last executing test programs: 2.169734811s ago: executing program 1 (id=13227): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x840) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f00000000c0), 0x10127, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4d040, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2) (async) readv(r2, &(0x7f0000001780)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r4, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x4080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 2.007269273s ago: executing program 1 (id=13230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmmsg$inet6(r1, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="d5", 0x1}], 0x1}}], 0x1, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x108, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1b, 0x7c}, [@nested={0x4, 0x145}, @nested={0xed, 0x1, 0x0, 0x1, [@generic="fa9e939622c3ad53a2f03f8c90874997762229b06fee11037a687563e585397cf29c51057d2f817b941258a9bf154d71a63aae602a188b103c3492fac44cd23a46395ee145fef40bdbf214a01ce8401bd33db73b211cc3a817b966ecaeaacdb511b4ffb08dea8e78dd1a23d261206e98d1292d2d5d668ffaa584ab572e3eb533cf9715d813ab061918778baf30041bf53bef81872d65ffb48c4c6627a9a73b6316f657a9a00f12dd5c56767af939c6c6f482e7acc63019aa42bc8d56da3d8054911b4f35d7570321f0272b5e3e46b457d00280aa3274151c6ae15b7554baf84b8ac217bd0753fa54fb"]}]}, 0x108}}, 0x2004c000) 1.833590458s ago: executing program 1 (id=13234): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000100)=0x9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.699203041s ago: executing program 1 (id=13237): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x8000, @local}}]}, 0x28}, 0x1, 0x7}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f00000006c0)=ANY=[@ANYRES64=r1], 0x30}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000fffffffffffffff80000"], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffbaf319440efdffffbfa400000000000007040000f0ffffffb702000008000000182800008ece4b9a09ddae68e09abc7b410d8cfbd2ae2e1d08faeff7248c55523c2a7ef86afd2393b3eeed7d344072504c4238059add022dda8c2bec3f2b9825cf5ec87bcfbc412cde61353b156e3bff98e2d4788a04f8e62ac9a53a0f7d30832323ca0dcb727420b18dbe6d884a363bd318d629b412dbd5981811a2f2b1398c7941a0b3cc6a12b9e9b6d86e6823ab2d780d067a9ac0b4bc2eeb09be", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf98000000000000560800000000000085000000b4000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f00000000c0)={r14, 0x81}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000680)={r14, 0x2}, &(0x7f0000000740)=0x8) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000800000033800b00010069703667726500000c00028008000100b79d206edcf0cb6d5bc458c9686d3818f40d3069f252ed0b2b0084636c23a059f1aaa748a0afaa1aa96e0ba0529ba087037bc48371f196adbe385077d4188819dec296b957e43ca6a44d9dc8dbf7f903edfef4a9ea4ea7f17e9733e917fe932adba71444bf7091587a8c635dac5e7d", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x40040) r15 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000bc0)={&(0x7f00000009c0)="56242ecbbe865853f480518ae10a4d64b8c9ff67ed56fe8d142cba41e3ec68ce78c13bb8603a400a8889b8f3b7b82b18d549c0180dc31a142ce97f674b668b692c1b2ce6b4984a598615e8644e500d70baaec3a1ad8f802a62fc389d4deb964000c9256b7cc17113216508d2f3d69151e2b333693df0ff58ed61138ca46705ba73e7d1d081b14bccc2fdf0eda20760d5be7a91ce6cb4a447182a09fa9613b2311d1f745f690be708086a104f6d70d568561fc08c303a3b2d79713a7967662d0737e415329a", &(0x7f0000000ac0), &(0x7f0000000b00)="9fa5ff735f3b1d3c8933b2870105b61e5cc790b95827238d39d589666a216b2398580f33f9aea8833a23c68fad86e75b1599e7329a", &(0x7f0000000b40)="ec235f571b4130d892dbb6e7ac19b7481422", 0x5, r9}, 0x38) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r15, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES16=r16, @ANYBLOB="01000000000000000000050000000800020000000000080003000000e4"], 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x30, r16, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x30}}, 0x4044801) 1.450190206s ago: executing program 4 (id=13240): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000005c0)) sendto$packet(r2, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x8}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x25, 0x101, 0x70bd27, 0x25dfdbfc, {0x1a}, [@typed={0x4, 0x167, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x8}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000540)={r6, 0x2b83}, &(0x7f0000000580)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x120, r8, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf93}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x5, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a1a}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x841}, 0x4000095) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@netkit={@void, @value=r3}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r9, 0x4) 1.449441157s ago: executing program 1 (id=13241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="c3670400000000009000128009000100766c616e00000000800002800600010003000000640004800c00010008000000060000000c00010007000000050000000c00010003000000070000000c00010000000000040000000c00010070000000940f00000c000100ff010000030000000c0001007ac00000000000000c00010000010000ff000000100003800c004100020000009b04000008000500", @ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)}, 0xfff}], 0x1, 0x34040, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r2, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) 1.271063449s ago: executing program 3 (id=13243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1e, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) 1.209408882s ago: executing program 1 (id=13246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x2, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d89656a6e4a871c4192244a919d2ef48cb6a2dd665d81b53355b23e6473f461d928d6fc0bb159ff73686bc35a23f8f4ace8da4b421de7c0398313e950d9a08ac24e229d4d3172ba965dbf4485f390f7e7", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x2a}], 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r6, r9}) sendmmsg$inet(r10, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d89769187dcd3a5f3b23aaab61614df7ed7e93", 0x25}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f00000001c0)={r6}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r12, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8, 0x3, r13}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001240)={0x4c0, r12, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x1}, {0x6, 0xa}, {0x7, 0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x6}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x6, 0x9}, {0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x6}, {0x6, 0x6}, {0x2, 0x7}, {0x7, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {}, {0x6, 0x9}, {0x5, 0x5}, {0x7, 0x3}, {0x3, 0x6}, {0x2, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x4, 0x101, 0x9, 0x1, 0x3, 0xb08]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7fff, 0x3, 0xff, 0x1, 0x6, 0x6, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x5, 0x18, 0x4, 0x6c, 0x30, 0x6c, 0x1b, 0x1, 0x16, 0xc, 0x24, 0x1, 0x2, 0x2, 0x1d, 0x6, 0xb, 0x1, 0x4, 0x0, 0x18, 0xc, 0x48, 0x2, 0x2, 0x1, 0x4, 0x24]}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x4, 0x6c, 0x3, 0x2, 0x9, 0xc, 0x16, 0xb, 0x60, 0x24, 0x5, 0x1b, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x18, 0x12, 0x4, 0x6c, 0x1b, 0x6c, 0x44, 0x3, 0xc5b806feafd37472, 0x60, 0x48, 0xb, 0x48, 0x4, 0xc, 0x6, 0x1, 0x6, 0x18, 0x1b]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x48, 0x12, 0x3, 0x48, 0x1, 0x48, 0x4, 0x16, 0x12, 0x9, 0x24, 0x12, 0x5, 0x65, 0xc, 0x48, 0x11, 0xc, 0x4, 0x41, 0x2, 0x5, 0x2, 0x16, 0x36, 0x2, 0x4]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x2, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x5}, {0x1, 0x9}, {0x4, 0x1}, {0x3, 0x6}, {0x3}, {0x3, 0x1}, {0x5, 0x8}, {0x1}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x4}, {0x1}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x2}, {0x7}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x7}, {0x2, 0x6}, {0x4, 0x9}, {0x7, 0x3}, {0x3, 0x7}, {0x6}, {0x2, 0x1}, {0x4, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x1}, {0x3, 0x2}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x7}, {0x2, 0x6}, {0x6}, {0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x1, 0xa}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x0, 0x5, 0x5, 0x4, 0xac4e, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x401, 0x3, 0x6, 0x3, 0x4, 0x9, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4304, 0x2, 0x0, 0x8, 0x8, 0x0, 0x800]}}]}]}, @NL80211_ATTR_TX_RATES={0x168, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf3, 0xd, 0x7, 0x7, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x8, 0x7, 0x6, 0x6, 0x8, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xff, 0x1, 0x5, 0x0, 0x1, 0x64c, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x2, 0x40, 0x159, 0x2, 0x5, 0x4c4, 0x4]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x4, 0x4}, {0x6, 0x1}, {0x3, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf, 0x9, 0x0, 0xf8, 0x8, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x1, 0x2]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x3, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x9}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x4, 0xa}, {0x6}, {0x1, 0x8}, {0x4, 0x8}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x5}, {0x5, 0xa}, {0x6, 0x3}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x8}, {0x5}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x3}, {0x7}, {0x2, 0x6}, {0x2, 0x4}, {}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x4}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0x7}, {0x4, 0x2}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x5}, {0x1, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x7, 0x7fff, 0x1, 0x3, 0xf09, 0x7ff, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0xfffb, 0x5, 0xf, 0x7, 0x1ff, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x3, 0x12, 0x6c, 0x48, 0x16, 0x1, 0xc, 0x1, 0xc, 0x18, 0x60, 0x5, 0x24, 0x30, 0x6, 0x4, 0x6, 0x11, 0x1, 0x1b, 0xb, 0x48, 0x1b, 0x30, 0xd8]}]}]}, @NL80211_ATTR_TX_RATES={0x18c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x5}, {0x6}, {0x7, 0x9}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0x4}, {}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0xa}, {0x5, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x8}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x6}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4e9, 0x8, 0x3, 0x8, 0xa726, 0x6408, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa8, 0x80, 0xff, 0xff, 0xc7, 0x3, 0x4, 0x3848]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x6, 0xfff5, 0x7, 0x15de, 0x7, 0xf, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x83b, 0xd67b, 0xfff, 0x4, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2a, 0xc, 0x8001, 0x8000, 0x48ac, 0x2, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x24, 0x6c, 0x6c, 0x6c, 0xb, 0x0, 0x1, 0xc, 0x8, 0x48, 0xc, 0x24, 0x1, 0x18, 0x12, 0x12, 0x16, 0x1b, 0x2, 0x60, 0x0, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xd, 0xfffd, 0x80, 0x7, 0x8, 0x59b, 0x619f]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd9, 0x7, 0xffa6, 0x3, 0x40, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x9, 0x18, 0x3, 0x6c, 0x6, 0x4, 0x9, 0x60, 0x1, 0x3c, 0x18, 0x16, 0x24, 0x16, 0x48, 0x4, 0x1, 0x4, 0xb, 0x4, 0x4, 0x6, 0x48, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35, 0x3ff, 0x1, 0x6d, 0x10, 0x6, 0x100, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x8, 0x4, 0xd2cd, 0xd6, 0x0, 0x2, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x10, 0x8, 0x4, 0x8, 0x9, 0x5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x18, 0x9, 0x3ea, 0x4, 0xfff, 0xd, 0xec, 0x4]}}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x44}, 0x8000) 1.206742713s ago: executing program 4 (id=13247): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @local, 0x1}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.140147423s ago: executing program 4 (id=13248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000001002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 1.039311331s ago: executing program 0 (id=13249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000000), 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x1}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x1}}}, 0x24}}, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000340)={r2, 0x0, 0xee, 0x0, &(0x7f0000000100)="eff5c16fae1ef60192d859202a5ec74b3fcf68d944918d208c2de35e3ed4553145621dfc03530ca50a051aa970fe7981c79457d9ee48680200d61bef6c36905f9b7fcce2f5d728d3c8cae222cc1d8d714c1a244fec977c22f62a0808111feca42720e1ab22da21a30c7cefeb7b8d5dcf1da9be620b28e7b2aa34c888350eeb8641f5f04e4918bcfe60a4a7b691133f17ad8fc14a06f4551ee1b1798e22b9ec990dfc1ea221799b236561f96b0e73a90bb97a76c424f83ec2d526a6c71c4b25f625a408b8554ad9e2ab6fe634bb5b469498dfa280202a6cfc6fd0f3947579bafaece922dd927c63c9bc8fb3a7c521", 0x0, 0x9, 0x0, 0xc3, 0x0, &(0x7f0000000200)="f62f60a747d88212afcfe2a01709261bc32b52fb8125be75bb538c3d4d3c6321cf3a790fbd9c4a15d224494e36cc941f7aaa0b98694e0a38fb99ddfd8e59750db972fccb94019c9b50bc6ee049acc94b144a2ff2053c70c4c4412e6eae4ea26cb55c2c4eb4e863d7d69d8fe5dca1e0df21c46600533acd08502710db36a914b832b50edd96cd2a74d9e8fb28c896be99c4d6a5532832d728129852730dcf86db59c2ffd34ca257f570ca48b2ccbd2c000d57a17a828ba8edf59b113b85b108a6ff2ac1", 0x0, 0x2, 0x0, 0xb6}, 0x50) openat$cgroup_ro(r4, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) 978.073674ms ago: executing program 2 (id=13250): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x80, 0x0, 0x9, 0x4, [0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x1], [0xfffffbff]}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7d, &(0x7f0000000e40)={0x0, 0x9, 0x4}, &(0x7f0000000e80)=0x8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 924.009144ms ago: executing program 3 (id=13251): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000001c00000000000000bc26000000000000bf67000000000000070300000fff07006702000020000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040"], 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x7b42090a8c04723) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 854.09494ms ago: executing program 0 (id=13252): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000040)="e0e1d19f933b97794ab7a24d496f9c8c523096fff9149dc4e9b9d99b662af92cb8a32719ef8858cb0eeb266986f0f24bbedcc56d0767130819eab8ea75b1aaa7994d7cd98765dbc7f683c3a0f024491dd53a0285198987c74ef9a6369e76dbdb42fd3b76dfea425133bbc1e513e60723b28852f47584198a800d1e3ff517a721225c4722d0d73dedecf730349148722600c2302105dfd180b737343ed636d7e7cc3a169c21333d0eb22f9257026d59c6192ab947fd57187ca405f6866b6d9d4cdac59a646fdc04d6c9de505979286c233ededcb795bcdce4fd2bb2502a1610a0607d37f1608f8ecdb859337f", 0xec}, {&(0x7f0000000140)="51e1a236e825034b3fce36128f7289437755352e03e0f5478588db2e4597c4338785cbc5", 0x24}, {&(0x7f0000000180)="1986e4afefe05866a04b753c8b6a", 0xe}, {&(0x7f00000001c0)="bbdeb4c99d42f5d0cb0ddd480dfe7140342bfe9028263555861b79326b596dd58cb901f9ff59d85cf4d80542589aea59f8253af936a1d1e41ea57ff1ba74f80641dec7aef0ec8a207a4b64de6363f65f60efb53826620a6f6f8743b2d28659784b24312e3e3682ad2d47289fd6b6fb9ae31eb418ee9e0d31691660e84e4b9eff9d90899c4f4994896c5f18173d59b01208d4665c3051644e0c763e421f03eae20ad57b843cdc9c7ca013d5e86295753197c1b87a9c6fc49d1748088bc0494e27b524ed4dcc294c43fd8523a315f9d69550b689a433b4b9d65c75cc126b6c", 0xde}, {&(0x7f00000002c0)="dd24eeec6cdcaa640a953fc1", 0xc}, {&(0x7f0000000300)="ffc2351fd53f8e711bea0ae5d6e17bff67b347f179643c0b2c4fc191e7ec3db3d34d49c894c373d3dd4cc85e6d9442093cd1ed514241721fb55447d7eee07659df8166f28cd66bc43dd6a9a4d5933263a3b0c78742a53d5d374e3c7febce11bdf0fbb762151ae6b6d81d727dceebbcc26d4b161fbe1654562d4c4cb0b93999629136dd1ba4efe029467bc402263c92c29066e2540812e82b06a318e602d7d2664d9636bf3bc6246fcc6a9a8ef6279c0145c3954b6f1758870095c933b8a41d746218f3bb7a5483bd9ffc5bf8b83ad3621e8ff1ec0be5e2ea9dda782990a01acfdeed592b240300330f389bbfc54837e4487f48", 0xf3}, {&(0x7f0000000400)="0d80f0872f1410c285e97911d3aa5a5a0a298429a5faae9e464ebcdd128f99feacb1aff9c6c27b93be5ffd9266971b8f75dc6baa86b2f2767a0b6c2c81c84d61e8c5b58083b08370df81d773e47cc4cc85ea74ea834ab7e428fbe1baafac8a500af24a099b529ee4adb94752a0a8dfa94689d274daa7b187adcc9ca5c455a50aeab1c3b6667f7b3f2cf1ed6bdb3e45f46cda71a77eb809260f251b9330dc747c4cd4024cbd1d9d10958ae7ca5f18f6d9f706d08595d35afade1445144426acc5e69eba3048fdf2ed86fdf1fbfbbbad7a87c80f44479bb9121c6999934732f1fc01b105c79c31aeb3d4b681d2a7df8b19164b01fec2c6742f9fb75f6789a974b88c6d92274fd818755a40b9afdb79320af019f62fca4e17faa490bff5961086f6d6aa3c5a11089024d0de0f7457affe5d9bc4f9b885870bc9ba7384ebdf32c067d372618e4e9bacc80ccac1f5d1b47d0638443a8193ee1df146ec5ffc62d1e8a076e9f50a29448c2fd727bd17da85eb18c125dd54ee723319e4156c8f43190d1cb472d89405c193ef3a801ae56d591918dec7fe8b14d313be4969c3dabd1e80b813212fb97e6c988080eea68286bcb3df418aabacf193b1cf74383aaf51a2be34372e550d0480a16cb8cf0ffd775940927bbebc2dad17e9afaff448081abad202d0b5145bf500d55375ae9f76afeb22d126482ccacac26d4076641d6327aff173441def1ae5c49e4696ec4e9527c56f992858d82db64600b577a0034efb4b908a92f1aebf6382f3356f07a8b3b010650ab376a79752ca426486ee6d00616394e047389e71e1162726989861dd160436c19be3aafd4d13e4e4ac544a09d677568a8628cb6995a3b1a2dbbffd33a6bc2bf3cafb139a05d8e3d27d9305d0a6738398c9711fa3176a05f279e1a7d2265fa982f8201c5f47f7380efaa6ad9baebbba02dd9347813c9844f34021dca75681ea05a2880cb2033650c17b62a9562e100cbdd28b9347ff8f775f88bc8bdb58314b04bd0aa230b4b6074e395474d4531c642b443f7422ad285715a09c60244660af3edd425c9314fe27e4799042d05324686fa62994eae767d302ca5e2e7c7c1d89e87a15a284ed3fbf7c5adb0193bcd48a5538e388212aa93387b2699bff0aa9c51852a135f55b1c94109e099befe5a20d67bbb93d44c9007d161b07c014e0ec7cab2c483761375546c7ddf700eb878bbdc22f2e0bfad666893e2465042682088246a47d5895b8ad9d56329ab494442cb2029d065525a295fdb3b18d085c7fa5d01e5cc229a52a2233c066fdcc8705e7c77cf45aae6afbf3bf44d9bb9b7f502bc2f2471814db7059898adf9f1d3e793f2160ee979236f6906528e9397983dc1a28cee3afe082b933a95b74f54bcff4654dff77969ea8f247a542cf533ae12d6d3542f342cb89f5c1e6a07f63761d42c718c25f0cfbdb00ad7ea7d32013c88c0604aaf951d6867e9936483b050d801e3a51c117d022a7058eab774b6ad978edfd670513f41036381458e27bfb71b6badcab96cd67fd2af631700abe3e7f4bdb077334afe88308063740f47a386be8c4d160c1c81b631c25d59cdcb42c8d28b0f624e51b085bc140d71c01df28b4ff7113921437533dbb18abe30d5edb4d65a4a9376678459ea7efe4fa83a21e8d69c014861857fb340bbc5248cc59c7dbe38b3ba9625f9f57fc7edfd86c9923c572f6a6b6481b1381aa7e22fc6549ddd3c3fba532eb5c0232980fda63e3bcee0a1ff65fb2f2400253f8ecbf25233d1bc8722e9ee7461f94f6e5a02a569fe87defe89de86f13d63bc407213ab427c25c0bcc9e2cccba4b6cbeff11516efa0a7c7741d999c3d7368d99d516f6f8bf04c6e065b26a3e0fcbba00d65d0cdde5ccbf3f2c945128ab448817be5e8f2af87edb1fb816691a88d829fa11291d16ea9a000ed37044761a5d44d26b6fda3a0b52a9b5e7054dbadad66ba0505ce552f7b8b5bf4afc3a4b5dc9a429866a745ece6a7a27bea8372be5b56d4999d8adbb8116f9ca3307b111f31fb68968a86dfb158b63326d553cbfb2618e5c6c61021926c45ab3626e48fed9906b9a2e63081efcd29d49487a78ec5bc674a939581b782efffe7118f0aea7cff2b127d42e0c8e1470c44b8ac5c77d0fb569a87e1a20808b200aa2cd5af51adca0cefff1d9606f2f5b84fc3f145fdbb62beb163460abc494c6df9a850bc08dbb52dea2b58f777958338300535b0268a68717105209bf526cb55095d5cb0069b6a56a62f21e024fad3906a16d99ca941bed10110d7f452fa95cf5f9627f2f2c7a94d405fabea8c5e90aaec99bd974ee706c34ca5104a62375116029d321570ed1aaf812a5df075d9d62912ead4764405f51dada619ac356dacadc31e29b53cef84cb29840ca49b77ac09644a63a7be5c0dba3be909fe861754ef74bf73fb5fd88cdc4ab8242fedecd5352826359932e19e1ec2cda058009fd24879cba5c0d8d24ae0330c1e53b29d6094d6416c228142015915817b9288f3032fe2e0b9e4bdfd50be97564d063ecd952fcee2e0903577a7cf7cb7dd0b1cd095221f6f3e6caa8f7c9ac9594565d100e729aa3962a3eace9bd8476b28ff35b36463ea3f6b20ef4a8a9da0ffd122ee28f877dc2c473b246894a9c50021d74a2372a28ef3e5509dd6a56b1173347346cf20568c2978f4cea77e653d3174c2ca2d06681efa2359d4c24fe050ae047fc66273cf2c6dc3d6066da8babcf70b2bded295da1bec3fe6f0f85e8699839f0c4bcd5b6e995484cb5dca62247c3c25ee033527bcf69b4eab0954305ae0e2e6bd9f4b41f03de5044fa90d4f36d15076894f59783129c7f9ea4f0f7be0a73974e634f74774c4645f287f34392f89c086fa1bd3fd0d4806bc8d31b34d69ef90085b43e1b93656c84485efd40646756d666e98ab133055f5d7708dde8e516262f86eead9fa69c69716cd3266e6b73e5eeb0cf8b100ce4b29444d20d9e9be558a4be1e07cbfa92c868be301daa1251582a1d92b9039a2a4b1cb98e8fe657498d29638ca4fdbc2768039e31bf08556de678df0bc833d1a0edce581c073c558908638fc584d65366d54aa49d43d33c0e5813a099681b77d1c791dca7170c44ee9eee73016a2630ff0e578d938bfc95fa76177e206e18cbaf4c1577782f707b2841816a23c93d00446b4229d8210278d0ff13d48e4f051449d700a753cc3bcc0613f40fc5325728b1bfe3e3de0442d2986c0d5ba53e1951a82ee198c0803ff52b386751261b7dd5147abae7ae93f6d8952e98e9e62a8c12df5cab3a46e6cb050fe998d445b7dd03b669b8f0a622bed512f12baf8febd2274357c57ff9f8d5729b34ca29d9a5955d71fa74bc58f22330f4fd12cc4e4e3aca299e67b49d05289487b6298e0a6c0c008859552011090bde23c75ddb3095f61eb31a4ece462889b4eb013dd5f0193bce7536170c0406c5c0cb3b9856eafbcb14f75d87589946edae4b0c6a418328f0983a953b44223161a895f1bb631539954e1f3e64606afee2aeac2dbd4ceb1373818d47db6161f016c34e3f8dae0cf330bfefe6a0df75fd1f0782b1460f3ab68bf7da2515610e2d57e79c76c5b2fcef90f8e674be53f364ecac6ad15dd2177bf403e6f17a977467a386b9ed96478579964d3ec9656b7cf299a5e6c39a72de9b4a90f12fa1a6ca1ad9391a17512ccadc3bf09f36075de19ee0c948aa408ffe04631e6d88494d723c8acd0fa4a46be6187569deddc247d78dc8c129f582c70b69e29f36ade6c5b1de6a90ea5e1d1318bc9f125fe5d05dfdfaee2204524d4c89d03c9388258721f4b594fc9ad9b10c6100261f80097ae91aa3a1aa1970f9b65db6f65edc601bb87643583e07752afdfb86c31ae4574fc9d30888ab35bf54470713f5bcb622dc952072534f95250dc9151fe5136e5b9ff8689d459fccb1ce5333e34796943a8a3e2349392d5f9552e078552e5cbf6c02bc781a7246858be9c71c221f8f073e0152dff0f9e62282507e402f46a34ffc68f3c7e5e2cbc83b58ba11c279dab881f33d8c7f6a6aa5f99728c1e4af9367f2d7f57206e7df4c0f26175f2105ecb0821ae661247078355605e6ce17560c4d4e210aceb232b60676f6ca8764ee8ae499c470dbce655ef0c2de69f2977cc1fce2e72cac7ce4797a823262caf6bf567b18d6767fbccf01143001dd375bf77fea4ea48019c927303165038bb2f65e9719f5c6d3dc3dd396a82b3c480598801ffc4414b9be9fd7e0f53003346907864b73397860d2dfe7ac72939a84ddfe32a8d705f122bdaa263f51d3fafde250ed5a4a8668a3fe2e5e11db6408b84ffef73ff31c93238410f8853ac9d7d50968ee68f2fab024eddac3083740eeff00b2713fcd6b9f6b50c19fa614e0ce3c91b3b1d3ea2a5dcae3dda9310b56e965ae418269c15961693bac86ec1beb09d2de4cdb8ab87c53e623caed835611c12306ef1aec616fd60d4a4dd0da4a93291c61c21a3cfdc8e596717239eba49dbe7b441db22c544904416275734c218a34bd043c276df19e88b24786b5fe90ccaffc3f05e65e8c8375b7145f8618ab54c0ffe29a7a6408349c17bda49737d5d5d0eaa428603c74dc3d9d61a4fefc8b2af347b1e738b6cde20ac6982830c13e12431cf1081ae6314496765bc102ebfec0df24541991bace5e27e5d852a7c01803df5bfe096f6e64c5708247a0d87781d41b666e465cd4a00fd40a67dd4ffffa64c6d25ccc83d2c041c4842d7685f8c78b88f512f56e2862a900c0dea41134cb21a9e35b76c71f2f8a22c668297d76e3d9aa1c48f6d717a44b9785b375d9e5826ecc81270da99bf7ba39cc009610720f40d9de45267e212b62c1b5fd4433f35d9b11694ca765693965bbac7b543e0226fc57cf3ebef86aae488791c0cddf1846b9b3f5a1b4cf8e5fc993fbb82e66020eb7e30e1e45f297e1a66ad7dc84d8bc6fb13a8e1638a6c7b2293e6bcaef5a9dadcba0584f92b245d5384c196bc702efbf6993e5df2ea93499b40fb6437ca2aa4471750e12b05f95ff07ba15322ac2161cff9e177f4b997c0972df40afff82d9251c8e92525ca089632a984cbf1a3681a3be1c20feef665918b5c893aa3ebd4530fe992fdae317f70b38a297641422f88c611066f4459e462d53ccbe6a04e36208c61f8c3448d012a6972e21f4c63a58daeb92fa1b4036cb33386f1c95abfa14af5a43d5ea16759c96a7df27a6c39e47b3fd3fd990b6654b8dcace11779ceb47d32cd7a21dfd7b509497309f8a2585495810610610c127b9c30fb1c33d46bafb044f8b91427d3f880bb3afb6c5a5b2bc14cfdaeafd38325306b8b4b524ad5f234f98cd9c503175a48f98bfb0dd03dbfe3b6b47e47601bf078fda7aaf8fdf132479f3269822079c9bd32266563cf97a3276f36db513f90feb1974bfcf75b9436e6addff80b1fab0a2b1a58a9de5463657aef60632bab2991565a1c7f9f1be17c1ab9606ce0836a6333c227b60bbda00fc57731a8a38f4ca493ca2affd58660021b96b85658086006ca55439a41012c5fc65e7221d95a3b635d7161a75c2cd3ebc2df55101407814d6db0842d6f9e5abf478762c9fa16ee836dd5a2c0d9e2cbc65d33bf352ceffdfc7f58d8aacb588d1b7697c103218e51dabdab65d98c8079b6823022ca9fce8d8cc055b946538172c3c69d0d1b29feb183643447fb04cd517c1fcedad1f117b5a5db6c76db1f958a0bdbe60011a44b69bae0a4b453b041c0502fa923b86a26e6b6d4f166c3a7c6ef75add2ce9c84cf296fc64671d1e85a3fb", 