last executing test programs: 10.900331214s ago: executing program 1 (id=3135): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r4, 0xc3ceb000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) 10.187154785s ago: executing program 3 (id=3138): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) 10.046598277s ago: executing program 3 (id=3139): socket$inet6(0xa, 0x5, 0x0) socket(0x2, 0x3, 0xff) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000040, 0xffffffff}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x80000001}], 0x2c) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r6, &(0x7f0000000dc0)={@val={0x0, 0x9100}, @val={0x5, 0x1, 0xe674, 0x7, 0x8, 0x6}, @mpls={[{0x40}, {0x8}, {0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}], @ipv4=@esp={{0x7, 0x4, 0x0, 0x7, 0x36d8, 0x65, 0x0, 0x10, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@generic={0x94, 0x5, "6be11f"}]}}, {0x4d5, 0xb5b, @cc={0x1, 0x0, 0x9, 0x6, 0x1, 0xe2, 0x5, [@ipv6=@gre_packet={0x6, 0x6, "1f5e5c", 0x327, 0x2f, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, {[@hopopts={0x2e, 0x8, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x43}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xcf}]}, @hopopts={0x2c, 0x1f, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x1, 0xe6, "4b46eb55c504ad72e35ec26b08e7ec91f6d20b877dd7189ecda60e597285c3ced62bb640c02039f4083f179efe01c7e64f42a81a592bafb9dd8df1eb7eb0a90410d0c47f144289868118f2b6e31955e75d334ef6d960ad2ef551b812851b47da943e11fc1b6b6d5700270e845a6e0679d345438011c1a5bef18923b5b34cfccecc9d6ecb5ec0d528406645542c1797c8dfb4ab149d8c736679ad6ead3bde17f958d4a1a00a1734d01f1288575011024becb9a1cb18484a09e58426bebb13c0ad5df7eb87750a73d06a01eb087cf95b0a9ac01c2a52d3be6c7beb1fdfb8afad62d1502be7f229"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x42, 0x1, [0x6, 0x7f], "bc92c69f2bff757465ce33429952a11eb860770e929e51a8038855bb879542becbc95a637b01828959eaf6e924767316bab4ff712f558e6471a5bac56bdebd25f433"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x8, 0x6], "c247c5ff6604b3e0e3256b97bbb71a435a4db2105bf60e931a65a4253db2b6dfcd862ce5c2437905f14cfeb830ae80d91d9407f4e877bee0ebaffc2002fd19e57fa53a2f3d4c3f9d2c807496b4423af83059150faf12a3095cc02738c1f2ccda45c4076a4b32127471de"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x8e5, 0x7, 0x3], "a08cb7d748a996cb3d2c20e4361ba491425d7175f4f3c2d7bbe6436849cc8bb5f45fe56d6972ed2a1e78c9ee07fe2b8e7e26b0b35072de52a1f564368685"}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0xf, 0x3, 0x1, 0x3, 0x2, 0xd6}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x1, 0x1, 0x1, 0x3, 0x6, 0xc}, 0x2, {0x401, 0xa, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "7e39861bd08a148c6f6a122b1a80fb0984ceab9330f845ae8a08877b0cd7d165fb02c1572cd34b5c3e1836eddf611f006171508246e8141b22b09f4e38fa06b84dfb641226c08f2312cec1ee4d4f74b054e5c9c606f50dc474870e819217949a7986a3297c329b87156351631272fcf98011b93049cee8ed62128e885a44ffbbaa2be89cd91517721b6f277a072df17c6cd3ae"}}}}, @ipv4=@dccp={{0xa, 0x4, 0x3, 0x8, 0xbe, 0x66, 0x0, 0x4, 0x21, 0x0, @multicast1, @rand_addr=0x64010100, {[@generic={0x7, 0xc, "af2c02dba4541e16d7a1"}, @end, @noop, @ra={0x94, 0x4}]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x5, 0x0, "f6cfb8", 0x9, 'U*A'}, "154707b25a35bc7ddd92ff15f43e3614e4623e7fc60939ae9a61ada90c5e4a0fc6ccdb70cbcbf512c91d63b43270d805f0e0633300aeacc04ccffd82744e9b2b67b95652edeb8dd626872de4afa74d1ff1e939227dd39257ab35d78da6bb93e13ad2cbded24193068873a71d667ba50bd345f2a582dc5bd26d28f4d641097c863ded7812be15"}}, @ipv6=@generic={0x9, 0x6, "a45343", 0x1108, 0x3b, 0x1, @mcast2, @empty, {[@srh={0x5c, 0xc, 0x4, 0x6, 0x3c, 0x0, 0x7fff, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @dev={0xfe, 0x80, '\x00', 0x43}, @remote, @rand_addr=' \x01\x00', @local]}, @srh={0x6, 0xe, 0x4, 0x7, 0x9, 0x30, 0x7, [@mcast2, @private1, @mcast2, @private1, @private0, @private1, @dev={0xfe, 0x80, '\x00', 0x36}]}, @srh={0x0, 0x4, 0x4, 0x2, 0x7, 0x8, 0x2, [@ipv4={'\x00', '\xff\xff', @local}, @empty]}], "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"}}, @runt="063f1c50183692e56de2fe77f8fd1eafc56d2d81efdf114b0ce74a", @ipv4=@tcp={{0x15, 0x4, 0x3, 0x0, 0xd4, 0x68, 0x0, 0xd, 0x6, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x3, 0x1f}, @timestamp_addr={0x44, 0x3c, 0x4e, 0x1, 0x6, [{@remote, 0x9}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0xff}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}]}}, {{0x4e24, 0x4e20, r7, 0x41424344, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x80, {[@window={0x3, 0x3, 0xd}, @exp_smc={0xfe, 0x6}, @eol, @sack_perm={0x4, 0x2}]}}, {"a3566da22a8fa3c1a038e5d573f5f6950463d423b748835e72b2f2f6a97d049bb1efe361bfdbf809a8879b16fe77e8730ae8b9bf1dfbd6571c89e083d0d5810d1d68236a23d55f4900bef9b4d919bd13cd40ba38d9f359386e83d1ea5ffe8cda"}}}, @ipv4=@generic={{0xc, 0x4, 0x1, 0x7, 0x76, 0x66, 0x0, 0x4, 0x1d, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0xc7, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x26b}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @end, @end, @end, @ra={0x94, 0x4}]}}, "3ce01d97b387623a19595d557d3baea090a484141e796a53c0dec0a77c48fdf2de1f1659f688010d7b8f2a771a2ff88d9d66469be125f9d6f85b5ab308e0a938a819bbde681c"}, @ipv4=@esp={{0x1b, 0x4, 0x2, 0x30, 0x8a7, 0x67, 0x0, 0xc, 0x32, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0xde, 0x3, 0xb, [{@empty, 0x5}, {@empty, 0x3}, {@multicast1, 0xffffff01}, {@broadcast, 0x1ff}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xae}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb4}, {@dev={0xac, 0x14, 0x14, 0x26}}, {@loopback, 0x8}]}, @ssrr={0x89, 0x7, 0x85, [@empty]}, @end, @ra={0x94, 0x4, 0x1}]}}, {0x4d5, 0x80000001, @basic={0x0, 0x0, 0x5, [@ipv4=@gre={{0x36, 0x4, 0x2, 0xb, 0x32d, 0x67, 0x0, 0x2, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0xb4, [@multicast1]}, @ssrr={0x89, 0x13, 0x94, [@local, @empty, @local, @multicast2]}, @lsrr={0x83, 0x17, 0xa5, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}]}, @timestamp_prespec={0x44, 0x4, 0xae, 0x3, 0x2}, @ssrr={0x89, 0xf, 0xad, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xcb, 0x1, 0x4, [{@remote, 0x5}, {@multicast1, 0x6}]}, @cipso={0x86, 0x6b, 0x0, [{0x0, 0x4, "2b81"}, {0x7, 0xf, "0200373665b81ae8eb60950174"}, {0x5, 0xf, "22775c250ae55cdc339cc9a7d9"}, {0x2, 0xd, "ba32805b58a82fd1ca560f"}, {0x6, 0x8, "25d5a88856e6"}, {0x0, 0x8, "ada85618136a"}, {0x3, 0xb, "270b938da1489b70e0"}, {0x0, 0xe, "2974a0ca0dcd065a4d4e930d"}, {0x7, 0xd, "d7a257fbc0849151f17a45"}]}, @end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd9, 0x0, [0x1], "a34e54a597a157afe44b1d909c5727af88c0d5816d019e35f6d4a5bbe776539bd2e0e37a2f92061a1598878388d0d730cf762c75b7a6e4ce2f62bad01a3c388240fa6a6817730f300e8517af83d1b622227ee7fb0b2f2f7209c7c789a5571481e8a64c115e44f7f2e186a54359f8ab6c69dc685f85f3e0ccfc373dbbebe791961fbf2ffc892c6f12c8573d215841d918c167f62cf1048b233a2ed0d83d63b7eff524d2b650482c6c1da853f80d8e2335a0b31986f3f55006f18458e0ed3f610038202ac9a0e4e98aa8962a571e87baea5169cf54ab56514f09"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6, 0x2, 0xb0a0], "b895b693c31d17f31525531d1d001a32840aa325213b97a621f8b69f94c8461b8822552e9554a5ff498d0349aba6047f42b61686"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "0978b10c09aaf8e93a2f51899589099a37f07b1b42423dd435cdaef772b2faaea6fa0a7a2acc0c8fc3a1c14d16b3da356a4941b232bdae546b387dbe2f1419b8345c662b9843da6a8f6bf753228df61624f8ddac69717b72f7e213c0c4eb059aa89eef50a2a90b253a65073ef57da0da55b9d32b0ae779a99bf1641b85ea493f860ff6ba8fbff8df83dac59ca71b87ba6aa085224814bb55fea6784e38c05c9c4da0d9ddd12bf9d86003f447b3d2920406682467da"}, {0x8, 0x88be, 0x2, {{0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0xa}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0x2, 0x3, 0x1, 0x1, 0x6, 0x3}, 0x2, {0x13, 0xa584, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "dcefc14d955fe48fe5a9130d1067733c255f85338ba4cdf1808d0f51bc997f018aa666e576e60e8381a3a91e7f15b3d3ecc40b5e537765462667171722fcc8ff4fdf4b5dc7f154"}}}, @ipv4=@gre={{0x23, 0x4, 0x1, 0x1, 0x272, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @local, {[@end, @timestamp_addr={0x44, 0x24, 0x67, 0x1, 0xa, [{@broadcast, 0x4}, {@loopback, 0x2b}, {@private=0xa010102, 0x5}, {@rand_addr=0x64010101, 0xa2}]}, @timestamp={0x44, 0x8, 0x8b, 0x0, 0x2, [0x3]}, @generic={0x83, 0xd, "109bbf6813bfc1668237fb"}, @timestamp_addr={0x44, 0x3c, 0xda, 0x1, 0x4, [{@multicast1, 0x9}, {@loopback, 0x80000001}, {@rand_addr=0x64010102, 0xffffffff}, {@empty, 0x9}, {@local, 0x4}, {@multicast2, 0x400}, {@private=0xa010100, 0x9}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x9e, 0x3, [0xa0ce], "d8987195b47e8c1ed4eb8ca47674ae1121122daccf8f681949d5d1513438cd9e7a71e0aa89810f112e2d74c64a9a1492e83a25545f3fc81493230dced4f5a6dfc3a52cec2a6282ca3587751aa08daf7736d59e7d1e70aae7c2540df1b20933abea12922aba726645f5a056182e4e885bfa16b2f6a8f50373ac78ed835fadddc0ada2a624d0d01209840a1274aef2c4dde24beb734e5f02d39c2a0aefae77"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7fff, 0x5, 0x10], "ec2681cd86d821838debb3e5"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "e639a02b932fcb92083c76fb2b4bdc286f7d1a9fca0a3b97fdc8dc56a2788589eaed2ee169181c44bb81607a383fbdf9d32c19dde6983633ae6ddaf6fce5b2d498e9c4b4083dd296a8182d23fa1a33da566f8f33951c2195a1b1ecaa20471e8c0816d5ed4f19d02da30e587a5b8c56aab3b06dce0ca0494a3b490764990ecaad3be5a48587c10abf1c0d419154"}, {0x8, 0x88be, 0x1, {{0x4, 0x1, 0x0, 0x3, 0x1, 0x2, 0x6, 0x7}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x9, 0x2, 0x1, 0x0, 0x2, 0x5}, 0x2, {0xc0f, 0x6, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "8fa67f30a6d4e96645b83e0ad9ba3575df9add115cbaeb097d9e4333b0eb3eb6a8d424ff2925d961f8737270b3e7e79451eefa3876cd522b9ba3737f10cf1fe3956faa53cedf9f615d3867f0447726e9b3d42ae64f1d62943a04b4cb0df8d196a1adc9"}}}, @ipv4=@gre={{0xb, 0x4, 0x2, 0x6, 0x280, 0x67, 0x0, 0x6, 0x2f, 0x0, @local, @remote, {[@rr={0x7, 0x17, 0xf, [@loopback, @loopback, @remote, @local, @remote]}, @end]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x3c, 0x0, [], "14eb4fcc3a159879e89410c8cc5f69f17a033112f4f3dac374d5f22bf1eac6ec116642ec40968ed244ba8e296b97526519d904ed342f3c9b832b8eb6"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x3, 0x81], "0c3a420c5d3299b1243611dbf1b3cc450d9eacaa28240c645bf275057899efad9bbaa613078b5a8a8a6ab47d7216d72b6210b30f0d500cd6e48a4293ef4d6bcc638d24246bf6e4298aad1f3c624eaf2877e6cac90bea3d85a8e50ae34131254ad1f2c2"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x4, 0x1ff, 0x7], "ba9b288fb8e21ebf7e4b72673ff33e733f2963aa59c21624d0ffd2cb1d07045141911f8978c6619e88c3f4e17b212ea45149b519efc4581ed9db5fe3b4319b7461da29172c60a8b799b5fd99e081168480825ca353ca39e2f38f76e02ecaf0fc3ea0228ab613bb140ee93444f184420c62b6b1d6f7f9b6ab5064287fdf3e4d67a19b027cbe5dd780df677823a42ef881e837b1d5399d10617524a06fa5e881e802778befc1522431"}, {0x8, 0x88be, 0x0, {{0xc, 0x1, 0x6, 0x1, 0x0, 0x0, 0x4, 0x9}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x70, 0x0, 0x0, 0x1, 0x6, 0xfd}, 0x2, {0x9, 0x2, 0x3, 0x1e, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "bd866d7d5958f3530ab96735d366ef50eb1cfb227138d6b6566a4cd9aa30c624b35084af2943041b93290cccf8d6eb3afd3b10d116674c6538c2c2471a1b7aff6bd2f2c5c247c6f0c0e9dd1113ef0619c60b8c7d80f06fcb74b92aecf99659e96baf23c33b7b8a50f703f6e52a3311ec7f54dda4c9c5405860d236b3c36a5a1b77150803327a943c1703460cc57d4c4a231a19dab373137791758c5df1a1049652077b27e7860d3ff56c3703cd05c9e3d83cb4fe6e058718d949ce67bd0341"}}}, @runt="04c7ac1dff4e7b3620"]}, "7e2640e529", 0x5}}, @ipv6=@generic={0x1, 0x6, "d67b12", 0x1390, 0x87, 0xff, @mcast1, @empty, {[@fragment={0xa7, 0x0, 0x6, 0x0, 0x0, 0x3, 0x66}, @dstopts={0x1d, 0x4e, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0xfff, [0x5, 0x7]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0xf, 0xfc, "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"}, @calipso={0x7, 0x48, {0x1, 0x10, 0x52, 0x3ff, [0x851, 0x6, 0x8, 0xd705, 0x7c8, 0x101, 0xc989, 0xe]}}, @generic={0x5, 0xec, "3adcfb9a542d8a9c73f5fb04e9131005dc3043b105e28fc4eeae46c4d9e6cf7e519616512cabf873a417c9a75768ac08f592c7e5d38e9cf2c719314f48df865a7b0610fd3a6d203808f53b91eb97efe9bca51566d42994f2b16e5d40ce251f1d63d4b04afebae006211b5688caf2ea803cee34e27ae34bc13e507c08d765133e844e9b19a11043e469fcb81268c0246ba2f22e15505ccaebbf25e44301d59462fba89011f872190afdb0334f1983bea04bf58a2b03cc9a80f4fae784ca5aeda6eee71071808c8cc5ba923bfc28eba92794521ba9dba40ee8e665678178c7230f76f397b77e9710061b0ff9d8"}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x2}]}, @routing={0x8, 0x2, 0x1, 0x97, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x89, 0x6, 0x4, 0x3, 0xc, 0x20, 0x400, [@empty, @dev={0xfe, 0x80, '\x00', 0x3b}, @loopback]}, @routing={0x4, 0x8, 0x2, 0x3, 0x0, [@mcast1, @rand_addr=' \x01\x00', @local, @empty]}, @hopopts={0x46, 0xb, '\x00', [@ra={0x5, 0x2, 0xcd}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim, @ra={0x5, 0x2, 0x577}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x7ff}, @calipso={0x7, 0x40, {0x3, 0xe, 0xa2, 0x1, [0x200, 0x0, 0x3, 0x7, 0xc7, 0x10001, 0x7]}}]}, @fragment={0x2f, 0x0, 0x2, 0x1, 0x0, 0xf, 0x64}], "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"}}, @ipv4=@icmp={{0x1b, 0x4, 0x2, 0x0, 0x13f, 0x66, 0x0, 0x1, 0x1, 0x0, @remote, @private=0xa010100, {[@timestamp_addr={0x44, 0x34, 0xc2, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x9}, {@private=0xa010101, 0xffff0000}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x8001}, {@multicast2, 0x36a}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x54, 0x0, 0x5, [0x0, 0x10000, 0x90, 0x4, 0x3, 0x7ffa4a11]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x32, 0x4, 0x1, 0xd, 0x8, 0x68, 0x3, 0x1, 0x1d, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@cipso={0x86, 0x41, 0x1, [{0x1, 0x10, "4f4bd0a06b0b342d9cacb4a502fb"}, {0x2, 0xc, "7edd3254c1861e78c928"}, {0x7, 0x9, "1c1fc1c0c8cfcb"}, {0x1, 0x6, "7358de9d"}, {0x2, 0x9, "9cba7976d2dfb2"}, {0x6, 0x3, 'T'}, {0x1, 0x4, "0bcd"}]}, @timestamp_addr={0x44, 0x34, 0x84, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x6}, {@empty, 0x80000000}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x94, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x1}, {@local, 0x9}, {@multicast2, 0x2}, {@local, 0x928}, {@loopback, 0x4}, {@empty, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}, "2109e4"}}, @ipv4=@gre={{0x18, 0x4, 0x0, 0x26, 0x259, 0x64, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, {[@ssrr={0x89, 0x13, 0xfe, [@loopback, @empty, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x67, 0x1, 0x1, [{@multicast2, 0x6}, {@multicast2, 0x80000000}, {@loopback, 0x6}, {@empty, 0x1921}, {@private=0xa010100, 0xe}]}, @rr={0x7, 0xb, 0x5d, [@remote, @multicast1]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x7d, 0x2, [], "d7a132aef40b9bf6fb6a61b62c74205a6199f4310073000e5444ff620f2f55016f65d63d74948695d7fbc7289b4d163482910b8d351077b2c42273a1c9a5cd984a56bb075ae79fe6e25b32ab5c8894de3b4036ce1462c26542af66c5f803a1e0c33327c9056b830f499dec00965aea1bb3b64034a2073b04d8ff9cacf0"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0], "f957456dc155dfc3351ee1632793e9217112c27616fee5810f7236e3b561c1cd86ad4b7e015a6afe4d837231fb19924bedf13bec6f3c33cbbbba6dfc0a6e1cb6f718459b460493f41d2c898821ed42d53389a3004c310d87e2ade0ff3e613765b7d017305982e4"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x8], "48542a4af10577b96a5349ff4158513b14a50891eb7aead3ed0772247d1ce6c555c3e9ec35d5bc1941e3c990b3c0d203017ed75eeeb810c21a08ff0e74707391f52e4ba706d7bf374e939398b22edc0c26fe5fe418c52b5252008e1be8bebe4ae969a3a653fa274f80e7a29847071b772f3fc7af7d8a8e623e976b93f57461b05f864ffd3daf4adbc9cb84fb1ff160e125a005aac957e440388b1272097d721c38b2edfc6979652f"}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x3, 0x2, 0x1, 0x1, 0x0, 0x2}, 0x1, {0xa863}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x80, 0x3, 0x1, 0x1, 0x2, 0x5}, 0x2, {0x9, 0x696a, 0x0, 0xd, 0x1}}}, {0x8, 0x6558, 0x1, "b445f349b23e084ded4b3228dd3fb2a1cebaa2b049bf0dd3883da51a2f605719d380975162"}}}]}, "c0", 0x1}}}}, 0x36f6) r8 = socket(0x1e, 0x4, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r9, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000480)=0x4) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r8], 0x14) 9.915395607s ago: executing program 1 (id=3141): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r1]}}], 0x20}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000fa0000000000000004711223000000000095000000000022d837dc01f5f6431d45e46b7a108733761fabef050cfbd59f98414a8a59158740137db7da46cc55fb669ecddcbbc2cf1740933a8e1d978673e4281198c38a1f0f774ea56302292a882b02fbbe4ec3dcbd6ebb6535e729abf47562663f82e320fbc7aa367cad58e3373aabfba9e1ce9a3e41506ed7be66e302f5e6ff5713765270156ee5e80095e4a3dad8b9436e20d721e6"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x396}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010428bd7000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300ea"], 0x3c}}, 0x20004000) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000009000000731122000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r5, &(0x7f0000000000)="0c000000010001", 0x7) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f00000005c0)="f5", 0x1, 0x40000, &(0x7f0000000240)={0xa, 0x4e1e, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x3}, 0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="540007a3081779244bcd00000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000000c0007800600044000000000"], 0x54}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x2d, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x2800000, 0x5, 0x8, 0x52, 0x8000, 0xe7, 0x1, 0x8]}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r12, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 9.413315546s ago: executing program 3 (id=3145): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00008100f2dc3ad00865e42ef9c57e4ea3165dc490b1dbe77600000000ecdd62"], 0x40) listen(r0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) bind$802154_dgram(r4, &(0x7f0000000140)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x4) 9.365619282s ago: executing program 1 (id=3146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 8.856364706s ago: executing program 1 (id=3149): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) 8.573898495s ago: executing program 1 (id=3150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005) 8.468134528s ago: executing program 3 (id=3151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f000001ae40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000001ae80)={&(0x7f000001adc0)={0x28, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}}, 0x4010021) r2 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32], &(0x7f0000000280)='GPL\x00', 0x2, 0xda, &(0x7f00000005c0)=""/218}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001a780)={r4, 0x0, 0xcf, 0x1000, &(0x7f0000019580)="5b4ce884a1248b1c22cbc9ff366dc859a207903c45a58b103567ea9c9978392cb0841d28dca3389ead16414d3948225a87fe6d1ad1cd7175f0059a8c34abeba7b9257f4212939bfc40e4e33e6655a8b64ab19f319e3f939142eea74763055b680dbb764cf3539a8609c1b5a8ec4b116871a47d39cd95abc357bfb3a6e1b6335caed1b703c8b24dd8211afcfb214b13a8aa528d3e88c3abe454c6f1dd1940468b22ec58acf69c7041e9f26204fbad74e804f224d005b454470724512111f6e2dc042ea35e9833832335bde72476734e", &(0x7f0000019680)=""/4096, 0xfff, 0x0, 0xbd, 0x36, &(0x7f000001a680)="80b9e18cd87b49f7b01fe6a5b3175f900483e020625daf4fa43c81af4c84db6bee5baf440a354627a5022fe9915b30207abd4286dde9e94926a9339d22eb0cde8437ed57e41302c15e2724ec96ed7c87f8dc21a9f04dab99e7c0ecc31821609f46d41fad2055c4bd1563a1d7c38f048ff2340be707df99e305a546ef92858d4b77dd420dd953d179557150d61a3dd220c10bcbcae735954d5c23dfc06f331df6663d3ae1012a41ea7f1c105484da6f57b9e7bc24b419450e2be2d96a2a", &(0x7f000001a740)="087fc478ff953e0d4457be9da95d8a6ee4ff703191f919e662b21420171c3a7a71c5fc64e85b930967161651605c4f6342dd1094465a", 0x5, 0x0, 0xb830}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x80000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.208635363s ago: executing program 1 (id=3153): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x15) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x18}, 0xc005) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000001e00)=""/72, 0x48}, {0x0}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002040)=""/156, 0x9c}, {&(0x7f0000002100)=""/225, 0xe1}], 0x9}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\\\x00', 0x800, &(0x7f0000000080)={@align=0x5, {0xfeff, 0xfffe, 0x100, 0x4}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x8}) r5 = socket$inet(0x2, 0x2, 0x0) unshare(0x2020600) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11}, 0xa) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r5, 0x0, 0x0, 0x40010, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) 8.025852778s ago: executing program 3 (id=3155): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r1]}}], 0x20}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000fa0000000000000004711223000000000095000000000022d837dc01f5f6431d45e46b7a108733761fabef050cfbd59f98414a8a59158740137db7da46cc55fb669ecddcbbc2cf1740933a8e1d978673e4281198c38a1f0f774ea56302292a882b02fbbe4ec3dcbd6ebb6535e729abf47562663f82e320fbc7aa367cad58e3373aabfba9e1ce9a3e41506ed7be66e302f5e6ff5713765270156ee5e80095e4a3dad8b9436e20d721e6"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x396}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010428bd7000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300ea"], 0x3c}}, 0x20004000) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000009000000731122000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r5, &(0x7f0000000000)="0c000000010001", 0x7) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f00000005c0)="f5", 0x1, 0x40000, &(0x7f0000000240)={0xa, 0x4e1e, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x3}, 0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="540007a3081779244bcd00000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000000c0007800600044000000000"], 0x54}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x2d, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x2800000, 0x5, 0x8, 0x52, 0x8000, 0xe7, 0x1, 0x8]}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r12, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 7.792703174s ago: executing program 3 (id=3156): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x15) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x18}, 0xc005) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000001e00)=""/72, 0x48}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002040)=""/156, 0x9c}, {&(0x7f0000002100)=""/225, 0xe1}], 0x8}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\\\x00', 0x800, &(0x7f0000000080)={@align=0x5, {0xfeff, 0xfffe, 0x100, 0x4}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x8}) r5 = socket$inet(0x2, 0x2, 0x0) unshare(0x2020600) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11}, 0xa) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r5, 0x0, 0x0, 0x40010, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) 5.962216133s ago: executing program 4 (id=3166): syz_emit_ethernet(0x5a, &(0x7f0000000000)={@remote, @local, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1}, 0x30, 0x0, 0x0, 0x0, "6fd9bc3bb170ed7207927ada7431f7a6c3862bdf9fbd53317bbc55f5fce2c0112c81b7d403e0662df2e33e45764ed1d1616810d1bcf72d45b44b01ed8c10c13e"}}}}, &(0x7f0000000080)={0x1, 0x4, [0x78b, 0x4dc, 0x865, 0x9ec]}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='*!