last executing test programs: 7.654402166s ago: executing program 0 (id=3052): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x600cc2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) close(0x3) 7.61916646s ago: executing program 0 (id=3053): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0xf}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}], 0x38, 0x4040000}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000340), &(0x7f0000000140)=r1}, 0x20) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000240)={{0x6}, 0x100, './file0\x00'}) r5 = socket(0x25, 0x3, 0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x4008044) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000000)=0xc0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) connect$netrom(r9, &(0x7f0000000080)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) connect$netrom(r9, 0x0, 0x0) recvmsg(r6, &(0x7f0000000180)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)=""/146, 0x92}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000040)=""/32, 0x20}], 0x3, &(0x7f0000000500)=""/130, 0x82}, 0x40012023) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmmsg$inet_sctp(r2, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0xf}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}], 0x38, 0x4040000}], 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000340), &(0x7f0000000140)=r1}, 0x20) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000240)={{0x6}, 0x100, './file0\x00'}) (async) socket(0x25, 0x3, 0x400) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x4008044) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$int_in(r9, 0x5421, &(0x7f0000000000)=0xc0) (async) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) (async) connect$netrom(r9, &(0x7f0000000080)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) connect$netrom(r9, 0x0, 0x0) (async) recvmsg(r6, &(0x7f0000000180)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)=""/146, 0x92}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000040)=""/32, 0x20}], 0x3, &(0x7f0000000500)=""/130, 0x82}, 0x40012023) (async) 7.464167805s ago: executing program 0 (id=3055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0xc0400) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0xc}, 0x14) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @loopback}], 0x20) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x80, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x8, 0x0, 0x8, 0x2, {{0x1f, 0x4, 0x0, 0x24, 0x7c, 0xfffe, 0x0, 0xfe, 0x4, 0x0, @multicast1, @empty, {[@generic={0x83, 0x2}, @timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x3, [{@multicast1, 0x5}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xcd, [@empty, @rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}]}, @lsrr={0x83, 0x27, 0x20, [@empty, @rand_addr=0x64010101, @broadcast, @remote, @remote, @multicast1, @dev, @multicast1, @broadcast]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x24, [@rand_addr=0x64010101, @remote]}, @end, @ssrr={0x89, 0xb, 0xe9, [@multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}]}}}}}) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/432], 0x1b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000081) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r10, 0x80184947, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.209791858s ago: executing program 0 (id=3060): r0 = socket(0x2, 0x3, 0x40) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="170000000000000001000000ff01000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bf000000bf09000000000000550901000000000095210000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000040bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x80000000, 0x200}, 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000040), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f00000003c0), &(0x7f0000000400)=@udp6=r7, 0x1}, 0x20) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 7.041954883s ago: executing program 0 (id=3062): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) (rerun: 32) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r3, 0x4) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x78, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00', 0x0}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x27, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x401, 0x3b, &(0x7f0000000200)=""/59, 0x41100, 0x3, '\x00', r5, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x7, 0xe, 0x5}, 0x10, r6, r0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x4, 0xd, 0x5}], 0x10, 0x7}, 0x94) 6.726700658s ago: executing program 0 (id=3066): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000003000000002000000000000000000000300000000010000000300000002000000000000000000000203000000090000000000000c"], 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYRESDEC=r1], 0x40}}, 0x0) 2.823523672s ago: executing program 2 (id=3096): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x2, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 2.643911853s ago: executing program 2 (id=3100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r0, 0x4, r0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x8090}, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) r7 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x1, 0xa}, {0x2}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) sendfile(r6, r6, 0x0, 0x9) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-arm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 2.508936032s ago: executing program 3 (id=3103): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="a5e47023c078000000070a010200000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e00000020000000000000000000000000000000000000000000000000000000000000000000400000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e00000020000000000000000000000000000000000000000000000000000000000000000000400000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000bc0)=@flushsa={0x1f0, 0x1c, 0x20, 0x70bd25, 0x25dfdbfc, {0x33}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @etimer_thresh={0x8, 0xc, 0xa5f}, @address_filter={0x28, 0x1a, {@in=@loopback, @in6=@private0, 