0x1000}], 0x7) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) write$rfkill(r2, &(0x7f00000014c0)={0x2f6, 0x0, 0x3}, 0x8) syz_genetlink_get_family_id$SEG6(&(0x7f0000001500), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r4, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x12, 0x2a, [@supported_rates={0x1, 0x6, [{0xb}, {0x12, 0x1}, {0x5}, {0x48, 0x1}, {0xb, 0x1}, {0x5, 0x1}]}, @chsw_timing={0x68, 0x4, {0x401, 0x1}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000880}, 0x54) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), r3) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001780)={0x0, @loopback, @dev}, &(0x7f00000017c0)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001800)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000018c0)={'ip6_vti0\x00', &(0x7f0000001840)={'syztnl1\x00', 0x0, 0x29, 0x37, 0x0, 0x8001, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x5, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001980)={'gretap0\x00', &(0x7f0000001900)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x5, 0x6, {{0x11, 0x4, 0x2, 0x2, 0x44, 0x65, 0x0, 0x1, 0x8, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x9, [{@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa7}, {@loopback, 0x80000000}, {@multicast1, 0xfff}, {@rand_addr=0x64010100, 0xa}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={r3, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'pimreg\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001ac0)={0x0, @multicast2, @empty}, &(0x7f0000001b00)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x168, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$ARPT_SO_GET_REVISION_TARGET(r14, 0x0, 0x63, &(0x7f0000001d40)={'TPROXY\x00'}, &(0x7f0000001d80)=0x1e) ioctl$BTRFS_IOC_SNAP_DESTROY(r14, 0x5000940f, &(0x7f0000001dc0)={{r0}, "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"}) sendmsg$nl_route(r2, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e00)=@mpls_newroute={0xa0, 0x18, 0xe01, 0x70bd27, 0x25dfdbfb, {0x1c, 0x0, 0x10, 0x3, 0x0, 0x4, 0xff, 0x0, 0x3100}, [@RTA_NEWDST={0x84, 0x13, [{0x401}, {0x0, 0x0, 0x1}, {0x1}, {0x7, 0x0, 0x1}, {0x9cc3}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x80}, {0x69, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x40}, {0x5}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x38, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0xb}, {0x5}, {0xa, 0x0, 0x1}, {0xffffb, 0x0, 0x1}, {0x1000}, {0x40}, {0x37d0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5}, {0xffff}, {0x1ff, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1}, {0x1}, {0xc0000}]}]}, 0xa0}}, 0x4890) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r14, 0x80186e84, &(0x7f0000002f80)={&(0x7f0000002f40)=[{0x1, 0xfffffe01, 0x2}, {0x5, 0x6c8f1df3, 0x2}, {0x5, 0x2}], 0x3, 0x10, 0x2, 0x8}) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r15) r16 = socket(0xf, 0x6, 0xb6) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r16, 0xb1b9b000) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r15, &(0x7f0000003140)={&(0x7f0000003000), 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x44, r17, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008081}, 0x24004801) 852.959685ms ago: executing program 4 (id=13253): ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'veth0_macvtap\x00', {0xa}, 0xff}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x40}], 0x1, &(0x7f00000001c0), 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44090}, 0x4000015) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e21, 0x40, @mcast1, 0xbbc8}}, 0x9, 0xb70, 0x5, 0x9, 0x80, 0xf, 0x2}, 0x9c) r4 = socket$inet(0x2, 0x3, 0x33) accept(r1, &(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000540)=0x80) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000400)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, 0x8) 845.062881ms ago: executing program 2 (id=13254): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0xb, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010100}}, 0x24) (async) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c20402"], 0x0) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) (async) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}, 0x3}}, 0x10, 0x0}, 0x80) (async) r4 = socket(0x10, 0x803, 0x0) (async) nanosleep(&(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r4, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYRES8=r0], 0x0) 756.362915ms ago: executing program 3 (id=13255): pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) close(r1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f0000000100)='&-}\xba(&\x00', 0x18000, &(0x7f0000000140)={@_ha_fsid={[0x1, 0x8]}, {0x7, 0x81, 0x9f, 0x5}}, 0x8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x6}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc82892795be09960e481f5523379bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9dee41a9c534c9030830fec3eeb5faf1d64bb8e8000000029ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de495641b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf37957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d1423ed7d4238a5af7a490fe5c5e23b80012f4afca6676dc61176c71a5f1cde96948a1f43bd7a39c55fe05107e71220d4854137fd2225da8129bdbcb02111caf5d0afeee3e04186c15909896e71c15f5697bf10947866e780f38f7c948ba7c31c4fa6917b72785b48f5799aa3e9cf6dea7cdd7ed163ee29d7d7dd7b991f5f8800000000000000e249776f5d2296eab4d566d5949259108363e158aefd968a21b86e16a7e89d30bdf9f2d780f4d9557192210b5be30af151901a83c64cac03330b94101343f49361f86642d307e8b6201b755e15160c28685d67d00f7eee043eb15aa29de7b858e23bed93"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff088471fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x10c, 0x0, &(0x7f0000000640)="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", &(0x7f0000000100), 0x3, 0x0, 0x4}, 0x19) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001800)) 670.774538ms ago: executing program 4 (id=13256): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) poll(&(0x7f0000000000)=[{r0, 0x8201}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xd, 0x6, 0x7, 0x5, 0x800}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x8, 0x2, 0x3, 0x9, 0x81, 0x1, {r2, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x2}}, 0x8, 0x10001, 0x6, 0x9b94, 0x4}}, &(0x7f00000001c0)=0xb0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000200)={r3}, &(0x7f0000000240)=0x8) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f00000003c0)={&(0x7f0000000280)=[{0x1, 0x0, 0x0, 0x2, 0x2, 0x1, 0x0, 0x5}, {0x0, 0x0, 0x80, 0x3, 0x100000000, 0xe, 0x1, 0x3}, {0x1, 0x0, 0x80000001, 0x7b5, 0x4, 0x2, 0x4, 0x100000000}, {0x3, 0x0, 0x6, 0x0, 0x6, 0x9, 0x7, 0x1}, {0x3, 0x0, 0x100000001, 0x8, 0x8000, 0x3, 0x1, 0x100}], 0x5, 0x38, 0x0, 0x8000000000000000}) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)={[{0x2b, 'rdma'}, {0x2d, 'net'}, {0x2d, 'freezer'}, {0x2d, 'blkio'}]}, 0x1b) getsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x7551c000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x6, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x0, '\x00', r10, r11, 0x3, 0x2, 0x2}, 0x50) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000800)={r5, 0x3}, 0x8) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000840)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 'none\x00', 0x36, 0x0, 0x76}, 0x2c) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000880)=""/58, &(0x7f00000008c0)=0x3a) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r11, 0xc0385868, &(0x7f0000000a00)={r9, &(0x7f0000000900)='%+9llu \x00', 0x4e0180, &(0x7f0000000940)={@_ha_fsid={[0x8, 0x17a]}, {0x4, 0x5, 0x400, 0xffffffffffffffff}}, 0xb328, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0xaa2}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) sendmsg$NL80211_CMD_DEAUTHENTICATE(r12, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, r13, 0x1900, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x7, 0x34, @random="2bf355"}, @NL80211_ATTR_IE={0x15, 0x2a, [@cf={0x4, 0x6, {0x0, 0x9, 0x4, 0x9}}, @supported_rates={0x1, 0x7, [{0x6c}, {0xb, 0x1}, {0x36}, {0x0, 0x1}, {0x0, 0x1}, {0xc, 0x1}, {0x16, 0x1}]}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x20004010) socket$nl_route(0x10, 0x3, 0x0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r14, 0x4, 0x70bd27, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x1f, 0x100, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}}}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000d80)=@phonet={0x23, 0x81, 0x5, 0x9f}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e00)="b42cf55ea4131f012b5cad895770934c8d3f2fe40f225eebb33dd53385a28bcac2f5d05d7b09fabe6fe1c8ff1c09ff63530f06e9bb00363495303d83a84eab365e8d5aaf3d6b549c5ab4", 0x4a}, {&(0x7f0000000e80)="481f8f02715b65922bff16b6bcd1c9016ec2d24d41fcdd0c22f3015ad183e35ba6bc703e22978bb3aeafc0dbd118322cf6f6ba753a6003fdcadecc3ea52de59437c2702f933122d6c9f37014967f5862c50b07db11434dab56f1ca67e88776d17b1b3330f26dc387a1f91d9a9ddd2a053563bb322acb842c5263208cc31b9c4d1e25a356e92b6f644f3bc98e1749316aa64c16496a085d95adbf3c0699f5293609d930a19e8a8b9226f476d4e285028950dd9304d9680dcf76da6d25ee92940cf4e50897d20a8aa152b57a33f79d64a5f81ee636e56a223ab23cb9cb1f28bf404b", 0xe1}, {&(0x7f0000000f80)="1f2666df95c8a5514b374f5345590fe217909f2bfdcb0af2bca395127edcc265cd4afe6ed625749219b6546a4cd0ba07307dd04e3120ee77ae1002e34e240825bb12d72edb226a3cbee5695c2ca62f2d8e7f74b2fe3a0ff92bc6f785513ff67305585a7c7b0b517d110011a4e2a1a7d111aa4f4a793889501f389b8c5ad8f9b1968d5ef2e722ccd93139795a0353a9cc57c5ae7f4da615fad5992e9de8f9e86fba7e52943e2d9281", 0xa8}, {&(0x7f0000001040)="efd0883cf69368bddc2bb0301a7dd2613a4a5a3edef52d4b79075e8f3d327a6163ce3d0f4df6a704ae44e8f3542672d53d6c4d2d2c9d9224dd712ec79a88b0f0ea328305efc8c435e442e5f0416d4dcaa48f2b48673a9907a9b59c5d23745864744a9b923880685402d3e3c28d24f00335df37f8286d1574c8bf1af75b6c44f3842dc991ee5a2cee118ed751d040a20dc4fe98", 0x93}, {&(0x7f0000001100)="158df2ad1cd32b4de295a56f19e6fdf6198ee02999924b05be02735b8ff93e34783b74e933cf4037ae6e4530889e84cdb595c6d01866", 0x36}, {&(0x7f0000001140)="e159c371a4182d763c7b4a8fef4522e83a0a4e2d263bad739981e6e97d9e5c159420167492cc64e2795c2e0d82e71308c52593a26f22d0bd7c1c720b6c37aec7fdcbb240b8d027b63e87cf9bc4c699d63526455235502142d8a16bd2c677c4a84cdd7e026e01baba2fa6a76183913250770ba0278058f821be764191ba8bb525fe0e10d6daee1b3729841f0b73078b9fb870f1a675b370972fb568f2a3f7199e8f6d4d7a3c31c20bfa7af74ab8a412267a5413723cd2917be4eaa32d3fe5ee0150e869356063f8e5ce40c7090b486ea54806e3e4cf4464594f402f66e7f3540c23e128a8c105", 0xe6}], 0x6, &(0x7f00000012c0)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001380)="ed6ccecc246ceb45aa7fbc26502e2a7e78d596fdc56d9b38079e5524cc892e5653e24e84a275a450263c83c672c1c645a1214cd89577963e07adad0a8e17658a16757a2b3af728c3887e38bf6bdf6d5a12c97b7701b7bf58ebe4ff356290ff3f03ccdd8035c0c337abf8b03e034f3028cec5c768397c4dbd5c592a61ed600588973ad64ab6fca4d3129bf44915ce964dcc6e56d91454355026f1daecd903cb2f846ae0bb113614f72fd5717a015eab5dc832d9c7ba3f63ea9ede17e764e6a2419ed964b55955186ac7c896dfec836b6e2528272dc91025b84a78953849d8322b4c09dd6b0204dc8d8a5c4cb8806d7cbbe0426d", 0xf3}, {&(0x7f0000001480)="076a5b0fce878af17ec494e026429c6453384f92cfd750eeb6b3e14798bddeb2443c15eb22caeb4fc68877afea23f0738a6e645480ebc93ca2155449fbdc65cb0f369c2bfa8539ce51c084d599874d7eaa657f3f5c1c50be9f030ee32a10f10b108ec95a651a192f5111724040b8f24b47af9e0ecc3a40b1bd267ab13f77011caa41d5080e455e19c3c2f532a740c5678acfa47061f087810375ab68f852672808110bc162f115c70f4e1df3259560e4effa16c0c80f131f55017fa6adb95d7d09db6ef37ebd578060195e82", 0xcc}, {&(0x7f0000001580)="61a1e67bd02e8ff3040e229997fb222c9ae7d2f67ded94edfc59465d416050b1e91b99bfd6174ea93b7ea7debda10d216af68084a3fadb26cee8b8eca34e68f35617c00f6d3549dc9d63bb96255b0a2c3f92921e3e9420c0ba241616da2d66fea6bc4f8584906ad0ce3396cddb", 0x6d}, {&(0x7f0000001600)="20d97162b961a3ccf2e4641a79a6f5000d99fa1420800dcd0539c4d153a93ec08d71d0f1630c1d0972b28c70ddb04f7cdd50bb0e8681b54843adcae6093e06268e844e4df33399c36f071008c836e1eca66dd17d59ce8107255f65e3410a3cb75ba592", 0x63}, {&(0x7f0000001680)="ef07ec0b19ea2694324a8fec90904380ced182212118996b264d203ddbde16f62ba0135e59cd5d27e37921b5b4d31f31810d88a92ede25eb2685bb1efe40a5321ceff98da65d70e1b11fd16dfa6eeac60263844a26b4b31a74a5e639428a99c3f151746b0212be79b34435622655f61efb39d22bb0ebc66b08a8", 0x7a}, {&(0x7f0000001700)="9e2655992f7edf0294fadbb46045aa595ab41d80a42b294a3f3e07f777235e06c81abcda4203f9809faa470b3e40ad63cdae72e21148adc5a688f206c20878f509e3a80bff4ccacea4f79646a313c5c163c13b5c0cc02593d4089a8f01c11a66a630506c050fcc2479d02c2e79b0fde9a3cedefdd565845c5a04a49badfbdd09fd78df084f58e5e33b7dc857ba62c124d1da6fcaaea7f019fd1536853e5b1eb6ebf55e9afd2293946259515e7294cfdbeaaa5036dc", 0xb5}, {&(0x7f00000017c0)="0b0dd429ff24628abde265909ad14b9e618666b08e108ac36ea196b99ef26e380e56c348da27e279bbd0dcdbca73d36819d9487a5995e0500252a9d611a675eba9c077d6304d11d019d3b4757c9aeb8a33d8cfd96a493dbc86cdb6499e3da07899901d074f4817a1d747490b7dfd71868b9f8fb9e093bc1edddf696515c0abd83d40b7687635c03207c88a98b0f9009a69f4f1e55dd9c887633f2c84a9620760f30002c28535a5e300f8e2fb1730d63c6d016f9835bd109fea369b213a39a59900820a904e53225fa20471abefb9c99ed601f9a4a946f5f1", 0xd8}, {&(0x7f00000018c0)="ac0e891cb737e4bc89e52c33b388def7793c613360f7ad64b3638e162d3c6caba7ddaaec7a9ea05f77ecf6e21dcf1d4414a5e46e42a141efc0cf6df5dfe48b636cb5fa362fdf6cc21e0c34a30815e8919da5a90b585fa2890ed8c6b873bd3c9fad5deb95eb0185ff959b9670bf67f97d49ea6fff4248d0a3f1f7e502e4ef4a54c2fe25c9ca", 0x85}], 0x8, &(0x7f0000001a00)=[{0x100, 0x10d, 0x340, "7b423dd9bd42858b9d49ad90c723263aa51435a01ad547b8a0d1bada80c3bd97b6f4fc9ed85b162925c4c46adcaaec60d5fd993c9f8f66aeb9d95c0288659c5bceb56308308fff981d788627407a157b75f9e6bc94c4d9baa710dd2434b94544478d48d1fcb7f00e14e783f39d7f7027c807bbac213cfed5d28984f9d857c1afcd2b609cabed9775c43b033962f40869913d66747df4bc5d8cd9b0b6aacf664bcaced928e9e086ebae1a19792940c84645dd9cbbac76f257c494b2c49bde72ada8c47d81ce5975e285b3404596c3096d9528c769f77da3681bd69cd0f180f74552e3712a6a725b6ab8"}, {0xd0, 0x84, 0x4c19, "c754daef9349c32a5116cf8d651f4cb51ff8728898b065f254acc31c65bc36fe5668781320632f3dff83206dca816ad89a6177e2614f6b6d7e0f8d2449afa874e9dd9b405e5667ddc42fae67e3795b16346402779aa300ff2d79d604ab1fd16647e229f68499c605b50a2fd97979b2a2b9230c269ecf0df686fcb0037e912ebeb899ad987cf437e96518ae659474a99f3d025632e701394bc1b190b196428fee8f57bf5234109f620ad82a7223851ddef2f8ad14e95c44d0e8565b1d2c4a49"}, {0xe0, 0x113, 0x6, "3fea87e3b19ea070dd71a23ce05215576a32a9a9b482e253dafef0a179f7bab7d1498b557f24b91013c2b447bc6c1e97a4cacf680d884178aeccd53e1565ea4d3eddc8100b39544b2ac090e9c979a3971434dcc20828629eb1961732a409c495ddba9be31d2ff33af515d6ffb54f31c3ff19bb043b40d2d118ab61526192b43d2200850a4b9498bf3e9f9965282117fbc38443f12af6becf1e0a45a47ea1ea7a6fb7b0c1eda55d04918fb9bda8bf00abca3fcff44fc06a428adde6a7628da4ad7af84fdcd9a757e37c"}, {0x100, 0x115, 0x1, "0424db5858175f58ba4d9d941a761498e12542270c08dee792af261ad703bfe607e85ed78503d6d249a2a18918769e2c19e43a579772e04da752b3efdfd1fa96a91faf7372f9626a7a93a101e282cacf54974cf7a68ede37539681604cf437be09493b8146eac3795f1722b8e9667ef2b9489373ef93c745fe7fddac2f2ada997587fe9119dfdd852bc73c264b5b91b5ab1b7d0ae752f2dbaef6ad775abda4249260c1970f1192e5c880ac9483a67143267696aa8a017252859b6ce1d136c617df7a0a5bed9a2e32e32953722dcb51e9623de016b741a7a2f60971f6963e8c1c6cf7ecfcc67da4af1ced"}, {0x48, 0x2, 0x3, "7ebdbc6fdb04a5c76cca9563603a0fbd5b8ef9fcbb4cca0ef17bc0b8b38c890935fe638059b5db2506dc385fb98a17fa922a75a2"}, {0x108, 0x10c, 0x8001, "440a5d41df3c18088d368f0b53beed76c92c496bb3de63b373336011e386dc4f66e01347f2f98b3876675b4426282e7af4feacd5a3e70b0e4583ab3c02cb1ed1499d9a89c796a7eb1ab2be4a13286f6e8a8119667edd93917d043b6a2dfdd1e5e5439454a5b16449a349f9a3b71ad2abd1c6d9a2349e44394e76d950afb70f5856d6b068ea85b920afffd72219cf5586ae2a18fc5cccea8762a713f28aa07fc74e59d946ffcd06d351da703a9ceb27f2db53a4656c1ea9be9d883c459131f972781bbfa0c8c70c2eb4bfa88d941d0dd0d41823e590f300694bb0bbc05a1f092ec8a033789ea5c73ac5a13cae5d11901a99"}, {0xb8, 0x10c, 0x82c0, "d879d1d72ffb46a17e1855f6669f856f4e5c7f842277fa7aba773bb3e7ac1704d522e6970948f8d9c80b1486540b92e42e4d73c26e0cd18ef75d6e44a3fdad3251c7484f762cff81ac729d8f775a6291b19645ed3cb77578e6b15bddfa879b68d0f4fbad077fbf155b4c59d3b725a45fc31d962ad605fd5981625243df3861bc6e4b25f0c5ed88aab7402f21e422a7a2209cd52f4696b5e4fb48745e21abe8356333"}], 0x5b8}}], 0x2, 0x40000050) 669.483192ms ago: executing program 0 (id=13257): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000100)=0xfff6a5e82d58226c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001005000000008000000000e3ff4c0000be81ebdbf93ccc7f5fff63abb42eca66dddd261e966eb1bd87882f52401588c74752425e95c03eb09e5997ae853b000000000000fe80b1240c2196bf30179ec2141fcb5be5a1c90a5b0c85117f210597a9d9fcdfa92885ada64b4b8d4a73a109d729b6ff8a929f77e252dbf3227376baa9", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280"], 0x34}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0xbe8, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xbbc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0xa}}, @TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_U32_SEL={0x804, 0x5, {0x1, 0x5, 0x3, 0x2, 0x9, 0x3, 0x9, 0x4, [{0x800, 0x9, 0x5, 0x6}, {0x0, 0x7, 0x9, 0x7fff}, {0x100, 0x900, 0x7ff, 0x4}, {0x100, 0x7, 0x100, 0x19}, {0x3, 0x3, 0x3, 0xfffff312}, {0x9, 0x6, 0x100, 0x80}, {0x2, 0x2, 0x3b8c, 0xf2}, {0x8, 0xa21a, 0x2, 0xfffffff9}, {0xfffff21f, 0x9, 0xe, 0x4}, {0x3ff, 0xb73c, 0x0, 0x6}, {0x1, 0x8001, 0xfffffffa, 0x4}, {0x7, 0x1, 0x7, 0x9}, {0x1c000000, 0x81, 0x2, 0x9}, {0x600, 0xdc9, 0x2392, 0xc}, {0x3, 0x4, 0x9, 0x4}, {0x1, 0x4, 0x7, 0x4}, {0x8, 0x4244671a, 0x0, 0x7}, {0x9, 0x55, 0x71d380, 0x202}, {0x5, 0x80000000, 0x7, 0x7}, {0x800, 0x40, 0x3}, {0x5, 0x7fff, 0x8000, 0x4}, {0x3ff, 0x6, 0x8, 0xe855ea7}, {0x10000, 0xc8c, 0x400, 0x8}, {0xd, 0x1, 0x83, 0x3351}, {0x0, 0x6, 0x3, 0x3}, {0x0, 0xd4, 0x1, 0xa}, {0xffffffff, 0xa81, 0x8, 0x9}, {0x5, 0x106, 0x1, 0x401}, {0x9, 0x6, 0x2}, {0x2, 0x1, 0x4, 0x6}, {0x0, 0x8a, 0x8, 0x1}, {0x10, 0xc, 0x5ebb, 0x1}, {0x5c4, 0x0, 0x24, 0x3}, {0xfffffffc, 0x7b, 0xfffffff7, 0x80000000}, {0x1, 0x6, 0x1, 0xb4}, {0xb89, 0xffffffff, 0x1, 0xfffffd61}, {0xff, 0x39, 0x9, 0xa4fe}, {0x81, 0x1, 0x401, 0x2}, {0x8000, 0x8, 0x0, 0x3}, {0x7, 0x5, 0x5, 0x3}, {0x6, 0x200, 0x8, 0xb}, {0xb9276d2, 0x7, 0x0, 0x6}, {0x6, 0x2, 0x7, 0x6}, {0x10, 0x100, 0x8, 0x10000}, {0x4, 0x400, 0xa, 0xc}, {0x7, 0x2, 0x7, 0x7}, {0x3, 0x7, 0x2929946d, 0x10000}, {0x1000, 0xc, 0x51, 0x2}, {0x5, 0xd4d, 0xfffffb59, 0x1}, {0xca0, 0x179, 0x6, 0xa6}, {0x0, 0x7, 0x7ff00, 0x1}, {0x8, 0x124, 0x5, 0x7f}, {0x1, 0x4, 0x8, 0x474}, {0xfffffffa, 0x3, 0x8, 0x6a1}, {0x7, 0xf, 0xd, 0x3}, {0x6, 0x4, 0x4}, {0x8, 0x5, 0xff, 0xc5}, {0x2, 0x6, 0x800, 0x180}, {0x1, 0x100, 0xf, 0x1200}, {0x400, 0x8, 0x6, 0x1}, {0x2, 0x4, 0x9, 0x7}, {0x6, 0xffffff7f, 0x9, 0x1}, {0x4, 0xffffffff, 0xff, 0xff}, {0xd4, 0x3, 0xaa, 0x8}, {0x401, 0x80000000, 0x1b36168a, 0x8a8}, {0x0, 0x101, 0x10001, 0x3}, {0x0, 0x0, 0x6, 0x1}, {0x6c, 0x2, 0x10000, 0x8731}, {0x2, 0x8, 0xff, 0xd}, {0xff, 0x2, 0xeceb, 0xbeb5}, {0x982, 0x40, 0x9, 0x6}, {0xffff56df, 0x9, 0x1, 0x47}, {0x205, 0x4, 0x401, 0x3ff}, {0x4, 0x1, 0x1, 0x4}, {0x9088, 0x7ff, 0x8, 0x100}, {0x4, 0x400, 0x0, 0x6}, {0x27c1, 0x0, 0x9, 0x2}, {0x7fffffff, 0x10001, 0x7, 0x7}, {0x0, 0x5, 0x3, 0x3}, {0x101, 0xffff4e3b, 0x1, 0x101}, {0x2, 0x4, 0x4, 0xfffe}, {0x5, 0x319, 0x6, 0xfffffffa}, {0x627d13d1, 0x1, 0xd, 0x8}, {0xb, 0x7, 0x8, 0x4}, {0x3, 0x1000, 0x22, 0x1}, {0x40, 0x4, 0x7, 0x1}, {0x6, 0x1, 0x1000, 0xdd}, {0x5, 0xff, 0x3, 0x2}, {0x2, 0x9, 0x2, 0xf38}, {0x81, 0x8, 0x0, 0xffff}, {0xd33f, 0xb0, 0x6, 0x2}, {0xfd1, 0x0, 0x101, 0x3}, {0xc37d, 0x81, 0x5, 0x5}, {0x5, 0x6bb4, 0x2, 0x1000}, {0x1, 0x7, 0x6, 0xff}, {0x9, 0x10000, 0x1}, {0xc46, 0xfffffffa, 0x2, 0x6}, {0x2bc, 0x7, 0x1000, 0x274}, {0x800, 0x7ff, 0x12, 0x148b}, {0x200, 0x6, 0x8, 0x5}, {0x3, 0x6, 0x8, 0x80000001}, {0xff, 0x0, 0x9, 0x9}, {0x53b, 0x2, 0x5, 0x8}, {0x9, 0x6, 0x0, 0x400}, {0x4, 0x5, 0x0, 0xffffffd9}, {0x7, 0x2, 0x9, 0x8}, {0x1, 0x87, 0x3, 0x9}, {0x3478, 0x5, 0xffffffff, 0x9}, {0x3, 0x6, 0x8000, 0x9}, {0xd1b, 0x7, 0x20, 0xccf0}, {0x7f, 0x7, 0x9e7, 0x2}, {0x5, 0x1, 0x8, 0xc}, {0x5, 0x2, 0x6, 0xd1}, {0x101, 0x5, 0x100, 0x6}, {0x81, 0x9, 0x8, 0x4}, {0x8, 0x8000, 0x7, 0x400}, {0x5, 0x2d9b, 0x0, 0x200}, {0x7, 0x7ff, 0x4, 0x2}, {0x8001, 0x4, 0x5, 0x101}, {0x3, 0x3, 0x80000001, 0x401}, {0xf2c, 0x101, 0x5, 0x8}, {0x81, 0x2, 0x7, 0x1}, {0x2, 0x200, 0x2, 0x7}, {0x8000, 0x4, 0x1, 0x100}, {0x4, 0x5, 0x5, 0x7}, {0x5, 0x5, 0x578, 0x6}, {0x4, 0xfffffff7, 0x8001, 0x10000}]}}, @TCA_U32_SEL={0x384, 0x5, {0x4, 0x3, 0xa, 0x1, 0x6, 0xd, 0xd, 0xde, [{0x1, 0x8, 0x4682, 0x100}, {0xfff, 0x8, 0x7ff, 0x2}, {0x2, 0x9, 0x0, 0x7}, {0x4, 0xd07, 0x6, 0x9}, {0x7, 0x4, 0xff, 0x9}, {0x1, 0x49, 0x4, 0x101}, {0x6, 0x4, 0xba0000, 0x6}, {0x5, 0x40, 0xfffffffc, 0xffffff71}, {0x3d1f, 0x1, 0xffff7d51, 0x2}, {0x401, 0xffffffff, 0x80000000, 0xb}, {0x9, 0x9, 0xe9, 0x5}, {0x4, 0xae58aadd, 0x6, 0xfffffffd}, {0x8000, 0xc859, 0x5, 0x5}, {0x4, 0x4, 0xe, 0x6}, {0x9, 0x1, 0x80, 0x7c}, {0x0, 0x96, 0x5, 0x1ff}, {0x1500, 0xc, 0x7, 0x80000001}, {0x9, 0x0, 0x5, 0x6}, {0x9, 0x2, 0x2, 0x1f}, {0x4, 0x8001, 0xd0, 0x7}, {0xb3, 0x7, 0x7a, 0x2}, {0x0, 0x531a6b14, 0xc00, 0x10000000}, {0x7, 0x8, 0x80000001, 0x8}, {0xe89, 0x7, 0x1, 0x7}, {0x9, 0x7, 0x7fff, 0x5}, {0x3, 0x7, 0x800, 0x57d1}, {0xea47c5a, 0x2, 0x3, 0xd}, {0x8000, 0x5, 0x9, 0x3ff}, {0x9, 0x800, 0x5, 0x3}, {0x10001, 0x8, 0x5, 0x1b8}, {0x2, 0x3, 0xffff9fb6, 0x80000000}, {0x4, 0x7, 0xffffffff, 0x6}, {0xc, 0x4, 0x1, 0x4}, {0xef, 0xc, 0x6, 0xfffffffa}, {0x1, 0x5, 0x4, 0xfffffffe}, {0x43e, 0x10001, 0x3, 0x2454}, {0x1ff, 0x5, 0x6, 0xffff}, {0xffffffff, 0x6, 0xc, 0x14c0000}, {0xffffffff, 0x1000, 0x890c, 0x1000}, {0x2, 0x6, 0x80, 0x10000}, {0x3, 0x4a, 0x0, 0xd245}, {0x3, 0x9, 0x4, 0x8}, {0x101, 0x9, 0x6, 0x6}, {0x2, 0x1}, {0xffff, 0x4}, {0x5, 0x8, 0x2, 0x2}, {0x1, 0x9, 0x2, 0x80000000}, {0x80, 0x80000001, 0x6, 0x9b}, {0x2411, 0xc, 0x3}, {0x4, 0xfffffffe, 0x5, 0x94cc}, {0x2, 0x8, 0x5, 0x709ddaee}, {0x8, 0x8088, 0x10000}, {0x8, 0x4, 0x1, 0xa514}, {0x1, 0x5, 0x4, 0xfffffffb}, {0x18, 0x9, 0x7ffd, 0xe842}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xfff1}}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x6f47}}]}}]}, 0xbe8}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x2000c810) r12 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/81, 0x51}], 0x1}, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) 597.758095ms ago: executing program 3 (id=13258): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000000)=0x47a, 0x4) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="a4fd3f4ee45eae18855d5e3374ffa9f60c86c9fc06b5640ddda92730071a18b52d4b373d5011ebceee1b765a36ec896e05cc7581c83fe23cb4f7b3907ece2350bb19c19c9af6dcc6e4d69852c47f52ab8846cf6af48bc543fdce04f537c2097cbd7d101fa7e6f75ecf01b97472148643c873f01d11b0a56acd10924259b16359729711e513a3e9d5debd2058dec5e6d1b1032d17d1a3fbabdc388f108c55978bcfa14c9c35a893dc9937445f733ee855dafeb486cac255a5027b81a3e69e0bd66a2688f6661c5bd38e8ed768d776340661c9c58b5f920000245330bb61b995bd3f3fe997794b50ccfc00"/246, @ANYRESDEC=r3], 0x28}, 0x1, 0x0, 0x0, 0x4048001}, 