@(!}-:.\x00', 0x200, &(0x7f0000000100)={@align=0x3, {0x8, 0x8e, 0x1, 0x7}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x8000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x7, 0x2, 0x2, 0xd, 0x81, 0x8}, &(0x7f0000000280)=0x20) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x35d, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f00000003c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000400)=0x28) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}}, 0x11) (async) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000600)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x3b}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x0, 0x5, 0x0, {0x9, 0x23b, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x308, 0x32, 0x2}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x17, {0x4, 0x9, 0x5, 0x100}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4040040) (async) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000ac0)=@dstopts={0x3b, 0x3, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x100}]}, 0x28) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xf8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) connect$llc(r0, &(0x7f0000000c40)={0x1a, 0x332, 0x2, 0xca, 0x0, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000d80)={r3, &(0x7f0000000c80)='\x00', 0x410200, &(0x7f0000000cc0)={@_ha_fsid={[0x24]}, {0x5, 0x33, 0x4, 0x9d5}}, 0x3, &(0x7f0000000d00)={@_ha_fsid}, &(0x7f0000000d40)=0xf1}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r9, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x73}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24048800) (async) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid\x00') write(r10, &(0x7f0000001040)="ea916edd667fa972fab464e0d194e8c266c5e3747219931cd05aca346259e16b51ea70c742492222f1aaa51517b40f9156d12b43fe9b5ccf37d989b42c128e6671168a48afb6a5e3fc62c6335e7a36f3bddf08856e", 0x55) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000010c0)={0xb, {{0xa, 0x4e22, 0x3ff, @loopback}}, 0x0, 0x2, [{{0xa, 0x4e20, 0xa, @ipv4={'\x00', '\xff\xff', @local}, 0x6}}, {{0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x3400000}}]}, 0x190) recvfrom$x25(r0, &(0x7f0000001280)=""/109, 0x6d, 0x40000060, 0x0, 0x0) 5.807236163s ago: executing program 4 (id=3167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd26, 0x0, {0x80, 0x20, 0x80, 0x0, 0x0, 0x11, 0x0, 0x5, 0x200}, [@RTA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x60, 0x0, 0x240440c4}, 0x0) 5.665623109s ago: executing program 4 (id=3169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x6000000000000000, 0x0, 0x400dc}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.438845464s ago: executing program 4 (id=3171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000504000000020000000000001202000000020000000000000e030000000000000000002e"], 0x0, 0x54}, 0x28) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2f}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044080}, 0x1c890) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0) r7 = epoll_create1(0x0) r8 = socket(0x1, 0x80802, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d}) r10 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) syz_emit_ethernet(0x96, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4e300", 0x60, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@dstopts={0x2f, 0x4, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x1, 0x2}}, @enc_lim={0x4, 0x1, 0x87}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0xe8a, [0xffffffffffffff7f, 0x2]}}]}]}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001}) shutdown(r8, 0x0) accept4$packet(r8, &(0x7f0000001800), &(0x7f0000001840)=0x14, 0x1000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000aa6b61974ee1e0fa0938", @ANYRES16=r1, @ANYBLOB="050027bd7000000000002100000008000300", @ANYBLOB="91655307fff2abc6536df52deece7ae6aa94a36f189dccbfb91783a8036cb99b569ec6c89f527ebd90c5d22459f194781ac7519f07684ad760374d35c3458b5dbaea92a2e9c46a954ea57f3dd4fb18417f5bb45ec58a27cfde9bb576bf56c41cfe77d9dd6e5859652f674b1de2ed3fc936720de88769d1f05c18c2c32d804584f20a81bf633716dcbfb8fdda226cc0a180ac7d6b82bd0ec8d374308b36dbc83e701f249ca3e1afbedd7ada342a7d2101e680facadb79dbcab88507b1d37f63b143b8bd96acd600917cc70df9a2bc054bf5d31582169e278dcf8dbd28e7859b03530c8c0841717cb89fa52cf673657c4d9950", @ANYBLOB='D\x00-'], 0xc0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 5.200120424s ago: executing program 4 (id=3173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a80)={{{@in, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xfffffffffffffebf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) nanosleep(&(0x7f0000000500)={r6, r7+10000000}, &(0x7f0000000540)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x70, r11, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 4.233549885s ago: executing program 4 (id=3175): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r1]}}], 0x20}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000fa0000000000000004711223000000000095000000000022d837dc01f5f6431d45e46b7a108733761fabef050cfbd59f98414a8a59158740137db7da46cc55fb669ecddcbbc2cf1740933a8e1d978673e4281198c38a1f0f774ea56302292a882b02fbbe4ec3dcbd6ebb6535e729abf47562663f82e320fbc7aa367cad58e3373aabfba9e1ce9a3e41506ed7be66e302f5e6ff5713765270156ee5e80095e4a3dad8b9436e20d721e694fda5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x396}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010428bd7000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300ea"], 0x3c}}, 0x20004000) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000009000000731122000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r5, &(0x7f0000000000)="0c000000010001", 0x7) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f00000005c0)="f5", 0x1, 0x40000, &(0x7f0000000240)={0xa, 0x4e1e, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x3}, 0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="540007a3081779244bcd00000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000000c0007800600044000000000"], 0x54}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x2d, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x2800000, 0x5, 0x8, 0x52, 0x8000, 0xe7, 0x1, 0x8]}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r12, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 3.970152103s ago: executing program 2 (id=3177): r0 = socket$inet(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10004) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0xff07, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0x36, 0x0, &(0x7f0000000b80)="c1df07000100d30a298ee68886dd87984f03f5c34cd39289a4a0d12fa3df29b101ea6452826dee9bb643e6eb66c11e722d6cac6346cd", 0x0, 0x3ff, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x4}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 3.70277668s ago: executing program 2 (id=3180): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040), 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x170bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x8, 0x0, 0x800, 0x20000000, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @rand_addr=0x64010102, @local}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000400"], 0x44}}, 0x0) 3.141722277s ago: executing program 0 (id=3181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) 2.804804976s ago: executing program 0 (id=3182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000504000000020000000000001202000000020000000000000e030000000000000000002e"], 0x0, 0x54}, 0x28) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2f}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044080}, 0x1c890) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0) r7 = epoll_create1(0x0) r8 = socket(0x1, 0x80802, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d}) r10 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) syz_emit_ethernet(0x96, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4e300", 0x60, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@dstopts={0x2f, 0x4, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x1, 0x2}}, @enc_lim={0x4, 0x1, 0x87}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0xe8a, [0xffffffffffffff7f, 0x2]}}]}]}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001}) shutdown(r8, 0x0) accept4$packet(r8, &(0x7f0000001800), &(0x7f0000001840)=0x14, 0x1000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000aa6b61974ee1e0fa0938", @ANYRES16=r1, @ANYBLOB="050027bd7000000000002100000008000300", @ANYBLOB="91655307fff2abc6536df52deece7ae6aa94a36f189dccbfb91783a8036cb99b569ec6c89f527ebd90c5d22459f194781ac7519f07684ad760374d35c3458b5dbaea92a2e9c46a954ea57f3dd4fb18417f5bb45ec58a27cfde9bb576bf56c41cfe77d9dd6e5859652f674b1de2ed3fc936720de88769d1f05c18c2c32d804584f20a81bf633716dcbfb8fdda226cc0a180ac7d6b82bd0ec8d374308b36dbc83e701f249ca3e1afbedd7ada342a7d2101e680facadb79dbcab88507b1d37f63b143b8bd96acd600917cc70df9a2bc054bf5d31582169e278dcf8dbd28e7859b03530c8c0841717cb89fa52cf673657c4d9950", @ANYBLOB='D\x00-'], 0xc0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.605154836s ago: executing program 0 (id=3183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005) 2.527923365s ago: executing program 2 (id=3184): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001400010126bd7000f8fbdf250a3878ff", @ANYRES32=r1, @ANYBLOB="15000200000000000000000000000000eeff00011400060008f8ff4ce4000000ff004000ff010000"], 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268", 0x5}], 0x2}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) connect$inet(r3, 0x0, 0xffffffffffffffc0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x5, r5, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb13ee76ba733ab77}}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59527bd7000ffdbdf250a0800ff", @ANYRES32=r6, @ANYBLOB="140001001c000000008fb8ccf8000000400000010808090002000024"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9) 2.002676023s ago: executing program 2 (id=3185): unshare(0x6a020400) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x48c71, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002100)={{0xffffffffffffffff, &(0x7f0000000140)='\\[#\x00', 0x14880, &(0x7f0000000180)={@_ha_fsid={[0x6, 0x1]}, {0x1, 0x0, 0x4, 0x9}}, 0x0, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x100}, 0x6, &(0x7f0000001fc0)=[{0xdc6cdf169df8b46, 0x5, 0x0, &(0x7f0000000c40)="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", 0xa3e, 0x28}, {0x3, 0x3841000, &(0x7f0000001c40)='nl80211\x00', &(0x7f0000001c80)="d8af816f22c5e3c575c1b65a1b63d64e6324f02769c3894ba5b12efa6226c521d85065ef5910e6a01587f572226f8580b5d333b6d623127d27b4a5e5b079df81291c5b4aab33ed90a72b", 0x4a, 0x2}, {0x3, 0x8001, &(0x7f0000001d00)='TIPCv2\x00', &(0x7f0000001d40)="5cf2addee1cac3fb2cda1a07ac5f350644fec02ada7e7eaeccde107af9ec0777f377de36d73c82a36165477747c2ca618f9a1e23ad2c50d542bc95f3a402f66241763181cfdce51ee95f31c448dc74aadcfce249", 0x54, 0x28}, {0x2, 0x7fffffff, &(0x7f0000001dc0)='\x00', &(0x7f0000001e00)="097b5dd55c9e851041306065675cef9fdf18cd9f6ffe622ed70f169731a1a5ed436444a238a8c9feb74d259a9585a1fee2503c0c9e07abdb8187f6c3a6f5a888203bef5ac02eea679389e5c069df75618629b8ec52f2dfaa9b97006dacbf53dfbb6bf454509f06723736834f303370b50cbf7a5b873bd22ec2420811bde6e0b51010b27c008beb4639551d235c212346e4853344368a0bf7716211d358b4bbc04bf1828c0df7ac93dc12a2", 0xab, 0x20}, {0x2, 0x2, &(0x7f0000001ec0)='nl80211\x00', &(0x7f0000001f00)="9f1b19671efc007d8a87f4d07c044cb4888a7d32dcdceb520250917a2cf62af7214c15f8e2ddc91c659454b3e9211770f393262bf7806d", 0x37, 0x30}, {0x1, 0xff, &(0x7f0000001f40)='\x00', &(0x7f0000001f80)="4e326dcad1c030e6f8a27544cb5eb85d8dd0f34ec188680c1d3387a1431a7e2eac2631ef212ff9d8eb6c0086e5891879b7ff261c1ff441c70e6f92bb1ee7", 0x3e}]}) syz_genetlink_get_family_id$ipvs(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000002380)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002340)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x2) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f0000000a40)=ANY=[], 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r2, 0x4}, 0x38) 1.395116419s ago: executing program 0 (id=3186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="6100861d4c5c"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 470.804437ms ago: executing program 0 (id=3187): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000a40)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x1, 0x19, 0x88, 0x64, 0x0, 0xcc, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0x68}, @timestamp={0x44, 0xc, 0x9, 0x0, 0xa, [0x33, 0x7c2c]}]}}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "72e3524000", "4b4450edff621723f951130e8fff0ee8", {"ffad4543128a133d1adfb08281433146", "1c5100fffeffffffffffe900"}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800480400340000000000059078ac1414ff0a010100860c0000000301065c1df65900000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="cdaa4ce12714f950"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000001d00)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x6, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="00000600"}) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000180)={0xc4, 0x14, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@generic="fc255e8a9e586ab438023f4262375e45fa41328ba8c1861284f70c1ce2ff3a37406db53faf2f84f01991903c1668062362e191cfa6261107580e338c83d92ac3d03f9702c6f9a0f61c4b0fb90dee800fc0c07cfd05209f380958098500e8e9a8406f49abc508059406996448201703e0d86efd9f7ecd367e8290ca63512bdd557ae5ee064debcc099e8824f001b70f87a7b83b766ef4a555ee946ea3f9da", @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@remote}]}, 0xc4}, {&(0x7f0000000280)={0x20c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x50, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="7ba7abedd3e85a2a8f570ae956ef12aa4186ca6477297778eeb54bff0cc0183c0d141ecb8b5d54a77de6f8e9f0af7d990d1353715f490a3d929822838fba151c25e6583661f60501ff7c067af0f7b2ecfcdbc053fe9d83d83d720dc56cd3bed029ebecca2c7d03008d400961a9671a5283ae65302cec2b052cc35ca2dbf1f6e648ffb1389a97124c30c68964dc0a347e06163ec1b82a309734b6d07cde316f8b37e36ac0b1b40f8db4bfd39a9532f49a19d5c33c3664233b8d2e27ebd83ce366a34fb8de850fe2e5c1ee32d25a92d1ffd8b1b97cacb7657750345b12eb7f813740695661bc33f0767b7d17d7a693", @typed={0x8, 0x13f, 0x0, 0x0, @u32=0x10000}, @typed={0x14, 0x10c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x1c, 0x57, 0x0, 0x1, [@generic="475b9198a9bda928d303e8a238ca928fe16c4d4329cfd81d"]}, @nested={0xc0, 0xe4, 0x0, 0x1, [@nested={0x4, 0xa4}, @typed={0x9, 0x160, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @nested={0x4, 0x3a}, @typed={0x9f, 0x13, 0x0, 0x0, @binary="c0d82c8f55ed1818e92c70a0d9f777b1a85ecfc6a4f1db1919692e2c6d686321a19d1d24828e0986c4bd91a32f2e3001c0a54abf742d369a2fda4abb6cae9dbdf4dfbfc33f325ef47118bfe89c108de9976ad4caf6601276ba588274dd487baf37ac99b9e16bc3eef0e7dd1967e5a9d7da12c9dc7dc4e0b64e83451bad9767383ceb597d21b60ea0d4e44cfe53c8a75b6c528c8265dd53f77957e9"}, @typed={0x8, 0x53, 0x0, 0x0, @fd=r0}]}]}, 0x20c}, {&(0x7f0000000b00)={0x11b8, 0x10, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@generic="d4cc6d50dc64dc1a6250f53b98d46bb5140e0ed975ef45ad290c54c2d4dd9cec8fc27919db3e4c3b9b64195aaafe53dc42b15eb901bda2fbeba013d5854b76f91deba4a781f1689d690ce3a34781171ebff061a257dc68d3b8444d7863746cbe068be7b05cb33a4968e640e7bac392a3ab35abf1b75837bc4fed8a99cd5e22f8dfbc6229c79e8fec2b1e2921ef1cbf76dd1aef92fe84274da5c643a2a68388a1a0a41e8a29a37f01e11dfc8888fa294a2e6e0eb3e54748e39303a16f79b4dd4f6368e3166e5ae5b50420ce5188f3d9b3139c41f09f46269b3ba1902ede7b24012dc9868bcc9d894c7dd86ebe88596afb9813301970f9eb25d4a95316cad7beed456003660df5202a1c9bae748733a4b5d6eca314e33cf54446d309568aa5744e581d2078462ca0e1414c95458edbc5204c51b121072e3698c5a1530ad18eb86c249d42f762be66cbcfee89b60e50dd06da8939e7d150c986d1456e26d4d0a77f88c055026bb597a544c9315e8ec45d4f2ed2c8650e1da7f374efa9e41007ad3a180d4756ea72bd0c6bae4a5d97d7c7c29d7a7c3a5557f37d044307559190f5b7ee8ec24d61c5291829bee0acd1d2f1f005c246bca84d250e0b67e1ba1a2b29587b2f2eb4fda5bb75192d337cb934218bec215cc2d5319a1713f992e710718fea40fc33acc5693d87aeb15ce8b152586d7cdc013324857ef5106bc8569ca1c14fa56fed43e34d76af058af8d75be68555557d9ceec08a17d738bd7092c186876d5d3159f5a066a1d3983e4d613ffea315e90badda9cee5ac0717ac50ccbc885a67e0b2fd90d5451266f2fb5c6516f9ebd5e9f2bb6e04c71ab178742cce348a8b2d247d9154cad6b2cd6c68106fa4086bc8e9699cbf2b163c0b2988c063b2ab0ed11a7eca4a45a5943578e4a54e364e4efec76c649138c6da8ac7f83d0a90ed0e4ad4221fe2bbef45c89e8e74ed6a8aeb4a74f311929ca99e15d763744213d91f77bec73a26fe3968df54b4f9c7eaccfd48e2621e60c34610b63a3c700dbdc2d00484e4a2461651dc5363c1a8103d0e76d042f8f3231edb7e24df153036c39f4f9119b672ad6a4865f120cf45150c5ebefbeb422d28b2b3009b3a6f9718b3935e9be38930a49a53f1bf7070ef8869b399a099e22f83bc701dc74296d2bdc64ffd1df6f967977253ad798df394e6535c41db9af25a0d2f87925d0c345809e105de41e610638ac00778e47c5fbca0088fe7e9e755cbd5142f2b1ffe01c0bab6e8edfd9af0fe0f89392a40d48de1ae1014bfc3ec3c8f3d2daf31fe5ab991ce29bd0088d2e6d290779583d97363592208614aa6ee629f34ef544c6a2f80ebb1f7e283775fd529ccfc170ddab8ed4c5087e8cbfca445181c016d60b7d9e3060a42be7e7e2d67d0b58c941ccb9ae015ed7a29eca7bc489a07b54e222093e92ab12f987d5fbc77df1f85a05e0a02d9e25d65e29f9bc58570f78fbb391c7f4c70e7c7a1e671eec68207747a14a37e623b3a6acc5220a1bfb693ce3bd53148aee1f6916857a973d4be862784eb08ed1121e7e35d17cade0a2bbfff61b4a436136d5f026856a8ca6f308ee49a87fb0c89aa1662365b261bb50c6c3c3d7af4cb758bc5087f55bb0f76bfc23f3158bf04c415c094f8477ea8689accf5253031fd354a9e367a7c9086e9cd6482301634e9a71eb8b81592ea7b8e54d76792570c4d90218dac938e6f248fc76a0b9211b8c24fe09fca63ab7ce0fc8444d32822375379510f0b86c9e67b6e8f5dc195a2e9ac8f213c4881bd35ea91f9098c672ee4b3d7eaa6ca7874c0d9dc2b55e70b16c0af08d6854c0ae2e252de1a7bc913c6357d771bf626756a5e52ffac6f30f89a8dd179145bb4c4ead8d3fd37455d95205edfee7fe8fd3ad0d70553f5cce59a9f48f2f0cf2ef51838aaa27707cd51a5a9ca2e1d47e57722fe217140b786085562e5738b2869bdc16431eaf797e341e525c26aa3a26da9b0d24ebf4c69a6c03dfcfb75aafde578a22fffad2f0a6c325d08ab45d771ec0092063e781ff00d2092aece35921b9dea88460792d0f6fcfc149d126941a0ffbe9657790aef1914eed086c35bfa403a1d947d75c4e054eb8936b20fba92faa778a851366deefc0d7e0d7906b545276113cb4ab6130aabbd0d0383fd933e4d5ae9590a802ccd3270af003092480cf9e318052f532379011aaa236536419acace77df7232b77c9b0682c6ee7f22c9d7a3eef2720e936b1baddc91b07470d773571a33431830b4b2c3e97a50bb3ef5cbea12e9e29d1faf5bab1b17cb23221da1eeb77267f51281868d7dbfbfbc94106aadd816beb3a6e24837414171d231f472f00ba43353087d0f1c6d5688a42495de1d3a0bd173fe75e027d2a56f35aa57a19