last executing test programs: 7.398214261s ago: executing program 0 (id=6247): r0 = socket(0x1e, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000180), 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$802154_dgram(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x40) 7.141492424s ago: executing program 0 (id=6250): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2b, r1}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) r5 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[], 0xd4}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) accept4$inet6(r5, 0x0, &(0x7f0000000040), 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r7) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r8, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c840) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}}, 0x0) 7.059525809s ago: executing program 0 (id=6253): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d3e8621c8726dcd320000000000000000bb1632ea5704cae881ef915d", 0x24) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d3e8621c8726dcd320000000000000000bb1632ea5704cae881ef915d", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 6.886676431s ago: executing program 0 (id=6255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e}, {@in=@private=0xa010101, 0x4d6, 0x32}, @in=@multicast2, {0x2, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x3f, 0x541}, {0x4, 0x7fffffffffffffff, 0xffffffffffffff01, 0x7}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x38}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="8238", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000140)) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_COMPAT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x24040000) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c000000000a050000004136e00800000a0000090900010073797a31000000000900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 6.682356413s ago: executing program 0 (id=6257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x8, &(0x7f0000000240)={0x2, 0x4, 0x5, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0xa8, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0xfbee86acd6187797) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff3}, {0x0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x2c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='&'], 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x1c}}, 0x4000001) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a2ec61e52d6bd0de8f4c9e6c315c8aec2709d5a055e6e8a0bd60d5074bbe0", @ANYRES32=0x0, @ANYBLOB="19220000040902001c0012800b00010062726964676500000c0002800500240001000000"], 0x3c}}, 0x0) 6.285674547s ago: executing program 0 (id=6262): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x1}], 0x1}}, {{&(0x7f0000000b00)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x0, 0xc, "60706d08621f93e64585b6106d14eb6f8bc52fc0017b60b170af937f9e80e55df4d7df763c37b24cfab81cfe2b7dec0937ea508e9c66a4838068c6fa1cf94c", 0x2d}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="505d30803d61fb2ad7985b3c422a27d74c601fec7a52285f3fd22148360e904a0155ab47a98f3ea2b57571f3ebcd532d67deb4", 0x33}, {&(0x7f0000000bc0)="4e1b604bda0798b0a555c1ffd91a84b29804459473733e79f5a385f3ba424397179a24766cd5a39aea564075adfc5f5906635868d7c705354dcddd3e40d0111f1cbb8dbed3ffb1bdbfa8752a65cf98a856fb5408097fe12f165d8bd48a00e12ad9e8e83d0bd075056fdd186294a4a0ace42dccd1506440ecd2513ddf6f5deefee1de2eb787b5b443c2505955612af69c66c51db37fece0361452f31e5fb0b28d38427e8aa53a4e0864644e4aed97b1ad8ca56f0126f2f4d973ae862ea551aa9db65d34d5b57e543fd6f11c07dbd4e4a52fb09e8df8dbe1e533f190656e0cddfd522a80fadd537d486cda315f18", 0xed}], 0x41}}], 0x2, 0x24048084) socket$inet6(0xa, 0x2, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x2, @broadcast, 'geneve1\x00'}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01f970dc33c827227ea8b16947d02f0400000000000000000000000008000a40000000000900020073797a300000000008000440fffffffe08000540000000000900010073797a31000000001400000011009bb1e7fc97466f5a77df0f172ebe08ec1696df235259cce5b5bc2dadb61e2a716c83694046af282917ffc2fc1f8920b232ae5bdf0e75e779f96c951add3c1086a4496219527b443e995293da90fefe4fc06b11eb"], 0x6c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r6, &(0x7f0000000100)=@abs={0x27}, 0x6e) r7 = socket(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r8, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd47, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x44, r8, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r7, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{}, {0x54, 0x2, {{0x5, [0xc, 0xa, 0x3, 0xa, 0x7, 0x5, 0xd, 0x7, 0xfe, 0x9, 0x10, 0xa, 0x0, 0xe, 0xd, 0xb], 0x1, [0x8, 0x9, 0x1, 0xeaf, 0x401, 0x99c, 0x8, 0x9, 0x1, 0x1, 0xef2f, 0x80, 0xa, 0x1, 0x8ee4, 0x2], [0x9bc, 0x0, 0xffff, 0x1, 0xa07, 0x1ff, 0x7fff, 0xec7c, 0x9, 0x0, 0x0, 0xd84, 0x1, 0x8, 0x800, 0xb]}, [@TCA_MQPRIO_MIN_RATE64, @TCA_MQPRIO_SHAPER={0x0, 0x2, 0x1}]}}}]}, 0x48}}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0xaaa, 0xa, {{0x13, 0x4, 0x3, 0x0, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x7a, 0x1, 0x9, [{@private=0xa010100, 0x7}]}, @cipso={0x86, 0x2b, 0x3, [{0x0, 0x9, "ef782c81dc971f"}, {0x1, 0x11, "7b1313003b11efbbfa9ce1184b5b06"}, {0x2, 0xb, "0dad392efdbdb66591"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r14, 0x84, 0xc, &(0x7f00000004c0)=0x1, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3f4d5f50de3be07e}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='S\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040028bd7000ffdbdf25050000003000018008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="140002006d6163766c616e31000000000000000008000100", @ANYRES32=r13, @ANYBLOB="050007000500000008000500000000000800050007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40015}, 0x1) accept4$ax25(r7, 0x0, &(0x7f00000002c0), 0x0) 2.145517014s ago: executing program 4 (id=6309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3502, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 2.09186985s ago: executing program 4 (id=6312): syz_emit_ethernet(0x17b, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x145, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1b, "0000000004002600040000008a4fe21c92acdb16022746c299babf021978bcc2fa9455d1a1e09c0e6d57c4c5e08add0cb10752da896e5b11ad99841220adeb604ca3f227a22f261f5ed0b442c8a2477a6fe56236f6ebab07e558affbe1cda5859739e230a01ae75925ecaf9a8f022186805934d457633267467eb86b5bb521defe7cb713352c32c4370d77f0ddfeaf4166e2096a067e3db065c4d48a88a2c2bf260ca975392ce78d06220780da713b05419731b4d8f9482493553ce9da1d3c15c9895acaec78219b97640efc95157ce9490ea1585a8bc98cde"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 2.018163692s ago: executing program 2 (id=6313): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x5]}, {0x3, 0x7, 0x2, 0x2}}, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x7, 0x0, "03ff405480c437322e85d439b286105e22825f3257379acf181cb806346c98889dc694ce91f43971d465c82853952dc34b95ec35a5cd8a0a8b94f5125e4315b35982f9d143dbf032ca34ec176836b4bc"}, 0xd8) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200300}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x84}}, 0x4000001) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@ipv6_deladdr={0x8c, 0x15, 0x10, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x8, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0xe7b, 0x3, 0x4, 0x6}}, @IFA_CACHEINFO={0x14, 0x6, {0x658, 0x9ef, 0xa, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0x720, 0x200000, 0x3}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000081) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x8003, 0x700, 0x5, 0x8, {{0x1c, 0x4, 0x3, 0x6, 0x70, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x1f, 0xe7, [@loopback, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast1, @rand_addr=0x64010102]}, @timestamp={0x44, 0x20, 0xeb, 0x0, 0x6, [0x9, 0x6, 0xaa, 0x5, 0x6, 0xff, 0xe0d]}, @ssrr={0x89, 0x17, 0x65, [@local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}, @ra={0x94, 0x4}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001840)={&(0x7f00000007c0)={0x1050, 0x13, 0x8, 0x70bd2d, 0x25dfdbfb, {0x8, 0x6, 0x5, 0x0, {0x4e20, 0x4e20, [0x7, 0x8, 0xffffffff, 0x4], [0x24, 0x6, 0xffffffff, 0x9], r5, [0x80000000, 0x2]}, 0x5, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1050}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001900), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001a00)={r4, 0x6, 0x5, 0xfffffffffffffe00}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000001a40)={0x9, [0x2, 0xfff6, 0x1, 0x7, 0x2, 0x3, 0x6, 0x7, 0x7]}, 0x16) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000002ec0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e80)={&(0x7f0000001ac0)={0x138c, 0x13, 0x800, 0x70bd26, 0x25dfdbfe, {0xa91678e5ec840539, 0x4, 0xd, 0x9, {0x4e21, 0x4e20, [0x1, 0x9], [0xffffffff, 0x5, 0x6, 0x7], r5, [0x8, 0x4]}}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "a6a99c7f9a9a400a64d1bf3cbe2c9d6ed7d0324c14801425738134295d4820e2a33584747c33c063f1c776e52bfd6cb79a883a31d55bf3672f8f8a383ddff5e1c89bc1c3eaca6a5bdc6c"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "ec339ad12b76646e6e2855d3fee9023e889d55d1f34181efcdc033b0b32b44a756ef7e731fbacfd58bc2fec034d78c44f7fbac1db6a32e23678a736938c818b15f10898db41e2980e0effc389309a7251f54518ae2a33893f6c0a151dcd19ecfc5e797c10930ad23c4bd04f913883078c1e4cbe300e835f2afed7a646ac36cd0b5ee67c806a7b81ca9766acb2a15d1569f99323a48a4679b69b892e4f0699a530ed81404e3e24932c9d6682cb9aff866d871cc2ee87c612529ea2045522394590de473b7eb1cd5cd9f69d53b541056d8242355990f7802772c7fc861a881d62c632e"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "2b85105fe98c85c33fdf8ad65fd07302a6b5b573a3e2b1747cc0fc7743481354e8dbf953ac8c5c5e0062dfa0d53e2ba52f23e52afc75a721864fd79902de9ee5600207d68cc643077406f11acaa5414b156db8a9e57553a1e41009e1f2b65beea64649e91fc3e6694ce3b39602d6d8124e059440c7f22407292f4edc515c22f2461c1f4f909a4d07e42ebba42f3f1bef8815d8b69fe9d53da4326b26609dad35ec317a09f6d2c65e8ebd6de9f8ae5da7cc20bf67d7ca18c1b779e5bdac049f36a2a25d8f33e74c876101e13e29adc4d1bb2534ae453b482d46008056586dd61f0fb9edfd676f65971ead7af15a061c814bb1f9a1b34f507cc0"}]}, 0x138c}, 0x1, 0x0, 0x0, 0x20000802}, 0x40004) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002f00)=r0, 0x4) close(r2) socket$kcm(0x29, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000002f40)={0x0, 0x131}, &(0x7f0000002f80)=0x8) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000002fc0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003080)={'ip_vti0\x00', &(0x7f0000003000)={'gretap0\x00', r5, 0x40, 0x8000, 0x81, 0x1, {{0x16, 0x4, 0x0, 0x7, 0x58, 0x67, 0x0, 0xe, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xd2, 0x0, 0x5, [0xefa3, 0x6, 0x2, 0x0, 0x4, 0x800, 0xffffffff]}, @timestamp_prespec={0x44, 0x24, 0xef, 0x3, 0xd, [{@rand_addr=0x64010101, 0x8}, {@local, 0xfffffffb}, {@local, 0x1}, {@loopback, 0x6}]}]}}}}}) bind$l2tp(r0, &(0x7f00000030c0)={0x2, 0x0, @multicast2, 0x2}, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003180)={'tunl0\x00', &(0x7f0000003100)={'ip_vti0\x00', r8, 0x7, 0x7, 0x8, 0x281, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x66, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x18, 0xaa, 0x0, 0x6, [0x1, 0x10, 0x9, 0x448, 0x9]}, @lsrr={0x83, 0xf, 0xe4, [@multicast2, @empty, @multicast2]}, @timestamp={0x44, 0xc, 0x70, 0x0, 0x8, [0x0, 0x385]}]}}}}}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f00000031c0)=0x9, 0x8) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000003200)=0x6, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000003240)={'dvmrp0\x00'}) close(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000032c0)={r4, r4, 0xffff, 0x2d, &(0x7f0000003280)="fbde5e27b30f975c7d9828923de765f6062a05916ced1ccf2f9c8f37d8a22a0c9771668bbbdbe370a67381d634", 0x4f, 0x0, 0x8000, 0xd64e, 0x50f3, 0x1, 0x7, 'syz0\x00'}) 1.905407266s ago: executing program 4 (id=6314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000003c0)={0x1, {{0xa, 0x4e22, 0xb14, @mcast2}}, {{0xa, 0x4e20, 0x8, @private0}}}, 0x108) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd60cb800000383aff00000000000000000000ffffac1e0001ff020000000000000000000000000001"], 0x0) 1.740671955s ago: executing program 2 (id=6316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r2}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4e20, 0x8000, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11, r2}, {0x0, 0x4007, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@mcast2, 0x3505, 0x0, 0x2, 0x7, 0x5, 0x1, 0x80000001}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3502, 0x4, 0x1, 0x7f, 0x6, 0x0, 0x55}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.737165442s ago: executing program 1 (id=6317): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000f00000100000e00"}}}]}, 0x48}}, 0x0) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x6) (async) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.525920061s ago: executing program 4 (id=6318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xa, 0xfc0, 0x66, 0x0, 0xd, 0x1, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) (async) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xa, 0xfc0, 0x66, 0x0, 0xd, 0x1, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001880)=@gcm_128={{0x304}, "c5f12ecce3465a70", "6f88abfe96da5766fcc5396fd1905048", "a58bd9c1", "de4d93cabbc61e25"}, 0xf) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001880)=@gcm_128={{0x304}, "c5f12ecce3465a70", "6f88abfe96da5766fcc5396fd1905048", "a58bd9c1", "de4d93cabbc61e25"}, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$can_bcm(0x1d, 0x2, 0x2) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) (async) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x11, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}, 0x10) (async) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x11, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}, 0x10) 1.523411434s ago: executing program 1 (id=6319): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x6, 0x5, 0x3, 0x6}, {0xfffc, 0x3, 0x2, 0x8}, {0x6, 0x7, 0x4, 0x3}, {0x4, 0x9, 0xc5, 0x8000}, {0x100, 0x6, 0x7f, 0x60000000}, {0x189, 0x0, 0x0, 0xfffffffb}, {0x696c, 0x9, 0x4, 0x9}]}, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e401000000440004800500030005000000050003000100000005000300050000002000030001000000050003000500000055fe03000200000005000300000000000500030080ff000008000200020000000800010003"], 0x68}}, 0x0) 1.462264277s ago: executing program 2 (id=6320): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x913fdc377908132b, 0x4}}]}}]}, 0x7c}}, 0x24040084) 1.460719399s ago: executing program 3 (id=6321): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x41}, 0x0) 1.291131511s ago: executing program 3 (id=6322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000040)=0x2c5, 0x4) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x4070bd2f, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x8) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r5, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x6c}, 0x1, 0x620b}, 0x0) 1.285173045s ago: executing program 1 (id=6323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x0, @remote}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280)={0x800000, 0x3, 0x0, 0xfffffffe}, 0x14) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x54, r2, 0x917, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1.153927118s ago: executing program 2 (id=6324): r0 = socket(0x2b, 0x1, 0xffffa898) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) 1.085422132s ago: executing program 3 (id=6325): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', 0x800}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x40, 0xac, "fe94cfe6b8afe20b2e67885fb46ae9daa05405b8094fc1357c4aac89fb65c255bf5b4a3765e58b643ab1e50056c4725dee1a259199556b4baec4ff4b"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7e29}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x61, 0xac, "57ea5bb39eda20feb1f8c949b637a280e43d45ad25ee487d1e424ceef7bf258b8159d4b105f56167d5393e2d0c87bece96883d2a17e70a367d129899fed112a154ad7abb9b6479aad1de0a4d5dba3a9f33b4e4d468aea71bc0b68b66ac"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x5b, 0xac, "a833a36a5c09bf56dd0077967f126f789a4df8537a24e2b22e0bcd592f5931d8d531d29db3e06539eb600a5719fd1e5bd68cd42e09437da1609113422b96b9607d0f721b0f75dd07b3d2f1a03c7da60a3af733c4320e4a"}]}, 0x130}, 0x1, 0x0, 0x0, 0xa36d09a42fbf53a1}, 0x8040) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x24008050) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x11) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4851}, 0x81) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x4004048) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000780)) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x114, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x96}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe17}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1698}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ec}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4f65}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x51d}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000a80), 0xc, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/27, 0x1b}, {&(0x7f0000000b00)=""/46, 0x2e}, {&(0x7f0000000b40)=""/92, 0x5c}, {&(0x7f0000000bc0)=""/62, 0x3e}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/176, 0xb0}], 0x6, &(0x7f0000000e00)=[{0x80, 0x0, 0x0, ""/110}, {0x20, 0x0, 0x0, ""/16}, {0x90, 0x0, 0x0, ""/121}], 0x130, 0x2000}, 0x38, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f80)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)=@getqdisc={0x38, 0x26, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xa48f9f88cfb3ae17, 0xffff}, {0xd, 0x7}, {0xffff, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000010c0)) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xb, 'veth0_virt_wifi\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001240), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, r8, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040880}, 0x10052) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000001340)={0x1d, @private=0xa010100, 0x4e23, 0x0, 'sed\x00', 0x28, 0x6, 0x48}, 0x2c) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000001380)='ip6tnl0\x00') r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000013c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x17, 0x0, 0x3, 0xc6, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r1, r10, 0x5, 0x4}, 0x50) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) 1.020419457s ago: executing program 2 (id=6326): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="08000000010000", 0x7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) 923.586124ms ago: executing program 1 (id=6327): socket(0x28, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e20f00", 0x28, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x1, 