0xc000) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 582.824772ms ago: executing program 2 (id=13259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0xe0, 0x17, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0xffffffffffffffde}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcb}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x48056}, 0x0) 450.139003ms ago: executing program 4 (id=13260): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000000740)={0x964, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x10000}, 0x5, 0x4, 0x101, 0x3, 0x4, 'syz0\x00', "6e475f9ba1e9850be121b0dd96d3fef96139c0e779ba567dc9f3c626528d7547", "f0b127f7f1cc4dd4a38cdf8fca9eb5b787cb5bf16071abc3019dfc24ec6131f3", [{0x7, 0x3, {0x3, 0x134}}, {0x6, 0x3ff, {0x1, 0x2}}, {0x4, 0x9f, {0x3, 0xee2}}, {0x0, 0x5, {0x2}}, {0x16f, 0x8, {0x0, 0x6da4188e}}, {0x3ff, 0x7ff, {0x1}}, {0x1ff, 0x7, {0x3, 0x4ab}}, {0x200, 0xf, {0x1}}, {0x80, 0x2, {0x2, 0x3}}, {0x8, 0x4b2f, {0x1, 0x2}}, {0x4, 0x3, {0x3, 0x200}}, {0x3b4, 0x94, {0x2, 0x3800000}}, {0x4, 0x2, {0x2, 0x8}}, {0x1, 0xff13, {0x2, 0x4}}, {0xff, 0x10, {0x2}}, {0x2, 0xff70, {0x1, 0xef93}}, {0xfffd, 0x2, {0x1, 0x8}}, {0x6, 0x3, {0x1}}, {0x2, 0xb10, {0x0, 0x10}}, {0x9, 0x3, {0x1, 0x400}}, {0x9c3, 0x80, {0x3, 0x6}}, {0x2, 0x7f, {0x3, 0x8}}, {0xfff8, 0x100, {0x0, 0x1000}}, {0x4, 0xa039, {0x1, 0x6}}, {0x0, 0x5, {0x1, 0x7fff}}, {0xfe01, 0x9, {0xc5393c18af49aaf3, 0x400}}, {0x51, 0x280, {0x2, 0x3}}, {0x0, 0xdd5, {0x1, 0x7}}, {0x5, 0x6, {0x2, 0x9}}, {0x7, 0xe28c, {0x0, 0xfffffffe}}, {0x1, 0x7ff, {0x1, 0xb}}, {0x4, 0x200, {0x2, 0x7}}, {0x6, 0xf, {0x2, 0xffff}}, {0x9, 0x7fff, {0x2, 0x6}}, {0x8, 0x1, {0x2, 0x1}}, {0x0, 0xdac, {0x2, 0x9}}, {0x0, 0x5, {0x2, 0x2}}, {0x2, 0xff, {0x3, 0x7}}, {0x3, 0x2, {0x3}}, {0x8, 0x6, {0x2, 0x80000000}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x8, 0x1, 0x3, 0x0, 0x15, 'syz0\x00', "2ba8143bfe6f532d6378e5a35ac0a973c142a9d66b82d969b3ec592d4559260d", "8e28f18e832bbb891cee07c1e5ae9864db431e40caa2440abb267dd16d138bdc", [{0x2, 0x1000, {0x2, 0x8}}, {0x5, 0xf019, {0x1, 0x7}}, {0x2, 0x4b91, {0x2, 0x10}}, {0x9, 0xfeff, {0x3, 0x8}}, {0x7, 0x1, {0x1, 0x1}}, {0x101, 0xc, {0x3, 0x8}}, {0x1, 0x131, {0x1, 0x7}}, {0x3, 0x3, {0x0, 0x1}}, {0x9b6, 0xfffb, {0x2, 0x10000}}, {0x7, 0x1, {0x2, 0x6}}, {0x3ff, 0x2, {0x1, 0x2}}, {0xff81, 0x8, {0x2, 0x3}}, {0x3, 0x2, {0x2, 0x7}}, {0x1, 0xe975, {0x0, 0x6}}, {0xee0b, 0x5, {0x2, 0x62}}, {0x9, 0x4}, {0x200, 0x3, {0x0, 0xb536}}, {0x8, 0x0, {0x2, 0x2}}, {0xc, 0x3, {0x3, 0x9}}, {0x7, 0x800, {0x0, 0x1b}}, {0xfffd, 0x3, {0x2, 0x3}}, {0x8, 0x4, {0x3, 0x5}}, {0x5, 0x5, {0x3, 0x10a}}, {0xffff, 0x9, {0x2}}, {0x9ac1, 0x7, {0x3, 0xfffffffd}}, {0x7, 0xfffc, {0x3, 0x4}}, {0x3, 0x7, {0x2, 0x16}}, {0x5, 0x3ff, {0x0, 0x300000}}, {0x2, 0x101, {0x2, 0x6}}, {0x401, 0x9, {0x1, 0xe}}, {0x5, 0x3, {0x0, 0xfffffffc}}, {0x5, 0x0, {0x1, 0x800004}}, {0x80, 0x3, {0x2, 0x6}}, {0x7ff, 0x7, {0x2, 0x10001}}, {0x30, 0x0, {0x0, 0xfff}}, {0x3, 0xfff7, {0x3, 0x568}}, {0x8, 0x5347, {0x1, 0x9}}, {0x101, 0x200, {0x0, 0xfffffff7}}, {0x4, 0x7, {0x0, 0x7fff}}, {0x10, 0x9, {0x1, 0x401}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x69, 0x5, 0x8, 0x1, 0x15, 'syz0\x00', "55143846b1147f9e1efb24b4bb4dff5ac610b223a617315d3f713485e35fefbe", "b5ac3f2fab75327712a7b4b07f0d202826619a0c0f92987d98b72c825868fb75", [{0xa, 0x1b7, {0x3, 0x1}}, {0xa, 0x1, {0x2, 0xffffffff}}, {0x7ff, 0x2, {0x3, 0x2}}, {0x5, 0xfff, {0x0, 0xfffffff8}}, {0x2, 0x8c00, {0x2}}, {0x79, 0x8000, {0x0, 0x8}}, {0x1, 0x2, {0x0, 0xd8}}, {0xfd44, 0xb9c, {0x1, 0x219}}, {0x4, 0xfff9, {0x3, 0x9}}, {0x3, 0x6, {0x3, 0xe}}, {0x65d0, 0x6, {0x3, 0x1000}}, {0x101, 0xff, {0x2, 0xe68}}, {0x7, 0x0, {0x2, 0x7fffffff}}, {0x1, 0x5, {0x1, 0x9}}, {0x6, 0x435, {0x1, 0x7fffffff}}, {0x0, 0xb}, {0x200, 0xff01, {0x2, 0x1}}, {0x1, 0x3, {0x2, 0x1}}, {0x2, 0x7, {0x3, 0x4335}}, {0x4, 0x1ac, {0x2, 0x9}}, {0x10, 0xaf4e, {0x3, 0x1}}, {0x9, 0xfe00, {0x2, 0x9}}, {0xc, 0x6, {0x3, 0x2}}, {0x0, 0x6, {0x3, 0x8}}, {0x9, 0xfffe, {0x1, 0x2a58}}, {0x0, 0x0, {0x1, 0x6}}, {0x0, 0x1ff, {0x3, 0x5}}, {0xf4b, 0x5ed, {0x0, 0x2}}, {0x8, 0x9e4, {0x0, 0x1}}, {0x9, 0x4, {0x3, 0x8}}, {0x7, 0x8, {0x0, 0x8}}, {0x7, 0x3, {0x0, 0xffff}}, {0x2, 0xb705, {0x3, 0x1}}, {0x6, 0x8, {0x3, 0x6}}, {0x3, 0x3, {0x0, 0x9}}, {0x2, 0x1, {0x0, 0x1}}, {0x1, 0x8}, {0xf000, 0xfff1, {0x0, 0x8}}, {0xf, 0x32bc, {0xfb3d27baf2f61da7, 0x47}}, {0xf5c7, 0xbb, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0xf}, 0xfe, 0x4, 0x0, 0x4, 0x15, 'syz0\x00', "c918b1cfb7f360a6ecbfbaa9127822aebc210ecc042c7aa0207e7a72a59647e9", "e4285e23a1276841d2505e906c10cf87973701f732eb8701fd2bb42a389035d5", [{0x3, 0x71c, {0x2, 0x3}}, {0x53, 0x2, {0x2, 0x9}}, {0x0, 0x0, {0x0, 0x8}}, {0x2, 0x6, {0x1, 0x400}}, {0x4, 0x9, {0x0, 0x7fff}}, {0x1, 0x0, {0x0, 0xeac6}}, {0x5, 0x6, {0x1, 0x2}}, {0x900, 0x186, {0x3, 0x6}}, {0x2, 0x7, {0x1, 0x1}}, {0x101, 0xe0, {0x1, 0x3}}, {0x6e47, 0x2, {0x0, 0x53a8}}, {0x401, 0x0, {0x1, 0x3}}, {0x7, 0x5, {0x3, 0x1}}, {0x3ff, 0x200, {0x2, 0x6}}, {0x4, 0x1, {0x3, 0x6}}, {0xa, 0x3, {0xf5ab1dcd7214e43a, 0x3d}}, {0x9, 0xc86, {0x0, 0x4}}, {0x0, 0x7af, {0x3, 0x3}}, {0x6, 0x1, {0x0, 0x8}}, {0x9, 0xffff, {0x2, 0xb7a}}, {0x400, 0xf9d9, {0x0, 0x2}}, {0x8, 0x3, {0x0, 0xe46}}, {0x1, 0x5, {0x3, 0xfff}}, {0x3a93, 0x7ff, {0x1, 0x1}}, {0x784d, 0x3ff, {0x3, 0xffff}}, {0xd7b, 0x3, {0x2, 0x6}}, {0x5, 0x1, {0x0, 0x2}}, {0x3, 0xcd4, {0x0, 0x8}}, {0x6, 0x5, {0x0, 0x77}}, {0x0, 0xf, {0x1, 0x3}}, {0x3, 0x5, {0x3, 0xffffff7f}}, {0x9, 0x6, {0x3, 0x5}}, {0x9, 0x400, {0x1, 0x6}}, {0x8, 0xcbc, {0x1, 0xad7c}}, {0x4c, 0x1000, {0x2, 0x8}}, {0x1, 0x2, {0x0, 0x101}}, {0x5, 0x0, {0x0, 0xada}}, {0x6, 0x5, {0x2, 0xfffffff7}}, {0x315, 0x2, {0xb3280938c14fda23, 0x401}}, {0xfcd9, 0x8e, {0x3, 0x5}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x42000}, 0x200008d1) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmmsg(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 448.15107ms ago: executing program 2 (id=13261): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x81, 0x8, 0x40, @private2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x10, 0x10, 0x6, 0x8}}) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="cdc2fe2b08c508a0b3b307150e7e0a7f453b4d4a37cdcf8fcfb9", 0x1a}], 0x1, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}], 0xb0}, 0x800) 379.619103ms ago: executing program 3 (id=13262): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) 346.664557ms ago: executing program 2 (id=13263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000002002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 283.059379ms ago: executing program 0 (id=13264): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000080)={&(0x7f0000000040)=0x3, 0x2, &(0x7f0000000380), &(0x7f00000000c0)}) r3 = epoll_create(0xf) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f00000002c0)) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) (rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000040)) (async) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2c, 0x3, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xa000000}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) (async) connect$can_j1939(r5, &(0x7f0000000300)={0x1d, r8, 0x1, {0x0, 0xf0, 0x4}}, 0x18) 258.971097ms ago: executing program 3 (id=13265): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x200000, 0x10, &(0x7f00000003c0), 0x10}, 0x90) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0xf87c4be628ed8e41}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000040004"], 0x17c}}, 0x0) 126.72435ms ago: executing program 0 (id=13266): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)="e499", 0x2}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1}, 0x40000122) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)={0x14, 0x36, 0x1, 0x70bd2d, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x9c8fd353ad5b145a}, 0x48) 27.153991ms ago: executing program 2 (id=13267): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x400, 0x2, 0x9}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0xa0b, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a}, 0x20) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x400, 0x2, 0x9}) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0xa0b, 0x4) (async) 0s ago: executing program 0 (id=13268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000f40)={'batadv_slave_0\x00', 0x0}) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002240)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) kernel console output (not intermixed with test programs): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 892.327849][ T6469] bond44 (unregistering): Released all slaves [ 892.438936][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11567'. [ 892.463745][ T6475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11567'. [ 892.678205][ T6488] validate_nla: 1 callbacks suppressed [ 892.678469][ T6488] netlink: 'syz.4.11571': attribute type 21 has an invalid length. [ 892.678485][ T6488] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11571'. [ 892.919570][ T6495] bond36: option downdelay: invalid value (18446744073709551615) [ 892.933177][ T6495] bond36: option downdelay: allowed values 0 - 2147483647 [ 892.944825][ T6495] bond36 (unregistering): Released all slaves [ 893.335053][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11581'. [ 893.423392][ T6519] netlink: 'syz.1.11581': attribute type 1 has an invalid length. [ 893.669888][ T6533] veth0_to_bond: Caught tx_queue_len zero misconfig [ 894.359174][ T6576] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.369699][ T6577] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.373727][ T6578] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.375979][ T6579] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.376641][ T6580] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.378571][ T6577] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.391725][ T6576] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.393662][ T6576] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.395180][ T6577] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.396932][ T6576] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 894.734926][ T6610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 894.878814][ T6623] netlink: 'syz.4.11602': attribute type 1 has an invalid length. [ 895.455143][ T6657] netlink: 'syz.3.11614': attribute type 4 has an invalid length. [ 895.455188][ T6657] __nla_validate_parse: 4 callbacks suppressed [ 895.455546][ T6657] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11614'. [ 895.466623][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11614'. [ 895.743788][ T6676] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11621'. [ 896.427229][ T6718] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11634'. [ 896.440978][ T6716] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 896.441016][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.2.11633 Not tainted syzkaller #0 PREEMPT(full) [ 896.441039][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 896.441050][ T6716] Call Trace: [ 896.441058][ T6716] [ 896.441065][ T6716] dump_stack_lvl+0xe8/0x150 [ 896.441099][ T6716] sysfs_warn_dup+0x8e/0xa0 [ 896.441127][ T6716] sysfs_do_create_link_sd+0xc0/0x110 [ 896.441157][ T6716] device_add_class_symlinks+0x1cf/0x240 [ 896.441191][ T6716] device_add+0x467/0xb80 [ 896.441222][ T6716] wiphy_register+0x1fc8/0x2ff0 [ 896.441266][ T6716] ? __pfx_wiphy_register+0x10/0x10 [ 896.441290][ T6716] ? __pfx_netdev_run_todo+0x10/0x10 [ 896.441314][ T6716] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 896.441354][ T6716] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 896.441388][ T6716] ieee80211_register_hw+0x3d3d/0x4a50 [ 896.441429][ T6716] ? ieee80211_register_hw+0x19d1/0x4a50 [ 896.441482][ T6716] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 896.441514][ T6716] ? __asan_memset+0x22/0x50 [ 896.441541][ T6716] ? __hrtimer_setup+0x1b7/0x260 [ 896.441566][ T6716] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 896.441591][ T6716] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 896.441642][ T6716] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 896.441661][ T6716] ? kstrndup+0xbd/0x160 [ 896.441686][ T6716] ? kstrndup+0xbd/0x160 [ 896.441707][ T6716] hwsim_new_radio_nl+0xd8b/0xf90 [ 896.441751][ T6716] genl_family_rcv_msg_doit+0x233/0x340 [ 896.441788][ T6716] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 896.441828][ T6716] ? bpf_lsm_capable+0x9/0x20 [ 896.441851][ T6716] ? security_capable+0x7e/0x2c0 [ 896.441877][ T6716] genl_rcv_msg+0x614/0x7a0 [ 896.441910][ T6716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 896.441936][ T6716] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 896.441977][ T6716] netlink_rcv_skb+0x226/0x4a0 [ 896.442000][ T6716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 896.442027][ T6716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 896.442063][ T6716] ? down_read+0x2be/0x330 [ 896.442086][ T6716] genl_rcv+0x28/0x40 [ 896.442110][ T6716] netlink_unicast+0x7bd/0x940 [ 896.442141][ T6716] netlink_sendmsg+0x813/0xb40 [ 896.442173][ T6716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.442203][ T6716] ? apparmor_socket_sendmsg+0x98/0x360 [ 896.442233][ T6716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.442254][ T6716] sock_sendmsg_nosec+0x13a/0x180 [ 896.442281][ T6716] ____sys_sendmsg+0x54e/0x850 [ 896.442307][ T6716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 896.442355][ T6716] ? import_iovec+0x73/0xa0 [ 896.442380][ T6716] ___sys_sendmsg+0x2a5/0x360 [ 896.442397][ T6716] ? __lock_acquire+0x6df/0x2e50 [ 896.442416][ T6716] ? __pfx____sys_sendmsg+0x10/0x10 [ 896.442437][ T6716] ? futex_wait+0x2a2/0x390 [ 896.442485][ T6716] ? __fget_files+0x2a/0x420 [ 896.442503][ T6716] ? __fget_files+0x3a2/0x420 [ 896.442531][ T6716] __x64_sys_sendmsg+0x1b1/0x290 [ 896.442550][ T6716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 896.442584][ T6716] do_syscall_64+0x166/0x520 [ 896.442605][ T6716] ? trace_irq_disable+0x3b/0x140 [ 896.442619][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.442634][ T6716] ? clear_bhb_loop+0x70/0xc0 [ 896.442653][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.442667][ T6716] RIP: 0033:0x7f777bf9e159 [ 896.442684][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.442699][ T6716] RSP: 002b:00007f777cf00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.442717][ T6716] RAX: ffffffffffffffda RBX: 00007f777c225fa0 RCX: 00007f777bf9e159 [ 896.442729][ T6716] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 896.442739][ T6716] RBP: 00007f777c035024 R08: 0000000000000000 R09: 0000000000000000 [ 896.442749][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.442759][ T6716] R13: 00007f777c226038 R14: 00007f777c225fa0 R15: 00007ffd9ff42b48 [ 896.442787][ T6716] [ 896.548324][ T6724] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11634'. [ 897.020006][ T6733] bond44: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 897.072520][ T6733] bond44 (unregistering): Released all slaves [ 897.156755][ T6749] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11641'. [ 897.774719][ T6792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11655'. [ 897.881836][ T6796] netlink: 9152 bytes leftover after parsing attributes in process `syz.3.11657'. [ 897.894058][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11657'. [ 897.908884][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11657'. [ 898.085760][ T6804] netlink: 'syz.3.11663': attribute type 2 has an invalid length. [ 898.319034][ T6828] ipt_ECN: cannot use operation on non-tcp rule [ 898.384515][ T6828] vlan3: entered promiscuous mode [ 898.384560][ T6828] bridge0: entered promiscuous mode [ 898.982497][ T6853] tipc: Enabling of bearer rejected, failed to enable media [ 899.644176][ T6887] bond22: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 899.659162][ T6887] bond22 (unregistering): Released all slaves [ 900.174905][ T6913] syzkaller1: entered promiscuous mode [ 900.174952][ T6913] syzkaller1: entered allmulticast mode [ 900.739370][ T6964] __nla_validate_parse: 10 callbacks suppressed [ 900.739653][ T6964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11711'. [ 901.153808][ T6999] netlink: 'syz.0.11718': attribute type 28 has an invalid length. [ 901.162796][ T6999] netlink: 'syz.0.11718': attribute type 3 has an invalid length. [ 901.172867][ T6999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11718'. [ 901.179074][ T5627] block nbd5: Receive control failed (result -32) [ 901.183934][ T5625] block nbd5: Receive control failed (result -32) [ 901.407372][ T7024] netlink: 'syz.2.11726': attribute type 1 has an invalid length. [ 901.417201][ T7024] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.11726'. [ 901.498358][ T7032] FAULT_INJECTION: forcing a failure. [ 901.498358][ T7032] name failslab, interval 1, probability 0, space 0, times 0 [ 901.498412][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.0.11729 Not tainted syzkaller #0 PREEMPT(full) [ 901.498431][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.498440][ T7032] Call Trace: [ 901.498446][ T7032] [ 901.498452][ T7032] dump_stack_lvl+0xe8/0x150 [ 901.498488][ T7032] should_fail_ex+0x410/0x560 [ 901.498520][ T7032] should_failslab+0xa8/0x100 [ 901.498544][ T7032] ? skb_clone+0x212/0x3a0 [ 901.498563][ T7032] kmem_cache_alloc_noprof+0xa1/0x600 [ 901.498591][ T7032] ? skb_clone+0x212/0x3a0 [ 901.498614][ T7032] skb_clone+0x212/0x3a0 [ 901.498628][ T7032] ? nfnetlink_rcv+0x4b0/0x28c0 [ 901.498648][ T7032] nfnetlink_rcv+0x4de/0x28c0 [ 901.498670][ T7032] ? __dev_queue_xmit+0x29b/0x3820 [ 901.498691][ T7032] ? __local_bh_enable_ip+0xd6/0x140 [ 901.498714][ T7032] ? lockdep_hardirqs_on+0x7b/0x110 [ 901.498739][ T7032] ? __dev_queue_xmit+0x29b/0x3820 [ 901.498758][ T7032] ? __local_bh_enable_ip+0xd6/0x140 [ 901.498778][ T7032] ? __dev_queue_xmit+0x29b/0x3820 [ 901.498798][ T7032] ? __dev_queue_xmit+0x1edc/0x3820 [ 901.498816][ T7032] ? do_syscall_64+0x166/0x520 [ 901.498839][ T7032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.498868][ T7032] ? __dev_queue_xmit+0x29b/0x3820 [ 901.498889][ T7032] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 901.498922][ T7032] ? ref_tracker_free+0x689/0x830 [ 901.498942][ T7032] ? __pfx_ref_tracker_free+0x10/0x10 [ 901.498968][ T7032] ? __skb_clone+0x449/0x6c0 [ 901.498997][ T7032] ? skb_clone+0x246/0x3a0 [ 901.499019][ T7032] ? __netlink_deliver_tap+0x811/0x860 [ 901.499039][ T7032] ? netlink_deliver_tap+0x2e/0x1b0 [ 901.499066][ T7032] ? netlink_deliver_tap+0x2e/0x1b0 [ 901.499087][ T7032] ? netlink_deliver_tap+0x2e/0x1b0 [ 901.499112][ T7032] netlink_unicast+0x7bd/0x940 [ 901.499141][ T7032] netlink_sendmsg+0x813/0xb40 [ 901.499171][ T7032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.499219][ T7032] ? apparmor_socket_sendmsg+0x98/0x360 [ 901.499248][ T7032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.499268][ T7032] sock_sendmsg_nosec+0x13a/0x180 [ 901.499294][ T7032] ____sys_sendmsg+0x54e/0x850 [ 901.499318][ T7032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.499345][ T7032] ? import_iovec+0x73/0xa0 [ 901.499368][ T7032] ___sys_sendmsg+0x2a5/0x360 [ 901.499385][ T7032] ? __lock_acquire+0x6df/0x2e50 [ 901.499407][ T7032] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.499458][ T7032] ? __fget_files+0x2a/0x420 [ 901.499487][ T7032] ? __fget_files+0x3a2/0x420 [ 901.499519][ T7032] __x64_sys_sendmsg+0x1b1/0x290 [ 901.499539][ T7032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 901.499578][ T7032] do_syscall_64+0x166/0x520 [ 901.499602][ T7032] ? trace_irq_disable+0x3b/0x140 [ 901.499620][ T7032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.499637][ T7032] ? clear_bhb_loop+0x70/0xc0 [ 901.499658][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.499676][ T7032] RIP: 0033:0x7f81ec59e159 [ 901.499692][ T7032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.499708][ T7032] RSP: 002b:00007f81ed4c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.499727][ T7032] RAX: ffffffffffffffda RBX: 00007f81ec825fa0 RCX: 00007f81ec59e159 [ 901.499739][ T7032] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 901.499750][ T7032] RBP: 00007f81ed4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 901.499761][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.499772][ T7032] R13: 00007f81ec826038 R14: 00007f81ec825fa0 R15: 00007ffe40b51aa8 [ 901.499801][ T7032] [ 902.135161][ T7053] 8021q: adding VLAN 0 to HW filter on device bond44 [ 902.182944][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11732'. [ 902.187050][ T7061] x_tables: duplicate underflow at hook 3 [ 902.421143][ T7069] netlink: 'syz.2.11739': attribute type 1 has an invalid length. [ 902.514277][ T7067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11739'. [ 902.532605][ T7069] 8021q: adding VLAN 0 to HW filter on device bond43 [ 903.102592][ T7118] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11755'. [ 903.187489][ T7122] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11755'. [ 903.282176][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11760'. [ 903.739203][ T7157] 8021q: adding VLAN 0 to HW filter on device bond44 [ 903.794697][ T7164] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11772'. [ 903.935772][ T7174] FAULT_INJECTION: forcing a failure. [ 903.935772][ T7174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.935824][ T7174] CPU: 1 UID: 0 PID: 7174 Comm: syz.2.11774 Not tainted syzkaller #0 PREEMPT(full) [ 903.935845][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.935856][ T7174] Call Trace: [ 903.935864][ T7174] [ 903.935873][ T7174] dump_stack_lvl+0xe8/0x150 [ 903.935903][ T7174] should_fail_ex+0x410/0x560 [ 903.935937][ T7174] _copy_from_user+0x2d/0xb0 [ 903.935958][ T7174] kstrtouint_from_user+0xd6/0x180 [ 903.935986][ T7174] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 903.936018][ T7174] ? lock_acquire+0x115/0x350 [ 903.936042][ T7174] proc_fail_nth_write+0x8e/0x210 [ 903.936069][ T7174] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 903.936102][ T7174] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 903.936127][ T7174] vfs_write+0x296/0xba0 [ 903.936158][ T7174] ? __pfx_vfs_write+0x10/0x10 [ 903.936182][ T7174] ? __fget_files+0x2a/0x420 [ 903.936208][ T7174] ? __fget_files+0x3a2/0x420 [ 903.936227][ T7174] ? __fget_files+0x2a/0x420 [ 903.936252][ T7174] ksys_write+0x150/0x270 [ 903.936286][ T7174] ? __pfx_ksys_write+0x10/0x10 [ 903.936321][ T7174] do_syscall_64+0x166/0x520 [ 903.936347][ T7174] ? trace_irq_disable+0x3b/0x140 [ 903.936365][ T7174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.936384][ T7174] ? clear_bhb_loop+0x70/0xc0 [ 903.936408][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.936426][ T7174] RIP: 0033:0x7f777bf5e98e [ 903.936444][ T7174] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 903.936461][ T7174] RSP: 002b:00007f777cefffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 903.936480][ T7174] RAX: ffffffffffffffda RBX: 00007f777cf006c0 RCX: 00007f777bf5e98e [ 903.936497][ T7174] RDX: 0000000000000001 RSI: 00007f777cf000a0 RDI: 0000000000000004 [ 903.936509][ T7174] RBP: 00007f777cf00090 R08: 0000000000000000 R09: 0000000000000000 [ 903.936521][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.936533][ T7174] R13: 00007f777c226038 R14: 00007f777c225fa0 R15: 00007ffd9ff42b48 [ 903.936564][ T7174] [ 904.247112][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11781'. [ 904.316147][ T7183] bridge19: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 904.386972][ T7185] syzkaller0: entered promiscuous mode [ 904.387042][ T7185] syzkaller0: entered allmulticast mode [ 904.844404][ T7232] gtp4: entered promiscuous mode [ 904.851291][ T7232] gtp4: entered allmulticast mode [ 905.772161][ T7277] ip_vti0: entered promiscuous mode [ 905.777477][ T7277] __nla_validate_parse: 34 callbacks suppressed [ 905.777496][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11802'. [ 906.194415][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11811'. [ 906.223991][ T7316] block nbd0: NBD_DISCONNECT [ 906.224033][ T7316] block nbd0: Send disconnect failed -32 [ 906.224067][ T7316] block nbd0: shutting down sockets [ 906.320099][ T7325] netlink: 'syz.3.11814': attribute type 3 has an invalid length. [ 906.599209][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11818'. [ 906.599248][ T7336] nbd: must specify at least one socket [ 906.621654][ T7344] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11820'. [ 906.631177][ T7343] ipvlan3: entered allmulticast mode [ 906.631200][ T7343] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 906.636948][ T7343] batman_adv: batadv0: Adding interface: ipvlan3 [ 906.636964][ T7343] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.637062][ T7343] batman_adv: batadv0: Interface activated: ipvlan3 [ 906.836322][ T7354] netlink: 'syz.3.11826': attribute type 1 has an invalid length. [ 906.836488][ T7353] netlink: 'syz.3.11826': attribute type 1 has an invalid length. [ 907.016410][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11828'. [ 907.016451][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11828'. [ 907.040270][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11827'. [ 907.046408][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11828'. [ 907.046430][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11828'. [ 907.084358][ T7354] 8021q: adding VLAN 0 to HW filter on device bond45 [ 907.269971][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11829'. [ 907.390219][ T7384] 8021q: adding VLAN 0 to HW filter on device bond24 [ 907.659175][ T7403] ip6tnl0: Caught tx_queue_len zero misconfig [ 907.971478][ T7424] 8021q: adding VLAN 0 to HW filter on device bond46 [ 908.410182][ T7456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.473214][ T7456] syzkaller0: entered promiscuous mode [ 908.473257][ T7456] syzkaller0: entered allmulticast mode [ 908.525074][ T7467] netlink: 'syz.0.11859': attribute type 83 has an invalid length. [ 908.795803][ T7478] netlink: 'syz.4.11863': attribute type 83 has an invalid length. [ 908.875316][ T7479] bond36: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 908.899087][ T7479] bond36 (unregistering): Released all slaves [ 908.905462][ T7484] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 908.906515][ T7484] sctp: [Deprecated]: syz.3.11867 (pid 7484) Use of int in max_burst socket option. [ 908.906515][ T7484] Use struct sctp_assoc_value instead [ 909.163045][ T7501] FAULT_INJECTION: forcing a failure. [ 909.163045][ T7501] name failslab, interval 1, probability 0, space 0, times 0 [ 909.163092][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.3.11871 Not tainted syzkaller #0 PREEMPT(full) [ 909.163108][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 909.163116][ T7501] Call Trace: [ 909.163122][ T7501] [ 909.163128][ T7501] dump_stack_lvl+0xe8/0x150 [ 909.163152][ T7501] should_fail_ex+0x410/0x560 [ 909.163176][ T7501] should_failslab+0xa8/0x100 [ 909.163193][ T7501] __kmalloc_noprof+0xfe/0x720 [ 909.163212][ T7501] ? rcu_is_watching+0x16/0xb0 [ 909.163227][ T7501] ? tomoyo_realpath_from_path+0xef/0x640 [ 909.163242][ T7501] ? tomoyo_realpath_from_path+0xef/0x640 [ 909.163262][ T7501] tomoyo_realpath_from_path+0xef/0x640 [ 909.163285][ T7501] ? tomoyo_path_number_perm+0x219/0x5f0 [ 909.163306][ T7501] tomoyo_path_number_perm+0x246/0x5f0 [ 909.163328][ T7501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 909.163345][ T7501] ? __lock_acquire+0x6df/0x2e50 [ 909.163370][ T7501] ? hook_file_ioctl+0x1f2/0x600 [ 909.163399][ T7501] ? __fget_files+0x2a/0x420 [ 909.163419][ T7501] ? __fget_files+0x2a/0x420 [ 909.163435][ T7501] ? __fget_files+0x3a2/0x420 [ 909.163451][ T7501] ? __fget_files+0x2a/0x420 [ 909.163471][ T7501] security_file_ioctl+0xc3/0x2a0 [ 909.163494][ T7501] __se_sys_ioctl+0x47/0x170 [ 909.163511][ T7501] do_syscall_64+0x166/0x520 [ 909.163533][ T7501] ? trace_irq_disable+0x3b/0x140 [ 909.163546][ T7501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.163561][ T7501] ? clear_bhb_loop+0x70/0xc0 [ 909.163578][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.163592][ T7501] RIP: 0033:0x7f5158b9e159 [ 909.163606][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.163618][ T7501] RSP: 002b:00007f51599a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.163634][ T7501] RAX: ffffffffffffffda RBX: 00007f5158e25fa0 RCX: 00007f5158b9e159 [ 909.163644][ T7501] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 909.163652][ T7501] RBP: 00007f51599a1090 R08: 0000000000000000 R09: 0000000000000000 [ 909.163660][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.163669][ T7501] R13: 00007f5158e26038 R14: 00007f5158e25fa0 R15: 00007fff2d08d468 [ 909.163692][ T7501] [ 909.167058][ T7501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 909.330133][ T7498] ip6t_frag: unknown flags 5 [ 909.551381][ T7512] xt_hashlimit: size too large, truncated to 1048576 [ 909.726108][ T7535] xt_hashlimit: size too large, truncated to 1048576 [ 909.741406][ T7519] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 910.061222][ T7548] netlink: 'syz.3.11881': attribute type 7 has an invalid length. [ 910.077449][ T7541] bond46: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 910.093179][ T7541] bond46 (unregistering): Released all slaves [ 910.116102][ T7554] FAULT_INJECTION: forcing a failure. [ 910.116102][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 910.116153][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.4.11883 Not tainted syzkaller #0 PREEMPT(full) [ 910.116172][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 910.116181][ T7554] Call Trace: [ 910.116187][ T7554] [ 910.116193][ T7554] dump_stack_lvl+0xe8/0x150 [ 910.116218][ T7554] should_fail_ex+0x410/0x560 [ 910.116249][ T7554] should_failslab+0xa8/0x100 [ 910.116272][ T7554] __kmalloc_noprof+0xfe/0x720 [ 910.116299][ T7554] ? tomoyo_encode+0x2ad/0x570 [ 910.116319][ T7554] ? tomoyo_encode+0x2ad/0x570 [ 910.116346][ T7554] tomoyo_encode+0x2ad/0x570 [ 910.116371][ T7554] tomoyo_realpath_from_path+0x5fa/0x640 [ 910.116401][ T7554] ? tomoyo_path_number_perm+0x219/0x5f0 [ 910.116436][ T7554] tomoyo_path_number_perm+0x246/0x5f0 [ 910.116464][ T7554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 910.116490][ T7554] ? __lock_acquire+0x6df/0x2e50 [ 910.116522][ T7554] ? hook_file_ioctl+0x1f2/0x600 [ 910.116559][ T7554] ? __fget_files+0x2a/0x420 [ 910.116585][ T7554] ? __fget_files+0x2a/0x420 [ 910.116605][ T7554] ? __fget_files+0x3a2/0x420 [ 910.116625][ T7554] ? __fget_files+0x2a/0x420 [ 910.116651][ T7554] security_file_ioctl+0xc3/0x2a0 [ 910.116678][ T7554] __se_sys_ioctl+0x47/0x170 [ 910.116698][ T7554] do_syscall_64+0x166/0x520 [ 910.116723][ T7554] ? trace_irq_disable+0x3b/0x140 [ 910.116740][ T7554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.116758][ T7554] ? clear_bhb_loop+0x70/0xc0 [ 910.116780][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.116797][ T7554] RIP: 0033:0x7fcfd859e159 [ 910.116813][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.116829][ T7554] RSP: 002b:00007fcfd953b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.116848][ T7554] RAX: ffffffffffffffda RBX: 00007fcfd8825fa0 RCX: 00007fcfd859e159 [ 910.116861][ T7554] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 910.116873][ T7554] RBP: 00007fcfd953b090 R08: 0000000000000000 R09: 0000000000000000 [ 910.116885][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.116896][ T7554] R13: 00007fcfd8826038 R14: 00007fcfd8825fa0 R15: 00007ffd7587d028 [ 910.116925][ T7554] [ 910.117090][ T7554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 910.174175][ T7548] netlink: 'syz.3.11881': attribute type 7 has an invalid length. [ 910.176406][ T7548] netlink: 'syz.3.11881': attribute type 7 has an invalid length. [ 910.373581][ T7548] netlink: 'syz.3.11881': attribute type 7 has an invalid length. [ 910.378302][ T7548] netlink: 'syz.3.11881': attribute type 7 has an invalid length. [ 910.416466][ T7558] syzkaller0: entered allmulticast mode [ 910.434598][ T7558] tipc: Enabling of bearer rejected, already enabled [ 913.676460][ T7601] bond46: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 913.687881][ T7601] bond46 (unregistering): Released all slaves [ 913.724013][ T7604] validate_nla: 35 callbacks suppressed [ 913.724061][ T7604] netlink: 'syz.4.11895': attribute type 39 has an invalid length. [ 913.772797][ T7614] netlink: 'syz.0.11897': attribute type 1 has an invalid length. [ 913.780955][ T7614] __nla_validate_parse: 88 callbacks suppressed [ 913.787298][ T7614] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11897'. [ 913.804174][ T7614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11897'. [ 913.856181][ T7614] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 913.874165][ T7614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11897'. [ 914.190552][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11899'. [ 914.464068][ T7645] syzkaller0: left promiscuous mode [ 914.464113][ T7645] syzkaller0: left allmulticast mode [ 914.544714][ T7648] bond27: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 914.561742][ T7648] bond27 (unregistering): Released all slaves [ 914.666615][ T7661] bond0: invalid NS target :: specified for addition [ 914.666660][ T7661] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 914.907185][ T7674] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11913'. [ 914.924731][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11913'. [ 914.944770][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11913'. [ 915.117955][ T7692] syzkaller0: entered promiscuous mode [ 915.124828][ T7692] syzkaller0: entered allmulticast mode [ 915.134671][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11920'. [ 915.157955][ T7692] tipc: Resetting bearer [ 915.291816][ T7692] tipc: Disabling bearer [ 915.412554][ T7707] 8021q: adding VLAN 0 to HW filter on device bond49 [ 915.616256][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11930'. [ 915.626365][ T7723] netlink: 'syz.4.11930': attribute type 7 has an invalid length. [ 915.635224][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11930'. [ 915.648628][ T7723] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 916.225852][ T7760] netlink: 'syz.2.11940': attribute type 24 has an invalid length. [ 916.726214][ T7781] bond46: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 916.743855][ T7781] bond46 (unregistering): Released all slaves [ 916.864394][ T7797] netlink: 'syz.3.11945': attribute type 10 has an invalid length. [ 916.939546][ T7801] tc_dump_action: action bad kind [ 917.133183][ T7818] 8021q: adding VLAN 0 to HW filter on device bond37 [ 917.365347][ T7831] Cannot find del_set index 3 as target [ 917.438419][ T7841] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 917.664367][ T7856] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 918.759084][ T7941] batadv_slave_1: entered promiscuous mode [ 918.763796][ T7938] batadv_slave_1: left promiscuous mode [ 918.907517][ T7945] __nla_validate_parse: 74 callbacks suppressed [ 918.907568][ T7945] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11988'. [ 919.321999][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11997'. [ 919.336319][ T7972] netlink: 'syz.0.11999': attribute type 1 has an invalid length. [ 919.350963][ T7958] tipc: Disabling bearer [ 919.440237][ T7962] tc_dump_action: action bad kind [ 919.462458][ T7978] bridge0: entered promiscuous mode [ 919.468343][ T7978] vlan0: entered promiscuous mode [ 919.474183][ T7978] geneve0: entered promiscuous mode [ 919.479855][ T7978] bridge0: entered allmulticast mode [ 919.525941][ T7972] bond27: entered promiscuous mode [ 919.532670][ T7972] 8021q: adding VLAN 0 to HW filter on device bond27 [ 919.571253][ T7983] 8021q: adding VLAN 0 to HW filter on device bond27 [ 919.571684][ T7983] bond27: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 919.571729][ T7983] bond27: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 919.622701][ T7983] bond27: (slave ip6gre4): making interface the new active one [ 919.622749][ T7983] ip6gre4: entered promiscuous mode [ 919.637230][ T7983] bond27: (slave ip6gre4): Enslaving as an active interface with an up link [ 919.991357][ T8012] 8021q: adding VLAN 0 to HW filter on device bond50 [ 920.057283][ T8017] netlink: 'syz.3.12011': attribute type 1 has an invalid length. [ 920.084849][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12011'. [ 920.538679][ T8043] 8021q: adding VLAN 0 to HW filter on device bond36 [ 920.701372][ T8053] netlink: 'syz.4.12026': attribute type 10 has an invalid length. [ 920.755120][ T8063] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 920.772142][ T8063] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12030'. [ 920.812403][ T8065] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 920.876127][ T8063] bond28 (unregistering): Released all slaves [ 920.978222][ T8079] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 921.006949][ T8081] ip_tables: iptables: counters copy to user failed while replacing table [ 921.067287][ T8087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12037'. [ 921.232631][ T8092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12038'. [ 921.232675][ T8092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12038'. [ 921.417436][ T8094] 8021q: adding VLAN 0 to HW filter on device bond37 [ 921.678843][ T8109] bridge_slave_1: default FDB implementation only supports local addresses [ 921.796392][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12046'. [ 921.913806][ T8125] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 921.933185][ T8125] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12049'. [ 921.933232][ T8125] nbd: illegal input index -8454144 [ 921.935260][ T8125] openvswitch: netlink: Missing key (keys=40, expected=100) [ 922.097887][ T8134] openvswitch: netlink: IP tunnel dst address not specified [ 922.224180][ T8136] 8021q: adding VLAN 0 to HW filter on device bond52 [ 922.557694][ T8158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12058'. [ 922.593712][ T8164] netlink: 'syz.0.12059': attribute type 11 has an invalid length. [ 922.886146][ T8180] netlink: 'syz.0.12064': attribute type 1 has an invalid length. [ 922.982499][ T8180] 8021q: adding VLAN 0 to HW filter on device bond28 [ 923.146946][ T8188] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 923.146997][ T8188] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 923.202406][ T8196] Bluetooth: hci0: unsupported parameter 5135 [ 923.202454][ T8196] Bluetooth: hci0: unsupported parameter 8192 [ 923.202483][ T8196] Bluetooth: hci0: unsupported parameter 5135 [ 923.202495][ T8196] Bluetooth: hci0: unsupported parameter 8192 [ 923.598304][ T8213] netlink: 'syz.1.12076': attribute type 21 has an invalid length. [ 923.996321][ T8240] __nla_validate_parse: 54 callbacks suppressed [ 923.996377][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12084'. [ 924.031269][ T8248] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12088'. [ 924.580024][ T8296] FAULT_INJECTION: forcing a failure. [ 924.580024][ T8296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.581246][ T8296] CPU: 0 UID: 0 PID: 8296 Comm: syz.3.12105 Not tainted syzkaller #0 PREEMPT(full) [ 924.581269][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 924.581280][ T8296] Call Trace: [ 924.581288][ T8296] [ 924.581296][ T8296] dump_stack_lvl+0xe8/0x150 [ 924.581326][ T8296] should_fail_ex+0x410/0x560 [ 924.581358][ T8296] _copy_from_user+0x2d/0xb0 [ 924.581380][ T8296] ___sys_sendmsg+0x1c6/0x360 [ 924.581399][ T8296] ? __lock_acquire+0x6df/0x2e50 [ 924.581422][ T8296] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.581472][ T8296] ? __fget_files+0x2a/0x420 [ 924.581494][ T8296] ? __fget_files+0x3a2/0x420 [ 924.581526][ T8296] __x64_sys_sendmsg+0x1b1/0x290 [ 924.581547][ T8296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 924.581585][ T8296] do_syscall_64+0x166/0x520 [ 924.581611][ T8296] ? trace_irq_disable+0x3b/0x140 [ 924.581628][ T8296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.581646][ T8296] ? clear_bhb_loop+0x70/0xc0 [ 924.581668][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.581685][ T8296] RIP: 0033:0x7f5158b9e159 [ 924.581709][ T8296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.581725][ T8296] RSP: 002b:00007f51599a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.581744][ T8296] RAX: ffffffffffffffda RBX: 00007f5158e25fa0 RCX: 00007f5158b9e159 [ 924.581757][ T8296] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 924.581769][ T8296] RBP: 00007f51599a1090 R08: 0000000000000000 R09: 0000000000000000 [ 924.581780][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.581791][ T8296] R13: 00007f5158e26038 R14: 00007f5158e25fa0 R15: 00007fff2d08d468 [ 924.581819][ T8296] [ 924.964964][ T8316] netlink: 776 bytes leftover after parsing attributes in process `syz.0.12109'. [ 924.965013][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12109'. [ 925.282133][ T8330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.612889][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.612927][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.612960][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.612974][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.613159][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.613173][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.613186][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.613199][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.613402][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.613418][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.613431][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.613445][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.613654][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.613669][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.613683][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.613697][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.613882][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.613897][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.613909][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.613922][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.614110][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.614126][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.614140][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.614154][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.614346][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.614363][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.614377][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.614390][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.654092][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.654114][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.654125][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.654136][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.654313][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.654324][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.654334][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.654345][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.654518][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.654529][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.654539][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.654550][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.654727][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.654737][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.654747][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.654757][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.655019][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.655031][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.655041][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.655051][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.655221][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.655232][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.655242][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.655253][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.655426][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.655437][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.657765][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.657781][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.657984][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.657996][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.658006][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.658016][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.658190][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.658201][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.658210][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.658221][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.658396][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.658407][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.658418][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.658428][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.658630][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.658642][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.658651][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.658661][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.658940][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.658952][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.658961][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.658972][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.659145][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.659156][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.659166][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.659177][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.667114][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.667132][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.667143][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.667153][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.667369][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.667381][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.667391][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.667402][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.667574][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.667585][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.667595][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.667605][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.685851][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.685868][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.685879][ T8346] Bluetooth: hci0: unsupported parameter 5135 [ 925.685890][ T8346] Bluetooth: hci0: unsupported parameter 8192 [ 925.815967][ T8341] netlink: 'syz.4.12113': attribute type 1 has an invalid length. [ 925.815987][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12113'. [ 926.499245][ T8372] netlink: Failed to