last executing test programs: 2.290977335s ago: executing program 3 (id=1415): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x7}], 0x1c) 2.177618638s ago: executing program 2 (id=1417): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x48, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x44804) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, r0, 0x801, 0x70bd29, 0xfffffffc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}}, 0x448d4) 1.703287988s ago: executing program 1 (id=1422): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0xfffffff7) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100240032000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000101000000000000020000000000000900000000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) 1.688863083s ago: executing program 2 (id=1423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x81, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000030900010073797a31000000002400048020000180070001006374000014000280080002400000000108000140000000090900020073797a32000000001400000011", @ANYRES8], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0xfc6, &(0x7f00000022c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c890f902c00fe800000000000000000000000000024ff0200000000000000000000000000018400"], 0x0) 1.492633134s ago: executing program 2 (id=1424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}, 0x2}]}, &(0x7f0000000440)=0x10) 1.443373332s ago: executing program 1 (id=1425): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r2) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) close(r6) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003e000701feffffff00000000017c0000040042800c00018008000600", @ANYRES32=r1, @ANYBLOB="08004ce7"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x9b}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, 0x0, 0x4000001) 1.442066525s ago: executing program 4 (id=1427): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x454ff, 0x2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) 1.348199506s ago: executing program 3 (id=1429): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x80000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'wg2\x00', {}, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x10403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 1.227263348s ago: executing program 4 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000074000000000000f4ff0000000000000034099380d52a97689909229d7a297ec6c90024648d90e6df9a879e69b5f888ef2feaf9da626e1f78b1fa0b53b18b5b02a7ac3f4f7981a82035a6f9044ab5122d7709cc88562e78411e536c1e8f0980f51f2be9e3aa02a2f7eebb7e05728376b13e1b15ac95b644621d52a4151162f29bb2f86e63e2c38fda497a04d53bb24fedce79d82e9767ba", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028005002b0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000074000000000000f4ff0000000000000034099380d52a97689909229d7a297ec6c90024648d90e6df9a879e69b5f888ef2feaf9da626e1f78b1fa0b53b18b5b02a7ac3f4f7981a82035a6f9044ab5122d7709cc88562e78411e536c1e8f0980f51f2be9e3aa02a2f7eebb7e05728376b13e1b15ac95b644621d52a4151162f29bb2f86e63e2c38fda497a04d53bb24fedce79d82e9767ba", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028005002b0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.225433112s ago: executing program 1 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x10004890) 1.13887318s ago: executing program 0 (id=1432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@ipv4_getaddr={0x18, 0x16, 0xec35167427e1ca87}, 0x18}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000016b, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd714100027d003b11"}]}}}}}}}, 0x0) 1.115134441s ago: executing program 4 (id=1433): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) 1.007112989s ago: executing program 3 (id=1434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000240)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24004004) socket$isdn(0x22, 0x3, 0x21) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000580)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)="639d1e4c24e5797baf59ba6685c7addc47d3118494cd268ea3a06635d0276ff42c7f319292b1f040ac2a6080411db55906676efb92e89267c956e52e1c41008d357382f0c4954054ae914a89717985a6caa0664f7988f9f2092dbab7aa72f0d22c7d9f9a2c3b05fa3abb55436cbdedaac5bee04abd8fb8b7f0e4b4d282fc6f140649a4195e2dc510f24847d33a1b186aeededf5144", 0x95}, {&(0x7f00000006c0)="8f83b4a3d23ad114db1fada39af6cf9201381b48b46cd0678aa695e41fccbeccdf61cfbe95850e986e1e06df78a4cb01fd879779611b6d2c9bb4279873d8863543ed923d15e3ed0efd3c4045bea1b4b9cb6e8655169f3411681c9ed8bdaf9e1d0e99d83e7dbf85f2bbe8aa1320650df2ebbb61e08268222fee8a7177788eb8d00cd6987948e6087822c21221cd2dd397ac701c0ee5de349673e5e9d0370c2c54dc177dbeb664fcb41a5052988875167f3664d71022b8d76f891f570353ee609e576a08f7022ea982c42e9787ce15f1289a0639ed5813da934debac04b3da12607e1e8764279b9e3ca0df6c7a25ce9750e0a141bbc54ca1230da2b7599cca", 0xfe}, {&(0x7f00000007c0)="ba1b1b69478d34ed877590aef8b8a396fc1126fb0512a08486339d358b935f21d4494492988a990258f0aae9eda56ba05928d3bd8df8081671903d6d0ae6", 0x3e}, {&(0x7f0000000800)="45307b06681776609f6252ff021be108536b3ee1de8e129e44e181a9628ee2e4a9562099338eb48669ab4777e9d941a7e9308d6847ad4f2a0a0ff1c25b8c3445b1ae31caf02ce704af75e7b3b42cf3113f8822636ac030e790d2b806f36715138f42071d81", 0x65}, {&(0x7f0000000880)="56662b8a496f8af7c069a81c2aa46554a1c7d28c484e3b14a76c7cf8cd", 0x1d}], 0x5, &(0x7f0000000940)=[{0x68, 0x115, 0x100, "f4a395c9013b0914c70807137e7d3fb5a41abf8bdf9ec882ddf5a4a40fdbfe62b73660a6c5cf5dfcc5dad79690937beedc1e760889438c95efee58d554d7ef18a8ebc1d150b3bb99ebd83f1e242060d93a85ce1b"}, {0xb8, 0x1, 0x7, "ad39a2a4954f552babcf2da1fe51ba8bee6a321ad95e4739804b947156f655b1e3ffcffe929e96ab26a610f6b9adbf41dfd7513c63c7fe2d5ec2f001be354a6a89770543c83b10667eb59b01b6cc550982b4bcc35813ccbe12ca9ef78ce00e9c234d6de9f719864f556c0f7167fc712c4f736cc0bfd69b68a6e23c2ee9b9fefd1416c9a8570863813d282e0fe58d1067c22d4c110f68166cf63baf773dc67e1ee40aa1"}], 0x120}}], 0x1, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0xab, 0x5d, &(0x7f0000000380)="f344f37983897ff0e11d8005da08eff67a3bd9c5b4d4274c3143cad156a3d9d4d29b8cf53ff8d9cfef675b3d252b8b736ca60a5827d4592b69d25690263fbee16140cb457b3e10489805711ecc7ba7af0d0d267fb8699fa4797b649c6b525e3623defec04aea298ce32dedce9b812bf49c966ffbeae480622acb5e03bc76ad79bc30fc1d63f7207e9b692ea8fc0b32a06868a37abe2e6419add65b84e4cb0fe42fe04ff61aae99da100797", &(0x7f0000000040)=""/93, 0x101, 0x0, 0x0, 0x9a, &(0x7f00000001c0), &(0x7f0000000440)="b02ec7d2d4950c721c839996b05db41b26986c8d725833d7cf70aa14ef92f09d908fd3102949e31ec99acd491504cdd8acd379c704fef872fa7d0371368e924149fe68be9801a54caa49c4eb3bba8b2a95abc566d801ccfaa003a108a03cebc0da29183bd0ca83935aa31d4c0c6eb93a3b23994f574eeb88275c6f2165dea1f57e4259f54d50488809b7152403703b2574220569f0a81a83b8b7", 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@gettfilter={0x64, 0x2e, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0xe}, {0xa, 0x5}, {0x1, 0xe}}, [{0x8, 0xb, 0x86}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x2bbd}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x100}]}, 0x64}, 0x1, 0x0, 0x0, 0x6044000}, 0x4c081) 1.006815208s ago: executing program 1 (id=1435): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x74, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x84084}, 0x0) 991.917721ms ago: executing program 0 (id=1436): r0 = socket(0x26, 0x6, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000380)={0xa, 0xe22, 0x80, @mcast2, 0x1}, 0x1c) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000220000000a0001007770616e31000001641ca7ca948d914f647cad609f3ea71024913f0a0d789201f2efd81f1d5ba40f0c23e9dfc57f7aa578f6f3f71e375e11b1dddd4da7"], 0x20}, 0x1, 0x0, 0x0, 0x200088c8}, 0x20008094) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x0) close(r5) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x9, 0x8204, 0xfffffffd, 0x3215, 0x1ff, 0x6, 0xabe, r6}, &(0x7f0000000100)=0x20) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 987.539985ms ago: executing program 4 (id=1437): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x1, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048890}, 0x20000000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000845) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r4, &(0x7f0000000400)="fc56c620cef66d19e2d68f649b9c9c7a7684f9e37f838fa474af5898bdb10ce13c95b311384c5da30a9437452ddcdc05", &(0x7f0000000440)=""/135}, 0x20) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f8, 0x20, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040080}, 0x44000) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000900)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x1d, &(0x7f0000000640)=@raw=[@jmp={0x5, 0x1, 0x6, 0xa, 0x2, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @exit, @ldst={0x2, 0x2, 0x1, 0x4, 0x2, 0xc, 0xfffffffffffffff0}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50000000}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}], &(0x7f0000000740)='syzkaller\x00', 0x80000000, 0x97, &(0x7f0000000780)=""/151, 0x40f00, 0x16, '\x00', 0x0, @fallback=0x16, r6, 0x8, &(0x7f0000000880)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xf, 0x8, 0x10}, 0x10, 0x0, r7, 0x3, &(0x7f0000000940)=[0x1, 0x1, r4, r4], &(0x7f0000000980)=[{0x4, 0x4, 0xd, 0xc}, {0x1, 0x4, 0x4, 0x4}, {0x5, 0x5, 0xb}], 0x10, 0x2}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b80)={r4, &(0x7f0000000ac0)="d792f6ddb56995132292df46bd306a8ac97a4d692b8c438dfbbc05df2cffe6b0e2ac118433ae9517ec60336a3f8c81bca39ced3a67120cc28cab8a8d96f0f7bdb946bbc1b0a224cce6086c99b04fa87607bf88620f1f69512de6668cae1b0b239ef85f5cd6291e32cc06cae002a931ba4e98f47576e53dc80255b0921cc65462530063a6364963aa58e1c20ae6a3659c23d383f3075895fff7e75bdbace8d6f3acb5fa9630c20f9d502a4a2b2b5ae1d35b32f3b3df"}, 0x20) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000bc0)={0x0, 0x6}, &(0x7f0000000c00)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000c40)={r11, 0x6, 0x4, 0x2}, 0x10) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000c80)={0x1f, 0x2, 0x3}, 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r12, 0x112, 0xa, &(0x7f0000000cc0)=0x9, &(0x7f0000000d00)=0x4) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r8) sendmsg$IEEE802154_LIST_IFACE(r13, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, r14, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x11) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000f00)={0x7, &(0x7f0000000ec0)=[{0x8, 0xf3, 0xa, 0x2}, {0x2, 0x1, 0x7f, 0x9}, {0x1, 0xff, 0x1, 0xf7}, {0x4, 0x92, 0x3, 0x8}, {0x5, 0x80, 0x5, 0x9}, {0x39ad, 0x9, 0x6, 0x4}, {0x6, 0x5, 0x67, 0x10}]}) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={0x18c, r15, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x15, 0x5, "e831fe542a0075f14f88fbcb01c0b29bb8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$&]#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x862}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x11}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "c5a61ad3126948d76a624de7447bd4662fab5abde92d5aed994247735bb8793518bb08e61239d76d39612fe7c8aa37d8cf8680a19d489aa1d86a5a31bd0ac97ad6bb13568c078fd76459386fcc61ba36e40718a7ef22fbd24bc23304c5a6f7e42bd34effc88d99482c912c3795b18794f18104b8bc8af9c30e9a0439e1f7d7dd08eacacdff79495354812b3f169123493d7ca04b01e57317"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x48062}, 0xd0) 878.917215ms ago: executing program 1 (id=1438): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000a00000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b2a, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711063000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)="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", 0x1ca}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f0000000540), 0x4) (async) sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd, 0xa}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x8, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@deltaction={0x84, 0x31, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5bb}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4440}, 0x4) 831.92029ms ago: executing program 3 (id=1439): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000009595"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) 768.583029ms ago: executing program 1 (id=1440): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendto$unix(r1, &(0x7f0000000340)="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", 0x140, 0x4c010, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f000001b640)=""/102400, 0x19000}], 0x10000000000002e2, 0x1903d}}], 0x48}, 0x0) 675.348942ms ago: executing program 0 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x16, 0x4, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x48000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r4, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x12) 605.583729ms ago: executing program 3 (id=1442): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x26, 0x7f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000200)={0x2, 0x39, "b1bba70658a765f8cae5ac22a18ea84e50dba2dd80fb26fb0319ffb90b53e027c359c84cfd22dc08ea17d0ad894a1a9ba70c2f35a9bd16ef23"}) socketpair(0x25, 0x80000, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x7e4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xa0, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa25}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}]}]}, @NL80211_ATTR_TID_CONFIG={0x3dc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x20, 0x24, 0x1, 0x6c, 0xb, 0x36, 0x1b, 0x48, 0x0, 0x9, 0x5, 0x4, 0x1, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0xc, 0xb, 0x4, 0xb, 0x30, 0x4, 0x60, 0x3, 0x48, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7, 0x2c7, 0x2, 0xfffd, 0x1d, 0x81, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x3, 0x40, 0xc92d, 0x4, 0x3, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x81, 0xa, 0x5, 0x0, 0xc, 0x6, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfffe, 0x1f, 0x81, 0xb8c, 0x2, 0x4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x1000, 0x200, 0xf0, 0x1, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x3, 0x36, 0x48, 0x1b, 0x1, 0x12, 0x5, 0x16, 0x48, 0x6c, 0x1, 0xb, 0x5, 0x68, 0x30, 0x24, 0x9, 0x9]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xae9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x6c, 0x60, 0x36, 0x12, 0x16, 0x6c, 0x5, 0x30, 0xe, 0x5, 0x1b, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x7f, 0x101, 0xf, 0xc7a, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x1, 0x748, 0x40, 0xb, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbf, 0x0, 0x2, 0xd4ec, 0x3, 0x7, 0xd, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3800, 0x5007, 0x3, 0x401, 0x81, 0x57, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x3, 0x6, 0xfa6e, 0x800, 0x7, 0x5707]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6ee, 0x3, 0x7, 0x8, 0x5, 0x8, 0x40, 0x86]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x7, 0x6, 0x3, 0x0, 0xc, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffff00}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1000, 0xe, 0x2, 0x8, 0x5f56, 0x7, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x8000, 0x7, 0x8cb, 0x8, 0x6, 0x4]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x5}, {0x0, 0x8}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x24, 0x60, 0x5, 0x30, 0x18, 0x24, 0x18, 0x9, 0x30, 0x12, 0x9, 0x1, 0x48, 0x0, 0x36, 0x18, 0x2, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x3}, {0x6, 0x5}, {0x3, 0x9}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x5}, {0x7, 0x5}, {0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x38, 0xaf, 0x4, 0x399, 0xf, 0xff74, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x24, 0x24, 0x15cb66511251ee9d, 0x3, 0x5, 0x6b378b475f029483, 0x24, 0x2, 0x1b]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0xb, 0x2, 0x0, 0x9, 0x60, 0x3, 0x12, 0x30, 0xc, 0x2, 0x60, 0x3, 0x16, 0x9, 0x1b, 0x60, 0xb, 0x48, 0x30, 0xb, 0x36, 0x5, 0x2, 0x16, 0xb, 0x1, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x354, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x338, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc1c, 0x3dd4, 0x6, 0xfff3, 0x3, 0x8, 0x5]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x3, 0x12, 0x4, 0xa5962061af70a3ce, 0x5, 0x18, 0x24]}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x6}, {0x5, 0x1}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0xa}, {0x5, 0x6}, {0x5, 0x3}, {0x3, 0x3}, {0x1, 0x7}, {0x2}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0x9}, {0x3, 0x1}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0xa}, {0x3, 0x6}, {0x6, 0x4}, {0x2, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x8}, {0x5, 0x1}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x1, 0x5}, {0x6, 0x2}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x2, 0x7}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2400, 0x9, 0x16ca, 0x9, 0x2, 0x7, 0xed, 0x264]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xd1a, 0x88, 0x7, 0x6, 0x6, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x24, 