0x1b5a, "5d0719656701ba4d2a43d88e945401b9"}}}}}}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001bc0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xf}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000700000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x8, r8}, 0x38) (async) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x4, 0x2, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x40}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000000400)="eca8dfca075055b09c4d4454f22f1c05cbce24fcc5cd9a157ab9de87bf9fe42a76586d25cd14635baf1ef1767481e03dfc13800384dbb6a1dfa7fb0030da8f5536083256c4523c81e1ad943ae3d86ebf58584cf4c19e640465897020bfd0fdf04503128074a7b33cbfe9672fb38947c4acdf7ba2d92171f1153ab44846f4750b6e28e2cc3e078b1b3ed9349ff9e81000d899c28b1e830a92a3ac2d2c718b11cfb25759701b1f9aac00927272154a0b4333f9c8a1a5da9ae91a8e6b221670ef33764dc03ec143ea97d8432e06be0d3257", 0xd0}, {&(0x7f0000000640)="1987a5a18bad74a7f07132a39ab792873cebef63de3f44f3d11268496fd1d9e757059779fc7bd1d750c77877178ec1f77c91a9aafb7ace53de3eb3d1d040aadff33b21c44c2c95cf6ecf541d2b3f0b4cf4ed636726a9c4620b95e24550ed495b3cfaa96650c0db93b420bde04b020e91a8112d4c07103c12808f787c0a080e43464ffe59120b8073be1362d26a0a4c0548e2455234ba5b2dd3f7280e02d27f12d435e38f7fb3a0d280351e97cfa0ef1724a9e46b776745b1e098c5d9e3a537b537419cffaeb98bdb17a32065d0673bb57e049677a42959bf12352617d5a8fcad5b16", 0xe2}, {&(0x7f00000000c0)="319775c8c4ee89", 0x7}], 0x4, &(0x7f0000000740)=[{0xa0, 0x6, 0x2, "aebaa377d890f8703d1b56a56cb5b4954c908509720b9e9efcec55d0d8677917488748f9a6832650f98e443a189c457719666dcdd22950c7bd888a71630a0291f3c6b7fd22f66108ba1ab92898f540e4b2bd3ddf33ce8052e2ea43cf3938c7cf383aa15fd6b0e12d02b0ccf943c0db13687bd9a464f356715a5f73a60e07dc0c18cd1b15ee29377c015bcb80e6af"}], 0xa0}, 0x4002) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x38) (async) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) (async) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 807.786531ms ago: executing program 3 (id=6328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xa}], 0x20, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xa}], 0x20, 0xe000}, 0x5}], 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 748.362056ms ago: executing program 4 (id=6329): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x64}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000180)={{r2, &(0x7f0000000040)='\x00', 0x401, &(0x7f0000000080)={@align=0x8, {0x0, 0x5, 0x7, 0x8bf}}, 0x93, &(0x7f00000000c0), &(0x7f0000000100)=0x5}, {[0x1000, 0x8, 0xc320, 0xdf8d]}, 0x6, 0x35, &(0x7f0000000140)=""/53}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4) sendfile(r4, r5, &(0x7f0000000000)=0x37, 0x800) 589.824537ms ago: executing program 3 (id=6330): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0x1, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000740)=0x4, 0x4) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x5, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) (async) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0xfffffffffffffdca) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0xfffffffffffffdca) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x4000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r10) sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r12, @ANYRES8=r12, @ANYBLOB="01002abd7000fcdbdf2502000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x404c011}, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r12, @ANYRES8=r12, @ANYBLOB="01002abd7000fcdbdf2502000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x404c011}, 0x10) 589.499335ms ago: executing program 1 (id=6331): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x14, 0x7a3cc0df0763377f, 0x0, 0x0, {0x10, 0x24}}, 0x14}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001d40)=""/219, 0xdb}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x1e, 0x4, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x14, 0x7a3cc0df0763377f, 0x0, 0x0, {0x10, 0x24}}, 0x14}}, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001d40)=""/219, 0xdb}], 0x1}}], 0x4, 0x400122a0, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) 478.716278ms ago: executing program 4 (id=6332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xec2cf6a9bb7176e7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0x80, 0xf6, 0x1000, 0x5}, {0x9, 0x3, 0xc69, 0x7, 0x0, 0x6}, 0x0, 0x2, 0xdb3}}, @TCA_TBF_RATE64={0xc, 0x4, 0x26b2ce68b175b301}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000400) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newchain={0x700, 0x64, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa, 0x3}, {0x10, 0xfff3}, {0x1, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x6d0, 0x2, [@TCA_CGROUP_EMATCHES={0x104, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xbe04, 0x2, 0x5}, {0xe0d, 0xa, 0x2, "59fe31f1b31c8ea544af"}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x7}, {0x0, 0xa, 0x0, "3b36f13e6d1a724ed99c"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x1}, {0x78, 0x8, 0x0, "35ef35942f0bb35b"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2602, 0x3, 0x8}, {0x3d5e, 0x200, 0xa83b, 0x6000}}}]}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x64, 0x3, 0x0, 0x0, {{0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4b, 0x5, "f212d97bd07754e312b2553b5af781596ab939e52d894f02a274d382e598ceed5f7c21cde63b104d250fa42cad1514badec945363431101eaceff35120b57cc056b4824c2e4aeb"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0xffffff46, 0x4bd, 0x2, {0x9, 0x1, 0xd74a, 0x3, 0x7e, 0x8}, {0x40, 0x1, 0x100, 0x805d, 0x2, 0x1}, 0x6, 0x2, 0x5}}]}, @TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x20000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9787, 0x3, 0xf, 0x3cd5, 0x9, {0x9, 0x3, 0xda9c, 0xd3c4, 0xc, 0x10}, {0x3, 0x2, 0x0, 0x80, 0x200, 0x8000}, 0xe905, 0x5, 0xffffff01}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x101, 0x7, 0x101, 0x0, 0x4, 0x4, 0xef9e, 0xa2, 0x1a4, 0x5, 0x2, 0x7, 0x5, 0x80, 0x1, 0x9, 0x10001, 0x800, 0x3, 0x5, 0x8, 0x4, 0xc, 0xfffffe01, 0x4, 0x9, 0x800, 0x80000000, 0x7f, 0x0, 0xffffffc0, 0x9, 0xb4, 0xbebaec87, 0x4, 0xfffffffc, 0x9e, 0xe80, 0x68, 0x10001, 0x0, 0x94e, 0x3, 0x10000, 0x7, 0xfffffdea, 0x0, 0x1, 0x3, 0x0, 0x8, 0x72, 0x1, 0x9, 0x8, 0x5, 0x1, 0x3dd, 0x4, 0x80000000, 0x5, 0xffffffff, 0x9, 0x6, 0x81, 0x8, 0x5d7a, 0x6, 0x20000000, 0x58, 0x10, 0x9, 0x7f, 0x54, 0x2, 0x3ff, 0x2, 0x10001, 0xffff, 0x3, 0xfffffff9, 0x200, 0xffffffff, 0x10000, 0x6, 0x6, 0x3, 0x4, 0x1, 0x7f, 0x3, 0x7fffffff, 0x6, 0x2, 0xcab, 0xf, 0x5, 0x1, 0x8, 0xbfdc, 0x4b4, 0x0, 0x0, 0x5, 0x3, 0x7, 0xfc, 0x5, 0x3, 0x7, 0x8, 0x8, 0x6, 0xbfe4, 0x4, 0x4, 0x2, 0xd98f, 0x7, 0x0, 0x5, 0x9, 0x8, 0x101, 0x4, 0xffffffec, 0x7f, 0x1cfe3832, 0x2, 0x1000, 0x5, 0xe, 0x0, 0x7, 0x2, 0x7, 0xd, 0x6, 0x6, 0x9, 0x4, 0x1, 0x400, 0x8, 0x2, 0x401, 0x5, 0x5, 0x3, 0x800, 0x5e, 0x6, 0x1000, 0x4, 0x4, 0x1, 0x81, 0x401, 0x2, 0xfffffff9, 0xdf90, 0x1ff, 0x1, 0x2, 0xf, 0x4, 0x9, 0x200, 0x2, 0x6, 0x2, 0x5, 0xfffffff4, 0x7001, 0x9, 0x0, 0x4, 0x8, 0x4, 0x32, 0x9, 0x4, 0x215, 0x9, 0xb9d, 0x7fffffff, 0x8, 0x5, 0x200, 0x6, 0x7f, 0x0, 0x8, 0x6, 0xec, 0x5, 0xc8cf, 0xa0000000, 0xffffddb2, 0xfffffbe7, 0x81, 0xf39, 0xe6d0, 0x800, 0x5, 0x5, 0xa, 0x0, 0x39b6, 0x6, 0x8, 0x401, 0x400, 0xb1, 0x65, 0x8000, 0x0, 0x376, 0x3, 0xd3e, 0x9, 0x2, 0x9, 0x6, 0x9, 0xfffffff9, 0x9c, 0x1, 0x1, 0x5, 0x800, 0x2, 0xb5f5, 0x6, 0xd42d, 0x3ff, 0x8, 0x6, 0x7, 0x4, 0xc179, 0x83, 0xffffffff, 0x6, 0x9, 0xd, 0x3, 0x6, 0x8, 0x0, 0xde7, 0x7, 0x80, 0xf, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_CGROUP_EMATCHES={0x110, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x9}, {0x0, 0x8001, 0x6, 0x4, 0x5, 0x2}}}, @TCF_EM_CONTAINER={0xd8, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x1}, "3d57071c5434b04015dfc8820e6aeb4be5fbc6c04fba75d66b30dd9453295bdee062b01579acfe518926aca2529e5e830f0fc9946ac607cacf35246c67c982121b5ac497664adf0bbe7cfa78203781e75af261268f809bd3884e8f06cefd6f878bb6300972fa26b39406c86f5c94f01b11939d2956c4315a66254062f63ecc79d1396ceda36f5076f6dc5cb4bb19c6ce9812419c8b2c2c7f9cc1936c6ae344cad79fe415754532926c940effa07e6b56736d7e74705bab938182cbf3d693d5d86a6864fc9141dee6ea0355"}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x1}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}]}]}}]}, 0x700}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) 232.462419ms ago: executing program 3 (id=6333): ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000013c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f0000000e40)={0x20, r1, 0x101, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x8800) socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r7) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cbd827bd7000fddbdf2502000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="34000db1a4f1dd00"], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r10, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106"], 0x40}}, 0x0) sendto$packet(r5, &(0x7f0000000400)="05d936277c6f5422007f83", 0xb, 0x48880, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000040)={0x8, 'veth1_macvtap\x00', {'lo\x00'}, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="300040000000000000000000000400000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"/24], 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102000000001000000000"], 0x38}}, 0x0) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 146.687824ms ago: executing program 1 (id=6334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0xd, "d8d02d05964b341efc5b525e77"}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'bridge_slave_1\x00', {0x2}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x7, 0x6, @random="b6fb5852bf3f"}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x3, {0x0, 0xf0}, {0x1, 0xff, 0x4}, 0xfd, 0x51b8a5fa7e944d27}, {0x1, 0x3, {}, {0x1, 0x0, 0x2}, 0xfd, 0xfe}, {0x1, 0x1, {0x2, 0xf0, 0x1}, {0x2, 0xf0, 0x2}, 0xfe, 0x1}, {0x3, 0x3, {0x2, 0xf0, 0x3}, {0x2, 0xff}, 0xfd, 0xfd}, {0x3, 0x3, {0x1, 0xff, 0x4}, {0x1, 0x1, 0x1}, 0xfe, 0xfe}, {0x0, 0x1, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x3}, 0x2, 0x2}, {0x1, 0x2, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x3}, 0xff, 0xfe}], 0xe0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)) 0s ago: executing program 2 (id=6335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) kernel console output (not intermixed with test programs): dpoint_lookup_assoc+0x7b/0x260 [ 538.972607][T24746] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 538.972642][T24746] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 538.972668][T24746] ? security_sctp_bind_connect+0x7e/0x2c0 [ 538.972707][T24746] sctp_sendmsg+0x1528/0x2c10 [ 538.972757][T24746] ? __pfx_sctp_sendmsg+0x10/0x10 [ 538.972793][T24746] ? aa_sk_perm+0x6d5/0x900 [ 538.972827][T24746] ? __pfx_aa_sk_perm+0x10/0x10 [ 538.972854][T24746] ? sock_rps_record_flow+0x19/0x400 [ 538.972892][T24746] ? inet_sendmsg+0x2f4/0x370 [ 538.972924][T24746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.972950][T24746] ____sys_sendmsg+0x894/0xad0 [ 538.973001][T24746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.973044][T24746] ? import_iovec+0x73/0xa0 [ 538.973079][T24746] ___sys_sendmsg+0x2a5/0x360 [ 538.973118][T24746] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.973190][T24746] ? __fget_files+0x2a/0x420 [ 538.973220][T24746] ? __fget_files+0x3a0/0x420 [ 538.973262][T24746] __x64_sys_sendmsg+0x1bd/0x2a0 [ 538.973297][T24746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.973340][T24746] ? __pfx_ksys_write+0x10/0x10 [ 538.973376][T24746] do_syscall_64+0x14d/0xf80 [ 538.973397][T24746] ? trace_irq_disable+0x3b/0x150 [ 538.973428][T24746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.973452][T24746] ? clear_bhb_loop+0x40/0x90 [ 538.973479][T24746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.973500][T24746] RIP: 0033:0x7f0b0959c799 [ 538.973521][T24746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.973539][T24746] RSP: 002b:00007f0b0a4da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.973562][T24746] RAX: ffffffffffffffda RBX: 00007f0b09815fa0 RCX: 00007f0b0959c799 [ 538.973577][T24746] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 538.973591][T24746] RBP: 00007f0b0a4da090 R08: 0000000000000000 R09: 0000000000000000 [ 538.973604][T24746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.973616][T24746] R13: 00007f0b09816038 R14: 00007f0b09815fa0 R15: 00007ffedc059898 [ 538.973651][T24746] [ 540.525334][ T5190] block nbd3: Possible stuck request ffff888027078000: control (read@0,1024B). Runtime 210 seconds [ 540.536204][ T5190] block nbd3: Possible stuck request ffff888027078200: control (read@1024,1024B). Runtime 210 seconds [ 540.547708][ T5190] block nbd3: Possible stuck request ffff888027078400: control (read@2048,1024B). Runtime 210 seconds [ 540.559341][ T5190] block nbd3: Possible stuck request ffff888027078600: control (read@3072,1024B). Runtime 210 seconds [ 542.095893][T24791] FAULT_INJECTION: forcing a failure. [ 542.095893][T24791] name failslab, interval 1, probability 0, space 0, times 0 [ 542.112056][T24790] netlink: 'syz.4.5072': attribute type 8 has an invalid length. [ 542.120021][T24793] netlink: 'syz.4.5072': attribute type 8 has an invalid length. [ 542.138999][T24791] CPU: 1 UID: 0 PID: 24791 Comm: syz.1.5070 Not tainted syzkaller #0 PREEMPT(full) [ 542.139028][T24791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.139041][T24791] Call Trace: [ 542.139059][T24791] [ 542.139068][T24791] dump_stack_lvl+0xe8/0x150 [ 542.139105][T24791] should_fail_ex+0x412/0x560 [ 542.139136][T24791] should_failslab+0xa8/0x100 [ 542.139165][T24791] __kmalloc_cache_noprof+0x88/0x660 [ 542.139189][T24791] ? sctp_add_bind_addr+0x8c/0x370 [ 542.139222][T24791] sctp_add_bind_addr+0x8c/0x370 [ 542.139253][T24791] sctp_copy_local_addr_list+0x314/0x4f0 [ 542.139284][T24791] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 542.139311][T24791] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 542.139342][T24791] ? sctp_v6_is_any+0x64/0x80 [ 542.139374][T24791] ? sctp_copy_one_addr+0x93/0x360 [ 542.139405][T24791] sctp_bind_addr_copy+0xb3/0x3c0 [ 542.139434][T24791] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 542.139465][T24791] sctp_connect_new_asoc+0x2ff/0x6b0 [ 542.139501][T24791] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 542.139536][T24791] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 542.139570][T24791] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 542.139600][T24791] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 542.139634][T24791] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 542.139660][T24791] ? security_sctp_bind_connect+0x7e/0x2c0 [ 542.139698][T24791] sctp_sendmsg+0x1528/0x2c10 [ 542.139746][T24791] ? __pfx_sctp_sendmsg+0x10/0x10 [ 542.139782][T24791] ? aa_sk_perm+0x6d5/0x900 [ 542.139814][T24791] ? __pfx_aa_sk_perm+0x10/0x10 [ 542.139842][T24791] ? sock_rps_record_flow+0x19/0x400 [ 542.139879][T24791] ? inet_sendmsg+0x2f4/0x370 [ 542.139910][T24791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 542.139936][T24791] ____sys_sendmsg+0x894/0xad0 [ 542.139980][T24791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.140023][T24791] ? import_iovec+0x73/0xa0 [ 542.140066][T24791] ___sys_sendmsg+0x2a5/0x360 [ 542.140105][T24791] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.140177][T24791] ? __fget_files+0x2a/0x420 [ 542.140207][T24791] ? __fget_files+0x3a0/0x420 [ 542.140248][T24791] __x64_sys_sendmsg+0x1bd/0x2a0 [ 542.140284][T24791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.140327][T24791] ? __pfx_ksys_write+0x10/0x10 [ 542.140363][T24791] do_syscall_64+0x14d/0xf80 [ 542.140383][T24791] ? trace_irq_disable+0x3b/0x150 [ 542.140414][T24791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.140437][T24791] ? clear_bhb_loop+0x40/0x90 [ 542.140463][T24791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.140485][T24791] RIP: 0033:0x7f0b0959c799 [ 542.140505][T24791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.140523][T24791] RSP: 002b:00007f0b0a4da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.140546][T24791] RAX: ffffffffffffffda RBX: 00007f0b09815fa0 RCX: 00007f0b0959c799 [ 542.140562][T24791] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 542.140575][T24791] RBP: 00007f0b0a4da090 R08: 0000000000000000 R09: 0000000000000000 [ 542.140588][T24791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.140601][T24791] R13: 00007f0b09816038 R14: 00007f0b09815fa0 R15: 00007ffedc059898 [ 542.140636][T24791] [ 542.176549][T24795] IPVS: ip_vs_add_dest(): server weight less than zero [ 542.505961][T24799] __nla_validate_parse: 46 callbacks suppressed [ 542.505983][T24799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5074'. [ 542.536005][T24799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5074'. [ 542.564409][T24806] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5076'. [ 542.570147][T24799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'. [ 542.716906][T24813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5079'. [ 542.801284][T24815] netlink: 'syz.0.5081': attribute type 1 has an invalid length. [ 542.827692][T24818] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5080'. [ 542.850957][T24824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5083'. [ 542.918980][T24827] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5084'. [ 543.111124][T24841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5089'. [ 543.209073][T24848] netlink: 'syz.0.5091': attribute type 1 has an invalid length. [ 543.255807][T24848] macvlan2: entered promiscuous mode [ 543.262394][T24848] macvlan2: entered allmulticast mode [ 543.328221][T24855] FAULT_INJECTION: forcing a failure. [ 543.328221][T24855] name failslab, interval 1, probability 0, space 0, times 0 [ 543.343891][T24855] CPU: 1 UID: 0 PID: 24855 Comm: syz.1.5094 Not tainted syzkaller #0 PREEMPT(full) [ 543.343923][T24855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.343937][T24855] Call Trace: [ 543.343946][T24855] [ 543.343955][T24855] dump_stack_lvl+0xe8/0x150 [ 543.343993][T24855] should_fail_ex+0x412/0x560 [ 543.344023][T24855] should_failslab+0xa8/0x100 [ 543.344049][T24855] ? skb_clone+0x212/0x3a0 [ 543.344198][T24855] kmem_cache_alloc_noprof+0x87/0x650 [ 543.344232][T24855] ? __netlink_lookup+0xc6/0x8b0 [ 543.344328][T24855] skb_clone+0x212/0x3a0 [ 543.344365][T24855] __netlink_deliver_tap+0x404/0x850 [ 543.344406][T24855] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.344435][T24855] netlink_deliver_tap+0x19c/0x1b0 [ 543.344463][T24855] netlink_unicast+0x7e3/0x9b0 [ 543.344495][T24855] ? __pfx_netlink_unicast+0x10/0x10 [ 543.344521][T24855] ? netlink_sendmsg+0x650/0xb40 [ 543.344563][T24855] ? skb_put+0x11b/0x210 [ 543.344605][T24855] netlink_sendmsg+0x813/0xb40 [ 543.344643][T24855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.344675][T24855] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.344703][T24855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.344728][T24855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.344754][T24855] ____sys_sendmsg+0xa68/0xad0 [ 