ebe9 [ 319.450275][T14721] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e [ 319.450289][T14721] RBP: 00007f877fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 319.450302][T14721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.450315][T14721] R13: 00007f877fdb6038 R14: 00007f877fdb5fa0 R15: 00007ffc85789ad8 [ 319.450352][T14721] [ 319.951251][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 320.092083][T14723] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 320.106374][T14723] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.129766][T14741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.215930][T14723] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 320.249733][T14723] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.258686][T14748] netlink: 'syz.3.2675': attribute type 1 has an invalid length. [ 320.335617][T14723] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 320.346731][T14723] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.361540][T14753] netlink: 'syz.1.2679': attribute type 9 has an invalid length. [ 320.388299][T14753] netlink: 'syz.1.2679': attribute type 9 has an invalid length. [ 320.426487][T14723] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 320.437868][T14723] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.519225][ T96] block nbd0: Possible stuck request ffff888025060000: control (read@0,1024B). Runtime 210 seconds [ 320.536329][ T96] block nbd0: Possible stuck request ffff8880250601c0: control (read@1024,1024B). Runtime 210 seconds [ 320.548216][ T96] block nbd0: Possible stuck request ffff888025060380: control (read@2048,1024B). Runtime 210 seconds [ 320.559671][ T96] block nbd0: Possible stuck request ffff888025060540: control (read@3072,1024B). Runtime 210 seconds [ 320.627403][ T9419] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 320.638664][ T9419] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 320.670267][ T9419] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 320.685255][ T9419] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 320.719206][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 320.733463][ T49] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 320.761725][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 320.777432][ T49] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 320.911467][T14777] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>PRaG' [ 320.934383][T14777] CPU: 0 UID: 0 PID: 14777 Comm: syz.1.2687 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 320.934412][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.934426][T14777] Call Trace: [ 320.934434][T14777] [ 320.934444][T14777] dump_stack_lvl+0x189/0x250 [ 320.934481][T14777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.934510][T14777] ? __pfx__printk+0x10/0x10 [ 320.934547][T14777] ? kernfs_path_from_node+0x2f/0x290 [ 320.934572][T14777] ? kernfs_path_from_node+0x250/0x290 [ 320.934595][T14777] ? kernfs_path_from_node+0x2f/0x290 [ 320.934624][T14777] sysfs_warn_dup+0x8e/0xa0 [ 320.934647][T14777] sysfs_do_create_link_sd+0xc0/0x110 [ 320.934674][T14777] device_add_class_symlinks+0x1cf/0x240 [ 320.934711][T14777] device_add+0x475/0xb50 [ 320.934758][T14777] wiphy_register+0x1ba6/0x28d0 [ 320.934805][T14777] ? __pfx_wiphy_register+0x10/0x10 [ 320.934831][T14777] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 320.934873][T14777] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 320.934921][T14777] ieee80211_register_hw+0x3425/0x4080 [ 320.934992][T14777] ? ieee80211_register_hw+0x1401/0x4080 [ 320.935038][T14777] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 320.935078][T14777] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.935114][T14777] ? __hrtimer_setup+0x187/0x210 [ 320.935135][T14777] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 320.935170][T14777] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 320.935232][T14777] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 320.935256][T14777] ? trace_kmalloc+0x1f/0xd0 [ 320.935283][T14777] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 320.935315][T14777] ? kstrndup+0xbf/0x160 [ 320.935352][T14777] hwsim_new_radio_nl+0xea4/0x1b10 [ 320.935381][T14777] ? __pfx___nla_validate_parse+0x10/0x10 [ 320.935429][T14777] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 320.935470][T14777] ? __nla_parse+0x40/0x60 [ 320.935504][T14777] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 320.935538][T14777] genl_family_rcv_msg_doit+0x212/0x300 [ 320.935570][T14777] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.935610][T14777] ? bpf_lsm_capable+0x9/0x20 [ 320.935639][T14777] ? security_capable+0x7e/0x2e0 [ 320.935677][T14777] genl_rcv_msg+0x60e/0x790 [ 320.935707][T14777] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.935728][T14777] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 320.935779][T14777] netlink_rcv_skb+0x208/0x470 [ 320.935804][T14777] ? __lock_acquire+0xab9/0xd20 [ 320.935838][T14777] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.935862][T14777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.935915][T14777] ? down_read+0x1ad/0x2e0 [ 320.935949][T14777] genl_rcv+0x28/0x40 [ 320.935981][T14777] netlink_unicast+0x82f/0x9e0 [ 320.936018][T14777] ? __pfx_netlink_unicast+0x10/0x10 [ 320.936048][T14777] ? netlink_sendmsg+0x642/0xb30 [ 320.936074][T14777] ? skb_put+0x11b/0x210 [ 320.936110][T14777] netlink_sendmsg+0x805/0xb30 [ 320.936152][T14777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.936197][T14777] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.936230][T14777] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.936254][T14777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.936283][T14777] __sock_sendmsg+0x219/0x270 [ 320.936312][T14777] ____sys_sendmsg+0x505/0x830 [ 320.936351][T14777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.936395][T14777] ? import_iovec+0x74/0xa0 [ 320.936421][T14777] ___sys_sendmsg+0x21f/0x2a0 [ 320.936455][T14777] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.936532][T14777] ? __fget_files+0x2a/0x420 [ 320.936564][T14777] ? __fget_files+0x3a0/0x420 [ 320.936609][T14777] __x64_sys_sendmsg+0x19b/0x260 [ 320.936645][T14777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.936690][T14777] ? rcu_is_watching+0x15/0xb0 [ 320.936719][T14777] ? do_syscall_64+0xbe/0x3b0 [ 320.936760][T14777] do_syscall_64+0xfa/0x3b0 [ 320.936786][T14777] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.936811][T14777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.936834][T14777] ? clear_bhb_loop+0x60/0xb0 [ 320.936861][T14777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.936883][T14777] RIP: 0033:0x7fdf3f98ebe9 [ 320.936902][T14777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.936922][T14777] RSP: 002b:00007fdf40760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.936944][T14777] RAX: ffffffffffffffda RBX: 00007fdf3fbb5fa0 RCX: 00007fdf3f98ebe9 [ 320.936959][T14777] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e [ 320.936972][T14777] RBP: 00007fdf3fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 320.936985][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.936999][T14777] R13: 00007fdf3fbb6038 R14: 00007fdf3fbb5fa0 R15: 00007ffdc9e7f858 [ 320.937035][T14777] [ 322.122557][T14816] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 322.142988][T14825] RDS: rds_bind could not find a transport for ::200:5:2400:180, load rds_tcp or rds_rdma? [ 323.078630][ T55] block nbd1: Possible stuck request ffff88802510e000: control (read@0,1024B). Runtime 210 seconds [ 323.089555][ T55] block nbd1: Possible stuck request ffff88802510e1c0: control (read@1024,1024B). Runtime 210 seconds [ 323.101497][ T55] block nbd1: Possible stuck request ffff88802510e380: control (read@2048,1024B). Runtime 210 seconds [ 323.113059][ T55] block nbd1: Possible stuck request ffff88802510e540: control (read@3072,1024B). Runtime 210 seconds [ 323.210508][T14874] __nla_validate_parse: 5 callbacks suppressed [ 323.210528][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2716'. [ 323.522278][T14888] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2721'. [ 323.561363][T14894] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2723'. [ 323.689728][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 323.710186][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 323.751910][T14900] netlink: 'syz.1.2725': attribute type 29 has an invalid length. [ 323.785159][T14900] netlink: 'syz.1.2725': attribute type 29 has an invalid length. [ 323.811551][T14900] netlink: 'syz.1.2725': attribute type 29 has an invalid length. [ 323.835094][T14900] netlink: 'syz.1.2725': attribute type 29 has an invalid length. [ 324.169454][T14923] netlink: 'syz.0.2735': attribute type 10 has an invalid length. [ 324.201118][T14923] team0: Device hsr_slave_0 failed to register rx_handler [ 324.854663][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2750'. [ 324.947330][T14966] hsr_slave_1 (unregistering): left promiscuous mode [ 324.981367][T14970] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 324.999403][ T55] block nbd3: Possible stuck request ffff8880251ae000: control (read@0,4096B). Runtime 120 seconds [ 325.969988][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2767'. [ 325.975014][T15021] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2767'. [ 326.006535][T15022] bond0: entered promiscuous mode [ 326.015890][T15022] bond_slave_0: entered promiscuous mode [ 326.026267][T15022] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 326.043417][T15022] bond0: left promiscuous mode [ 326.051488][T15022] bond_slave_0: left promiscuous mode [ 326.057197][T15022] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 326.327714][T15038] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2772'. [ 326.380645][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 326.397961][T15038] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 326.415757][T15038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.426896][T15038] wg1: entered promiscuous mode [ 326.438006][T15038] wg1: entered allmulticast mode [ 326.932435][T15073] netlink: 'syz.1.2785': attribute type 1 has an invalid length. [ 327.657299][T15108] can: request_module (can-proto-0) failed. [ 328.250952][T15149] __nla_validate_parse: 6 callbacks suppressed [ 328.250971][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2805'. [ 328.313128][T15151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2806'. [ 328.396519][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 328.463721][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2808'. [ 328.475398][T15160] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 328.484374][T15160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.539457][T15160] netlink: 85 bytes leftover after parsing attributes in process `syz.0.2808'. [ 328.555296][T15163] netlink: 85 bytes leftover after parsing attributes in process `syz.0.2808'. [ 328.671521][T15175] FAULT_INJECTION: forcing a failure. [ 328.671521][T15175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.703133][T15175] CPU: 0 UID: 0 PID: 15175 Comm: syz.3.2814 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 328.703161][T15175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.703174][T15175] Call Trace: [ 328.703181][T15175] [ 328.703191][T15175] dump_stack_lvl+0x189/0x250 [ 328.703220][T15175] ? __pfx____ratelimit+0x10/0x10 [ 328.703244][T15175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.703274][T15175] ? __pfx__printk+0x10/0x10 [ 328.703316][T15175] should_fail_ex+0x414/0x560 [ 328.703343][T15175] _copy_to_user+0x31/0xb0 [ 328.703365][T15175] simple_read_from_buffer+0xe1/0x170 [ 328.703400][T15175] proc_fail_nth_read+0x1b3/0x220 [ 328.703430][T15175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.703456][T15175] ? rw_verify_area+0x2a6/0x4d0 [ 328.703480][T15175] ? __lock_acquire+0xab9/0xd20 [ 328.703506][T15175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.703530][T15175] vfs_read+0x200/0x980 [ 328.703554][T15175] ? fdget_pos+0x247/0x320 [ 328.703577][T15175] ? __pfx___mutex_lock+0x10/0x10 [ 328.703603][T15175] ? __pfx_vfs_read+0x10/0x10 [ 328.703631][T15175] ? __fget_files+0x2a/0x420 [ 328.703665][T15175] ? __fget_files+0x3a0/0x420 [ 328.703693][T15175] ? __fget_files+0x2a/0x420 [ 328.703733][T15175] ksys_read+0x145/0x250 [ 328.703761][T15175] ? __pfx_ksys_read+0x10/0x10 [ 328.703793][T15175] ? do_syscall_64+0xbe/0x3b0 [ 328.703822][T15175] do_syscall_64+0xfa/0x3b0 [ 328.703846][T15175] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.703870][T15175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.703891][T15175] ? clear_bhb_loop+0x60/0xb0 [ 328.703916][T15175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.703937][T15175] RIP: 0033:0x7f14f818d5fc [ 328.703972][T15175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 328.703991][T15175] RSP: 002b:00007f14f90c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.704014][T15175] RAX: ffffffffffffffda RBX: 00007f14f83b5fa0 RCX: 00007f14f818d5fc [ 328.704029][T15175] RDX: 000000000000000f RSI: 00007f14f90c50a0 RDI: 0000000000000005 [ 328.704042][T15175] RBP: 00007f14f90c5090 R08: 0000000000000000 R09: 0000000000000000 [ 328.704055][T15175] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 328.704068][T15175] R13: 00007f14f83b6038 R14: 00007f14f83b5fa0 R15: 00007ffe813735a8 [ 328.704102][T15175] [ 329.084127][T15182] netlink: 'syz.1.2815': attribute type 8 has an invalid length. [ 329.114136][T15184] macvlan4: entered allmulticast mode [ 329.121457][T15184] veth1_vlan: entered allmulticast mode [ 329.133055][T15184] bond0: (slave macvlan4): Enslaving as an active interface with an up link [ 329.426287][T15193] xfrm1: entered allmulticast mode [ 329.434850][T15193] netlink: 'syz.2.2820': attribute type 2 has an invalid length. [ 329.480930][T15182] infiniband syz2: set down [ 329.485571][T15182] infiniband syz2: added ipvlan1 [ 329.535641][T15182] RDS/IB: syz2: added [ 329.540011][T15182] smc: adding ib device syz2 with port count 1 [ 329.546327][T15182] smc: ib device syz2 port 1 has pnetid [ 