0x6, 0x6, 0x5, 0x18, 0x12, 0xc, 0x6c, 0x16, 0x24, 0x30, 0x14, 0xb, 0x36, 0x12, 0x6, 0x6, 0x0, 0x1b, 0x18, 0x3, 0x6, 0x18, 0x2, 0x44, 0x2, 0x36, 0x1d, 0x8, 0x30, 0x537155b811245064]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x16, 0x36, 0x60, 0x3, 0xb, 0x18, 0x60, 0x36, 0x30, 0xa, 0x16, 0x60, 0x4, 0x36, 0x7, 0x6, 0x48, 0x4, 0xb, 0x3, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x12, 0xc, 0x1, 0x36, 0x22, 0x3, 0x5, 0x1, 0x36, 0x16, 0x16, 0xc, 0x48, 0x48, 0x2, 0x6, 0x16, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x3, 0x15, 0x5, 0x3, 0xc, 0xdee]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x41f5, 0x9, 0x40, 0x0, 0xfff, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x1000, 0xfffd, 0x2, 0xa, 0x6, 0xf50]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x1}, {0x6, 0x1f}, {0x3, 0x4}, {0x1, 0x8}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x4, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x1}, {0x2, 0x7}, {0x3, 0x5}, {0x6, 0x6}, {}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x5}, {0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x1}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x3}, {0x7, 0x4}, {0x6, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x5, 0x7}]}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xee87, 0x4, 0x6, 0x7, 0x216, 0xfff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2766, 0x100, 0x0, 0x800, 0x8001, 0xf6c, 0x7, 0x7ddb]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x4}, {0x1, 0x9}, {0x5, 0xa}, {0x6, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0xa}, {0x5, 0x6}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x7}, {0x6, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x2, 0xa}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x2}, {0x5}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x2}, {0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0x8}, {0x4, 0x8}, {0x2, 0x6}, {0x2, 0x9}, {0x7, 0x6}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x4}, {0x7, 0x7}, {0x1}, {0x1, 0x9}, {0x1}, {0x0, 0x9}, {0x5, 0x6}, {0x1}, {0x1, 0x8}, {0x4}, {0x5}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x8}, {0x3, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x4}, {0x6, 0x6}, {0x3, 0x7}, {0x2, 0x9}, {0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x2}, {0x7, 0x4}, {0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x8, 0x8, 0xffff, 0xfff, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0x3, 0x24, 0x9, 0x9, 0x60]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x70, 0x7fff, 0x0, 0xc, 0x4, 0x8, 0xc, 0x1bb5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x8, 0xfff, 0x4, 0x2, 0xb, 0xfffa]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x9, 0x4, 0x12, 0x18, 0x24, 0xb, 0x18, 0x18, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x7e4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x7c, r1, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x53d}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x1, 0x4, 0x7c1, 0x3]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xb}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5eff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x8c, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044880}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) r7 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000e80)={0x0, 0x80, 0x3}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000f00)={0x0, 0xb3, "27a7c4f9e5f78fffbcd0c262284457c8a562dd714e6050303067514a4b6a81f12e35ee502d89317c580df0b832f43f3884143c3b4bea632e524080c6043aacd795ca7c87103a23aa94eae2f1bd3da6a49b0394e7d9a0b52bbaa0e67e0e69db9ecc396b7de68093eb837640a0633356a9c2d74cc6bd4c74ebc926e861d301cbb83fd407630bec9a59a5df80ef7a7d2b7c0ed7adb119d9a625a2c62c46c4df0cfe5a17e188da62181fea0cb22f70dfe0df4b351b"}, &(0x7f0000000fc0)=0xbb) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000001000)={r8, 0x80000001, 0x5, 0x1, 0x5, 0x5, 0x3, 0x1, {r9, @in={{0x2, 0x4e20, @loopback}}, 0x2, 0x1, 0x3, 0xd00, 0x8001}}, &(0x7f00000010c0)=0xb0) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001100)='rdma.max\x00', 0x2, 0x0) splice(r11, &(0x7f0000001140)=0x9, r4, &(0x7f0000001180)=0x200, 0x9, 0x8) r12 = accept4$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14, 0x800) r13 = gettid() getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) pipe(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000011c0)="f0d8a940baa2257681fbe91606308be48cfa0a0dacfd54e259308eb45c3c0f155d6015765c08386254d7e8d17118be84b487b2d794a1693dc9e0d74772c8cc6c63529803d6e96c0ad70c2f7015a88ae205ba689a6757e593b9259e1f1bc820725e64e1a1deaf7d2c378b214d138df5b81f8f0c671ccfacce80ed503a6d07357247487b43c48b5f", 0x87}, {&(0x7f0000001280)="2a4df05f8fe1d942ce57084065ec335c34a6f7", 0x13}, {&(0x7f00000012c0)="1c18bfbb8d9823a7cc60dec64f320fd9b0768b9b7bd0ca2522e47274acd08a68", 0x20}, {&(0x7f0000001300)="ab8073c12f158fc2b50cbaa17424896012bab236ba5514516a9e8c82eb7684cabaf29ff400ea7fb062c789b519e56c880111eedc762462c87994a2830a3174fa09edd8ae4e59c0a28558ba592162", 0x4e}, {&(0x7f0000001380)="50c7c502ca22207f636e292b260418ee88865bbe804b301d0db6074253bdecb49d8b693ff61ed782bd0458bc1f4aeff386e0b55a28e4e68b6f198dc5525be298c0a6accf331c64f7157886fc31660a99cacfa92fdf23a7904e51b6719fe8965efaec9f355f2ccb59d128ca31030af23bba5c5073d2ba9a28cf3883bc83816b26d7af6d51479cbacfe9f4f476ba79f8fa12a927e3fa", 0x95}, {&(0x7f0000001440)="7230ab8a069cabaa3e03d9c30a00b78788277ed696fdea7665a2b92cf823b02ab380d7ed74a631a8515ff4b0a992bb3fc3e468538dfd3086b481df7c7e34204fc5b56e0ac5d99ceaa4ff522471c9608faefda56720a3a7e0d7eb801f4352eb0ed56a44d58606cd6026fa595b94b29298f9b09c17b44303699ce739d288f3777c81ee4dd775f8b249d5c6326598967e8fc63f0461230aed34c9d98f9814029193334bea874814d065f6cc5e68c5b9e74d5be4a07d9efb9b9c3ae51c2ecb1c336b27a05d12f63b73b6961eb203606dd703cc5d", 0xd2}], 0x6, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [r12, r4]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff, r15}}}, @rights={{0x2c, 0x1, 0x1, [r7, r17, r6, r2, r6, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r11, r6, r18]}}], 0x88, 0x40}, 0x8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001840)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000001880)=@assoc_id=r10, 0x4) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000018c0), &(0x7f0000001900)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001940)={r10, 0x4}, &(0x7f0000001980)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a00)={r14, r16, 0x0, 0x1, &(0x7f00000019c0)='\x00'}, 0x30) 539.089258ms ago: executing program 4 (id=1443): r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800010070707000390100d6cfba000000000070dc5f12aa63dcae88513f34309b7161a8f579", @ANYRES32, @ANYBLOB="08001f0000000000"], 0x40}}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) epoll_create(0xffffffc0) r3 = socket$inet6(0xa, 0x5, 0x53) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x10}}, 0x18805) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) connect$unix(r5, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bind$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000ffffffff000000000000b539e8fc7477bde4bd867b9c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r7, 0x0) close(0x4) 471.275517ms ago: executing program 2 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}], 0x10) 470.565958ms ago: executing program 0 (id=1445): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, 0x0, 0x0) listen(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty, 0x2}, 0x1c) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x7}, 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x15) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r10) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYRES8=r6, @ANYRES64=r1, @ANYRES32=0x41424344, @ANYBLOB="8206050001e210ea", @ANYRES32=0x0, @ANYRESOCT=r11], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xf, &(0x7f00000004c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 342.501735ms ago: executing program 0 (id=1446): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r1, 0x4) pread64(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) 150.225483ms ago: executing program 0 (id=1447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, 0x0}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) 108.236656ms ago: executing program 2 (id=1448): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c0004800500030002"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_alloc_da_blocks\x00'}, 0x18) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="6c0a11066692dc80caac606d42959102f376e3843b0622f414070d57f78f89ee4f3d7ab7ac6710942d518beb34efa42d7fd196db4b796ee19daa74d957821617c0fd24c287de1de5a37f6dc7bf9d8805fb6db41ed72eed89a50df552b640e40f5dcc24557aabe3780083df838738e2f9c98b0840ae7cca8c7c4d306e1dd11f6fd29d25d83b801d3577ff935515264abaddf8be5b101356f9fa456928d82f877b3f4f7cad348e44e480bcb44564845294", 0xb0}, {&(0x7f00000002c0)="61b266c319432e0c88890da1c23f9144fe5dcb8113c58aaa812e13071b20cb93fb772e18d9c694d90228d5b2126e8d1cee9d3a637141a48b61c1022244ab0fb3601d542be00eeaf01de8fad0ada3a84bac447e942805abf106edfb6712b567e0551389a8e3ef91fa2fac9564414991059ec9d31ce1cbbe5660bbb1bd63249b73bc5a96866b1b96c86f79dab742cd7512536b766aaeac1ffe7d7e9d07877702c4", 0xa0}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f0000001380)="2af1359287927a3f0d0f9438ccd99f846399d8ddfcad101910083b8d38b98beca8af8c63783dce5629cf7ce6530bf90efe1ba7a1964d18aa00b2778598c922d920de6fc61fd8b9f8cfe870e151c9790333bb61a6d5e806ff871e849ac9963a1abc864c305681831687cdd221b6546166b83b682f13ddcbb9fd8d4d29c14d680f52d408ac2b22382d4792a5afc1f1063aaa7b1c9281cf01b4d73a5b0cfeaf2af7200840859710a4e59d72d3886d", 0xad, 0x4000000}, 0x4091) 99.117832ms ago: executing program 3 (id=1449): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 43.006775ms ago: executing program 4 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xb6c80a31ab9fd0e4}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) close(r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback}, &(0x7f0000000180)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000340)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x1, 0x10}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e22, 0x8, @empty, 0x5}}, 0x4, 0xfff8}, &(0x7f00000004c0)=0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000640)={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f00000006c0), 0x2) ioctl$SIOCNRDECOBS(r6, 0x89e2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r8, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r10) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x792b}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000840}, 0x40c1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r10) r12 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000009c0)) sendmmsg$unix(r12, &(0x7f0000000a00), 0x0, 0x40800) sendmsg$nl_route(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@ipv6_getrule={0x1c, 0x22, 0xd1c, 0x70bd25, 0x25dfdbff, {0xa, 0x14, 0x0, 0x5, 0xf2, 0x0, 0x0, 0x4, 0x12}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r13, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24004800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', r9, 0x2f, 0xf9, 0xbd, 0x1, 0x42, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x40, 0x80, 0xfffffffb}}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r14, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_ZONE={0x6}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 0s ago: executing program 2 (id=1451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 84.599800][ T5851] cgroup: Unknown subsys name 'net' [ 84.694558][ T5851] cgroup: Unknown subsys name 'cpuset' [ 84.703817][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.341974][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.018805][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.018898][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.029424][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.041632][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.048040][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.049643][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.063369][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.064518][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.079615][ T5882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.087225][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.094023][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.095468][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.103604][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.116277][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.123797][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.129673][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.133178][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.145427][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.148391][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.169243][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.189118][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.208574][ T5883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.216679][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.246940][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.257570][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.792519][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 89.969628][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 90.020278][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 90.038091][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 90.132978][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.142419][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.150662][ T5869] bridge_slave_0: entered allmulticast mode [ 90.159175][ T5869] bridge_slave_0: entered promiscuous mode [ 90.168995][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.176127][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.183715][ T5869] bridge_slave_1: entered allmulticast mode [ 90.192441][ T5869] bridge_slave_1: entered promiscuous mode [ 90.348138][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.418853][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.454889][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.462173][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.470242][ T5864] bridge_slave_0: entered allmulticast mode [ 90.479179][ T5864] bridge_slave_0: entered promiscuous mode [ 90.505027][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.512341][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.519886][ T5864] bridge_slave_1: entered allmulticast mode [ 90.527711][ T5864] bridge_slave_1: entered promiscuous mode [ 90.535224][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.542491][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.550731][ T5863] bridge_slave_0: entered allmulticast mode [ 90.558068][ T5863] bridge_slave_0: entered promiscuous mode [ 90.565724][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.573550][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.580808][ T5866] bridge_slave_0: entered allmulticast mode [ 90.589060][ T5866] bridge_slave_0: entered promiscuous mode [ 90.640411][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.647666][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.654808][ T5863] bridge_slave_1: entered allmulticast mode [ 90.662386][ T5863] bridge_slave_1: entered promiscuous mode [ 90.669116][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.676406][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.683869][ T5866] bridge_slave_1: entered allmulticast mode [ 90.691295][ T5866] bridge_slave_1: entered promiscuous mode [ 90.699958][ T5869] team0: Port device team_slave_0 added [ 90.787197][ T5869] team0: Port device team_slave_1 added [ 90.810354][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.823316][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.851411][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.864014][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.923347][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.951344][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.974978][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.982558][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.009118][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.021765][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 91.037257][ T5864] team0: Port device team_slave_0 added [ 91.074308][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.081399][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.107384][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.127665][ T5864] team0: Port device team_slave_1 added [ 91.135262][ T5863] team0: Port device team_slave_0 added [ 91.144370][ T5863] team0: Port device team_slave_1 added [ 91.151899][ T5866] team0: Port device team_slave_0 added [ 91.197731][ T51] Bluetooth: hci3: command tx timeout [ 91.208065][ T5866] team0: Port device team_slave_1 added [ 91.276978][ T5877] Bluetooth: hci4: command tx