0x2, 0x6, 0x7}}, @tmpl={0x184, 0x5, [{{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@private2, 0x3501, 0x2, 0x1, 0x7, 0x4, 0x2, 0x8419fbe}, {{@in=@local, 0x4d2, 0x33}, 0x2, @in6=@mcast2, 0x3501, 0x2, 0x0, 0x7f, 0xead, 0x101, 0x8}, {{@in6=@local, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3503, 0x4, 0x2, 0x9, 0x2, 0x5a0f4bea, 0x4}, {{@in=@empty, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3501, 0x0, 0x3, 0x5, 0x9, 0x1, 0x10000}, {{@in=@multicast1, 0x4d6, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x1, 0x2, 0xc, 0x58, 0x10001, 0x6e6d7c65}, {{@in6=@remote, 0x4d5, 0x3c}, 0x2, @in6=@mcast1, 0x3506, 0x4, 0x2, 0x8, 0xfffffa3d, 0x8, 0x1}]}, @lastused={0xc, 0xf, 0x80}, @policy_type={0xa, 0x10, {0x1}}, @extra_flags={0x8, 0x18, 0xe}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000bc0)=@flushsa={0x1f0, 0x1c, 0x20, 0x70bd25, 0x25dfdbfc, {0x33}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @etimer_thresh={0x8, 0xc, 0xa5f}, @address_filter={0x28, 0x1a, {@in=@loopback, @in6=@private0, 0x2, 0x6, 0x7}}, @tmpl={0x184, 0x5, [{{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@private2, 0x3501, 0x2, 0x1, 0x7, 0x4, 0x2, 0x8419fbe}, {{@in=@local, 0x4d2, 0x33}, 0x2, @in6=@mcast2, 0x3501, 0x2, 0x0, 0x7f, 0xead, 0x101, 0x8}, {{@in6=@local, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3503, 0x4, 0x2, 0x9, 0x2, 0x5a0f4bea, 0x4}, {{@in=@empty, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3501, 0x0, 0x3, 0x5, 0x9, 0x1, 0x10000}, {{@in=@multicast1, 0x4d6, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x1, 0x2, 0xc, 0x58, 0x10001, 0x6e6d7c65}, {{@in6=@remote, 0x4d5, 0x3c}, 0x2, @in6=@mcast1, 0x3506, 0x4, 0x2, 0x8, 0xfffffa3d, 0x8, 0x1}]}, @lastused={0xc, 0xf, 0x80}, @policy_type={0xa, 0x10, {0x1}}, @extra_flags={0x8, 0x18, 0xe}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b801c9a81500010000000000fddbdf25e000000200000000000000000000000000000000000000000000000000000000efffffff83ec6d5200c120dbccab263784a2811f2eb6cbd49a429ec845686d363a51406e6ea6e3044651cb6a955c304d715b0c0f3834f0f9ea18c88f951c7fe0dc27a7189d5d00b9a2b18c1486d524a064af02ccd1dd879e019dd3bce1011c843a6d6ac645a8bbf75012f732db8288ce8dfaa6e8d8962bcce5b6ef65466ef56026ca7d576ca3a654c73cfa0fb9f4282285982fcd948b99167c1132238223a59d8d00944c4f160f26a776935329628072a5c2c18b9a44f041358bf2d87976ea0f2f0a34a6e61008ac9cbb0e5853f9a9d61a264aef9a97f055808f2ec18966048dd100a43eecaebedaf26e60fe3e5897258e551f538eb25db7eeecb0e6552fdab2d44d8db54b526c2a6689e85ba154a6d4d2af1d90", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x82, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x400c050) r6 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r5) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r5) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @union={0x4, 0x9, 0x0, 0x5, 0x0, 0x0, [{0x10, 0x3, 0x9}, {0x10, 0x5}, {0x0, 0x4, 0x610b}, {0xd, 0x4, 0x2}, {0x4, 0x0, 0x4}, {0x7, 0x2, 0x4}, {0xb, 0x4, 0x2}, {0x1, 0x70, 0x8}, {0xe, 0x3, 0x10001}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0xb1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r7, 0x3, 0x5}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r7, 0x3, 0x5}, 0x50) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r9}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x28}}, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @multicast2, r9}, 0xc) (async) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @multicast2, r9}, 0xc) 2.16018184s ago: executing program 3 (id=3106): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x400, 0x70bd2b, 0x25dfdbff, {0x19, 0x1, 0x2, r1, 0x0, 0x2bc27116, 0x7, 0x1, 0x0, 0x6, 0x81}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040094}, 0x2000) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'pim6reg0\x00', 0x7a13}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xb}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20040011) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004021) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004021) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22000400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22000400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x800}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}}, 0x8811) r9 = accept4(r0, &(0x7f0000000840)=@in={0x2, 0x0, @initdev}, &(0x7f00000008c0)=0x80, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) sendmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000a40)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="9696d2da5ec104d86253b3efff3153c97632d417108493d971c54f95de748964e76b578f4f8bdaefcd068495e4bf61c75495b649ff8505514dcb73716b3a", 0x3e}, {&(0x7f0000000b00)="60d2e9fa7a2a310bee310dd4c0f262faf8e02f84c20388d2c8de69fd115571e1690f9c96f76296a7697fa54dc86c060ba86fb4d08722dccdde04283bb7a6a64e9e6f690ae7297cd75640614543a8a89a11e041b69440d022b73fb1a02bdff9ae3e4a6c31b7f803f0e917348e1d9c2664dad78709f53d0fcd9b57ae98d2", 0x7d}, {&(0x7f0000000b80)="5c15d143be3dda1201a6991afb5017f796accb643b26021384dda0edfb730376f8c3a921d4b60b095f207e5c78c4032dd33f64ccdb8d42a3bedcde2893e1211c65c20f9d28eb235fea4fee26853a645c5c54516848ddb05e0bf38cc98cca7f909ed62d9c960c5eb67fd1abe3b50f9e61b375c461fde4c83809d225eb35befd7988bf659f4ce6bb355a31164a6a48d2f9037064a85b77f2400d497450e5684d02f19aa6ed4d80887972d2342fcbbade53ae96775481ccb5ac71b4f929c16f96f46c2e5401c238249813bd4e891f83787386a3", 0xd2}], 0x3}}, {{&(0x7f0000000cc0)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d40)="a0f74cd781685e", 0x7}, {&(0x7f0000000d80)="f89653d3d253fe31e4ae785b13a2168d986309f06ad6f9304633a757136e3c2ae7963f2f17841dcf84d691f313235df2b87de753f0639e870a251ae98158", 0x3e}, {&(0x7f0000000dc0)="11c5fde4d6f19171af2a29c9bc64b8fba126891661b8d3fef6c4acbefb50337d2cea0b2d11809b0e3f9268bbaa8189e7ad71446d8da4b6bb086f892c12fe6dd8a019", 0x42}, {&(0x7f0000000e40)='l', 0x1}, {&(0x7f0000000e80)="008c7aac41", 0x5}], 0x5, &(0x7f0000000f40)=[{0x80, 0x10c, 0x2, "1358572819bd5d06a9df69cbdece25ad34d946f3fd48a5a3afde7fd608ab2a8027f24ec807b0a9b830a24aaa3ee5022f7199bc300698b98b89c42cabb52eda061385ef0b842988dc2c01d8456f9e3523472019d70741dfc5989122f4973fc99044585328c8efa2e48aea70b094"}, {0xf0, 0x0, 