329.930796][T15209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2826'. [ 330.072672][T15213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2827'. [ 330.117271][T15213] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2827'. [ 330.499184][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.517002][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.526383][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.535242][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.543169][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.576337][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.625756][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.643354][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.652770][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.660659][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.802195][ T6234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.859058][ T6234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.077600][ T6234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.127058][ T6234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.217468][T15224] lo speed is unknown, defaulting to 1000 [ 331.312567][ T6234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.340197][ T6234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.445612][ T6234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.459503][ T6234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.488545][T15247] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2834'. [ 332.417835][ T6234] dvmrp0 (unregistering): left allmulticast mode [ 332.682200][ T5881] Bluetooth: hci5: command tx timeout [ 332.876904][ T6234] bond0 (unregistering): (slave macvlan4): Releasing backup interface [ 332.891868][ T6234] veth1_vlan: left allmulticast mode [ 332.903919][ T6234] bond0 (unregistering): Released all slaves [ 333.011018][ T6234] bond1 (unregistering): Released all slaves [ 333.106944][ T6234] bond2 (unregistering): Released all slaves [ 333.123245][ T6234] bond3 (unregistering): Released all slaves [ 333.137255][ T6234] bond4 (unregistering): Released all slaves [ 333.154735][ T6234] bond5 (unregistering): Released all slaves [ 333.363711][T15266] pimreg3: entered allmulticast mode [ 333.394321][ T6234] tipc: Left network mode [ 333.689356][T15278] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 333.715620][T15279] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 334.769679][ T5881] Bluetooth: hci5: command tx timeout [ 334.897297][T15224] chnl_net:caif_netlink_parms(): no params data found [ 335.187068][ T6234] hsr_slave_0: left promiscuous mode [ 335.225515][T15336] netlink: 'syz.0.2858': attribute type 15 has an invalid length. [ 335.251128][ T6234] veth1_macvtap: left promiscuous mode [ 335.267269][ T6234] veth0_macvtap: left promiscuous mode [ 335.273198][T15336] __nla_validate_parse: 1 callbacks suppressed [ 335.273213][T15336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2858'. [ 335.279573][ T6234] veth1_vlan: left promiscuous mode [ 335.279740][ T6234] veth0_vlan: left promiscuous mode [ 335.591495][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.604691][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.616281][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.632566][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.640907][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.750471][T15224] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.764864][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.773092][T15224] bridge_slave_0: entered allmulticast mode [ 336.781406][T15224] bridge_slave_0: entered promiscuous mode [ 336.789860][T15349] lo speed is unknown, defaulting to 1000 [ 336.800562][T15358] netlink: 792 bytes leftover after parsing attributes in process `syz.1.2862'. [ 336.801189][T15363] syzkaller1: entered promiscuous mode [ 336.827209][T15363] syzkaller1: entered allmulticast mode [ 336.836109][T15224] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.844600][ T5875] Bluetooth: hci5: command tx timeout [ 336.898599][T15224] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.908660][T15224] bridge_slave_1: entered allmulticast mode [ 336.923066][T15224] bridge_slave_1: entered promiscuous mode [ 337.070435][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'. [ 337.118783][T15224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.178818][T15224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.194060][T15373] netlink: 'syz.0.2866': attribute type 1 has an invalid length. [ 337.214296][T15373] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2866'. [ 337.224574][ T6234] IPVS: stop unused estimator thread 0... [ 337.240929][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2866'. [ 337.363981][T15224] team0: Port device team_slave_0 added [ 337.390309][T15224] team0: Port device team_slave_1 added [ 337.525634][T15381] bridge0: port 1(veth0_to_bridge) entered blocking state [ 337.534230][T15381] bridge0: port 1(veth0_to_bridge) entered disabled state [ 337.542221][T15381] veth0_to_bridge: entered allmulticast mode [ 337.552165][T15381] veth0_to_bridge: entered promiscuous mode [ 337.560150][T15381] bridge0: port 1(veth0_to_bridge) entered blocking state [ 337.568162][T15381] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 337.589076][T15224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.596053][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.656337][T15224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.717904][T15389] openvswitch: netlink: IP tunnel dst address not specified [ 337.725623][ T5875] Bluetooth: hci0: command tx timeout [ 337.730536][T15224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.742538][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.778597][T15224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.992814][T15394] veth7: entered promiscuous mode [ 337.997974][T15394] veth7: entered allmulticast mode [ 338.067089][T15224] hsr_slave_0: entered promiscuous mode [ 338.081779][T15224] hsr_slave_1: entered promiscuous mode [ 338.093247][T15224] debugfs: 'hsr0' already exists in 'hsr' [ 338.101284][T15224] Cannot create hsr debugfs directory [ 338.125942][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'. [ 338.147228][T15408] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2877'. [ 338.152003][T15409] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2877'. [ 338.258501][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 338.417219][T15417] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 338.435662][T15417] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 338.645453][T15349] chnl_net:caif_netlink_parms(): no params data found [ 338.754927][T15428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2883'. [ 338.918262][ T5875] Bluetooth: hci5: command tx timeout [ 339.085940][T15349] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.104597][T15349] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.112982][T15349] bridge_slave_0: entered allmulticast mode [ 339.120997][T15349] bridge_slave_0: entered promiscuous mode [ 339.158424][T15349] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.165662][T15349] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.184150][T15349] bridge_slave_1: entered allmulticast mode [ 339.210081][T15349] bridge_slave_1: entered promiscuous mode [ 339.284367][T15349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.339359][T15349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.433739][T15349] team0: Port device team_slave_0 added [ 339.464850][T15349] team0: Port device team_slave_1 added [ 339.561134][T15349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.568882][T15349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.595405][T15349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.609952][T15349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.616983][T15349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.644112][T15349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.697773][T15470] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20001 [ 339.771625][T15224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.790714][T15349] hsr_slave_0: entered promiscuous mode [ 339.797470][T15349] hsr_slave_1: entered promiscuous mode [ 339.803856][ T5875] Bluetooth: hci0: command tx timeout [ 339.811101][T15349] debugfs: 'hsr0' already exists in 'hsr' [ 339.816850][T15349] Cannot create hsr debugfs directory [ 339.823103][T15224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.859720][T15224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.871519][T15224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.184759][T15486] syzkaller1: entered promiscuous mode [ 340.191115][T15486] syzkaller1: entered allmulticast mode [ 340.295530][T15349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 340.308016][T15349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 340.320997][T15349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 340.349083][T15349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 340.503450][T15224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.581116][T15224] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.607456][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.614725][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.644559][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.651766][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.832962][T15349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.916186][T15349] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.960744][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.967947][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.053784][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.061010][ T9419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.090059][T15528] netlink: 'syz.3.2906': attribute type 1 has an invalid length. [ 341.097845][T15528] __nla_validate_parse: 3 callbacks suppressed [ 341.097880][T15528] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2906'. [ 341.206656][T15529] netlink: 'syz.3.2906': attribute type 1 has an invalid length. [ 341.232385][T15529] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2906'. [ 341.485004][T15537] dvmrp1: left allmulticast mode [ 341.582598][T15544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2909'. [ 341.630140][T15224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.800943][T15224] veth0_vlan: entered promiscuous mode [ 341.843202][T15224] veth1_vlan: entered promiscuous mode [ 341.879389][ T5875] Bluetooth: hci0: command tx timeout [ 342.009232][T15349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.088400][T15224] veth0_macvtap: entered promiscuous mode [ 342.107612][T15224] veth1_macvtap: entered promiscuous mode [ 342.191917][T15224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.223855][T15562] netlink: 'syz.3.2913': attribute type 1 has an invalid length. [ 342.236852][T15224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.254671][T15562] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2913'. [ 342.272459][ T9419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.277488][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 342.384365][ T9419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.433418][ T9419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.468777][ T9419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.576342][T15578] netlink: 'syz.1.2917': attribute type 1 has an invalid length. [ 342.684596][T15578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.744488][T13695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.761397][T13695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.916836][T13695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.968777][T13695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.084645][T15597] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2922'. [ 343.107052][T15349] veth0_vlan: entered promiscuous mode [ 343.139804][T15349] veth1_vlan: entered promiscuous mode [ 343.164864][T15601] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2922'. [ 343.215751][T15349] veth0_macvtap: entered promiscuous mode [ 343.237189][T15601] 0{X: renamed from gretap0 [ 343.281849][T15601] 0{X: entered allmulticast mode [ 343.306049][T15601] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 343.360503][T15349] veth1_macvtap: entered promiscuous mode [ 343.427974][T15349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.469489][T15349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.502287][T13694] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.525835][T13694] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.545657][T13694] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.574291][T13694] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.689373][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.714304][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.810837][T13694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.816515][T15627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.841116][T13694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.959007][ T5875] Bluetooth: hci0: command tx timeout [ 344.132435][T15633] netlink: 'syz.1.2934': attribute type 33 has an invalid length. [ 344.140584][T15633] netlink: 167072 bytes leftover after parsing attributes in process `syz.1.2934'. [ 344.811389][T15662] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 344.819035][T15662] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 344.843968][T15661] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 344.850460][T15661] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 344.920663][T15665] veth0_to_bridge: entered promiscuous mode [ 344.946655][T15668] pim6reg1: entered promiscuous mode [ 344.963157][T15668] pim6reg1: entered allmulticast mode [ 344.995380][T15665] veth0_to_bridge: left promiscuous mode [ 345.369500][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.379686][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.429188][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.459124][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.470351][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.499908][T15691] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2952'. [ 