timeout [ 91.282689][ T5877] Bluetooth: hci0: command tx timeout [ 91.288651][ T5875] Bluetooth: hci1: command tx timeout [ 91.296139][ T51] Bluetooth: hci2: command tx timeout [ 91.324679][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.331839][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.358964][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.371089][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.378160][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.404649][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.416803][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.423776][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.449870][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.481214][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.488269][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.514462][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.526181][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.533383][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.560272][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.571984][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.579228][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.605248][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.629329][ T5869] hsr_slave_0: entered promiscuous mode [ 91.635811][ T5869] hsr_slave_1: entered promiscuous mode [ 91.683126][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.690422][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.698143][ T5865] bridge_slave_0: entered allmulticast mode [ 91.705388][ T5865] bridge_slave_0: entered promiscuous mode [ 91.735909][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.743632][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.750961][ T5865] bridge_slave_1: entered allmulticast mode [ 91.758762][ T5865] bridge_slave_1: entered promiscuous mode [ 91.801099][ T5866] hsr_slave_0: entered promiscuous mode [ 91.808023][ T5866] hsr_slave_1: entered promiscuous mode [ 91.814275][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 91.820218][ T5866] Cannot create hsr debugfs directory [ 91.898856][ T5863] hsr_slave_0: entered promiscuous mode [ 91.906092][ T5863] hsr_slave_1: entered promiscuous mode [ 91.912669][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 91.920003][ T5863] Cannot create hsr debugfs directory [ 91.921681][ T847] cfg80211: failed to load regulatory.db [ 92.000370][ T5864] hsr_slave_0: entered promiscuous mode [ 92.007105][ T5864] hsr_slave_1: entered promiscuous mode [ 92.013234][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 92.019543][ T5864] Cannot create hsr debugfs directory [ 92.028270][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.095322][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.264039][ T5865] team0: Port device team_slave_0 added [ 92.273200][ T5865] team0: Port device team_slave_1 added [ 92.390977][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.399570][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.425928][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.439407][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.446369][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.473257][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.686036][ T5865] hsr_slave_0: entered promiscuous mode [ 92.693029][ T5865] hsr_slave_1: entered promiscuous mode [ 92.699574][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 92.705338][ T5865] Cannot create hsr debugfs directory [ 92.760503][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.795958][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.835052][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.861743][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.953052][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.964567][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.989551][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.027373][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.107636][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.120714][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.145876][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.158157][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.276779][ T51] Bluetooth: hci3: command tx timeout [ 93.304063][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.325468][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.349990][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.357023][ T5875] Bluetooth: hci1: command tx timeout [ 93.357079][ T5875] Bluetooth: hci4: command tx timeout [ 93.357230][ T5877] Bluetooth: hci0: command tx timeout [ 93.368349][ T51] Bluetooth: hci2: command tx timeout [ 93.384638][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.400896][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.430832][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.473029][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.494791][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.524420][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.531694][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.572554][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.579737][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.618637][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.625791][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.637720][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.644882][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.654234][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.665108][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.678117][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.691454][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.827635][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.910356][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.995856][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.003106][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.042184][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.049412][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.066126][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.135614][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.194256][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.201489][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.216435][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.223686][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.343484][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.465065][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.483025][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.490297][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.533116][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.540350][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.558545][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.569464][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.744534][ T5866] veth0_vlan: entered promiscuous mode [ 94.794094][ T5869] veth0_vlan: entered promiscuous mode [ 94.818459][ T5866] veth1_vlan: entered promiscuous mode [ 94.830030][ T5869] veth1_vlan: entered promiscuous mode [ 94.865829][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.978311][ T5866] veth0_macvtap: entered promiscuous mode [ 94.996161][ T5866] veth1_macvtap: entered promiscuous mode [ 95.014312][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.025965][ T5869] veth0_macvtap: entered promiscuous mode [ 95.079728][ T5869] veth1_macvtap: entered promiscuous mode [ 95.144934][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.178286][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.190093][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.219545][ T5864] veth0_vlan: entered promiscuous mode [ 95.242423][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.255445][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.282294][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.312601][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.325673][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.361345][ T5877] Bluetooth: hci3: command tx timeout [ 95.371841][ T5864] veth1_vlan: entered promiscuous mode [ 95.403156][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.421338][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.440014][ T5877] Bluetooth: hci0: command tx timeout [ 95.440066][ T5881] Bluetooth: hci1: command tx timeout [ 95.445452][ T5877] Bluetooth: hci2: command tx timeout [ 95.451581][ T51] Bluetooth: hci4: command tx timeout [ 95.483089][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.520812][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.532624][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.631714][ T5864] veth0_macvtap: entered promiscuous mode [ 95.689204][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.690168][ T5864] veth1_macvtap: entered promiscuous mode [ 95.700604][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.768695][ T5863] veth0_vlan: entered promiscuous mode [ 95.775678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.784152][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.813270][ T5863] veth1_vlan: entered promiscuous mode [ 95.825181][ T5865] veth0_vlan: entered promiscuous mode [ 95.866377][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.891995][ T5865] veth1_vlan: entered promiscuous mode [ 95.916881][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.920676][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.924829][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.933567][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.949269][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.965721][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.010403][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.025482][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.057336][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.074994][ T5863] veth0_macvtap: entered promiscuous mode [ 96.100061][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.131279][ T5863] veth1_macvtap: entered promiscuous mode [ 96.227965][ T5865] veth0_macvtap: entered promiscuous mode [ 96.270567][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.324232][ T5865] veth1_macvtap: entered promiscuous mode [ 96.373750][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.392344][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.406238][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.415496][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.431893][ T3519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.441033][ T3519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.487197][ T3519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.524090][ T3519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.596022][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.605776][ T5993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.664596][ T3519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.689588][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.698136][ T3519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.698215][ T3519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.698253][ T3519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.766672][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.079830][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.122594][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.203289][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.230211][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.353232][ T5993] Zero length message leads to an empty skb [ 97.408219][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.433017][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.436874][ T51] Bluetooth: hci3: command tx timeout [ 97.517277][ T51] Bluetooth: hci2: command tx timeout [ 97.518498][ T5875] Bluetooth: hci1: command tx timeout [ 97.522719][ T5881] Bluetooth: hci0: command tx timeout [ 97.528196][ T5877] Bluetooth: hci4: command tx timeout [ 97.585778][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.620024][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.739631][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 97.904666][ T6020] netlink: 'syz.3.11': attribute type 9 has an invalid length. [ 97.906191][ T6017] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 97.963512][ T6025] netlink: 'syz.3.11': attribute type 9 has an invalid length. [ 98.017137][ T6023] nbd0: detected capacity change from 0 to 127 [ 98.107741][ T5877] block nbd0: Receive control failed (result -104) [ 98.283859][ T6033] netlink: 3092 bytes leftover after parsing attributes in process `syz.1.13'. [ 98.465259][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 98.525126][ T6049] netlink: 84 bytes leftover after parsing attributes in process `syz.3.16'. [ 98.555313][ T6049] netlink: 648 bytes leftover after parsing attributes in process `syz.3.16'. [ 98.570634][ T6049] netlink: 7832 bytes leftover after parsing attributes in process `syz.3.16'. [ 98.689280][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 98.844658][ T6058] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 98.989672][ T6066] netlink: 68 bytes leftover after parsing attributes in process `syz.1.22'. [ 99.094074][ T6076] netlink: 104 bytes leftover after parsing attributes in process `syz.0.26'. [ 99.251677][ T6087] netlink: 5 bytes leftover after parsing attributes in process `syz.2.29'. [ 99.260967][ T6080] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.308824][ T6087] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 99.323915][ T6087] 0ªî{X¹¦: entered allmulticast mode [ 99.342482][ T6087] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 99.602143][ T6098] netlink: 'syz.3.31': attribute type 11 has an invalid length. [ 99.896458][ T6117] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 100.094325][ T6127] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 100.156366][ T6129] Bluetooth: MGMT ver 1.23 [ 100.235188][ T6132] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 100.333830][ T6137] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 100.355319][ T6137] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 100.651002][ T6147] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 100.670718][ T6147] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20000 [ 100.731406][ T6147] ifb0: entered promiscuous mode [ 100.746650][ T6147] ifb0: entered allmulticast mode [ 101.869477][ T6200] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 102.006977][ T6200] netlink: 'syz.2.57': attribute type 2 has an invalid length. [ 102.055441][ T6200] netlink: 'syz.2.57': attribute type 8 has an invalid length. [ 102.214239][ T6208] tipc: Enabling of bearer rejected, failed to enable media [ 102.651108][ T6234] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 103.264190][ T6262] __nla_validate_parse: 25 callbacks suppressed [ 103.264212][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.388496][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.477784][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.548765][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.599194][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.605654][ T6275] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 103.722887][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 103.746936][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.802559][ T6278] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 103.839951][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.853309][ T6283] warning: `syz.2.