f4dd05ba3d45bb521f12d55e5bc67bf6539185ce438a3dfef7ed546e4e192e12e0641211076c36fdb87741f99ac1368033619cc632e075b455269d54238e7cf58a9634f8cec74a2941cd1f5c6c3d0539fafc026f9af08abe132be4f763bffd35ddb905bd19fd06f2ded13387d94b1e705607c33861e71a49a12f60c8e32799aa676a67443e2fad31cbcbbdc3786323a8532135c632f4bb17e3eb50e41e873d8e32aa8d8fd7d22c8ed437f8b5cf3a203cbd8d7692dba39ce3f2b085f1493199c966287aabc694af542b621e86a3bf8a2fde99a64cac32cfd4fa133f52d23b0069123326511a35351792febcf535b464037c4f67d17504fc25ca18db56882a48ecb480ad2e6d7e442d5b261ee62366976a6b7867b0e2adc1906d7aae78402f45d26883749de24e039d844d1caca601a0caeef6a731c080eb6a1b0bd367a3d5e7111c408587bbf87be1b834f654afd36cd47fad962ecbbf6e0e4e1258d3b9e45cc6421a5feaf19af05dc83d18c7508579dcde62197fea286dd6b428a3591bf45a195abc7f53e652796937a99c9688872a3b84af41c492447d66c436ebb96ca70d9b33d8359ba422b493f7ba7bbb3871fe4fcae755eebf828dfc5e0c77d2e8b40fcfd14d36785faecba6d3f6b9a97218cfcb4ab91eade356a659f661b683a04f6c71add6bcd1c375e3380169fa317e70b63f583a541087ccf012e1ae050402ace9d6a6b081ebdcc0303abd6f248e45e5e8ea1a53a97f286239f5dfd7d95007fe8583e192f7b8d8fa16986c687678b947da2254d46eae0c06d277b19c6b3fcbee31a184312bd8b89071b140849516b000b6bab1d958c46f1afaf80b0e2850fa29ed61b18568d37486128e202470b39a34dab057c8e8a3742e99e74a1cac66e17f975a40f07320eb2125254df5213e1b51748e7af683b1345b07ce8fd4febf24047cb5d2b8a8108bdd6dbe34e39258f772e107973648cf8b2fe0c7bedbb1de7b36a6dc08d0a46fecc6756bce9293501d072566d69485976079f86cd633bf9dd10cc33735b1fe5ddc90877125b4252ee6c3f7bf93e29cefc67f8cc623514d19b9bbfee8eae6c92ce2b45ac44ad963d53e23e8a6631c435c8e78a323eb42616dbfdfae4f1295ff7014d7b66457fd5e7c10922d641c87dea3eba8cf11acabba49b4bab0ed567a2589e4411d65766e91a0f330f1adf0ec03a1dcb4b63bca1bda1d40f9ed6b3b5e07c543b347561f2af54bb7929458d919354a8136167f09cf9db1e3e0074333cb65cbf277cc1d3567c9536881498551e82233a1d68b4130215cc513026390ce007e3faab03dbf038629ad9291d9fc6268e773d0faecbcd08cb74c3c53382422f62039697c8ca805d6a30263f512853e224f8f98599c299471ebaf457821802255e86ce9dae22f1572ca4724fb4747e7777591a159f74ca8106e92d6f35f2b97c87e41117a1284809f0d868ab80ac9d040d489ae6fb0b9d1c2ac4c8a4df2baf49995a20a591f761aa5ecd3868faaf8093143e2c7ba31adc60e80ffcc7c03db3ad959a219cee1d17aa6dd39b96af90927aa8aad55d554ff137b72934ddd06985e71d7df610def73abeeaa1f0329e308bee5dd30287da8262ef97bfd493c1575ead0d20e4598cf83e77f4756f8be035b18a17a71d1c4ef7db9a0a694419a23ceb77dc0dbc41288ccc6c6380dc6c9bc146a27c5ed59a5a849ce2bd723d77ff38a81cb3c5cf9e2890de1413f5280160390ec0b9a95680264d6c5b13d8481fb505276b1433ab0be7fea1fb6af0601b9069c76a5071dc7f0a872041431ee4ca0b019008f88016f0f182b303a696504b7fbf661e0980a70f141d15f327d89bc3194139974afc14f23db7e4b6512c954afb3c94e7a30f51b02c5f5aad942bddf4ac7dfaa078e1f734e2b5661eb3c67c3c43b97bdd7c81f21a6950523c8bf96f5b852e3eff1d76d62b0999fd97751b1b6368469b4a1ce65580430dab60c5c69feb179f59ebe55f108dee200238d768b8f77a031fdc874bdb615a97b2ea1c8fb10a8ab59d63d2b5eb3ef2a66ec4b409ac5334713baba1e9d907b4e52e8a0e37906b435f87272ec08a1a0fcc873c3768eb56bd7cca4b715bd92106192dc7ef22332885a375b52d68c0d3420993e8f04a506cb81a13a98e5e4113c00b00c7b7bc309644ad59cf5e4b2cd04b0acf92dc1c480259c1381e80358fc5bcbe9b8e787a5b93ddb1ded811a0287fc9a47a80234e17fcfb6d235e803471beb4d6ff0371458417530d61f37e61acffe32db68742066b82692af56209830796a9bd367d07d125b22efd35f3c19d99a342a16a4314e4a4e00812323c47a86dc12696b6185c3dbffa9f078034a44d8bf777b4a80a2e0e3f9a9aa8227e1a11cab398ca80ea48d42079352db0b576a8e8c97e623210bdb82650ab2d30461eb813407ef3ee15fde8d77cbcba685919a7faa7feff94192c0e6a3e9bcf4dd50a214864ac72ac2eec0c0cbcbe1c29d76c55a556193491224d5eae135e472d9d6c3a851fcb2da39e424463f2999391efb73aaf69a08c6764489428cc678b4fc61e33e57764d7ed7d051984373b01edebd44fc3a8569ad2bf73908bcbdcdc82887178204ebd360f8e587b6ddcf212c847823b4069bd66c25a03e16114811a77b2654ad0b787136ef99636c076840923ede22073f9296cb0ed03582c9561850b4f84789cbdc06894821bb0b7be3131a97d385caaab791b5d0744e178bb3723ff3333f60db856d2524c260c02ec088558ab600146bd790ee944a0c5006432a10b3d3768c34219c0aebe1a2d03bb8eea1c5dbce4d31cda7c8b5321095c4fb35804854f7f384da5aa6069efcbf981ddf5ab23241abf3684aebb838794f376cfcde8a12337b70fedcc1ebdb20e5938d8fbab0043577987b629e257a7ee979873d54f43c98032645edf1665abe8ff6c2beeb26e96a85de533fc0424e5f07041b4054d5f37bd60d9c18462b1d1a6c9016f4291aff1324b6248511effc8b8e815e705cc46a5c34f0064ce2e8a163477a5c1ead9c60d922b2bb246a64b15de392a47bc27b42371f630a7c4eb39575eec0a57305d2ceface866623ae8c7d033adb31b648039b1ba1b6f72782ece5cc908dbb899276d94d0f5e0d60d59a442818e6c06fdf7522e67a7f06aaf7be125d6773f5178a4dccad11c15e37413b3a2cf1d1bcdb12654062aa609b39084d790d0f3fb47438ca8c2cb66aff25da48e782f568439f063c534eede47f11598f457a81e38a470735f5a0c0135622fecdc65d85f04560931b9b85697e87b944fd0408f5b4452ec3e68ebb4283163e2f8327416178b3b69b3bc9fdf0cfa57e01af030f2ad2e5dddeca9a4ed038a0e52a6a0008fca17488cdffdea7642168ffbff61442cbb71a978e5738", @generic="c22672e3f00df3101a0f809e3098ff3afc3ab64aa15742c25a7fbf3e71a4ccb7a746ed9d32ab8e6d9c8dea50ffba5ac71b931433e00afc5e3bc1264f213c8c644c222afbded89e6205b9cb875887cf44506ffdb130812753aebe982a250c15d2b9c8f39526be8b46cb82945679edc7e88062f646a7d4e4d773e5eb0a0c62f251097c9b9199c3b2f3676c0aec083bd825499ca9a7b0b5f1982abd3c68bac5756da5a49c9681c50d9afadbac82d5e1b0600de06f97983edee7266fe9e9b737264f6f770e99ccf0eac57617dd82", @generic="bc45cd7fe7da7e570d68cd7d74f1581a90373929534696cfc368f1fe16becf1462d0068ae69c89312f38d135553fe08407243974fdbc53f56f8ccbef3c3b98bcea331de501d9b2cbde370479057d84d7c07c4b99bd4ebc9797984dfb964b0ebd13e3c561592d48a0b7879ba00e0723406bb7181fa2b43f7a5822a51d5b4027886e4dee8571763af74cfe6692ed3914ac39a802cce043d4fde9cef0f5b78d308864854e3de255cb3291199a7c63dddf107575fd663021d98a2ddb0f018cc0038a743dee492c1e544c446940b9194a159cadbf8ec5c28e7024d10e4da3b7e7"]}, 0x11b8}, {&(0x7f0000001d40)={0x1c, 0x30, 0x400, 0x70bd29, 0x25dfdbfe, "", [@typed={0x4, 0xc8}, @typed={0x8, 0xc0, 0x0, 0x0, @pid}]}, 0x1c}], 0x4, 0x0, 0x0, 0x44804}, 0x20004080) recvmmsg(r0, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb2d9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000000e00000095000000000000001fae85d34535d75bb0045c0b69289c45ac9d8167d222300c92a198d87fc346dba3ae2b25d0d80cc64bfe4c96c90400000000000000c559809b23f4eb2f47f74e8bd40bc5b06513c4fa926027b6f67379969f2cdd0a53007e3080b5e3a70b2963b5147e31b2ec"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, r7, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x9213}}, 0x30) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x19, 0x80000000, 0x52c51, r5, 0xa933, '\x00', r7, r9, 0x4, 0x2, 0x4, 0xa, @void, @value, @value=r10}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) getpeername(r4, 0x0, &(0x7f0000000700)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x7fffffff, @remote, 0xd}}}, &(0x7f0000000140)=0x84) 245.868936ms ago: executing program 2 (id=3188): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xa, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x7, 0x6, 0x8}, @generic={0x8, 0x2}, @generic={0x2, 0x2}]}}}}}}}, 0x0) 74.747444ms ago: executing program 0 (id=3189): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x14, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0x20002010}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000900030000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x4100) 0s ago: executing program 2 (id=3190): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f55c3dc29994e08000000000"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) close(r1) kernel console output (not intermixed with test programs): rwarding state [ 514.174931][T15239] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.210886][T15239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.287214][T15239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.290375][T15239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.312736][T15239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.333958][T15239] veth1_vlan: left promiscuous mode [ 514.338264][T15239] veth0_vlan: left promiscuous mode [ 514.362058][T15239] veth0_vlan: entered promiscuous mode [ 514.368866][T15239] veth1_vlan: entered promiscuous mode [ 514.383342][T15261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2502'. [ 514.407039][T15239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.412219][T15239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.473159][T15239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.484282][T15239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.506397][T15239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.539561][T15268] xt_TCPMSS: Only works on TCP SYN packets [ 514.549130][T15239] 8021q: adding VLAN 0 to HW filter on device eth0 [ 514.561649][T15239] 8021q: adding VLAN 0 to HW filter on device eth1 [ 514.563700][T15239] 8021q: adding VLAN 0 to HW filter on device eth2 [ 514.565920][T15239] 8021q: adding VLAN 0 to HW filter on device eth3 [ 514.671476][ T1159] bridge0: port 3(veth0) entered blocking state [ 514.671608][ T1159] bridge0: port 3(veth0) entered forwarding state [ 514.673107][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.674706][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.677352][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.677488][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.880600][T10150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.882197][T15272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2505'. [ 514.882269][T15272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2505'. [ 514.884882][T10150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.917868][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.984115][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.000949][T10152] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.000990][T10152] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.004393][T10152] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 515.062103][T10150] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.062162][T10150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.090641][T10150] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.090682][T10150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.090732][T10150] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.090762][T10150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.094289][T15274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2506'. [ 515.094361][T15274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2506'. [ 515.144247][ T5749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.829027][T15312] FAULT_INJECTION: forcing a failure. [ 515.829027][T15312] name failslab, interval 1, probability 0, space 0, times 0 [ 515.829068][T15312] CPU: 1 UID: 0 PID: 15312 Comm: syz.2.2513 Not tainted syzkaller #0 PREEMPT(full) [ 515.829095][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.829109][T15312] Call Trace: [ 515.829119][T15312] [ 515.829130][T15312] dump_stack_lvl+0xe8/0x150 [ 515.829180][T15312] should_fail_ex+0x410/0x560 [ 515.829215][T15312] ? __alloc_skb+0x1db/0x7a0 [ 515.829242][T15312] should_failslab+0xa8/0x100 [ 515.829273][T15312] ? __alloc_skb+0x1db/0x7a0 [ 515.829297][T15312] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 515.829334][T15312] ? __alloc_skb+0x18d/0x7a0 [ 515.829360][T15312] ? __alloc_skb+0x1db/0x7a0 [ 515.829393][T15312] __alloc_skb+0x1db/0x7a0 [ 515.829425][T15312] netlink_sendmsg+0x5d4/0xb40 [ 515.829472][T15312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.829516][T15312] ? apparmor_socket_sendmsg+0x18b/0x360 [ 515.829545][T15312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.829579][T15312] sock_sendmsg_nosec+0x13a/0x180 [ 515.829619][T15312] ____sys_sendmsg+0x54e/0x850 [ 515.829656][T15312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.829698][T15312] ? import_iovec+0x73/0xa0 [ 515.829732][T15312] ___sys_sendmsg+0x2a5/0x360 [ 515.829761][T15312] ? __lock_acquire+0x747/0x2de0 [ 515.829790][T15312] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.829862][T15312] ? __fget_files+0x2a/0x420 [ 515.829894][T15312] ? __fget_files+0x3a2/0x420 [ 515.829938][T15312] __x64_sys_sendmsg+0x1b1/0x290 [ 515.829972][T15312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.830028][T15312] do_syscall_64+0x166/0x520 [ 515.830053][T15312] ? trace_irq_disable+0x3b/0x140 [ 515.830077][T15312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.830102][T15312] ? clear_bhb_loop+0x70/0xc0 [ 515.830131][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.830164][T15312] RIP: 0033:0x7ff1b1f9e159 [ 515.830186][T15312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.830207][T15312] RSP: 002b:00007ff1b2d8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.830234][T15312] RAX: ffffffffffffffda RBX: 00007ff1b2226090 RCX: 00007ff1b1f9e159 [ 515.830251][T15312] RDX: 0000000020000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 515.830268][T15312] RBP: 00007ff1b2d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 515.830283][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.830297][T15312] R13: 00007ff1b2226128 R14: 00007ff1b2226090 R15: 00007ffec88fdec8 [ 515.830332][T15312] [ 515.866873][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.048027][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.208633][T15309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.223215][ T988] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 516.266439][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 516.592510][T15321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2517'. [ 516.598987][T15327] syzkaller1: entered promiscuous mode [ 516.599022][T15327] syzkaller1: entered allmulticast mode [ 516.904192][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.082717][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.301434][ T988] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 518.106422][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.137430][ T5749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.564703][T15389] netlink: 'syz.3.2535': attribute type 15 has an invalid length. [ 518.655636][T15389] __nla_validate_parse: 2 callbacks suppressed [ 518.655664][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 518.820143][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.838791][T10150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.859480][T15394] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2537'. [ 518.883787][T15394] xt_hashlimit: size too large, truncated to 1048576 [ 518.884413][T15394] xt_hashlimit: invalid interval [ 518.915950][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 519.140223][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.241077][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 519.947303][T15444] netlink: 'syz.3.2552': attribute type 15 has an invalid length. [ 519.988353][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 520.021298][ T5722] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 520.061259][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'. [ 520.184296][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.381767][T15461] netlink: 'syz.3.2557': attribute type 15 has an invalid length. [ 520.532381][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2557'. [ 520.646946][T15472] x_tables: duplicate underflow at hook 3 [ 520.647030][T15472] x_tables: duplicate underflow at hook 3 [ 520.647103][T15472] x_tables: duplicate underflow at hook 3 [ 520.647324][T15472] x_tables: duplicate underflow at hook 3 [ 520.647398][T15472] x_tables: duplicate underflow at hook 3 [ 520.647466][T15472] x_tables: duplicate underflow at hook 3 [ 520.647547][T15472] x_tables: duplicate underflow at hook 3 [ 520.647619][T15472] x_tables: duplicate underflow at hook 3 [ 520.647688][T15472] x_tables: duplicate underflow at hook 3 [ 520.647755][T15472] x_tables: duplicate underflow at hook 3 [ 520.805755][T15480] FAULT_INJECTION: forcing a failure. [ 520.805755][T15480] name failslab, interval 1, probability 0, space 0, times 0 [ 520.805795][T15480] CPU: 0 UID: 0 PID: 15480 Comm: syz.0.2561 Not tainted syzkaller #0 PREEMPT(full) [ 520.805822][T15480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 520.805837][T15480] Call Trace: [ 520.805847][T15480] [ 520.805859][T15480] dump_stack_lvl+0xe8/0x150 [ 520.805899][T15480] should_fail_ex+0x410/0x560 [ 520.805930][T15480] should_failslab+0xa8/0x100 [ 520.805962][T15480] __kmalloc_noprof+0xfe/0x720 [ 520.805986][T15480] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 520.806014][T15480] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 520.806051][T15480] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 520.806089][T15480] genl_family_rcv_msg_doit+0xda/0x340 [ 520.806123][T15480] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 520.806160][T15480] ? apparmor_capable+0x126/0x170 [ 520.806199][T15480] ? bpf_lsm_capable+0x9/0x20 [ 520.806229][T15480] ? security_capable+0x7e/0x2c0 [ 520.806265][T15480] genl_rcv_msg+0x614/0x7a0 [ 520.806299][T15480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.806325][T15480] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 520.806355][T15480] ? __pfx_nl80211_new_station+0x10/0x10 [ 520.806388][T15480] ? __pfx_nl80211_post_doit+0x10/0x10 [ 520.806433][T15480] netlink_rcv_skb+0x226/0x4a0 [ 520.806469][T15480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.806497][T15480] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.806548][T15480] ? down_read+0x2be/0x330 [ 520.806582][T15480] genl_rcv+0x28/0x40 [ 520.806605][T15480] netlink_unicast+0x7bd/0x940 [ 520.806650][T15480] netlink_sendmsg+0x813/0xb40 [ 520.806695][T15480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.806739][T15480] ? apparmor_socket_sendmsg+0x98/0x360 [ 520.806768][T15480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.806803][T15480] sock_sendmsg_nosec+0x13a/0x180 [ 520.806844][T15480] ____sys_sendmsg+0x54e/0x850 [ 520.806881][T15480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.806922][T15480] ? import_iovec+0x73/0xa0 [ 520.806956][T15480] ___sys_sendmsg+0x2a5/0x360 [ 520.806984][T15480] ? __lock_acquire+0x747/0x2de0 [ 520.807014][T15480] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.807082][T15480] ? __fget_files+0x2a/0x420 [ 520.807115][T15480] ? __fget_files+0x3a2/0x420 [ 520.807159][T15480] __x64_sys_sendmsg+0x1b1/0x290 [ 520.807193][T15480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.807257][T15480] do_syscall_64+0x166/0x520 [ 520.807282][T15480] ? trace_irq_disable+0x3b/0x140 [ 520.807305][T15480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.807329][T15480] ? clear_bhb_loop+0x70/0xc0 [ 520.807359][T15480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.807382][T15480] RIP: 0033:0x7fa72399e159 [ 520.807405][T15480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.807425][T15480] RSP: 002b:00007fa72493e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.807458][T15480] RAX: ffffffffffffffda RBX: 00007fa723c25fa0 RCX: 00007fa72399e159 [ 520.807476][T15480] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 520.807492][T15480] RBP: 00007fa72493e090 R08: 0000000000000000 R09: 0000000000000000 [ 520.807507][T15480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.807522][T15480] R13: 00007fa723c26038 R14: 00007fa723c25fa0 R15: 00007ffea1198a58 [ 520.807559][T15480] [ 521.220296][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.315723][T15488] netlink: 'syz.0.2566': attribute type 15 has an invalid length. [ 521.373747][T15487] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2563'. [ 521.504418][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 521.505341][T15496] syzkaller1: entered promiscuous mode [ 521.505365][T15496] syzkaller1: entered allmulticast mode [ 521.506771][T15498] syzkaller1: left promiscuous mode [ 521.506839][T15498] syzkaller1: left allmulticast mode [ 521.543753][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.546777][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.889384][T15509] nbd47: detected capacity change from 0 to 63 [ 521.901248][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 521.901278][T15512] nbd: must specify an index to disconnect [ 522.061623][T15512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2570'. [ 522.260700][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.261490][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.342255][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.345562][T15526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2573'. [ 522.632223][ T5623] block nbd47: Receive control failed (result -104) [ 522.764802][T15543] netlink: 'syz.3.2579': attribute type 15 has an invalid length. [ 523.212952][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.304777][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.554945][T15564] netlink: 'syz.3.2587': attribute type 2 has an invalid length. [ 523.940982][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 524.128226][T15589] netlink: 'syz.4.2593': attribute type 15 has an invalid length. [ 