543.344796][T24855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.344838][T24855] ? import_iovec+0x73/0xa0 [ 543.344873][T24855] ___sys_sendmsg+0x2a5/0x360 [ 543.344915][T24855] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.344986][T24855] ? __fget_files+0x2a/0x420 [ 543.345016][T24855] ? __fget_files+0x3a0/0x420 [ 543.345057][T24855] __x64_sys_sendmsg+0x1bd/0x2a0 [ 543.345093][T24855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.345136][T24855] ? __pfx_ksys_write+0x10/0x10 [ 543.345171][T24855] do_syscall_64+0x14d/0xf80 [ 543.345192][T24855] ? trace_irq_disable+0x3b/0x150 [ 543.345222][T24855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.345245][T24855] ? clear_bhb_loop+0x40/0x90 [ 543.345272][T24855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.345293][T24855] RIP: 0033:0x7f0b0959c799 [ 543.345315][T24855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.345334][T24855] RSP: 002b:00007f0b0a4da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.345357][T24855] RAX: ffffffffffffffda RBX: 00007f0b09815fa0 RCX: 00007f0b0959c799 [ 543.345373][T24855] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 543.345387][T24855] RBP: 00007f0b0a4da090 R08: 0000000000000000 R09: 0000000000000000 [ 543.345400][T24855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.345413][T24855] R13: 00007f0b09816038 R14: 00007f0b09815fa0 R15: 00007ffedc059898 [ 543.345449][T24855] [ 543.758613][T24867] bond7: option mode: invalid value (133) [ 543.766244][T24867] bond7 (unregistering): Released all slaves [ 543.864003][T24867] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 544.298481][T24892] bond5: option all_slaves_active: invalid value (222) [ 544.307652][T24895] FAULT_INJECTION: forcing a failure. [ 544.307652][T24895] name failslab, interval 1, probability 0, space 0, times 0 [ 544.308436][T24892] bond5 (unregistering): Released all slaves [ 544.332116][T24895] CPU: 0 UID: 0 PID: 24895 Comm: syz.4.5108 Not tainted syzkaller #0 PREEMPT(full) [ 544.332146][T24895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.332160][T24895] Call Trace: [ 544.332168][T24895] [ 544.332177][T24895] dump_stack_lvl+0xe8/0x150 [ 544.332214][T24895] should_fail_ex+0x412/0x560 [ 544.332246][T24895] should_failslab+0xa8/0x100 [ 544.332276][T24895] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 544.332314][T24895] ? __alloc_skb+0x1d0/0x7d0 [ 544.332340][T24895] ? __local_bh_enable_ip+0xd0/0x130 [ 544.332421][T24895] __alloc_skb+0x1d0/0x7d0 [ 544.332455][T24895] tipc_nl_compat_doit+0x18a/0x650 [ 544.332597][T24895] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 544.332634][T24895] ? apparmor_capable+0x126/0x170 [ 544.332750][T24895] ? bpf_lsm_capable+0x9/0x20 [ 544.332778][T24895] ? security_capable+0x7e/0x2c0 [ 544.332834][T24895] tipc_nl_compat_recv+0x8d3/0xcf0 [ 544.332866][T24895] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 544.332890][T24895] ? __mutex_trylock_common+0x158/0x260 [ 544.332940][T24895] ? __pfx___mutex_trylock_common+0x10/0x10 [ 544.332972][T24895] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 544.332996][T24895] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 544.333056][T24895] genl_family_rcv_msg_doit+0x22a/0x330 [ 544.333100][T24895] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 544.333148][T24895] ? __lock_acquire+0x6b5/0x2cf0 [ 544.333194][T24895] genl_rcv_msg+0x61c/0x7a0 [ 544.333234][T24895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.333265][T24895] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 544.333293][T24895] ? __lock_acquire+0x6b5/0x2cf0 [ 544.333333][T24895] netlink_rcv_skb+0x232/0x4b0 [ 544.333361][T24895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.333395][T24895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.333442][T24895] ? down_read+0x272/0x2e0 [ 544.333515][T24895] ? genl_rcv+0xd/0x40 [ 544.333548][T24895] genl_rcv+0x28/0x40 [ 544.333578][T24895] netlink_unicast+0x80f/0x9b0 [ 544.333612][T24895] ? __pfx_netlink_unicast+0x10/0x10 [ 544.333639][T24895] ? netlink_sendmsg+0x650/0xb40 [ 544.333664][T24895] ? skb_put+0x11b/0x210 [ 544.333697][T24895] netlink_sendmsg+0x813/0xb40 [ 544.333735][T24895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.333766][T24895] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.333793][T24895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.333818][T24895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.333844][T24895] ____sys_sendmsg+0xa68/0xad0 [ 544.333886][T24895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.333928][T24895] ? import_iovec+0x73/0xa0 [ 544.333963][T24895] ___sys_sendmsg+0x2a5/0x360 [ 544.334002][T24895] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.334082][T24895] ? __fget_files+0x2a/0x420 [ 544.334113][T24895] ? __fget_files+0x3a0/0x420 [ 544.334154][T24895] __x64_sys_sendmsg+0x1bd/0x2a0 [ 544.334190][T24895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.334232][T24895] ? __pfx_ksys_write+0x10/0x10 [ 544.334268][T24895] do_syscall_64+0x14d/0xf80 [ 544.334288][T24895] ? trace_irq_disable+0x3b/0x150 [ 544.334318][T24895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.334340][T24895] ? clear_bhb_loop+0x40/0x90 [ 544.334367][T24895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.334389][T24895] RIP: 0033:0x7fe38b59c799 [ 544.334409][T24895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.334428][T24895] RSP: 002b:00007fe38c404028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.334450][T24895] RAX: ffffffffffffffda RBX: 00007fe38b815fa0 RCX: 00007fe38b59c799 [ 544.334467][T24895] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 544.334480][T24895] RBP: 00007fe38c404090 R08: 0000000000000000 R09: 0000000000000000 [ 544.334493][T24895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.334506][T24895] R13: 00007fe38b816038 R14: 00007fe38b815fa0 R15: 00007ffc199a0ab8 [ 544.334542][T24895] [ 545.001844][T24917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5109'. [ 545.050688][T24919] tipc: Enabling of bearer rejected, failed to enable media [ 545.063848][T24919] netlink: 'syz.2.5117': attribute type 13 has an invalid length. [ 545.072086][T24919] syz_tun: refused to change device tx_queue_len [ 545.178470][T24929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.202557][T24929] netlink: 'syz.1.5118': attribute type 32 has an invalid length. [ 545.280000][T24929] bond6: option coupled_control: invalid value (17) [ 545.289085][T24929] bond6 (unregistering): Released all slaves [ 545.716735][T24959] bridge38: port 1(veth5) entered blocking state [ 545.739158][T24959] bridge38: port 1(veth5) entered disabled state [ 545.748240][T24959] veth5: entered allmulticast mode [ 545.767614][T24959] veth5: entered promiscuous mode [ 545.776959][T24963] netlink: 'syz.2.5129': attribute type 13 has an invalid length. [ 545.785450][T24963] netlink: 'syz.2.5129': attribute type 58 has an invalid length. [ 545.963122][T24973] netlink: 'syz.0.5133': attribute type 1 has an invalid length. [ 546.044685][T24973] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 546.059140][T24983] netlink: 'syz.2.5134': attribute type 2 has an invalid length. [ 546.187577][T24986] sctp: [Deprecated]: syz.0.5135 (pid 24986) Use of int in maxseg socket option. [ 546.187577][T24986] Use struct sctp_assoc_value instead [ 546.788208][T25026] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 546.851805][T25027] bond10: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 546.866046][T25027] bond10: entered promiscuous mode [ 546.871646][T25027] bond10: entered allmulticast mode [ 546.877448][T25027] 8021q: adding VLAN 0 to HW filter on device bond10 [ 546.885033][T25025] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 547.080631][T25031] syzkaller0: entered promiscuous mode [ 547.086277][T25031] syzkaller0: entered allmulticast mode [ 547.401247][T25073] xt_hashlimit: size too large, truncated to 1048576 [ 547.409934][T25076] nbd: must specify at least one socket [ 549.250676][T25107] __nla_validate_parse: 14 callbacks suppressed [ 549.250700][T25107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5169'. [ 549.276801][T25107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5169'. [ 549.326328][T25114] ipt_ECN: cannot use operation on non-tcp rule [ 549.838266][T25143] validate_nla: 2 callbacks suppressed [ 549.838287][T25143] netlink: 'syz.0.5180': attribute type 1 has an invalid length. [ 549.896781][T25150] dvmrp0: entered allmulticast mode [ 550.244513][T25184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5188'. [ 550.351647][T25187] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5189'. [ 553.028665][T25160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.262255][T25202] netlink: 'syz.0.5194': attribute type 1 has an invalid length. [ 553.300438][T25202] netlink: 'syz.0.5194': attribute type 1 has an invalid length. [ 553.323212][T25202] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5194'. [ 553.366246][T25202] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5194'. [ 553.407981][T25202] netlink: 'syz.0.5194': attribute type 6 has an invalid length. [ 553.422569][T25202] netlink: 'syz.0.5194': attribute type 5 has an invalid length. [ 553.433243][T25202] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5194'. [ 553.471625][T25211] syzkaller1: entered promiscuous mode [ 553.483230][T25211] syzkaller1: entered allmulticast mode [ 553.528796][T25216] erspan2: entered allmulticast mode [ 553.668962][T25224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.903825][T25237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.138152][T25250] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 554.226891][T25254] veth0_virt_wifi: mtu less than device minimum [ 554.515652][T25270] hsr0 speed is unknown, defaulting to 1000 [ 554.678867][T25280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5218'. [ 554.745582][T25282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5219'. [ 554.831018][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5221'. [ 554.898373][T25292] hsr0 speed is unknown, defaulting to 1000 [ 555.015524][T25298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5222'. [ 555.025149][T25298] tipc: Invalid UDP bearer configuration [ 555.025205][T25298] tipc: Enabling of bearer rejected, failed to enable media [ 555.182381][T25307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5227'. [ 555.395864][T25319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5229'. [ 555.585758][T25332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5234'. [ 555.597991][ T30] audit: type=1107 audit(1772482200.410:6): pid=25330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 555.624900][T25335] bridge6: entered promiscuous mode [ 555.634256][T25335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5233'. [ 555.747532][T25346] FAULT_INJECTION: forcing a failure. [ 555.747532][T25346] name failslab, interval 1, probability 0, space 0, times 0 [ 555.782255][T25339] syzkaller0: entered promiscuous mode [ 555.787810][T25339] syzkaller0: entered allmulticast mode [ 555.797340][T21218] syzkaller0: tun_net_xmit 48 [ 555.802483][T21218] syzkaller0: tun_net_xmit 48 [ 555.815682][T25346] CPU: 0 UID: 0 PID: 25346 Comm: syz.1.5236 Not tainted syzkaller #0 PREEMPT(full) [ 555.815713][T25346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.815726][T25346] Call Trace: [ 555.815734][T25346] [ 555.815743][T25346] dump_stack_lvl+0xe8/0x150 [ 555.815780][T25346] should_fail_ex+0x412/0x560 [ 555.815812][T25346] should_failslab+0xa8/0x100 [ 555.815841][T25346] __kmalloc_cache_noprof+0x88/0x660 [ 555.815876][T25346] ? sctp_add_bind_addr+0x8c/0x370 [ 555.815911][T25346] sctp_add_bind_addr+0x8c/0x370 [ 555.815943][T25346] sctp_copy_local_addr_list+0x314/0x4f0 [ 555.815975][T25346] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 555.816004][T25346] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 555.816033][T25346] ? sctp_v6_is_any+0x64/0x80 [ 555.816064][T25346] ? sctp_copy_one_addr+0x93/0x360 [ 555.816094][T25346] sctp_bind_addr_copy+0xb3/0x3c0 [ 555.816123][T25346] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 555.816158][T25346] sctp_connect_new_asoc+0x2ff/0x6b0 [ 555.816196][T25346] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 555.816231][T25346] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 555.816264][T25346] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 555.816296][T25346] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 555.816330][T25346] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 555.816356][T25346] ? security_sctp_bind_connect+0x7e/0x2c0 [ 555.816394][T25346] sctp_sendmsg+0x1528/0x2c10 [ 555.816444][T25346] ? __pfx_sctp_sendmsg+0x10/0x10 [ 555.816480][T25346] ? aa_sk_perm+0x6d5/0x900 [ 555.816513][T25346] ? __pfx_aa_sk_perm+0x10/0x10 [ 555.816540][T25346] ? sock_rps_record_flow+0x19/0x400 [ 555.816578][T25346] ? inet_sendmsg+0x2f4/0x370 [ 555.816609][T25346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 555.816636][T25346] ____sys_sendmsg+0x894/0xad0 [ 555.816679][T25346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.816721][T25346] ? import_iovec+0x73/0xa0 [ 555.816756][T25346] ___sys_sendmsg+0x2a5/0x360 [ 555.816794][T25346] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.816874][T25346] ? __fget_files+0x2a/0x420 [ 555.816904][T25346] ? __fget_files+0x3a0/0x420 [ 555.816946][T25346] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.816981][T25346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.817023][T25346] ? __pfx_ksys_write+0x10/0x10 [ 555.817058][T25346] do_syscall_64+0x14d/0xf80 [ 555.817079][T25346] ? trace_irq_disable+0x3b/0x150 [ 555.817109][T25346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.817132][T25346] ? clear_bhb_loop+0x40/0x90 [ 555.817157][T25346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.817178][T25346] RIP: 0033:0x7f0b0959c799 [ 555.817198][T25346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.817218][T25346] RSP: 002b:00007f0b0a4da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.817241][T25346] RAX: ffffffffffffffda RBX: 00007f0b09815fa0 RCX: 00007f0b0959c799 [ 555.817257][T25346] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 555.817271][T25346] RBP: 00007f0b0a4da090 R08: 0000000000000000 R09: 0000000000000000 [ 555.817284][T25346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.817297][T25346] R13: 00007f0b09816038 R14: 00007f0b09815fa0 R15: 00007ffedc059898 [ 555.817333][T25346] [ 556.278118][T25356] bridge0: port 1(wlan0) entered blocking state [ 556.285966][T25356] bridge0: port 1(wlan0) entered disabled state [ 556.302151][T25356] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 556.367900][T25356] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 556.451186][T25363] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5240'. [ 556.465790][T25367] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5242'. [ 557.004801][T25404] IPVS: length: 239 != 24 [ 557.132038][T25410] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 557.142171][T25413] FAULT_INJECTION: forcing a failure. [ 557.142171][T25413] name failslab, interval 1, probability 0, space 0, times 0 [ 557.180466][T25413] CPU: 1 UID: 0 PID: 25413 Comm: syz.4.5250 Not tainted syzkaller #0 PREEMPT(full) [ 557.180498][T25413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 557.180512][T25413] Call Trace: [ 557.180521][T25413] [ 557.180530][T25413] dump_stack_lvl+0xe8/0x150 [ 557.180566][T25413] should_fail_ex+0x412/0x560 [ 557.180598][T25413] should_failslab+0xa8/0x100 [ 557.180628][T25413] __kmalloc_cache_noprof+0x88/0x660 [ 557.180653][T25413] ? sctp_add_bind_addr+0x8c/0x370 [ 557.180687][T25413] sctp_add_bind_addr+0x8c/0x370 [ 557.180720][T25413] sctp_copy_local_addr_list+0x314/0x4f0 [ 557.180753][T25413] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 557.180781][T25413] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 557.180811][T25413] ? sctp_v6_is_any+0x64/0x80 [ 557.180842][T25413] ? sctp_copy_one_addr+0x93/0x360 [ 557.180873][T25413] sctp_bind_addr_copy+0xb3/0x3c0 [ 557.180902][T25413] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 557.180931][T25413] sctp_connect_new_asoc+0x2ff/0x6b0 [ 557.180967][T25413] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 557.181002][T25413] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 557.181035][T25413] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 557.181066][T25413] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 557.181106][T25413] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 557.181132][T25413] ? security_sctp_bind_connect+0x7e/0x2c0 [ 557.181170][T25413] sctp_sendmsg+0x1528/0x2c10 [ 557.181219][T25413] ? __pfx_sctp_sendmsg+0x10/0x10 [ 557.181256][T25413] ? aa_sk_perm+0x6d5/0x900 [ 557.181289][T25413] ? __pfx_aa_sk_perm+0x10/0x10 [ 557.181318][T25413] ? sock_rps_record_flow+0x19/0x400 [ 557.181355][T25413] ? inet_sendmsg+0x2f4/0x370 [ 557.181386][T25413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.181412][T25413] ____sys_sendmsg+0x894/0xad0 [ 557.181455][T25413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.181498][T25413] ? import_iovec+0x73/0xa0 [ 557.181532][T25413] ___sys_sendmsg+0x2a5/0x360 [ 557.181570][T25413] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.181643][T25413] ? __fget_files+0x2a/0x420 [ 557.181672][T25413] ? __fget_files+0x3a0/0x420 [ 557.181714][T25413] __x64_sys_sendmsg+0x1bd/0x2a0 [ 557.181749][T25413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.181791][T25413] ? __pfx_ksys_write+0x10/0x10 [ 557.181826][T25413] do_syscall_64+0x14d/0xf80 [ 557.181846][T25413] ? trace_irq_disable+0x3b/0x150 [ 557.181875][T25413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.181897][T25413] ? clear_bhb_loop+0x40/0x90 [ 557.181924][T25413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.181945][T25413] RIP: 0033:0x7fe38b59c799 [ 557.181965][T25413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.181984][T25413] RSP: 002b:00007fe38c404028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.182007][T25413] RAX: ffffffffffffffda RBX: 00007fe38b815fa0 RCX: 00007fe38b59c799 [ 557.182022][T25413] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 557.182036][T25413] RBP: 00007fe38c404090 R08: 0000000000000000 R09: 0000000000000000 [ 557.182049][T25413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.182061][T25413] R13: 00007fe38b816038 R14: 00007fe38b815fa0 R15: 00007ffc199a0ab8 [ 557.182101][T25413] [ 557.626969][T25420] syzkaller0: entered promiscuous mode [ 557.633559][T25420] syzkaller0: entered allmulticast mode [ 557.657735][T25415] netlink: 'syz.0.5253': attribute type 3 has an invalid length. [ 557.688553][ T8313] lec:lec_start_xmit: lec0:No lecd attached [ 557.795351][T25438] 8021q: VLANs not supported on caif0 [ 557.806244][T25438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.855758][T25438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.187662][T25461] team0: Port device team_slave_0 removed [ 558.198527][T25471] netlink: get zone limit has 4 unknown bytes [ 558.206301][T25461] team0: Port device team_slave_1 removed [ 558.215611][T25461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.241318][T25461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.255874][T25461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 558.296288][T25468] geneve3: entered promiscuous mode [ 558.303355][T25468] geneve3: entered allmulticast mode [ 558.331044][T21202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.349676][T21202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.367406][T21202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.397144][T21202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.512863][T25474] syzkaller0: entered promiscuous mode [ 558.529668][T25474] syzkaller0: entered allmulticast mode [ 558.544589][T25492] sock: sock_set_timeout: `syz.3.5275' (pid 25492) tries to set negative timeout [ 559.074539][T25478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.891984][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.916959][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.944529][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.954817][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.965205][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.976675][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.990044][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.001886][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.021098][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.211027][T25561] netlink: 'syz.2.5296': attribute type 1 has an invalid length. [ 561.211070][T25564] __nla_validate_parse: 11 callbacks suppressed [ 561.211325][T25564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5298'. [ 561.258715][T25561] bond11: entered promiscuous mode [ 561.263489][T25564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5298'. [ 561.267645][T25561] 8021q: adding VLAN 0 to HW filter on device bond11 [ 561.300031][T25564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5298'. [ 561.329182][T25564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5298'. [ 561.348708][T25561] bond11: (slave bridge6): making interface the new active one [ 561.356962][T25561] bridge6: entered promiscuous mode [ 561.370096][T25561] bridge6: left promiscuous mode [ 561.436531][T25575] xt_SECMARK: invalid mode: 9 [ 561.587194][T25584] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 561.659044][T25588] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5303'. [ 561.815185][T25595] FAULT_INJECTION: forcing a failure. [ 561.815185][T25595] name failslab, interval 1, probability 0, space 0, times 0 [ 561.857174][T25595] CPU: 0 UID: 0 PID: 25595 Comm: syz.0.5306 Not tainted syzkaller #0 PREEMPT(full) [ 561.857212][T25595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.857226][T25595] Call Trace: [ 561.857235][T25595] [ 561.857244][T25595] dump_stack_lvl+0xe8/0x150 [ 561.857282][T25595] should_fail_ex+0x412/0x560 [ 561.857314][T25595] should_failslab+0xa8/0x100 [ 561.857343][T25595] __kmalloc_cache_noprof+0x88/0x660 [ 561.857368][T25595] ? sctp_add_bind_addr+0x8c/0x370 [ 561.857403][T25595] sctp_add_bind_addr+0x8c/0x370 [ 561.857436][T25595] sctp_copy_local_addr_list+0x314/0x4f0 [ 561.857469][T25595] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 561.857499][T25595] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 561.857529][T25595] ? sctp_v6_is_any+0x64/0x80 [ 561.857560][T25595] ? sctp_copy_one_addr+0x93/0x360 [ 561.857592][T25595] sctp_bind_addr_copy+0xb3/0x3c0 [ 561.857621][T25595] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 561.857650][T25595] sctp_connect_new_asoc+0x2ff/0x6b0 [ 561.857688][T25595] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 561.857723][T25595] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 561.857758][T25595] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 561.857789][T25595] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 561.857824][T25595] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 561.857849][T25595] ? security_sctp_bind_connect+0x7e/0x2c0 [ 561.857888][T25595] sctp_sendmsg+0x1528/0x2c10 [ 561.857938][T25595] ? __pfx_sctp_sendmsg+0x10/0x10 [ 561.857974][T25595] ? aa_sk_perm+0x6d5/0x900 [ 561.858007][T25595] ? __pfx_aa_sk_perm+0x10/0x10 [ 561.858035][T25595] ? sock_rps_record_flow+0x19/0x400 [ 561.858072][T25595] ? inet_sendmsg+0x2f4/0x370 [ 561.858103][T25595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.858130][T25595] ____sys_sendmsg+0x894/0xad0 [ 561.858173][T25595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.858224][T25595] ? import_iovec+0x73/0xa0 [ 561.858260][T25595] ___sys_sendmsg+0x2a5/0x360 [ 561.858298][T25595] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.858372][T25595] ? __fget_files+0x2a/0x420 [ 561.858401][T25595] ? __fget_files+0x3a0/0x420 [ 561.858443][T25595] __x64_sys_sendmsg+0x1bd/0x2a0 [ 561.858479][T25595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.858523][T25595] ? __pfx_ksys_write+0x10/0x10 [ 561.858557][T25595] do_syscall_64+0x14d/0xf80 [ 561.858578][T25595] ? trace_irq_disable+0x3b/0x150 [ 561.858609][T25595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.858631][T25595] ? clear_bhb_loop+0x40/0x90 [ 561.858658][T25595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.858680][T25595] RIP: 0033:0x7f3e2759c799 [ 561.858701][T25595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.858720][T25595] RSP: 002b:00007f3e283b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.858744][T25595] RAX: ffffffffffffffda RBX: 00007f3e27815fa0 RCX: 00007f3e2759c799 [ 561.858759][T25595] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 561.858772][T25595] RBP: 00007f3e283b7090 R08: 0000000000000000 R09: 0000000000000000 [ 561.858786][T25595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 561.858798][T25595] R13: 00007f3e27816038 R14: 00007f3e27815fa0 R15: 00007ffc148b43e8 [ 561.858833][T25595] [ 562.404874][T25612] netlink: 'syz.0.5310': attribute type 21 has an invalid length. [ 562.452679][T25612] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5310'. [ 562.527102][T25612] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5310'. [ 562.692303][T25629] netlink: 'syz.1.5314': attribute type 1 has an invalid length. [ 562.740510][T25638] sctp: [Deprecated]: syz.3.5317 (pid 25638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 562.740510][T25638] Use struct sctp_sack_info instead [ 562.831692][T25638] netlink: 'syz.3.5317': attribute type 1 has an invalid length. [ 562.839592][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms [ 562.839624][ C1] lec:lec_tx_timeout: lec0 [ 562.913688][T25644] tipc: Enabled bearer , priority 0 [ 562.928821][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 562.962047][T25644] +: renamed from syzkaller0 [ 562.980974][T25644] tipc: Disabling bearer [ 563.420859][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5329'. [ 563.467805][T25692] netlink: 'syz.2.5328': attribute type 5 has an invalid length. [ 563.579149][T25694] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 563.611157][T25694] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 563.636290][T25694] gretap2: entered promiscuous mode [ 563.642786][T25694] gretap2: entered allmulticast mode [ 563.660709][T25699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5334'. [ 563.683721][ T58] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 563.692850][ T58] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 563.701790][T25699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5334'. [ 563.720165][ T5825] Bluetooth: hci0: command 0x0401 tx timeout [ 563.729746][ T58] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 563.746997][ T58] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 564.130949][T25725] netlink: 'syz.2.5339': attribute type 1 has an invalid length. [ 564.593627][T25753] netlink: 'syz.0.5346': attribute type 11 has an invalid length. [ 564.685288][T25756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.915046][T25765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.813938][T25833] nbd: must specify a size in bytes for the device [ 565.825371][T25828] team0 (unregistering): Port device team_slave_0 removed [ 565.840912][T25828] team0 (unregistering): Port device team_slave_1 removed [ 565.895678][T25828] team0 (unregistering): Port device batadv1 removed [ 565.986186][T25827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.070087][T25848] xt_bpf: check failed: parse error [ 566.245276][T25856] netlink: 'syz.3.5379': attribute type 17 has an invalid length. [ 566.281518][T25856] __nla_validate_parse: 11 callbacks suppressed [ 566.281539][T25856] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5379'. [ 566.440026][T25869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5383'. [ 566.452548][T25871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5384'. [ 566.469907][T25869] netlink: 'syz.3.5383': attribute type 1 has an invalid length. [ 566.496444][T25869] gretap3: entered promiscuous mode [ 566.831508][T25874] netlink: 'syz.1.5385': attribute type 1 has an invalid length. [ 566.871878][T25874] 8021q: adding VLAN 0 to HW filter on device bond7 [ 567.272513][T25924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5397'. [ 567.299320][T25925] Cannot find set identified by id 65534 to match [ 567.514902][T25938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5400'. [ 567.647342][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.664333][T25949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5404'. [ 567.675104][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.698404][T25945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.723572][T25951] netlink: 'syz.0.5406': attribute type 18 has an invalid length. [ 567.864548][T25958] syzkaller0: entered promiscuous mode [ 567.895500][T25958] syzkaller0: entered allmulticast mode [ 567.930162][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.938369][ C1] lec:lec_tx_timeout: lec0 [ 568.235332][T25981] net_ratelimit: 59 callbacks suppressed [ 568.235356][T25981] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 568.341828][T25986] veth0: entered promiscuous mode [ 568.472744][T25985] veth0: left promiscuous mode [ 568.701988][T26009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5421'. [ 568.786335][T26017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5421'. [ 568.786796][T26013] netlink: 'syz.0.5427': attribute type 83 has an invalid length. [ 568.796322][T26017] nbd: nbd64 already in use [ 569.070327][T26033] netlink: 'syz.3.5433': attribute type 1 has an invalid length. [ 569.078202][T26033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5433'. [ 569.123940][T15948] udevd[15948]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 569.134810][T26031] bridge_slave_1: left allmulticast mode [ 569.151684][T26031] bridge_slave_1: left promiscuous mode [ 569.157540][T26031] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.269364][T26031] bond0: (slave bond_slave_0): Releasing backup interface [ 569.313285][T26041] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5436'. [ 569.323119][T26031] bond0: (slave bond_slave_1): Releasing backup interface [ 569.332243][T26041] netlink: 'syz.1.5436': attribute type 6 has an invalid length. [ 569.332281][T26041] netlink: 'syz.1.5436': attribute type 5 has an invalid length. [ 569.385508][T26045] netlink: 'syz.1.5436': attribute type 1 has an invalid length. [ 569.442897][T26031] team0: Port device team_slave_1 removed [ 569.457085][T26031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.477423][T26031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.502006][T26031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.591721][T26050] geneve5: entered promiscuous mode [ 569.605111][T26050] geneve5: entered allmulticast mode [ 569.721564][T26054] bond7: entered promiscuous mode [ 569.726884][T21218] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 569.754457][T21218] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 569.814473][T26059] macvlan2: entered promiscuous mode [ 569.835098][T26059] macvlan2: entered allmulticast mode [ 569.857451][T21218] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 569.889377][T21218] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 569.942750][T26076] xt_TPROXY: Can be used only with -p tcp or -p udp [ 570.002750][T26079] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 570.163776][T26086] syzkaller0: entered promiscuous mode [ 570.169330][T26086] syzkaller0: entered allmulticast mode [ 570.600132][ T5190] block nbd3: Possible stuck request ffff888027078000: control (read@0,1024B). Runtime 240 seconds [ 570.611232][ T5190] block nbd3: Possible stuck request ffff888027078200: control (read@1024,1024B). Runtime 240 seconds [ 570.622755][ T5190] block nbd3: Possible stuck request ffff888027078400: control (read@2048,1024B). Runtime 240 seconds [ 570.634544][ T5190] block nbd3: Possible stuck request ffff888027078600: control (read@3072,1024B). Runtime 240 seconds [ 570.732653][T26113] syzkaller0: entered promiscuous mode [ 570.738212][T26113] syzkaller0: entered allmulticast mode [ 571.347672][T11073] IPVS: starting estimator thread 0... [ 571.449707][T26167] IPVS: using max 27 ests per chain, 64800 per kthread [ 571.494127][T26177] netlink: 'syz.1.5472': attribute type 1 has an invalid length. [ 571.533610][T26180] __nla_validate_parse: 13 callbacks suppressed [ 571.533630][T26180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5474'. [ 571.601825][T26184] netlink: 'syz.0.5476': attribute type 2 has an invalid length. [ 571.629348][T26184] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5476'. [ 571.816459][T26197] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5480'. [ 571.838347][T26195] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20004 [ 571.992740][T26208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5481'. [ 572.341333][T26228] geneve4: entered promiscuous mode [ 572.355023][T26228] geneve4: entered allmulticast mode [ 572.388747][T26236] FAULT_INJECTION: forcing a failure. [ 572.388747][T26236] name failslab, interval 1, probability 0, space 0, times 0 [ 572.419660][T26236] CPU: 1 UID: 0 PID: 26236 Comm: syz.2.5489 Not tainted syzkaller #0 PREEMPT(full) [ 572.419700][T26236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.419714][T26236] Call Trace: [ 572.419722][T26236] [ 572.419731][T26236] dump_stack_lvl+0xe8/0x150 [ 572.419770][T26236] should_fail_ex+0x412/0x560 [ 572.419802][T26236] should_failslab+0xa8/0x100 [ 572.419830][T26236] __kmalloc_cache_noprof+0x88/0x660 [ 572.419855][T26236] ? sctp_add_bind_addr+0x8c/0x370 [ 572.419889][T26236] sctp_add_bind_addr+0x8c/0x370 [ 572.419922][T26236] sctp_copy_local_addr_list+0x314/0x4f0 [ 572.419955][T26236] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 572.419983][T26236] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 572.420013][T26236] ? sctp_v6_is_any+0x64/0x80 [ 572.420044][T26236] ? sctp_copy_one_addr+0x93/0x360 [ 572.420075][T26236] sctp_bind_addr_copy+0xb3/0x3c0 [ 572.420103][T26236] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 572.420130][T26236] sctp_connect_new_asoc+0x2ff/0x6b0 [ 572.420166][T26236] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 572.420201][T26236] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 572.420233][T26236] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 572.420263][T26236] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 572.420296][T26236] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 572.420320][T26236] ? security_sctp_bind_connect+0x7e/0x2c0 [ 572.420359][T26236] sctp_sendmsg+0x1528/0x2c10 [ 572.420408][T26236] ? __pfx_sctp_sendmsg+0x10/0x10 [ 572.420444][T26236] ? aa_sk_perm+0x6d5/0x900 [ 572.420476][T26236] ? __pfx_aa_sk_perm+0x10/0x10 [ 572.420505][T26236] ? sock_rps_record_flow+0x19/0x400 [ 572.420542][T26236] ? inet_sendmsg+0x2f4/0x370 [ 572.420573][T26236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.420599][T26236] ____sys_sendmsg+0x894/0xad0 [ 572.420639][T26236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.420689][T26236] ? import_iovec+0x73/0xa0 [ 572.420722][T26236] ___sys_sendmsg+0x2a5/0x360 [ 572.420760][T26236] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.420831][T26236] ? __fget_files+0x2a/0x420 [ 572.420860][T26236] ? __fget_files+0x3a0/0x420 [ 572.420899][T26236] __x64_sys_sendmsg+0x1bd/0x2a0 [ 572.420933][T26236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.420976][T26236] ? __pfx_ksys_write+0x10/0x10 [ 572.421011][T26236] do_syscall_64+0x14d/0xf80 [ 572.421031][T26236] ? trace_irq_disable+0x3b/0x150 [ 572.421062][T26236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.421084][T26236] ? clear_bhb_loop+0x40/0x90 [ 572.421111][T26236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.421133][T26236] RIP: 0033:0x7f44a9f9c799 [ 572.421154][T26236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.421172][T26236] RSP: 002b:00007f44aaeb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.421195][T26236] RAX: ffffffffffffffda RBX: 00007f44aa215fa0 RCX: 00007f44a9f9c799 [ 572.421211][T26236] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 572.421225][T26236] RBP: 00007f44aaeb7090 R08: 0000000000000000 R09: 0000000000000000 [ 572.421238][T26236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 572.421250][T26236] R13: 00007f44aa216038 R14: 00007f44aa215fa0 R15: 00007ffc192d54e8 [ 572.421285][T26236] [ 573.591824][T26274] : renamed from sit0 (while UP) [ 573.828209][T26286] netlink: 'syz.0.5501': attribute type 1 has an invalid length. [ 573.896331][T26289] FAULT_INJECTION: forcing a failure. [ 573.896331][T26289] name failslab, interval 1, probability 0, space 0, times 0 [ 573.912147][T26286] bond6: entered promiscuous mode [ 573.917517][T26286] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.955788][T26289] CPU: 1 UID: 0 PID: 26289 Comm: syz.2.5502 Not tainted syzkaller #0 PREEMPT(full) [ 573.955817][T26289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 573.955830][T26289] Call Trace: [ 573.955839][T26289] [ 573.955848][T26289] dump_stack_lvl+0xe8/0x150 [ 573.955884][T26289] should_fail_ex+0x412/0x560 [ 573.955914][T26289] should_failslab+0xa8/0x100 [ 573.955943][T26289] __kmalloc_cache_noprof+0x88/0x660 [ 573.955976][T26289] ? sctp_add_bind_addr+0x8c/0x370 [ 573.956011][T26289] sctp_add_bind_addr+0x8c/0x370 [ 573.956044][T26289] sctp_copy_local_addr_list+0x314/0x4f0 [ 573.956077][T26289] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 573.956105][T26289] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 573.956134][T26289] ? sctp_v6_is_any+0x64/0x80 [ 573.956169][T26289] ? sctp_copy_one_addr+0x93/0x360 [ 573.956200][T26289] sctp_bind_addr_copy+0xb3/0x3c0 [ 573.956229][T26289] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 573.956258][T26289] sctp_connect_new_asoc+0x2ff/0x6b0 [ 573.956295][T26289] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 573.956329][T26289] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 573.956361][T26289] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 