345.510576][T15690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2955'. [ 345.630368][T15685] lo speed is unknown, defaulting to 1000 [ 345.895359][T15704] netlink: 'syz.5.2959': attribute type 1 has an invalid length. [ 346.216569][T15707] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2960'. [ 346.560669][T15721] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2964'. [ 346.672515][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 346.768174][ T96] block nbd2: Possible stuck request ffff888025130000: control (read@0,1024B). Runtime 210 seconds [ 346.779841][ T96] block nbd2: Possible stuck request ffff8880251301c0: control (read@1024,1024B). Runtime 210 seconds [ 346.791158][ T96] block nbd2: Possible stuck request ffff888025130380: control (read@2048,1024B). Runtime 210 seconds [ 346.803202][ T96] block nbd2: Possible stuck request ffff888025130540: control (read@3072,1024B). Runtime 210 seconds [ 347.568244][ T5881] Bluetooth: hci2: command tx timeout [ 347.793118][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2975'. [ 348.326421][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 348.337011][T15794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2983'. [ 348.349180][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 348.408779][T15685] chnl_net:caif_netlink_parms(): no params data found [ 348.506517][T15794] veth9: entered allmulticast mode [ 348.914126][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 348.937745][T15685] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.952311][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2987'. [ 348.954058][T15685] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.970888][T15685] bridge_slave_0: entered allmulticast mode [ 348.979909][T15685] bridge_slave_0: entered promiscuous mode [ 349.014606][T15685] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.032817][T15685] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.052045][T15685] bridge_slave_1: entered allmulticast mode [ 349.065218][T15685] bridge_slave_1: entered promiscuous mode [ 349.153392][T15832] sctp: [Deprecated]: syz.5.2995 (pid 15832) Use of int in max_burst socket option. [ 349.153392][T15832] Use struct sctp_assoc_value instead [ 349.225761][T15834] sctp: [Deprecated]: syz.2.2994 (pid 15834) Use of int in maxseg socket option. [ 349.225761][T15834] Use struct sctp_assoc_value instead [ 349.294887][T15685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.342948][T15844] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2997'. [ 349.355423][T15685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.452158][T15844] macvlan2: entered promiscuous mode [ 349.457637][T15844] macvlan2: entered allmulticast mode [ 349.611094][T15685] team0: Port device team_slave_0 added [ 349.622564][T15685] team0: Port device team_slave_1 added [ 349.639587][ T5881] Bluetooth: hci2: command tx timeout [ 349.719861][T15861] IPVS: Scheduler module ip_vs_sip not found [ 349.749106][T15867] IPVS: set_ctl: invalid protocol: 28 10.1.1.1:20001 [ 349.784035][T15685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.796229][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.825116][T15685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.917137][T15685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.932465][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.984251][T15685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.210770][T15685] hsr_slave_0: entered promiscuous mode [ 350.234740][T15685] hsr_slave_1: entered promiscuous mode [ 350.257458][T15685] debugfs: 'hsr0' already exists in 'hsr' [ 350.272717][T15685] Cannot create hsr debugfs directory [ 350.439441][T15895] netlink: 'syz.5.3013': attribute type 1 has an invalid length. [ 350.599001][ T96] block nbd0: Possible stuck request ffff888025060000: control (read@0,1024B). Runtime 240 seconds [ 350.610055][ T96] block nbd0: Possible stuck request ffff8880250601c0: control (read@1024,1024B). Runtime 240 seconds [ 350.626935][ T96] block nbd0: Possible stuck request ffff888025060380: control (read@2048,1024B). Runtime 240 seconds [ 350.638223][ T96] block nbd0: Possible stuck request ffff888025060540: control (read@3072,1024B). Runtime 240 seconds [ 350.790229][T15685] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.878231][T15685] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.062801][T15685] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.257298][T15685] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.310539][T15938] __nla_validate_parse: 2 callbacks suppressed [ 351.310559][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 351.395269][T15938] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.627629][T15935] netlink: 'syz.2.3024': attribute type 16 has an invalid length. [ 351.655915][T15935] netlink: 'syz.2.3024': attribute type 17 has an invalid length. [ 351.721984][ T5881] Bluetooth: hci2: command tx timeout [ 351.725736][T15935] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 351.905986][T15685] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.948644][T15685] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.994131][T15685] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.026876][T15685] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.047540][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3031'. [ 352.324248][T15685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.380283][T15982] netlink: 'syz.5.3037': attribute type 6 has an invalid length. [ 352.431503][T15983] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 352.444793][T15685] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.482534][T15983] netlink: 'syz.5.3037': attribute type 6 has an invalid length. [ 352.507052][T13695] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.514283][T13695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.567285][T13695] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.574519][T13695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.811742][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 352.851511][T16002] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 352.909034][T15999] netlink: 'syz.5.3041': attribute type 16 has an invalid length. [ 352.921409][T15999] netlink: 'syz.5.3041': attribute type 17 has an invalid length. [ 352.952950][T15999] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 353.179970][ T55] block nbd1: Possible stuck request ffff88802510e000: control (read@0,1024B). Runtime 240 seconds [ 353.191113][ T55] block nbd1: Possible stuck request ffff88802510e1c0: control (read@1024,1024B). Runtime 240 seconds [ 353.202717][ T55] block nbd1: Possible stuck request ffff88802510e380: control (read@2048,1024B). Runtime 240 seconds [ 353.215004][ T55] block nbd1: Possible stuck request ffff88802510e540: control (read@3072,1024B). Runtime 240 seconds [ 353.248534][T16025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3045'. [ 353.566658][T15685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.666972][T16034] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 353.803501][ T5881] Bluetooth: hci2: command tx timeout [ 353.854709][T15685] veth0_vlan: entered promiscuous mode [ 353.869714][T15685] veth1_vlan: entered promiscuous mode [ 353.943516][T15685] veth0_macvtap: entered promiscuous mode [ 353.970288][T16039] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3052'. [ 353.971013][T15685] veth1_macvtap: entered promiscuous mode [ 354.190062][T15685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.226179][T15685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.291159][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.328700][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.337461][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.403315][T16059] FAULT_INJECTION: forcing a failure. [ 354.403315][T16059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.456040][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.490481][T16059] CPU: 0 UID: 0 PID: 16059 Comm: syz.0.3058 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 354.490509][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.490522][T16059] Call Trace: [ 354.490531][T16059] [ 354.490540][T16059] dump_stack_lvl+0x189/0x250 [ 354.490570][T16059] ? __pfx____ratelimit+0x10/0x10 [ 354.490596][T16059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.490620][T16059] ? __pfx__printk+0x10/0x10 [ 354.490656][T16059] ? __might_fault+0xb0/0x130 [ 354.490713][T16059] should_fail_ex+0x414/0x560 [ 354.490744][T16059] _copy_from_user+0x2d/0xb0 [ 354.490766][T16059] ___sys_sendmsg+0x158/0x2a0 [ 354.490802][T16059] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.490873][T16059] ? __fget_files+0x2a/0x420 [ 354.490905][T16059] ? __fget_files+0x3a0/0x420 [ 354.490950][T16059] __x64_sys_sendmsg+0x19b/0x260 [ 354.490985][T16059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.491029][T16059] ? __pfx_ksys_write+0x10/0x10 [ 354.491054][T16059] ? rcu_is_watching+0x15/0xb0 [ 354.491092][T16059] ? do_syscall_64+0xbe/0x3b0 [ 354.491123][T16059] do_syscall_64+0xfa/0x3b0 [ 354.491147][T16059] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.491171][T16059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.491192][T16059] ? clear_bhb_loop+0x60/0xb0 [ 354.491216][T16059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.491237][T16059] RIP: 0033:0x7f5fce58ebe9 [ 354.491255][T16059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.491273][T16059] RSP: 002b:00007f5fcf40b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.491295][T16059] RAX: ffffffffffffffda RBX: 00007f5fce7b5fa0 RCX: 00007f5fce58ebe9 [ 354.491310][T16059] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 354.491322][T16059] RBP: 00007f5fcf40b090 R08: 0000000000000000 R09: 0000000000000000 [ 354.491334][T16059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.491346][T16059] R13: 00007f5fce7b6038 R14: 00007f5fce7b5fa0 R15: 00007ffd902b6388 [ 354.491378][T16059] [ 354.544761][T16065] netlink: 'syz.2.3057': attribute type 1 has an invalid length. [ 354.750602][T16065] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3057'. [ 354.989336][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.025156][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.092291][ T55] block nbd3: Possible stuck request ffff8880251ae000: control (read@0,4096B). Runtime 150 seconds [ 355.240772][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.274541][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.859257][T16113] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3071'. [ 355.901143][T16113] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3071'. [ 356.126500][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 356.434603][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3080'. [ 356.522064][T16134] Bluetooth: MGMT ver 1.23 [ 356.725115][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.739666][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.749847][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.770444][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.782121][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.036827][T16145] lo speed is unknown, defaulting to 1000 [ 357.924860][T16195] team0: Device vti0 is of different type [ 357.950238][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3099'. [ 357.992454][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3099'. [ 358.021574][T16200] netlink: 'syz.5.3099': attribute type 21 has an invalid length. [ 358.042819][T16201] netlink: 'syz.5.3099': attribute type 21 has an invalid length. [ 358.069742][T16200] netlink: 'syz.5.3099': attribute type 1 has an invalid length. [ 358.181452][T16201] netlink: 'syz.5.3099': attribute type 1 has an invalid length. [ 358.232040][T16205] FAULT_INJECTION: forcing a failure. [ 358.232040][T16205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.319837][T16205] CPU: 1 UID: 0 PID: 16205 Comm: syz.3.3101 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 358.319867][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.319881][T16205] Call Trace: [ 358.319889][T16205] [ 358.319899][T16205] dump_stack_lvl+0x189/0x250 [ 358.319931][T16205] ? __pfx____ratelimit+0x10/0x10 [ 358.319959][T16205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.319986][T16205] ? __pfx__printk+0x10/0x10 [ 358.320017][T16205] ? __might_fault+0xb0/0x130 [ 358.320059][T16205] should_fail_ex+0x414/0x560 [ 358.320090][T16205] _copy_from_user+0x2d/0xb0 [ 358.320113][T16205] ___sys_sendmsg+0x158/0x2a0 [ 358.320148][T16205] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.320221][T16205] ? __fget_files+0x2a/0x420 [ 358.320252][T16205] ? __fget_files+0x3a0/0x420 [ 358.320297][T16205] __x64_sys_sendmsg+0x19b/0x260 [ 358.320333][T16205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.320376][T16205] ? __pfx_ksys_write+0x10/0x10 [ 358.320403][T16205] ? rcu_is_watching+0x15/0xb0 [ 358.320431][T16205] ? do_syscall_64+0xbe/0x3b0 [ 358.320464][T16205] do_syscall_64+0xfa/0x3b0 [ 358.320490][T16205] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.320525][T16205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.320547][T16205] ? clear_bhb_loop+0x60/0xb0 [ 358.320574][T16205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.320596][T16205] RIP: 0033:0x7f2b3718ebe9 [ 358.320615][T16205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.320636][T16205] RSP: 002b:00007f2b3801b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.320659][T16205] RAX: ffffffffffffffda RBX: 00007f2b373b5fa0 RCX: 00007f2b3718ebe9 [ 358.320675][T16205] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 358.320689][T16205] RBP: 00007f2b3801b090 R08: 0000000000000000 R09: 0000000000000000 [ 358.320703][T16205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.320716][T16205] R13: 00007f2b373b6038 R14: 00007f2b373b5fa0 R15: 00007ffeb1b16798 [ 358.320751][T16205] [ 358.845951][ T5875] Bluetooth: hci1: command tx timeout [ 359.154997][T16145] chnl_net:caif_netlink_parms(): no