524.154567][T15589] __nla_validate_parse: 2 callbacks suppressed [ 524.154592][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2593'. [ 524.214773][T15592] xt_hashlimit: size too large, truncated to 1048576 [ 524.215022][T15592] xt_hashlimit: max too large, truncated to 1048576 [ 524.340965][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.581506][ T1250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.346471][T15618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2604'. [ 525.366802][T15618] ip6gre2: entered promiscuous mode [ 525.366829][T15618] ip6gre2: entered allmulticast mode [ 525.384063][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.402404][T15618] netlink: 'syz.1.2604': attribute type 6 has an invalid length. [ 525.402431][T15618] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2604'. [ 525.421590][T15618] netlink: 'syz.1.2604': attribute type 11 has an invalid length. [ 525.850006][ T5623] Bluetooth: hci3: connection err: -111 [ 526.372173][T15657] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 526.372988][T15657] syzkaller1: entered promiscuous mode [ 526.373050][T15657] syzkaller1: entered allmulticast mode [ 526.420543][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.502279][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.587088][T15668] tipc: Enabling of bearer rejected, failed to enable media [ 527.151287][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.461642][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.535350][T15680] syzkaller1: entered promiscuous mode [ 527.535377][T15680] syzkaller1: entered allmulticast mode [ 527.583671][T15689] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 527.586200][T15689] Cannot find map_set index 2 as target [ 527.679763][T15691] bond6: option primary_reselect: invalid value (6) [ 527.681933][T15691] bond6 (unregistering): Released all slaves [ 528.201842][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2628'. [ 528.207719][T15706] ip_tables: iptables: counters copy to user failed while replacing table [ 528.501363][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.883310][T15726] tipc: Enabling of bearer rejected, failed to enable media [ 529.064918][ T1737] block nbd0: Possible stuck request ffff888037d0e000: control (read@0,2048B). Runtime 180 seconds [ 529.064977][ T1737] block nbd0: Possible stuck request ffff888037d0e1c0: control (read@2048,2048B). Runtime 180 seconds [ 529.497931][T15741] FAULT_INJECTION: forcing a failure. [ 529.497931][T15741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.497970][T15741] CPU: 0 UID: 0 PID: 15741 Comm: syz.1.2635 Not tainted syzkaller #0 PREEMPT(full) [ 529.497996][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.498012][T15741] Call Trace: [ 529.498022][T15741] [ 529.498033][T15741] dump_stack_lvl+0xe8/0x150 [ 529.498077][T15741] should_fail_ex+0x410/0x560 [ 529.498113][T15741] _copy_from_user+0x2d/0xb0 [ 529.498145][T15741] kstrtouint_from_user+0xd6/0x180 [ 529.498174][T15741] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 529.498210][T15741] ? lock_acquire+0x115/0x350 [ 529.498242][T15741] proc_fail_nth_write+0x8e/0x210 [ 529.498267][T15741] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 529.498313][T15741] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 529.498349][T15741] vfs_write+0x296/0xba0 [ 529.498395][T15741] ? __pfx_vfs_write+0x10/0x10 [ 529.498432][T15741] ? __fget_files+0x2a/0x420 [ 529.498470][T15741] ? __fget_files+0x3a2/0x420 [ 529.498500][T15741] ? __fget_files+0x2a/0x420 [ 529.498540][T15741] ksys_write+0x150/0x270 [ 529.498577][T15741] ? __pfx_ksys_write+0x10/0x10 [ 529.498625][T15741] do_syscall_64+0x166/0x520 [ 529.498653][T15741] ? trace_irq_disable+0x3b/0x140 [ 529.498678][T15741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.498703][T15741] ? clear_bhb_loop+0x70/0xc0 [ 529.498732][T15741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.498756][T15741] RIP: 0033:0x7fb551f5e98e [ 529.498788][T15741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 529.498810][T15741] RSP: 002b:00007fb552ebcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.498836][T15741] RAX: ffffffffffffffda RBX: 00007fb552ebd6c0 RCX: 00007fb551f5e98e [ 529.498854][T15741] RDX: 0000000000000001 RSI: 00007fb552ebd0a0 RDI: 0000000000000003 [ 529.498869][T15741] RBP: 00007fb552ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 529.498884][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.498899][T15741] R13: 00007fb552226128 R14: 00007fb552226090 R15: 00007ffd56801468 [ 529.498937][T15741] [ 529.543882][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.625882][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.345363][T15770] syzkaller0: entered promiscuous mode [ 530.345390][T15770] syzkaller0: entered allmulticast mode [ 530.580312][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.227132][T15779] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 531.342229][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.535477][T15798] bond4: (slave bond_slave_1): Device is not our slave [ 531.535503][T15798] bond4: option active_slave: invalid value (bond_slave_1) [ 531.537385][T15798] bond4 (unregistering): Released all slaves [ 531.587287][T15803] netlink: 'syz.2.2652': attribute type 15 has an invalid length. [ 531.603521][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 531.623451][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.179893][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.260740][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 532.286083][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.452534][T15829] syzkaller0: entered promiscuous mode [ 532.452560][T15829] syzkaller0: entered allmulticast mode [ 532.467333][T15829] tipc: Enabled bearer , priority 0 [ 532.661464][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.663412][T15828] tipc: Resetting bearer [ 532.900351][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.630697][T15834] ip_tables: iptables: counters copy to user failed while replacing table [ 533.654304][T15834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.700124][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.491918][T15828] tipc: Disabling bearer [ 534.664421][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.694659][ T30] tipc: Node number set to 764515846 [ 534.743766][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.299558][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 535.705217][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2671'. [ 535.806782][T15888] syzkaller0: entered promiscuous mode [ 535.806822][T15888] syzkaller0: entered allmulticast mode [ 535.955388][T15890] syzkaller0: entered promiscuous mode [ 535.955416][T15890] syzkaller0: entered allmulticast mode [ 535.980643][T15890] tipc: Enabled bearer , priority 0 [ 535.983408][T15889] tipc: Resetting bearer [ 536.015430][T15889] tipc: Disabling bearer [ 536.048992][T15892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2674'. [ 536.219287][T15895] tc_dump_action: action bad kind [ 536.229027][T15895] netlink: 'syz.2.2676': attribute type 2 has an invalid length. [ 536.229056][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2676'. [ 536.348355][ T5823] batman_adv: batadv0: Interface deactivated: vlan1 [ 536.403817][ T5823] batman_adv: batadv0: Interface activated: vlan1 [ 536.498924][T15902] syzkaller0: entered promiscuous mode [ 536.498953][T15902] syzkaller0: entered allmulticast mode [ 536.646068][T15915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2682'. [ 536.822035][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.303964][T10152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.520840][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2685'. [ 537.861058][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.907004][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.402856][T15916] ip6gre1: left promiscuous mode [ 539.435266][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.452837][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.710215][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.771891][T15943] netlink: 'syz.3.2688': attribute type 11 has an invalid length. [ 539.771920][T15943] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2688'. [ 539.818286][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'. [ 539.943824][T10150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.944901][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.049065][T15951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2690'. [ 540.260561][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.501890][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 540.698239][T15967] syzkaller0: entered promiscuous mode [ 540.698270][T15967] syzkaller0: entered allmulticast mode [ 540.770516][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.776371][T15965] ip6gre2: left promiscuous mode [ 540.983550][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.710757][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.024261][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.502463][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.072572][ T30] net_ratelimit: 1 callbacks suppressed [ 543.072596][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.653980][T15986] syzkaller1: entered promiscuous mode [ 543.654012][T15986] syzkaller1: entered allmulticast mode [ 543.915648][T16002] tc_dump_action: action bad kind [ 544.107791][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.234122][T16010] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2706'. [ 544.316522][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2708'. [ 544.935699][T16032] syzkaller0: entered promiscuous mode [ 544.935731][T16032] syzkaller0: entered allmulticast mode [ 545.173893][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.697612][T16054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.712804][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.196352][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.231985][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.951413][T16069] syzkaller1: left promiscuous mode [ 547.951444][T16069] syzkaller1: left allmulticast mode [ 548.198167][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 548.262088][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.262884][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.603428][T16092] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2730'. [ 549.011837][T16111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.176337][T16110] syzkaller0: entered promiscuous mode [ 549.176367][T16110] syzkaller0: entered allmulticast mode [ 549.300459][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.588910][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2740'. [ 550.349930][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.391779][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.462582][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.105221][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.121112][ T1737] block nbd47: Possible stuck request ffff888029245080: control (read@0,4096B). Runtime 30 seconds [ 552.390331][T16141] syzkaller0: entered promiscuous mode [ 552.390361][T16141] syzkaller0: entered allmulticast mode [ 552.399069][T16148] tipc: Enabled bearer , priority 0 [ 552.431890][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.461348][T16159] netlink: 4412 bytes leftover after parsing attributes in process `syz.2.2746'. [ 552.464134][T16160] netlink: 4412 bytes leftover after parsing attributes in process `syz.2.2746'. [ 552.633085][T16148] tipc: Resetting bearer [ 552.781662][T16169] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2747'. [ 553.397834][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.471087][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.510155][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.423914][T16148] tipc: Disabling bearer [ 555.542269][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.688247][T16194] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2750'. [ 555.688288][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2750'. [ 555.715390][T16194] ip_tables: iptables: counters copy to user failed while replacing table [ 555.780645][T16198] syzkaller1: entered promiscuous mode [ 555.780678][T16198] syzkaller1: entered allmulticast mode [ 555.835293][T16191] tipc: Enabled bearer , priority 0 [ 555.921380][T16189] tipc: Disabling bearer [ 556.217737][T16214] syzkaller0: entered promiscuous mode [ 556.217768][T16214] syzkaller0: entered allmulticast mode [ 556.583716][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.635459][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.670455][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.903896][T16230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2760'. [ 559.160547][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.196839][ T1737] block nbd0: Possible stuck request ffff888037d0e000: control (read@0,2048B). Runtime 210 seconds [ 559.196908][ T1737] block nbd0: Possible stuck request ffff888037d0e1c0: control (read@2048,2048B). Runtime 210 seconds [ 559.310041][T16243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2764'. [ 559.577014][T16263] FAULT_INJECTION: forcing a failure. [ 559.577014][T16263] name failslab, interval 1, probability 0, space 0, times 0 [ 559.577052][T16263] CPU: 1 UID: 0 PID: 16263 Comm: syz.2.2765 Not tainted syzkaller #0 PREEMPT(full) [ 559.577078][T16263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 559.577094][T16263] Call Trace: [ 559.577104][T16263] [ 559.577115][T16263] dump_stack_lvl+0xe8/0x150 [ 559.577155][T16263] should_fail_ex+0x410/0x560 [ 559.577189][T16263] should_failslab+0xa8/0x100 [ 559.577223][T16263] __kmalloc_noprof+0xfe/0x720 [ 559.577248][T16263] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 559.577278][T16263] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 559.577319][T16263] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 559.577357][T16263] genl_family_rcv_msg_doit+0xda/0x340 [ 559.577392][T16263] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 559.577430][T16263] ? apparmor_capable+0x126/0x170 [ 559.577469][T16263] ? bpf_lsm_capable+0x9/0x20 [ 559.577491][T16263] ? security_capable+0x7e/0x2c0 [ 559.577526][T16263] genl_rcv_msg+0x614/0x7a0 [ 559.577561][T16263] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.577586][T16263] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 559.577616][T16263] ? __pfx_nl80211_get_mpp+0x10/0x10 [ 559.577649][T16263] ? __pfx_nl80211_post_doit+0x10/0x10 [ 559.577696][T16263] netlink_rcv_skb+0x226/0x4a0 [ 559.577731][T16263] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.577761][T16263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.577822][T16263] ? down_read+0x2be/0x330 [ 559.577856][T16263] genl_rcv+0x28/0x40 [ 559.577879][T16263] netlink_unicast+0x7bd/0x940 [ 559.577924][T16263] netlink_sendmsg+0x813/0xb40 [ 559.577969][T16263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.578011][T16263] ? apparmor_socket_sendmsg+0x98/0x360 [ 559.578041][T16263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.578074][T16263] sock_sendmsg_nosec+0x13a/0x180 [ 559.578115][T16263] ____sys_sendmsg+0x54e/0x850 [ 559.578152][T16263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.578195][T16263] ? import_iovec+0x73/0xa0 [ 559.578230][T16263] ___sys_sendmsg+0x2a5/0x360 [ 559.578260][T16263] ? __lock_acquire+0x747/0x2de0 [ 559.578290][T16263] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.578361][T16263] ? __fget_files+0x2a/0x420 [ 559.578393][T16263] ? __fget_files+0x3a2/0x420 [ 559.578437][T16263] __x64_sys_sendmsg+0x1b1/0x290 [ 559.578473][T16263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.578528][T16263] do_syscall_64+0x166/0x520 [ 559.578553][T16263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.578578][T16263] ? clear_bhb_loop+0x70/0xc0 [ 559.578608][T16263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.578632][T16263] RIP: 0033:0x7ff1b1f9e159 [ 559.578653][T16263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.578674][T16263] RSP: 002b:00007ff1b2dab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.578700][T16263] RAX: ffffffffffffffda RBX: 00007ff1b2225fa0 RCX: 00007ff1b1f9e159 [ 559.578718][T16263] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 559.578733][T16263] RBP: 00007ff1b2dab090 R08: 0000000000000000 R09: 0000000000000000 [ 559.578748][T16263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.578762][T16263] R13: 00007ff1b2226038 R14: 00007ff1b2225fa0 R15: 00007ffec88fdec8 [ 559.578810][T16263] [ 559.715547][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.431630][T16287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2772'. [ 560.473842][T16283] syzkaller0: entered promiscuous mode [ 560.473872][T16283] syzkaller0: entered allmulticast mode [ 560.476128][T16282] syzkaller1: entered promiscuous mode [ 560.476170][T16282] syzkaller1: entered allmulticast mode [ 560.746026][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.791784][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.825564][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.658304][T16330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.870222][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.895951][T16336] netlink: 'syz.3.2783': attribute type 4 has an invalid length. [ 563.956241][T16336] netlink: 'syz.3.2783': attribute type 4 has an invalid length. [ 564.228822][T16352] lo speed is unknown, defaulting to 1000 [ 564.265036][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.328441][T16352] lo speed is unknown, defaulting to 1000 [ 564.398745][T16364] syzkaller1: entered promiscuous mode [ 564.398774][T16364] syzkaller1: entered allmulticast mode [ 564.416872][T16352] lo speed is unknown, defaulting to 1000 [ 564.428418][T16352] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 564.428461][T16352] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 564.428504][T16352] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 564.488816][T16352] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 564.616697][T16367] syzkaller0: entered promiscuous mode [ 564.616731][T16367] syzkaller0: entered allmulticast mode [ 564.618115][T16352] lo speed is unknown, defaulting to 1000 [ 564.909249][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.540443][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.958012][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.993373][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.353252][T16352] lo speed is unknown, defaulting to 1000 [ 567.406175][T16376] FAULT_INJECTION: forcing a failure. [ 567.406175][T16376] name failslab, interval 1, probability 0, space 0, times 0 [ 567.406214][T16376] CPU: 0 UID: 0 PID: 16376 Comm: syz.4.2790 Not tainted syzkaller #0 PREEMPT(full) [ 567.406238][T16376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.406265][T16376] Call Trace: [ 567.406275][T16376] [ 567.406285][T16376] dump_stack_lvl+0xe8/0x150 [ 567.406325][T16376] should_fail_ex+0x410/0x560 [ 567.406357][T16376] should_failslab+0xa8/0x100 [ 567.406389][T16376] __kmalloc_noprof+0xfe/0x720 [ 567.406411][T16376] ? ieee80211_mesh_build_beacon+0xbe/0x1b90 [ 567.406562][T16376] ? ieee80211_mesh_build_beacon+0xbe/0x1b90 [ 567.406604][T16376] ieee80211_mesh_build_beacon+0xbe/0x1b90 [ 567.406640][T16376] ? ieee80211_mps_local_status_update+0x48f/0x600 [ 567.406671][T16376] ? ieee80211_mps_local_status_update+0x27/0x600 [ 567.406709][T16376] ieee80211_start_mesh+0x23d/0x380 [ 567.406744][T16376] ieee80211_join_mesh+0xb17/0x1320 [ 567.406839][T16376] ? __pfx_ieee80211_join_mesh+0x10/0x10 [ 567.406885][T16376] ? rcu_is_watching+0x16/0xb0 [ 567.406915][T16376] ? cfg80211_reg_check_beaconing+0xcf3/0x11d0 [ 567.407002][T16376] rdev_join_mesh+0xfc/0x290 [ 567.407036][T16376] __cfg80211_join_mesh+0xf40/0x1410 [ 567.407067][T16376] ? __lock_acquire+0x747/0x2de0 [ 567.407104][T16376] ? __pfx___cfg80211_join_mesh+0x10/0x10 [ 567.407138][T16376] ? nl80211_join_mesh+0x196/0x1040 [ 567.407170][T16376] nl80211_join_mesh+0xd07/0x1040 [ 567.407204][T16376] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 567.407343][T16376] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 567.407380][T16376] ? __nla_parse+0x40/0x60 [ 567.407417][T16376] ? nl80211_pre_doit+0x53d/0x890 [ 567.407452][T16376] genl_family_rcv_msg_doit+0x233/0x340 [ 567.407490][T16376] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 567.407534][T16376] ? bpf_lsm_capable+0x9/0x20 [ 567.407555][T16376] ? security_capable+0x7e/0x2c0 [ 567.407591][T16376] genl_rcv_msg+0x614/0x7a0 [ 567.407625][T16376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.407651][T16376] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 567.407679][T16376] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 