573.956392][T26289] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 573.956426][T26289] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 573.956451][T26289] ? security_sctp_bind_connect+0x7e/0x2c0 [ 573.956490][T26289] sctp_sendmsg+0x1528/0x2c10 [ 573.956539][T26289] ? __pfx_sctp_sendmsg+0x10/0x10 [ 573.956574][T26289] ? aa_sk_perm+0x6d5/0x900 [ 573.956608][T26289] ? __pfx_aa_sk_perm+0x10/0x10 [ 573.956635][T26289] ? sock_rps_record_flow+0x19/0x400 [ 573.956673][T26289] ? inet_sendmsg+0x2f4/0x370 [ 573.956703][T26289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.956730][T26289] ____sys_sendmsg+0x894/0xad0 [ 573.956773][T26289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.956815][T26289] ? import_iovec+0x73/0xa0 [ 573.956849][T26289] ___sys_sendmsg+0x2a5/0x360 [ 573.956888][T26289] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.956967][T26289] ? __fget_files+0x2a/0x420 [ 573.956998][T26289] ? __fget_files+0x3a0/0x420 [ 573.957039][T26289] __x64_sys_sendmsg+0x1bd/0x2a0 [ 573.957075][T26289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.957118][T26289] ? __pfx_ksys_write+0x10/0x10 [ 573.957153][T26289] do_syscall_64+0x14d/0xf80 [ 573.957174][T26289] ? trace_irq_disable+0x3b/0x150 [ 573.957205][T26289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.957227][T26289] ? clear_bhb_loop+0x40/0x90 [ 573.957256][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.957277][T26289] RIP: 0033:0x7f44a9f9c799 [ 573.957297][T26289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.957316][T26289] RSP: 002b:00007f44aaeb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.957339][T26289] RAX: ffffffffffffffda RBX: 00007f44aa215fa0 RCX: 00007f44a9f9c799 [ 573.957355][T26289] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 573.957368][T26289] RBP: 00007f44aaeb7090 R08: 0000000000000000 R09: 0000000000000000 [ 573.957381][T26289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.957394][T26289] R13: 00007f44aa216038 R14: 00007f44aa215fa0 R15: 00007ffc192d54e8 [ 573.957429][T26289] [ 574.343732][T26297] netlink: 'syz.2.5505': attribute type 39 has an invalid length. [ 574.381818][T26290] netlink: 'syz.0.5501': attribute type 1 has an invalid length. [ 574.392803][T26290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5501'. [ 574.470654][T26290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 574.478172][T26290] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 574.489146][T26290] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 574.502205][T26290] bond6: (slave vcan1): making interface the new active one [ 574.518509][T26290] vcan1: entered promiscuous mode [ 574.525716][T26290] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 574.545017][T26302] IPv6: NLM_F_CREATE should be specified when creating new route [ 574.584524][T26308] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5508'. [ 574.752498][T26320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5511'. [ 574.812128][T26329] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5513'. [ 574.942717][T26338] FAULT_INJECTION: forcing a failure. [ 574.942717][T26338] name failslab, interval 1, probability 0, space 0, times 0 [ 574.971912][T26338] CPU: 1 UID: 0 PID: 26338 Comm: syz.4.5515 Not tainted syzkaller #0 PREEMPT(full) [ 574.971947][T26338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.971961][T26338] Call Trace: [ 574.971970][T26338] [ 574.971980][T26338] dump_stack_lvl+0xe8/0x150 [ 574.972018][T26338] should_fail_ex+0x412/0x560 [ 574.972050][T26338] should_failslab+0xa8/0x100 [ 574.972079][T26338] __kmalloc_cache_noprof+0x88/0x660 [ 574.972104][T26338] ? sctp_add_bind_addr+0x8c/0x370 [ 574.972139][T26338] sctp_add_bind_addr+0x8c/0x370 [ 574.972172][T26338] sctp_copy_local_addr_list+0x314/0x4f0 [ 574.972203][T26338] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 574.972231][T26338] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 574.972262][T26338] ? sctp_v6_is_any+0x64/0x80 [ 574.972293][T26338] ? sctp_copy_one_addr+0x93/0x360 [ 574.972332][T26338] sctp_bind_addr_copy+0xb3/0x3c0 [ 574.972362][T26338] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 574.972391][T26338] sctp_connect_new_asoc+0x2ff/0x6b0 [ 574.972428][T26338] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 574.972464][T26338] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 574.972498][T26338] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 574.972529][T26338] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 574.972562][T26338] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 574.972587][T26338] ? security_sctp_bind_connect+0x7e/0x2c0 [ 574.972624][T26338] sctp_sendmsg+0x1528/0x2c10 [ 574.972672][T26338] ? __pfx_sctp_sendmsg+0x10/0x10 [ 574.972706][T26338] ? aa_sk_perm+0x6d5/0x900 [ 574.972737][T26338] ? __pfx_aa_sk_perm+0x10/0x10 [ 574.972764][T26338] ? sock_rps_record_flow+0x19/0x400 [ 574.972799][T26338] ? inet_sendmsg+0x2f4/0x370 [ 574.972831][T26338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.972856][T26338] ____sys_sendmsg+0x894/0xad0 [ 574.972902][T26338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.972945][T26338] ? import_iovec+0x73/0xa0 [ 574.972981][T26338] ___sys_sendmsg+0x2a5/0x360 [ 574.973020][T26338] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.973093][T26338] ? __fget_files+0x2a/0x420 [ 574.973123][T26338] ? __fget_files+0x3a0/0x420 [ 574.973164][T26338] __x64_sys_sendmsg+0x1bd/0x2a0 [ 574.973200][T26338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.973243][T26338] ? __pfx_ksys_write+0x10/0x10 [ 574.973275][T26338] do_syscall_64+0x14d/0xf80 [ 574.973298][T26338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.973320][T26338] ? clear_bhb_loop+0x40/0x90 [ 574.973356][T26338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.973378][T26338] RIP: 0033:0x7fe38b59c799 [ 574.973400][T26338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.973418][T26338] RSP: 002b:00007fe38c404028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.973442][T26338] RAX: ffffffffffffffda RBX: 00007fe38b815fa0 RCX: 00007fe38b59c799 [ 574.973457][T26338] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 574.973471][T26338] RBP: 00007fe38c404090 R08: 0000000000000000 R09: 0000000000000000 [ 574.973484][T26338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 574.973497][T26338] R13: 00007fe38b816038 R14: 00007fe38b815fa0 R15: 00007ffc199a0ab8 [ 574.973532][T26338] [ 575.641914][T26360] veth0: entered promiscuous mode [ 575.734934][T26359] veth0: left promiscuous mode [ 575.788342][T26376] FAULT_INJECTION: forcing a failure. [ 575.788342][T26376] name failslab, interval 1, probability 0, space 0, times 0 [ 575.802674][T26376] CPU: 1 UID: 0 PID: 26376 Comm: syz.4.5529 Not tainted syzkaller #0 PREEMPT(full) [ 575.802706][T26376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.802720][T26376] Call Trace: [ 575.802729][T26376] [ 575.802738][T26376] dump_stack_lvl+0xe8/0x150 [ 575.802776][T26376] should_fail_ex+0x412/0x560 [ 575.802807][T26376] should_failslab+0xa8/0x100 [ 575.802836][T26376] __kmalloc_cache_noprof+0x88/0x660 [ 575.802860][T26376] ? sctp_add_bind_addr+0x8c/0x370 [ 575.802894][T26376] sctp_add_bind_addr+0x8c/0x370 [ 575.802926][T26376] sctp_copy_local_addr_list+0x314/0x4f0 [ 575.802958][T26376] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 575.802985][T26376] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 575.803017][T26376] ? sctp_v6_is_any+0x64/0x80 [ 575.803048][T26376] ? sctp_copy_one_addr+0x93/0x360 [ 575.803080][T26376] sctp_bind_addr_copy+0xb3/0x3c0 [ 575.803109][T26376] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 575.803138][T26376] sctp_connect_new_asoc+0x2ff/0x6b0 [ 575.803176][T26376] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 575.803211][T26376] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 575.803244][T26376] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 575.803276][T26376] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 575.803311][T26376] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 575.803336][T26376] ? security_sctp_bind_connect+0x7e/0x2c0 [ 575.803383][T26376] sctp_sendmsg+0x1528/0x2c10 [ 575.803433][T26376] ? __pfx_sctp_sendmsg+0x10/0x10 [ 575.803470][T26376] ? aa_sk_perm+0x6d5/0x900 [ 575.803504][T26376] ? __pfx_aa_sk_perm+0x10/0x10 [ 575.803532][T26376] ? sock_rps_record_flow+0x19/0x400 [ 575.803569][T26376] ? inet_sendmsg+0x2f4/0x370 [ 575.803601][T26376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.803627][T26376] ____sys_sendmsg+0x894/0xad0 [ 575.803670][T26376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.803712][T26376] ? import_iovec+0x73/0xa0 [ 575.803747][T26376] ___sys_sendmsg+0x2a5/0x360 [ 575.803785][T26376] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.803860][T26376] ? __fget_files+0x2a/0x420 [ 575.803889][T26376] ? __fget_files+0x3a0/0x420 [ 575.803932][T26376] __x64_sys_sendmsg+0x1bd/0x2a0 [ 575.803968][T26376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.804012][T26376] ? __pfx_ksys_write+0x10/0x10 [ 575.804048][T26376] do_syscall_64+0x14d/0xf80 [ 575.804069][T26376] ? trace_irq_disable+0x3b/0x150 [ 575.804099][T26376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.804122][T26376] ? clear_bhb_loop+0x40/0x90 [ 575.804149][T26376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.804171][T26376] RIP: 0033:0x7fe38b59c799 [ 575.804191][T26376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.804210][T26376] RSP: 002b:00007fe38c404028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.804234][T26376] RAX: ffffffffffffffda RBX: 00007fe38b815fa0 RCX: 00007fe38b59c799 [ 575.804249][T26376] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 575.804263][T26376] RBP: 00007fe38c404090 R08: 0000000000000000 R09: 0000000000000000 [ 575.804276][T26376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.804288][T26376] R13: 00007fe38b816038 R14: 00007fe38b815fa0 R15: 00007ffc199a0ab8 [ 575.804325][T26376] [ 576.460822][T26399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5533'. [ 576.572096][T26409] netlink: 'syz.0.5536': attribute type 39 has an invalid length. [ 576.691207][T26419] syzkaller0: entered promiscuous mode [ 576.701461][T26419] syzkaller0: entered allmulticast mode [ 576.763576][T26421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5539'. [ 576.897765][T26431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5542'. [ 576.917485][T26431] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5542'. [ 577.014437][T26440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5545'. [ 577.128993][T26433] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5543'. [ 577.713659][T26468] netlink: 'syz.0.5551': attribute type 4 has an invalid length. [ 577.961675][T26478] netlink: 'syz.0.5556': attribute type 1 has an invalid length. [ 577.974886][T26478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5556'. [ 577.988799][T26478] netlink: 'syz.0.5556': attribute type 1 has an invalid length. [ 578.329112][T26500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5560'. [ 578.471077][T26508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5562'. [ 578.535425][T26508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5562'. [ 579.060876][T26531] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 579.286827][T26534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5572'. [ 579.548198][T26553] netlink: 'syz.2.5579': attribute type 1 has an invalid length. [ 579.583849][T26553] bond13: entered promiscuous mode [ 579.590083][T26553] 8021q: adding VLAN 0 to HW filter on device bond13 [ 579.597602][T26556] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 579.623255][T26548] netlink: 'syz.4.5577': attribute type 83 has an invalid length. [ 579.701019][T26560] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20001 [ 579.722399][T26563] netlink: 'syz.3.5582': attribute type 1 has an invalid length. [ 579.731302][T26563] netlink: 'syz.3.5582': attribute type 11 has an invalid length. [ 579.909716][T26531] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 580.074466][T26575] geneve6: entered promiscuous mode [ 580.661638][T26609] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 580.978778][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.003287][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 581.030208][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.039249][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 581.053395][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 19999 - 0 [ 581.062963][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.077225][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 581.086757][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.100204][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 581.118023][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 581.138617][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.159072][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 581.174934][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.185033][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 581.194863][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 581.205339][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.217430][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 581.237944][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.259109][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 581.268872][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 581.343767][T26655] bond9: option min_links: invalid value (18446744073709551358) [ 581.354830][T26655] bond9: option min_links: allowed values 0 - 2147483647 [ 581.373544][T26655] bond9 (unregistering): Released all slaves [ 581.557091][T26669] netlink: 'syz.4.5611': attribute type 1 has an invalid length. [ 581.568169][T26669] netlink: 'syz.4.5611': attribute type 1 has an invalid length. [ 581.601615][T26671] netlink: 'syz.1.5612': attribute type 1 has an invalid length. [ 581.897301][T26686] __nla_validate_parse: 11 callbacks suppressed [ 581.897322][T26686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5617'. [ 581.926948][T26685] syzkaller0: entered promiscuous mode [ 581.937745][T26685] syzkaller0: entered allmulticast mode [ 581.954013][T26686] hsr_slave_0: left promiscuous mode [ 581.980016][T26686] hsr_slave_1: left promiscuous mode [ 582.020748][T26692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5618'. [ 582.034434][T26692] netlink: 'syz.4.5618': attribute type 12 has an invalid length. [ 582.252112][T26702] netlink: 'syz.4.5622': attribute type 1 has an invalid length. [ 582.278599][T26702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5622'. [ 582.327662][T26707] debugfs: 'netdev:veth1_to_bridge' already exists in 'phy41' [ 582.367792][T26709] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 582.448126][T26715] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 582.455197][T26715] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 582.457359][T26714] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 582.480662][T26714] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5625'. [ 582.489917][T26708] syzkaller0: entered promiscuous mode [ 582.495437][T26708] syzkaller0: entered allmulticast mode [ 582.505006][T26708] 0: reclassify loop, rule prio 0, protocol 800 [ 582.714990][T26730] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 582.726935][T26730] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 582.905369][T26742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5635'. [ 583.203865][T26768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5640'. [ 583.242247][T26768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5640'. [ 583.272797][T21218] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.286263][T21218] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.296043][T21218] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.328018][T21218] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.668372][T21218] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 583.678494][T21218] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 583.701285][T21218] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 44064 - 0 [ 583.713289][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5644'. [ 583.729547][T21218] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 583.738801][T26782] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 583.757367][T21218] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 583.776599][T21218] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 583.787111][T26782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5644'. [ 583.800162][T21218] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 44064 - 0 [ 583.810618][T21218] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 583.837653][T26786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5644'. [ 583.925750][T26754] infiniband : set down [ 583.933638][T26754] infiniband : added ipvlan0 [ 583.948636][T21218] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 583.963518][T21218] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 583.994997][T21218] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 44064 - 0 [ 584.036801][T21218] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 584.057333][T21218] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 584.066950][T21218] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 584.076895][T21218] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 44064 - 0 [ 584.093980][T21218] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 584.160224][T26754] RDS/IB: : added [ 584.166731][T26754] smc: adding ib device  with port count 1 [ 584.190773][T26754] smc: ib device  port 1 has no pnetid [ 584.200597][T26803] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 585.594731][T26848] openvswitch: netlink: Multiple metadata blocks provided [ 586.010424][T26874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.056709][T26876] validate_nla: 4 callbacks suppressed [ 586.056729][T26876] netlink: 'syz.3.5673': attribute type 10 has an invalid length. [ 586.303915][T26882] "syz.3.5673" (26882) uses obsolete ecb(arc4) skcipher [ 586.335867][T26892] veth0: entered promiscuous mode [ 586.535934][T26902] netlink: 'syz.3.5679': attribute type 61 has an invalid length. [ 586.925062][T26922] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 586.955806][T26922] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 587.087830][T26888] veth0: left promiscuous mode [ 587.305620][T26949] x_tables: duplicate underflow at hook 2 [ 587.601598][T26959] netlink: 'syz.1.5696': attribute type 2 has an invalid length. [ 587.638855][T26959] netlink: 'syz.1.5696': attribute type 1 has an invalid length. [ 587.673383][T26959] netlink: 'syz.1.5696': attribute type 1 has an invalid length. [ 587.684214][T26966] __nla_validate_parse: 7 callbacks suppressed [ 587.684233][T26966] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5698'. [ 587.711414][T26966] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 588.282033][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 