params data found [ 359.401159][T16242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3111'. [ 359.673997][T16258] FAULT_INJECTION: forcing a failure. [ 359.673997][T16258] name failslab, interval 1, probability 0, space 0, times 0 [ 359.707800][T16258] CPU: 0 UID: 0 PID: 16258 Comm: syz.3.3115 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 359.707832][T16258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.707846][T16258] Call Trace: [ 359.707855][T16258] [ 359.707865][T16258] dump_stack_lvl+0x189/0x250 [ 359.707898][T16258] ? __pfx____ratelimit+0x10/0x10 [ 359.707925][T16258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.707953][T16258] ? __pfx__printk+0x10/0x10 [ 359.707991][T16258] ? __pfx___might_resched+0x10/0x10 [ 359.708019][T16258] should_fail_ex+0x414/0x560 [ 359.708051][T16258] should_failslab+0xa8/0x100 [ 359.708091][T16258] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 359.708124][T16258] ? __alloc_skb+0x112/0x2d0 [ 359.708159][T16258] __alloc_skb+0x112/0x2d0 [ 359.708203][T16258] netlink_sendmsg+0x5c6/0xb30 [ 359.708244][T16258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.708278][T16258] ? aa_sock_msg_perm+0xf1/0x1d0 [ 359.708312][T16258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.708336][T16258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.708367][T16258] __sock_sendmsg+0x219/0x270 [ 359.708395][T16258] ____sys_sendmsg+0x505/0x830 [ 359.708436][T16258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.708479][T16258] ? import_iovec+0x74/0xa0 [ 359.708506][T16258] ___sys_sendmsg+0x21f/0x2a0 [ 359.708541][T16258] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.708617][T16258] ? __fget_files+0x2a/0x420 [ 359.708650][T16258] ? __fget_files+0x3a0/0x420 [ 359.708696][T16258] __x64_sys_sendmsg+0x19b/0x260 [ 359.708733][T16258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.708778][T16258] ? __pfx_ksys_write+0x10/0x10 [ 359.708806][T16258] ? rcu_is_watching+0x15/0xb0 [ 359.708835][T16258] ? do_syscall_64+0xbe/0x3b0 [ 359.708870][T16258] do_syscall_64+0xfa/0x3b0 [ 359.708897][T16258] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.708925][T16258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.708948][T16258] ? clear_bhb_loop+0x60/0xb0 [ 359.708976][T16258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.708998][T16258] RIP: 0033:0x7f2b3718ebe9 [ 359.709019][T16258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.709040][T16258] RSP: 002b:00007f2b3801b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.709064][T16258] RAX: ffffffffffffffda RBX: 00007f2b373b5fa0 RCX: 00007f2b3718ebe9 [ 359.709081][T16258] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 359.709096][T16258] RBP: 00007f2b3801b090 R08: 0000000000000000 R09: 0000000000000000 [ 359.709109][T16258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.709122][T16258] R13: 00007f2b373b6038 R14: 00007f2b373b5fa0 R15: 00007ffeb1b16798 [ 359.709156][T16258] [ 360.123543][T16145] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.138315][T16145] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.183952][T16145] bridge_slave_0: entered allmulticast mode [ 360.222218][T16265] netlink: zone id is out of range [ 360.227532][T16265] netlink: zone id is out of range [ 360.233941][T16265] netlink: zone id is out of range [ 360.239335][T16265] netlink: zone id is out of range [ 360.244493][T16265] netlink: zone id is out of range [ 360.249848][T16265] netlink: zone id is out of range [ 360.255014][T16265] netlink: zone id is out of range [ 360.261345][T16265] netlink: zone id is out of range [ 360.266491][T16265] netlink: zone id is out of range [ 360.271810][T16145] bridge_slave_0: entered promiscuous mode [ 360.275462][T16265] netlink: zone id is out of range [ 360.316654][T16145] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.336458][T16145] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.346481][T16145] bridge_slave_1: entered allmulticast mode [ 360.390411][T16145] bridge_slave_1: entered promiscuous mode [ 360.443636][T16274] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3120'. [ 360.685588][T16145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.746783][T16145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.873277][T16286] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3125'. [ 360.884462][T16145] team0: Port device team_slave_0 added [ 360.919768][T16286] 0{X: renamed from gretap0 (while UP) [ 360.927035][ T5875] Bluetooth: hci1: command tx timeout [ 360.945521][T16286] 0{X: entered allmulticast mode [ 360.971041][T16145] team0: Port device team_slave_1 added [ 361.125323][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3128'. [ 361.166207][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 361.179589][T16302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'. [ 361.207499][T16302] tc_dump_action: action bad kind [ 361.242532][T16311] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 361.357437][T16312] pim6reg: left allmulticast mode [ 361.455060][T16317] block nbd5: NBD_DISCONNECT [ 361.459405][T16145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.491060][T16145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.523917][T16145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.633922][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3137'. [ 361.691399][T16145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.699662][T16145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.742318][T16145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.156614][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3142'. [ 363.008361][ T5875] Bluetooth: hci1: command tx timeout [ 363.378660][T16145] hsr_slave_0: entered promiscuous mode [ 363.385200][T16145] hsr_slave_1: entered promiscuous mode [ 363.393048][T16145] debugfs: 'hsr0' already exists in 'hsr' [ 363.403010][T16145] Cannot create hsr debugfs directory [ 363.436348][T16336] tap0: tun_chr_ioctl cmd 1074025677 [ 363.442226][T16336] tap0: linktype set to 65534 [ 363.449550][T16345] bridge_slave_1: left allmulticast mode [ 363.457305][T16345] bridge_slave_1: left promiscuous mode [ 363.476898][T16345] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.515281][T16345] bridge_slave_0: left allmulticast mode [ 363.522400][T16345] bridge_slave_0: left promiscuous mode [ 363.528540][T16345] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.705963][T16358] netlink: 'syz.0.3144': attribute type 1 has an invalid length. [ 363.714309][T16358] netlink: 'syz.0.3144': attribute type 4 has an invalid length. [ 363.724996][T16358] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3144'. [ 363.967347][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3150'. [ 363.996230][T16364] nbd: nbd0 already in use [ 364.011307][T16364] nft_compat: unsupported protocol 5 [ 364.140219][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3148'. [ 364.271168][T16145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.305926][T16145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.429040][T16383] vlan2: entered promiscuous mode [ 364.434220][T16383] bridge0: entered promiscuous mode [ 364.634007][T16391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3157'. [ 364.655582][T16145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.688556][T16145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.877612][T16399] netlink: 'syz.3.3159': attribute type 23 has an invalid length. [ 364.917772][T16145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.935991][T16145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.079484][ T5875] Bluetooth: hci1: command tx timeout [ 365.222426][T16145] bond0: (slave netdevsim0): Releasing backup interface [ 365.329435][T16417] netlink: 'syz.0.3162': attribute type 21 has an invalid length. [ 365.339198][T16417] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.347040][T16417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.354335][T16417] IPv6: NLM_F_CREATE should be set when creating new route [ 365.361652][T16417] IPv6: NLM_F_CREATE should be set when creating new route [ 365.368941][T16417] IPv6: NLM_F_CREATE should be set when creating new route [ 365.777063][T16145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.842717][T16145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.922973][T16430] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 365.944148][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3170'. [ 365.964642][T16145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.968843][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3170'. [ 365.990201][T16145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.026666][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3171'. [ 366.050258][T16435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3171'. [ 366.411316][T16145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.472528][T16145] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.485966][T16456] netlink: 'syz.0.3176': attribute type 11 has an invalid length. [ 366.521837][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.529256][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.584867][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.592144][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.656961][T16465] bond0: (slave bond_slave_1): Releasing backup interface [ 366.753774][T16473] __nla_validate_parse: 1 callbacks suppressed [ 366.753796][T16473] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3183'. [ 366.977392][T16482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.985063][T16482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.019805][T16482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.027260][T16482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.459878][T16506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3194'. [ 367.467871][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3195'. [ 367.491329][T16504] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3195'. [ 367.495919][T16145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.517791][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3195'. [ 367.553421][T16504] net_ratelimit: 89 callbacks suppressed [ 367.553441][T16504] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 367.601437][T16508] netlink: 'syz.0.3196': attribute type 10 has an invalid length. [ 367.630172][T16508] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 367.656545][T16508] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3196'. [ 367.686251][T16508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3196'. [ 367.703224][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3197'. [ 367.714432][T16145] veth0_vlan: entered promiscuous mode [ 367.767640][T16145] veth1_vlan: entered promiscuous mode [ 367.867297][T16517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3199'. [ 367.876369][T16145] veth0_macvtap: entered promiscuous mode [ 367.892832][T16145] veth1_macvtap: entered promiscuous mode [ 368.101394][T16145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.174781][T16145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.233772][ T2996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.268916][ T2996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.274951][T16542] FAULT_INJECTION: forcing a failure. [ 368.274951][T16542] name failslab, interval 1, probability 0, space 0, times 0 [ 368.289616][ T2996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.312009][T16542] CPU: 0 UID: 0 PID: 16542 Comm: syz.2.3205 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 368.312037][T16542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.312055][T16542] Call Trace: [ 368.312065][T16542] [ 368.312075][T16542] dump_stack_lvl+0x189/0x250 [ 368.312105][T16542] ? __pfx____ratelimit+0x10/0x10 [ 368.312133][T16542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.312169][T16542] ? __pfx__printk+0x10/0x10 [ 368.312199][T16542] ? __pfx___might_resched+0x10/0x10 [ 368.312218][T16542] ? fs_reclaim_acquire+0x7d/0x100 [ 368.312250][T16542] should_fail_ex+0x414/0x560 [ 368.312275][T16542] should_failslab+0xa8/0x100 [ 368.312313][T16542] __kmalloc_noprof+0xcb/0x4f0 [ 368.312339][T16542] ? ethnl_default_set_doit+0x168/0x890 [ 368.312374][T16542] ethnl_default_set_doit+0x168/0x890 [ 368.312403][T16542] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 368.312424][T16542] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 368.312452][T16542] genl_family_rcv_msg_doit+0x212/0x300 [ 368.312481][T16542] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 368.312515][T16542] ? bpf_lsm_capable+0x9/0x20 [ 368.312542][T16542] ? security_capable+0x7e/0x2e0 [ 368.312574][T16542] genl_rcv_msg+0x60e/0x790 [ 368.312598][T16542] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.312617][T16542] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 368.312648][T16542] ? __asan_memcpy+0x40/0x70 [ 368.312671][T16542] ? __pfx_ref_tracker_free+0x10/0x10 [ 368.312704][T16542] netlink_rcv_skb+0x208/0x470 [ 368.312728][T16542] ? __lock_acquire+0xab9/0xd20 [ 368.312758][T16542] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.312780][T16542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.312826][T16542] ? down_read+0x1ad/0x2e0 [ 368.312857][T16542] genl_rcv+0x28/0x40 [ 368.312883][T16542] netlink_unicast+0x82f/0x9e0 [ 368.312915][T16542] ? __pfx_netlink_unicast+0x10/0x10 [ 368.312940][T16542] ? netlink_sendmsg+0x642/0xb30 [ 368.312969][T16542] ? skb_put+0x11b/0x210 [ 368.313001][T16542] netlink_sendmsg+0x805/0xb30 [ 368.313038][T16542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.313068][T16542] ? aa_sock_msg_perm+0xf1/0x1d0 [ 368.313099][T16542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.313121][T16542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.313149][T16542] __sock_sendmsg+0x219/0x270 [ 368.313176][T16542] ____sys_sendmsg+0x505/0x830 [ 368.313212][T16542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.313252][T16542] ? import_iovec+0x74/0xa0 [ 368.313276][T16542] ___sys_sendmsg+0x21f/0x2a0 [ 368.313318][T16542] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.313386][T16542] ? __fget_files+0x2a/0x420 [ 368.313416][T16542] ? __fget_files+0x3a0/0x420 [ 368.313457][T16542] __x64_sys_sendmsg+0x19b/0x260 [ 368.313490][T16542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.313530][T16542] ? __pfx_ksys_write+0x10/0x10 [ 368.313563][T16542] ? rcu_is_watching+0x15/0xb0 [ 368.313591][T16542] ? do_syscall_64+0xbe/0x3b0 [ 368.313623][T16542] do_syscall_64+0xfa/0x3b0 [ 368.313647][T16542] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.313672][T16542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.313694][T16542] ? clear_bhb_loop+0x60/0xb0 [ 368.313720][T16542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.313748][T16542] RIP: 0033:0x7feea7b8ebe9 [ 368.313767][T16542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.313786][T16542] RSP: 002b:00007feea8941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.313807][T16542] RAX: ffffffffffffffda RBX: 00007feea7db5fa0 RCX: 00007feea7b8ebe9 [ 368.313822][T16542] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 368.313835][T16542] RBP: 00007feea8941090 R08: 0000000000000000 R09: 0000000000000000 [ 368.313847][T16542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.313859][T16542] R13: 00007feea7db6038 R14: 00007feea7db5fa0 R15: 00007ffeadb48bb8 [ 368.313892][T16542] [ 368.732510][ T2996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.895782][T16549] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 368.986781][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.010518][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.127718][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.188797][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.432908][T16575] FAULT_INJECTION: forcing a failure. [ 369.432908][T16575] name failslab, interval 1, probability 0, space 0, times 0 [ 369.482455][T16575] CPU: 0 UID: 0 PID: 16575 Comm: syz.1.3070 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 369.482491][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.482504][T16575] Call Trace: [ 369.482514][T16575] [ 369.482524][T16575] dump_stack_lvl+0x189/0x250 [ 369.482553][T16575] ? __pfx____ratelimit+0x10/0x10 [ 369.482580][T16575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.482605][T16575] ? __pfx__printk+0x10/0x10 [ 369.482640][T16575] ? __pfx___might_resched+0x10/0x10 [ 369.482665][T16575] should_fail_ex+0x414/0x560 [ 369.482693][T16575] should_failslab+0xa8/0x100 [ 369.482726][T16575] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 369.482754][T16575] ? __alloc_skb+0x112/0x2d0 [ 369.482786][T16575] __alloc_skb+0x112/0x2d0 [ 369.482818][T16575] netlink_sendmsg+0x5c6/0xb30 [ 369.482856][T16575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.482887][T16575] ? aa_sock_msg_perm+0xf1/0x1d0 [ 369.482918][T16575] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.482940][T16575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.482968][T16575] __sock_sendmsg+0x219/0x270 [ 369.482994][T16575] ____sys_sendmsg+0x505/0x830 [ 369.483032][T16575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.483072][T16575] ? import_iovec+0x74/0xa0 [ 369.483095][T16575] ___sys_sendmsg+0x21f/0x2a0 [ 369.483139][T16575] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.483220][T16575] ? __fget_files+0x2a/0x420 [ 369.483251][T16575] ? __fget_files+0x3a0/0x420 [ 369.483291][T16575] __x64_sys_sendmsg+0x19b/0x260 [ 369.483326][T16575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.483370][T16575] ? __pfx_ksys_write+0x10/0x10 [ 369.483413][T16575] ? do_syscall_64+0xbe/0x3b0 [ 369.483442][T16575] do_syscall_64+0xfa/0x3b0 [ 369.483490][T16575] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.483515][T16575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.483536][T16575] ? clear_bhb_loop+0x60/0xb0 [ 369.483562][T16575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.483582][T16575] RIP: 0033:0x7fb1e238ebe9 [ 369.483600][T16575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.483619][T16575] RSP: 002b:00007fb1e32e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.483641][T16575] RAX: ffffffffffffffda RBX: 00007fb1e25b5fa0 RCX: 00007fb1e238ebe9 [ 369.483656][T16575] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 369.483668][T16575] RBP: 00007fb1e32e4090 R08: 0000000000000000 R09: 0000000000000000 [ 369.483681][T16575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.483693][T16575] R13: 00007fb1e25b6038 R14: 00007fb1e25b5fa0 R15: 00007fff05c07b88 [ 369.483725][T16575] [ 369.885358][T16579] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 369.957181][T16579] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3218'. [ 370.283807][ T5881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.296098][ T5881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.305514][ T5881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.318467][ T5881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.340437][ T5881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.259725][T16613] macvtap1: entered allmulticast mode [ 371.265176][T16613] veth0_macvtap: entered allmulticast mode [ 371.291629][T16612] macvtap2: entered allmulticast mode [ 371.351551][T16590] lo speed is unknown, defaulting to 1000 [ 372.221749][T16652] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 372.263231][T16652] __nla_validate_parse: 4 callbacks suppressed [ 372.263262][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3234'. [ 372.277104][T16654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3234'. [ 372.440159][ T5875] Bluetooth: hci6: command tx timeout [ 372.574519][T16660] FAULT_INJECTION: forcing a failure. [ 372.574519][T16660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.619451][T16660] CPU: 0 UID: 0 PID: 16660 Comm: syz.3.3235 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 372.619483][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.619496][T16660] Call Trace: [ 372.619505][T16660] [ 372.619515][T16660] dump_stack_lvl+0x189/0x250 [ 372.619546][T16660] ? __pfx____ratelimit+0x10/0x10 [ 372.619573][T16660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.619598][T16660] ? __pfx__printk+0x10/0x10 [ 372.619627][T16660] ? __might_fault+0xb0/0x130 [ 372.619668][T16660] should_fail_ex+0x414/0x560 [ 372.619697][T16660] _copy_from_user+0x2d/0xb0 [ 372.619717][T16660] kstrtouint_from_user+0xc4/0x170 [ 372.619748][T16660] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 372.619808][T16660] proc_fail_nth_write+0x88/0x200 [ 372.619832][T16660] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 372.619864][T16660] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 372.619890][T16660] vfs_write+0x27e/0xa90 [ 372.619928][T16660] ? __pfx_vfs_write+0x10/0x10 [ 372.619957][T16660] ? __fget_files+0x2a/0x420 [ 372.619993][T16660] ? __fget_files+0x3a0/0x420 [ 372.620035][T16660] ? __fget_files+0x2a/0x420 [ 372.620077][T16660] ksys_write+0x145/0x250 [ 372.620109][T16660] ? __pfx_ksys_write+0x10/0x10 [ 372.620134][T16660] ? rcu_is_watching+0x15/0xb0 [ 372.620163][T16660] ? do_syscall_64+0xbe/0x3b0 [ 372.620195][T16660] do_syscall_64+0xfa/0x3b0 [ 372.620221][T16660] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.620247][T16660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.620270][T16660] ? clear_bhb_loop+0x60/0xb0 [ 372.620298][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.620319][T16660] RIP: 0033:0x7f2b3718d69f [ 372.620339][T16660] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 372.620358][T16660] RSP: 002b:00007f2b3801b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 372.620381][T16660] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b3718d69f [ 372.620396][T16660] RDX: 0000000000000001 RSI: 00007f2b3801b0a0 RDI: 0000000000000005 [ 372.620409][T16660] RBP: 00007f2b3801b090 R08: 0000000000000000 R09: 0000000000000000 [ 372.620423][T16660] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 372.620436][T16660] R13: 00007f2b373b6038 R14: 00007f2b373b5fa0 R15: 00007ffeb1b16798 [ 372.620471][T16660] [ 373.151540][T16675] FAULT_INJECTION: forcing a failure. [ 373.151540][T16675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.182723][T16675] CPU: 0 UID: 0 PID: 16675 Comm: syz.2.3239 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 373.182752][T16675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.182765][T16675] Call Trace: [ 373.182773][T16675] [ 373.182782][T16675] dump_stack_lvl+0x189/0x250 [ 373.182812][T16675] ? __pfx____ratelimit+0x10/0x10 [ 373.182871][T16675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.182897][T16675] ? __pfx__printk+0x10/0x10 [ 373.182926][T16675] ? __might_fault+0xb0/0x130 [ 373.182966][T16675] should_fail_ex+0x414/0x560 [ 373.182995][T16675] _copy_from_iter+0x1db/0x16f0 [ 373.183029][T16675] ? rcu_is_watching+0x15/0xb0 [ 373.183051][T16675] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 373.183080][T16675] ? __pfx__copy_from_iter+0x10/0x10 [ 373.183110][T16675] ? __build_skb_around+0x257/0x3e0 [ 373.183149][T16675] ? netlink_sendmsg+0x642/0xb30 [ 373.183174][T16675] ? skb_put+0x11b/0x210 [ 373.183205][T16675] netlink_sendmsg+0x6b2/0xb30 [ 373.183242][T16675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.183272][T16675] ? aa_sock_msg_perm+0xf1/0x1d0 [ 373.183303][T16675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.183325][T16675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.183353][T16675] __sock_sendmsg+0x219/0x270 [ 373.183380][T16675] ____sys_sendmsg+0x505/0x830 [ 373.183415][T16675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.183475][T16675] ? import_iovec+0x74/0xa0 [ 373.183499][T16675] ___sys_sendmsg+0x21f/0x2a0 [ 373.183532][T16675] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.183601][T16675] ? __fget_files+0x2a/0x420 [ 373.183632][T16675] ? __fget_files+0x3a0/0x420 [ 373.183676][T16675] __x64_sys_sendmsg+0x19b/0x260 [ 373.183713][T16675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.183757][T16675] ? __pfx_ksys_write+0x10/0x10 [ 373.183783][T16675] ? rcu_is_watching+0x15/0xb0 [ 373.183810][T16675] ? do_syscall_64+0xbe/0x3b0 [ 373.183853][T16675] do_syscall_64+0xfa/0x3b0 [ 373.183880][T16675] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.183905][T16675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.183926][T16675] ? clear_bhb_loop+0x60/0xb0 [ 373.183954][T16675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.183976][T16675] RIP: 0033:0x7feea7b8ebe9 [ 373.183996][T16675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.184015][T16675] RSP: 002b:00007feea8941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.184038][T16675] RAX: ffffffffffffffda RBX: 00007feea7db5fa0 RCX: 00007feea7b8ebe9 [ 373.184054][T16675] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 373.184068][T16675] RBP: 00007feea8941090 R08: 0000000000000000 R09: 0000000000000000 [ 373.184082][T16675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.184095][T16675] R13: 00007feea7db6038 R14: 00007feea7db5fa0 R15: 00007ffeadb48bb8 [ 373.184140][T16675] [ 373.479175][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3238'. [ 373.573648][T16665] veth3: entered promiscuous mode [ 373.859333][T16590] chnl_net:caif_netlink_parms(): no params data found [ 374.130914][T16713] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3254'. [ 374.142269][T16706] 8021q: VLANs not supported on sit0 [ 374.164891][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 374.190880][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3252'. [ 374.335982][T16590] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.347416][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.358036][T16590] bridge_slave_0: entered allmulticast mode [ 374.366249][T16590] bridge_slave_0: entered promiscuous mode [ 374.401176][T16590] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.410430][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.426135][T16590] bridge_slave_1: entered allmulticast mode [ 374.474038][T16590] bridge_slave_1: entered promiscuous mode [ 374.528565][ T5881] Bluetooth: hci6: command tx timeout [ 374.534692][T16724] FAULT_INJECTION: forcing a failure. [ 374.534692][T16724] name failslab, interval 1, probability 0, space 0, times 0 [ 374.558580][T16724] CPU: 0 UID: 0 PID: 16724 Comm: syz.3.3256 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 374.558608][T16724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.558621][T16724] Call Trace: [ 374.558630][T16724] [ 374.558639][T16724] dump_stack_lvl+0x189/0x250 [ 374.558680][T16724] ? __pfx____ratelimit+0x10/0x10 [ 374.558706][T16724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.558729][T16724] ? __pfx__printk+0x10/0x10 [ 374.558758][T16724] ? __lock_acquire+0xab9/0xd20 [ 374.558797][T16724] should_fail_ex+0x414/0x560 [ 374.558824][T16724] should_failslab+0xa8/0x100 [ 374.558854][T16724] kmem_cache_alloc_noprof+0x73/0x3c0 [ 374.558880][T16724] ? skb_clone+0x212/0x3a0 [ 374.558902][T16724] skb_clone+0x212/0x3a0 [ 374.558923][T16724] __netlink_deliver_tap+0x404/0x850 [ 374.558961][T16724] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.558987][T16724] netlink_deliver_tap+0x19c/0x1b0 [ 374.559014][T16724] netlink_unicast+0x7fa/0x9e0 [ 374.559046][T16724] ? __pfx_netlink_unicast+0x10/0x10 [ 374.559107][T16724] ? netlink_sendmsg+0x642/0xb30 [ 374.559132][T16724] ? skb_put+0x11b/0x210 [ 374.559164][T16724] netlink_sendmsg+0x805/0xb30 [ 374.559201][T16724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.559233][T16724] ? aa_sock_msg_perm+0xf1/0x1d0 [ 374.559264][T16724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.559287][T16724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.559315][T16724] __sock_sendmsg+0x219/0x270 [ 374.559343][T16724] ____sys_sendmsg+0x505/0x830 [ 374.559379][T16724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.559420][T16724] ? import_iovec+0x74/0xa0 [ 374.559444][T16724] ___sys_sendmsg+0x21f/0x2a0 [ 374.559477][T16724] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.559547][T16724] ? __fget_files+0x2a/0x420 [ 374.559577][T16724] ? __fget_files+0x3a0/0x420 [ 374.559619][T16724] __x64_sys_sendmsg+0x19b/0x260 [ 374.559653][T16724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.559694][T16724] ? __pfx_ksys_write+0x10/0x10 [ 374.559727][T16724] ? do_syscall_64+0xbe/0x3b0 [ 374.559759][T16724] do_syscall_64+0xfa/0x3b0 [ 374.559784][T16724] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.559809][T16724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.559830][T16724] ? clear_bhb_loop+0x60/0xb0 [ 374.559855][T16724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.559876][T16724] RIP: 0033:0x7f2b3718ebe9 [ 374.559894][T16724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.559913][T16724] RSP: 002b:00007f2b3801b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.559935][T16724] RAX: ffffffffffffffda RBX: 00007f2b373b5fa0 RCX: 00007f2b3718ebe9 [ 374.559950][T16724] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 374.559963][T16724] RBP: 00007f2b3801b090 R08: 0000000000000000 R09: 0000000000000000 [ 374.559977][T16724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.559989][T16724] R13: 00007f2b373b6038 R14: 00007f2b373b5fa0 R15: 00007ffeb1b16798 [ 374.560041][T16724] [ 374.821179][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3261'. [ 374.902628][T16590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.916206][T16590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.939196][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3261'. [ 375.087627][ T5875] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 375.105987][T16752] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3266'. [ 375.127506][T16590] team0: Port device team_slave_0 added [ 375.157153][T16752] 0{X: entered promiscuous mode [ 375.162787][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 375.186927][T16752] 0{X: left allmulticast mode [ 375.224844][T16590] team0: Port device team_slave_1 added [ 375.365277][T16590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.391307][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.433990][T16590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.461999][T16590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.496781][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.577834][T16590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.604004][T16773] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3273'. [ 375.647226][T16775] FAULT_INJECTION: forcing a failure. [ 375.647226][T16775] name failslab, interval 1, probability 0, space 0, times 0 [ 375.671128][T16775] CPU: 0 UID: 0 PID: 16775 Comm: syz.2.3275 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 375.671156][T16775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.671169][T16775] Call Trace: [ 375.671177][T16775] [ 375.671186][T16775] dump_stack_lvl+0x189/0x250 [ 375.671216][T16775] ? __pfx____ratelimit+0x10/0x10 [ 375.671243][T16775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.671268][T16775] ? __pfx__printk+0x10/0x10 [ 375.671303][T16775] ? __pfx___might_resched+0x10/0x10 [ 375.671323][T16775] ? fs_reclaim_acquire+0x7d/0x100 [ 375.671360][T16775] should_fail_ex+0x414/0x560 [ 375.671389][T16775] should_failslab+0xa8/0x100 [ 375.671420][T16775] __kmalloc_cache_noprof+0x70/0x3d0 [ 375.671444][T16775] ? tcf_action_init_1+0x19f/0x6d0 [ 375.671469][T16775] tcf_action_init_1+0x19f/0x6d0 [ 375.671496][T16775] ? __pfx_tcf_action_init_1+0x10/0x10 [ 375.671517][T16775] ? _raw_read_unlock+0x28/0x50 [ 375.671540][T16775] ? tc_action_load_ops+0x214/0x4e0 [ 375.671579][T16775] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 375.671607][T16775] ? __nla_parse+0x40/0x60 [ 375.671637][T16775] tcf_action_init+0x2cf/0xab0 [ 375.671664][T16775] ? __pfx_stack_trace_save+0x10/0x10 [ 375.671692][T16775] ? __pfx_tcf_action_init+0x10/0x10 [ 375.671745][T16775] ? __pfx___nla_validate_parse+0x10/0x10 [ 375.671813][T16775] tc_ctl_action+0x430/0xbd0 [ 375.671846][T16775] ? __pfx_tc_ctl_action+0x10/0x10 [ 375.671881][T16775] ? rcu_is_watching+0x15/0xb0 [ 375.671902][T16775] ? trace_contention_end+0x39/0x120 [ 375.671974][T16775] ? __pfx_tc_ctl_action+0x10/0x10 [ 375.671995][T16775] rtnetlink_rcv_msg+0x77c/0xb70 [ 375.672026][T16775] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 375.672052][T16775] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 375.672076][T16775] ? ref_tracker_free+0x63a/0x7d0 [ 375.672101][T16775] ? __asan_memcpy+0x40/0x70 [ 375.672124][T16775] ? __pfx_ref_tracker_free+0x10/0x10 [ 375.672161][T16775] netlink_rcv_skb+0x208/0x470 [ 375.672188][T16775] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 375.672216][T16775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.672255][T16775] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.672291][T16775] netlink_unicast+0x82f/0x9e0 [ 375.672324][T16775] ? __pfx_netlink_unicast+0x10/0x10 [ 375.672350][T16775] ? netlink_sendmsg+0x642/0xb30 [ 375.672374][T16775] ? skb_put+0x11b/0x210 [ 375.672405][T16775] netlink_sendmsg+0x805/0xb30 [ 375.672442][T16775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.672473][T16775] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.672503][T16775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.672525][T16775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.672553][T16775] __sock_sendmsg+0x219/0x270 [ 375.672579][T16775] ____sys_sendmsg+0x505/0x830 [ 375.672617][T16775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.672658][T16775] ? import_iovec+0x74/0xa0 [ 375.672682][T16775] ___sys_sendmsg+0x21f/0x2a0 [ 375.672732][T16775] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.672809][T16775] ? __fget_files+0x2a/0x420 [ 375.672841][T16775] ? __fget_files+0x3a0/0x420 [ 375.672891][T16775] __x64_sys_sendmsg+0x19b/0x260 [ 375.672927][T16775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.672971][T16775] ? __pfx_ksys_write+0x10/0x10 [ 375.672997][T16775] ? rcu_is_watching+0x15/0xb0 [ 375.673025][T16775] ? do_syscall_64+0xbe/0x3b0 [ 375.673058][T16775] do_syscall_64+0xfa/0x3b0 [ 375.673085][T16775] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.673111][T16775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.673133][T16775] ? clear_bhb_loop+0x60/0xb0 [ 375.673160][T16775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.673182][T16775] RIP: 0033:0x7feea7b8ebe9 [ 375.673201][T16775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.673221][T16775] RSP: 002b:00007feea8941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.673244][T16775] RAX: ffffffffffffffda RBX: 00007feea7db5fa0 RCX: 00007feea7b8ebe9 [ 375.673260][T16775] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 375.673274][T16775] RBP: 00007feea8941090 R08: 0000000000000000 R09: 0000000000000000 [ 375.673287][T16775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.673300][T16775] R13: 00007feea7db6038 R14: 00007feea7db5fa0 R15: 00007ffeadb48bb8 [ 375.673335][T16775] [ 376.171215][T16590] hsr_slave_0: entered promiscuous mode [ 376.180423][T16590] hsr_slave_1: entered promiscuous mode [ 376.186738][T16590] debugfs: 'hsr0' already exists in 'hsr' [ 376.193075][T16590] Cannot create hsr debugfs directory [ 376.436524][T16787] tipc: Enabling of bearer rejected, failed to enable media [ 376.466253][T16793] netlink: 'syz.1.3281': attribute type 10 has an invalid length. [ 376.555608][T16797] netlink: 'syz.3.3283': attribute type 1 has an invalid length. [ 376.583791][T16793] macvtap3: entered promiscuous mode [ 376.590764][T16793] vlan0: entered promiscuous mode [ 376.596258][T16793] macvtap3: entered allmulticast mode [ 376.602780][T16793] vlan0: entered allmulticast mode [ 376.608026][T16793] veth0_vlan: entered allmulticast mode [ 376.608385][ T5875] Bluetooth: hci6: command tx timeout [ 376.654166][T16590] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 376.675077][T16590] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 376.705371][T16795] netlink: 'syz.5.3282': attribute type 1 has an invalid length. [ 376.755894][T16590] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 376.849844][ T96] block nbd2: Possible stuck request ffff888025130000: control (read@0,1024B). Runtime 240 seconds [ 376.851784][T16806] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 376.861959][ T96] block nbd2: Possible stuck request ffff8880251301c0: control (read@1024,1024B). Runtime 240 seconds [ 376.874132][T16590] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 376.891811][ T96] block nbd2: Possible stuck request ffff888025130380: control (read@2048,1024B). Runtime 240 seconds [ 376.908190][ T96] block nbd2: Possible stuck request ffff888025130540: control (read@3072,1024B). Runtime 240 seconds [ 377.017951][T16590] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 377.096738][T16590] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.176602][T16817] FAULT_INJECTION: forcing a failure. [ 377.176602][T16817] name failslab, interval 1, probability 0, space 0, times 0 [ 377.216319][T16817] CPU: 0 UID: 0 PID: 16817 Comm: syz.5.3287 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 377.216349][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.216362][T16817] Call Trace: [ 377.216371][T16817] [ 377.216381][T16817] dump_stack_lvl+0x189/0x250 [ 377.216412][T16817] ? __pfx____ratelimit+0x10/0x10 [ 377.216440][T16817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.216467][T16817] ? __pfx__printk+0x10/0x10 [ 377.216509][T16817] ? __pfx___might_resched+0x10/0x10 [ 377.216531][T16817] ? fs_reclaim_acquire+0x7d/0x100 [ 377.216571][T16817] should_fail_ex+0x414/0x560 [ 377.216613][T16817] should_failslab+0xa8/0x100 [ 377.216645][T16817] kmem_cache_alloc_noprof+0x73/0x3c0 [ 377.216672][T16817] ? radix_tree_node_alloc+0x7e/0x3a0 [ 377.216701][T16817] radix_tree_node_alloc+0x7e/0x3a0 [ 377.216733][T16817] idr_get_free+0x2b3/0xa70 [ 377.216771][T16817] idr_alloc_u32+0x159/0x2d0 [ 377.216802][T16817] ? __pfx_idr_alloc_u32+0x10/0x10 [ 377.216833][T16817] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 377.216859][T16817] tcf_idr_check_alloc+0x5de/0x7b0 [ 377.216880][T16817] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 377.216901][T16817] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 377.216925][T16817] ? __nla_parse+0x40/0x60 [ 377.216957][T16817] tcf_police_init+0x235/0x1430 [ 377.217010][T16817] ? __pfx_tcf_police_init+0x10/0x10 [ 377.217077][T16817] ? nla_memcpy+0x5b/0xc0 [ 377.217113][T16817] tcf_action_init_1+0x460/0x6d0 [ 377.217144][T16817] ? __pfx_tcf_action_init_1+0x10/0x10 [ 377.217165][T16817] ? _raw_read_unlock+0x28/0x50 [ 377.217206][T16817] ? tc_action_load_ops+0x214/0x4e0 [ 377.217247][T16817] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.217280][T16817] ? __nla_parse+0x40/0x60 [ 377.217312][T16817] tcf_action_init+0x2cf/0xab0 [ 377.217342][ T5232] udevd[5232]: worker [5915] /devices/virtual/block/nbd0 timeout; kill it [ 377.217340][T16817] ? __pfx_stack_trace_save+0x10/0x10 [ 377.217371][T16817] ? __pfx_tcf_action_init+0x10/0x10 [ 377.217426][T16817] ? __pfx___nla_validate_parse+0x10/0x10 [ 377.217524][T16817] tc_ctl_action+0x430/0xbd0 [ 377.217563][T16817] ? __pfx_tc_ctl_action+0x10/0x10 [ 377.217593][T16817] ? rcu_is_watching+0x15/0xb0 [ 377.217617][T16817] ? trace_contention_end+0x39/0x120 [ 377.217695][T16817] ? __pfx_tc_ctl_action+0x10/0x10 [ 377.217719][T16817] rtnetlink_rcv_msg+0x77c/0xb70 [ 377.217754][T16817] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 377.217784][T16817] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.217810][T16817] ? ref_tracker_free+0x63a/0x7d0 [ 377.217840][T16817] ? __asan_memcpy+0x40/0x70 [ 377.217867][T16817] ? __pfx_ref_tracker_free+0x10/0x10 [ 377.217908][T16817] netlink_rcv_skb+0x208/0x470 [ 377.217940][T16817] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.217973][T16817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.218016][T16817] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.218056][T16817] netlink_unicast+0x82f/0x9e0 [ 377.218093][T16817] ? __pfx_netlink_unicast+0x10/0x10 [ 377.218123][T16817] ? netlink_sendmsg+0x642/0xb30 [ 377.218150][T16817] ? skb_put+0x11b/0x210 [ 377.218198][T16817] netlink_sendmsg+0x805/0xb30 [ 377.218236][T16817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.218269][T16817] ? aa_sock_msg_perm+0xf1/0x1d0 [ 377.218301][T16817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.218325][T16817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.218355][T16817] __sock_sendmsg+0x219/0x270 [ 377.218383][T16817] ____sys_sendmsg+0x505/0x830 [ 377.218421][T16817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.218465][T16817] ? import_iovec+0x74/0xa0 [ 377.218496][T16817] ___sys_sendmsg+0x21f/0x2a0 [ 377.218530][T16817] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.218604][T16817] ? __fget_files+0x2a/0x420 [ 377.218635][T16817] ? __fget_files+0x3a0/0x420 [ 377.218679][T16817] __x64_sys_sendmsg+0x19b/0x260 [ 377.218715][T16817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.218758][T16817] ? __pfx_ksys_write+0x10/0x10 [ 377.218784][T16817] ? rcu_is_watching+0x15/0xb0 [ 377.218812][T16817] ? do_syscall_64+0xbe/0x3b0 [ 377.218847][T16817] do_syscall_64+0xfa/0x3b0 [ 377.218874][T16817] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.218901][T16817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.218943][T16817] ? clear_bhb_loop+0x60/0xb0 [ 377.218972][T16817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.218996][T16817] RIP: 0033:0x7f717b38ebe9 [ 377.219027][T16817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.219048][T16817] RSP: 002b:00007f717c1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.219071][T16817] RAX: ffffffffffffffda RBX: 00007f717b5b5fa0 RCX: 00007f717b38ebe9 [ 377.219087][T16817] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 377.219101][T16817] RBP: 00007f717c1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 377.219131][T16817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.219145][T16817] R13: 00007f717b5b6038 R14: 00007f717b5b5fa0 R15: 00007fffe8ae31c8 [ 377.219182][T16817] [ 377.729382][ T5232] udevd[5232]: seq 11543 '/devices/virtual/block/nbd0' killed [ 377.737236][ T5232] udevd[5232]: worker [5984] /devices/virtual/block/nbd1 timeout; kill it [ 377.746661][ T5232] udevd[5232]: seq 11600 '/devices/virtual/block/nbd1' killed [ 377.754322][ T5232] udevd[5232]: worker [5916] /devices/virtual/block/nbd2 timeout; kill it [ 