567.407703][T16376] ? __pfx_nl80211_post_doit+0x10/0x10 [ 567.407749][T16376] netlink_rcv_skb+0x226/0x4a0 [ 567.407785][T16376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.407814][T16376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.407867][T16376] ? down_read+0x2be/0x330 [ 567.407901][T16376] genl_rcv+0x28/0x40 [ 567.407925][T16376] netlink_unicast+0x7bd/0x940 [ 567.407970][T16376] netlink_sendmsg+0x813/0xb40 [ 567.408016][T16376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.408058][T16376] ? apparmor_socket_sendmsg+0x98/0x360 [ 567.408086][T16376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.408119][T16376] sock_sendmsg_nosec+0x13a/0x180 [ 567.408158][T16376] ____sys_sendmsg+0x54e/0x850 [ 567.408194][T16376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.408235][T16376] ? import_iovec+0x73/0xa0 [ 567.408275][T16376] ___sys_sendmsg+0x2a5/0x360 [ 567.408303][T16376] ? __lock_acquire+0x747/0x2de0 [ 567.408330][T16376] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.408399][T16376] ? __fget_files+0x2a/0x420 [ 567.408432][T16376] ? __fget_files+0x3a2/0x420 [ 567.408475][T16376] __x64_sys_sendmsg+0x1b1/0x290 [ 567.408510][T16376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.408566][T16376] do_syscall_64+0x166/0x520 [ 567.408590][T16376] ? trace_irq_disable+0x3b/0x140 [ 567.408614][T16376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.408638][T16376] ? clear_bhb_loop+0x70/0xc0 [ 567.408667][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.408691][T16376] RIP: 0033:0x7f760ed9e159 [ 567.408712][T16376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.408733][T16376] RSP: 002b:00007f760cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.408758][T16376] RAX: ffffffffffffffda RBX: 00007f760f025fa0 RCX: 00007f760ed9e159 [ 567.408776][T16376] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 567.408792][T16376] RBP: 00007f760cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 567.408807][T16376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.408837][T16376] R13: 00007f760f026038 R14: 00007f760f025fa0 R15: 00007ffd79a331d8 [ 567.408875][T16376] [ 567.899884][T16352] lo speed is unknown, defaulting to 1000 [ 567.907034][T16352] lo speed is unknown, defaulting to 1000 [ 567.937573][T16352] lo speed is unknown, defaulting to 1000 [ 568.033673][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.262552][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.279312][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.311168][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.898706][T16429] netlink: 'syz.0.2802': attribute type 15 has an invalid length. [ 569.026985][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'. [ 569.085865][ T5722] net_ratelimit: 1 callbacks suppressed [ 569.085889][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.928970][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.941505][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.946129][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.967031][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.967731][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.031314][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.103316][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.651323][T16453] netlink: 'syz.1.2805': attribute type 4 has an invalid length. [ 570.651351][T16453] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2805'. [ 570.746714][ T5736] lo speed is unknown, defaulting to 1000 [ 570.884539][T16454] lo speed is unknown, defaulting to 1000 [ 570.964041][T16480] openvswitch: netlink: Key type 29 is not supported [ 571.053616][T16485] netlink: 'syz.1.2813': attribute type 8 has an invalid length. [ 571.146295][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.300520][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.301029][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.376571][T16454] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.376732][T16454] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.376876][T16454] bridge_slave_0: entered allmulticast mode [ 571.378350][T16454] bridge_slave_0: entered promiscuous mode [ 571.387953][T16454] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.389486][T16454] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.392350][T16454] bridge_slave_1: entered allmulticast mode [ 571.400874][T16454] bridge_slave_1: entered promiscuous mode [ 571.458005][T16454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.462988][T16454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.511531][T16454] team0: Port device team_slave_0 added [ 571.514086][T16454] team0: Port device team_slave_1 added [ 571.553637][T16454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.553667][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.553690][T16454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.555789][T16454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.555808][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.555843][T16454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.683911][T16454] hsr_slave_0: entered promiscuous mode [ 571.684755][T16454] hsr_slave_1: entered promiscuous mode [ 571.883211][T16454] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.883242][T16454] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.939933][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 572.029978][ T5623] Bluetooth: hci5: command tx timeout [ 572.038382][T16454] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.038412][T16454] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.144265][T16454] team0: Port device netdevsim1 removed [ 572.145637][T16454] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.145664][T16454] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.184494][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.242573][T16454] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.242604][T16454] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.226465][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.575160][T16470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.617311][T16454] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 573.651629][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.652586][T16454] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 573.701217][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.702242][T16454] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 573.729102][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.740153][T16454] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 573.772481][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.934987][T16515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2818'. [ 573.962367][T16454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.030442][T16454] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.103156][ T5623] Bluetooth: hci5: command tx timeout [ 574.124620][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.124735][T10153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.168991][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.169113][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.216357][T16520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2820'. [ 574.216431][T16520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2820'. [ 574.265240][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.152671][T10150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.307252][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.447466][T16566] FAULT_INJECTION: forcing a failure. [ 575.447466][T16566] name failslab, interval 1, probability 0, space 0, times 0 [ 575.447503][T16566] CPU: 1 UID: 0 PID: 16566 Comm: syz.1.2828 Not tainted syzkaller #0 PREEMPT(full) [ 575.447542][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.447557][T16566] Call Trace: [ 575.447567][T16566] [ 575.447578][T16566] dump_stack_lvl+0xe8/0x150 [ 575.447619][T16566] should_fail_ex+0x410/0x560 [ 575.447652][T16566] should_failslab+0xa8/0x100 [ 575.447684][T16566] __kmalloc_noprof+0xfe/0x720 [ 575.447710][T16566] ? apply_wqattrs_prepare+0xee/0xdc0 [ 575.447741][T16566] ? apply_wqattrs_prepare+0xee/0xdc0 [ 575.447780][T16566] apply_wqattrs_prepare+0xee/0xdc0 [ 575.447813][T16566] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 575.447890][T16566] ? pcpu_alloc_noprof+0x100f/0x1900 [ 575.447928][T16566] ? pcpu_alloc_noprof+0x1036/0x1900 [ 575.447983][T16566] __alloc_workqueue+0x11be/0x1fe0 [ 575.448031][T16566] alloc_workqueue_noprof+0xe3/0x210 [ 575.448063][T16566] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 575.448108][T16566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 575.448170][T16566] nci_register_device+0x22c/0xa00 [ 575.448210][T16566] ? __pfx_nci_register_device+0x10/0x10 [ 575.448238][T16566] ? __raw_spin_lock_init+0x45/0x100 [ 575.448276][T16566] ? __raw_spin_lock_init+0x45/0x100 [ 575.448310][T16566] ? __init_waitqueue_head+0xa8/0x150 [ 575.448348][T16566] virtual_ncidev_open+0x129/0x1a0 [ 575.448382][T16566] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 575.448410][T16566] misc_open+0x2d5/0x350 [ 575.448450][T16566] chrdev_open+0x4d9/0x600 [ 575.448482][T16566] ? __pfx_chrdev_open+0x10/0x10 [ 575.448509][T16566] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 575.448551][T16566] ? __pfx_chrdev_open+0x10/0x10 [ 575.448578][T16566] do_dentry_open+0x816/0x1380 [ 575.448621][T16566] vfs_open+0x3b/0x340 [ 575.448646][T16566] ? path_openat+0x1428/0x1d60 [ 575.448675][T16566] path_openat+0x1443/0x1d60 [ 575.448722][T16566] do_file_open+0x23e/0x4a0 [ 575.448753][T16566] ? __pfx_do_file_open+0x10/0x10 [ 575.448804][T16566] ? _raw_spin_unlock+0x28/0x50 [ 575.448839][T16566] ? alloc_fd+0x651/0x6c0 [ 575.448883][T16566] do_sys_openat2+0x115/0x200 [ 575.448917][T16566] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.448949][T16566] ? ksys_write+0x242/0x270 [ 575.448988][T16566] ? __pfx_ksys_write+0x10/0x10 [ 575.449027][T16566] __x64_sys_openat+0x138/0x170 [ 575.449064][T16566] do_syscall_64+0x166/0x520 [ 575.449089][T16566] ? trace_irq_disable+0x3b/0x140 [ 575.449112][T16566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.449138][T16566] ? clear_bhb_loop+0x70/0xc0 [ 575.449168][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.449191][T16566] RIP: 0033:0x7fb551f9e159 [ 575.449213][T16566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.449235][T16566] RSP: 002b:00007fb552ede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.449261][T16566] RAX: ffffffffffffffda RBX: 00007fb552225fa0 RCX: 00007fb551f9e159 [ 575.449279][T16566] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 575.449296][T16566] RBP: 00007fb552ede090 R08: 0000000000000000 R09: 0000000000000000 [ 575.449311][T16566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.449326][T16566] R13: 00007fb552226038 R14: 00007fb552225fa0 R15: 00007ffd56801468 [ 575.449365][T16566] [ 575.811739][T16454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.918540][T16454] veth0_vlan: entered promiscuous mode [ 576.017790][T16454] veth1_vlan: entered promiscuous mode [ 576.153620][T16584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2832'. [ 576.182064][ T5623] Bluetooth: hci5: command tx timeout [ 576.390196][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.916446][T16570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.062422][T10152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.468261][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.656110][T16570] batman_adv: batadv0: Interface deactivated: macvlan2 [ 577.763474][T16570] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 578.097323][T16603] netlink: 'syz.1.2838': attribute type 3 has an invalid length. [ 578.235274][ T1259] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.235326][ T1259] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.236365][ T1259] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.236398][ T1259] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.261253][ T5623] Bluetooth: hci5: command tx timeout [ 578.286978][T10152] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.287016][T10152] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.287127][T10152] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.287157][T10152] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.342027][T16608] FAULT_INJECTION: forcing a failure. [ 578.342027][T16608] name failslab, interval 1, probability 0, space 0, times 0 [ 578.342065][T16608] CPU: 0 UID: 0 PID: 16608 Comm: syz.0.2840 Not tainted syzkaller #0 PREEMPT(full) [ 578.342090][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.342104][T16608] Call Trace: [ 578.342112][T16608] [ 578.342122][T16608] dump_stack_lvl+0xe8/0x150 [ 578.342161][T16608] should_fail_ex+0x410/0x560 [ 578.342194][T16608] should_failslab+0xa8/0x100 [ 578.342226][T16608] __kmalloc_cache_noprof+0xa3/0x600 [ 578.342250][T16608] ? __kmalloc_cache_noprof+0x14d/0x600 [ 578.342271][T16608] ? sctp_add_bind_addr+0x8c/0x370 [ 578.342305][T16608] ? sctp_add_bind_addr+0x8c/0x370 [ 578.342344][T16608] sctp_add_bind_addr+0x8c/0x370 [ 578.342382][T16608] sctp_copy_local_addr_list+0x31a/0x4e0 [ 578.342420][T16608] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 578.342455][T16608] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 578.342494][T16608] ? sctp_v4_is_any+0x35/0x60 [ 578.342527][T16608] ? sctp_copy_one_addr+0x93/0x360 [ 578.342564][T16608] sctp_bind_addr_copy+0xb3/0x3c0 [ 578.342599][T16608] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 578.342633][T16608] sctp_connect_new_asoc+0x2ff/0x6b0 [ 578.342663][T16608] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 578.342696][T16608] ? __local_bh_enable_ip+0xd6/0x140 [ 578.342736][T16608] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 578.342773][T16608] ? security_sctp_bind_connect+0x7e/0x2c0 [ 578.342804][T16608] sctp_sendmsg+0x159b/0x2d00 [ 578.342848][T16608] ? __pfx_sctp_sendmsg+0x10/0x10 [ 578.342880][T16608] ? __lock_acquire+0x747/0x2de0 [ 578.342922][T16608] ? aa_sock_msg_perm+0xfc/0x210 [ 578.342951][T16608] ? sock_rps_record_flow+0x19/0x350 [ 578.342991][T16608] ? inet_sendmsg+0x298/0x320 [ 578.343030][T16608] ? __pfx_inet_sendmsg+0x10/0x10 [ 578.343064][T16608] sock_sendmsg_nosec+0x10e/0x180 [ 578.343105][T16608] ____sys_sendmsg+0x54e/0x850 [ 578.343144][T16608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.343186][T16608] ? import_iovec+0x73/0xa0 [ 578.343219][T16608] ___sys_sendmsg+0x2a5/0x360 [ 578.343307][T16608] ? __lock_acquire+0x747/0x2de0 [ 578.343337][T16608] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.343373][T16608] ? kstrtouint+0x6e/0xe0 [ 578.343437][T16608] ? __fget_files+0x2a/0x420 [ 578.343468][T16608] ? __fget_files+0x3a2/0x420 [ 578.343510][T16608] __sys_sendmmsg+0x273/0x4d0 [ 578.343551][T16608] ? __pfx___sys_sendmmsg+0x10/0x10 [ 578.343594][T16608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 578.343638][T16608] ? ksys_write+0x242/0x270 [ 578.343676][T16608] ? __pfx_ksys_write+0x10/0x10 [ 578.343719][T16608] __x64_sys_sendmmsg+0xa0/0xc0 [ 578.343752][T16608] do_syscall_64+0x166/0x520 [ 578.343783][T16608] ? trace_irq_disable+0x3b/0x140 [ 578.343807][T16608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.343833][T16608] ? clear_bhb_loop+0x70/0xc0 [ 578.343862][T16608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.343885][T16608] RIP: 0033:0x7fa72399e159 [ 578.343907][T16608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.343927][T16608] RSP: 002b:00007fa72493e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 578.343953][T16608] RAX: ffffffffffffffda RBX: 00007fa723c25fa0 RCX: 00007fa72399e159 [ 578.343971][T16608] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000007 [ 578.343986][T16608] RBP: 00007fa72493e090 R08: 0000000000000000 R09: 0000000000000000 [ 578.344001][T16608] R10: 0000000004040040 R11: 0000000000000246 R12: 0000000000000002 [ 578.344016][T16608] R13: 00007fa723c26038 R14: 00007fa723c25fa0 R15: 00007ffea1198a58 [ 578.344055][T16608] [ 578.612065][T16454] veth0_macvtap: entered promiscuous mode [ 578.678950][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.746420][T16454] veth1_macvtap: entered promiscuous mode [ 578.873086][T16454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.913039][T16612] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2841'. [ 578.966702][T16454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.034488][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.034542][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.141848][T10153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.192085][ T1250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.342466][T16630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.372112][T16629] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2843'. [ 579.531859][T10153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.531888][T10153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.574781][T16634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2848'. [ 579.574855][T16634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2848'. [ 579.753657][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.847099][T10153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.847127][T10153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.212205][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2808'. [ 580.525695][T16661] netlink: 'syz.4.2850': attribute type 6 has an invalid length. [ 580.821787][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.902158][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.317235][T16690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2856'. [ 581.603840][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2858'. [ 581.703388][T16704] netlink: 'syz.1.2860': attribute type 15 has an invalid length. [ 581.797000][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 581.859984][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.180877][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.182131][ T1737] block nbd47: Possible stuck request ffff888029245080: control (read@0,4096B). Runtime 60 seconds [ 582.253447][T16718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2865'. [ 582.253527][T16718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2865'. [ 582.492634][T16728] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 582.516419][T16728] syzkaller1: entered promiscuous mode [ 582.516453][T16728] syzkaller1: entered allmulticast mode [ 582.579436][T16731] syzkaller1: entered promiscuous mode [ 582.579467][T16731] syzkaller1: entered allmulticast mode [ 582.700121][T16732] syzkaller0: entered promiscuous mode [ 582.700150][T16732] syzkaller0: entered allmulticast mode [ 582.911827][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.707160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.707687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.942830][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.985460][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.500197][T16588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.541268][T16588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.811660][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.947562][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.964423][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 586.021703][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.162107][T16588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.399882][T16588] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 586.916056][T16176] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 586.918424][T16176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 586.944978][T16176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 586.946023][T16176] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 586.946872][T16176] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.060701][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.087774][T16788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2886'. [ 587.087849][T16788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2886'. [ 587.312213][ T5613] syz_tun (unregistering): left allmulticast mode [ 587.386793][T16792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2887'. [ 587.715566][ T1159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.948010][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.997794][ T1159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.100028][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.211640][ T1159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.215827][T16825] netlink: 'syz.4.2894': attribute type 15 has an invalid length. [ 588.273679][T16789] lo speed is unknown, defaulting to 1000 [ 588.273712][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2894'. [ 588.467499][ T1159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.755418][T16832] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.774830][T16832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.059775][T16176] Bluetooth: hci2: command tx timeout [ 589.116401][T16832] veth0_to_team: left promiscuous mode [ 589.147528][T16832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.179022][T16832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 589.179050][T16832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.212228][T16832] veth1_vlan: left promiscuous mode [ 589.213487][T16832] veth0_vlan: left promiscuous mode [ 589.215221][T16832] veth0_vlan: entered promiscuous mode [ 589.217675][T16832] veth1_vlan: entered promiscuous mode [ 589.242771][ T1737] block nbd0: Possible stuck request ffff888037d0e000: control (read@0,2048B). Runtime 240 seconds [ 589.246215][T16832] geneve0: left promiscuous mode [ 589.247670][ T1737] block nbd0: Possible stuck request ffff888037d0e1c0: control (read@2048,2048B). Runtime 240 seconds [ 589.281842][T16832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.283086][T16832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.284247][T16832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.285353][T16832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.286712][T16832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.312029][T16588] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 589.352000][T16832] geneve0: entered promiscuous mode [ 589.353338][T16832] batman_adv: batadv0: Interface activated: macvlan2 [ 589.357809][T16832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.384202][T16832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 589.387198][T16832] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 589.388344][T16832] batman_adv: batadv0: Interface activated: ipvlan2 [ 589.389106][T16832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 589.418889][T16832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.432326][T16832] veth0_to_team: entered promiscuous mode [ 589.436432][T16832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 589.493715][ T62] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.493758][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.649982][T10151] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.650021][T10151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.651648][ T1250] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.651683][ T1250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.651743][ T1250] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.651771][ T1250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.785578][ T62] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 589.785827][ T62] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 590.049901][T16590] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 590.185855][T16591] net_ratelimit: 4 callbacks suppressed [ 590.185873][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.225042][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 590.350722][T16588] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 590.506049][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.699028][T16882] netlink: 'syz.4.2909': attribute type 15 has an invalid length. [ 591.151041][T16176] Bluetooth: hci2: command tx timeout [ 591.220759][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.658426][ T1159] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 591.658485][ T1159] bridge1 (unregistering): left allmulticast mode [ 591.694736][ T1159] bond3 (unregistering): (slave bridge0): Releasing backup interface [ 591.694790][ T1159] bridge0 (unregistering): left allmulticast mode [ 591.777083][ T1159] bond0 (unregistering): Released all slaves [ 591.780342][ T1250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.813139][ T1159] bond1 (unregistering): (slave veth3): Releasing active interface [ 591.815518][ T1159] bond1 (unregistering): Released all slaves [ 591.856975][ T1159] bond2 (unregistering): Released all slaves [ 591.890749][ T1159] bond3 (unregistering): left allmulticast mode [ 591.922336][ T1159] bond3 (unregistering): Released all slaves [ 591.941515][ T1159] bond4 (unregistering): Released all slaves [ 592.001554][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'. [ 592.024649][T16906] syzkaller1: entered promiscuous mode [ 592.024677][T16906] syzkaller1: entered allmulticast mode [ 592.205065][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 592.237590][T16920] netlink: 'syz.4.2916': attribute type 7 has an invalid length. [ 592.237615][T16920] netlink: 'syz.4.2916': attribute type 3 has an invalid length. [ 592.237631][T16920] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2916'. [ 592.265889][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.314858][ T1159] tipc: Left network mode [ 592.473210][T16930] netlink: 'syz.1.2917': attribute type 15 has an invalid length. [ 592.680947][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 592.865687][T16789] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.865835][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.865984][T16789] bridge_slave_0: entered allmulticast mode [ 592.892695][T16789] bridge_slave_0: entered promiscuous mode [ 592.905886][T16789] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.907584][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.907761][T16789] bridge_slave_1: entered allmulticast mode [ 592.932671][T16789] bridge_slave_1: entered promiscuous mode [ 593.083190][T16948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2923'. [ 593.164031][T16789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.221836][T16176] Bluetooth: hci2: command tx timeout [ 593.302951][T16590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.448287][T16789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.476573][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 593.476602][T16960] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2924'. [ 593.619782][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 593.646258][T16789] team0: Port device team_slave_0 added [ 593.712577][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.733264][T16789] team0: Port device team_slave_1 added [ 593.772881][T16969] netlink: 'syz.1.2925': attribute type 15 has an invalid length. [ 593.943598][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'. [ 593.949171][T16789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.949191][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.949219][T16789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.981401][T16789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.981467][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.981534][T16789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.126683][ T1159] hsr_slave_0: left promiscuous mode [ 594.127847][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.127870][ T1159] batadv0: mtu less than device minimum [ 594.131477][ T1159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 594.133021][ T1159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 594.277179][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.299462][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.426004][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.426714][T16984] block nbd0: Unsupported socket: should be TCP or UNIX. [ 594.428275][ T1159] batman_adv: batadv0: Interface deactivated: dummy0 [ 594.455625][ T1159] batman_adv: batadv0: Removing interface: dummy0 [ 594.528273][ T1159] veth0_to_team: left promiscuous mode [ 594.873601][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 594.896054][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 595.047083][T16982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2927'. [ 595.060864][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 595.254968][T16789] hsr_slave_0: entered promiscuous mode [ 595.256113][T16789] hsr_slave_1: entered promiscuous mode [ 595.262346][T16789] debugfs: 'hsr0' already exists in 'hsr' [ 595.262413][T16789] Cannot create hsr debugfs directory [ 595.315346][T16176] Bluetooth: hci2: command tx timeout [ 595.320014][T17000] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2934'. [ 595.320397][T17000] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2934'. [ 595.320683][T17000] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2934'. [ 595.387025][T16590] net_ratelimit: 39 callbacks suppressed [ 595.387048][T16590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.879371][T17016] netlink: 'syz.1.2936': attribute type 15 has an invalid length. [ 596.419961][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.901348][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.013637][T16789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 597.035030][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.062378][T16789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 597.085787][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.099934][T16789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 597.127355][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.138761][T16789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 597.171948][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.223465][T17040] syzkaller0: entered promiscuous mode [ 597.223493][T17040] syzkaller0: entered allmulticast mode [ 597.258060][T17040] tipc: Enabled bearer , priority 0 [ 597.340306][T17039] tipc: Resetting bearer [ 597.410513][T17039] tipc: Disabling bearer [ 597.462543][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.644421][T17066] netlink: 'syz.0.2946': attribute type 15 has an invalid length. [ 597.708347][T17066] __nla_validate_parse: 65 callbacks suppressed [ 597.708372][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 597.790016][T16789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.855836][T16789] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.901043][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.901157][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.963235][T17078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.967357][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.967468][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.303497][T17087] syzkaller0: entered promiscuous mode [ 598.303526][T17087] syzkaller0: entered allmulticast mode [ 598.500171][T16590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.465054][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.543555][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.551855][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.554902][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.674554][T16590] net_ratelimit: 1 callbacks suppressed [ 600.674582][T16590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.949167][T17102] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 600.949198][T17102] pim6reg0: persist disabled [ 600.997779][T17107] netlink: Unknown conntrack attr (type=12592, max=9) [ 600.997824][T17107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.574925][T17138] netlink: 'syz.0.2958': attribute type 15 has an invalid length. [ 601.607349][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 601.695792][T16789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.702693][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.765680][T17144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2960'. [ 601.806257][T17144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2960'. [ 601.875307][T17144] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2960'. [ 601.875864][T17144] openvswitch: netlink: Flow key attr not present in new flow. [ 601.907548][T17144] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2960'. [ 601.943261][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.022348][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 602.084982][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 602.139192][T16789] veth0_vlan: entered promiscuous mode [ 602.168201][T16789] veth1_vlan: entered promiscuous mode [ 602.231499][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.253167][T16588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.279848][T16588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.376550][T16789] veth0_macvtap: entered promiscuous mode [ 602.454781][T17160] ip_tables: iptables: counters copy to user failed while replacing table [ 602.781182][T17158] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.781851][T17158] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.188863][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.217061][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.243145][T17183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2968'. [ 603.243174][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2968'. [ 603.581426][T16789] veth1_macvtap: entered promiscuous mode [ 603.645747][T17178] ovs-s: entered promiscuous mode [ 603.660065][ T62] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.660125][ T62] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.660166][ T62] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.660208][ T62] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.720111][T17180] openvswitch: ovs-s: Dropping previously announced user features [ 603.806135][T16789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.837914][T16789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.975718][ T1250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.975992][ T1250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.976036][ T1250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.012247][T10151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.079051][T17207] netlink: 'syz.3.2971': attribute type 15 has an invalid length. [ 604.223868][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 604.428337][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.428363][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.622328][ T1259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.622355][ T1259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.669021][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2975'. [ 604.716940][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'. [ 605.509339][T17254] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2983'. [ 605.825505][T17263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2984'. [ 605.865771][ T5723] net_ratelimit: 8 callbacks suppressed [ 605.865796][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.925761][T17271] tc_dump_action: action bad kind [ 605.952016][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'. [ 605.954784][T17271] netlink: 'syz.2.2986': attribute type 2 has an invalid length. [ 605.954808][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2986'. [ 606.151108][T17263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2984'. [ 606.192946][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.251971][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.290232][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.294319][T17276] v: renamed from veth0_vlan (while UP) [ 606.743443][T17285] bridge0: entered allmulticast mode [ 606.908088][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.061475][T10151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.118241][T17300] FAULT_INJECTION: forcing a failure. [ 607.118241][T17300] name failslab, interval 1, probability 0, space 0, times 0 [ 607.118281][T17300] CPU: 1 UID: 0 PID: 17300 Comm: syz.3.2994 Not tainted syzkaller #0 PREEMPT(full) [ 607.118308][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.118323][T17300] Call Trace: [ 607.118333][T17300] [ 607.118344][T17300] dump_stack_lvl+0xe8/0x150 [ 607.118385][T17300] should_fail_ex+0x410/0x560 [ 607.118417][T17300] ? __alloc_skb+0x1db/0x7a0 [ 607.118444][T17300] should_failslab+0xa8/0x100 [ 607.118475][T17300] ? __alloc_skb+0x1db/0x7a0 [ 607.118499][T17300] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 607.118535][T17300] ? __alloc_skb+0x18d/0x7a0 [ 607.118562][T17300] ? __alloc_skb+0x1db/0x7a0 [ 607.118596][T17300] __alloc_skb+0x1db/0x7a0 [ 607.118628][T17300] alloc_skb_with_frags+0xc6/0x760 [ 607.118659][T17300] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 607.118697][T17300] sock_alloc_send_pskb+0x878/0x990 [ 607.118752][T17300] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 607.118785][T17300] ? aa_file_perm+0x18b/0x15f0 [ 607.118821][T17300] ? aa_sk_perm+0x713/0x900 [ 607.118854][T17300] ? aa_file_perm+0x18b/0x15f0 [ 607.118890][T17300] hci_sock_sendmsg+0x208/0xf50 [ 607.119026][T17300] ? __pfx_aa_sk_perm+0x10/0x10 [ 607.119057][T17300] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 607.119096][T17300] ? apparmor_socket_sendmsg+0x98/0x360 [ 607.119120][T17300] ? lock_acquire+0x115/0x350 [ 607.119146][T17300] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 607.119177][T17300] sock_sendmsg_nosec+0x13a/0x180 [ 607.119217][T17300] sock_write_iter+0x2de/0x3e0 [ 607.119255][T17300] ? __pfx_sock_write_iter+0x10/0x10 [ 607.119298][T17300] ? bpf_lsm_file_permission+0x9/0x20 [ 607.119330][T17300] ? security_file_permission+0x75/0x260 [ 607.119410][T17300] vfs_write+0x612/0xba0 [ 607.119454][T17300] ? __pfx_vfs_write+0x10/0x10 [ 607.119500][T17300] ? __fget_files+0x2a/0x420 [ 607.119544][T17300] ksys_write+0x150/0x270 [ 607.119581][T17300] ? __pfx_ksys_write+0x10/0x10 [ 607.119630][T17300] do_syscall_64+0x166/0x520 [ 607.119658][T17300] ? trace_irq_disable+0x3b/0x140 [ 607.119682][T17300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.119707][T17300] ? clear_bhb_loop+0x70/0xc0 [ 607.119737][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.119760][T17300] RIP: 0033:0x7f703639e159 [ 607.119783][T17300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.119803][T17300] RSP: 002b:00007f70372a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 607.119830][T17300] RAX: ffffffffffffffda RBX: 00007f7036625fa0 RCX: 00007f703639e159 [ 607.119856][T17300] RDX: 0000000000000025 RSI: 0000200000000240 RDI: 0000000000000004 [ 607.119872][T17300] RBP: 00007f70372a7090 R08: 0000000000000000 R09: 0000000000000000 [ 607.119887][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.119902][T17300] R13: 00007f7036626038 R14: 00007f7036625fa0 R15: 00007ffdc91c11d8 [ 607.119940][T17300] [ 607.231777][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.542431][T17290] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.593086][T17304] bridge0: port 3(bond0) entered blocking state [ 607.593257][T17304] bridge0: port 3(bond0) entered disabled state [ 607.593445][T17304] bond0: entered allmulticast mode [ 607.593466][T17304] bond_slave_0: entered allmulticast mode [ 607.593486][T17304] bond_slave_1: entered allmulticast mode [ 607.596203][T17304] bond0: entered promiscuous mode [ 607.596225][T17304] bond_slave_0: entered promiscuous mode [ 607.596507][T17304] bond_slave_1: entered promiscuous mode [ 607.597336][T17304] bridge0: port 3(bond0) entered blocking state [ 607.599006][T17304] bridge0: port 3(bond0) entered forwarding state [ 607.786852][T17290] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.913522][T17304] hsr_slave_1 (unregistering): left promiscuous mode [ 608.026303][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.043236][T17317] netlink: 'syz.1.3000': attribute type 2 has an invalid length. [ 608.046600][T17290] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.177159][T17317] netlink: 'syz.1.3000': attribute type 39 has an invalid length. [ 608.234847][T17290] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.366467][T17336] netlink: 'syz.3.3002': attribute type 10 has an invalid length. [ 608.962148][T17336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.964644][T17336] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 608.983838][T17332] tipc: Enabled bearer , priority 0 [ 608.984185][T17342] syzkaller0: entered promiscuous mode [ 608.984209][T17342] syzkaller0: entered allmulticast mode [ 609.038454][T17327] tipc: Resetting bearer [ 609.108390][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.145285][T17327] tipc: Disabling bearer [ 609.404188][ T62] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.463206][ T62] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.463898][ T62] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.471106][T10151] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.702239][T16588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.779777][T16176] Bluetooth: hci3: command 0x0406 tx timeout [ 610.345227][T17377] netlink: 'syz.2.3014': attribute type 1 has an invalid length. [ 610.428617][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 610.429508][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 610.452816][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 610.458614][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 