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.890895][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 103.912666][ T6278] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.74'. [ 104.231480][ T6301] netlink: 'syz.4.79': attribute type 11 has an invalid length. [ 104.254191][ T6298] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 104.393518][ T6303] sctp: failed to load transform for md5: -2 [ 104.732695][ T6325] batman_adv: batadv0: Adding interface: dummy0 [ 104.755311][ T6325] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.855711][ T6325] batman_adv: batadv0: Interface activated: dummy0 [ 104.939062][ T6328] batadv0: mtu less than device minimum [ 104.975430][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.987677][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.999956][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.011918][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.024137][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.036154][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.513868][ T6360] hsr_slave_0: left promiscuous mode [ 105.531549][ T6360] hsr_slave_1: left promiscuous mode [ 106.171790][ T6394] unsupported nla_type 28168 [ 106.197580][ T6394] netlink: 'syz.0.100': attribute type 5 has an invalid length. [ 107.005426][ T6426] lo: entered promiscuous mode [ 108.427411][ T6483] __nla_validate_parse: 40 callbacks suppressed [ 108.427430][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.494552][ T6483] netlink: 84 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.520883][ T6483] netlink: 648 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.584050][ T6483] netlink: 7832 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.714608][ T6494] netlink: 48 bytes leftover after parsing attributes in process `syz.4.133'. [ 109.195999][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 109.215042][ T5983] net_ratelimit: 94 callbacks suppressed [ 109.215061][ T5983] TC_ACT_REPEAT abuse ? [ 109.251340][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 109.316628][ T6511] bridge_slave_1: left allmulticast mode [ 109.331525][ T6511] bridge_slave_1: left promiscuous mode [ 109.349247][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.384381][ T6511] bridge_slave_0: left allmulticast mode [ 109.423106][ T6511] bridge_slave_0: left promiscuous mode [ 109.440798][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.650166][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 109.683104][ T6531] netlink: 84 bytes leftover after parsing attributes in process `syz.1.145'. [ 109.725499][ T6531] netlink: 648 bytes leftover after parsing attributes in process `syz.1.145'. [ 110.779331][ T6579] blkio.reset_stats is deprecated [ 111.184118][ T6599] openvswitch: netlink: Missing key (keys=40, expected=80) [ 111.635474][ T6613] tipc: Started in network mode [ 111.686664][ T6613] tipc: Node identity 7adc29a4e39d, cluster identity 4711 [ 111.716872][ T6613] tipc: Enabled bearer , priority 0 [ 111.753041][ T6613] syzkaller0: entered promiscuous mode [ 111.766176][ T6613] syzkaller0: entered allmulticast mode [ 111.815217][ T6613] tipc: Resetting bearer [ 111.960016][ T6616] tipc: Resetting bearer [ 111.985483][ T6616] tipc: Disabling bearer [ 112.140393][ T6638] veth0: entered promiscuous mode [ 112.298982][ T6635] veth0: left promiscuous mode [ 112.397346][ C1] TC_ACT_REPEAT abuse ? [ 112.772103][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fa0d400: rx timeout, send abort [ 112.782904][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fa0d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.796896][ T6672] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 113.810241][ T6672] __nla_validate_parse: 10 callbacks suppressed [ 113.810257][ T6672] netlink: 228 bytes leftover after parsing attributes in process `syz.3.189'. [ 113.986316][ T6695] netlink: 'syz.0.196': attribute type 25 has an invalid length. [ 114.058428][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 114.347778][ T6712] dvmrp0: entered allmulticast mode [ 114.413326][ T6719] dvmrp0: left allmulticast mode [ 114.496128][ T6724] sctp: [Deprecated]: syz.3.204 (pid 6724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.496128][ T6724] Use struct sctp_sack_info instead [ 114.525191][ T6722] sctp: [Deprecated]: syz.3.204 (pid 6722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.525191][ T6722] Use struct sctp_sack_info instead [ 114.895732][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 115.005036][ T6741] : entered promiscuous mode [ 115.049592][ T6750] netlink: 96 bytes leftover after parsing attributes in process `syz.0.208'. [ 115.287032][ T6757] netlink: 76 bytes leftover after parsing attributes in process `syz.3.212'. [ 115.295959][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 115.348914][ T6760] netlink: 'syz.0.213': attribute type 12 has an invalid length. [ 115.363000][ T6757] netlink: 56 bytes leftover after parsing attributes in process `syz.3.212'. [ 115.388593][ T6757] netlink: 56 bytes leftover after parsing attributes in process `syz.3.212'. [ 115.697305][ T6775] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 115.730610][ T6775] team0: Device veth1_macvtap failed to register rx_handler [ 115.761449][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 116.216467][ T6803] tipc: Started in network mode [ 116.233535][ T6803] tipc: Node identity fe5e22e1cd21, cluster identity 4711 [ 116.269148][ T6803] tipc: Enabled bearer , priority 0 [ 116.442324][ T6804] tipc: Disabling bearer [ 116.642324][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 116.692286][ T6824] tc_dump_action: action bad kind [ 116.865010][ T6837] Bluetooth: MGMT ver 1.23 [ 117.248405][ T6855] syzkaller1: entered promiscuous mode [ 117.286060][ T6855] syzkaller1: entered allmulticast mode [ 117.647350][ T6879] veth0: entered promiscuous mode [ 118.106628][ T6904] Unsupported ieee802154 address type: 0 [ 118.138126][ T6901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 118.300357][ T6875] veth0: left promiscuous mode [ 118.819049][ T6930] tipc: Started in network mode [ 118.837974][ T6930] tipc: Node identity , cluster identity 4711 [ 118.875788][ T6930] tipc: Failed to obtain node identity [ 118.897763][ T6930] tipc: Enabling of bearer rejected, failed to enable media [ 119.034418][ T6931] syzkaller0: entered promiscuous mode [ 119.047433][ T6931] syzkaller0: entered allmulticast mode [ 119.389520][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.414345][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.433504][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.449738][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.459371][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.469981][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.483015][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.499578][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.509449][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 119.528022][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 120.770392][ T6974] __nla_validate_parse: 4 callbacks suppressed [ 120.770411][ T6974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 121.106780][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.284'. [ 121.160509][ T6994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.282'. [ 121.190640][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.284'. [ 121.297307][ T6986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.282'. [ 121.527680][ T7007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.286'. [ 121.878953][ T7011] tipc: Invalid UDP bearer configuration [ 121.879010][ T7011] tipc: Enabling of bearer rejected, failed to enable media [ 122.703814][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 123.690090][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 123.741953][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.312'. [ 123.767964][ T7093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.849104][ T7087] bridge1: port 1(veth0_to_bond) entered blocking state [ 123.883702][ T7087] bridge1: port 1(veth0_to_bond) entered disabled state [ 123.908488][ T7087] veth0_to_bond: entered allmulticast mode [ 123.962413][ T7087] veth0_to_bond: entered promiscuous mode [ 124.084820][ T7106] netlink: 80 bytes leftover after parsing attributes in process `syz.0.319'. [ 124.217693][ T7111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.892241][ T7158] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 124.954899][ T7158] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 125.741796][ T7197] 8021q: VLANs not supported on wg1 [ 125.895356][ T7212] IPv6: Can't replace route, no match found [ 125.941263][ T7216] __nla_validate_parse: 19 callbacks suppressed [ 125.941364][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 125.967431][ T7216] netlink: 84 bytes leftover after parsing attributes in process `syz.0.350'. [ 126.006648][ T7216] netlink: 648 bytes leftover after parsing attributes in process `syz.0.350'. [ 126.037297][ T7216] netlink: 7832 bytes leftover after parsing attributes in process `syz.0.350'. [ 126.139822][ T7222] netlink: 'syz.1.352': attribute type 21 has an invalid length. [ 126.256235][ T7228] netlink: 76 bytes leftover after parsing attributes in process `syz.3.355'. [ 126.570207][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'. [ 126.937728][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 126.980515][ T7262] netlink: 84 bytes leftover after parsing attributes in process `syz.4.366'. [ 127.019049][ T7262] netlink: 648 bytes leftover after parsing attributes in process `syz.4.366'. [ 127.050937][ T7262] netlink: 7832 bytes leftover after parsing attributes in process `syz.4.366'. [ 127.324406][ T7282] syzkaller0: entered promiscuous mode [ 127.340464][ T7282] syzkaller0: entered allmulticast mode [ 127.363332][ T7284] Unsupported xt match [ 127.363352][ T7284] unable to load match [ 127.401786][ T7282] tipc: Started in network mode [ 127.427595][ T7282] tipc: Node identity 7a3dc3853f34, cluster identity 4711 [ 127.446691][ T7282] tipc: Enabled bearer , priority 0 [ 127.479733][ T7282] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 127.488982][ T7292] netlink: 'syz.1.376': attribute type 7 has an invalid length. [ 127.529346][ T7282] tipc: Resetting bearer [ 127.559383][ T7277] tipc: Resetting bearer [ 127.654995][ T7277] tipc: Disabling bearer [ 127.710479][ T7305] netlink: 'syz.3.381': attribute type 7 has an invalid length. [ 127.718458][ T7305] netlink: 'syz.3.381': attribute type 8 has an invalid length. [ 128.134602][ T7321] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 128.193218][ T7321] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 128.401255][ T1167] block nbd0: Possible stuck request ffff888025045080: control (read@0,1024B). Runtime 30 seconds [ 128.412938][ T1167] block nbd0: Possible stuck request ffff888025045240: control (read@1024,1024B). Runtime 30 seconds [ 128.424369][ T1167] block nbd0: Possible stuck request ffff888025045400: control (read@2048,1024B). Runtime 30 seconds [ 128.435412][ T1167] block nbd0: Possible stuck request ffff8880250455c0: control (read@3072,1024B). Runtime 30 seconds [ 128.447568][ T7339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.713161][ T7350] netlink: 'syz.0.399': attribute type 13 has an invalid length. [ 128.756361][ T7350] veth0_macvtap: left promiscuous mode [ 128.817395][ T7350] macvtap0: entered allmulticast mode [ 128.837731][ T7350] macvtap0: refused to change device tx_queue_len [ 129.126991][ T7370] nbd1: detected capacity change from 0 to 127 [ 129.154791][ T5877] block nbd1: Receive control failed (result -104) [ 129.558897][ T7413] raw_sendmsg: syz.1.413 forgot to set AF_INET. Fix it! [ 131.143767][ T7487] IPVS: Scheduler module ip_vs_sip not found [ 131.244799][ T5234] udevd[5234]: worker [5885] terminated by signal 33 (Unknown signal 33) [ 131.284107][ T7503] tls_set_device_offload: netdev not found [ 131.353894][ T7509] __nla_validate_parse: 20 callbacks suppressed [ 131.353916][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 131.412695][ T7509] netlink: 84 bytes leftover after parsing attributes in process `syz.3.444'. [ 131.469496][ T7509] netlink: 648 bytes leftover after parsing attributes in process `syz.3.444'. [ 131.502750][ T7513] 0ªî{X¹¦: left allmulticast mode [ 131.519676][ T7509] netlink: 7832 bytes leftover after parsing attributes in process `syz.3.444'. [ 131.627650][ T7519] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 131.674634][ T3459] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 132.143330][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 132.167021][ T7555] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 132.174038][ T7203] IPVS: starting estimator thread 0... [ 132.231987][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 132.244984][ T7560] netlink: 84 bytes leftover after parsing attributes in process `syz.2.459'. [ 132.254096][ T7560] netlink: 648 bytes leftover after parsing attributes in process `syz.2.459'. [ 132.263650][ T7560] netlink: 7832 bytes leftover after parsing attributes in process `syz.2.459'. [ 132.273214][ T7558] IPVS: using max 34 ests per chain, 81600 per kthread [ 132.542215][ T7572] FAULT_INJECTION: forcing a failure. [ 132.542215][ T7572] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.562312][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.3.464 Not tainted syzkaller #0 PREEMPT(full) [ 132.562340][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.562359][ T7572] Call Trace: [ 132.562367][ T7572] [ 132.562375][ T7572] dump_stack_lvl+0x189/0x250 [ 132.562413][ T7572] ? __pfx____ratelimit+0x10/0x10 [ 132.562443][ T7572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.562467][ T7572] ? __pfx__printk+0x10/0x10 [ 132.562496][ T7572] ? __might_fault+0xb0/0x130 [ 132.562536][ T7572] should_fail_ex+0x414/0x560 [ 132.562568][ T7572] _copy_from_user+0x2d/0xb0 [ 132.562592][ T7572] ___sys_recvmsg+0x12e/0x510 [ 132.562631][ T7572] ? __pfx____sys_recvmsg+0x10/0x10 [ 132.562681][ T7572] ? __fget_files+0x3a0/0x420 [ 132.562724][ T7572] __x64_sys_recvmsg+0x198/0x260 [ 132.562749][ T7572] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 132.562785][ T7572] ? __pfx_ksys_write+0x10/0x10 [ 132.562818][ T7572] ? do_syscall_64+0xbe/0x3b0 [ 132.562840][ T7572] do_syscall_64+0xfa/0x3b0 [ 132.562856][ T7572] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.562884][ T7572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.562904][ T7572] ? clear_bhb_loop+0x60/0xb0 [ 132.562928][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.562947][ T7572] RIP: 0033:0x7f428278ebe9 [ 132.562969][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.562985][ T7572] RSP: 002b:00007f4283524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 132.563010][ T7572] RAX: ffffffffffffffda RBX: 00007f42829b5fa0 RCX: 00007f428278ebe9 [ 132.563024][ T7572] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 132.563036][ T7572] RBP: 00007f4283524090 R08: 0000000000000000 R09: 0000000000000000 [ 132.563048][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.563058][ T7572] R13: 00007f42829b6038 R14: 00007f42829b5fa0 R15: 00007ffe77ab8438 [ 132.563088][ T7572] [ 132.567039][ T7571] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 132.648236][ T7574] pim6reg1: entered promiscuous mode [ 132.648259][ T7574] pim6reg1: entered allmulticast mode [ 132.884955][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900402][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 133.183484][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 134.199681][ T7648] 8021q: VLANs not supported on wg2 [ 134.306722][ T7656] vlan2: entered allmulticast mode [ 134.312144][ T7656] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 134.522388][ T7666] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 134.811435][ T7683] FAULT_INJECTION: forcing a failure. [ 134.811435][ T7683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.836732][ T7683] CPU: 1 UID: 0 PID: 7683 Comm: syz.2.498 Not tainted syzkaller #0 PREEMPT(full) [ 134.836761][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.836773][ T7683] Call Trace: [ 134.836781][ T7683] [ 134.836789][ T7683] dump_stack_lvl+0x189/0x250 [ 134.836819][ T7683] ? __pfx____ratelimit+0x10/0x10 [ 134.836848][ T7683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.836872][ T7683] ? __pfx__printk+0x10/0x10 [ 134.836901][ T7683] ? __might_fault+0xb0/0x130 [ 134.836941][ T7683] should_fail_ex+0x414/0x560 [ 134.836973][ T7683] _copy_from_user+0x2d/0xb0 [ 134.836997][ T7683] ___sys_sendmsg+0x158/0x2a0 [ 134.837022][ T7683] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.837095][ T7683] ? __fget_files+0x2a/0x420 [ 134.837123][ T7683] ? __fget_files+0x3a0/0x420 [ 134.837162][ T7683] __x64_sys_sendmsg+0x19b/0x260 [ 134.837186][ T7683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.837218][ T7683] ? __pfx_ksys_write+0x10/0x10 [ 134.837241][ T7683] ? rcu_is_watching+0x15/0xb0 [ 134.837265][ T7683] ? do_syscall_64+0xbe/0x3b0 [ 134.837287][ T7683] do_syscall_64+0xfa/0x3b0 [ 134.837302][ T7683] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.837329][ T7683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.837349][ T7683] ? clear_bhb_loop+0x60/0xb0 [ 134.837372][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.837390][ T7683] RIP: 0033:0x7f1b1878ebe9 [ 134.837408][ T7683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.837423][ T7683] RSP: 002b:00007f1b1965e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.837443][ T7683] RAX: ffffffffffffffda RBX: 00007f1b189b5fa0 RCX: 00007f1b1878ebe9 [ 134.837457][ T7683] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000004 [ 134.837476][ T7683] RBP: 00007f1b1965e090 R08: 0000000000000000 R09: 0000000000000000 [ 134.837487][ T7683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.837498][ T7683] R13: 00007f1b189b6038 R14: 00007f1b189b5fa0 R15: 00007ffc545736e8 [ 134.837529][ T7683] [ 135.602805][ T7720] FAULT_INJECTION: forcing a failure. [ 135.602805][ T7720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.619203][ T7720] CPU: 1 UID: 0 PID: 7720 Comm: syz.0.509 Not tainted syzkaller #0 PREEMPT(full) [ 135.619230][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.619242][ T7720] Call Trace: [ 135.619250][ T7720] [ 135.619259][ T7720] dump_stack_lvl+0x189/0x250 [ 135.619288][ T7720] ? __pfx____ratelimit+0x10/0x10 [ 135.619318][ T7720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.619342][ T7720] ? __pfx__printk+0x10/0x10 [ 135.619371][ T7720] ? __might_fault+0xb0/0x130 [ 135.619422][ T7720] should_fail_ex+0x414/0x560 [ 135.619456][ T7720] _copy_from_iter+0x1de/0x1790 [ 135.619478][ T7720] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.619497][ T7720] ? bpf_bprintf_prepare+0x1282/0x13d0 [ 135.619533][ T7720] ? policy_nodemask+0x27c/0x720 [ 135.619559][ T7720] ? __pfx__copy_from_iter+0x10/0x10 [ 135.619587][ T7720] ? set_page_refcounted+0xa0/0x1e0 [ 135.619612][ T7720] ? page_copy_sane+0x4e/0x280 [ 135.619629][ T7720] copy_page_from_iter+0xdd/0x170 [ 135.619650][ T7720] tun_get_user+0x1d7b/0x3e20 [ 135.619673][ T7720] ? tun_get_user+0x6f6/0x3e20 [ 135.619696][ T7720] ? aa_file_perm+0x44d/0x1550 [ 135.619712][ T7720] ? __pfx_tun_get_user+0x10/0x10 [ 135.619727][ T7720] ? _parse_integer_limit+0x1ae/0x1f0 [ 135.619759][ T7720] ? __lock_acquire+0xab9/0xd20 [ 135.619787][ T7720] ? ref_tracker_alloc+0x318/0x460 [ 135.619808][ T7720] ? __lock_acquire+0xab9/0xd20 [ 135.619833][ T7720] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 135.619860][ T7720] ? tun_get+0x1c/0x2f0 [ 135.619880][ T7720] ? tun_get+0x1c/0x2f0 [ 135.619895][ T7720] ? tun_get+0x1c/0x2f0 [ 135.619914][ T7720] tun_chr_write_iter+0x113/0x200 [ 135.619932][ T7720] vfs_write+0x5c9/0xb30 [ 135.619957][ T7720] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 135.619974][ T7720] ? __pfx_vfs_write+0x10/0x10 [ 135.620003][ T7720] ? __fget_files+0x2a/0x420 [ 135.620035][ T7720] ksys_write+0x145/0x250 [ 135.620058][ T7720] ? __pfx_ksys_write+0x10/0x10 [ 135.620077][ T7720] ? rcu_is_watching+0x15/0xb0 [ 135.620098][ T7720] ? do_syscall_64+0xbe/0x3b0 [ 135.620116][ T7720] do_syscall_64+0xfa/0x3b0 [ 135.620129][ T7720] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.620153][ T7720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.620169][ T7720] ? clear_bhb_loop+0x60/0xb0 [ 135.620188][ T7720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.620204][ T7720] RIP: 0033:0x7f376558d69f [ 135.620218][ T7720] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 135.620231][ T7720] RSP: 002b:00007f37664a3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 135.620248][ T7720] RAX: ffffffffffffffda RBX: 00007f37657b5fa0 RCX: 00007f376558d69f [ 135.620260][ T7720] RDX: 000000000000001a RSI: 0000200000000000 RDI: 00000000000000c8 [ 135.620270][ T7720] RBP: 00007f37664a3090 R08: 0000000000000000 R09: 0000000000000000 [ 135.620279][ T7720] R10: 000000000000001a R11: 0000000000000293 R12: 0000000000000001 [ 135.620289][ T7720] R13: 00007f37657b6038 R14: 00007f37657b5fa0 R15: 00007fffa3999698 [ 135.620318][ T7720] [ 136.047557][ T7698] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.053741][ T7698] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 136.303529][ T7743] netlink: 'syz.4.519': attribute type 23 has an invalid length. [ 136.321862][ T7741] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 136.393811][ T7745] __nla_validate_parse: 28 callbacks suppressed [ 136.393833][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 136.670372][ T7765] netlink: 96 bytes leftover after parsing attributes in process `syz.1.527'. [ 136.695365][ T7769] IPv6: Can't replace route, no match found [ 136.890839][ T7777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'. [ 137.006867][ T7773] netlink: 'syz.1.530': attribute type 13 has an invalid length. [ 137.014658][ T7773] netlink: 'syz.1.530': attribute type 17 has an invalid length. [ 137.058183][ T7773] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 137.155794][ T7790] netlink: 9 bytes leftover after parsing attributes in process `syz.2.536'. [ 137.182352][ T7790] 0ªî{X¹¦: entered promiscuous mode [ 137.269529][ T7790] netlink: 5 bytes leftover after parsing attributes in process `syz.2.536'. [ 137.278678][ T7790] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 137.304369][ T7790] 1ªî{X¹¦: left promiscuous mode [ 137.310012][ T7790] 1ªî{X¹¦: entered allmulticast mode [ 137.318123][ T7790] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 137.662043][ T7773] trusted_key: syz.1.530 sent an empty control message without MSG_MORE. [ 137.705496][ T7813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.542'. [ 137.792181][ T7819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.074117][ T7831] tipc: Started in network mode [ 138.081902][ T7831] tipc: Node identity 32ae5a55daa4, cluster identity 4711 [ 138.110835][ T7831] tipc: Enabled bearer , priority 0 [ 138.153873][ T7837] sctp: [Deprecated]: syz.1.548 (pid 7837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.153873][ T7837] Use struct sctp_sack_info instead [ 138.174409][ T7837] sctp: [Deprecated]: syz.1.548 (pid 7837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.174409][ T7837] Use struct sctp_sack_info instead [ 138.204912][ T7833] syzkaller0: entered promiscuous mode [ 138.216318][ T7833] syzkaller0: entered allmulticast mode [ 138.262862][ T7831] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 138.328209][ T7829] tipc: Resetting bearer [ 138.399705][ T7829] tipc: Disabling bearer [ 138.774013][ T7865] netlink: 'syz.0.557': attribute type 10 has an invalid length. [ 138.790597][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 139.212734][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 139.278573][ T7882] netlink: 80 bytes leftover after parsing attributes in process `syz.0.562'. [ 139.345064][ T7891] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.567'. [ 139.423502][ T7891] sock: sock_set_timeout: `syz.2.567' (pid 7891) tries to set negative timeout [ 139.501907][ T7903] FAULT_INJECTION: forcing a failure. [ 139.501907][ T7903] name failslab, interval 1, probability 0, space 0, times 1 [ 139.520864][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.1.568 Not tainted syzkaller #0 PREEMPT(full) [ 139.520892][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.520905][ T7903] Call Trace: [ 139.520913][ T7903] [ 139.520922][ T7903] dump_stack_lvl+0x189/0x250 [ 139.520953][ T7903] ? __pfx____ratelimit+0x10/0x10 [ 139.521004][ T7903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.521033][ T7903] ? __pfx__printk+0x10/0x10 [ 139.521063][ T7903] ? __lock_acquire+0xab9/0xd20 [ 139.521108][ T7903] should_fail_ex+0x414/0x560 [ 139.521142][ T7903] should_failslab+0xa8/0x100 [ 139.521179][ T7903] kmem_cache_alloc_noprof+0x73/0x3c0 [ 139.521209][ T7903] ? skb_clone+0x212/0x3a0 [ 139.521238][ T7903] skb_clone+0x212/0x3a0 [ 139.521266][ T7903] __netlink_deliver_tap+0x404/0x850 [ 139.521312][ T7903] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.521344][ T7903] netlink_deliver_tap+0x19c/0x1b0 [ 139.521375][ T7903] netlink_unicast+0x7fa/0x9e0 [ 139.521412][ T7903] ? __pfx_netlink_unicast+0x10/0x10 [ 139.521442][ T7903] ? netlink_sendmsg+0x642/0xb30 [ 139.521457][ T7903] ? skb_put+0x11b/0x210 [ 139.521481][ T7903] netlink_sendmsg+0x805/0xb30 [ 139.521508][ T7903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.521532][ T7903] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.521553][ T7903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.521574][ T7903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.521594][ T7903] __sock_sendmsg+0x219/0x270 [ 139.521628][ T7903] ____sys_sendmsg+0x505/0x830 [ 139.521656][ T7903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.521688][ T7903] ? import_iovec+0x74/0xa0 [ 139.521715][ T7903] ___sys_sendmsg+0x21f/0x2a0 [ 139.521751][ T7903] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.521813][ T7903] ? __fget_files+0x2a/0x420 [ 139.521843][ T7903] ? __fget_files+0x3a0/0x420 [ 139.521885][ T7903] __x64_sys_sendmsg+0x19b/0x260 [ 139.521911][ T7903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.521945][ T7903] ? __pfx_ksys_write+0x10/0x10 [ 139.522030][ T7903] ? rcu_is_watching+0x15/0xb0 [ 139.522064][ T7903] ? do_syscall_64+0xbe/0x3b0 [ 139.522089][ T7903] do_syscall_64+0xfa/0x3b0 [ 139.522110][ T7903] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.522143][ T7903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.522167][ T7903] ? clear_bhb_loop+0x60/0xb0 [ 139.522200][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.522220][ T7903] RIP: 0033:0x7f096958ebe9 [ 139.522238][ T7903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.522254][ T7903] RSP: 002b:00007f096a468038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.522275][ T7903] RAX: ffffffffffffffda RBX: 00007f09697b5fa0 RCX: 00007f096958ebe9 [ 139.522290][ T7903] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000004 [ 139.522302][ T7903] RBP: 00007f096a468090 R08: 0000000000000000 R09: 0000000000000000 [ 139.522314][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.522325][ T7903] R13: 00007f09697b6038 R14: 00007f09697b5fa0 R15: 00007ffd5ac9bab8 [ 139.522359][ T7903] [ 140.316141][ T7929] team0: No ports can be present during mode change [ 140.876097][ T7967] FAULT_INJECTION: forcing a failure. [ 140.876097][ T7967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.891325][ T7967] CPU: 0 UID: 0 PID: 7967 Comm: syz.3.589 Not tainted syzkaller #0 PREEMPT(full) [ 140.891353][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.891365][ T7967] Call Trace: [ 140.891373][ T7967] [ 140.891382][ T7967] dump_stack_lvl+0x189/0x250 [ 140.891412][ T7967] ? __pfx____ratelimit+0x10/0x10 [ 140.891442][ T7967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.891466][ T7967] ? __pfx__printk+0x10/0x10 [ 140.891496][ T7967] ? __might_fault+0xb0/0x130 [ 140.891536][ T7967] should_fail_ex+0x414/0x560 [ 140.891569][ T7967] _copy_from_user+0x2d/0xb0 [ 140.891594][ T7967] ___sys_sendmsg+0x158/0x2a0 [ 140.891619][ T7967] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.891687][ T7967] ? __fget_files+0x2a/0x420 [ 140.891715][ T7967] ? __fget_files+0x3a0/0x420 [ 140.891754][ T7967] __x64_sys_sendmsg+0x19b/0x260 [ 140.891778][ T7967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.891811][ T7967] ? __pfx_ksys_write+0x10/0x10 [ 140.891834][ T7967] ? rcu_is_watching+0x15/0xb0 [ 140.891858][ T7967] ? do_syscall_64+0xbe/0x3b0 [ 140.891879][ T7967] do_syscall_64+0xfa/0x3b0 [ 140.891892][ T7967] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.891912][ T7967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.891926][ T7967] ? clear_bhb_loop+0x60/0xb0 [ 140.891943][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.891957][ T7967] RIP: 0033:0x7f428278ebe9 [ 140.891970][ T7967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.891982][ T7967] RSP: 002b:00007f4283524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.891997][ T7967] RAX: ffffffffffffffda RBX: 00007f42829b5fa0 RCX: 00007f428278ebe9 [ 140.892007][ T7967] RDX: 00000000000448d4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 140.892016][ T7967] RBP: 00007f4283524090 R08: 0000000000000000 R09: 0000000000000000 [ 140.892025][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.892033][ T7967] R13: 00007f42829b6038 R14: 00007f42829b5fa0 R15: 00007ffe77ab8438 [ 140.892055][ T7967] [ 141.263673][ T7973] Unsupported ieee802154 address type: 0 [ 141.529107][ T7985] __nla_validate_parse: 13 callbacks suppressed [ 141.529128][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 141.881420][ T8004] FAULT_INJECTION: forcing a failure. [ 141.881420][ T8004] name failslab, interval 1, probability 0, space 0, times 0 [ 141.896184][ T8004] CPU: 1 UID: 0 PID: 8004 Comm: syz.3.603 Not tainted syzkaller #0 PREEMPT(full) [ 141.896211][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.896223][ T8004] Call Trace: [ 141.896231][ T8004] [ 141.896238][ T8004] dump_stack_lvl+0x189/0x250 [ 141.896268][ T8004] ? __pfx____ratelimit+0x10/0x10 [ 141.896297][ T8004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.896321][ T8004] ? __pfx__printk+0x10/0x10 [ 141.896356][ T8004] ? __pfx___might_resched+0x10/0x10 [ 141.896380][ T8004] should_fail_ex+0x414/0x560 [ 141.896411][ T8004] should_failslab+0xa8/0x100 [ 141.896441][ T8004] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 141.896486][ T8004] ? __alloc_skb+0x112/0x2d0 [ 141.896508][ T8004] __alloc_skb+0x112/0x2d0 [ 141.896531][ T8004] netlink_sendmsg+0x5c6/0xb30 [ 141.896558][ T8004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.896579][ T8004] ? aa_sock_msg_perm+0xf1/0x1d0 [ 141.896599][ T8004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.896620][ T8004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.896638][ T8004] __sock_sendmsg+0x219/0x270 [ 141.896668][ T8004] ____sys_sendmsg+0x505/0x830 [ 141.896695][ T8004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.896726][ T8004] ? import_iovec+0x74/0xa0 [ 141.896752][ T8004] ___sys_sendmsg+0x21f/0x2a0 [ 141.896776][ T8004] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.896842][ T8004] ? __fget_files+0x2a/0x420 [ 141.896869][ T8004] ? __fget_files+0x3a0/0x420 [ 141.896928][ T8004] __x64_sys_sendmsg+0x19b/0x260 [ 141.896953][ T8004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.896986][ T8004] ? __pfx_ksys_write+0x10/0x10 [ 141.897009][ T8004] ? rcu_is_watching+0x15/0xb0 [ 141.897046][ T8004] ? do_syscall_64+0xbe/0x3b0 [ 141.897068][ T8004] do_syscall_64+0xfa/0x3b0 [ 141.897084][ T8004] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.897111][ T8004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.897131][ T8004] ? clear_bhb_loop+0x60/0xb0 [ 141.897154][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.897172][ T8004] RIP: 0033:0x7f428278ebe9 [ 141.897190][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.897205][ T8004] RSP: 002b:00007f4283524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.897226][ T8004] RAX: ffffffffffffffda RBX: 00007f42829b5fa0 RCX: 00007f428278ebe9 [ 141.897239][ T8004] RDX: 00000000000448d4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 141.897251][ T8004] RBP: 00007f4283524090 R08: 0000000000000000 R09: 0000000000000000 [ 141.897262][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.897272][ T8004] R13: 00007f42829b6038 R14: 00007f42829b5fa0 R15: 00007ffe77ab8438 [ 141.897302][ T8004] [ 142.295826][ T8001] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 142.323472][ T8001] netlink: 224 bytes leftover after parsing attributes in process `syz.0.604'. [ 142.381204][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 142.392638][ T8014] netlink: 84 bytes leftover after parsing attributes in process `syz.3.608'. [ 142.401823][ T8014] netlink: 648 bytes leftover after parsing attributes in process `syz.3.608'. [ 142.410972][ T8014] netlink: 7832 bytes leftover after parsing attributes in process `syz.3.608'. [ 142.539375][ T8016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 142.553234][ T8024] Illegal XDP return value 3241188254 on prog (id 147) dev N/A, expect packet loss! [ 142.565404][ T8016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 142.810387][ T8029] syzkaller0: entered promiscuous mode [ 142.815932][ T8029] syzkaller0: entered allmulticast mode [ 143.411355][ T8034] IPv6: sit1: Disabled Multicast RS [ 143.499855][ T8040] netlink: 176 bytes leftover after parsing attributes in process `syz.4.613'. [ 143.509305][ T8040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.613'. [ 143.823830][ T8050] pim6reg1: entered promiscuous mode [ 143.836821][ T8050] pim6reg1: entered allmulticast mode [ 143.848979][ T8054] netlink: 'syz.4.617': attribute type 3 has an invalid length. [ 144.277714][ T8089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.302403][ T8089] bond0: (slave rose0): Enslaving as an active interface with an up link [ 144.352799][ T8092] gtp0: entered promiscuous mode [ 144.380781][ T8092] gtp0: entered allmulticast mode [ 144.422310][ T8100] IPVS: set_ctl: invalid protocol: 43 172.20.20.10:20002 [ 144.489966][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.498683][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.670064][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.685746][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.967080][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.027139][ T8117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.159596][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.189362][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.255368][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.766143][ T8165] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 145.966215][ T5983] IPVS: starting estimator thread 0... [ 146.066931][ T8178] IPVS: using max 25 ests per chain, 60000 per kthread [ 146.177658][ T8182] gretap1: entered promiscuous mode [ 146.194576][ T8182] gretap1: entered allmulticast mode [ 146.946692][ T8225] Dead loop on virtual device ip6_vti0, fix it urgently! [ 147.365674][ T8248] vlan2: entered promiscuous mode [ 147.371356][ T8248] bridge0: entered promiscuous mode [ 148.383415][ T8306] netlink: 'syz.1.677': attribute type 6 has an invalid length. [ 148.853626][ T8316] veth1_macvtap: left promiscuous mode [ 148.871806][ T8316] macsec0: entered promiscuous