588.318162][T26998] netlink: 'syz.4.5708': attribute type 1 has an invalid length. [ 588.347911][T26998] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5708'. [ 588.591260][T27007] syzkaller0: entered promiscuous mode [ 588.598240][T27007] syzkaller0: entered allmulticast mode [ 588.927193][T27030] netlink: 'syz.2.5717': attribute type 28 has an invalid length. [ 588.946789][T27030] netlink: 'syz.2.5717': attribute type 3 has an invalid length. [ 588.965062][T27030] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5717'. [ 589.013435][T27030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5717'. [ 589.095113][T27039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5718'. [ 589.106201][T27030] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5717'. [ 589.319190][T27048] IPVS: set_ctl: invalid protocol: 35230 127.0.0.1:20000 [ 589.387765][T27058] syzkaller1: entered promiscuous mode [ 589.410235][T27058] syzkaller1: entered allmulticast mode [ 589.547363][T27070] netlink: 'syz.3.5726': attribute type 1 has an invalid length. [ 589.558879][T27072] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5727'. [ 589.612001][T27078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5726'. [ 589.899926][T27099] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5736'. [ 589.923343][T27098] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5736'. [ 590.138420][T27110] openvswitch: netlink: Flow actions attr not present in new flow. [ 590.200186][T27114] netlink: 'syz.2.5742': attribute type 2 has an invalid length. [ 590.467834][T27132] tipc: Enabling of bearer rejected, failed to enable media [ 590.586505][T27139] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 591.364367][T27194] tipc: Enabled bearer , priority 10 [ 591.726309][T27210] team1: entered promiscuous mode [ 591.760943][T27210] team1: entered allmulticast mode [ 592.264699][T27232] nbd: must specify a device to reconfigure [ 592.434683][T27238] sock: sock_timestamping_bind_phc: sock not bind to device [ 592.467094][T27242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.480094][T11078] tipc: Node number set to 1511619402 [ 592.616143][T27246] validate_nla: 3 callbacks suppressed [ 592.616163][T27246] netlink: 'syz.0.5780': attribute type 13 has an invalid length. [ 592.725699][T27246] syzkaller0: entered promiscuous mode [ 592.731444][T27246] syzkaller0: entered allmulticast mode [ 592.947572][T27267] __nla_validate_parse: 7 callbacks suppressed [ 592.947594][T27267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5788'. [ 592.991479][T27275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5789'. [ 593.001879][T27267] bond14: entered promiscuous mode [ 593.008411][T27267] 8021q: adding VLAN 0 to HW filter on device bond14 [ 593.062203][T27277] bridge7: entered promiscuous mode [ 593.068251][T27277] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 593.096643][T27282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5792'. [ 593.122818][T27267] macvlan4: entered promiscuous mode [ 593.152643][T27267] macvlan4: entered allmulticast mode [ 593.175439][T27267] bond14: (slave macvlan4): Error -98 calling set_mac_address [ 593.216201][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5794'. [ 593.364861][T27298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5795'. [ 593.789624][T27312] netlink: 'syz.2.5799': attribute type 1 has an invalid length. [ 593.797629][T27312] netlink: 'syz.2.5799': attribute type 2 has an invalid length. [ 593.854057][T27314] xt_cgroup: invalid path, errno=-2 [ 593.893481][T27312] netlink: 'syz.2.5799': attribute type 1 has an invalid length. [ 593.902289][T27312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5799'. [ 593.968372][T27318] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.5800'. [ 593.992140][T27319] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5800'. [ 594.059709][T27319] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5800'. [ 594.079928][T27319] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5800'. [ 594.166953][T27325] hsr0 speed is unknown, defaulting to 1000 [ 594.308611][T27334] block nbd4: Unsupported socket: should be TCP or UNIX. [ 594.595522][T27353] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 594.717508][T27345] bond9: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 594.732526][T27345] bond9: entered promiscuous mode [ 594.737661][T27345] bond9: entered allmulticast mode [ 594.743873][T27345] 8021q: adding VLAN 0 to HW filter on device bond9 [ 595.172400][T27387] syzkaller0: entered promiscuous mode [ 595.178138][T27387] syzkaller0: entered allmulticast mode [ 595.484468][T27406] xt_hashlimit: size too large, truncated to 1048576 [ 595.856133][T27407] bond10: entered promiscuous mode [ 595.862178][T27407] 8021q: adding VLAN 0 to HW filter on device bond10 [ 595.900838][T27427] ip6tnl0: Caught tx_queue_len zero misconfig [ 595.911779][T27432] team_slave_1: Caught tx_queue_len zero misconfig [ 596.250183][T27451] Unknown options in mask b7f2 [ 596.271632][T27456] netlink: 'syz.0.5840': attribute type 9 has an invalid length. [ 596.289651][T27456] netlink: 'syz.0.5840': attribute type 11 has an invalid length. [ 596.297756][T27456] netlink: 'syz.0.5840': attribute type 12 has an invalid length. [ 596.308199][T27456] netlink: 'syz.0.5840': attribute type 9 has an invalid length. [ 596.316940][T27458] tunl0: Caught tx_queue_len zero misconfig [ 596.349986][T27456] netlink: 'syz.0.5840': attribute type 11 has an invalid length. [ 596.363862][T27456] netlink: 'syz.0.5840': attribute type 12 has an invalid length. [ 596.652720][T27477] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 596.846461][T27490] hsr0 speed is unknown, defaulting to 1000 [ 597.322373][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.333448][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.342799][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.354031][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.364605][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 597.461906][T27516] hsr0 speed is unknown, defaulting to 1000 [ 597.499199][T27519] syzkaller1: entered promiscuous mode [ 597.504917][T27519] syzkaller1: entered allmulticast mode [ 598.274904][T27516] chnl_net:caif_netlink_parms(): no params data found [ 598.420832][T27516] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.428196][T27516] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.436209][T27516] bridge_slave_0: entered allmulticast mode [ 598.445544][T27516] bridge_slave_0: entered promiscuous mode [ 598.454956][T27516] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.463528][T27516] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.472009][T27516] bridge_slave_1: entered allmulticast mode [ 598.480550][T27516] bridge_slave_1: entered promiscuous mode [ 598.527233][T27516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.545243][T27516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.588221][T27516] team0: Port device team_slave_0 added [ 598.598201][T27516] team0: Port device team_slave_1 added [ 598.636804][T27516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.644013][T27516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.671139][T27516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.684303][T27516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.691785][T27516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.718852][T27516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.790093][T27516] hsr_slave_0: entered promiscuous mode [ 598.797135][T27516] hsr_slave_1: entered promiscuous mode [ 599.374108][T27573] __nla_validate_parse: 27 callbacks suppressed [ 599.374178][T27573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5867'. [ 599.400345][ T5831] Bluetooth: hci1: command tx timeout [ 600.171525][T27507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.214149][T27516] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 600.264753][T27516] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 600.326004][T27516] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 600.346566][T27580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5870'. [ 600.370107][T27516] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 600.418785][T27576] : entered promiscuous mode [ 600.681216][ T5190] block nbd3: Possible stuck request ffff888027078000: control (read@0,1024B). Runtime 270 seconds [ 600.692260][ T5190] block nbd3: Possible stuck request ffff888027078200: control (read@1024,1024B). Runtime 270 seconds [ 600.705213][ T5190] block nbd3: Possible stuck request ffff888027078400: control (read@2048,1024B). Runtime 270 seconds [ 600.716765][ T5190] block nbd3: Possible stuck request ffff888027078600: control (read@3072,1024B). Runtime 270 seconds [ 600.795524][T27516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.808985][T27614] sctp: [Deprecated]: syz.1.5879 (pid 27614) Use of int in max_burst socket option deprecated. [ 600.808985][T27614] Use struct sctp_assoc_value instead [ 600.826213][T27516] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.846685][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.853976][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.901694][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.908939][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.945484][T27622] validate_nla: 3 callbacks suppressed [ 600.945503][T27622] netlink: 'syz.4.5882': attribute type 21 has an invalid length. [ 601.018490][T27622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5882'. [ 601.031520][T27622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5882'. [ 601.087814][T27630] x_tables: duplicate underflow at hook 2 [ 601.385998][T27642] IPv6: sit2: Disabled Multicast RS [ 601.432946][T27642] sit2: entered allmulticast mode [ 601.482780][ T5831] Bluetooth: hci1: command tx timeout [ 601.502084][T27652] IPv6: sit2: Disabled Multicast RS [ 601.509287][T27652] sit2: entered allmulticast mode [ 601.551439][T27649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.661745][T27516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.736040][T27669] nbd: socks must be embedded in a SOCK_ITEM attr [ 601.798633][T27516] veth0_vlan: entered promiscuous mode [ 601.839865][T27516] veth1_vlan: entered promiscuous mode [ 601.995760][T27516] veth0_macvtap: entered promiscuous mode [ 602.050685][T27516] veth1_macvtap: entered promiscuous mode [ 602.092489][T27690] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5894'. [ 602.125213][T27516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.173346][T27516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.232334][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.247423][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.268076][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.310520][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.428816][T27698] sit0: entered promiscuous mode [ 602.440282][T27698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5896'. [ 602.546179][ T6617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.565606][ T6617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.676860][T21202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.693930][T21202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.858895][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5898'. [ 603.019095][T27715] netlink: 'syz.2.5855': attribute type 21 has an invalid length. [ 603.054935][T27715] IPv6: NLM_F_CREATE should be specified when creating new route [ 603.092324][T27717] netlink: 'syz.1.5900': attribute type 2 has an invalid length. [ 603.293799][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5901'. [ 603.564660][ T5831] Bluetooth: hci1: command tx timeout [ 603.600937][T27733] netlink: 'syz.2.5906': attribute type 1 has an invalid length. [ 603.614389][T27732] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5905'. [ 603.808845][T27740] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 603.907724][T27742] xt_hashlimit: size too large, truncated to 1048576 [ 604.049066][T27740] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.056932][T27740] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.065578][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807db93c00: rx timeout, send abort [ 604.108724][T27747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5909'. [ 604.308666][T27740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.326396][T27740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.459160][T27755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5911'. [ 604.493212][ T153] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.513180][ T153] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.559973][ T153] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.568932][ T153] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.610172][T27758] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001 [ 604.770386][T27773] netlink: 'syz.4.5917': attribute type 4 has an invalid length. [ 604.801292][T27772] netlink: 'syz.4.5917': attribute type 4 has an invalid length. [ 604.860606][T27779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5919'. [ 604.914757][T27782] netlink: 'syz.3.5918': attribute type 1 has an invalid length. [ 604.933462][T27782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.152495][T27792] netlink: 'syz.3.5923': attribute type 1 has an invalid length. [ 605.164695][T27795] lo: Caught tx_queue_len zero misconfig [ 605.264189][T27792] bond5: entered promiscuous mode [ 605.296165][T27792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 605.334422][T27800] syzkaller0: entered promiscuous mode [ 605.359176][T27800] syzkaller0: entered allmulticast mode [ 605.392203][T27792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 605.414241][T27792] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 605.436621][T27792] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 605.461745][T27792] bond5: (slave vti0): making interface the new active one [ 605.469683][T27792] vti0: entered promiscuous mode [ 605.476306][T27792] bond5: (slave vti0): Enslaving as an active interface with an up link [ 605.496507][T27811] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5926'. [ 605.645797][ T5831] Bluetooth: hci1: command tx timeout [ 605.691278][T27821] bond6: entered promiscuous mode [ 605.696558][T27821] bond6: entered allmulticast mode [ 605.702280][T27821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 605.949869][T27837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5935'. [ 605.990952][T27837] netlink: 'syz.4.5935': attribute type 1 has an invalid length. [ 606.016778][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5934'. [ 606.060480][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5934'. [ 606.192905][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 606.217253][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 606.226428][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 606.236926][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 606.245576][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 606.323096][T27843] macvtap1: entered promiscuous mode [ 606.339338][T27843] macvtap1: entered allmulticast mode [ 606.356260][T27843] veth1_vlan: entered allmulticast mode [ 606.463572][T27844] hsr0 speed is unknown, defaulting to 1000 [ 606.590026][T27867] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5943'. [ 606.746165][T27876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5946'. [ 606.781440][T27876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5946'. [ 606.843372][T27881] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5948'. [ 606.861114][T27879] Unsupported ieee802154 address type: 0 [ 606.913839][T27885] bridge0: port 1(syz_tun) entered blocking state [ 606.930491][T27885] bridge0: port 1(syz_tun) entered disabled state [ 606.938408][T27885] syz_tun: entered allmulticast mode [ 606.957377][T27885] syz_tun: entered promiscuous mode [ 606.968950][T27885] bridge0: port 1(syz_tun) entered blocking state [ 606.975579][T27885] bridge0: port 1(syz_tun) entered forwarding state [ 607.226285][T27899] pim6reg1: entered promiscuous mode [ 607.232367][T27899] pim6reg1: entered allmulticast mode [ 607.436964][T27911] openvswitch: netlink: Message has 6 unknown bytes. [ 607.526329][T27844] chnl_net:caif_netlink_parms(): no params data found [ 607.722428][ T5831] Bluetooth: hci1: command tx timeout [ 607.882464][T27844] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.900447][T27844] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.907797][T27844] bridge_slave_0: entered allmulticast mode [ 607.914503][T27927] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 607.934704][T27844] bridge_slave_0: entered promiscuous mode [ 607.955897][T27844] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.975424][T27844] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.989720][T27844] bridge_slave_1: entered allmulticast mode [ 608.005702][T27844] bridge_slave_1: entered promiscuous mode [ 608.216009][T27844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.230844][T27844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.279908][ T5831] Bluetooth: hci5: command tx timeout [ 608.358811][T27844] team0: Port device team_slave_0 added [ 608.371825][T27844] team0: Port device team_slave_1 added [ 608.441571][T27844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.454740][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.512276][T27844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.572943][T27844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.580233][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.628031][T27844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.761547][T27844] hsr_slave_0: entered promiscuous mode [ 608.768444][T27844] hsr_slave_1: entered promiscuous mode [ 608.776013][T27844] debugfs: 'hsr0' already exists in 'hsr' [ 608.782735][T27844] Cannot create hsr debugfs directory [ 608.859407][T27969] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 609.501003][T28007] __nla_validate_parse: 7 callbacks suppressed [ 609.501024][T28007] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5982'. [ 609.604994][T28014] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 609.740971][T28017] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 609.842813][T27844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 609.870291][T27844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 609.900358][T28021] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5987'. [ 609.913259][T27844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 609.935561][T27844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 610.289074][T27844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.327185][T28047] netlink: 'syz.4.5993': attribute type 4 has an invalid length. [ 610.343586][T28044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5991'. [ 610.362288][ T5831] Bluetooth: hci5: command tx timeout [ 