377.763108][T16590] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 377.763137][ T5232] udevd[5232]: seq 12288 '/devices/virtual/block/nbd2' killed [ 377.781697][ T5232] udevd[5232]: worker [6151] /devices/virtual/block/nbd3 is taking a long time [ 377.807212][T16590] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.174260][T16590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 378.232386][T16590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 378.291207][T16590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 378.324249][T16855] __nla_validate_parse: 8 callbacks suppressed [ 378.324266][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 378.357537][T16590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 378.390730][T16857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'. [ 378.390857][T16843] 8021q: VLANs not supported on ip6_vti0 [ 378.489372][T16855] team0: Device wireguard0 is of different type [ 378.541345][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 378.561897][T16857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.574096][T16870] netlink: 'syz.3.3305': attribute type 10 has an invalid length. [ 378.621641][T16857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.681677][ T5875] Bluetooth: hci6: command tx timeout [ 378.693067][T16870] bridge0: port 3(team0) entered blocking state [ 378.705103][T16870] bridge0: port 3(team0) entered disabled state [ 378.717627][T16870] team0: entered allmulticast mode [ 378.724172][T16870] team_slave_0: entered allmulticast mode [ 378.736416][T16870] team_slave_1: entered allmulticast mode [ 378.746650][T16870] team0: entered promiscuous mode [ 378.753334][T16870] team_slave_0: entered promiscuous mode [ 378.762270][T16870] team_slave_1: entered promiscuous mode [ 378.769677][T16870] bridge0: port 3(team0) entered blocking state [ 378.776155][T16870] bridge0: port 3(team0) entered forwarding state [ 378.996201][T16590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.069521][T16590] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.103470][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.110706][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.165463][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.172675][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.202459][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'. [ 379.213677][T16890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 379.242368][T16890] netlink: 'syz.2.3311': attribute type 12 has an invalid length. [ 379.253951][T16890] netlink: 'syz.2.3311': attribute type 11 has an invalid length. [ 379.458875][T16894] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3313'. [ 379.503703][T16894] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3313'. [ 379.539789][T16894] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3313'. [ 379.594566][T16894] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3313'. [ 379.654238][T16894] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3313'. [ 379.756962][T16910] netlink: 'syz.2.3317': attribute type 1 has an invalid length. [ 379.970941][T16914] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>PRaG' [ 380.015510][T16914] CPU: 0 UID: 0 PID: 16914 Comm: syz.1.3318 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 380.015543][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.015559][T16914] Call Trace: [ 380.015569][T16914] [ 380.015579][T16914] dump_stack_lvl+0x189/0x250 [ 380.015625][T16914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.015654][T16914] ? __pfx__printk+0x10/0x10 [ 380.015695][T16914] ? kernfs_path_from_node+0x2f/0x290 [ 380.015721][T16914] ? kernfs_path_from_node+0x250/0x290 [ 380.015745][T16914] ? kernfs_path_from_node+0x2f/0x290 [ 380.015777][T16914] sysfs_warn_dup+0x8e/0xa0 [ 380.015803][T16914] sysfs_do_create_link_sd+0xc0/0x110 [ 380.015832][T16914] device_add_class_symlinks+0x1cf/0x240 [ 380.015872][T16914] device_add+0x475/0xb50 [ 380.015912][T16914] wiphy_register+0x1ba6/0x28d0 [ 380.015961][T16914] ? __pfx_wiphy_register+0x10/0x10 [ 380.015988][T16914] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 380.016033][T16914] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 380.016073][T16914] ieee80211_register_hw+0x3425/0x4080 [ 380.016129][T16914] ? ieee80211_register_hw+0x1401/0x4080 [ 380.016187][T16914] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 380.016238][T16914] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.016270][T16914] ? __hrtimer_setup+0x187/0x210 [ 380.016287][T16914] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 380.016314][T16914] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 380.016365][T16914] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 380.016385][T16914] ? trace_kmalloc+0x1f/0xd0 [ 380.016409][T16914] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 380.016436][T16914] ? kstrndup+0xbf/0x160 [ 380.016467][T16914] hwsim_new_radio_nl+0xea4/0x1b10 [ 380.016492][T16914] ? __pfx___nla_validate_parse+0x10/0x10 [ 380.016532][T16914] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.016565][T16914] ? __nla_parse+0x40/0x60 [ 380.016593][T16914] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 380.016622][T16914] genl_family_rcv_msg_doit+0x212/0x300 [ 380.016650][T16914] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 380.016682][T16914] ? bpf_lsm_capable+0x9/0x20 [ 380.016707][T16914] ? security_capable+0x7e/0x2e0 [ 380.016739][T16914] genl_rcv_msg+0x60e/0x790 [ 380.016764][T16914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.016782][T16914] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.016817][T16914] netlink_rcv_skb+0x208/0x470 [ 380.016840][T16914] ? __lock_acquire+0xab9/0xd20 [ 380.016874][T16914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.016898][T16914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.016950][T16914] ? down_read+0x1ad/0x2e0 [ 380.016984][T16914] genl_rcv+0x28/0x40 [ 380.017016][T16914] netlink_unicast+0x82f/0x9e0 [ 380.017053][T16914] ? __pfx_netlink_unicast+0x10/0x10 [ 380.017081][T16914] ? netlink_sendmsg+0x642/0xb30 [ 380.017108][T16914] ? skb_put+0x11b/0x210 [ 380.017143][T16914] netlink_sendmsg+0x805/0xb30 [ 380.017183][T16914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.017225][T16914] ? aa_sock_msg_perm+0xf1/0x1d0 [ 380.017259][T16914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.017283][T16914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.017314][T16914] __sock_sendmsg+0x219/0x270 [ 380.017343][T16914] ____sys_sendmsg+0x505/0x830 [ 380.017383][T16914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.017427][T16914] ? import_iovec+0x74/0xa0 [ 380.017454][T16914] ___sys_sendmsg+0x21f/0x2a0 [ 380.017491][T16914] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.017567][T16914] ? __fget_files+0x2a/0x420 [ 380.017600][T16914] ? __fget_files+0x3a0/0x420 [ 380.017645][T16914] __x64_sys_sendmsg+0x19b/0x260 [ 380.017681][T16914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.017745][T16914] ? rcu_is_watching+0x15/0xb0 [ 380.017774][T16914] ? do_syscall_64+0xbe/0x3b0 [ 380.017809][T16914] do_syscall_64+0xfa/0x3b0 [ 380.017839][T16914] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.017867][T16914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.017890][T16914] ? clear_bhb_loop+0x60/0xb0 [ 380.017918][T16914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.017942][T16914] RIP: 0033:0x7fb1e238ebe9 [ 380.017962][T16914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.017983][T16914] RSP: 002b:00007fb1e32e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.018007][T16914] RAX: ffffffffffffffda RBX: 00007fb1e25b5fa0 RCX: 00007fb1e238ebe9 [ 380.018024][T16914] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e [ 380.018038][T16914] RBP: 00007fb1e2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 380.018052][T16914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.018077][T16914] R13: 00007fb1e25b6038 R14: 00007fb1e25b5fa0 R15: 00007fff05c07b88 [ 380.018114][T16914] [ 380.683309][ T96] block nbd0: Possible stuck request ffff888025060000: control (read@0,1024B). Runtime 270 seconds [ 380.695082][ T96] block nbd0: Possible stuck request ffff8880250601c0: control (read@1024,1024B). Runtime 270 seconds [ 380.712946][ T96] block nbd0: Possible stuck request ffff888025060380: control (read@2048,1024B). Runtime 270 seconds [ 380.725553][ T96] block nbd0: Possible stuck request ffff888025060540: control (read@3072,1024B). Runtime 270 seconds [ 381.301834][T16590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.647931][T16590] veth0_vlan: entered promiscuous mode [ 381.685418][T16590] veth1_vlan: entered promiscuous mode [ 381.733763][T16965] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>PRaG' [ 381.767884][T16965] CPU: 0 UID: 0 PID: 16965 Comm: syz.2.3330 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 381.767917][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.767931][T16965] Call Trace: [ 381.767941][T16965] [ 381.767953][T16965] dump_stack_lvl+0x189/0x250 [ 381.767991][T16965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.768021][T16965] ? __pfx__printk+0x10/0x10 [ 381.768064][T16965] ? kernfs_path_from_node+0x2f/0x290 [ 381.768090][T16965] ? kernfs_path_from_node+0x250/0x290 [ 381.768113][T16965] ? kernfs_path_from_node+0x2f/0x290 [ 381.768144][T16965] sysfs_warn_dup+0x8e/0xa0 [ 381.768169][T16965] sysfs_do_create_link_sd+0xc0/0x110 [ 381.768197][T16965] device_add_class_symlinks+0x1cf/0x240 [ 381.768235][T16965] device_add+0x475/0xb50 [ 381.768273][T16965] wiphy_register+0x1ba6/0x28d0 [ 381.768320][T16965] ? __pfx_wiphy_register+0x10/0x10 [ 381.768347][T16965] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 381.768391][T16965] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 381.768445][T16965] ieee80211_register_hw+0x3425/0x4080 [ 381.768501][T16965] ? ieee80211_register_hw+0x1401/0x4080 [ 381.768545][T16965] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 381.768585][T16965] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 381.768620][T16965] ? __hrtimer_setup+0x187/0x210 [ 381.768640][T16965] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 381.768672][T16965] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 381.768733][T16965] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 381.768757][T16965] ? trace_kmalloc+0x1f/0xd0 [ 381.768783][T16965] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 381.768814][T16965] ? kstrndup+0xbf/0x160 [ 381.768848][T16965] hwsim_new_radio_nl+0xea4/0x1b10 [ 381.768877][T16965] ? __pfx___nla_validate_parse+0x10/0x10 [ 381.768925][T16965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 381.768967][T16965] ? __nla_parse+0x40/0x60 [ 381.769001][T16965] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 381.769035][T16965] genl_family_rcv_msg_doit+0x212/0x300 [ 381.769067][T16965] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 381.769107][T16965] ? bpf_lsm_capable+0x9/0x20 [ 381.769136][T16965] ? security_capable+0x7e/0x2e0 [ 381.769173][T16965] genl_rcv_msg+0x60e/0x790 [ 381.769203][T16965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.769224][T16965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 381.769266][T16965] netlink_rcv_skb+0x208/0x470 [ 381.769293][T16965] ? __lock_acquire+0xab9/0xd20 [ 381.769326][T16965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.769350][T16965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.769409][T16965] ? down_read+0x1ad/0x2e0 [ 381.769444][T16965] genl_rcv+0x28/0x40 [ 381.769476][T16965] netlink_unicast+0x82f/0x9e0 [ 381.769514][T16965] ? __pfx_netlink_unicast+0x10/0x10 [ 381.769543][T16965] ? netlink_sendmsg+0x642/0xb30 [ 381.769570][T16965] ? skb_put+0x11b/0x210 [ 381.769606][T16965] netlink_sendmsg+0x805/0xb30 [ 381.769647][T16965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.769682][T16965] ? aa_sock_msg_perm+0xf1/0x1d0 [ 381.769716][T16965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.769739][T16965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.769770][T16965] __sock_sendmsg+0x219/0x270 [ 381.769799][T16965] ____sys_sendmsg+0x505/0x830 [ 381.769840][T16965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.769885][T16965] ? import_iovec+0x74/0xa0 [ 381.769912][T16965] ___sys_sendmsg+0x21f/0x2a0 [ 381.769948][T16965] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.770026][T16965] ? __fget_files+0x2a/0x420 [ 381.770058][T16965] ? __fget_files+0x3a0/0x420 [ 381.770105][T16965] __x64_sys_sendmsg+0x19b/0x260 [ 381.770142][T16965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.770189][T16965] ? rcu_is_watching+0x15/0xb0 [ 381.770219][T16965] ? do_syscall_64+0xbe/0x3b0 [ 381.770253][T16965] do_syscall_64+0xfa/0x3b0 [ 381.770280][T16965] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.770307][T16965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.770331][T16965] ? clear_bhb_loop+0x60/0xb0 [ 381.770359][T16965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.770382][T16965] RIP: 0033:0x7feea7b8ebe9 [ 381.770409][T16965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.770429][T16965] RSP: 002b:00007feea8941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.770453][T16965] RAX: ffffffffffffffda RBX: 00007feea7db5fa0 RCX: 00007feea7b8ebe9 [ 381.770469][T16965] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e [ 381.770483][T16965] RBP: 00007feea7c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 381.770497][T16965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.770510][T16965] R13: 00007feea7db6038 R14: 00007feea7db5fa0 R15: 00007ffeadb48bb8 [ 381.770545][T16965] [ 382.314051][T16590] veth0_macvtap: entered promiscuous mode [ 382.330459][T16590] veth1_macvtap: entered promiscuous mode [ 382.390528][T16590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.404991][T16590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.478719][ T693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.546547][T16981] netlink: 'syz.1.3332': attribute type 4 has an invalid length. [ 382.558528][ T693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.567532][ T693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.580540][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.802250][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.856432][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.925456][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.969270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.182182][T17002] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.241400][ T55] block nbd1: Possible stuck request ffff88802510e000: control (read@0,1024B). Runtime 270 seconds [ 383.252574][ T55] block nbd1: Possible stuck request ffff88802510e1c0: control (read@1024,1024B). Runtime 270 seconds [ 383.263877][ T55] block nbd1: Possible stuck request ffff88802510e380: control (read@2048,1024B). Runtime 270 seconds [ 383.275943][ T55] block nbd1: Possible stuck request ffff88802510e540: control (read@3072,1024B). Runtime 270 seconds [ 383.460733][T17011] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>PRaG' [ 383.481142][T17011] CPU: 0 UID: 0 PID: 17011 Comm: syz.3.3342 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 383.481172][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.481186][T17011] Call Trace: [ 383.481195][T17011] [ 383.481205][T17011] dump_stack_lvl+0x189/0x250 [ 383.481242][T17011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.481270][T17011] ? __pfx__printk+0x10/0x10 [ 383.481308][T17011] ? kernfs_path_from_node+0x2f/0x290 [ 383.481333][T17011] ? kernfs_path_from_node+0x250/0x290 [ 383.481356][T17011] ? kernfs_path_from_node+0x2f/0x290 [ 383.481387][T17011] sysfs_warn_dup+0x8e/0xa0 [ 383.481410][T17011] sysfs_do_create_link_sd+0xc0/0x110 [ 383.481438][T17011] device_add_class_symlinks+0x1cf/0x240 [ 383.481476][T17011] device_add+0x475/0xb50 [ 383.481512][T17011] wiphy_register+0x1ba6/0x28d0 [ 383.481560][T17011] ? __pfx_wiphy_register+0x10/0x10 [ 383.481586][T17011] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 383.481629][T17011] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 383.481668][T17011] ieee80211_register_hw+0x3425/0x4080 [ 383.481722][T17011] ? ieee80211_register_hw+0x1401/0x4080 [ 383.481768][T17011] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 383.481809][T17011] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 383.481844][T17011] ? __hrtimer_setup+0x187/0x210 [ 383.481864][T17011] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 383.481897][T17011] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 383.481959][T17011] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 383.481983][T17011] ? trace_kmalloc+0x1f/0xd0 [ 383.482009][T17011] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 383.482061][T17011] ? kstrndup+0xbf/0x160 [ 383.482098][T17011] hwsim_new_radio_nl+0xea4/0x1b10 [ 383.482127][T17011] ? __pfx___nla_validate_parse+0x10/0x10 [ 383.482198][T17011] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 383.482240][T17011] ? __nla_parse+0x40/0x60 [ 383.482273][T17011] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 383.482307][T17011] genl_family_rcv_msg_doit+0x212/0x300 [ 383.482339][T17011] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 383.482378][T17011] ? bpf_lsm_capable+0x9/0x20 [ 383.482407][T17011] ? security_capable+0x7e/0x2e0 [ 383.482444][T17011] genl_rcv_msg+0x60e/0x790 [ 383.482473][T17011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.482494][T17011] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 383.482537][T17011] netlink_rcv_skb+0x208/0x470 [ 383.482562][T17011] ? __lock_acquire+0xab9/0xd20 [ 383.482594][T17011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.482618][T17011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.482671][T17011] ? down_read+0x1ad/0x2e0 [ 383.482705][T17011] genl_rcv+0x28/0x40 [ 383.482737][T17011] netlink_unicast+0x82f/0x9e0 [ 383.482775][T17011] ? __pfx_netlink_unicast+0x10/0x10 [ 383.482803][T17011] ? netlink_sendmsg+0x642/0xb30 [ 383.482830][T17011] ? skb_put+0x11b/0x210 [ 383.482866][T17011] netlink_sendmsg+0x805/0xb30 [ 383.482903][T17011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.482938][T17011] ? aa_sock_msg_perm+0xf1/0x1d0 [ 383.482971][T17011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.482995][T17011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.483026][T17011] __sock_sendmsg+0x219/0x270 [ 383.483056][T17011] ____sys_sendmsg+0x505/0x830 [ 383.483095][T17011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.483149][T17011] ? import_iovec+0x74/0xa0 [ 383.483175][T17011] ___sys_sendmsg+0x21f/0x2a0 [ 383.483211][T17011] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.483292][T17011] ? __fget_files+0x2a/0x420 [ 383.483323][T17011] ? __fget_files+0x3a0/0x420 [ 383.483370][T17011] __x64_sys_sendmsg+0x19b/0x260 [ 383.483406][T17011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.483453][T17011] ? rcu_is_watching+0x15/0xb0 [ 383.483483][T17011] ? do_syscall_64+0xbe/0x3b0 [ 383.483516][T17011] do_syscall_64+0xfa/0x3b0 [ 383.483543][T17011] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.483569][T17011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.483592][T17011] ? clear_bhb_loop+0x60/0xb0 [ 383.483619][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.483640][T17011] RIP: 0033:0x7f2b3718ebe9 [ 383.483660][T17011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.483680][T17011] RSP: 002b:00007f2b3801b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.483703][T17011] RAX: ffffffffffffffda RBX: 00007f2b373b5fa0 RCX: 00007f2b3718ebe9 [ 383.483718][T17011] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e [ 383.483732][T17011] RBP: 00007f2b37211e19 R08: 0000000000000000 R09: 0000000000000000 [ 383.483745][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.483758][T17011] R13: 00007f2b373b6038 R14: 00007f2b373b5fa0 R15: 00007ffeb1b16798 [ 383.483795][T17011] [ 384.160124][T17022] __nla_validate_parse: 32 callbacks suppressed [ 384.160143][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3344'. [ 384.216338][T17025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3345'. [ 384.397844][T17037] netlink: 'syz.3.3350': attribute type 28 has an invalid length. [ 384.449876][T17034] lo speed is unknown, defaulting to 1000 [ 384.453973][T17037] netlink: 'syz.3.3350': attribute type 3 has an invalid length. [ 384.529620][T17037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3350'. [ 384.717855][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 385.159519][ T55] block nbd3: Possible stuck request ffff8880251ae000: control (read@0,4096B). Runtime 180 seconds [ 385.395252][T17065] netlink: 'syz.3.3358': attribute type 1 has an invalid length. [ 385.508296][T17065] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3358'. [ 385.628315][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'. [ 386.605589][T17105] delete_channel: no stack [ 386.707695][T17113] netlink: 'syz.5.3372': attribute type 4 has an invalid length. [ 386.839624][T17117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.072908][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3379'. [ 387.101072][T17129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3379'. [ 387.204573][T17140] tipc: Started in network mode [ 387.209678][T17140] tipc: Node identity 6eabd9748fbd, cluster identity 4711 [ 387.228385][T17140] tipc: Enabled bearer , priority 0 [ 387.257268][T17140] syzkaller0: entered promiscuous mode [ 387.266935][T17140] syzkaller0: entered allmulticast mode [ 387.520474][T17144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.635827][T17139] tipc: Resetting bearer [ 387.688654][T17139] tipc: Disabling bearer [ 387.901847][T17169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3391'. [ 388.050746][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3394'. [ 388.105123][T17182] bridge0: port 3(syz_tun) entered blocking state [ 388.124942][T17182] bridge0: port 3(syz_tun) entered disabled state [ 388.159237][T17182] syz_tun: entered allmulticast mode [ 388.195625][T17182] syz_tun: entered promiscuous mode [ 388.232225][T17182] bridge0: port 3(syz_tun) entered blocking state [ 388.238837][T17182] bridge0: port 3(syz_tun) entered forwarding state [ 388.352626][T17192] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.469880][T17201] netlink: 'syz.2.3402': attribute type 1 has an invalid length. [ 388.543214][T17192] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.602547][T17207] openvswitch: netlink: IP tunnel TTL not specified. [ 388.693961][T17192] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.880713][T17192] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.118003][ T12] bridge_slave_1: left allmulticast mode [ 389.129993][ T12] bridge_slave_1: left promiscuous mode [ 389.137335][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.170185][T17229] __nla_validate_parse: 3 callbacks suppressed [ 389.170205][T17229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3411'. [ 389.197369][ T12] : left allmulticast mode [ 389.207066][ T12] : left promiscuous mode [ 389.214735][ T12] bridge0: port 1() entered disabled state [ 389.220213][T17229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3411'. [ 389.250124][ T5983] IPVS: starting estimator thread 0... [ 389.316712][ T12] tipc: Resetting bearer [ 389.360710][T17233] IPVS: using max 25 ests per chain, 60000 per kthread [ 389.390396][T17240] sctp: [Deprecated]: syz.1.3412 (pid 17240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.390396][T17240] Use struct sctp_sack_info instead [ 389.434310][ T12] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 389.446336][ T12] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 389.455994][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 389.467644][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.477721][ T12] Workqueue: netns cleanup_net [ 389.482536][ T12] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 389.488230][ T12] Code: ff ff ff e8 13 d6 41 01 89 c5 31 ff 89 c6 e8 08 cb 88 f7 85 ed 74 45 e8 bf c6 88 f7 eb 05 e8 b8 c6 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 42 31 ec f7 49 8b 2c 24 49 8d 7c [ 389.507848][ T12] RSP: 0018:ffffc900001173b0 EFLAGS: 00010206 [ 389.513915][ T12] RAX: 000000001fffe000 RBX: 1ffff1100b5e1e02 RCX: ffff88801cecda00 [ 389.521889][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 389.529855][ T12] RBP: 0000000000000001 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6 [ 389.537830][ T12] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: 00000000ffff0000 [ 389.545809][ T12] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805af0f010 [ 389.553882][ T12] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 389.562909][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.569498][ T12] CR2: 00007f51c45b4000 CR3: 0000000078746000 CR4: 00000000003526f0 [ 389.577481][ T12] Call Trace: [ 389.580765][ T12] [ 389.583710][ T12] __ipv6_dev_mc_dec+0x2e4/0x330 [ 389.588666][ T12] ipv6_dev_mc_dec+0x30/0xc0 [ 389.593270][ T12] br_multicast_leave_snoopers+0x15a/0x1c0 [ 389.599091][ T12] ? __pfx___timer_delete_sync+0x10/0x10 [ 389.604733][ T12] ? __pfx_br_multicast_leave_snoopers+0x10/0x10 [ 389.611074][ T12] br_dev_stop+0x8a/0x180 [ 389.615405][ T12] ? __pfx_br_dev_stop+0x10/0x10 [ 389.620349][ T12] __dev_close_many+0x364/0x6f0 [ 389.625209][ T12] ? __pfx___dev_close_many+0x10/0x10 [ 389.630602][ T12] netif_close_many+0x225/0x410 [ 389.635464][ T12] ? __pfx_netif_close_many+0x10/0x10 [ 389.640862][ T12] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 389.647225][ T12] ? unregister_netdevice_queue+0x1b3/0x380 [ 389.653221][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 389.659995][ T12] ? __pfx_call_rcu+0x10/0x10 [ 389.664670][ T12] ? net_generic+0x1e/0x240 [ 389.669183][ T12] ? remove_nexthop+0xdf/0x180 [ 389.673966][ T12] ops_undo_list+0x3dc/0x990 [ 389.678581][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 389.683714][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 389.688938][ T12] cleanup_net+0x4c5/0x800 [ 389.693407][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 389.698399][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.703607][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 389.709332][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 389.715059][ T12] process_scheduled_works+0xade/0x17b0 [ 389.720626][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.726622][ T12] worker_thread+0x8a0/0xda0 [ 389.731228][ T12] kthread+0x70e/0x8a0 [ 389.735313][ T12] ? __pfx_worker_thread+0x10/0x10 [ 389.740428][ T12] ? __pfx_kthread+0x10/0x10 [ 389.745045][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.750250][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.755468][ T12] ? __pfx_kthread+0x10/0x10 [ 389.760068][ T12] ret_from_fork+0x3fc/0x770 [ 389.764664][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 389.769782][ T12] ? __switch_to_asm+0x39/0x70 [ 389.774558][ T12] ? __switch_to_asm+0x33/0x70 [ 389.779334][ T12] ? __pfx_kthread+0x10/0x10 [ 389.783954][ T12] ret_from_fork_asm+0x1a/0x30 [ 389.788753][ T12] [ 389.791791][ T12] Modules linked in: [ 389.798333][ T12] ---[ end trace 0000000000000000 ]--- [ 389.821162][ T12] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 389.827036][ T12] Code: ff ff ff e8 13 d6 41 01 89 c5 31 ff 89 c6 e8 08 cb 88 f7 85 ed 74 45 e8 bf c6 88 f7 eb 05 e8 b8 c6 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 42 31 ec f7 49 8b 2c 24 49 8d 7c [ 389.847396][ T12] RSP: 0018:ffffc900001173b0 EFLAGS: 00010206 [ 389.855377][ T12] RAX: 000000001fffe000 RBX: 1ffff1100b5e1e02 RCX: ffff88801cecda00 [ 389.863519][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 389.873120][ T12] RBP: 0000000000000001 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6 [ 389.883746][ T12] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: 00000000ffff0000 [ 389.892769][ T12] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805af0f010 [ 389.902234][ T12] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 389.912055][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.919746][ T12] CR2: 00007f51c4287e9c CR3: 0000000078746000 CR4: 00000000003526f0 [ 389.927799][ T12] Kernel panic - not syncing: Fatal exception [ 389.934276][ T12] Kernel Offset: disabled [ 389.938614][ T12] Rebooting in 86400 seconds..