mode [ 148.896594][ T8316] macsec0: entered allmulticast mode [ 148.913863][ T8320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.930474][ T8316] veth1_macvtap: entered promiscuous mode [ 148.936410][ T8316] veth1_macvtap: entered allmulticast mode [ 148.952959][ T8316] macsec0: left promiscuous mode [ 148.969696][ T8316] macsec0: left allmulticast mode [ 148.973832][ T8323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.990507][ T8316] veth1_macvtap: left allmulticast mode [ 149.156923][ T8328] __nla_validate_parse: 14 callbacks suppressed [ 149.156943][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 149.210872][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.684'. [ 149.222695][ T8331] tipc: Enabled bearer , priority 10 [ 149.376306][ T8342] netlink: 100 bytes leftover after parsing attributes in process `syz.4.688'. [ 149.623764][ T8354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.692'. [ 149.765915][ T8359] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 149.825109][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.868354][ T8359] bridge_slave_1: left allmulticast mode [ 149.874288][ T8359] bridge_slave_1: left promiscuous mode [ 149.888400][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.934169][ T8359] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 150.033772][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 150.112515][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 150.131216][ T8377] netlink: 84 bytes leftover after parsing attributes in process `syz.2.699'. [ 150.159668][ T8377] netlink: 648 bytes leftover after parsing attributes in process `syz.2.699'. [ 150.175545][ T8377] netlink: 7832 bytes leftover after parsing attributes in process `syz.2.699'. [ 150.175673][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054711c00: rx timeout, send abort [ 150.195564][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054711c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.228282][ T8382] netlink: 'syz.0.701': attribute type 6 has an invalid length. [ 150.255934][ T8382] netlink: 'syz.0.701': attribute type 6 has an invalid length. [ 150.348887][ T7203] tipc: Node number set to 2571184548 [ 150.440108][ T8394] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 150.489931][ T8399] netlink: 220 bytes leftover after parsing attributes in process `syz.4.707'. [ 150.520059][ T8397] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 150.544478][ T8403] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 150.564628][ T8399] tipc: Enabling of bearer rejected, failed to enable media [ 150.649971][ T8403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.704570][ T8415] netlink: 'syz.2.710': attribute type 6 has an invalid length. [ 150.739740][ T8403] bond1: (slave gretap2): making interface the new active one [ 150.760226][ T8403] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 152.393380][ T8502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.871024][ T8589] netlink: 'syz.3.763': attribute type 18 has an invalid length. [ 153.942263][ T3459] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.952555][ T7393] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.964481][ T3459] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 153.968000][ T7396] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.982933][ T7396] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.002524][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 154.170623][ T8609] IPVS: set_ctl: invalid protocol: 178 172.20.20.170:20000 [ 154.180558][ T8609] __nla_validate_parse: 27 callbacks suppressed [ 154.180577][ T8609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.769'. [ 154.191864][ T8610] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.766'. [ 155.108582][ T8636] netlink: 104 bytes leftover after parsing attributes in process `syz.2.778'. [ 155.261081][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 155.282342][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 155.723172][ T8662] netlink: 'syz.0.784': attribute type 30 has an invalid length. [ 155.735455][ T8662] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 155.744747][ T8662] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 156.003226][ T8672] syzkaller1: entered promiscuous mode [ 156.023334][ T8672] syzkaller1: entered allmulticast mode [ 156.515006][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 156.623712][ T8701] bond0: (slave bond_slave_0): Releasing backup interface [ 156.624690][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 156.641122][ T8707] netlink: 84 bytes leftover after parsing attributes in process `syz.2.796'. [ 156.651605][ T8707] netlink: 648 bytes leftover after parsing attributes in process `syz.2.796'. [ 156.652713][ T8701] bond0: (slave bond_slave_1): Releasing backup interface [ 156.662126][ T8707] netlink: 7832 bytes leftover after parsing attributes in process `syz.2.796'. [ 156.695120][ T8701] team0: Port device team_slave_0 removed [ 156.715407][ T8701] team0: Port device team_slave_1 removed [ 156.723920][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.735873][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.749799][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.757934][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.983699][ T8720] macvlan2: entered promiscuous mode [ 156.991209][ T8720] macvlan2: entered allmulticast mode [ 156.999939][ T8720] veth1_to_bond: entered allmulticast mode [ 157.005959][ T8720] veth1_to_bond: entered promiscuous mode [ 157.018891][ T8720] team0: Port device macvlan2 added [ 157.430865][ T8739] gretap0: entered promiscuous mode [ 157.457404][ T8739] 0ªî{X¹¦: renamed from gretap0 [ 157.488743][ T8739] 0ªî{X¹¦: left promiscuous mode [ 157.512074][ T8739] 0ªî{X¹¦: entered allmulticast mode [ 157.523912][ T8739] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 157.587272][ T8742] sock: sock_timestamping_bind_phc: sock not bind to device [ 157.738389][ T8758] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 157.787283][ T8758] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.798569][ T8758] bond0: (slave team0): Enslaving as an active interface with an up link [ 157.824571][ T8762] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 157.824893][ T8763] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 157.894923][ T8763] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 157.993681][ T8773] netlink: 'syz.0.818': attribute type 1 has an invalid length. [ 158.208165][ T8784] gtp0: entered promiscuous mode [ 158.231404][ T8784] gtp0: entered allmulticast mode [ 158.480873][ T1167] block nbd0: Possible stuck request ffff888025045080: control (read@0,1024B). Runtime 60 seconds [ 158.492002][ T1167] block nbd0: Possible stuck request ffff888025045240: control (read@1024,1024B). Runtime 60 seconds [ 158.505175][ T1167] block nbd0: Possible stuck request ffff888025045400: control (read@2048,1024B). Runtime 60 seconds [ 158.516310][ T1167] block nbd0: Possible stuck request ffff8880250455c0: control (read@3072,1024B). Runtime 60 seconds [ 158.635312][ T8807] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 158.890042][ T8821] macvtap1: entered allmulticast mode [ 158.904039][ T8821] veth0_macvtap: entered allmulticast mode [ 158.942011][ T8823] veth1_macvtap: left promiscuous mode [ 159.182910][ T8836] smc: net device bond0 applied user defined pnetid SYZ2 [ 159.259156][ T8846] __nla_validate_parse: 17 callbacks suppressed [ 159.259189][ T8846] netlink: 104 bytes leftover after parsing attributes in process `syz.1.838'. [ 159.342352][ T8846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.838'. [ 159.705660][ T8878] netlink: 'syz.2.848': attribute type 3 has an invalid length. [ 159.725260][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 159.760559][ T1167] block nbd1: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 30 seconds [ 159.778555][ T1167] block nbd1: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 30 seconds [ 159.789869][ T1167] block nbd1: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 30 seconds [ 159.807058][ T1167] block nbd1: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 30 seconds [ 160.102392][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 160.136725][ T8896] netlink: 84 bytes leftover after parsing attributes in process `syz.3.854'. [ 160.146418][ T8896] netlink: 648 bytes leftover after parsing attributes in process `syz.3.854'. [ 160.181273][ T8896] netlink: 7832 bytes leftover after parsing attributes in process `syz.3.854'. [ 160.229203][ T8909] netlink: 104 bytes leftover after parsing attributes in process `syz.0.856'. [ 160.371131][ T8912] syz.2.859 uses old SIOCAX25GETINFO [ 160.480489][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.862'. [ 160.480929][ T8927] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 160.565699][ T8925] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 160.692759][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 160.932370][ T8956] netem: change failed [ 161.015087][ T8960] af_packet: tpacket_rcv: packet too big, clamped from 224 to 4294967272. macoff=96 [ 161.094555][ T8966] netlink: 'syz.3.876': attribute type 30 has an invalid length. [ 161.154954][ T8968] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 161.494963][ T8990] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 161.502514][ T8992] tipc: Enabled bearer , priority 0 [ 161.527061][ T8990] netlink: 'syz.4.884': attribute type 4 has an invalid length. [ 161.545169][ T8992] syzkaller0: entered promiscuous mode [ 161.556435][ T8992] syzkaller0: entered allmulticast mode [ 161.636146][ T8992] tipc: Resetting bearer [ 161.649030][ T8991] tipc: Resetting bearer [ 161.703848][ T8991] tipc: Disabling bearer [ 161.911013][ T9010] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.980792][ T9019] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 162.036404][ T9010] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.140014][ T9010] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.221133][ T9010] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.359683][ T1140] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.408142][ T1140] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.442190][ T1140] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.451539][ T1140] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.416737][ T9081] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 163.450134][ T9081] netlink: 'syz.1.911': attribute type 3 has an invalid length. [ 164.125146][ T9133] netlink: 'syz.4.928': attribute type 10 has an invalid length. [ 164.235772][ T9133] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 164.302491][ T9144] __nla_validate_parse: 33 callbacks suppressed [ 164.302512][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.933'. [ 164.339525][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.933'. [ 164.518106][ T9156] tipc: Enabled bearer , priority 10 [ 164.598380][ T9157] team0: Device gtp1 is up. Set it down before adding it as a team port [ 164.693921][ T9168] netlink: 44 bytes leftover after parsing attributes in process `syz.4.941'. [ 164.722818][ T9168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.941'. [ 165.048865][ T9187] netlink: 52 bytes leftover after parsing attributes in process `syz.1.948'. [ 165.058815][ T9187] netlink: 52 bytes leftover after parsing attributes in process `syz.1.948'. [ 165.282713][ T9201] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 165.320336][ T9201] netlink: 224 bytes leftover after parsing attributes in process `syz.1.953'. [ 165.356775][ T9201] nbd: illegal input index 1048576 [ 165.510003][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.958'. [ 165.527095][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 165.536125][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.958'. [ 165.575037][ T9211] can: request_module (can-proto-5) failed. [ 165.646620][ T10] tipc: Node number set to 863970017 [ 166.265239][ T9258] xt_HMARK: proto mask must be zero with L3 mode [ 166.477638][ T9263] syzkaller1: entered promiscuous mode [ 166.497537][ T9263] syzkaller1: entered allmulticast mode [ 166.768110][ T9270] macvtap2: entered allmulticast mode [ 167.018475][ T9291] sctp: [Deprecated]: syz.0.987 (pid 9291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.018475][ T9291] Use struct sctp_sack_info instead [ 167.047118][ T9288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.086728][ T9291] sctp: [Deprecated]: syz.0.987 (pid 9291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.086728][ T9291] Use struct sctp_sack_info instead [ 167.112690][ T9299] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 167.229450][ T9299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.368138][ T9299] veth3: entered promiscuous mode [ 168.043216][ T9358] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 168.056345][ T9358] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 168.066307][ T9358] gretap1: entered promiscuous mode [ 168.073105][ T9358] gretap1: entered allmulticast mode [ 168.470357][ T9385] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 168.543489][ T9385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.588949][ T9385] netlink: 'syz.3.1019': attribute type 2 has an invalid length. [ 168.599318][ T9385] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 169.011270][ T9419] netlink: 'syz.0.1032': attribute type 2 has an invalid length. [ 169.090852][ T9429] lo: left promiscuous mode [ 169.119783][ T9429] 0ªî{X¹¦: left allmulticast mode [ 169.343022][ T9429] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.381762][ T9429] batman_adv: batadv0: Interface deactivated: dummy0 [ 169.429877][ T9429] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 169.448897][ T9432] !€ÿ: renamed from bond_slave_0 (while UP) [ 169.575634][ T9445] delete_channel: no stack [ 169.918298][ T9462] team0: Device vti0 is of different type [ 170.160013][ T9477] __nla_validate_parse: 20 callbacks suppressed [ 170.160031][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 170.224994][ T9480] openvswitch: netlink: IP tunnel dst address not specified [ 170.434718][ T9495] netlink: 'syz.0.1055': attribute type 62 has an invalid length. [ 170.455412][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 170.465622][ T9492] tc_dump_action: action bad kind [ 170.603446][ T9492] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1057'. [ 170.617871][ T9505] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1060'. [ 170.659274][ T9492] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 170.790676][ T9513] : renamed from hsr0 (while UP) [ 170.888713][ T9523] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1068'. [ 170.936896][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 171.101434][ T9523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.113482][ T9523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.125097][ T9523] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 171.140291][ T9523] bond0 (unregistering): Released all slaves [ 171.461611][ T9549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1075'. [ 171.477779][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1075'. [ 171.536884][ T9547] nbd2: detected capacity change from 0 to 127 [ 171.564433][ T51] block nbd2: Receive control failed (result -32) [ 171.836019][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 171.879997][ T9571] tipc: Can't bind to reserved service type 1 [ 171.901871][ T9564] veth2: entered allmulticast mode [ 171.955410][ T9564] veth3: entered promiscuous mode [ 171.961933][ T9564] veth3: entered allmulticast mode [ 172.133003][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 172.272015][ T9587] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 172.331011][ T9589] netlink: 'syz.4.1088': attribute type 1 has an invalid length. [ 172.603681][ T9598] tipc: Resetting bearer [ 172.704337][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.709216][ T9615] sctp: [Deprecated]: syz.2.1096 (pid 9615) Use of int in max_burst socket option deprecated. [ 172.709216][ T9615] Use struct sctp_assoc_value instead [ 172.713138][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.827248][ T9598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.842050][ T9598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.998678][ T9609] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 173.024407][ T7395] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.064735][ T7395] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.116343][ T7395] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.230997][ T7395] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.380171][ T9638] netlink: 'syz.3.1102': attribute type 3 has an invalid length. [ 173.576040][ T9657] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 173.755169][ T9670] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 174.564749][ T9725] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 174.663270][ T9727] tipc: Cannot configure node identity