0x91, "defb6de5b5369a37e0801bb5d41ab096b9756899511bd1d3eac47c8b2cdae7d8b195fd113a6bd1c335db9ca458a9c64d9fa2e8f33cdd13ed7242240ad02e622448b1c8197aa467399757bc6694746a8de9bdcea542b50286d0fdf7cd97273a2324a82c67737ab86bce2f5f29d4a8e547e386685fdddc259535711eeb3518de18aed4acd7e4e18ecf1e6a1d4e5c2de75522e53b6fa37741907243a7164042976b053bbe1d4617035d92e5397fc7d56f223f7d5504a54137dedd722073eb66b8579155bf6fa0e2e7f8a9a38e55f2ce7888024deb11557ac0c149"}, {0x60, 0x101, 0x1, "a918faac16872e624b572748139a83bd9b858d4a19beca255cf8bb5dc2dd990627e9649c99aa77d54c0d06cf56ce4a2ac2e7776fbfcff43e693ff39e290a3f1824936730fb79e4319b"}, {0x70, 0x10d, 0x7ff, "0d94cd2d3370b3cded97efc075a43bcac0b03aba5ea401b5227a967791d5b8095024f0207085df41861904014d99c870c2fae48e0cc73ebf40f42c03f8668ddcc8c1e7dd11289949e56b918d7ac75e7ea10bb42fb032fcb5093f45"}, {0x88, 0x10f, 0x6, "e543480ef6e432344f353de1a5c0d3004b6fa9eba14afdafafd2aede1ccde7f00b43fdc7f6395d732f6e49dd4a4bc08dffe7b9c3046dc56f2c5d933919d7285b26d4f80063533a67c28e191971fade7fd53db017f1e218cfc52e865c7a2cabf1fad62692708b68c605b43c6786d2d605b1ebff0c"}, {0xa8, 0x10d, 0x2, "827900589ced8bf5aedb7967f21b1f9f014fafb759b6ae511450ec737b24fa0234e0b190ce2e3b48af355dbdd017fa9d3d9d2bd28f5aa342ea129480191e7ddfb0905f4cad2c0d98896bdac43b211c98b6efb3551d1e6db3353f861068f39ff0553e05666eca2ac3b764654087d77638ecce5fcd6a8db4d0c0c516845e13564566d158c000694742a1f13cfa33df722d06dd9b26"}], 0x370}}, {{&(0x7f00000012c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001340)="bd77681aa1dd3e46", 0x8}, {&(0x7f0000001380)="5327842f56163a98c4a3bbfb3680d96c17958e6fdc52a6fdfc7bfd57673355427cf6dd3cd2f7b2a953005cc0883a21164143ecd50e292fd223c16b96f9f481611d16a4e77431aafde492ae88fabd3cbe087d54ccf777cf10117fd9e430713c7e2192e16e8a55d35dafd4d6cffc48fcc4c945a44bf8c8b106cc3580779c439ac3379485f17c361e1947f912d49256782dd9d83744c515372bf44dbac05ea287e8744b2ada5246c31cebdd8dc7d519b8d94a26d8cf1346bc4d1ae69866dbe572d9058b0aa643a35c5f263757859198b13aa563cfdb8ed5", 0xd6}], 0x2, &(0x7f00000014c0)=[{0xa8, 0x101, 0xfffff058, "b87397679111ad801320f9470adfe8c0afa899011e677f1f39fbaf887d1c01240544e262c51b57ca291f399215bdd0de981666af6f2be7b3d62120d4d4cbdf60524830526316db18988a8bedc16e0647e7e635a61c93888690c02ce436d2bed9028002de387deaffc45ee40ddd45e7611947c1dcf94988bc2377cc82c19166a42ca34b98b00d8c98117722f535a9f2186176c846d0ad"}, {0xa0, 0x103, 0x7, "29b0ac238d3e71eaca04115a423cd256af80e5aa9807642ce65f0f30ee2e0d614a29382e643b177df7c42a33ef344e129ab8062fc834d7794c7587866cfd6b9f2f3784d9560a6cdb396cbc3711d197a7d56db54262b0acd8e301fbae1e2f15e84287157c9993a63f790a1f49f616a351fd0341564dcf9cabd6e8fa60fc072d63ddd8872ecf73bf2a50ed8de3"}], 0x148}}], 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r12 = accept4(r11, 0x0, &(0x7f0000001700), 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000001780), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000017c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000017c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001800)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001840)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r13, &(0x7f0000001940)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, r14, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) sendmsg$NFC_CMD_DISABLE_SE(r13, &(0x7f0000001940)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, r14, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) setsockopt$inet_int(r12, 0x0, 0xe, &(0x7f0000001980)=0x9, 0x4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r13, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c800) 2.113699761s ago: executing program 2 (id=3108): socket(0x9, 0x4, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x5, [0x9, 0x0, 0x1, 0x2, 0xd, 0x3, 0xf, 0xd, 0x4, 0xf, 0x10, 0xf, 0x4, 0x10, 0xc, 0xe], 0x1, [0xc44c, 0x7fff, 0x4, 0xa004, 0x2, 0x0, 0x2b, 0x9, 0x3, 0x3, 0x9, 0x7, 0x5, 0x51, 0x6, 0x2], [0xfff, 0x7a3, 0x5, 0x1, 0x6, 0x1, 0x5, 0x5ac, 0x401, 0x7, 0x40, 0xf, 0x6, 0x8, 0x0, 0xe8]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="0c002380060001000300000037791af307a2faf52dc7cba35483"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) 1.830490061s ago: executing program 3 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x10, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x2) socket$inet6(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x17) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200"], 0x44}}, 0x48000) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000380), 0x1ec53fbbd902d8, 0x4840) r7 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a69b7db764d53a2621505f4cd39c4529975061e0477c3a3ba6870e299559e44fa1b47c0efe52806460c58a0ec6", @ANYRES8=r7], 0x11a0}, 0x1, 0x0, 0x0, 0x8048}, 0x20048895) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xa, 0x12, r9, 0xd7057000) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r8, &(0x7f00000002c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x0, 0x0, 0x0) close(0x4) 1.795324212s ago: executing program 2 (id=3112): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fadbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="1c002d8005000100080000020500040000fcffffff000200feffffff"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4f24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba", 0x2}], 0x1}}], 0x2, 0x400c404) 1.665099125s ago: executing program 4 (id=3114): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @loopback}}]}}]}, 0x48}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d336f580e0567c5c18037afcfbcba1b342c0c93d2d375834374b5eab9d4e3c46b414da17bdafee9e3ed0aa87524328ac91fcc6b72820b0120d44f2ae526588489feb6dd77703c0ad423d4f109505eae599edd513c274f9286adbf277d9bf0afc7ec36cf6d993454e131da91798a04975ebd443edd4a31de6ff9e4f8ffe85aa3e14", @ANYRES16=r2, @ANYBLOB="358e29bd7000fedbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x7fff, 0x0, 0x81, 0x8, 0xd40}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r6, 0xc252d000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffff, 0x2ffffffff}, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r9, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x75, 0x0, &(0x7f0000000080)) 1.438926744s ago: executing program 4 (id=3115): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x18, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x2, 