610.481667][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 610.551086][T17382] __nla_validate_parse: 3 callbacks suppressed [ 610.551110][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3015'. [ 610.615221][T17377] veth3: entered allmulticast mode [ 610.940449][T17393] syzkaller0: entered promiscuous mode [ 610.940477][T17393] syzkaller0: entered allmulticast mode [ 610.975423][T17393] tipc: Enabled bearer , priority 0 [ 611.171925][T17392] tipc: Resetting bearer [ 611.277810][T16591] net_ratelimit: 2 callbacks suppressed [ 611.277833][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.286350][T17392] tipc: Disabling bearer [ 611.495479][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.550584][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.605444][T17407] 8021q: adding VLAN 0 to HW filter on device eth0 [ 611.621406][T17407] 8021q: adding VLAN 0 to HW filter on device eth1 [ 611.672574][T17407] 8021q: adding VLAN 0 to HW filter on device eth2 [ 611.679473][T17407] 8021q: adding VLAN 0 to HW filter on device eth3 [ 611.807040][T17419] syzkaller1: entered promiscuous mode [ 611.807070][T17419] syzkaller1: entered allmulticast mode [ 612.050965][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.053451][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'. [ 612.098293][T17378] lo speed is unknown, defaulting to 1000 [ 612.112264][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.226624][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 612.262110][ T1737] block nbd47: Possible stuck request ffff888029245080: control (read@0,4096B). Runtime 90 seconds [ 612.262682][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.340536][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.447177][T17446] v: left promiscuous mode [ 612.458807][T17446] v: entered promiscuous mode [ 612.491800][T17446] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 612.508255][T16588] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 612.581805][T16176] Bluetooth: hci0: command tx timeout [ 613.031254][T16588] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 613.051212][T17468] netlink: Failed to add helper -22 [ 613.051280][T17468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.104877][T17458] syzkaller0: entered promiscuous mode [ 613.104904][T17458] syzkaller0: entered allmulticast mode [ 613.268862][T17474] syz_tun: entered allmulticast mode [ 613.301526][T17476] pim6reg: entered allmulticast mode [ 613.383406][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.759400][ T5722] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 613.910175][ T5612] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 613.975451][T17494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3036'. [ 614.059524][T17502] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3038'. [ 614.064802][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3038'. [ 614.152329][T16588] dummy0: entered promiscuous mode [ 614.154397][T17502] macvtap0: entered allmulticast mode [ 614.154419][T17502] dummy0: entered allmulticast mode [ 614.175172][T17502] dummy0: left allmulticast mode [ 614.290237][ T988] dummy0: left promiscuous mode [ 614.358904][T17378] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.359081][T17378] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.359273][T17378] bridge_slave_0: entered allmulticast mode [ 614.390598][T17378] bridge_slave_0: entered promiscuous mode [ 614.418783][T17378] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.427121][T17378] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.427620][T17378] bridge_slave_1: entered allmulticast mode [ 614.454722][T17378] bridge_slave_1: entered promiscuous mode [ 614.515364][T17509] Bluetooth: MGMT ver 1.23 [ 614.519396][T17509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3039'. [ 614.645454][T17378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.650830][T17378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.670204][T16176] Bluetooth: hci0: command tx timeout [ 614.706243][T17378] team0: Port device team_slave_0 added [ 614.716279][T17378] team0: Port device team_slave_1 added [ 614.813760][T17378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.813782][T17378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.813813][T17378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.887722][T17378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.887744][T17378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.887776][T17378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.012199][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3043'. [ 615.060715][T17378] hsr_slave_0: entered promiscuous mode [ 615.065866][T17378] hsr_slave_1: entered promiscuous mode [ 615.066718][T17378] debugfs: 'hsr0' already exists in 'hsr' [ 615.066741][T17378] Cannot create hsr debugfs directory [ 615.520277][T17539] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 615.549895][T17539] syzkaller1: entered promiscuous mode [ 615.549924][T17539] syzkaller1: entered allmulticast mode [ 615.662262][T17378] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.662304][T17378] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.766588][T17378] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.767009][T17378] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.908291][T17378] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.908332][T17378] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.999827][T17378] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.999870][T17378] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.104130][ T5722] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 616.200549][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3050'. [ 616.491144][T17378] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 616.511590][ T5722] net_ratelimit: 6 callbacks suppressed [ 616.511613][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.536312][T17561] fido_id[17561]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 616.546833][T17378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.562909][T17378] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 616.615768][T17378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.627073][T17378] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 616.655706][T17378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.656724][T17378] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 616.680809][T17378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.754681][T16176] Bluetooth: hci0: command tx timeout [ 616.873720][T17585] FAULT_INJECTION: forcing a failure. [ 616.873720][T17585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.873758][T17585] CPU: 1 UID: 0 PID: 17585 Comm: syz.4.3054 Not tainted syzkaller #0 PREEMPT(full) [ 616.873793][T17585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.873808][T17585] Call Trace: [ 616.873818][T17585] [ 616.873828][T17585] dump_stack_lvl+0xe8/0x150 [ 616.873869][T17585] should_fail_ex+0x410/0x560 [ 616.873902][T17585] _copy_to_user+0x31/0xb0 [ 616.873935][T17585] simple_read_from_buffer+0xe1/0x170 [ 616.873975][T17585] proc_fail_nth_read+0x1bb/0x230 [ 616.874011][T17585] ? common_file_perm+0x20e/0x2b0 [ 616.874051][T17585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.874100][T17585] ? rw_verify_area+0x24a/0x4c0 [ 616.874137][T17585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.874173][T17585] vfs_read+0x213/0xa80 [ 616.874214][T17585] ? __pfx___mutex_lock+0x10/0x10 [ 616.874241][T17585] ? __pfx_vfs_read+0x10/0x10 [ 616.874275][T17585] ? __fget_files+0x2a/0x420 [ 616.874317][T17585] ? __fget_files+0x3a2/0x420 [ 616.874347][T17585] ? __fget_files+0x2a/0x420 [ 616.874387][T17585] ksys_read+0x150/0x270 [ 616.874430][T17585] ? __pfx_ksys_read+0x10/0x10 [ 616.874478][T17585] do_syscall_64+0x166/0x520 [ 616.874503][T17585] ? trace_irq_disable+0x3b/0x140 [ 616.874526][T17585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.874552][T17585] ? clear_bhb_loop+0x70/0xc0 [ 616.874582][T17585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.874606][T17585] RIP: 0033:0x7f760ed5e98e [ 616.874628][T17585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 616.874649][T17585] RSP: 002b:00007f760cfd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 616.874675][T17585] RAX: ffffffffffffffda RBX: 00007f760cfd56c0 RCX: 00007f760ed5e98e [ 616.874693][T17585] RDX: 000000000000000f RSI: 00007f760cfd50a0 RDI: 0000000000000006 [ 616.874708][T17585] RBP: 00007f760cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 616.874724][T17585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.874738][T17585] R13: 00007f760f026128 R14: 00007f760f026090 R15: 00007ffd79a331d8 [ 616.874777][T17585] [ 616.876806][T17378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.152926][T17378] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.204968][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.205093][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.293524][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.293639][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.383471][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.542473][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.600065][T17597] syzkaller0: entered promiscuous mode [ 617.600094][T17597] syzkaller0: entered allmulticast mode [ 617.705677][T17605] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 617.747510][T17604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.749196][T17604] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.796808][T17604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.815121][T17610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.858016][T17604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.860022][T17604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.879508][T17604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.879537][T17604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.901395][T17604] veth1_vlan: left promiscuous mode [ 617.904868][T17604] veth0_vlan: left promiscuous mode [ 617.909076][T17604] veth0_vlan: entered promiscuous mode [ 617.916601][T17604] veth1_vlan: entered promiscuous mode [ 617.927412][T17604] veth1_macvtap: left promiscuous mode [ 617.928367][T17604] veth0_macvtap: left promiscuous mode [ 617.929456][T17604] veth0_macvtap: entered promiscuous mode [ 617.933838][T17604] veth1_macvtap: entered promiscuous mode [ 617.960523][T17604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 617.961993][T17604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 617.963299][T17604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.968167][T17605] syzkaller1: entered promiscuous mode [ 617.968193][T17605] syzkaller1: entered allmulticast mode [ 618.020444][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 618.164376][T17621] FAULT_INJECTION: forcing a failure. [ 618.164376][T17621] name failslab, interval 1, probability 0, space 0, times 0 [ 618.164424][T17621] CPU: 0 UID: 0 PID: 17621 Comm: syz.3.3064 Not tainted syzkaller #0 PREEMPT(full) [ 618.164452][T17621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.164467][T17621] Call Trace: [ 618.164478][T17621] [ 618.164489][T17621] dump_stack_lvl+0xe8/0x150 [ 618.164531][T17621] should_fail_ex+0x410/0x560 [ 618.164579][T17621] ? __alloc_skb+0x1db/0x7a0 [ 618.164606][T17621] should_failslab+0xa8/0x100 [ 618.164637][T17621] ? __alloc_skb+0x1db/0x7a0 [ 618.164661][T17621] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 618.164696][T17621] ? __alloc_skb+0x18d/0x7a0 [ 618.164723][T17621] ? __alloc_skb+0x1db/0x7a0 [ 618.164756][T17621] __alloc_skb+0x1db/0x7a0 [ 618.164788][T17621] netlink_sendmsg+0x5d4/0xb40 [ 618.164834][T17621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.164878][T17621] ? apparmor_socket_sendmsg+0x98/0x360 [ 618.164907][T17621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.164941][T17621] sock_sendmsg_nosec+0x13a/0x180 [ 618.164981][T17621] ____sys_sendmsg+0x54e/0x850 [ 618.165018][T17621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.165059][T17621] ? import_iovec+0x73/0xa0 [ 618.165092][T17621] ___sys_sendmsg+0x2a5/0x360 [ 618.165121][T17621] ? __lock_acquire+0x747/0x2de0 [ 618.165154][T17621] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.165224][T17621] ? __fget_files+0x2a/0x420 [ 618.165255][T17621] ? __fget_files+0x3a2/0x420 [ 618.165299][T17621] __x64_sys_sendmsg+0x1b1/0x290 [ 618.165333][T17621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.165387][T17621] do_syscall_64+0x166/0x520 [ 618.165412][T17621] ? trace_irq_disable+0x3b/0x140 [ 618.165443][T17621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.165467][T17621] ? clear_bhb_loop+0x70/0xc0 [ 618.165495][T17621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.165517][T17621] RIP: 0033:0x7f703639e159 [ 618.165538][T17621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.165560][T17621] RSP: 002b:00007f70372a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.165586][T17621] RAX: ffffffffffffffda RBX: 00007f7036625fa0 RCX: 00007f703639e159 [ 618.165604][T17621] RDX: 0000000000004010 RSI: 0000200000000480 RDI: 0000000000000003 [ 618.165620][T17621] RBP: 00007f70372a7090 R08: 0000000000000000 R09: 0000000000000000 [ 618.165636][T17621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.165650][T17621] R13: 00007f7036626038 R14: 00007f7036625fa0 R15: 00007ffdc91c11d8 [ 618.165685][T17621] [ 618.534699][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.534778][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.538673][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.538777][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.582219][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.673860][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'. [ 618.699449][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'. [ 618.823915][T16176] Bluetooth: hci0: command tx timeout [ 618.898347][T10151] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 619.099926][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.100841][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.100892][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.193485][T10150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.299775][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 619.300666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.305404][ T1737] block nbd0: Possible stuck request ffff888037d0e000: control (read@0,2048B). Runtime 270 seconds [ 619.305449][ T1737] block nbd0: Possible stuck request ffff888037d0e1c0: control (read@2048,2048B). Runtime 270 seconds [ 619.369030][T17657] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 619.500986][T17378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.632354][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.682191][T17378] veth0_vlan: entered promiscuous mode [ 619.698439][T17378] veth1_vlan: entered promiscuous mode [ 619.735016][T17378] veth0_macvtap: entered promiscuous mode [ 619.764001][T17378] veth1_macvtap: entered promiscuous mode [ 619.823572][T17378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.896389][T17378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.905239][T17665] netlink: 'syz.0.3074': attribute type 15 has an invalid length. [ 619.970369][ T1250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.971157][ T1250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.973579][ T1250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.973893][ T1250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.093178][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3074'. [ 620.145409][T10150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.145435][T10150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.240221][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.240247][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.660786][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.770183][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'. [ 621.157069][T17701] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 621.607083][T17710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 621.687747][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 621.702036][ T5722] net_ratelimit: 1 callbacks suppressed [ 621.702054][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.810124][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 621.871533][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3085'. [ 622.226164][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'. [ 622.226192][T17726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3087'. [ 622.274269][T17728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3086'. [ 622.274345][T17728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3086'. [ 622.588453][T17724] syzkaller0: entered promiscuous mode [ 622.588489][T17724] syzkaller0: entered allmulticast mode [ 622.612105][T17735] tipc: Enabled bearer , priority 0 [ 622.616782][T17720] tipc: Resetting bearer [ 622.670368][T17720] tipc: Disabling bearer [ 622.742276][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.819934][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 623.118592][T17751] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 623.143288][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.316156][T17756] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 623.316189][T17756] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 623.682466][T17760] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 623.795878][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.923419][T17774] syzkaller0: entered promiscuous mode [ 623.923524][T17774] syzkaller0: entered allmulticast mode [ 623.928349][T17774] tipc: Started in network mode [ 623.928387][T17774] tipc: Node identity be284c141a6e, cluster identity 4711 [ 623.928617][T17774] tipc: Enabled bearer , priority 0 [ 623.965771][T17773] tipc: Resetting bearer [ 623.996685][T17773] tipc: Disabling bearer [ 624.518496][T17789] syzkaller0: entered promiscuous mode [ 624.518525][T17789] syzkaller0: entered allmulticast mode [ 624.543067][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 624.823023][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.942193][T17808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3113'. [ 625.254988][T17816] tc_dump_action: action bad kind [ 625.344399][T17820] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 625.617738][T17825] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 625.773353][T17831] syzkaller0: entered promiscuous mode [ 625.773380][T17831] syzkaller0: entered allmulticast mode [ 625.863478][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.602143][T17865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.902356][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.985984][T10151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.006188][T17872] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3134'. [ 627.570981][T17888] syzkaller0: entered promiscuous mode [ 627.571009][T17888] syzkaller0: entered allmulticast mode [ 627.942322][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.943377][T17898] FAULT_INJECTION: forcing a failure. [ 627.943377][T17898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.943410][T17898] CPU: 1 UID: 0 PID: 17898 Comm: syz.0.3140 Not tainted syzkaller #0 PREEMPT(full) [ 627.943436][T17898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 627.943451][T17898] Call Trace: [ 627.943461][T17898] [ 627.943472][T17898] dump_stack_lvl+0xe8/0x150 [ 627.943515][T17898] should_fail_ex+0x410/0x560 [ 627.943546][T17898] _copy_from_user+0x2d/0xb0 [ 627.943578][T17898] ___sys_sendmsg+0x1c6/0x360 [ 627.943617][T17898] ? __lock_acquire+0x747/0x2de0 [ 627.943647][T17898] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.943717][T17898] ? __fget_files+0x2a/0x420 [ 627.943777][T17898] ? __fget_files+0x3a2/0x420 [ 627.943819][T17898] __x64_sys_sendmsg+0x1b1/0x290 [ 627.943853][T17898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.943908][T17898] do_syscall_64+0x166/0x520 [ 627.943934][T17898] ? trace_irq_disable+0x3b/0x140 [ 627.943956][T17898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.943982][T17898] ? clear_bhb_loop+0x70/0xc0 [ 627.944011][T17898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.944035][T17898] RIP: 0033:0x7fa72399e159 [ 627.944057][T17898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.944077][T17898] RSP: 002b:00007fa72493e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.944104][T17898] RAX: ffffffffffffffda RBX: 00007fa723c25fa0 RCX: 00007fa72399e159 [ 627.944121][T17898] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 627.944136][T17898] RBP: 00007fa72493e090 R08: 0000000000000000 R09: 0000000000000000 [ 627.944151][T17898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.944165][T17898] R13: 