twice [ 174.705907][ T9729] syzkaller1: entered promiscuous mode [ 174.723757][ T9729] syzkaller1: entered allmulticast mode [ 174.753826][ T9732] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 174.762407][ T9732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.398952][ T9754] netlink: 'syz.4.1142': attribute type 32 has an invalid length. [ 175.415580][ T9754] __nla_validate_parse: 16 callbacks suppressed [ 175.415601][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 175.459126][ T9753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1141'. [ 175.503243][ T9754] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 175.523076][ T9763] netlink: 'syz.0.1143': attribute type 3 has an invalid length. [ 175.544833][ T9763] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 175.561762][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 175.605378][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 175.624894][ T9770] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1146'. [ 175.756412][ T9771] netlink: 'syz.3.1146': attribute type 83 has an invalid length. [ 175.765211][ T9770] netlink: 'syz.3.1146': attribute type 32 has an invalid length. [ 175.773247][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 175.797228][ T9770] (unnamed net_device) (uninitialized): option coupled_control: invalid value (36) [ 175.938121][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 175.947365][ T9789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1154'. [ 175.966730][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 176.042709][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 176.284296][ T9813] sctp: [Deprecated]: syz.2.1157 (pid 9813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.284296][ T9813] Use struct sctp_sack_info instead [ 176.508287][ T9822] tipc: Enabling of bearer rejected, failed to enable media [ 176.938080][ T9848] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 176.946720][ T9848] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 176.955305][ T9848] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 177.211138][ T9863] netlink: 'syz.2.1177': attribute type 6 has an invalid length. [ 177.211173][ T9864] openvswitch: netlink: IPv6 tunnel dst address is zero [ 177.762027][ T9879] sctp: [Deprecated]: syz.1.1183 (pid 9879) Use of int in maxseg socket option. [ 177.762027][ T9879] Use struct sctp_assoc_value instead [ 177.901518][ T9884] FAULT_INJECTION: forcing a failure. [ 177.901518][ T9884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.915580][ T9884] CPU: 1 UID: 0 PID: 9884 Comm: syz.3.1184 Not tainted syzkaller #0 PREEMPT(full) [ 177.915622][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.915643][ T9884] Call Trace: [ 177.915650][ T9884] [ 177.915659][ T9884] dump_stack_lvl+0x189/0x250 [ 177.915688][ T9884] ? __pfx____ratelimit+0x10/0x10 [ 177.915716][ T9884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.915738][ T9884] ? __pfx__printk+0x10/0x10 [ 177.915765][ T9884] ? __might_fault+0xb0/0x130 [ 177.915803][ T9884] should_fail_ex+0x414/0x560 [ 177.915834][ T9884] _copy_from_iter+0x1de/0x1790 [ 177.915861][ T9884] ? rcu_is_watching+0x15/0xb0 [ 177.915882][ T9884] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 177.915910][ T9884] ? __pfx__copy_from_iter+0x10/0x10 [ 177.915950][ T9884] ? __build_skb_around+0x257/0x3e0 [ 177.915985][ T9884] ? netlink_sendmsg+0x642/0xb30 [ 177.916001][ T9884] ? skb_put+0x11b/0x210 [ 177.916024][ T9884] netlink_sendmsg+0x6b2/0xb30 [ 177.916055][ T9884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.916079][ T9884] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.916098][ T9884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.916117][ T9884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.916134][ T9884] __sock_sendmsg+0x219/0x270 [ 177.916162][ T9884] ____sys_sendmsg+0x505/0x830 [ 177.916188][ T9884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.916217][ T9884] ? import_iovec+0x74/0xa0 [ 177.916242][ T9884] ___sys_sendmsg+0x21f/0x2a0 [ 177.916264][ T9884] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.916321][ T9884] ? __fget_files+0x2a/0x420 [ 177.916349][ T9884] ? __fget_files+0x3a0/0x420 [ 177.916385][ T9884] __x64_sys_sendmsg+0x19b/0x260 [ 177.916408][ T9884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.916438][ T9884] ? __pfx_ksys_write+0x10/0x10 [ 177.916473][ T9884] ? do_syscall_64+0xbe/0x3b0 [ 177.916494][ T9884] do_syscall_64+0xfa/0x3b0 [ 177.916508][ T9884] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.916534][ T9884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.916559][ T9884] ? clear_bhb_loop+0x60/0xb0 [ 177.916581][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.916598][ T9884] RIP: 0033:0x7f428278ebe9 [ 177.916615][ T9884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.916630][ T9884] RSP: 002b:00007f42809f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.916649][ T9884] RAX: ffffffffffffffda RBX: 00007f42829b6090 RCX: 00007f428278ebe9 [ 177.916662][ T9884] RDX: 00000000000448d4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 177.916673][ T9884] RBP: 00007f42809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.916684][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.916694][ T9884] R13: 00007f42829b6128 R14: 00007f42829b6090 R15: 00007ffe77ab8438 [ 177.916724][ T9884] [ 179.262257][ T9885] bond3: entered promiscuous mode [ 179.271167][ T9885] bond3: entered allmulticast mode [ 179.289326][ T9885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.497193][ T9898] syzkaller1: entered promiscuous mode [ 179.502723][ T9898] syzkaller1: entered allmulticast mode [ 179.674956][ T9915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.700232][ T9915] team0: Failed to send port change of device bond3 via netlink (err -105) [ 179.711746][ T9915] team0: Failed to send options change via netlink (err -105) [ 179.719376][ T9915] team0: Port device bond3 added [ 179.764368][ T9925] FAULT_INJECTION: forcing a failure. [ 179.764368][ T9925] name failslab, interval 1, probability 0, space 0, times 0 [ 179.789843][ T9924] tipc: Enabling of bearer rejected, failed to enable media [ 179.805036][ T9925] CPU: 1 UID: 0 PID: 9925 Comm: syz.1.1195 Not tainted syzkaller #0 PREEMPT(full) [ 179.805062][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.805073][ T9925] Call Trace: [ 179.805081][ T9925] [ 179.805090][ T9925] dump_stack_lvl+0x189/0x250 [ 179.805118][ T9925] ? __pfx____ratelimit+0x10/0x10 [ 179.805158][ T9925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.805181][ T9925] ? __pfx__printk+0x10/0x10 [ 179.805211][ T9925] ? __pfx___might_resched+0x10/0x10 [ 179.805249][ T9925] ? fs_reclaim_acquire+0x7d/0x100 [ 179.805285][ T9925] should_fail_ex+0x414/0x560 [ 179.805319][ T9925] should_failslab+0xa8/0x100 [ 179.805350][ T9925] __kmalloc_noprof+0xcb/0x4f0 [ 179.805376][ T9925] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 179.805409][ T9925] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 179.805443][ T9925] genl_family_rcv_msg_doit+0xb8/0x300 [ 179.805480][ T9925] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 179.805514][ T9925] ? apparmor_capable+0x137/0x1b0 [ 179.805540][ T9925] ? bpf_lsm_capable+0x9/0x20 [ 179.805567][ T9925] ? security_capable+0x7e/0x2e0 [ 179.805604][ T9925] genl_rcv_msg+0x60e/0x790 [ 179.805636][ T9925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.805658][ T9925] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 179.805679][ T9925] ? __pfx_nl80211_new_key+0x10/0x10 [ 179.805702][ T9925] ? __pfx_nl80211_post_doit+0x10/0x10 [ 179.805742][ T9925] netlink_rcv_skb+0x205/0x470 [ 179.805769][ T9925] ? __lock_acquire+0xab9/0xd20 [ 179.805798][ T9925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.805824][ T9925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.805876][ T9925] ? down_read+0x1ad/0x2e0 [ 179.805899][ T9925] genl_rcv+0x28/0x40 [ 179.805919][ T9925] netlink_unicast+0x82c/0x9e0 [ 179.805957][ T9925] ? __pfx_netlink_unicast+0x10/0x10 [ 179.805986][ T9925] ? netlink_sendmsg+0x642/0xb30 [ 179.806002][ T9925] ? skb_put+0x11b/0x210 [ 179.806026][ T9925] netlink_sendmsg+0x805/0xb30 [ 179.806055][ T9925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.806078][ T9925] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.806099][ T9925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.806125][ T9925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.806144][ T9925] __sock_sendmsg+0x219/0x270 [ 179.806175][ T9925] ____sys_sendmsg+0x505/0x830 [ 179.806204][ T9925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.806236][ T9925] ? import_iovec+0x74/0xa0 [ 179.806264][ T9925] ___sys_sendmsg+0x21f/0x2a0 [ 179.806289][ T9925] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.806352][ T9925] ? __fget_files+0x2a/0x420 [ 179.806382][ T9925] ? __fget_files+0x3a0/0x420 [ 179.806425][ T9925] __x64_sys_sendmsg+0x19b/0x260 [ 179.806450][ T9925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.806481][ T9925] ? __pfx_ksys_write+0x10/0x10 [ 179.806505][ T9925] ? rcu_is_watching+0x15/0xb0 [ 179.806530][ T9925] ? do_syscall_64+0xbe/0x3b0 [ 179.806553][ T9925] do_syscall_64+0xfa/0x3b0 [ 179.806569][ T9925] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.806597][ T9925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.806617][ T9925] ? clear_bhb_loop+0x60/0xb0 [ 179.806640][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.806658][ T9925] RIP: 0033:0x7f096958ebe9 [ 179.806675][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.806690][ T9925] RSP: 002b:00007f096a468038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.806710][ T9925] RAX: ffffffffffffffda RBX: 00007f09697b5fa0 RCX: 00007f096958ebe9 [ 179.806724][ T9925] RDX: 00000000000448d4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 179.806736][ T9925] RBP: 00007f096a468090 R08: 0000000000000000 R09: 0000000000000000 [ 179.806747][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.806758][ T9925] R13: 00007f09697b6038 R14: 00007f09697b5fa0 R15: 00007ffd5ac9bab8 [ 179.806789][ T9925] [ 180.476172][ T9944] IPv6: sit1: Disabled Multicast RS [ 180.484849][ T9944] sit1: entered allmulticast mode [ 180.545667][ T9948] __nla_validate_parse: 19 callbacks suppressed [ 180.545687][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 180.670042][ T9956] openvswitch: netlink: IP tunnel dst address not specified [ 180.714477][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1205'. [ 180.801253][ T9967] FAULT_INJECTION: forcing a failure. [ 180.801253][ T9967] name failslab, interval 1, probability 0, space 0, times 0 [ 180.850620][ T9967] CPU: 1 UID: 0 PID: 9967 Comm: syz.4.1209 Not tainted syzkaller #0 PREEMPT(full) [ 180.850648][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.850660][ T9967] Call Trace: [ 180.850667][ T9967] [ 180.850676][ T9967] dump_stack_lvl+0x189/0x250 [ 180.850706][ T9967] ? __pfx____ratelimit+0x10/0x10 [ 180.850736][ T9967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.850760][ T9967] ? __pfx__printk+0x10/0x10 [ 180.850791][ T9967] ? __pfx___might_resched+0x10/0x10 [ 180.850810][ T9967] ? fs_reclaim_acquire+0x7d/0x100 [ 180.850845][ T9967] should_fail_ex+0x414/0x560 [ 180.850878][ T9967] should_failslab+0xa8/0x100 [ 180.850909][ T9967] __kmalloc_noprof+0xcb/0x4f0 [ 180.850935][ T9967] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 180.850966][ T9967] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 180.851000][ T9967] genl_family_rcv_msg_doit+0xb8/0x300 [ 180.851033][ T9967] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 180.851067][ T9967] ? apparmor_capable+0x137/0x1b0 [ 180.851093][ T9967] ? bpf_lsm_capable+0x9/0x20 [ 180.851121][ T9967] ? security_capable+0x7e/0x2e0 [ 180.851159][ T9967] genl_rcv_msg+0x60e/0x790 [ 180.851191][ T9967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.851212][ T9967] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 180.851232][ T9967] ? __pfx_nl80211_new_key+0x10/0x10 [ 180.851255][ T9967] ? __pfx_nl80211_post_doit+0x10/0x10 [ 180.851279][ T9967] ? __asan_memcpy+0x40/0x70 [ 180.851301][ T9967] ? __pfx_ref_tracker_free+0x10/0x10 [ 180.851339][ T9967] netlink_rcv_skb+0x205/0x470 [ 180.851375][ T9967] ? __lock_acquire+0xab9/0xd20 [ 180.851405][ T9967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.851430][ T9967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.851481][ T9967] ? down_read+0x1ad/0x2e0 [ 180.851505][ T9967] genl_rcv+0x28/0x40 [ 180.851526][ T9967] netlink_unicast+0x82c/0x9e0 [ 180.851578][ T9967] ? __pfx_netlink_unicast+0x10/0x10 [ 180.851607][ T9967] ? netlink_sendmsg+0x642/0xb30 [ 180.851622][ T9967] ? skb_put+0x11b/0x210 [ 180.851645][ T9967] netlink_sendmsg+0x805/0xb30 [ 180.851672][ T9967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.851694][ T9967] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.851714][ T9967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.851735][ T9967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.851754][ T9967] __sock_sendmsg+0x219/0x270 [ 180.851784][ T9967] ____sys_sendmsg+0x505/0x830 [ 180.851813][ T9967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.851844][ T9967] ? import_iovec+0x74/0xa0 [ 180.851870][ T9967] ___sys_sendmsg+0x21f/0x2a0 [ 180.851892][ T9967] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.851951][ T9967] ? __fget_files+0x2a/0x420 [ 180.851979][ T9967] ? __fget_files+0x3a0/0x420 [ 180.852032][ T9967] __x64_sys_sendmsg+0x19b/0x260 [ 180.852056][ T9967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.852104][ T9967] ? __pfx_ksys_write+0x10/0x10 [ 180.852134][ T9967] ? rcu_is_watching+0x15/0xb0 [ 180.852160][ T9967] ? do_syscall_64+0xbe/0x3b0 [ 180.852184][ T9967] do_syscall_64+0xfa/0x3b0 [ 180.852200][ T9967] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.852229][ T9967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.852249][ T9967] ? clear_bhb_loop+0x60/0xb0 [ 180.852274][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.852293][ T9967] RIP: 0033:0x7fa7b718ebe9 [ 180.852312][ T9967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.852328][ T9967] RSP: 002b:00007fa7b7f95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.852359][ T9967] RAX: ffffffffffffffda RBX: 00007fa7b73b5fa0 RCX: 00007fa7b718ebe9 [ 180.852374][ T9967] RDX: 00000000000448d4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 180.852387][ T9967] RBP: 00007fa7b7f95090 R08: 0000000000000000 R09: 0000000000000000 [ 180.852398][ T9967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.852409][ T9967] R13: 00007fa7b73b6038 R14: 00007fa7b73b5fa0 R15: 00007ffc4a804638 [ 180.852443][ T9967] [ 181.409898][ T9979] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 181.424287][ T9980] tipc: Started in network mode [ 181.457766][ T9980] tipc: Node identity ac14140f, cluster identity 4711 [ 181.465583][ T9980] tipc: New replicast peer: 255.255.255.255 [ 181.485034][ T9980] tipc: Enabled bearer , priority 10 [ 181.540792][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 181.582398][ T9989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1215'. [ 181.592459][ T9] IPVS: starting estimator thread 0... [ 181.688079][ T9994] netlink: 'syz.1.1216': attribute type 29 has an invalid length. [ 181.702442][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 181.713640][ T9999] tc_dump_action: action bad kind [ 181.722015][ T9992] IPVS: using max 24 ests per chain, 57600 per kthread [ 181.740888][T10001] netlink: 'syz.1.1216': attribute type 29 has an invalid length. [ 181.824755][T10001] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1216'. [ 181.845918][ T9994] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1216'. [ 182.004873][T10016] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 182.316307][T10029] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1228'. [ 182.576035][T10039] netlink: 'syz.4.1230': attribute type 12 has an invalid length. [ 182.606927][ T9] tipc: Node number set to 2886997007 [ 182.695630][T10039] veth3: entered allmulticast mode [ 183.013755][T10058] netlink: 'syz.4.1235': attribute type 9 has an invalid length. [ 183.078773][T10070] FAULT_INJECTION: forcing a failure. [ 183.078773][T10070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.109454][T10070] CPU: 1 UID: 0 PID: 10070 Comm: syz.2.1240 Not tainted syzkaller #0 PREEMPT(full) [ 183.109484][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.109496][T10070] Call Trace: [ 183.109504][T10070] [ 183.109513][T10070] dump_stack_lvl+0x189/0x250 [ 183.109543][T10070] ? __pfx____ratelimit+0x10/0x10 [ 183.109574][T10070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.109599][T10070] ? __pfx__printk+0x10/0x10 [ 183.109628][T10070] ? __might_fault+0xb0/0x130 [ 183.109670][T10070] should_fail_ex+0x414/0x560 [ 183.109704][T10070] _copy_from_user+0x2d/0xb0 [ 183.109729][T10070] kstrtouint_from_user+0xc4/0x170 [ 183.109764][T10070] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 183.109816][T10070] proc_fail_nth_write+0x88/0x200 [ 183.109840][T10070] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 