0x0, 0x0, @local, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @timestamp_addr={0x44, 0x44, 0x6b, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x40}}, {@local, 0x4}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x81}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8000}, {@loopback, 0x22e}, {@loopback, 0x10001}, {@multicast2, 0xa}]}]}}}}}}}, 0x0) 1.251781454s ago: executing program 4 (id=3117): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x651}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7655}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x107e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffbd06}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe9be}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb5c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x408, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000001, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x200, @private0, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb64}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3e2}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x168a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x581e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe0c}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff36}]}]}, @TIPC_NLA_SOCK={0xd0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7c95}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x665d19a8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x39c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f18}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbb1c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000a80)=0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000ac0)={r5, 0x1ff, 0x2, [0x4, 0x7]}, &(0x7f0000000b00)=0xc) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x26000040}, 0x10) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x453, 0x1, 0x70bd29, 0x25dfdbff, "358591d5902efc59ce0bc008c3ac3c1ff2a67dedca177fce8ae5a5f75f7cc5cfabaefce1af2bba367b1558f18b", ["", "", "", "", ""]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x880) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000d40)={r5, 0x81}, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000d80), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048841}, 0x20004000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000f40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000f80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xb8, r7, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x80, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001140), r8) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r11, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc850}, 0x40880) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r12, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x88, r7, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6d}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001580)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xffe0, 0x2}, {0x5}, {0x3, 0xe}}, ["", "", "", ""]}, 0x24}}, 0x4010) accept4$unix(r4, 0x0, &(0x7f0000001680), 0x80800) 1.250174182s ago: executing program 1 (id=3118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}, 0x1, 0x620b}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) sendto$inet6(r6, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}, 0x1, 0x620b}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) (async) sendto$inet6(r6, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) (async) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) (async) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) (async) 1.087831399s ago: executing program 1 (id=3119): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001e0000008000a0000000000080017"], 0x3c}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x281}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)={0x5c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_a, @broadcast, @initial, {0x7, 0x4}}, 0x400, 0x1, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x1, 0x4, 0x3ff, 0x8, 0x2, 0xe]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 858.360174ms ago: executing program 4 (id=3120): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000090a010400000000000000000000000d20000000090a010400000000000000000a0000090900020073797a320000000034000000140a03000000000000000000030000070900010073797a30000000000c0006400000000000000002080003400000000318000000120a"], 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 740.39252ms ago: executing program 3 (id=3121): socket(0x9, 0x4, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) r8 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000100)=0x617, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'nr0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r10, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x150, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xa1}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x758}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4801}, 0x84) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r12, @ANYBLOB="0c002380060001000300000037791af307a2faf52dc7cba35483"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) 688.550477ms ago: executing program 2 (id=3122): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48011042}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x40804) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010800}, 0x1) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c4, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffff53c3}, {0x6, 0x11, 0x70d2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0xff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x8}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80010}, 0x4008080) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x138}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1a}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf68, 