add  helper -22 [ 926.499298][ T8372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.095128][ T8392] openvswitch: netlink: Message has 1 unknown bytes. [ 927.786600][ T8303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 928.017983][ T8404] netlink: 'syz.3.12130': attribute type 1 has an invalid length. [ 928.075692][ T8404] 8021q: adding VLAN 0 to HW filter on device bond53 [ 928.111573][ T8414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.135589][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12129'. [ 928.167829][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12129'. [ 928.229891][ T8419] tipc: Bearer : already 2 bearers with priority 10 [ 928.229932][ T8419] tipc: Bearer : trying with adjusted priority [ 928.229958][ T8419] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 928.233197][ T8404] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 928.233235][ T8404] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 928.534664][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12135'. [ 928.534703][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12135'. [ 928.813125][ T8460] netlink: 'syz.3.12142': attribute type 9 has an invalid length. [ 928.918531][ T8460] netlink: 'syz.3.12142': attribute type 11 has an invalid length. [ 928.927208][ T8460] netlink: 'syz.3.12142': attribute type 4 has an invalid length. [ 928.927258][ T8460] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12142'. [ 929.040850][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12146'. [ 929.733580][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12158'. [ 929.762271][ T8513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12156'. [ 929.763344][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12156'. [ 929.841805][ T8518] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12161'. [ 929.857542][ T8518] netlink: 'syz.2.12161': attribute type 2 has an invalid length. [ 929.910721][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12162'. [ 929.919675][ T8527] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 930.292509][ T8552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12168'. [ 930.451648][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12173'. [ 930.613698][ T8566] netlink: 'syz.1.12176': attribute type 1 has an invalid length. [ 930.667390][ T8570] xt_SECMARK: invalid mode: 9 [ 930.675637][ T8566] 8021q: adding VLAN 0 to HW filter on device bond38 [ 930.695638][ T8572] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12179'. [ 930.705027][ T8572] gretap0: entered promiscuous mode [ 930.748831][ T8566] bond38: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 930.791114][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12180'. [ 931.301273][ T8597] 8021q: adding VLAN 0 to HW filter on device bond29 [ 931.443984][ T8606] macvlan0: entered promiscuous mode [ 931.559996][ T8599] ip_tables: iptables: counters copy to user failed while replacing table [ 931.896173][ T8621] bond47: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 931.912543][ T8621] bond47 (unregistering): Released all slaves [ 932.275727][ T8632] xt_CT: No such helper "snmp" [ 932.595663][ T8658] bridge0: left allmulticast mode [ 932.917225][ T8665] netlink: 'syz.3.12208': attribute type 4 has an invalid length. [ 932.919241][ T8665] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 933.209179][ T8670] bond54: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 933.232760][ T8670] bond54 (unregistering): Released all slaves [ 933.398384][ T8675] netlink: zone id is out of range [ 933.405637][ T8675] netlink: zone id is out of range [ 933.411098][ T8675] netlink: zone id is out of range [ 933.416847][ T8675] netlink: zone id is out of range [ 933.424351][ T8675] netlink: zone id is out of range [ 933.424396][ T8675] netlink: zone id is out of range [ 933.424718][ T8675] netlink: zone id is out of range [ 933.424734][ T8675] netlink: zone id is out of range [ 933.554929][ T8687] macvlan0: left promiscuous mode [ 933.555118][ T8687] netlink: 'syz.0.12214': attribute type 1 has an invalid length. [ 933.555134][ T8687] netlink: 'syz.0.12214': attribute type 2 has an invalid length. [ 933.797179][ T31] audit: type=1800 audit(1788636635.093:11): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12218" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=11929 res=0 errno=0 [ 933.909093][ T8712] netlink: 'syz.1.12222': attribute type 3 has an invalid length. [ 934.195333][ T8725] bond39: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 934.209072][ T8725] bond39 (unregistering): Released all slaves [ 934.308934][ T8739] __nla_validate_parse: 11 callbacks suppressed [ 934.315793][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12232'. [ 934.325980][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12232'. [ 934.326046][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12232'. [ 934.456083][ T8740] 0· speed is unknown, defaulting to 1000 [ 934.464708][ T8740] wlan0 speed is unknown, defaulting to 1000 [ 934.473844][ T8740] lo speed is unknown, defaulting to 1000 [ 934.510881][ T8735] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 934.791238][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12237'. [ 935.348168][ T8787] netlink: 252 bytes leftover after parsing attributes in process `syz.3.12244'. [ 935.358627][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12244'. [ 935.564776][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12251'. [ 935.706771][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12253'. [ 935.764957][ T8812] netlink: 'syz.1.12254': attribute type 1 has an invalid length. [ 935.842823][ T8812] 8021q: adding VLAN 0 to HW filter on device bond39 [ 935.917005][ T8816] bond39: (slave gretap5): making interface the new active one [ 935.954132][ T8816] bond39: (slave gretap5): Enslaving as an active interface with an up link [ 936.253928][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12260'. [ 936.295373][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12257'. [ 936.339336][ T8823] 8021q: VLANs not supported on ip6tnl0 [ 939.172331][ T8839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 939.445826][ T8883] netlink: 'syz.4.12268': attribute type 6 has an invalid length. [ 939.504931][ T8885] __nla_validate_parse: 2 callbacks suppressed [ 939.504984][ T8885] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12270'. [ 939.524788][ T8885] 0ªX¹¦Dö»: entered promiscuous mode [ 939.524832][ T8885] 0ªX¹¦Dö»: left allmulticast mode [ 939.557289][ T8885] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12270'. [ 939.576511][ T8885] 0ªî{X¹¦: renamed from 00ªX¹¦Dö» [ 939.586664][ T8885] 0ªî{X¹¦: left promiscuous mode [ 939.586704][ T8885] 0ªî{X¹¦: entered allmulticast mode [ 939.601808][ T8885] net_ratelimit: 25 callbacks suppressed [ 939.609355][ T8885] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 939.709545][ T8899] Cannot find del_set index 3 as target [ 939.781592][ T8905] xt_LOG: level 8 >= 8 [ 939.799602][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12278'. [ 939.814953][ T8905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 939.815468][ T8905] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12278'. [ 940.041644][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12281'. [ 940.052132][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12281'. [ 940.052153][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12281'. [ 940.074483][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12281'. [ 940.085972][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12281'. [ 940.096740][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12281'. [ 940.633147][ T8958] netlink: 'syz.1.12287': attribute type 1 has an invalid length. [ 940.665792][ T8968] ip6t_rt: unknown flags 36 [ 940.901197][ T8975] syzkaller1: entered promiscuous mode [ 940.901242][ T8975] syzkaller1: entered allmulticast mode [ 941.577245][ T9020] netlink: 'syz.0.12304': attribute type 2 has an invalid length. [ 941.577282][ T9020] netlink: 'syz.0.12304': attribute type 8 has an invalid length. [ 941.580102][ T9020] netlink: 'syz.0.12304': attribute type 2 has an invalid length. [ 941.580119][ T9020] netlink: 'syz.0.12304': attribute type 8 has an invalid length. [ 941.580270][ T9020] netlink: 'syz.0.12304': attribute type 2 has an invalid length. [ 941.580282][ T9020] netlink: 'syz.0.12304': attribute type 8 has an invalid length. [ 941.586615][ T9020] netlink: 'syz.0.12304': attribute type 2 has an invalid length. [ 941.586633][ T9020] netlink: 'syz.0.12304': attribute type 8 has an invalid length. [ 941.822254][ T9029] netlink: zone id is out of range [ 941.827499][ T9029] netlink: set zone limit has 4 unknown bytes [ 942.672123][ T9086] xt_IDLETIMER: timeout value is zero [ 942.830602][ T6600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.830637][ T6600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.927762][ T9157] team0: entered promiscuous mode [ 943.927800][ T9157] team_slave_1: entered promiscuous mode [ 944.075712][ T9161] bond38: option lp_interval: invalid value (0) [ 944.086080][ T9161] bond38: option lp_interval: allowed values 1 - 2147483647 [ 944.114919][ T9161] bond38 (unregistering): Released all slaves [ 944.196393][ T9174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.284976][ T9174] bridge15: entered promiscuous mode [ 944.290856][ T9174] bridge15: entered allmulticast mode [ 944.397389][ T9189] block nbd296: server does not support multiple connections per device. [ 944.410686][ T9189] block nbd296: shutting down sockets [ 944.975189][ T9232] xt_check_target_common: 1 callbacks suppressed [ 944.982435][ T9232] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 944.996739][ T9225] __nla_validate_parse: 31 callbacks suppressed [ 944.996758][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12361'. [ 945.017378][ T9232] syzkaller0: left allmulticast mode [ 945.202957][ T9242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12365'. [ 945.214385][ T9242] syzkaller1: entered promiscuous mode [ 945.219988][ T9242] syzkaller1: entered allmulticast mode [ 945.434361][ T9252] validate_nla: 23 callbacks suppressed [ 945.434437][ T9252] netlink: 'syz.1.12368': attribute type 1 has an invalid length. [ 945.435293][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12368'. [ 945.443144][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12368'. [ 945.443175][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12368'. [ 945.568136][ T9260] tipc: Enabling of bearer rejected, already enabled [ 945.584478][ T9254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.597856][ T9268] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12371'. [ 945.606714][ T9254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.607844][ T9260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.630201][ T9254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.743321][ T9271] netlink: 'syz.4.12377': attribute type 4 has an invalid length. [ 945.770018][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12378'. [ 945.775591][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12376'. [ 945.827752][ T9278] openvswitch: netlink: Duplicate or invalid key (type 0). [ 945.898752][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12379'. [ 946.105770][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12384'. [ 946.566075][ T9325] openvswitch: netlink: Message has 8 unknown bytes. [ 946.657300][ T9329] IPVS: Unknown mcast interface: vcan0 [ 946.683825][ T6596] .`: (slave bond0): link status definitely down, disabling slave [ 946.741333][ T6596] .`: now running without any active interface! [ 946.835010][ T9341] openvswitch: netlink: Duplicate or invalid key (type 0). [ 947.023039][ T9348] syzkaller0: entered allmulticast mode [ 947.272102][ T9375] tipc: Enabled bearer , priority 0 [ 947.290203][ T9376] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 947.302126][ T9376] 1ªî{X¹¦: entered allmulticast mode [ 947.309265][ T9376] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 947.389447][ T9382] vlan5: entered promiscuous mode [ 947.393426][ T9384] netlink: 'syz.4.12402': attribute type 13 has an invalid length. [ 947.547155][ T9390] batman_adv: batadv0: Adding interface: gretap4 [ 947.553749][ T9390] batman_adv: batadv0: The MTU of interface gretap4 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.582663][ T9390] batman_adv: batadv0: Interface activated: gretap4 [ 948.098207][ T9422] x_tables: duplicate underflow at hook 3 [ 948.110915][ T9425] x_tables: duplicate underflow at hook 3 [ 948.119084][ T9427] syzkaller0: entered promiscuous mode [ 948.119122][ T9427] syzkaller0: entered allmulticast mode [ 948.544004][ T9441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.812644][ T9460] syzkaller1: entered promiscuous mode [ 948.812683][ T9460] syzkaller1: entered allmulticast mode [ 949.386296][ T9499] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 949.564963][ T9508] tipc: Enabling of bearer rejected, already enabled [ 949.827990][ T9525] block nbd0: not configured, cannot reconfigure [ 950.005125][ T9542] __nla_validate_parse: 13 callbacks suppressed [ 950.005185][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12443'. [ 950.137463][ T9553] pimreg3: entered allmulticast mode [ 950.176198][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12445'. [ 950.369916][ T9570] FAULT_INJECTION: forcing a failure. [ 950.369916][ T9570] name failslab, interval 1, probability 0, space 0, times 0 [ 950.369961][ T9570] CPU: 0 UID: 0 PID: 9570 Comm: syz.4.12451 Not tainted syzkaller #0 PREEMPT(full) [ 950.369980][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.369990][ T9570] Call Trace: [ 950.369997][ T9570] [ 950.370005][ T9570] dump_stack_lvl+0xe8/0x150 [ 950.370032][ T9570] should_fail_ex+0x410/0x560 [ 950.370059][ T9570] ? __alloc_skb+0x1db/0x7a0 [ 950.370082][ T9570] should_failslab+0xa8/0x100 [ 950.370101][ T9570] ? __alloc_skb+0x1db/0x7a0 [ 950.370120][ T9570] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 950.370142][ T9570] ? __alloc_skb+0x18d/0x7a0 [ 950.370163][ T9570] ? __alloc_skb+0x1db/0x7a0 [ 950.370190][ T9570] __alloc_skb+0x1db/0x7a0 [ 950.370216][ T9570] netlink_sendmsg+0x5d4/0xb40 [ 950.370244][ T9570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.370269][ T9570] ? apparmor_socket_sendmsg+0x98/0x360 [ 950.370295][ T9570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.370312][ T9570] sock_sendmsg_nosec+0x13a/0x180 [ 950.370340][ T9570] ____sys_sendmsg+0x54e/0x850 [ 950.370363][ T9570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 950.370387][ T9570] ? import_iovec+0x73/0xa0 [ 950.370408][ T9570] ___sys_sendmsg+0x2a5/0x360 [ 950.370423][ T9570] ? __lock_acquire+0x6df/0x2e50 [ 950.370443][ T9570] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.370491][ T9570] ? __fget_files+0x2a/0x420 [ 950.370510][ T9570] ? __fget_files+0x3a2/0x420 [ 950.370538][ T9570] __x64_sys_sendmsg+0x1b1/0x290 [ 950.370557][ T9570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 950.370592][ T9570] do_syscall_64+0x166/0x520 [ 950.370613][ T9570] ? trace_irq_disable+0x3b/0x140 [ 950.370629][ T9570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.370645][ T9570] ? clear_bhb_loop+0x70/0xc0 [ 950.370664][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.370679][ T9570] RIP: 0033:0x7fcfd859e159 [ 950.370695][ T9570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.370708][ T9570] RSP: 002b:00007fcfd953b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.370726][ T9570] RAX: ffffffffffffffda RBX: 00007fcfd8825fa0 RCX: 00007fcfd859e159 [ 950.370737][ T9570] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 950.370747][ T9570] RBP: 00007fcfd953b090 R08: 0000000000000000 R09: 0000000000000000 [ 950.370758][ T9570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.370767][ T9570] R13: 00007fcfd8826038 R14: 00007fcfd8825fa0 R15: 00007ffd7587d028 [ 950.370794][ T9570] [ 950.498758][ T9569] syzkaller0: entered promiscuous mode [ 950.498778][ T9569] syzkaller0: entered allmulticast mode [ 950.527906][ T9569] tipc: Enabled bearer , priority 0 [ 950.540048][ T9566] tipc: Resetting bearer [ 950.675046][ T9566] tipc: Disabling bearer [ 950.734199][ T9581] netlink: 'syz.3.12452': attribute type 16 has an invalid length. [ 950.734251][ T9581] netlink: 'syz.3.12452': attribute type 2 has an invalid length. [ 950.734279][ T9581] netlink: 64110 bytes leftover after parsing attributes in process `syz.3.12452'. [ 950.763946][ T9581] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12452'. [ 950.783323][ T9576] 0· speed is unknown, defaulting to 1000 [ 950.799051][ T9576] wlan0 speed is unknown, defaulting to 1000 [ 950.813552][ T9576] lo speed is unknown, defaulting to 1000 [ 950.871082][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12457'. [ 951.040243][ T9598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12459'. [ 951.350588][ T9622] netlink: 'syz.2.12462': attribute type 6 has an invalid length. [ 951.370955][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12466'. [ 951.455086][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12460'. [ 951.555164][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12468'. [ 951.794575][ T9641] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12471'. [ 951.833718][ T9630] x_tables: duplicate underflow at hook 1 [ 951.893632][ T9644] netlink: 'syz.4.12472': attribute type 2 has an invalid length. [ 952.187825][ T9663] Cannot find del_set index 3 as target [ 952.262423][ T9670] tipc: MTU too low for tipc bearer [ 952.362590][ T9676] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 952.535825][ T9682] block nbd0: Unsupported socket: should be TCP or UNIX. [ 953.506957][ T9748] netlink: 'syz.0.12507': attribute type 10 has an invalid length. [ 954.055902][ T9783] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 954.873835][ T9849] x_tables: duplicate underflow at hook 1 [ 955.019202][ T9856] __nla_validate_parse: 9 callbacks suppressed [ 955.019259][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12535'. [ 955.203278][ T9861] syzkaller0: entered promiscuous mode [ 955.203322][ T9861] syzkaller0: entered allmulticast mode [ 955.485823][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12539'. [ 955.732531][ T9896] tipc: Enabled bearer , priority 0 [ 956.005014][ T9911] netlink: 808 bytes leftover after parsing attributes in process `syz.1.12548'. [ 956.013382][ T9908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12547'. [ 956.150712][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12551'. [ 956.214958][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12552'. [ 956.215060][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12552'. [ 956.632530][ T9956] IPv6: NLM_F_CREATE should be specified when creating new route [ 956.658699][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12560'. [ 956.765935][ T9948] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12560'. [ 956.788119][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12562'. [ 957.143700][ T9987] debugfs: '1ùà^!' already exists in 'ieee80211' [ 957.401842][T10008] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 957.401894][T10008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.994610][T10055] mac80211_hwsim hwsim23 ÿ: renamed from wlan1 [ 958.062734][T10065] Bluetooth: hci0: unsupported parameter 5135 [ 958.069018][T10065] Bluetooth: hci0: unsupported parameter 8192 [ 958.077580][T10065] Bluetooth: hci0: unsupported parameter 5135 [ 958.083885][T10065] Bluetooth: hci0: unsupported parameter 8192 [ 958.138312][T10070] x_tables: duplicate underflow at hook 1 [ 958.183315][T10070] x_tables: unsorted underflow at hook 2 [ 958.233353][T10074] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 958.253948][T10076] netlink: 'syz.0.12599': attribute type 11 has an invalid length. [ 958.405632][T10084] netlink: 'syz.1.12601': attribute type 10 has an invalid length. [ 1016.107660][T10118] __nla_validate_parse: 14 callbacks suppressed [ 1016.107707][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12604'. [ 1016.251293][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1016.351761][T10138] tipc: Enabling of bearer rejected, already enabled [ 1016.506102][T10146] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1016.720913][T10159] syzkaller1: entered promiscuous mode [ 1016.720952][T10159] syzkaller1: entered allmulticast mode [ 1016.956454][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'. [ 1017.023351][T10178] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1017.063080][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12629'. [ 1017.077111][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12629'. [ 1017.109919][T10181] syzkaller0: entered promiscuous mode [ 1017.109957][T10181] syzkaller0: entered allmulticast mode [ 1017.134608][T10181] tipc: Enabled bearer , priority 0 [ 1017.144830][T10187] sctp: [Deprecated]: syz.0.12633 (pid 10187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1017.144830][T10187] Use struct sctp_sack_info instead [ 1017.145283][T10180] tipc: Resetting bearer [ 1017.215519][T10180] tipc: Disabling bearer [ 1017.420747][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12638'. [ 1017.527815][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12642'. [ 1017.604831][T10226] netlink: 244 bytes leftover after parsing attributes in process `syz.3.12641'. [ 1017.684747][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12645'. [ 1017.893552][T10239] FAULT_INJECTION: forcing a failure. [ 1017.893552][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.909119][T10239] CPU: 0 UID: 0 PID: 10239 Comm: syz.1.12647 Not tainted syzkaller #0 PREEMPT(full) [ 1017.909145][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1017.909157][T10239] Call Trace: [ 1017.909166][T10239] [ 1017.909175][T10239] dump_stack_lvl+0xe8/0x150 [ 1017.909210][T10239] should_fail_ex+0x410/0x560 [ 1017.909247][T10239] _copy_from_user+0x2d/0xb0 [ 1017.909270][T10239] do_ipv6_setsockopt+0x249/0x3180 [ 1017.909296][T10239] ? get_pid_task+0x20/0x1f0 [ 1017.909323][T10239] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1017.909341][T10239] ? aa_inet_opt_perm+0xae4/0xcf0 [ 1017.909363][T10239] ? get_pid_task+0x20/0x1f0 [ 1017.909388][T10239] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1017.909454][T10239] ? ksys_write+0x1e6/0x270 [ 1017.909507][T10239] ? lock_acquire+0x115/0x350 [ 1017.909537][T10239] ? aa_sock_opt_perm+0xe1/0x1e0 [ 1017.909562][T10239] ipv6_setsockopt+0x59/0x170 [ 1017.909579][T10239] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1017.909609][T10239] do_sock_setsockopt+0x17c/0x1b0 [ 1017.909634][T10239] __x64_sys_setsockopt+0x13d/0x1b0 [ 1017.909658][T10239] do_syscall_64+0x166/0x520 [ 1017.909686][T10239] ? trace_irq_disable+0x3b/0x140 [ 1017.909717][T10239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.909737][T10239] ? clear_bhb_loop+0x70/0xc0 [ 1017.909760][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.909779][T10239] RIP: 0033:0x7f98c119e159 [ 1017.909797][T10239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.909826][T10239] RSP: 002b:00007f98c214b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1017.909846][T10239] RAX: ffffffffffffffda RBX: 00007f98c1425fa0 RCX: 00007f98c119e159 [ 1017.909859][T10239] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1017.909870][T10239] RBP: 00007f98c214b090 R08: 00000000000007f8 R09: 0000000000000000 [ 1017.909880][T10239] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.909891][T10239] R13: 00007f98c1426038 R14: 00007f98c1425fa0 R15: 00007ffe6fc7c038 [ 1017.909923][T10239] [ 1018.146935][T10245] syzkaller0: entered promiscuous mode [ 1018.152670][T10245] syzkaller0: entered allmulticast mode [ 1018.163694][T10245] tipc: Enabled bearer , priority 0 [ 1018.173136][T10244] tipc: Resetting bearer [ 1018.228631][T10244] tipc: Disabling bearer [ 1018.248065][T10247] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12650'. [ 1018.382115][T10256] netlink: 'syz.2.12652': attribute type 21 has an invalid length. [ 1018.686122][T10271] xt_limit: Overflow, try lower: 536871034/0 [ 1018.706962][T10273] bond54: Removing last ns target with arp_interval on [ 1018.803602][T10283] FAULT_INJECTION: forcing a failure. [ 1018.803602][T10283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.803658][T10283] CPU: 1 UID: 0 PID: 10283 Comm: syz.1.12659 Not tainted syzkaller #0 PREEMPT(full) [ 1018.803682][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1018.803691][T10283] Call Trace: [ 1018.803696][T10283] [ 1018.803702][T10283] dump_stack_lvl+0xe8/0x150 [ 1018.803728][T10283] should_fail_ex+0x410/0x560 [ 1018.803759][T10283] _copy_from_user+0x2d/0xb0 [ 1018.803780][T10283] do_ip6t_set_ctl+0x74c/0xe30 [ 1018.803902][T10283] ? rcu_is_watching+0x16/0xb0 [ 1018.803925][T10283] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1018.803964][T10283] ? __mutex_unlock_slowpath+0x731/0x900 [ 1018.803997][T10283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1018.804035][T10283] nf_setsockopt+0x26f/0x290 [ 1018.804056][T10283] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1018.804093][T10283] do_sock_setsockopt+0x17c/0x1b0 [ 1018.804116][T10283] __x64_sys_setsockopt+0x13d/0x1b0 [ 1018.804140][T10283] do_syscall_64+0x166/0x520 [ 1018.804164][T10283] ? trace_irq_disable+0x3b/0x140 [ 1018.804181][T10283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.804199][T10283] ? clear_bhb_loop+0x70/0xc0 [ 1018.804221][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.804240][T10283] RIP: 0033:0x7f98c119e159 [ 1018.804257][T10283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.804272][T10283] RSP: 002b:00007f98c214b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1018.804291][T10283] RAX: ffffffffffffffda RBX: 00007f98c1425fa0 RCX: 00007f98c119e159 [ 1018.804304][T10283] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1018.804315][T10283] RBP: 00007f98c214b090 R08: 00000000000007f8 R09: 0000000000000000 [ 1018.804327][T10283] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.804338][T10283] R13: 00007f98c1426038 R14: 00007f98c1425fa0 R15: 00007ffe6fc7c038 [ 1018.804367][T10283] [ 1019.011772][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1019.062875][T10288] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1019.513390][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1019.513449][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1019.513482][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1019.513495][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1019.513511][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1019.513523][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1019.513535][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1019.513548][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1019.513561][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1019.513574][T10297] bond1: Unknown bonding mode 6 for xdp xmit [ 1022.406285][T10305] bond0: entered promiscuous mode [ 1022.406312][T10305] bond13: entered promiscuous mode [ 1022.411627][T10305] bond0: left promiscuous mode [ 1022.411645][T10305] bond13: left promiscuous mode [ 1022.612401][T10332] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 1022.612447][T10332] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1022.878461][T10355] __nla_validate_parse: 3 callbacks suppressed [ 1022.878615][T10355] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.12682'. [ 1022.878697][T10355] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.12682'. [ 1022.978452][T10356] syzkaller0: left promiscuous mode [ 1022.978498][T10356] syzkaller0: left allmulticast mode [ 1023.309514][T10384] FAULT_INJECTION: forcing a failure. [ 1023.309514][T10384] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.309567][T10384] CPU: 0 UID: 0 PID: 10384 Comm: syz.3.12695 Not tainted syzkaller #0 PREEMPT(full) [ 1023.309588][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1023.309597][T10384] Call Trace: [ 1023.309605][T10384] [ 1023.309612][T10384] dump_stack_lvl+0xe8/0x150 [ 1023.309636][T10384] should_fail_ex+0x410/0x560 [ 1023.309662][T10384] ? __alloc_skb+0x1db/0x7a0 [ 1023.309688][T10384] should_failslab+0xa8/0x100 [ 1023.309711][T10384] ? __alloc_skb+0x1db/0x7a0 [ 1023.309733][T10384] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1023.309759][T10384] ? __alloc_skb+0x18d/0x7a0 [ 1023.309790][T10384] ? __alloc_skb+0x1db/0x7a0 [ 1023.309823][T10384] __alloc_skb+0x1db/0x7a0 [ 1023.309852][T10384] netlink_sendmsg+0x5d4/0xb40 [ 1023.309884][T10384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1023.309929][T10384] ? apparmor_socket_sendmsg+0x98/0x360 [ 1023.309957][T10384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1023.309977][T10384] sock_sendmsg_nosec+0x13a/0x180 [ 1023.310004][T10384] ____sys_sendmsg+0x54e/0x850 [ 1023.310028][T10384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1023.310055][T10384] ? import_iovec+0x73/0xa0 [ 1023.310077][T10384] ___sys_sendmsg+0x2a5/0x360 [ 1023.310096][T10384] ? __lock_acquire+0x6df/0x2e50 [ 1023.310118][T10384] ? __pfx____sys_sendmsg+0x10/0x10 [ 1023.310168][T10384] ? __fget_files+0x2a/0x420 [ 1023.310190][T10384] ? __fget_files+0x3a2/0x420 [ 1023.310221][T10384] __x64_sys_sendmsg+0x1b1/0x290 [ 1023.310243][T10384] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1023.310281][T10384] do_syscall_64+0x166/0x520 [ 1023.310305][T10384] ? trace_irq_disable+0x3b/0x140 [ 1023.310322][T10384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.310340][T10384] ? clear_bhb_loop+0x70/0xc0 [ 1023.310362][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.310380][T10384] RIP: 0033:0x7f5158b9e159 [ 1023.310396][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.310411][T10384] RSP: 002b:00007f51599a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.310431][T10384] RAX: ffffffffffffffda RBX: 00007f5158e25fa0 RCX: 00007f5158b9e159 [ 1023.310443][T10384] RDX: 0000000000000008 RSI: 0000200000003900 RDI: 0000000000000003 [ 1023.310455][T10384] RBP: 00007f51599a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.310466][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.310476][T10384] R13: 00007f5158e26038 R14: 00007f5158e25fa0 R15: 00007fff2d08d468 [ 1023.310506][T10384] [ 1023.466208][T10376] xt_CT: No such helper "snmp_trap" [ 1023.940890][T10409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1024.082244][T10412] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12701'. [ 1024.171835][T10416] netlink: 120 bytes leftover after parsing attributes in process `syz.2.12702'. [ 1024.608960][T10452] x_tables: duplicate underflow at hook 2 [ 1024.698621][T10455] FAULT_INJECTION: forcing a failure. [ 1024.698621][T10455] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.712291][T10455] CPU: 1 UID: 0 PID: 10455 Comm: syz.0.12716 Not tainted syzkaller #0 PREEMPT(full) [ 1024.712316][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1024.712327][T10455] Call Trace: [ 1024.712335][T10455] [ 1024.712343][T10455] dump_stack_lvl+0xe8/0x150 [ 1024.712374][T10455] should_fail_ex+0x410/0x560 [ 1024.712407][T10455] should_failslab+0xa8/0x100 [ 1024.712429][T10455] ? skb_clone+0x212/0x3a0 [ 1024.712449][T10455] kmem_cache_alloc_noprof+0xa1/0x600 [ 1024.712478][T10455] ? skb_clone+0x212/0x3a0 [ 1024.712505][T10455] skb_clone+0x212/0x3a0 [ 1024.712530][T10455] __netlink_deliver_tap+0x413/0x860 [ 1024.712565][T10455] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.712588][T10455] netlink_deliver_tap+0x19c/0x1b0 [ 1024.712612][T10455] netlink_unicast+0x781/0x940 [ 1024.712652][T10455] netlink_sendmsg+0x813/0xb40 [ 1024.712684][T10455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.712715][T10455] ? apparmor_socket_sendmsg+0x98/0x360 [ 1024.712746][T10455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.712767][T10455] sock_sendmsg_nosec+0x13a/0x180 [ 1024.712795][T10455] ____sys_sendmsg+0x54e/0x850 [ 1024.712821][T10455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1024.712851][T10455] ? import_iovec+0x73/0xa0 [ 1024.712875][T10455] ___sys_sendmsg+0x2a5/0x360 [ 1024.712896][T10455] ? __lock_acquire+0x6df/0x2e50 [ 1024.712920][T10455] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.712976][T10455] ? __fget_files+0x2a/0x420 [ 1024.712999][T10455] ? __fget_files+0x3a2/0x420 [ 1024.713030][T10455] __x64_sys_sendmsg+0x1b1/0x290 [ 1024.713052][T10455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1024.713091][T10455] do_syscall_64+0x166/0x520 [ 1024.713116][T10455] ? trace_irq_disable+0x3b/0x140 [ 1024.713131][T10455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.713147][T10455] ? clear_bhb_loop+0x70/0xc0 [ 1024.713167][T10455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.713183][T10455] RIP: 0033:0x7f81ec59e159 [ 1024.713200][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.713215][T10455] RSP: 002b:00007f81ed4c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.713233][T10455] RAX: ffffffffffffffda RBX: 00007f81ec825fa0 RCX: 00007f81ec59e159 [ 1024.713245][T10455] RDX: 0000000000000008 RSI: 0000200000003900 RDI: 0000000000000003 [ 1024.713257][T10455] RBP: 00007f81ed4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.713268][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.713279][T10455] R13: 00007f81ec826038 R14: 00007f81ec825fa0 R15: 00007ffe40b51aa8 [ 1024.713310][T10455] [ 1024.785022][T10460] netlink: 'syz.3.12718': attribute type 9 has an invalid length. [ 1025.141317][T10478] wg2: Caught tx_queue_len zero misconfig [ 1025.229328][T10476] bridge21: entered promiscuous mode [ 1025.229415][T10476] bridge21: entered allmulticast mode [ 1025.260183][T10481] smbdirect: ib_dev[syz1] removed [ 1025.435575][T10492] FAULT_INJECTION: forcing a failure. [ 1025.435575][T10492] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.435625][T10492] CPU: 0 UID: 0 PID: 10492 Comm: syz.2.12729 Not tainted syzkaller #0 PREEMPT(full) [ 1025.435644][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1025.435653][T10492] Call Trace: [ 1025.435659][T10492] [ 1025.435665][T10492] dump_stack_lvl+0xe8/0x150 [ 1025.435691][T10492] should_fail_ex+0x410/0x560 [ 1025.435721][T10492] should_failslab+0xa8/0x100 [ 1025.435744][T10492] __kmalloc_noprof+0xfe/0x720 [ 1025.435770][T10492] ? is_bpf_text_address+0x26/0x2b0 [ 1025.435791][T10492] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1025.435816][T10492] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1025.435850][T10492] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1025.435885][T10492] genl_family_rcv_msg_doit+0xda/0x340 [ 1025.435917][T10492] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1025.435951][T10492] ? apparmor_capable+0x126/0x170 [ 1025.435977][T10492] ? bpf_lsm_capable+0x9/0x20 [ 1025.436001][T10492] ? security_capable+0x7e/0x2c0 [ 1025.436026][T10492] genl_rcv_msg+0x614/0x7a0 [ 1025.436060][T10492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1025.436085][T10492] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1025.436103][T10492] ? __pfx_nl80211_disassociate+0x10/0x10 [ 1025.436126][T10492] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1025.436158][T10492] netlink_rcv_skb+0x226/0x4a0 [ 1025.436188][T10492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1025.436215][T10492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1025.436251][T10492] ? down_read+0x2be/0x330 [ 1025.436273][T10492] genl_rcv+0x28/0x40 [ 1025.436296][T10492] netlink_unicast+0x7bd/0x940 [ 1025.436326][T10492] netlink_sendmsg+0x813/0xb40 [ 1025.436357][T10492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.436387][T10492] ? apparmor_socket_sendmsg+0x98/0x360 [ 1025.436415][T10492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.436435][T10492] sock_sendmsg_nosec+0x13a/0x180 [ 1025.436462][T10492] ____sys_sendmsg+0x54e/0x850 [ 1025.436487][T10492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1025.436515][T10492] ? import_iovec+0x73/0xa0 [ 1025.436538][T10492] ___sys_sendmsg+0x2a5/0x360 [ 1025.436556][T10492] ? __lock_acquire+0x6df/0x2e50 [ 1025.436578][T10492] ? __pfx____sys_sendmsg+0x10/0x10 [ 1025.436632][T10492] ? __fget_files+0x2a/0x420 [ 1025.436653][T10492] ? __fget_files+0x3a2/0x420 [ 1025.436685][T10492] __x64_sys_sendmsg+0x1b1/0x290 [ 1025.436707][T10492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1025.436748][T10492] do_syscall_64+0x166/0x520 [ 1025.436772][T10492] ? trace_irq_disable+0x3b/0x140 [ 1025.436788][T10492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.436806][T10492] ? clear_bhb_loop+0x70/0xc0 [ 1025.436827][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.436845][T10492] RIP: 0033:0x7f777bf9e159 [ 1025.436862][T10492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.436877][T10492] RSP: 002b:00007f777cf00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1025.436896][T10492] RAX: ffffffffffffffda RBX: 00007f777c225fa0 RCX: 00007f777bf9e159 [ 1025.436908][T10492] RDX: 0000000000000008 RSI: 0000200000003900 RDI: 0000000000000003 [ 1025.436920][T10492] RBP: 00007f777cf00090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.436931][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.436941][T10492] R13: 00007f777c226038 R14: 00007f777c225fa0 R15: 00007ffd9ff42b48 [ 1025.436972][T10492] [ 1025.869388][T10504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12731'. [ 1025.889070][T10504] bond0 (unregistering): Released all slaves [ 1025.909455][T10506] Bluetooth: hci0: unsupported parameter 5135 [ 1025.909495][T10506] Bluetooth: hci0: unsupported parameter 8192 [ 1025.909523][T10506] Bluetooth: hci0: unsupported parameter 5135 [ 1025.909537][T10506] Bluetooth: hci0: unsupported parameter 8192 [ 1026.063699][T10509] netlink: 'syz.2.12733': attribute type 1 has an invalid length. [ 1026.123641][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12734'. [ 1026.145426][T10517] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12733'. [ 1026.347007][T10523] netlink: 'syz.1.12736': attribute type 8 has an invalid length. [ 1026.347043][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12736'. [ 1026.806915][T10545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12742'. [ 1026.806974][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12742'. [ 1027.153826][T10560] netlink: 'syz.0.12745': attribute type 1 has an invalid length. [ 1027.162880][T10561] netlink: 'syz.0.12745': attribute type 1 has an invalid length. [ 1027.184202][T10560] netlink: 'syz.0.12745': attribute type 10 has an invalid length. [ 1027.194204][T10567] atomic_op ffff88807847e9e0 conn xmit_atomic 0000000000000000 [ 1027.695040][T10588] net_ratelimit: 24 callbacks suppressed [ 1027.695616][T10588] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1027.963545][T10596] bond1: (slave lo): Releasing active interface [ 1027.978320][T10596] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1028.011321][T10596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1028.025044][T10596] netlink: 'syz.2.12757': attribute type 21 has an invalid length. [ 1028.025100][T10596] __nla_validate_parse: 1 callbacks suppressed [ 1028.025111][T10596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12757'. [ 1028.028082][T30476] lo speed is unknown, defaulting to 1000 [ 1028.028102][T30476] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 1028.028237][T30475] lo speed is unknown, defaulting to 1000 [ 1028.082483][T10599] tipc: Enabling of bearer rejected, failed to enable media [ 1028.171720][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12757'. [ 1028.172356][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12757'. [ 1028.243883][T10609] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1028.266021][T10609] netlink: 'syz.1.12759': attribute type 13 has an invalid length. [ 1028.266059][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12759'. [ 1028.266275][T10609] netlink: 'syz.1.12759': attribute type 13 has an invalid length. [ 1028.266294][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12759'. [ 1028.631102][T10620] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1029.141737][T10640] netlink: 'syz.2.12769': attribute type 1 has an invalid length. [ 1029.329111][T10655] vlan1: entered promiscuous mode [ 1030.058791][T10673] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12779'. [ 1030.243756][T10682] netlink: 'syz.1.12782': attribute type 1 has an invalid length. [ 1030.243803][T10682] netlink: 16102 bytes leftover after parsing attributes in process `syz.1.12782'. [ 1030.949805][T10722] veth0: entered promiscuous mode [ 1030.957366][T10719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12793'. [ 1030.983496][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12794'. [ 1030.993564][T10722] netlink: 'syz.1.12794': attribute type 14 has an invalid length. [ 1031.006402][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12794'. [ 1031.053669][T10722] netlink: 'syz.1.12794': attribute type 14 has an invalid length. [ 1031.061891][ T6588] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.061933][ T6588] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.061964][ T6588] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.061993][ T6588] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.072400][T10721] veth0: left promiscuous mode [ 1031.171229][T10726] syzkaller0: left allmulticast mode [ 1031.234969][T10730] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1031.757080][T10753] syz.4.12808 (10753) used obsolete PPPIOCDETACH ioctl [ 1031.867656][T10763] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1031.867736][T10763] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1031.916541][T10766] bond3: option mode: unable to set because the bond device is up [ 1031.934085][T10766] bond3: (slave 04±ÿª¨úrBº“€): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1031.984606][T10766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1032.013381][T10766] bond3: (slave 04±ÿª¨úrBº“€): making interface the new active one [ 1032.022621][T10766] bond3: (slave 04±ÿª¨úrBº“€): Enslaving as an active interface with an up link [ 1032.026282][T10766] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1032.664170][T10803] tunl0: left promiscuous mode [ 1032.673013][T10803] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1032.949307][T10829] openvswitch: netlink: Multiple metadata blocks provided [ 1033.188148][T10853] __nla_validate_parse: 9 callbacks suppressed [ 1033.188421][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12832'. [ 1035.908514][T10828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1036.056621][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12839'. [ 1036.165536][T10887] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12842'. [ 1036.202412][T10889] syzkaller1: entered promiscuous mode [ 1036.202462][T10889] syzkaller1: entered allmulticast mode [ 1036.209709][T10888] tipc: Bearer : already 2 bearers with priority 10 [ 1036.209727][T10888] tipc: Bearer : trying with adjusted priority [ 1036.209737][T10888] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1036.411454][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12846'. [ 1036.435313][T10900] ipvlan0: entered allmulticast mode [ 1036.500037][T10905] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1036.547986][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12849'. [ 1036.579461][T10908] bond41 (unregistering): Released all slaves [ 1036.606063][T10918] veth1_macvtap: entered promiscuous mode [ 1036.612865][T10918] macsec0: entered allmulticast mode [ 1036.612893][T10918] veth1_macvtap: entered allmulticast mode [ 1036.755071][T10922] nbd: must specify at least one socket [ 1036.786520][T10922] nbd: must specify at least one socket [ 1036.835931][T10931] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12855'. [ 1036.865787][T10939] netlink: 'syz.1.12854': attribute type 25 has an invalid length. [ 1037.058397][T10952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.177900][T10957] syzkaller0: entered promiscuous mode [ 1037.183707][T10957] syzkaller0: entered allmulticast mode [ 1037.193506][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12858'. [ 1037.423768][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12859'. [ 1037.433364][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12859'. [ 1037.806202][T10993] Cannot find del_set index 3 as target [ 1038.176326][T11014] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1038.251604][T11014] sctp: [Deprecated]: syz.4.12868 (pid 11014) Use of int in max_burst socket option deprecated. [ 1038.251604][T11014] Use struct sctp_assoc_value instead [ 1038.273835][T11018] netlink: 'syz.0.12869': attribute type 20 has an invalid length. [ 1038.273880][T11018] IPv6: NLM_F_CREATE should be specified when creating new route [ 1038.427453][T11014] .