610.381422][T27844] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.435043][T28046] hsr0 speed is unknown, defaulting to 1000 [ 610.487903][T21202] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.495144][T21202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.552015][T21202] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.559241][T21202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.626161][T27844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.950862][T28065] syzkaller0: entered promiscuous mode [ 610.966705][T28065] syzkaller0: entered allmulticast mode [ 611.014831][T28068] netlink: 'syz.2.5998': attribute type 1 has an invalid length. [ 611.228146][T28074] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6000'. [ 611.264505][T28074] bond0: entered promiscuous mode [ 611.277141][T28074] batadv0: entered promiscuous mode [ 611.289144][T28074] debugfs: 'hsr0' already exists in 'hsr' [ 611.295722][T28074] Cannot create hsr debugfs directory [ 611.301661][T28074] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 611.312581][T28074] hsr0: entered promiscuous mode [ 611.317678][T28074] hsr0: entered allmulticast mode [ 611.324927][T28074] bond0: entered allmulticast mode [ 611.338679][T28074] batadv0: entered allmulticast mode [ 611.345640][T28074] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 611.354419][T28074] bond0: left promiscuous mode [ 611.360431][T28074] batadv0: left promiscuous mode [ 611.394738][T28078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.416251][T27844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.616656][T28084] syzkaller1: entered promiscuous mode [ 611.623353][T28084] syzkaller1: entered allmulticast mode [ 611.645976][T28084] netlink: 'syz.2.6004': attribute type 21 has an invalid length. [ 611.654109][T28084] netlink: 'syz.2.6004': attribute type 6 has an invalid length. [ 611.663657][T28084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6004'. [ 611.692072][T27844] veth0_vlan: entered promiscuous mode [ 611.710585][T27844] veth1_vlan: entered promiscuous mode [ 611.888784][T27844] veth0_macvtap: entered promiscuous mode [ 611.907185][T27844] veth1_macvtap: entered promiscuous mode [ 611.970812][T27844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.993057][T27844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.025468][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.035575][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.061871][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.071188][T28100] delete_channel: no stack [ 612.082784][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.114901][T28101] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6009'. [ 612.130120][T28099] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6009'. [ 612.152113][T28103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6008'. [ 612.165557][T28103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6008'. [ 612.176699][T28100] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 612.189176][T28100] bond9 (unregistering): Released all slaves [ 612.357776][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.368439][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.412670][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.423488][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.438324][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.441696][ T5831] Bluetooth: hci5: command tx timeout [ 612.488971][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.517969][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.538941][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.714171][T28121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6013'. [ 612.791677][T28127] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 612.810752][T28127] syzkaller1: Refused to change device type [ 613.329752][T28140] netlink: 'syz.3.6020': attribute type 1 has an invalid length. [ 613.498437][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 613.518770][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 613.528106][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 613.537557][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 613.549181][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 613.751323][T28149] hsr0 speed is unknown, defaulting to 1000 [ 613.778497][T28156] netlink: 'syz.2.6025': attribute type 9 has an invalid length. [ 613.813713][T28154] veth5: entered allmulticast mode [ 614.165947][T28174] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 614.178105][T28174] bond7 (unregistering): Released all slaves [ 614.211624][T28182] netlink: 'syz.3.6032': attribute type 1 has an invalid length. [ 614.230307][T28177] tipc: New replicast peer: 255.255.255.255 [ 614.237148][T28177] tipc: Enabled bearer , priority 10 [ 614.327234][T28182] macvlan2: entered promiscuous mode [ 614.359564][T28182] macvlan2: entered allmulticast mode [ 614.519908][ T5831] Bluetooth: hci5: command tx timeout [ 614.568900][T28194] netlink: 'syz.3.6035': attribute type 2 has an invalid length. [ 614.579059][T28194] __nla_validate_parse: 1 callbacks suppressed [ 614.579082][T28194] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6035'. [ 614.605679][T28194] netlink: 'syz.3.6035': attribute type 10 has an invalid length. [ 614.733956][T28149] chnl_net:caif_netlink_parms(): no params data found [ 614.901282][T28149] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.908560][T28149] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.917067][T28149] bridge_slave_0: entered allmulticast mode [ 614.929730][T28149] bridge_slave_0: entered promiscuous mode [ 614.939167][T28149] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.947718][T28149] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.955562][T28149] bridge_slave_1: entered allmulticast mode [ 614.963910][T28149] bridge_slave_1: entered promiscuous mode [ 615.007576][T28149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.022584][T28149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.092623][T28149] team0: Port device team_slave_0 added [ 615.112059][T28149] team0: Port device team_slave_1 added [ 615.168743][T28149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.182368][T28149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.249252][T28149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.265130][T28149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.272534][T28149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.327145][T28149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.384422][T28222] tipc: Enabling of bearer rejected, failed to enable media [ 615.397307][T28219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6041'. [ 615.411401][T28219] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6041'. [ 615.424705][T28219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6041'. [ 615.496411][T28149] hsr_slave_0: entered promiscuous mode [ 615.510819][T28149] hsr_slave_1: entered promiscuous mode [ 615.521142][T28149] debugfs: 'hsr0' already exists in 'hsr' [ 615.527034][T28149] Cannot create hsr debugfs directory [ 615.643490][ T5831] Bluetooth: hci3: command tx timeout [ 615.876570][T28149] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.988820][T28149] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.096649][T28149] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.232304][T28149] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.357408][T28266] bond1: option miimon: invalid value (18446744073709551585) [ 616.366002][T28266] bond1: option miimon: allowed values 0 - 2147483647 [ 616.375739][T28266] bond1 (unregistering): Released all slaves [ 616.663475][T28149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 616.703972][T28283] netlink: 'syz.3.6059': attribute type 2 has an invalid length. [ 616.719218][T28149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 616.783422][T28149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 616.826578][T28149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.936068][T28301] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6063'. [ 616.977361][T28309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6064'. [ 616.989034][T28301] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.996480][T28301] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.226021][T28149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.268683][T28149] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.311779][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.319013][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.344011][T28326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6069'. [ 617.373557][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.380817][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.399278][T28336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6072'. [ 617.442500][T28328] netlink: 'syz.1.6069': attribute type 1 has an invalid length. [ 617.451452][T28328] netlink: 'syz.1.6069': attribute type 2 has an invalid length. [ 617.459239][T28328] netlink: 'syz.1.6069': attribute type 1 has an invalid length. [ 617.481147][T28328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6069'. [ 617.575601][T28336] netlink: 'syz.2.6072': attribute type 5 has an invalid length. [ 617.600342][T28336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6072'. [ 617.722991][ T5831] Bluetooth: hci3: command tx timeout [ 618.026590][T28149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.038241][T28359] IPVS: Scheduler module ip_vs_sip not found [ 618.155949][T28374] delete_channel: no stack [ 618.592838][T28396] netlink: 'syz.0.6089': attribute type 3 has an invalid length. [ 618.641677][T28396] netlink: 'syz.0.6089': attribute type 1 has an invalid length. [ 618.709995][T28401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 618.741573][T28149] veth0_vlan: entered promiscuous mode [ 618.768157][T28149] veth1_vlan: entered promiscuous mode [ 618.837881][T28149] veth0_macvtap: entered promiscuous mode [ 618.875302][T28149] veth1_macvtap: entered promiscuous mode [ 618.936900][T28149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.020895][T28149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.113178][ T6621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.130133][ T6621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.166826][ T6621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.189228][ T6621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.378259][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.395798][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.498276][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.527388][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.598846][T28439] __nla_validate_parse: 7 callbacks suppressed [ 619.598870][T28439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6103'. [ 619.664251][T28439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6103'. [ 619.708477][T28449] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 619.799986][ T5831] Bluetooth: hci3: command tx timeout [ 619.875942][T28460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6104'. [ 619.900742][T28460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6104'. [ 619.988585][T28462] vlan3: entered promiscuous mode [ 619.999357][T28462] vlan3: entered allmulticast mode [ 620.016594][T28462] hsr_slave_1: entered allmulticast mode [ 620.128303][T28465] Cannot find add_set index 0 as target [ 620.237652][T28477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6112'. [ 620.303949][T28481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6111'. [ 620.706123][T28503] x_tables: duplicate entry at hook 3 [ 620.721239][T28503] netlink: 'syz.3.6121': attribute type 2 has an invalid length. [ 620.729275][T28503] netlink: 'syz.3.6121': attribute type 2 has an invalid length. [ 620.765022][T28503] netlink: 'syz.3.6121': attribute type 2 has an invalid length. [ 620.925874][T28513] : entered promiscuous mode [ 620.975836][T28524] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6128'. [ 621.215308][T28539] Bluetooth: MGMT ver 1.23 [ 621.333669][T28547] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6136'. [ 621.491292][T28555] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 621.637213][T28566] 8021q: VLANs not supported on lo [ 621.887296][ T5831] Bluetooth: hci3: command tx timeout [ 621.998827][T28581] hsr0 speed is unknown, defaulting to 1000 [ 622.127186][ T8313] lec:lec_start_xmit: lec0:No lecd attached [ 622.499632][T28610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6153'. [ 622.567859][T28612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6154'. [ 622.976610][T28634] validate_nla: 4 callbacks suppressed [ 622.976633][T28634] netlink: 'syz.2.6163': attribute type 16 has an invalid length. [ 622.991462][T28634] netlink: 'syz.2.6163': attribute type 17 has an invalid length. [ 623.104859][T28640] netlink: 'syz.2.6163': attribute type 8 has an invalid length. [ 623.358091][T28634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.402737][T28634] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.436592][T28634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.507469][T28663] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 623.836637][T28674] sctp: [Deprecated]: syz.0.6171 (pid 28674) Use of int in max_burst socket option deprecated. [ 623.836637][T28674] Use struct sctp_assoc_value instead [ 623.992477][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 624.029732][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 624.039009][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 624.062622][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 624.072436][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 624.159396][T28687] nbd: nbd0 already in use [ 624.164576][T28687] block nbd0: NBD_DISCONNECT [ 624.170939][T28687] block nbd0: Send disconnect failed -32 [ 624.177659][T28687] block nbd0: shutting down sockets [ 624.190996][T28682] hsr0 speed is unknown, defaulting to 1000 [ 624.296198][T28690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.489873][T28693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.543668][T28693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.645157][T28710] __nla_validate_parse: 5 callbacks suppressed [ 624.645179][T28710] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6180'. [ 624.688995][T28710] netlink: Unknown conntrack attr (0) [ 624.972978][T28712] bond7: option lp_interval: invalid value (0) [ 624.979678][T28712] bond7: option lp_interval: allowed values 1 - 2147483647 [ 624.988790][T28712] bond7 (unregistering): Released all slaves [ 625.066548][T18008] bridge0: port 1(syz_tun) entered disabled state [ 625.103130][T18008] syz_tun (unregistering): left allmulticast mode [ 625.120219][T18008] syz_tun (unregistering): left promiscuous mode [ 625.137068][T18008] bridge0: port 1(syz_tun) entered disabled state [ 625.418315][T28733] x_tables: duplicate entry at hook 3 [ 625.540127][T28740] syzkaller1: entered promiscuous mode [ 625.545675][T28740] syzkaller1: entered allmulticast mode [ 625.644509][T28746] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6193'. [ 625.654833][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6191'. [ 625.698887][T28682] chnl_net:caif_netlink_parms(): no params data found [ 625.817609][T28755] netlink: 'syz.3.6196': attribute type 11 has an invalid length. [ 625.934073][T28682] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.941385][T28682] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.948680][T28682] bridge_slave_0: entered allmulticast mode [ 625.957771][T28682] bridge_slave_0: entered promiscuous mode [ 625.966657][T28682] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.974154][T28682] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.982130][T28682] bridge_slave_1: entered allmulticast mode [ 625.995416][T28682] bridge_slave_1: entered promiscuous mode [ 626.044190][T28682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.057428][T28682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.110986][T28682] team0: Port device team_slave_0 added [ 626.119668][ T5831] Bluetooth: hci0: command tx timeout [ 626.120820][T28682] team0: Port device team_slave_1 added [ 626.226756][T28682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.252450][T28682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.288637][T28682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.300912][T28774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6202'. [ 626.321340][T28682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.328390][T28682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.371029][T28682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.403931][T28788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6204'. [ 626.537603][T28682] hsr_slave_0: entered promiscuous mode [ 626.552094][T28682] hsr_slave_1: entered promiscuous mode [ 626.558602][T28682] debugfs: 'hsr0' already exists in 'hsr' [ 626.566347][T28682] Cannot create hsr debugfs directory [ 626.852720][ T5919] IPVS: starting estimator thread 0... [ 626.915843][T28811] IPVS: sh: FWM 3 0x00000003 - no destination available [ 626.952296][T28809] IPVS: using max 27 ests per chain, 64800 per kthread [ 627.013798][T28682] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.030618][T28682] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.043270][T28814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6211'. [ 627.132648][T28682] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.180850][T28682] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.274628][T28682] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.294581][T28682] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.387523][T28682] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.408309][T28682] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.421990][T28837] xt_hashlimit: max too large, truncated to 1048576 [ 627.662108][T28850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.698368][T28852] netlink: 'syz.2.6224': attribute type 1 has an invalid length. [ 627.707101][T28849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.724451][T28852] netlink: 'syz.2.6224': attribute type 1 has an invalid length. [ 627.732904][T28852] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.6224'. [ 627.736366][T28854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6225'. [ 627.760175][T28682] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 627.775817][T28682] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 627.797728][T28682] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 627.849077][T28682] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 627.890189][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 627.898262][ C1] lec:lec_tx_timeout: lec0 [ 627.903967][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 628.186354][T28877] syzkaller0: entered promiscuous mode [ 628.200007][ T5831] Bluetooth: hci0: command tx timeout [ 628.210191][T28877] syzkaller0: entered allmulticast mode [ 628.222004][T28885] netlink: 'syz.0.6232': attribute type 2 has an invalid length. [ 628.288041][T28682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.113753][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6239'. [ 630.279643][ T5831] Bluetooth: hci0: command tx timeout [ 630.328009][T28924] syzkaller0: entered promiscuous mode [ 630.333983][T28924] syzkaller0: entered allmulticast mode [ 630.341304][T28925] bridge0: port 3(macsec0) entered blocking state [ 630.347957][T28925] bridge0: port 3(macsec0) entered disabled state [ 630.355908][T28925] macsec0: entered allmulticast mode [ 630.362105][T28925] veth1_macvtap: entered allmulticast mode [ 630.371299][T28925] macsec0: entered promiscuous mode [ 630.474401][T28682] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.495173][T28938] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6244'. [ 630.531565][T28938] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6244'. [ 630.587388][T21218] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.594633][T21218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.622774][T21218] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.630040][T21218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.760966][ T5190] block nbd3: Possible stuck request ffff888027078000: control (read@0,1024B). Runtime 300 seconds [ 630.771838][ T5190] block nbd3: Possible stuck request ffff888027078200: control (read@1024,1024B). Runtime 300 seconds [ 630.783918][ T5190] block nbd3: Possible stuck request ffff888027078400: control (read@2048,1024B). Runtime 300 seconds [ 630.796339][ T5190] block nbd3: Possible stuck request ffff888027078600: control (read@3072,1024B). Runtime 300 seconds [ 630.891960][T28950] ip6gre2: entered allmulticast mode [ 631.007328][T28959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6250'. [ 631.205117][T28682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.290316][T28972] netlink: 'syz.0.6255': attribute type 2 has an invalid length. [ 631.301595][T28682] veth0_vlan: entered promiscuous mode [ 631.320719][T28682] veth1_vlan: entered promiscuous mode [ 631.362906][T28976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6256'. [ 631.416340][T28682] veth0_macvtap: entered promiscuous mode [ 631.447398][T28682] veth1_macvtap: entered promiscuous mode [ 631.484142][T28682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.508873][T28682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.567673][T28979] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 631.596967][T21203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.622493][T21203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.658514][T28979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6257'. [ 631.671178][T21203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.685558][T21203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.903140][T28995] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6262'. [ 631.944217][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.954815][T28995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6262'. [ 631.958004][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.005699][T28995] netlink: 'syz.0.6262': attribute type 11 has an invalid length. [ 632.084396][ T6621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.101050][ T6621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.124468][T29002] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6265'. [ 632.165855][T29002] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 632.221018][T29004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6262'. [ 632.359922][ T5831] Bluetooth: hci0: command tx timeout [ 632.789786][T29025] netlink: 'syz.3.6272': attribute type 29 has an invalid length. [ 632.800729][T29030] xt_limit: Overflow, try lower: 271964/0 [ 632.842461][T29034] netlink: 'syz.3.6272': attribute type 29 has an invalid length. [ 632.871477][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 632.882800][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 632.893713][T29036] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6272'. [ 632.909291][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 632.924001][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 632.932021][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 632.932055][ C1] lec:lec_tx_timeout: lec0 [ 632.956902][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.141088][T29033] hsr0 speed is unknown, defaulting to 1000 [ 633.436759][T21218] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.649315][T21218] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.749982][ T30] audit: type=1107 audit(1772482278.560:7): pid=29065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%ً٠0ltݕ/ 6򊨊sx' [ 633.844091][T21218] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.029343][T21218] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.073707][T29083] x_tables: duplicate underflow at hook 1 [ 634.422418][ T6621] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.457538][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.528400][T21202] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.572568][T29101] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 634.592037][T21202] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.594066][T29101] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 635.079952][ T5825] Bluetooth: hci4: command tx timeout [ 635.259383][T21218] bond0 (unregistering): Released all slaves [ 635.273344][T21218] bond1 (unregistering): Released all slaves [ 635.306661][T21218] bond2 (unregistering): Released all slaves [ 635.357021][T21218] bond3 (unregistering): Released all slaves [ 635.384132][T21218] bond4 (unregistering): Released all slaves [ 635.423562][T21218] bond5 (unregistering): Released all slaves [ 635.465841][T21218] bond6 (unregistering): (slave vcan1): Releasing backup interface [ 635.474198][T21218] vcan1: left promiscuous mode [ 635.486082][T21218] bond6 (unregistering): Released all slaves [ 635.539473][T29124] __nla_validate_parse: 6 callbacks suppressed [ 635.539497][T29124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6302'. [ 635.588912][T29124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6302'. [ 635.686188][T29033] chnl_net:caif_netlink_parms(): no params data found [ 635.781457][T21218] : left promiscuous mode [ 636.023241][T21218] tipc: Left network mode [ 636.037740][T29157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6307'. [ 636.053950][T29157] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6307'. [ 636.284063][T29033] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.309991][T29033] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.322961][T29033] bridge_slave_0: entered allmulticast mode [ 636.347645][T29033] bridge_slave_0: entered promiscuous mode [ 636.464516][T29033] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.481812][T29033] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.489193][T29033] bridge_slave_1: entered allmulticast mode [ 636.498994][T29033] bridge_slave_1: entered promiscuous mode [ 636.710537][T29198] netlink: 'syz.1.6319': attribute type 3 has an invalid length. [ 636.773462][T29033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.802684][T29033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.929110][T29196] syzkaller1: entered promiscuous mode [ 636.944314][T29196] syzkaller1: entered allmulticast mode [ 637.072426][T29033] team0: Port device team_slave_0 added [ 637.137630][T29221] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20003 [ 637.165967][ T5825] Bluetooth: hci4: command tx timeout [ 637.210360][T29223] Bluetooth: MGMT ver 1.23 [ 637.219708][T29033] team0: Port device team_slave_1 added [ 637.366113][T29033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.392429][T29033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.431280][T29033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.464807][T29033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.490403][T29033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.553560][T29033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.600258][T29248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6330'. [ 637.986382][T29033] hsr_slave_0: entered promiscuous mode [ 637.997935][T29033] hsr_slave_1: entered promiscuous mode [ 638.005564][T29033] debugfs: 'hsr0' already exists in 'hsr' [ 638.011786][T29033] Cannot create hsr debugfs directory [ 638.060131][T29258] tipc: Started in network mode [ 638.080888][T29258] tipc: Node identity 0e89fe4e2fc8, cluster identity 4711 [ 638.092287][T29258] tipc: Enabled bearer , priority 0 [ 638.174063][T29276] netlink: 'syz.2.6335': attribute type 1 has an invalid length. [ 638.215553][T29277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6334'. [ 638.236811][T21218] hsr_slave_0: left promiscuous mode [ 638.376648][ T12] smc: removing ib device  [ 638.464920][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a48c00: rx timeout, send abort [ 638.643651][T29259] syzkaller0: entered promiscuous mode [ 638.649240][T29259] syzkaller0: entered allmulticast mode [ 638.686402][T29278] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 638.701172][T29278] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 638.711583][T29278] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 638.752813][ T8611] ================================================================== [ 638.760976][ T8611] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 638.769833][ T8611] Read of size 8 at addr ffff8880295422f0 by task kworker/0:8/8611 [ 638.777745][ T8611] [ 638.780140][ T8611] CPU: 0 UID: 0 PID: 8611 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 638.780170][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.780182][ T8611] Workqueue: events smc_ib_port_event_work [ 638.780244][ T8611] Call Trace: [ 638.780252][ T8611] [ 638.780260][ T8611] dump_stack_lvl+0xe8/0x150 [ 638.780284][ T8611] print_report+0xba/0x230 [ 638.780309][ T8611] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 638.780332][ T8611] kasan_report+0x117/0x150 [ 638.780352][ T8611] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 638.780377][ T8611] __ethtool_get_link_ksettings+0x5e/0x170 [ 638.780402][ T8611] ib_get_eth_speed+0x180/0x7f0 [ 638.780468][ T8611] ? rxe_query_port+0x7e/0x3d0 [ 638.780505][ T8611] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 638.780526][ T8611] ? do_raw_spin_unlock+0xf5/0x210 [ 638.780547][ T8611] rxe_query_port+0x93/0x3d0 [ 638.780564][ T8611] ib_query_port+0x170/0x830 [ 638.780600][ T8611] smc_ib_port_event_work+0x15a/0x940 [ 638.780625][ T8611] ? process_scheduled_works+0xa25/0x1830 [ 638.780651][ T8611] ? process_scheduled_works+0xa25/0x1830 [ 638.780672][ T8611] process_scheduled_works+0xb02/0x1830 [ 638.780704][ T8611] ? __pfx_process_scheduled_works+0x10/0x10 [ 638.780726][ T8611] ? assign_work+0x3d5/0x5e0 [ 638.780747][ T8611] worker_thread+0xa50/0xfc0 [ 638.780779][ T8611] kthread+0x388/0x470 [ 638.780798][ T8611] ? __pfx_worker_thread+0x10/0x10 [ 638.780817][ T8611] ? __pfx_kthread+0x10/0x10 [ 638.780832][ T8611] ret_from_fork+0x51e/0xb90 [ 638.780861][ T8611] ? __pfx_ret_from_fork+0x10/0x10 [ 638.780881][ T8611] ? __switch_to+0xc7d/0x1450 [ 638.780907][ T8611] ? __pfx_kthread+0x10/0x10 [ 638.780922][ T8611] ret_from_fork_asm+0x1a/0x30 [ 638.780952][ T8611] [ 638.780958][ T8611] [ 638.953606][ T8611] Allocated by task 17720: [ 638.958204][ T8611] kasan_save_track+0x3e/0x80 [ 638.962913][ T8611] __kasan_kmalloc+0x93/0xb0 [ 638.967543][ T8611] __kvmalloc_node_noprof+0x528/0x8a0 [ 638.972935][ T8611] alloc_netdev_mqs+0xa6/0x11b0 [ 638.977909][ T8611] rtnl_create_link+0x31f/0xd70 [ 638.982829][ T8611] rtnl_newlink_create+0x277/0xb70 [ 638.988004][ T8611] rtnl_newlink+0x1666/0x1be0 [ 638.992700][ T8611] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 638.997662][ T8611] netlink_rcv_skb+0x232/0x4b0 [ 639.002452][ T8611] netlink_unicast+0x80f/0x9b0 [ 639.007260][ T8611] netlink_sendmsg+0x813/0xb40 [ 639.012052][ T8611] __sys_sendto+0x709/0x7a0 [ 639.016579][ T8611] __x64_sys_sendto+0xde/0x100 [ 639.021442][ T8611] do_syscall_64+0x14d/0xf80 [ 639.026049][ T8611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.031963][ T8611] [ 639.034309][ T8611] Freed by task 21218: [ 639.038397][ T8611] kasan_save_track+0x3e/0x80 [ 639.043189][ T8611] kasan_save_free_info+0x46/0x50 [ 639.048281][ T8611] __kasan_slab_free+0x5c/0x80 [ 639.053084][ T8611] kfree+0x1c1/0x630 [ 639.057108][ T8611] device_release+0x9e/0x1d0 [ 639.062213][ T8611] kobject_put+0x228/0x560 [ 639.066792][ T8611] netdev_run_todo+0xc75/0xde0 [ 639.071756][ T8611] default_device_exit_batch+0x986/0xa00 [ 639.077406][ T8611] ops_undo_list+0x52b/0x940 [ 639.082070][ T8611] cleanup_net+0x56b/0x800 [ 639.086502][ T8611] process_scheduled_works+0xb02/0x1830 [ 639.092070][ T8611] worker_thread+0xa50/0xfc0 [ 639.096677][ T8611] kthread+0x388/0x470 [ 639.100759][ T8611] ret_from_fork+0x51e/0xb90 [ 639.105366][ T8611] ret_from_fork_asm+0x1a/0x30 [ 639.110160][ T8611] [ 639.112506][ T8611] The buggy address belongs to the object at ffff888029542000 [ 639.112506][ T8611] which belongs to the cache kmalloc-cg-4k of size 4096 [ 639.126850][ T8611] The buggy address is located 752 bytes inside of [ 639.126850][ T8611] freed 4096-byte region [ffff888029542000, ffff888029543000) [ 639.140762][ T8611] [ 639.143101][ T8611] The buggy address belongs to the physical page: [ 639.149611][ T8611] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29540 [ 639.158393][ T8611] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 639.166906][ T8611] memcg:ffff888029541011 [ 639.171161][ T8611] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 639.178729][ T8611] page_type: f5(slab) [ 639.182729][ T8611] raw: 00fff00000000040 ffff88813fe00500 dead000000000100 dead000000000122 [ 639.191337][ T8611] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff888029541011 [ 639.199937][ T8611] head: 00fff00000000040 ffff88813fe00500 dead000000000100 dead000000000122 [ 639.208710][ T8611] head: 0000000000000000 0000200000040004 00000000f5000000 ffff888029541011 [ 639.217482][ T8611] head: 00fff00000000003 ffffea0000a55001 00000000ffffffff 00000000ffffffff [ 639.226175][ T8611] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 639.235028][ T8611] page dumped because: kasan: bad access detected [ 639.241489][ T8611] page_owner tracks the page as allocated [ 639.247214][ T8611] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17720, tgid 17720 (syz-executor), ts 375114562904, free_ts 341118207512 [ 639.270676][ T8611] post_alloc_hook+0x231/0x280 [ 639.275494][ T8611] get_page_from_freelist+0x24dc/0x2580 [ 639.281098][ T8611] __alloc_frozen_pages_noprof+0x18d/0x380 [ 639.286921][ T8611] allocate_slab+0x77/0x660 [ 639.291448][ T8611] refill_objects+0x331/0x3c0 [ 639.296141][ T8611] __pcs_replace_empty_main+0x2b9/0x620 [ 639.301708][ T8611] __kvmalloc_node_noprof+0x657/0x8a0 [ 639.307096][ T8611] alloc_netdev_mqs+0xa6/0x11b0 [ 639.311962][ T8611] rtnl_create_link+0x31f/0xd70 [ 639.316834][ T8611] rtnl_newlink_create+0x277/0xb70 [ 639.321967][ T8611] rtnl_newlink+0x1666/0x1be0 [ 639.326663][ T8611] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 639.331620][ T8611] netlink_rcv_skb+0x232/0x4b0 [ 639.336405][ T8611] netlink_unicast+0x80f/0x9b0 [ 639.341187][ T8611] netlink_sendmsg+0x813/0xb40 [ 639.345971][ T8611] __sys_sendto+0x709/0x7a0 [ 639.350496][ T8611] page last free pid 16272 tgid 16272 stack trace: [ 639.357005][ T8611] __free_frozen_pages+0xc2b/0xdb0 [ 639.362135][ T8611] packet_set_ring+0x1a21/0x2490 [ 639.367200][ T8611] packet_release+0x823/0xcc0 [ 639.371940][ T8611] sock_close+0xc3/0x240 [ 639.376195][ T8611] __fput+0x44f/0xa70 [ 639.380196][ T8611] task_work_run+0x1d9/0x270 [ 639.384801][ T8611] exit_to_user_mode_loop+0xed/0x480 [ 639.390100][ T8611] do_syscall_64+0x32d/0xf80 [ 639.394706][ T8611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.400615][ T8611] [ 639.402952][ T8611] Memory state around the buggy address: [ 639.408653][ T8611] ffff888029542180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 639.416738][ T8611] ffff888029542200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 639.424815][ T8611] >ffff888029542280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 639.432885][ T8611] ^ [ 639.440612][ T8611] ffff888029542300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 639.448682][ T8611] ffff888029542380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 639.456758][ T8611] ================================================================== [ 639.490658][ T5825] Bluetooth: hci4: command tx timeout [ 639.515809][ T8611] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 639.523081][ T8611] CPU: 0 UID: 0 PID: 8611 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 639.532480][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 639.542557][ T8611] Workqueue: events smc_ib_port_event_work [ 639.548400][ T8611] Call Trace: [ 639.551693][ T8611] [ 639.554639][ T8611] vpanic+0x56c/0xa60 [ 639.558643][ T8611] ? __pfx_vpanic+0x10/0x10 [ 639.563175][ T8611] ? __pfx___schedule+0x10/0x10 [ 639.568052][ T8611] panic+0xc5/0xd0 [ 639.571803][ T8611] ? __pfx_panic+0x10/0x10 [ 639.576255][ T8611] ? preempt_schedule_common+0x82/0xd0 [ 639.581748][ T8611] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 639.587760][ T8611] check_panic_on_warn+0x89/0xb0 [ 639.592755][ T8611] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 639.598769][ T8611] end_report+0x73/0x180 [ 639.603043][ T8611] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 639.609047][ T8611] kasan_report+0x128/0x150 [ 639.613581][ T8611] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 639.619607][ T8611] __ethtool_get_link_ksettings+0x5e/0x170 [ 639.625459][ T8611] ib_get_eth_speed+0x180/0x7f0 [ 639.630332][ T8611] ? rxe_query_port+0x7e/0x3d0 [ 639.635121][ T8611] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 639.640514][ T8611] ? do_raw_spin_unlock+0xf5/0x210 [ 639.645650][ T8611] rxe_query_port+0x93/0x3d0 [ 639.650257][ T8611] ib_query_port+0x170/0x830 [ 639.654869][ T8611] smc_ib_port_event_work+0x15a/0x940 [ 639.660304][ T8611] ? process_scheduled_works+0xa25/0x1830 [ 639.666071][ T8611] ? process_scheduled_works+0xa25/0x1830 [ 639.671811][ T8611] process_scheduled_works+0xb02/0x1830 [ 639.677392][ T8611] ? __pfx_process_scheduled_works+0x10/0x10 [ 639.683396][ T8611] ? assign_work+0x3d5/0x5e0 [ 639.688005][ T8611] worker_thread+0xa50/0xfc0 [ 639.692630][ T8611] kthread+0x388/0x470 [ 639.696715][ T8611] ? __pfx_worker_thread+0x10/0x10 [ 639.701846][ T8611] ? __pfx_kthread+0x10/0x10 [ 639.706450][ T8611] ret_from_fork+0x51e/0xb90 [ 639.711063][ T8611] ? __pfx_ret_from_fork+0x10/0x10 [ 639.716189][ T8611] ? __switch_to+0xc7d/0x1450 [ 639.720892][ T8611] ? __pfx_kthread+0x10/0x10 [ 639.725517][ T8611] ret_from_fork_asm+0x1a/0x30 [ 639.730339][ T8611] [ 639.733994][ T8611] Kernel Offset: disabled [ 639.738319][ T8611] Rebooting in 86400 seconds..