0x47}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x48851) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f00000008c0)={0x260, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x2}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000bc0), r0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000cc0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d80)={'erspan0\x00', &(0x7f0000000d00)={'syztnl1\x00', 0x0, 0x7800, 0x41, 0x10000, 0x7, {{0xb, 0x4, 0x1, 0x25, 0x2c, 0x67, 0x0, 0xb, 0x4, 0x0, @private=0xa010100, @empty, {[@rr={0x7, 0x17, 0xdc, [@broadcast, @local, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000dc0)={'batadv_slave_1\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000e00)={@empty, @remote, 0x0}, &(0x7f0000000e40)=0xc) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ec0)=0x14) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000f00)={@loopback, @initdev, 0x0}, &(0x7f0000000f40)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001000)={'ip6_vti0\x00', &(0x7f0000000f80)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0x2a, 0x7ff, 0x2c, @loopback, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1, 0x8000, 0x3}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001200)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x148, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x24004015}, 0x40081) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x28, r14, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x83}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) accept4(r0, &(0x7f0000001380)=@nl=@unspec, &(0x7f0000001400)=0x80, 0x0) (async) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xc0, r15, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040840) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r16, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r17, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) 612.4154ms ago: executing program 1 (id=3123): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000ae4", @ANYRES32=r2], 0x48}}, 0x0) 502.982991ms ago: executing program 2 (id=3124): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffff, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x0, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x0) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000002c0)={@mcast1, 0x0}, &(0x7f0000000300)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @broadcast}, @private0, @loopback, 0x4, 0x5, 0x8, 0x480, 0x7fffffff, 0x42, r6}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000003c0)={0x1, 'ip_vti0\x00', {}, 0x8}) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 499.34026ms ago: executing program 4 (id=3125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x8, 0x0, 0x0) (async) setsockopt$inet6_mreq(r2, 0x29, 0x8, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f00000003c0), 0x4) (async) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f00000003c0), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r9, 0xff08, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@dev, {@in6=@remote, @in=@remote}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x100, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0xfffffffc}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x100, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0xfffffffc}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000020000103000000000000000002f5ff00000000001a0000000c000c40000000000000000356edfc3165fbcb57c764004498a352f3a534bcea4f1d1a48a5bc87a9cae9a6e04d2a634ffac9af9d71192a77c809afcfa8bf6373dd41c62f7c3dfc91a674eb1eb52c91d92e55dfd7fc0f67cb811aa11921b15e81d90d1e83d1"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r12) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r13, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 462.232943ms ago: executing program 3 (id=3126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000003c0)={0x0, 0x1, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYRES16=r3, @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="6ab6b1644641e5acff130998436d19811748f80b7feed1dbf3127149f83e93c3a01a420d34c07d3840a190b02c738a7f10999162276f5cced6", @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x1) shutdown(r6, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000001c0)=""/104, &(0x7f0000000240)=0x68) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xe0, "5e4d896713565d0f45269bbd543c1d4f3b853c0c8d9024f9ca1ab9ecf8969cd05454443d0ce0004964488ce15bd7c684b9c70c56d16215c517861de53ded4dc0b77b5f2c0fbca68c6d166157904945ad5a5e4cf5dcfa6c48129a141a9811a178c4d67dcc374753c1556c14f3d13aee3b61b946f23668d72a4f2d1c66b98240e6198d4c544cc612a1719dce9143d8fb2c54cfcbd5c98dcc4d9630d5c110ded50aef86182a00c3db67b1eea66da77a07da30266d238c8c5d353890bb25b0131e281d10804650775486f3151f0f08b933d8dd531867591ca756fb1cc8b520c87344"}, &(0x7f0000000140)=0xe8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={r8, 0x9}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x107, 0x7, 0x5, r8}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000007c0)={r4, 0x10001, 0xeed3}) 435.580622ms ago: executing program 1 (id=3127): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x5) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) listen(r2, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {r2, 0x1008}], 0x2, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4094, 0xffe}, {&(0x7f0000002280)=""/4095, 0xfff}, {&(0x7f0000001140)=""/161, 0xa1}], 0x3}, 0x40000020) 348.530472ms ago: executing program 4 (id=3128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x5, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)="b24fae3c89f98095b28733dd98c4e42d4927f49cf23384e3f10576fc61b7362d4d4a444d1c72b32aaa2f1babb830ff7ee53cb1ed50472a28cb621dbbe6b7f3240754a2d522ae177355c8f00740ea9a1a2228adc89b83d94dd59484e409904564876d1a774bd2fcc1fd57de28938f5d41123f415ac84023b0540795f3d6c8ce419be84b7d0b1f0c0178cc82c97b8714044a68f5806ca12f1610bd6e5f083417b71a9d810187a2a2a43942b848483764d42acd8d030379161105db9a4058b27454800c9d", 0xc3}, {&(0x7f0000000240)="84", 0x1}, {&(0x7f0000000280)="e0a02044c79d8a59de6652b91095ec83e7911912f256e0cc2dee1908d2263bbe1143ddc43beb70e3016e9b8d7655f971ed323a184fa95fd5", 0x38}, {&(0x7f00000002c0)="edd9c1330a30f2f9f37ceda75ee95d27f08a4dac7e203dfadcaa4527ce307c9d8d12", 0x22}], 0x5, &(0x7f0000000380)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x200, 