`: (slave bond0): Error -95 calling ndo_bpf [ 1038.434866][T11014] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1038.534915][T11033] Cannot find add_set index 2 as target [ 1038.674246][T11040] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1038.674290][T11040] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1038.933526][T11060] FAULT_INJECTION: forcing a failure. [ 1038.933526][T11060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.936433][T11057] IPVS: set_ctl: invalid protocol: 100 0.0.0.0:20000 [ 1038.954689][T11060] CPU: 0 UID: 0 PID: 11060 Comm: syz.4.12880 Not tainted syzkaller #0 PREEMPT(full) [ 1038.954715][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1038.954727][T11060] Call Trace: [ 1038.954735][T11060] [ 1038.954743][T11060] dump_stack_lvl+0xe8/0x150 [ 1038.954773][T11060] should_fail_ex+0x410/0x560 [ 1038.954806][T11060] _copy_from_user+0x2d/0xb0 [ 1038.954827][T11060] ___sys_sendmsg+0x1c6/0x360 [ 1038.954847][T11060] ? __lock_acquire+0x6df/0x2e50 [ 1038.954871][T11060] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.954927][T11060] ? __fget_files+0x2a/0x420 [ 1038.954949][T11060] ? __fget_files+0x3a2/0x420 [ 1038.954981][T11060] __x64_sys_sendmsg+0x1b1/0x290 [ 1038.955002][T11060] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1038.955039][T11060] do_syscall_64+0x166/0x520 [ 1038.955064][T11060] ? trace_irq_disable+0x3b/0x140 [ 1038.955081][T11060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.955099][T11060] ? clear_bhb_loop+0x70/0xc0 [ 1038.955121][T11060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.955148][T11060] RIP: 0033:0x7fcfd859e159 [ 1038.955167][T11060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.955182][T11060] RSP: 002b:00007fcfd953b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.955202][T11060] RAX: ffffffffffffffda RBX: 00007fcfd8825fa0 RCX: 00007fcfd859e159 [ 1038.955216][T11060] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003 [ 1038.955228][T11060] RBP: 00007fcfd953b090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.955238][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.955249][T11060] R13: 00007fcfd8826038 R14: 00007fcfd8825fa0 R15: 00007ffd7587d028 [ 1038.955280][T11060] [ 1039.136298][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12881'. [ 1039.232106][T11066] netlink: 'syz.4.12884': attribute type 2 has an invalid length. [ 1039.232142][T11066] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12884'. [ 1039.286971][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12884'. [ 1039.297201][T11066] netlink: 'syz.4.12884': attribute type 1 has an invalid length. [ 1039.658435][T11094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12891'. [ 1039.795378][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12893'. [ 1039.908463][T11105] ip6t_frag: unknown flags 6 [ 1039.990274][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12895'. [ 1040.023194][T11110] netlink: 'syz.0.12896': attribute type 4 has an invalid length. [ 1040.049290][T11110] netlink: 'syz.0.12896': attribute type 4 has an invalid length. [ 1040.084850][ T6588] bond3: (slave 04±ÿª¨úrBº“€): link status definitely down, disabling slave [ 1040.094242][ T6588] bond3: now running without any active interface! [ 1040.624093][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12903'. [ 1040.832904][T11159] Cannot find del_set index 3 as target [ 1041.038043][T11174] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12911'. [ 1041.073949][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12913'. [ 1041.560821][ C1] icmp: detected local route for 172.20.20.15 during ICMP sending, src 172.20.20.0 [ 1041.843177][T11227] netlink: 'syz.4.12926': attribute type 3 has an invalid length. [ 1041.843214][T11227] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12926'. [ 1041.872372][T11234] FAULT_INJECTION: forcing a failure. [ 1041.872372][T11234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.872507][T11234] CPU: 1 UID: 0 PID: 11234 Comm: syz.3.12928 Not tainted syzkaller #0 PREEMPT(full) [ 1041.872529][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1041.872540][T11234] Call Trace: [ 1041.872548][T11234] [ 1041.872556][T11234] dump_stack_lvl+0xe8/0x150 [ 1041.872586][T11234] should_fail_ex+0x410/0x560 [ 1041.872615][T11234] _copy_from_iter+0x1d3/0x1660 [ 1041.872642][T11234] ? __alloc_skb+0x27a/0x7a0 [ 1041.872671][T11234] ? __alloc_skb+0x27a/0x7a0 [ 1041.872700][T11234] ? __alloc_skb+0x27a/0x7a0 [ 1041.872725][T11234] ? __pfx__copy_from_iter+0x10/0x10 [ 1041.872749][T11234] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1041.872774][T11234] ? __alloc_skb+0x27a/0x7a0 [ 1041.872804][T11234] ? __alloc_skb+0x27a/0x7a0 [ 1041.872835][T11234] ? netlink_sendmsg+0x650/0xb40 [ 1041.872856][T11234] ? skb_put+0x112/0x210 [ 1041.872876][T11234] netlink_sendmsg+0x6c0/0xb40 [ 1041.872905][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.872935][T11234] ? apparmor_socket_sendmsg+0x98/0x360 [ 1041.872965][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.872985][T11234] sock_sendmsg_nosec+0x13a/0x180 [ 1041.873010][T11234] ____sys_sendmsg+0x54e/0x850 [ 1041.873034][T11234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1041.873062][T11234] ? import_iovec+0x73/0xa0 [ 1041.873084][T11234] ___sys_sendmsg+0x2a5/0x360 [ 1041.873102][T11234] ? __lock_acquire+0x6df/0x2e50 [ 1041.873124][T11234] ? __pfx____sys_sendmsg+0x10/0x10 [ 1041.873177][T11234] ? __fget_files+0x2a/0x420 [ 1041.873198][T11234] ? __fget_files+0x3a2/0x420 [ 1041.873230][T11234] __x64_sys_sendmsg+0x1b1/0x290 [ 1041.873252][T11234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1041.873290][T11234] do_syscall_64+0x166/0x520 [ 1041.873314][T11234] ? trace_irq_disable+0x3b/0x140 [ 1041.873331][T11234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.873350][T11234] ? clear_bhb_loop+0x70/0xc0 [ 1041.873372][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.873389][T11234] RIP: 0033:0x7f5158b9e159 [ 1041.873406][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.873420][T11234] RSP: 002b:00007f51599a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.873440][T11234] RAX: ffffffffffffffda RBX: 00007f5158e25fa0 RCX: 00007f5158b9e159 [ 1041.873454][T11234] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003 [ 1041.873465][T11234] RBP: 00007f51599a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.873476][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.873487][T11234] R13: 00007f5158e26038 R14: 00007f5158e25fa0 R15: 00007fff2d08d468 [ 1041.873515][T11234] [ 1041.989661][T11227] 8021q: VLANs not supported on wg0 [ 1042.676976][T11267] xt_CT: No such helper "snmp" [ 1042.707218][T11272] netlink: 'syz.3.12938': attribute type 1 has an invalid length. [ 1042.736097][T11265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1042.738005][T11265] netlink: 'syz.0.12936': attribute type 83 has an invalid length. [ 1042.850608][T11272] 8021q: adding VLAN 0 to HW filter on device bond55 [ 1043.022823][T11291] ip6t_srh: unknown srh match flags 5F28 [ 1043.042856][T11294] netlink: 'syz.0.12943': attribute type 7 has an invalid length. [ 1043.042895][T11294] netlink: 'syz.0.12943': attribute type 8 has an invalid length. [ 1043.044993][T11294] netlink: 'syz.0.12943': attribute type 7 has an invalid length. [ 1043.045011][T11294] netlink: 'syz.0.12943': attribute type 8 has an invalid length. [ 1043.061465][T11299] ipt_rpfilter: unknown options [ 1044.224606][T11365] SET target dimension over the limit! [ 1044.371504][T11373] __nla_validate_parse: 6 callbacks suppressed [ 1044.379217][T11373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12960'. [ 1044.389995][T11373] netlink: 'syz.0.12960': attribute type 1 has an invalid length. [ 1044.483682][T11373] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1044.496853][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12961'. [ 1044.506151][T11373] netlink: 'syz.0.12960': attribute type 10 has an invalid length. [ 1044.506172][T11373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12960'. [ 1044.863855][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12965'. [ 1044.980254][T11413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1045.248426][T11417] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1045.409988][T11422] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12971'. [ 1045.467268][T11426] syzkaller1: entered promiscuous mode [ 1045.467295][T11426] syzkaller1: entered allmulticast mode [ 1045.653544][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12974'. [ 1045.654275][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12974'. [ 1045.654581][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12974'. [ 1045.654790][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12974'. [ 1047.471534][T11380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1047.643892][T11444] syzkaller1: entered promiscuous mode [ 1047.651573][T11444] syzkaller1: entered allmulticast mode [ 1047.859820][T11447] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.863602][T11447] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1047.863632][T11447] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1047.863652][T11447] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1047.903532][T11460] sctp: [Deprecated]: syz.4.12984 (pid 11460) Use of int in max_burst socket option. [ 1047.903532][T11460] Use struct sctp_assoc_value instead [ 1048.031445][T11447] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.041700][T11447] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1048.052224][T11447] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1048.067224][T11447] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1048.138359][T11447] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.151877][T11447] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1048.151944][T11447] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1048.151974][T11447] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1048.239044][T11470] can: request_module (can-proto-0) failed. [ 1048.400207][T11447] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.405387][T11447] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1048.405433][T11447] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1048.405487][T11447] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1048.852556][T10647] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.852606][T10647] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 1048.852637][T10647] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1048.852658][T10647] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1049.021837][T11515] xt_l2tp: invalid flags combination: 8 [ 1049.101533][ T6588] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.101585][ T6588] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 1049.101607][ T6588] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1049.101624][ T6588] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1049.102713][T17684] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.102739][T17684] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 1049.102761][T17684] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1049.102791][T17684] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1049.185440][T11510] syzkaller1: entered promiscuous mode [ 1049.185488][T11510] syzkaller1: entered allmulticast mode [ 1049.289449][T11525] syzkaller0: entered promiscuous mode [ 1049.289497][T11525] syzkaller0: entered allmulticast mode [ 1049.296539][T11525] tipc: Enabling of bearer rejected, already enabled [ 1049.310453][ T6591] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.310482][ T6591] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 1049.310504][ T6591] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1049.310526][ T6591] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1049.507689][T11531] __nla_validate_parse: 31 callbacks suppressed [ 1049.508201][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13005'. [ 1049.519091][T11531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13005'. [ 1049.773925][T11549] syzkaller0: left promiscuous mode [ 1049.779503][T11549] syzkaller0: left allmulticast mode [ 1049.845057][T11555] openvswitch: netlink: Message has 8 unknown bytes. [ 1049.860761][T11554] bond3: Unknown bonding mode 6 for xdp xmit [ 1049.860801][T11554] bond3: Unknown bonding mode 6 for xdp xmit [ 1049.860834][T11554] bond3: Unknown bonding mode 6 for xdp xmit [ 1049.860852][T11554] bond3: Unknown bonding mode 6 for xdp xmit [ 1049.860869][T11554] bond3: Unknown bonding mode 6 for xdp xmit [ 1049.860885][T11554] bond3: Unknown bonding mode 6 for xdp xmit [ 1049.860902][T11554] bond3: Unknown bonding mode 6 for xdp xmit [ 1049.860939][T11554] bond3: Unknown bonding mode 6 for xdp xmit [ 1049.860958][T11554] bond3: Unknown bonding mode 6 for xdp xmit [ 1050.144341][T11572] syzkaller0: entered promiscuous mode [ 1050.144379][T11572] syzkaller0: entered allmulticast mode [ 1050.156912][T11572] tipc: Enabling of bearer rejected, already enabled [ 1050.198492][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13017'. [ 1050.931921][T11625] netlink: 'syz.2.13029': attribute type 15 has an invalid length. [ 1050.939124][T11624] nbd0: detected capacity change from 0 to 63 [ 1050.957446][T11619] tipc: Enabling of bearer rejected, already enabled [ 1050.957530][T11625] netlink: 'syz.2.13029': attribute type 15 has an invalid length. [ 1050.990537][T27332] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1050.990596][T27332] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1050.990630][T27332] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1050.997916][T11628] ipt_ah: unknown flags FF [ 1051.062884][ T5625] block nbd0: Receive control failed (result -104) [ 1051.181455][T11635] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1051.196867][T11635] SET target dimension over the limit! [ 1051.203624][T11630] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13030'. [ 1051.205479][T11630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1051.254347][T11641] netlink: 'syz.4.13034': attribute type 61 has an invalid length. [ 1051.392184][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13033'. [ 1051.475905][T11643] 8021q: adding VLAN 0 to HW filter on device bond42 [ 1051.486621][T11643] bond0: (slave bond42): Enslaving as an active interface with a down link [ 1051.529220][T11661] bond0: (slave bond_slave_1): Device is not bonding slave [ 1051.537254][T11661] bond0: option active_slave: invalid value (bond_slave_1) [ 1051.629021][T11655] syzkaller0: entered promiscuous mode [ 1051.634872][T11655] syzkaller0: entered allmulticast mode [ 1051.757024][T11674] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1051.757373][T11674] gretap5: entered promiscuous mode [ 1051.757390][T11674] gretap5: entered allmulticast mode [ 1051.758969][T11675] syzkaller1: entered promiscuous mode [ 1051.758987][T11675] syzkaller1: entered allmulticast mode [ 1052.150236][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13046'. [ 1052.177060][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13046'. [ 1055.119603][T11712] netlink: 'syz.0.13053': attribute type 9 has an invalid length. [ 1055.186127][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13051'. [ 1055.366503][T11722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13058'. [ 1055.584790][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13061'. [ 1055.749866][T11750] netlink: 172 bytes leftover after parsing attributes in process `syz.0.13060'. [ 1055.876736][T11750] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1055.876828][T11750] gretap2: entered promiscuous mode [ 1055.876842][T11750] gretap2: entered allmulticast mode [ 1055.936576][T11757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13066'. [ 1056.088131][T11768] Bluetooth: hci0: unsupported parameter 5134 [ 1056.088172][T11768] Bluetooth: hci0: unsupported parameter 8192 [ 1056.088198][T11768] Bluetooth: hci0: unsupported parameter 5134 [ 1056.088208][T11768] Bluetooth: hci0: unsupported parameter 8192 [ 1056.115958][T11770] netlink: 'syz.1.13068': attribute type 4 has an invalid length. [ 1056.115979][T11770] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13068'. [ 1056.118578][T11770] netlink: 'syz.1.13068': attribute type 1 has an invalid length. [ 1056.158148][T11770] bridge0: port 1(batadv1) entered blocking state [ 1056.163444][T11770] bridge0: port 1(batadv1) entered disabled state [ 1056.165242][T11770] batadv1: entered allmulticast mode [ 1056.170182][T11770] batadv1: entered promiscuous mode [ 1056.398576][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13076'. [ 1056.398625][T11788] net_ratelimit: 25 callbacks suppressed [ 1056.398655][T11788] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 1056.554096][T11790] syzkaller0: left promiscuous mode [ 1056.554135][T11790] syzkaller0: left allmulticast mode [ 1056.557621][T11800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13078'. [ 1056.641797][ T6589] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1056.641830][ T6589] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1056.774758][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13079'. [ 1056.841449][T11810] xt_CT: No such helper "syz0" [ 1057.113299][T11826] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 1057.827976][T11885] IPVS: Unknown mcast interface: nr0 [ 1057.829524][T11869] syzkaller1: entered promiscuous mode [ 1057.829542][T11869] syzkaller1: entered allmulticast mode [ 1057.956192][T11896] netlink: 'syz.0.13099': attribute type 7 has an invalid length. [ 1057.966869][T11895] netlink: 13 bytes leftover after parsing attributes in process `syz.0.13099'. [ 1057.986624][T11898] IPVS: Unknown mcast interface: nr0 [ 1060.593314][T11858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1060.882209][T11919] __nla_validate_parse: 1 callbacks suppressed [ 1060.882256][T11919] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.13106'. [ 1061.139195][T11934] syzkaller0: entered promiscuous mode [ 1061.139234][T11934] syzkaller0: entered allmulticast mode [ 1061.147435][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13110'. [ 1061.287730][T11939] bond0: entered promiscuous mode [ 1061.287771][T11939] dummy0: entered promiscuous mode [ 1061.288398][T11939] bond0: entered allmulticast mode [ 1061.288416][T11939] dummy0: entered allmulticast mode [ 1061.367429][T11941] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13113'. [ 1061.390190][T11941] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13113'. [ 1061.424562][T11944] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1061.555894][T11951] netlink: 'syz.4.13118': attribute type 3 has an invalid length. [ 1061.727375][T31780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.842261][T11965] netlink: 'syz.4.13123': attribute type 4 has an invalid length. [ 1061.842305][T11965] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13123'. [ 1061.935108][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13123'. [ 1062.114004][T11969] netlink: 'syz.3.13122': attribute type 1 has an invalid length. [ 1062.156625][T11986] netlink: 666 bytes leftover after parsing attributes in process `syz.2.13126'. [ 1062.193861][T11976] xt_CT: No such helper "snmp_trap" [ 1062.205027][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13127'. [ 1062.205284][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13127'. [ 1062.205492][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13127'. [ 1062.291032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.291319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.291543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.328506][T11991] ksmbd: Unknown IPC event: 3, ignore. [ 1062.361390][ T6589] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1062.361859][ T6589] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1062.361894][ T6589] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1062.759385][T12018] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1062.759491][T12018] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1062.767632][T12018] tipc: Enabling of bearer rejected, already enabled [ 1062.785324][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.913479][T12024] SET target dimension over the limit! [ 1063.008211][T12032] netlink: 'syz.2.13143': attribute type 1 has an invalid length. [ 1063.073312][T12020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.084315][T30475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.097654][T12020] tipc: Resetting bearer [ 1063.122856][T12026] team_slave_1: entered allmulticast mode [ 1063.131147][ T6589] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1063.157394][T12040] 8021q: VLANs not supported on ip_vti0 [ 1063.255403][ T6591] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1063.362008][ T6591] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1063.482148][ T6589] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1063.569341][T12068] wireguard: wg2: Could not create IPv4 socket [ 1063.630893][ T6592] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.631424][ T6592] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.631486][ T6592] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.631519][ T6592] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.751470][T12076] bond40 (unregistering): Released all slaves [ 1063.953589][T12092] FAULT_INJECTION: forcing a failure. [ 1063.953589][T12092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.953645][T12092] CPU: 0 UID: 0 PID: 12092 Comm: syz.3.13163 Not tainted syzkaller #0 PREEMPT(full) [ 1063.953665][T12092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1063.953677][T12092] Call Trace: [ 1063.953685][T12092] [ 1063.953694][T12092] dump_stack_lvl+0xe8/0x150 [ 1063.953726][T12092] should_fail_ex+0x410/0x560 [ 1063.953761][T12092] _copy_from_user+0x2d/0xb0 [ 1063.953783][T12092] sock_do_ioctl+0x195/0x320 [ 1063.953810][T12092] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1063.953830][T12092] ? hook_file_ioctl+0x1f2/0x600 [ 1063.953860][T12092] sock_ioctl+0x57a/0x7e0 [ 1063.953878][T12092] ? __pfx_sock_ioctl+0x10/0x10 [ 1063.953896][T12092] ? __fget_files+0x2a/0x420 [ 1063.953916][T12092] ? __fget_files+0x3a2/0x420 [ 1063.953940][T12092] ? __fget_files+0x2a/0x420 [ 1063.953965][T12092] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1063.953990][T12092] ? __pfx_sock_ioctl+0x10/0x10 [ 1063.954012][T12092] __se_sys_ioctl+0xfc/0x170 [ 1063.954032][T12092] do_syscall_64+0x166/0x520 [ 1063.954057][T12092] ? trace_irq_disable+0x3b/0x140 [ 1063.954083][T12092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.954101][T12092] ? clear_bhb_loop+0x70/0xc0 [ 1063.954124][T12092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.954142][T12092] RIP: 0033:0x7f5158b9e159 [ 1063.954159][T12092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.954175][T12092] RSP: 002b:00007f51599a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.954194][T12092] RAX: ffffffffffffffda RBX: 00007f5158e25fa0 RCX: 00007f5158b9e159 [ 1063.954207][T12092] RDX: 0000200000000000 RSI: 0000000000008995 RDI: 0000000000000003 [ 1063.954219][T12092] RBP: 00007f51599a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.954230][T12092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.954241][T12092] R13: 00007f5158e26038 R14: 00007f5158e25fa0 R15: 00007fff2d08d468 [ 1063.954270][T12092] [ 1063.964891][T12088] netlink: 'syz.0.13161': attribute type 1 has an invalid length. [ 1063.964912][T12088] netlink: 'syz.0.13161': attribute type 2 has an invalid length. [ 1064.474355][T12124] netlink: 'syz.4.13173': attribute type 1 has an invalid length. [ 1064.535109][T12128] netlink: 'syz.4.13173': attribute type 1 has an invalid length. [ 1064.644173][T12133] bond0: (slave bond_slave_1): Device is not bonding slave [ 1064.650102][T12133] bond0: option active_slave: invalid value (bond_slave_1) [ 1064.650142][T12133] FAULT_INJECTION: forcing a failure. [ 1064.650142][T12133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.650165][T12133] CPU: 0 UID: 0 PID: 12133 Comm: syz.0.13175 Not tainted syzkaller #0 PREEMPT(full) [ 1064.650185][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1064.650196][T12133] Call Trace: [ 1064.650204][T12133] [ 1064.650212][T12133] dump_stack_lvl+0xe8/0x150 [ 1064.650244][T12133] should_fail_ex+0x410/0x560 [ 1064.650278][T12133] _copy_to_user+0x31/0xb0 [ 1064.650300][T12133] simple_read_from_buffer+0xe1/0x170 [ 1064.650330][T12133] proc_fail_nth_read+0x1bb/0x230 [ 1064.650356][T12133] ? common_file_perm+0x20e/0x2b0 [ 1064.650377][T12133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1064.650406][T12133] ? rw_verify_area+0x24a/0x4c0 [ 1064.650431][T12133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1064.650456][T12133] vfs_read+0x213/0xa80 [ 1064.650484][T12133] ? __pfx___mutex_lock+0x10/0x10 [ 1064.650512][T12133] ? __pfx_vfs_read+0x10/0x10 [ 1064.650537][T12133] ? __fget_files+0x2a/0x420 [ 1064.650563][T12133] ? __fget_files+0x3a2/0x420 [ 1064.650583][T12133] ? __fget_files+0x2a/0x420 [ 1064.650614][T12133] ksys_read+0x150/0x270 [ 1064.650641][T12133] ? __pfx_ksys_read+0x10/0x10 [ 1064.650675][T12133] do_syscall_64+0x166/0x520 [ 1064.650699][T12133] ? trace_irq_disable+0x3b/0x140 [ 1064.650716][T12133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.650735][T12133] ? clear_bhb_loop+0x70/0xc0 [ 1064.650757][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.650775][T12133] RIP: 0033:0x7f81ec55e98e [ 1064.650791][T12133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1064.650807][T12133] RSP: 002b:00007f81ed4c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1064.650827][T12133] RAX: ffffffffffffffda RBX: 00007f81ed4c46c0 RCX: 00007f81ec55e98e [ 1064.650840][T12133] RDX: 000000000000000f RSI: 00007f81ed4c40a0 RDI: 0000000000000004 [ 1064.650852][T12133] RBP: 00007f81ed4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.650863][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.650873][T12133] R13: 00007f81ec826038 R14: 00007f81ec825fa0 R15: 00007ffe40b51aa8 [ 1064.650903][T12133] [ 1064.823272][T12136] Bluetooth: hci0: unsupported parameter 5135 [ 1064.823294][T12136] Bluetooth: hci0: unsupported parameter 8192 [ 1064.823305][T12136] Bluetooth: hci0: unsupported parameter 5135 [ 1064.823317][T12136] Bluetooth: hci0: unsupported parameter 8192 [ 1064.885125][T12141] bond19: option mode: unable to set because the bond device is up [ 1064.943171][T12142] bond0: left promiscuous mode [ 1064.943215][T12142] dummy0: left promiscuous mode [ 1064.968099][T12142] bond0: left allmulticast mode [ 1064.968153][T12142] dummy0: left allmulticast mode [ 1064.985630][T12142] .