183.109869][T10070] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 183.109895][T10070] vfs_write+0x27e/0xb30 [ 183.109933][T10070] ? __pfx_vfs_write+0x10/0x10 [ 183.109962][T10070] ? __fget_files+0x2a/0x420 [ 183.109998][T10070] ? __fget_files+0x3a0/0x420 [ 183.110027][T10070] ? __fget_files+0x2a/0x420 [ 183.110068][T10070] ksys_write+0x145/0x250 [ 183.110102][T10070] ? __pfx_ksys_write+0x10/0x10 [ 183.110132][T10070] ? rcu_is_watching+0x15/0xb0 [ 183.110160][T10070] ? do_syscall_64+0xbe/0x3b0 [ 183.110184][T10070] do_syscall_64+0xfa/0x3b0 [ 183.110201][T10070] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.110229][T10070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.110249][T10070] ? clear_bhb_loop+0x60/0xb0 [ 183.110274][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.110294][T10070] RIP: 0033:0x7f1b1878d69f [ 183.110313][T10070] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 183.110333][T10070] RSP: 002b:00007f1b1965e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 183.110354][T10070] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b1878d69f [ 183.110368][T10070] RDX: 0000000000000001 RSI: 00007f1b1965e0a0 RDI: 0000000000000004 [ 183.110380][T10070] RBP: 00007f1b1965e090 R08: 0000000000000000 R09: 0000000000000000 [ 183.110392][T10070] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 183.110404][T10070] R13: 00007f1b189b6038 R14: 00007f1b189b5fa0 R15: 00007ffc545736e8 [ 183.110438][T10070] [ 183.477580][T10082] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1245'. [ 183.518882][T10087] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 183.533001][T10087] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 183.556758][T10087] gretap3: entered promiscuous mode [ 183.562024][T10087] gretap3: entered allmulticast mode [ 183.621560][T10093] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1249'. [ 184.693814][T10147] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 184.908672][T10160] bridge_slave_0: left allmulticast mode [ 184.914390][T10160] bridge_slave_0: left promiscuous mode [ 184.922017][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.951949][T10160] bridge_slave_1: left promiscuous mode [ 184.959430][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.994949][T10160] team0: Port device team_slave_0 removed [ 185.021667][T10171] netlink: 'syz.1.1275': attribute type 2 has an invalid length. [ 185.031307][T10172] netlink: 'syz.1.1275': attribute type 2 has an invalid length. [ 185.032695][T10160] team0: Port device team_slave_1 removed [ 185.061206][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.070806][T10160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.091662][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.103362][T10160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.235602][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.274296][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.398682][T10161] veth0_macvtap: left allmulticast mode [ 185.419240][T10168] netlink: 'syz.0.1272': attribute type 3 has an invalid length. [ 185.463584][ T7393] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.478205][ T7393] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.491389][ T7393] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.513360][ T7393] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.540312][ T7393] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.577074][ T7393] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.654511][T10196] block nbd4: not configured, cannot reconfigure [ 185.671600][T10195] __nla_validate_parse: 8 callbacks suppressed [ 185.671617][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'. [ 185.705218][ T7393] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.726219][ T7393] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.769433][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'. [ 185.833104][T10197] syzkaller1: entered promiscuous mode [ 185.867083][T10197] syzkaller1: entered allmulticast mode [ 185.944908][T10209] macvlan2: entered promiscuous mode [ 185.955292][T10209] macvlan2: entered allmulticast mode [ 186.108119][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 186.125720][T10217] bridge_slave_1: left allmulticast mode [ 186.152541][T10217] bridge_slave_1: left promiscuous mode [ 186.169189][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.220989][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 186.232374][T10217] bridge_slave_0: left allmulticast mode [ 186.239231][T10217] bridge_slave_0: left promiscuous mode [ 186.245635][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.313181][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'. [ 186.329462][T10236] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1292'. [ 186.338411][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'. [ 186.347705][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 186.625578][T10249] netpci0: tun_chr_ioctl cmd 2148553947 [ 187.129880][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1302'. [ 187.177049][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 187.869959][T10319] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.879654][T10318] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.974810][T10326] TCP: TCP_TX_DELAY enabled [ 188.060817][T10324] syz.1.1317 (10324) used greatest stack depth: 17864 bytes left [ 188.227475][T10338] netlink: 'syz.1.1321': attribute type 13 has an invalid length. [ 188.243161][T10338] netlink: 'syz.1.1321': attribute type 13 has an invalid length. [ 188.324127][T10345] Bluetooth: MGMT ver 1.23 [ 188.501116][T10352] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.559284][ T1167] block nbd0: Possible stuck request ffff888025045080: control (read@0,1024B). Runtime 90 seconds [ 188.570131][ T1167] block nbd0: Possible stuck request ffff888025045240: control (read@1024,1024B). Runtime 90 seconds [ 188.581151][ T1167] block nbd0: Possible stuck request ffff888025045400: control (read@2048,1024B). Runtime 90 seconds [ 188.592190][ T1167] block nbd0: Possible stuck request ffff8880250455c0: control (read@3072,1024B). Runtime 90 seconds [ 188.763330][T10367] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 189.015203][T10387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.816646][T10438] netlink: 'syz.1.1354': attribute type 1 has an invalid length. [ 189.836737][ T1167] block nbd1: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 60 seconds [ 189.847865][ T1167] block nbd1: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 60 seconds [ 189.859053][ T1167] block nbd1: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 60 seconds [ 189.870865][ T1167] block nbd1: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 60 seconds [ 189.958670][T10448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.984699][T10455] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 190.706339][T10506] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.846329][T10518] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 190.962361][T10527] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 191.352379][T10553] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 191.365478][T10553] __nla_validate_parse: 16 callbacks suppressed [ 191.365497][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 191.436558][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'. [ 191.583361][T10567] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 191.783952][T10581] netlink: 'syz.3.1396': attribute type 58 has an invalid length. [ 191.813427][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1396'. [ 192.121576][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1404'. [ 192.182148][T10602] netlink: 'syz.2.1399': attribute type 21 has an invalid length. [ 192.214047][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 192.257831][T10602] netlink: 'syz.2.1399': attribute type 21 has an invalid length. [ 192.265892][ T1140] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.291777][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 192.303820][ T1140] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.320028][ T1140] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.333392][ T1140] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.374618][T10613] tipc: Enabled bearer , priority 0 [ 192.406960][T10612] syzkaller0: entered promiscuous mode [ 192.412479][T10612] syzkaller0: entered allmulticast mode [ 192.443769][T10610] tipc: Resetting bearer [ 192.492071][T10610] tipc: Disabling bearer [ 192.525531][T10617] tipc: Enabled bearer , priority 0 [ 192.536017][T10617] syzkaller0: entered promiscuous mode [ 192.545310][T10617] syzkaller0: entered allmulticast mode [ 192.604918][T10617] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 192.679727][T10617] tipc: Resetting bearer [ 192.708741][T10628] can: request_module (can-proto-0) failed. [ 193.002981][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 193.003013][T10616] tipc: Resetting bearer [ 193.059551][T10616] tipc: Disabling bearer [ 193.125671][T10660] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 193.177708][T10660] bond3: entered promiscuous mode [ 193.202344][T10660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.241469][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1422'. [ 193.275060][T10662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.287414][T10662] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 193.303764][T10662] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 193.333421][T10662] bond3: (slave wireguard0): making interface the new active one [ 193.341573][T10662] wireguard0: entered promiscuous mode [ 193.350397][T10662] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 193.485516][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 193.544738][T10678] openvswitch: netlink: Flow actions attr not present in new flow. [ 193.580635][T10683] IPv6: sit1: Disabled Multicast RS [ 193.961776][T10705] lo: entered promiscuous mode [ 193.980201][T10705] netlink: 'syz.3.1434': attribute type 2 has an invalid length. [ 193.990163][T10705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.334941][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 194.842191][T10750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1448'. [ 194.893086][T10756] [ 194.895469][T10756] ====================================================== [ 194.902513][T10756] WARNING: possible circular locking dependency detected [ 194.909561][T10756] syzkaller #0 Not tainted [ 194.913996][T10756] ------------------------------------------------------ [ 194.921028][T10756] syz.4.1450/10756 is trying to acquire lock: [ 194.927129][T10756] ffffffff8f68e058 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 194.936398][T10756] [ 194.936398][T10756] but task is already holding lock: [ 194.943780][T10756] ffff888142aed270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 194.953051][T10756] [ 194.953051][T10756] which lock already depends on the new lock. [ 194.953051][T10756] [ 194.963487][T10756] [ 194.963487][T10756] the existing dependency chain (in reverse order) is: [ 194.972523][T10756] [ 194.972523][T10756] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 194.980557][T10756] lock_acquire+0x120/0x360 [ 194.985714][T10756] _raw_spin_lock_bh+0x36/0x50 [ 194.991077][T10756] nr_rt_ioctl+0x193/0xd50 [ 194.996139][T10756] sock_do_ioctl+0xdc/0x300 [ 195.001197][T10756] sock_ioctl+0x576/0x790 [ 195.006072][T10756] __se_sys_ioctl+0xf9/0x170 [ 195.011196][T10756] do_syscall_64+0xfa/0x3b0 [ 195.016316][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.022762][T10756] [ 195.022762][T10756] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 195.030600][T10756] lock_acquire+0x120/0x360 [ 195.035654][T10756] _raw_spin_lock_bh+0x36/0x50 [ 195.040947][T10756] nr_rt_device_down+0xa9/0x720 [ 195.046329][T10756] nr_device_event+0x137/0x150 [ 195.051622][T10756] notifier_call_chain+0x1b6/0x3e0 [ 195.057259][T10756] netif_close_many+0x29c/0x410 [ 195.062639][T10756] netif_close+0x158/0x210 [ 195.067586][T10756] dev_close+0x10a/0x220 [ 195.072351][T10756] bpq_device_event+0x377/0x6a0 [ 195.077819][T10756] notifier_call_chain+0x1b6/0x3e0 [ 195.083452][T10756] netif_close_many+0x29c/0x410 [ 195.088832][T10756] netif_close+0x158/0x210 [ 195.093786][T10756] dev_close+0x10a/0x220 [ 195.098570][T10756] bond_setup_by_slave+0x5f/0x3f0 [ 195.104216][T10756] bond_enslave+0x7a0/0x3a20 [ 195.109337][T10756] bond_do_ioctl+0x635/0x9b0 [ 195.114451][T10756] bond_siocdevprivate+0x17e/0x350 [ 195.120094][T10756] dev_ifsioc+0xb57/0xf00 [ 195.124966][T10756] dev_ioctl+0x84c/0x1150 [ 195.129836][T10756] sock_ioctl+0x719/0x790 [ 195.134692][T10756] __se_sys_ioctl+0xf9/0x170 [ 195.139809][T10756] do_syscall_64+0xfa/0x3b0 [ 195.144836][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.151279][T10756] [ 195.151279][T10756] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 195.159215][T10756] validate_chain+0xb9b/0x2140 [ 195.164508][T10756] __lock_acquire+0xab9/0xd20 [ 195.169713][T10756] lock_acquire+0x120/0x360 [ 195.174836][T10756] _raw_spin_lock_bh+0x36/0x50 [ 195.180141][T10756] nr_rt_ioctl+0x390/0xd50 [ 195.185096][T10756] sock_do_ioctl+0xdc/0x300 [ 195.190140][T10756] sock_ioctl+0x576/0x790 [ 195.195183][T10756] __se_sys_ioctl+0xf9/0x170 [ 195.200325][T10756] do_syscall_64+0xfa/0x3b0 [ 195.205457][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.211914][T10756] [ 195.211914][T10756] other info that might help us debug this: [ 195.211914][T10756] [ 195.222152][T10756] Chain exists of: [ 195.222152][T10756] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 195.222152][T10756] [ 195.236099][T10756] Possible unsafe locking scenario: [ 195.236099][T10756] [ 195.243585][T10756] CPU0 CPU1 [ 195.248960][T10756] ---- ---- [ 195.254325][T10756] lock(&nr_node->node_lock); [ 195.259099][T10756] lock(nr_node_list_lock); [ 195.266213][T10756] lock(&nr_node->node_lock); [ 195.273514][T10756] lock(nr_neigh_list_lock); [ 195.278194][T10756] [ 195.278194][T10756] *** DEADLOCK *** [ 195.278194][T10756] [ 195.286398][T10756] 2 locks held by syz.4.1450/10756: [ 195.291593][T10756] #0: ffffffff8f68e0b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 195.301101][T10756] #1: ffff888142aed270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 195.310865][T10756] [ 195.310865][T10756] stack backtrace: [ 195.316791][T10756] CPU: 0 UID: 0 PID: 10756 Comm: syz.4.1450 Not tainted syzkaller #0 PREEMPT(full) [ 195.316812][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.316823][T10756] Call Trace: [ 195.316830][T10756] [ 195.316839][T10756] dump_stack_lvl+0x189/0x250 [ 195.316865][T10756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.316884][T10756] ? __pfx__printk+0x10/0x10 [ 195.316906][T10756] ? stack_trace_save+0x9c/0xe0 [ 195.316931][T10756] print_circular_bug+0x2ee/0x310 [ 195.316950][T10756] check_noncircular+0x134/0x160 [ 195.316970][T10756] validate_chain+0xb9b/0x2140 [ 195.316996][T10756] __lock_acquire+0xab9/0xd20 [ 195.317022][T10756] ? nr_rt_ioctl+0x390/0xd50 [ 195.317043][T10756] lock_acquire+0x120/0x360 [ 195.317066][T10756] ? nr_rt_ioctl+0x390/0xd50 [ 195.317088][T10756] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 195.317109][T10756] ? nr_rt_ioctl+0x390/0xd50 [ 195.317129][T10756] _raw_spin_lock_bh+0x36/0x50 [ 195.317150][T10756] ? nr_rt_ioctl+0x390/0xd50 [ 195.317168][T10756] nr_rt_ioctl+0x390/0xd50 [ 195.317193][T10756] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 195.317232][T10756] ? apparmor_capable+0x137/0x1b0 [ 195.317255][T10756] ? capable+0x89/0xe0 [ 195.317272][T10756] ? nr_ioctl+0x1b1/0x3b0 [ 195.317289][T10756] sock_do_ioctl+0xdc/0x300 [ 195.317317][T10756] ? __pfx_sock_do_ioctl+0x10/0x10 [ 195.317336][T10756] ? __lock_acquire+0xab9/0xd20 [ 195.317366][T10756] sock_ioctl+0x576/0x790 [ 195.317386][T10756] ? __pfx_sock_ioctl+0x10/0x10 [ 195.317406][T10756] ? __fget_files+0x2a/0x420 [ 195.317431][T10756] ? __fget_files+0x3a0/0x420 [ 195.317453][T10756] ? __fget_files+0x2a/0x420 [ 195.317478][T10756] ? bpf_lsm_file_ioctl+0x9/0x20 [ 195.317497][T10756] ? __pfx_sock_ioctl+0x10/0x10 [ 195.317516][T10756] __se_sys_ioctl+0xf9/0x170 [ 195.317537][T10756] do_syscall_64+0xfa/0x3b0 [ 195.317551][T10756] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.317574][T10756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.317589][T10756] ? clear_bhb_loop+0x60/0xb0 [ 195.317607][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.317623][T10756] RIP: 0033:0x7fa7b718ebe9 [ 195.317638][T10756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.317652][T10756] RSP: 002b:00007fa7b7f95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.317670][T10756] RAX: ffffffffffffffda RBX: 00007fa7b73b5fa0 RCX: 00007fa7b718ebe9 [ 195.317682][T10756] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 195.317691][T10756] RBP: 00007fa7b7211e19 R08: 0000000000000000 R09: 0000000000000000 [ 195.317701][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.317711][T10756] R13: 00007fa7b73b6038 R14: 00007fa7b73b5fa0 R15: 00007ffc4a804638 [ 195.317730][T10756]