0x0, 0xfffff60c}}], 0x20, 0x24004040}, 0x8800) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000b80)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket(0x14, 0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) write$tun(r3, &(0x7f0000000480)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x13}}}}}, 0x32) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r6, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000013c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f0000000e40)={0x20, r2, 0x101, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x8800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 313.908952ms ago: executing program 3 (id=3129): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="0d000000010001", 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x10, 0x7, 0x0, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x67, 0x0, 0xf7, 0x4, 0x0, @local, @broadcast, {[@end, @ssrr={0x89, 0x1b, 0x2d, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @loopback, @remote]}, @timestamp_prespec={0x44, 0xc, 0x3d, 0x3, 0x9, [{@multicast1, 0x9}]}]}}}}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r2, @rand_addr=0x64010100, @rand_addr=0x64010100}, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000640)={0x88, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8a}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x88}}, 0x20000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800003270864e03778447000600000000000000cc07000018110000182f759c7bdd1ee3b94fc3426030e660fcb90c8bfa44e9ac9879183cc7c28a369a52b126431d15818b8c57c7c1874581011f6176681ec78fa991ed1c407cc2fca4c6a624ab18b48b12a7bec0cdec90bf147ac3e187180fe4adcd212995daaf9145a6f14e2ea04ff2a1d6a4878511746d1be0839becd8acddb593151382a67bfc851c2c6aaacd22d74f6088884d926706fa37cda3bc1d527bdcd7ce91fdc14836853060810fd87185ce873d3a1a044ca89d96f8cd0f3cb2762d8fb44d3900a42b0e5e16a334d2622ca786f25bf5b9f3f4c882235cc8e515193287e28ed067f7d62976d755657fb2f9ad0aa4deaca38ec8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000fa8a0000000000000900000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000809400010000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', r2}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000600), r7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f0000000340)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) 213.352667ms ago: executing program 1 (id=3130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a80)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000340)=""/155, &(0x7f00000001c0)=0x9b) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="000e00"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="61a000fe00000000691086000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) 0s ago: executing program 1 (id=3131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x18, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): L|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 225.770086][T10674] CPU: 1 UID: 0 PID: 10674 Comm: syz.3.1393 Not tainted syzkaller #0 PREEMPT(full) [ 225.770119][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 225.770130][T10674] Call Trace: [ 225.770137][T10674] [ 225.770145][T10674] dump_stack_lvl+0xe8/0x150 [ 225.770173][T10674] warn_alloc+0x249/0x340 [ 225.770193][T10674] ? stack_trace_save+0xa9/0x100 [ 225.770216][T10674] ? __pfx_warn_alloc+0x10/0x10 [ 225.770240][T10674] ? kasan_save_track+0x4f/0x80 [ 225.770255][T10674] ? kasan_save_track+0x3e/0x80 [ 225.770269][T10674] ? __kasan_kmalloc+0x93/0xb0 [ 225.770284][T10674] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 225.770300][T10674] ? xskq_create+0x56/0x170 [ 225.770315][T10674] ? xsk_setsockopt+0x54c/0x990 [ 225.770335][T10674] ? do_sock_setsockopt+0x17c/0x1b0 [ 225.770353][T10674] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 225.770371][T10674] ? do_syscall_64+0xe2/0xf80 [ 225.770391][T10674] __vmalloc_node_range_noprof+0x132/0x1730 [ 225.770438][T10674] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.770462][T10674] ? __kasan_kmalloc+0x93/0xb0 [ 225.770482][T10674] vmalloc_user_noprof+0xad/0xe0 [ 225.770498][T10674] ? xskq_create+0xbf/0x170 [ 225.770516][T10674] xskq_create+0xbf/0x170 [ 225.770534][T10674] xsk_init_queue+0xad/0x110 [ 225.770558][T10674] xsk_setsockopt+0x54c/0x990 [ 225.770581][T10674] ? __pfx_xsk_setsockopt+0x10/0x10 [ 225.770602][T10674] ? __pfx_aa_sk_perm+0x10/0x10 [ 225.770623][T10674] ? aa_sock_opt_perm+0xff/0x1a0 [ 225.770644][T10674] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 225.770661][T10674] ? __pfx_xsk_setsockopt+0x10/0x10 [ 225.770684][T10674] do_sock_setsockopt+0x17c/0x1b0 [ 225.770708][T10674] __x64_sys_setsockopt+0x13d/0x1b0 [ 225.770733][T10674] do_syscall_64+0xe2/0xf80 [ 225.770750][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.770766][T10674] ? trace_irq_disable+0x37/0x100 [ 225.770782][T10674] ? clear_bhb_loop+0x60/0xb0 [ 225.770802][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.770817][T10674] RIP: 0033:0x7f929a19af79 [ 225.770834][T10674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.770849][T10674] RSP: 002b:00007f929b026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.770867][T10674] RAX: ffffffffffffffda RBX: 00007f929a415fa0 RCX: 00007f929a19af79 [ 225.770879][T10674] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 225.770888][T10674] RBP: 00007f929a2316e0 R08: 0000000000000004 R09: 0000000000000000 [ 225.770897][T10674] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.770907][T10674] R13: 00007f929a416038 R14: 00007f929a415fa0 R15: 00007fff55b62898 [ 225.770935][T10674] [ 225.770954][T10674] Mem-Info: [ 226.047976][T10674] active_anon:5803 inactive_anon:6 isolated_anon:0 [ 226.047976][T10674] active_file:2757 inactive_file:40337 isolated_file:0 [ 226.047976][T10674] unevictable:768 dirty:173 writeback:0 [ 226.047976][T10674] slab_reclaimable:10982 slab_unreclaimable:118689 [ 226.047976][T10674] mapped:29282 shmem:1353 pagetables:1243 [ 226.047976][T10674] sec_pagetables:0 bounce:0 [ 226.047976][T10674] kernel_misc_reclaimable:0 [ 226.047976][T10674] free:1306384 free_pcp:13732 free_cma:0 [ 226.099026][T10674] Node 0 