`: (slave bond0): Releasing backup interface [ 1065.032947][T12142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.048599][T12142] bond19: (slave bond0): making interface the new active one [ 1065.061993][T12142] bond19: (slave bond0): Enslaving as an active interface with an up link [ 1065.236925][T12164] netlink: 'syz.0.13179': attribute type 10 has an invalid length. [ 1065.650569][T12182] netlink: 'syz.2.13185': attribute type 1 has an invalid length. [ 1065.849729][T12189] xt_policy: neither incoming nor outgoing policy selected [ 1066.152661][T12201] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1066.157893][T12203] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1066.185391][T12203] __nla_validate_parse: 44 callbacks suppressed [ 1066.185448][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13193'. [ 1066.246310][T12200] bond40: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1066.268727][T12200] bond40 (unregistering): Released all slaves [ 1066.346990][T12209] 8021q: adding VLAN 0 to HW filter on device bond51 [ 1066.469396][T12222] bond32: entered promiscuous mode [ 1066.475587][T12222] bond32: entered allmulticast mode [ 1066.482274][T12222] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1066.755490][T17684] net_ratelimit: 62 callbacks suppressed [ 1066.755538][T17684] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1066.801250][T12244] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13209'. [ 1066.814672][T12244] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13209'. [ 1066.872150][ T6589] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1066.910408][T12256] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13211'. [ 1066.921915][T31776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.082261][T27332] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1067.231082][ T6591] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1067.341390][ T6588] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1067.454138][ T6588] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1067.600098][ T6588] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1067.736602][T12285] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1067.736646][T12285] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1067.744163][T10647] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1067.850435][T10647] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1067.973269][T12308] validate_nla: 1 callbacks suppressed [ 1067.973328][T12308] netlink: 'syz.2.13220': attribute type 2 has an invalid length. [ 1068.037387][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13222'. [ 1068.091868][T12321] Bluetooth: hci0: unsupported parameter 5135 [ 1068.098138][T12321] Bluetooth: hci0: unsupported parameter 8192 [ 1068.107161][T12321] Bluetooth: hci0: unsupported parameter 5135 [ 1068.114109][T12321] Bluetooth: hci0: unsupported parameter 8192 [ 1068.462028][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13228'. [ 1068.484873][T12337] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1068.492535][T12337] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1068.503838][T12337] tipc: Enabling of bearer rejected, already enabled [ 1068.569351][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13232'. [ 1068.657642][T12342] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13231'. [ 1068.776151][T12351] netlink: 'syz.1.13237': attribute type 1 has an invalid length. [ 1068.848245][T12351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13237'. [ 1069.075454][T12373] vlan4: entered promiscuous mode [ 1069.078409][T12373] bridge0: entered promiscuous mode [ 1069.078568][T12373] vlan4: entered allmulticast mode [ 1069.078581][T12373] bridge0: entered allmulticast mode [ 1069.127441][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13242'. [ 1069.154674][T12374] tipc: Enabling of bearer rejected, failed to enable media [ 1069.396716][T12395] netlink: 'syz.2.13245': attribute type 32 has an invalid length. [ 1069.444374][T12396] bond40: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1069.465398][T12396] bond40 (unregistering): Released all slaves [ 1069.882656][T12432] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20004 [ 1070.214923][T12453] bond52: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1070.228617][T12453] bond52 (unregistering): Released all slaves [ 1070.449990][T12449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1070.464948][T12449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.477722][T12449] [ 1070.480075][T12449] ====================================================== [ 1070.487184][T12449] WARNING: possible circular locking dependency detected [ 1070.494235][T12449] syzkaller #0 Not tainted [ 1070.498657][T12449] ------------------------------------------------------ [ 1070.505678][T12449] syz.4.13260/12449 is trying to acquire lock: [ 1070.511840][T12449] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1070.522129][T12449] [ 1070.522129][T12449] but task is already holding lock: [ 1070.529486][T12449] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1070.540479][T12449] [ 1070.540479][T12449] which lock already depends on the new lock. [ 1070.540479][T12449] [ 1070.550974][T12449] [ 1070.550974][T12449] the existing dependency chain (in reverse order) is: [ 1070.560020][T12449] [ 1070.560020][T12449] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1070.568794][T12449] down_read+0x4a/0x330 [ 1070.573479][T12449] kernfs_remove_by_name_ns+0x3f/0x140 [ 1070.579483][T12449] internal_create_group+0x58e/0x1180 [ 1070.585388][T12449] sysfs_update_groups+0x60/0x130 [ 1070.590951][T12449] pmu_dev_alloc+0x29b/0x300 [ 1070.596080][T12449] perf_event_sysfs_init+0x76/0x100 [ 1070.601953][T12449] do_one_initcall+0x250/0x870 [ 1070.607260][T12449] do_initcall_level+0x10a/0x1a0 [ 1070.612836][T12449] do_initcalls+0x59/0xa0 [ 1070.617691][T12449] kernel_init_freeable+0x29d/0x3e0 [ 1070.623412][T12449] kernel_init+0x22/0x1d0 [ 1070.628293][T12449] ret_from_fork+0x514/0xb70 [ 1070.633414][T12449] ret_from_fork_asm+0x1a/0x30 [ 1070.638710][T12449] [ 1070.638710][T12449] -> #9 (pmus_lock){+.+.}-{4:4}: [ 1070.646038][T12449] __mutex_lock+0x19d/0x1550 [ 1070.651190][T12449] perf_event_init_cpu+0x1d1/0x7a0 [ 1070.656879][T12449] cpuhp_invoke_callback+0x434/0x810 [ 1070.662707][T12449] cpuhp_thread_fun+0x362/0x780 [ 1070.668173][T12449] smpboot_thread_fn+0x565/0xa70 [ 1070.673639][T12449] kthread+0x38b/0x480 [ 1070.678230][T12449] ret_from_fork+0x514/0xb70 [ 1070.683419][T12449] ret_from_fork_asm+0x1a/0x30 [ 1070.688709][T12449] [ 1070.688709][T12449] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1070.696265][T12449] cpuhp_thread_fun+0x127/0x780 [ 1070.701650][T12449] smpboot_thread_fn+0x565/0xa70 [ 1070.707122][T12449] kthread+0x38b/0x480 [ 1070.711709][T12449] ret_from_fork+0x514/0xb70 [ 1070.716858][T12449] ret_from_fork_asm+0x1a/0x30 [ 1070.722150][T12449] [ 1070.722150][T12449] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1070.729932][T12449] cpus_read_lock+0x42/0x160 [ 1070.735051][T12449] static_key_slow_inc+0x12/0x30 [ 1070.740603][T12449] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1070.746930][T12449] nbd_genl_foreach_sock+0x265/0x450 [ 1070.752921][T12449] nbd_genl_reconfigure+0xbbb/0x1040 [ 1070.758739][T12449] genl_family_rcv_msg_doit+0x233/0x340 [ 1070.764815][T12449] genl_rcv_msg+0x614/0x7a0 [ 1070.769848][T12449] netlink_rcv_skb+0x226/0x4a0 [ 1070.775130][T12449] genl_rcv+0x28/0x40 [ 1070.779719][T12449] netlink_unicast+0x7bd/0x940 [ 1070.785002][T12449] netlink_sendmsg+0x813/0xb40 [ 1070.790301][T12449] sock_sendmsg_nosec+0x13a/0x180 [ 1070.795856][T12449] ____sys_sendmsg+0x54e/0x850 [ 1070.801143][T12449] ___sys_sendmsg+0x2a5/0x360 [ 1070.806346][T12449] __x64_sys_sendmsg+0x1b1/0x290 [ 1070.811864][T12449] do_syscall_64+0x166/0x520 [ 1070.816995][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.823449][T12449] [ 1070.823449][T12449] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1070.831179][T12449] __mutex_lock+0x19d/0x1550 [ 1070.836298][T12449] nbd_queue_rq+0x373/0xff0 [ 1070.841328][T12449] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1070.847521][T12449] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1070.854429][T12449] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1070.860931][T12449] blk_mq_run_work_fn+0x16c/0x300 [ 1070.866477][T12449] process_scheduled_works+0xc3d/0x1630 [ 1070.872549][T12449] worker_thread+0xa47/0xfb0 [ 1070.877671][T12449] kthread+0x38b/0x480 [ 1070.882277][T12449] ret_from_fork+0x514/0xb70 [ 1070.887387][T12449] ret_from_fork_asm+0x1a/0x30 [ 1070.892680][T12449] [ 1070.892680][T12449] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1070.900035][T12449] __mutex_lock+0x19d/0x1550 [ 1070.905170][T12449] nbd_queue_rq+0xc1/0xff0 [ 1070.910132][T12449] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1070.916220][T12449] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1070.923086][T12449] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1070.929595][T12449] blk_mq_run_work_fn+0x16c/0x300 [ 1070.935144][T12449] process_scheduled_works+0xc3d/0x1630 [ 1070.941220][T12449] worker_thread+0xa47/0xfb0 [ 1070.946340][T12449] kthread+0x38b/0x480 [ 1070.950927][T12449] ret_from_fork+0x514/0xb70 [ 1070.956042][T12449] ret_from_fork_asm+0x1a/0x30 [ 1070.961346][T12449] [ 1070.961346][T12449] -> #4 (set->srcu){.+.+}-{0:0}: [ 1070.968533][T12449] __synchronize_srcu+0xc9/0x2f0 [ 1070.974173][T12449] elevator_switch+0x1e8/0x7b0 [ 1070.979563][T12449] elevator_change+0x2fa/0x480 [ 1070.984850][T12449] elevator_set_default+0x375/0x440 [ 1070.990590][T12449] blk_register_queue+0x3f3/0x4e0 [ 1070.996203][T12449] __add_disk+0x6cb/0xe30 [ 1071.001190][T12449] add_disk_fwnode+0x100/0x3a0 [ 1071.006492][T12449] nbd_dev_add+0x733/0xb60 [ 1071.011441][T12449] nbd_init+0x168/0x1f0 [ 1071.016210][T12449] do_one_initcall+0x250/0x870 [ 1071.021503][T12449] do_initcall_level+0x10a/0x1a0 [ 1071.026978][T12449] do_initcalls+0x59/0xa0 [ 1071.031897][T12449] kernel_init_freeable+0x29d/0x3e0 [ 1071.037622][T12449] kernel_init+0x22/0x1d0 [ 1071.042489][T12449] ret_from_fork+0x514/0xb70 [ 1071.047695][T12449] ret_from_fork_asm+0x1a/0x30 [ 1071.052985][T12449] [ 1071.052985][T12449] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1071.060806][T12449] __mutex_lock+0x19d/0x1550 [ 1071.065936][T12449] elevator_change+0x1af/0x480 [ 1071.071260][T12449] elevator_set_none+0xb5/0x140 [ 1071.076636][T12449] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1071.082967][T12449] nbd_start_device+0x189/0xb30 [ 1071.088356][T12449] nbd_genl_connect+0x167d/0x1cd0 [ 1071.093907][T12449] genl_family_rcv_msg_doit+0x233/0x340 [ 1071.099981][T12449] genl_rcv_msg+0x614/0x7a0 [ 1071.105013][T12449] netlink_rcv_skb+0x226/0x4a0 [ 1071.110301][T12449] genl_rcv+0x28/0x40 [ 1071.114815][T12449] netlink_unicast+0x7bd/0x940 [ 1071.120097][T12449] netlink_sendmsg+0x813/0xb40 [ 1071.125384][T12449] sock_sendmsg_nosec+0x13a/0x180 [ 1071.130937][T12449] ____sys_sendmsg+0x54e/0x850 [ 1071.136217][T12449] ___sys_sendmsg+0x2a5/0x360 [ 1071.141412][T12449] __x64_sys_sendmsg+0x1b1/0x290 [ 1071.146866][T12449] do_syscall_64+0x166/0x520 [ 1071.151979][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.158386][T12449] [ 1071.158386][T12449] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1071.166987][T12449] blk_alloc_queue+0x544/0x690 [ 1071.172286][T12449] __blk_mq_alloc_disk+0x194/0x390 [ 1071.177922][T12449] nbd_dev_add+0x494/0xb60 [ 1071.182857][T12449] nbd_init+0x168/0x1f0 [ 1071.187544][T12449] do_one_initcall+0x250/0x870 [ 1071.192830][T12449] do_initcall_level+0x10a/0x1a0 [ 1071.198285][T12449] do_initcalls+0x59/0xa0 [ 1071.203141][T12449] kernel_init_freeable+0x29d/0x3e0 [ 1071.208865][T12449] kernel_init+0x22/0x1d0 [ 1071.213715][T12449] ret_from_fork+0x514/0xb70 [ 1071.218817][T12449] ret_from_fork_asm+0x1a/0x30 [ 1071.224187][T12449] [ 1071.224187][T12449] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1071.231445][T12449] fs_reclaim_acquire+0x71/0x100 [ 1071.236913][T12449] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1071.243153][T12449] alloc_inode+0xb8/0x1b0 [ 1071.248004][T12449] iget_locked+0x131/0x6a0 [ 1071.252943][T12449] kernfs_get_inode+0x4f/0x770 [ 1071.258232][T12449] kernfs_get_tree+0x5cd/0x980 [ 1071.263515][T12449] vfs_get_tree+0x92/0x2a0 [ 1071.268452][T12449] do_new_mount+0x319/0xdc0 [ 1071.273469][T12449] __se_sys_mount+0x31d/0x420 [ 1071.278663][T12449] do_syscall_64+0x166/0x520 [ 1071.283773][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.290186][T12449] [ 1071.290186][T12449] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1071.298180][T12449] __lock_acquire+0x15ff/0x2e50 [ 1071.303559][T12449] lock_acquire+0x115/0x350 [ 1071.308583][T12449] down_write+0x96/0x200 [ 1071.313342][T12449] kernfs_remove_by_name_ns+0x4e/0x140 [ 1071.319319][T12449] sysfs_remove_group+0x101/0x2e0 [ 1071.324867][T12449] sysfs_remove_groups+0x54/0xb0 [ 1071.330331][T12449] net_rx_queue_update_kobjects+0x6b7/0x780 [ 1071.336759][T12449] netdev_unregister_kobject+0xff/0x450 [ 1071.342837][T12449] unregister_netdevice_many_notify+0x1be1/0x2140 [ 1071.349781][T12449] unregister_netdevice_queue+0x2f5/0x340 [ 1071.356023][T12449] nsim_destroy+0x275/0x800 [ 1071.361263][T12449] __nsim_dev_port_del+0x14e/0x200 [ 1071.366894][T12449] nsim_dev_reload_destroy+0x288/0x490 [ 1071.372875][T12449] nsim_dev_reload_down+0x8a/0xc0 [ 1071.378423][T12449] devlink_reload+0x1c5/0x890 [ 1071.383697][T12449] devlink_nl_reload_doit+0xa96/0xc80 [ 1071.389585][T12449] genl_family_rcv_msg_doit+0x233/0x340 [ 1071.395657][T12449] genl_rcv_msg+0x614/0x7a0 [ 1071.400693][T12449] netlink_rcv_skb+0x226/0x4a0 [ 1071.405978][T12449] genl_rcv+0x28/0x40 [ 1071.410483][T12449] netlink_unicast+0x7bd/0x940 [ 1071.415820][T12449] netlink_sendmsg+0x813/0xb40 [ 1071.421594][T12449] sock_sendmsg_nosec+0x13a/0x180 [ 1071.427227][T12449] ____sys_sendmsg+0x54e/0x850 [ 1071.432507][T12449] ___sys_sendmsg+0x2a5/0x360 [ 1071.437697][T12449] __x64_sys_sendmsg+0x1b1/0x290 [ 1071.443151][T12449] do_syscall_64+0x166/0x520 [ 1071.448271][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.454681][T12449] [ 1071.454681][T12449] other info that might help us debug this: [ 1071.454681][T12449] [ 1071.464901][T12449] Chain exists of: [ 1071.464901][T12449] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 1071.464901][T12449] [ 1071.478718][T12449] Possible unsafe locking scenario: [ 1071.478718][T12449] [ 1071.486269][T12449] CPU0 CPU1 [ 1071.491629][T12449] ---- ---- [ 1071.496984][T12449] rlock(&root->kernfs_supers_rwsem); [ 1071.502538][T12449] lock(pmus_lock); [ 1071.508977][T12449] lock(&root->kernfs_supers_rwsem); [ 1071.516896][T12449] lock(&root->kernfs_rwsem); [ 1071.521666][T12449] [ 1071.521666][T12449] *** DEADLOCK *** [ 1071.521666][T12449] [ 1071.529805][T12449] locks held by syz.4.13260/12449: 5, last CPU#0: [ 1071.536300][T12449] #0: ffffffff902c1c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1071.544509][T12449] #1: ffff88807601f128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 1071.554918][T12449] #2: ffff88807601d258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 1071.566075][T12449] #3: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1071.575063][T12449] #4: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1071.586381][T12449] [ 1071.586381][T12449] stack backtrace: [ 1071.592309][T12449] CPU: 0 UID: 0 PID: 12449 Comm: syz.4.13260 Not tainted syzkaller #0 PREEMPT(full) [ 1071.601770][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1071.611827][T12449] Call Trace: [ 1071.615109][T12449] [ 1071.618046][T12449] dump_stack_lvl+0xe8/0x150 [ 1071.622646][T12449] print_circular_bug+0x2e2/0x300 [ 1071.627708][T12449] check_noncircular+0x12f/0x150 [ 1071.632650][T12449] __lock_acquire+0x15ff/0x2e50 [ 1071.637501][T12449] ? __lock_acquire+0x6df/0x2e50 [ 1071.642479][T12449] lock_acquire+0x115/0x350 [ 1071.646981][T12449] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1071.652623][T12449] down_write+0x96/0x200 [ 1071.656862][T12449] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1071.662578][T12449] ? __pfx_down_write+0x10/0x10 [ 1071.667449][T12449] ? down_read+0x2be/0x330 [ 1071.671884][T12449] kernfs_remove_by_name_ns+0x4e/0x140 [ 1071.677342][T12449] sysfs_remove_group+0x101/0x2e0 [ 1071.682374][T12449] sysfs_remove_groups+0x54/0xb0 [ 1071.687315][T12449] net_rx_queue_update_kobjects+0x6b7/0x780 [ 1071.693213][T12449] netdev_unregister_kobject+0xff/0x450 [ 1071.698759][T12449] unregister_netdevice_many_notify+0x1be1/0x2140 [ 1071.705178][T12449] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1071.711951][T12449] ? __mutex_lock+0x1096/0x1550 [ 1071.716821][T12449] unregister_netdevice_queue+0x2f5/0x340 [ 1071.722586][T12449] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1071.728921][T12449] nsim_destroy+0x275/0x800 [ 1071.733436][T12449] __nsim_dev_port_del+0x14e/0x200 [ 1071.738573][T12449] nsim_dev_reload_destroy+0x288/0x490 [ 1071.744063][T12449] nsim_dev_reload_down+0x8a/0xc0 [ 1071.749186][T12449] devlink_reload+0x1c5/0x890 [ 1071.753865][T12449] ? __pfx_devlink_reload+0x10/0x10 [ 1071.759057][T12449] ? devlink_resources_validate+0xa7/0xd0 [ 1071.764885][T12449] ? devlink_resources_validate+0xa7/0xd0 [ 1071.770605][T12449] devlink_nl_reload_doit+0xa96/0xc80 [ 1071.775992][T12449] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1071.781889][T12449] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1071.788220][T12449] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1071.794566][T12449] genl_family_rcv_msg_doit+0x233/0x340 [ 1071.800126][T12449] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1071.806202][T12449] ? bpf_lsm_capable+0x9/0x20 [ 1071.810910][T12449] ? security_capable+0x7e/0x2c0 [ 1071.815881][T12449] genl_rcv_msg+0x614/0x7a0 [ 1071.820433][T12449] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1071.825466][T12449] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 1071.831891][T12449] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1071.837793][T12449] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 1071.844297][T12449] ? __pfx_ref_tracker_free+0x10/0x10 [ 1071.849675][T12449] netlink_rcv_skb+0x226/0x4a0 [ 1071.854443][T12449] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1071.859474][T12449] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1071.864767][T12449] ? down_read+0x2be/0x330 [ 1071.869185][T12449] genl_rcv+0x28/0x40 [ 1071.873189][T12449] netlink_unicast+0x7bd/0x940 [ 1071.877962][T12449] netlink_sendmsg+0x813/0xb40 [ 1071.882781][T12449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.888070][T12449] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1071.893714][T12449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.898999][T12449] sock_sendmsg_nosec+0x13a/0x180 [ 1071.904020][T12449] ____sys_sendmsg+0x54e/0x850 [ 1071.908780][T12449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1071.914060][T12449] ? import_iovec+0x73/0xa0 [ 1071.918588][T12449] ___sys_sendmsg+0x2a5/0x360 [ 1071.923268][T12449] ? __lock_acquire+0x6df/0x2e50 [ 1071.928204][T12449] ? __pfx____sys_sendmsg+0x10/0x10 [ 1071.933401][T12449] ? futex_wait+0x2a2/0x390 [ 1071.937920][T12449] ? __fget_files+0x2a/0x420 [ 1071.942511][T12449] ? __fget_files+0x3a2/0x420 [ 1071.947248][T12449] __x64_sys_sendmsg+0x1b1/0x290 [ 1071.952200][T12449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1071.957664][T12449] do_syscall_64+0x166/0x520 [ 1071.962696][T12449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.968760][T12449] ? clear_bhb_loop+0x70/0xc0 [ 1071.973441][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.979333][T12449] RIP: 0033:0x7fcfd859e159 [ 1071.983745][T12449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.003353][T12449] RSP: 002b:00007fcfd953b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.011774][T12449] RAX: ffffffffffffffda RBX: 00007fcfd8825fa0 RCX: 00007fcfd859e159 [ 1072.019835][T12449] RDX: 0000000024004804 RSI: 0000200000000080 RDI: 0000000000000003 [ 1072.027813][T12449] RBP: 00007fcfd8635024 R08: 0000000000000000 R09: 0000000000000000 [ 1072.035791][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.043810][T12449] R13: 00007fcfd8826038 R14: 00007fcfd8825fa0 R15: 00007ffd7587d028 [ 1072.051800][T12449] [ 1072.057198][T31776] net_ratelimit: 32 callbacks suppressed [ 1072.057229][T31776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.132556][T12449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.143139][T12449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.162011][T27332] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1072.201155][T30477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.223419][T12449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.223453][T12449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.271203][ T6591] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1072.280510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.280687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.280839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.320650][T12449] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1072.321076][T12449] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.321104][T12449] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.372157][T27332] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.372189][T27332] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.390772][ T6591] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.399086][ T6591] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.410436][ T6591] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.418728][ T6591] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.418767][ T6591] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.418788][ T6591] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.441363][T27332] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1072.540431][ T6588] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1072.660497][T27332] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1077.060439][T17684] net_ratelimit: 47 callbacks suppressed [ 1077.060486][T17684] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1077.171103][ T6591] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1077.241242][T31776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.280718][ T6590] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1077.391270][T17684] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1077.500621][T17684] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1077.621061][ T6588] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1077.731175][T17684] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1077.840698][ T6590] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex [ 1077.950761][ T6590] bond3: (slave 04±ÿª¨úrBº“€): failed to get link speed/duplex