00007fa723c26038 R14: 00007fa723c25fa0 R15: 00007ffea1198a58 [ 627.944202][T17898] [ 627.949922][T17899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3141'. [ 628.262945][T10150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.610129][T17911] syzkaller1: entered promiscuous mode [ 628.610153][T17911] syzkaller1: entered allmulticast mode [ 628.669905][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 628.674031][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 628.674813][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 628.676033][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 628.697263][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 628.905483][T16588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.954998][T17919] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 629.078944][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.349106][ T5614] syz_tun (unregistering): left allmulticast mode [ 629.374688][T17930] syzkaller0: entered promiscuous mode [ 629.374716][T17930] syzkaller0: entered allmulticast mode [ 629.721834][T17939] lo speed is unknown, defaulting to 1000 [ 629.913295][T17949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3155'. [ 629.913349][T17949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3155'. [ 629.964605][T17912] lo speed is unknown, defaulting to 1000 [ 630.100894][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.308530][T17964] syzkaller1: entered promiscuous mode [ 630.308558][T17964] syzkaller1: entered allmulticast mode [ 630.406407][T17965] tipc: Started in network mode [ 630.406442][T17965] tipc: Node identity 080211, cluster identity 4711 [ 630.406601][T17965] tipc: Enabled bearer , priority 0 [ 630.612985][T17970] vlan0: entered promiscuous mode [ 630.650812][T17970] team0: Port device vlan0 added [ 630.707160][T17975] netlink: 'syz.4.3161': attribute type 1 has an invalid length. [ 630.793862][T17978] veth9: entered allmulticast mode [ 630.798003][T17978] bond4: (slave veth9): Enslaving as an active interface with a down link [ 630.819841][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 630.821622][ T5623] Bluetooth: hci3: command tx timeout [ 630.850237][T17975] bond4: (slave veth0_to_bond): making interface the new active one [ 630.851155][T17975] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 630.886801][T17975] macvlan4: entered promiscuous mode [ 630.886820][T17975] macvlan4: entered allmulticast mode [ 630.887330][T17975] bond4: entered promiscuous mode [ 630.887344][T17975] veth0_to_bond: entered promiscuous mode [ 630.894763][T17975] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 630.897253][T17975] bond4: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 630.897655][T17975] bond4: left promiscuous mode [ 630.897700][T17975] veth0_to_bond: left promiscuous mode [ 630.923121][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3161'. [ 631.052679][T17912] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.054479][T17912] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.054638][T17912] bridge_slave_0: entered allmulticast mode [ 631.056638][T17912] bridge_slave_0: entered promiscuous mode [ 631.093965][T17912] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.094153][T17912] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.094313][T17912] bridge_slave_1: entered allmulticast mode [ 631.098690][T17912] bridge_slave_1: entered promiscuous mode [ 631.140085][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.169287][T17985] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 631.206756][T17912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.221824][T17912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.264964][T17912] team0: Port device team_slave_0 added [ 631.267428][T17912] team0: Port device team_slave_1 added [ 631.306935][T17912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.306956][T17912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.306985][T17912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.308709][T17912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.308726][T17912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.308753][T17912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.436006][T17912] hsr_slave_0: entered promiscuous mode [ 631.436942][T17912] hsr_slave_1: entered promiscuous mode [ 631.437808][T17912] debugfs: 'hsr0' already exists in 'hsr' [ 631.437830][T17912] Cannot create hsr debugfs directory [ 631.534004][ T5749] tipc: Node number set to 134353152 [ 631.707131][T17912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.707173][T17912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.786206][T17990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3165'. [ 631.855473][T17912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.855510][T17912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.032300][T17912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.032343][T17912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.099085][T17999] netlink: Only one type of NAT may be specified [ 632.099122][T17999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.184936][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.202871][T17912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.202915][T17912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.264126][T18001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3169'. [ 632.265349][T18001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3169'. [ 632.501703][T17912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 632.521798][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 632.523274][T17912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 632.536425][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.542074][T17912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 632.563842][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 632.566056][T17912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 632.585253][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.743342][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.814923][T17912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.837693][T17912] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.855635][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.855722][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.887735][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.887851][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.904435][ T5623] Bluetooth: hci3: command tx timeout [ 633.219962][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.336065][T17912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.388421][T17912] veth0_vlan: entered promiscuous mode [ 633.414682][T17912] veth1_vlan: entered promiscuous mode [ 633.453351][T17912] veth0_macvtap: entered promiscuous mode [ 633.457828][T17912] veth1_macvtap: entered promiscuous mode [ 633.488690][T17912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.504766][T17912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.544467][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.560784][T10150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.560835][T10150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.560872][T10150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.782713][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.782739][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.839105][T18034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3175'. [ 633.868481][ T1259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.868505][ T1259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.975802][T18040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3142'. [ 634.024390][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.257076][T18047] tc_dump_action: action bad kind [ 634.262093][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.374258][T18044] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3179'. [ 634.461992][T16176] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 634.464777][T16176] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 634.468476][T16176] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 634.487197][T16176] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 634.501530][T16176] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 634.660884][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 634.993419][T16176] Bluetooth: hci3: command tx timeout [ 635.277342][ T1159] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.304542][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.348255][T18068] syzkaller0: entered promiscuous mode [ 635.348284][T18068] syzkaller0: entered allmulticast mode [ 635.473728][ T1159] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.523187][T18053] lo speed is unknown, defaulting to 1000 [ 635.558196][T18072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3184'. [ 635.583246][T18072] netlink: 'syz.2.3184': attribute type 10 has an invalid length. [ 635.604170][ T1159] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.635916][T18073] netlink: 'syz.2.3184': attribute type 10 has an invalid length. [ 635.645119][T18072] team0: Port device dummy0 added [ 635.682843][T18073] team0: Port device dummy0 removed [ 635.718937][T18072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 635.744586][ T1159] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.904168][T18077] lo speed is unknown, defaulting to 1000 [ 636.120418][ T1159] pim6reg: left allmulticast mode [ 636.547900][ T1159] bond1 (unregistering): Released all slaves [ 636.571524][ T1159] bond2 (unregistering): (slave veth3): Releasing active interface [ 636.573091][ T1159] bond2 (unregistering): Released all slaves [ 636.589745][T16176] Bluetooth: hci1: command tx timeout [ 636.663917][ T1159] bond0 (unregistering): (slave veth5): Releasing active interface [ 636.668231][ T1159] bond0 (unregistering): Released all slaves [ 636.717559][ T1159] bond3 (unregistering): Released all slaves [ 636.743527][ T1159] bond4 (unregistering): (slave veth9): Releasing active interface [ 636.746362][ T1159] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 636.760237][ T1159] bond4 (unregistering): Released all slaves [ 636.990116][T18090] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3186'. [ 637.003819][ T1159] tipc: Disabling bearer [ 637.004083][ T1159] tipc: Disabling bearer [ 637.029920][ T1159] tipc: Left network mode [ 637.060760][T16176] Bluetooth: hci3: command tx timeout [ 637.213786][T18053] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.213962][T18053] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.214138][T18053] bridge_slave_0: entered allmulticast mode [ 637.218970][T18053] bridge_slave_0: entered promiscuous mode [ 637.270972][T18053] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.271115][T18053] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.271287][T18053] bridge_slave_1: entered allmulticast mode [ 637.273156][T18053] bridge_slave_1: entered promiscuous mode [ 637.414322][T18053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.417455][T18053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.649044][T18053] team0: Port device team_slave_0 added [ 637.667418][T18053] team0: Port device team_slave_1 added [ 637.947225][ T1159] ------------[ cut here ]------------ [ 637.947242][ T1159] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 637.947264][ T1159] WARNING: net/mac80211/driver-ops.c:366 at drv_unassign_vif_chanctx+0x498/0x7d0, CPU#1: kworker/u8:8/1159 [ 637.973033][ T1159] Modules linked in: [ 637.977340][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 637.987239][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.998231][ T1159] Workqueue: netns cleanup_net [ 638.005176][ T1159] RIP: 0010:drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 638.013156][ T1159] Code: 8d 78 0a 00 00 48 8b 02 48 8d b0 20 01 00 00 48 85 c0 48 0f 44 f1 42 0f b6 44 3d 00 84 c0 0f 85 95 01 00 00 41 8b 16 48 89 df <67> 48 0f b9 3a e9 04 fd ff ff e8 6c a1 79 f6 90 0f 0b 90 e9 3d fe [ 638.033884][ T1159] RSP: 0018:ffffc900050f7070 EFLAGS: 00010246 [ 638.040514][ T1159] RAX: 0000000000000000 RBX: ffffffff908c0e60 RCX: ffff8880557b9938 [ 638.048890][ T1159] RDX: 0000000000000000 RSI: ffff8880557b8120 RDI: ffffffff908c0e60 [ 638.057923][ T1159] RBP: 1ffff1100aaf7325 R08: ffffffff907a317f R09: 1ffffffff20f462f [ 638.066537][ T1159] R10: dffffc0000000000 R11: fffffbfff20f4630 R12: ffff8880557bac70 [ 638.075673][ T1159] R13: ffff8880557b8ec0 R14: ffff8880557b9928 R15: dffffc0000000000 [ 638.083862][ T1159] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 638.092943][ T1159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.099843][ T1159] CR2: 0000001b2e022ff8 CR3: 000000007e298000 CR4: 00000000003526f0 [ 638.108860][ T1159] Call Trace: [ 638.113085][ T1159] [ 638.116097][ T1159] ieee80211_assign_link_chanctx+0x234/0xcd0 [ 638.122371][ T1159] ? __pfx_ieee80211_assign_link_chanctx+0x10/0x10 [ 638.128962][ T1159] ? do_raw_spin_lock+0x12b/0x2f0 [ 638.134239][ T1159] __ieee80211_link_release_channel+0x3c6/0x610 [ 638.140626][ T1159] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 638.147631][ T1159] ieee80211_teardown_sdata+0xc1/0x240 [ 638.153355][ T1159] ? __pfx_ieee80211_uninit+0x10/0x10 [ 638.158816][ T1159] unregister_netdevice_many_notify+0x1acd/0x2140 [ 638.165472][ T1159] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 638.172408][ T1159] ? call_rcu+0x64d/0x8b0 [ 638.176893][ T1159] ? rcu_is_watching+0x16/0xb0 [ 638.182955][ T1159] ? __up_read+0x29c/0x930 [ 638.187463][ T1159] unregister_netdevice_queue+0x2f5/0x340 [ 638.193397][ T1159] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 638.199834][ T1159] ? kernfs_remove_by_name_ns+0x101/0x140 [ 638.205680][ T1159] _cfg80211_unregister_wdev+0x156/0x5a0 [ 638.212696][ T1159] ieee80211_remove_interfaces+0x49c/0x6a0 [ 638.218591][ T1159] ? __pfx_autoremove_wake_function+0x10/0x10 [ 638.225532][ T1159] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 638.232055][ T1159] ieee80211_unregister_hw+0x5d/0x2c0 [ 638.237538][ T1159] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 638.243405][ T1159] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 638.249607][ T1159] ? hwsim_exit_net+0xcc0/0xf50 [ 638.254603][ T1159] ? __local_bh_enable_ip+0xd6/0x140 [ 638.260953][ T1159] hwsim_exit_net+0xe91/0xf50 [ 638.266216][ T1159] ? hwsim_exit_net+0x326/0xf50 [ 638.271235][ T1159] ? __pfx_hwsim_exit_net+0x10/0x10 [ 638.276674][ T1159] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 638.282738][ T1159] ops_undo_list+0x43d/0x8d0 [ 638.287442][ T1159] ? __pfx_ops_undo_list+0x10/0x10 [ 638.292784][ T1159] ? idr_destroy+0x218/0x290 [ 638.297435][ T1159] ? do_raw_spin_unlock+0xf5/0x200 [ 638.302759][ T1159] cleanup_net+0x572/0x810 [ 638.307250][ T1159] ? __pfx_cleanup_net+0x10/0x10 [ 638.313683][ T1159] ? rcu_is_watching+0x16/0xb0 [ 638.318526][ T1159] ? process_scheduled_works+0x97a/0x1630 [ 638.325221][ T1159] process_scheduled_works+0xc3d/0x1630 [ 638.330971][ T1159] ? __pfx_process_scheduled_works+0x10/0x10 [ 638.337031][ T1159] ? assign_work+0x3cf/0x5d0 [ 638.343232][ T1159] worker_thread+0xa47/0xfb0 [ 638.347946][ T1159] ? __kthread_parkme+0x71/0x1f0 [ 638.353960][ T1159] kthread+0x38b/0x480 [ 638.358236][ T1159] ? __pfx_worker_thread+0x10/0x10 [ 638.363548][ T1159] ? __pfx_kthread+0x10/0x10 [ 638.368212][ T1159] ret_from_fork+0x514/0xb70 [ 638.372988][ T1159] ? __pfx_ret_from_fork+0x10/0x10 [ 638.378184][ T1159] ? __switch_to+0xc89/0x1420 [ 638.383085][ T1159] ? __pfx_kthread+0x10/0x10 [ 638.387762][ T1159] ret_from_fork_asm+0x1a/0x30 [ 638.392711][ T1159] [ 638.395789][ T1159] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 638.403113][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 638.412654][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.422934][ T1159] Workqueue: netns cleanup_net [ 638.427775][ T1159] Call Trace: [ 638.431102][ T1159] [ 638.434080][ T1159] vpanic+0x56d/0xa60 [ 638.438159][ T1159] ? __pfx__printk+0x10/0x10 [ 638.442817][ T1159] ? __pfx_vpanic+0x10/0x10 [ 638.447438][ T1159] ? is_bpf_text_address+0x292/0x2b0 [ 638.452792][ T1159] ? is_bpf_text_address+0x26/0x2b0 [ 638.458237][ T1159] panic+0xc5/0xd0 [ 638.462011][ T1159] ? __pfx_panic+0x10/0x10 [ 638.466508][ T1159] ? ret_from_fork_asm+0x1a/0x30 [ 638.471529][ T1159] __warn+0x315/0x4c0 [ 638.475575][ T1159] ? drv_unassign_vif_chanctx+0x498/0x7d0 [ 638.481362][ T1159] ? drv_unassign_vif_chanctx+0x498/0x7d0 [ 638.487152][ T1159] __report_bug+0x276/0x570 [ 638.491807][ T1159] ? drv_unassign_vif_chanctx+0x498/0x7d0 [ 638.497590][ T1159] ? __pfx___report_bug+0x10/0x10 [ 638.502664][ T1159] ? unwind_next_frame+0x1baf/0x2550 [ 638.508022][ T1159] ? unwind_next_frame+0x8f/0x2550 [ 638.513208][ T1159] ? rcu_is_watching+0x16/0xb0 [ 638.518044][ T1159] report_bug_entry+0x19b/0x290 [ 638.523007][ T1159] ? drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 638.529057][ T1159] ? drv_unassign_vif_chanctx+0x4ea/0x7d0 [ 638.534922][ T1159] handle_bug+0xce/0x200 [ 638.539223][ T1159] exc_invalid_op+0x1a/0x50 [ 638.543783][ T1159] asm_exc_invalid_op+0x1a/0x20 [ 638.548683][ T1159] RIP: 0010:drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 638.555067][ T1159] Code: 8d 78 0a 00 00 48 8b 02 48 8d b0 20 01 00 00 48 85 c0 48 0f 44 f1 42 0f b6 44 3d 00 84 c0 0f 85 95 01 00 00 41 8b 16 48 89 df <67> 48 0f b9 3a e9 04 fd ff ff e8 6c a1 79 f6 90 0f 0b 90 e9 3d fe [ 638.574721][ T1159] RSP: 0018:ffffc900050f7070 EFLAGS: 00010246 [ 638.581053][ T1159] RAX: 0000000000000000 RBX: ffffffff908c0e60 RCX: ffff8880557b9938 [ 638.589125][ T1159] RDX: 0000000000000000 RSI: ffff8880557b8120 RDI: ffffffff908c0e60 [ 638.597244][ T1159] RBP: 1ffff1100aaf7325 R08: ffffffff907a317f R09: 1ffffffff20f462f [ 638.605520][ T1159] R10: dffffc0000000000 R11: fffffbfff20f4630 R12: ffff8880557bac70 [ 638.613533][ T1159] R13: ffff8880557b8ec0 R14: ffff8880557b9928 R15: dffffc0000000000 [ 638.621579][ T1159] ieee80211_assign_link_chanctx+0x234/0xcd0 [ 638.627647][ T1159] ? __pfx_ieee80211_assign_link_chanctx+0x10/0x10 [ 638.634228][ T1159] ? do_raw_spin_lock+0x12b/0x2f0 [ 638.639333][ T1159] __ieee80211_link_release_channel+0x3c6/0x610 [ 638.645658][ T1159] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 638.652516][ T1159] ieee80211_teardown_sdata+0xc1/0x240 [ 638.658041][ T1159] ? __pfx_ieee80211_uninit+0x10/0x10 [ 638.663479][ T1159] unregister_netdevice_many_notify+0x1acd/0x2140 [ 638.669976][ T1159] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 638.676810][ T1159] ? call_rcu+0x64d/0x8b0 [ 638.681187][ T1159] ? rcu_is_watching+0x16/0xb0 [ 638.686011][ T1159] ? __up_read+0x29c/0x930 [ 638.690512][ T1159] unregister_netdevice_queue+0x2f5/0x340 [ 638.696291][ T1159] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 638.702590][ T1159] ? kernfs_remove_by_name_ns+0x101/0x140 [ 638.708377][ T1159] _cfg80211_unregister_wdev+0x156/0x5a0 [ 638.714081][ T1159] ieee80211_remove_interfaces+0x49c/0x6a0 [ 638.719956][ T1159] ? __pfx_autoremove_wake_function+0x10/0x10 [ 638.726088][ T1159] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 638.732502][ T1159] ieee80211_unregister_hw+0x5d/0x2c0 [ 638.737940][ T1159] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 638.743558][ T1159] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 638.749685][ T1159] ? hwsim_exit_net+0xcc0/0xf50 [ 638.754595][ T1159] ? __local_bh_enable_ip+0xd6/0x140 [ 638.759948][ T1159] hwsim_exit_net+0xe91/0xf50 [ 638.764674][ T1159] ? hwsim_exit_net+0x326/0xf50 [ 638.769585][ T1159] ? __pfx_hwsim_exit_net+0x10/0x10 [ 638.774848][ T1159] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 638.780716][ T1159] ops_undo_list+0x43d/0x8d0 [ 638.785358][ T1159] ? __pfx_ops_undo_list+0x10/0x10 [ 638.790516][ T1159] ? idr_destroy+0x218/0x290 [ 638.795183][ T1159] ? do_raw_spin_unlock+0xf5/0x200 [ 638.800363][ T1159] cleanup_net+0x572/0x810 [ 638.804842][ T1159] ? __pfx_cleanup_net+0x10/0x10 [ 638.809856][ T1159] ? rcu_is_watching+0x16/0xb0 [ 638.814681][ T1159] ? process_scheduled_works+0x97a/0x1630 [ 638.820495][ T1159] process_scheduled_works+0xc3d/0x1630 [ 638.826154][ T1159] ? __pfx_process_scheduled_works+0x10/0x10 [ 638.832206][ T1159] ? assign_work+0x3cf/0x5d0 [ 638.836960][ T1159] worker_thread+0xa47/0xfb0 [ 638.841636][ T1159] ? __kthread_parkme+0x71/0x1f0 [ 638.846638][ T1159] kthread+0x38b/0x480 [ 638.850803][ T1159] ? __pfx_worker_thread+0x10/0x10 [ 638.856020][ T1159] ? __pfx_kthread+0x10/0x10 [ 638.860660][ T1159] ret_from_fork+0x514/0xb70 [ 638.865390][ T1159] ? __pfx_ret_from_fork+0x10/0x10 [ 638.870574][ T1159] ? __switch_to+0xc89/0x1420 [ 638.875328][ T1159] ? __pfx_kthread+0x10/0x10 [ 638.880001][ T1159] ret_from_fork_asm+0x1a/0x30 [ 638.884851][ T1159] [ 638.888543][ T1159] Kernel Offset: disabled [ 638.892894][ T1159] Rebooting in 86400 seconds..