active_anon:23212kB inactive_anon:24kB active_file:11028kB inactive_file:161140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117028kB dirty:692kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12456kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 226.135310][T10674] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 226.175942][T10674] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.224703][T10674] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 226.231012][T10674] Node 0 DMA32 free:1334956kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23112kB inactive_anon:24kB active_file:11028kB inactive_file:161140kB unevictable:1536kB writepending:692kB zspages:0kB present:3129332kB managed:2554120kB mlocked:0kB bounce:0kB free_pcp:33856kB local_pcp:15268kB free_cma:0kB [ 226.265859][T10674] lowmem_reserve[]: 0 0 1 1 1 [ 226.271583][T10674] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.352008][T10674] lowmem_reserve[]: 0 0 0 0 0 [ 226.365535][T10674] Node 1 Normal free:3875348kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22180kB local_pcp:7872kB free_cma:0kB [ 226.442269][T10674] lowmem_reserve[]: 0 0 0 0 0 [ 226.476161][T10674] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.532279][T10674] Node 0 DMA32: 2508*4kB (UME) 1971*8kB (UME) 1111*16kB (UME) 1674*32kB (UME) 375*64kB (UM) 166*128kB (UME) 31*256kB (UE) 6*512kB (UE) 17*1024kB (UME) 16*2048kB (UME) 276*4096kB (UM) = 1334072kB [ 226.553600][T10674] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 226.567278][T10674] Node 1 Normal: 181*4kB (U) 52*8kB (UME) 44*16kB (UME) 91*32kB (UME) 16*64kB (UME) 7*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 942*4096kB (M) = 3875348kB [ 226.595463][T10674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.608647][T10674] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.632510][T10674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.643551][T10674] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.653180][T10674] 44443 total pagecache pages [ 226.658436][T10674] 0 pages in swap cache [ 226.662692][T10674] Free swap = 124996kB [ 226.680016][T10674] Total swap = 124996kB [ 226.684276][T10674] 2097051 pages RAM [ 226.688601][T10674] 0 pages HighMem/MovableOnly [ 226.693391][T10674] 426623 pages reserved [ 226.709885][T10716] syzkaller0: entered promiscuous mode [ 226.724872][T10716] syzkaller0: entered allmulticast mode [ 226.736510][T10674] 0 pages cma reserved [ 226.832466][T10722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.182137][T10741] netlink: 'syz.2.1412': attribute type 24 has an invalid length. [ 227.416586][T10749] raw_sendmsg: syz.2.1415 forgot to set AF_INET. Fix it! [ 227.457160][T10752] block nbd0: Unsupported socket: should be TCP or UNIX. [ 227.489594][T10749] block nbd1: Unsupported socket: should be TCP or UNIX. [ 227.687390][T10768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.761051][T10774] netlink: 'syz.1.1421': attribute type 2 has an invalid length. [ 227.790436][T10774] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 227.810322][T10774] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 227.845055][T10774] netlink: 'syz.1.1421': attribute type 2 has an invalid length. [ 227.895787][T10774] netlink: 'syz.1.1421': attribute type 2 has an invalid length. [ 227.903535][T10774] __nla_validate_parse: 6 callbacks suppressed [ 227.903547][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1421'. [ 227.977164][T10781] tipc: Started in network mode [ 227.982071][T10781] tipc: Node identity bed95d4d2c17, cluster identity 4711 [ 228.018961][T10781] tipc: Enabled bearer , priority 0 [ 228.062363][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'. [ 228.086340][T10781] +: renamed from syzkaller0 [ 228.105951][T10781] tipc: Disabling bearer [ 228.193400][T10801] PKCS7: Unknown OID: [4] (bad) [ 228.198803][T10801] PKCS7: Only support pkcs7_signedData type [ 228.205886][T10801] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 228.257544][T10803] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1431'. [ 228.270929][T10807] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1429'. [ 228.326975][T10811] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1432'. [ 228.689850][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1443'. [ 228.706946][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 228.777994][T10844] netlink: 'syz.4.1444': attribute type 11 has an invalid length. [ 228.788958][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 228.809351][T10844] netlink: 'syz.4.1444': attribute type 11 has an invalid length. [ 228.824656][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 228.829197][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 229.012517][T10834] infiniband : set down [ 229.043658][T10834] infiniband : added ipvlan0 [ 229.129849][T10834] RDS/IB: : added [ 229.146479][T10834] smc: adding ib device  with port count 1 [ 229.182987][T10834] smc: ib device  port 1 has no pnetid [ 229.697501][T10894] syzkaller0: entered promiscuous mode [ 229.703333][T10894] syzkaller0: entered allmulticast mode [ 230.476578][T10934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.813708][T10941] x_tables: duplicate underflow at hook 1 [ 231.973585][T10958] netlink: 'syz.1.1477': attribute type 24 has an invalid length. [ 232.025031][T10954] can: request_module (can-proto-0) failed. [ 232.059699][T10961] netlink: 'syz.2.1479': attribute type 4 has an invalid length. [ 232.079518][T10961] netlink: 'syz.2.1479': attribute type 39 has an invalid length. [ 232.470417][T10985] pim6reg527: entered allmulticast mode [ 232.505640][T10988] netlink: 'syz.2.1488': attribute type 1 has an invalid length. [ 232.611636][T10988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.818058][T10996] bond5 (unregistering): Released all slaves [ 232.849446][T11007] netlink: 'syz.0.1492': attribute type 3 has an invalid length. [ 233.033955][T11028] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 233.174077][T11041] nft_compat: unsupported protocol 0 [ 233.332088][T11050] __nla_validate_parse: 18 callbacks suppressed [ 233.332106][T11050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1506'. [ 233.349386][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 233.358619][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1506'. [ 233.395803][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 233.573544][T11069] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 233.700247][T11083] netlink: 'syz.0.1515': attribute type 16 has an invalid length. [ 233.710427][T11083] netlink: 'syz.0.1515': attribute type 17 has an invalid length. [ 233.753358][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'. [ 233.791323][T11083] bridge0: port 2(.) entered disabled state [ 233.797903][T11083] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.860318][T11083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.875628][T11083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.937871][T11083] veth0_macvtap: left allmulticast mode [ 233.954825][ T9060] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.975021][ T9060] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.998477][ T9060] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.023049][ T9060] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.038427][ T9060] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.054472][T11099] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1521'. [ 234.067912][ T9060] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.100409][ T9060] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.124636][ T9060] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.184307][T11114] Cannot find add_set index 0 as target [ 234.192897][T11113] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1524'. [ 234.226743][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 234.227750][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1526'. [ 234.236853][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 234.479958][T11142] netlink: 'syz.0.1532': attribute type 8 has an invalid length. [ 234.805230][T11161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.841850][T11167] netlink: 'syz.1.1542': attribute type 4 has an invalid length. [ 234.877633][T11167] netlink: 'syz.1.1542': attribute type 4 has an invalid length. [ 234.899960][T11172] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 234.945727][T11172] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 234.956113][T11172] bond8: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 234.969068][T11172] bond8: (slave vxcan1): making interface the new active one [ 234.977825][T11172] bond8: (slave vxcan1): Enslaving as an active interface with an up link [ 235.204988][T11190] syzkaller1: entered promiscuous mode [ 235.217818][T11190] syzkaller1: entered allmulticast mode [ 235.310175][T11196] netlink: 'syz.4.1553': attribute type 1 has an invalid length. [ 235.373998][T11205] netlink: 'syz.2.1552': attribute type 4 has an invalid length. [ 235.390023][ T5899] IPVS: starting estimator thread 0... [ 235.400979][T11206] syzkaller1: entered promiscuous mode [ 235.411110][T11206] syzkaller1: entered allmulticast mode [ 235.437212][T11209] netlink: 'syz.1.1557': attribute type 9 has an invalid length. [ 235.481587][T11211] syzkaller0: entered promiscuous mode [ 235.487858][T11211] syzkaller0: entered allmulticast mode [ 235.515981][T11207] IPVS: using max 36 ests per chain, 86400 per kthread [ 235.850361][T11230] bridge0: port 4(ipvlan3) entered blocking state [ 235.857464][T11230] bridge0: port 4(ipvlan3) entered disabled state [ 235.864129][T11230] ipvlan3: entered allmulticast mode [ 235.869726][T11230] bridge0: entered allmulticast mode [ 235.877956][T11230] ipvlan3: left allmulticast mode [ 235.883046][T11230] bridge0: left allmulticast mode [ 236.499248][T11272] block nbd0: Unsupported socket: should be TCP or UNIX. [ 236.810521][T11298] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 236.828892][T11298] batadv2: entered promiscuous mode [ 236.834312][T11298] batadv2: entered allmulticast mode [ 236.847870][T11298] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 236.857446][T11298] team0: Failed to send options change via netlink (err -105) [ 236.865767][T11298] team0: Port device batadv2 added [ 236.994153][T11315] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 237.311116][ T36] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 237.320909][ T36] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 237.633607][T11361] vlan0: entered allmulticast mode [ 237.661058][T11362] vlan0: entered allmulticast mode [ 237.691452][T11365] dummy0: left allmulticast mode [ 237.699085][T11365] dummy0: left promiscuous mode [ 237.704261][T11365] bridge0: port 3(dummy0) entered disabled state [ 237.715565][T11365] bridge_slave_0: left allmulticast mode [ 237.721344][T11365] bridge_slave_0: left promiscuous mode [ 237.727516][T11365] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.738896][T11365] bridge_slave_1: left allmulticast mode [ 237.745458][T11365] bridge_slave_1: left promiscuous mode [ 237.751224][T11365] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.776153][T11371] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 237.794679][T11365] bond0: (slave bond_slave_0): Releasing backup interface [ 237.805597][T11365] bond0: (slave bond_slave_1): Releasing backup interface [ 237.814486][T11365] team0: Port device team_slave_0 removed [ 237.828204][T11365] team0: Port device team_slave_1 removed [ 237.835306][T11365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.843466][T11365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.076406][T11380] macvtap1: entered promiscuous mode [ 238.081920][T11380] macvtap1: entered allmulticast mode [ 238.115913][T11380] veth1_vlan: entered allmulticast mode [ 238.343098][T11403] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 238.398621][T11412] __nla_validate_parse: 20 callbacks suppressed [ 238.398640][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 238.410167][T11406] syzkaller1: entered promiscuous mode [ 238.453369][T11406] syzkaller1: entered allmulticast mode [ 238.490587][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 238.554361][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 238.598569][T11423] xfrm1: entered promiscuous mode [ 238.614969][T11423] xfrm1: entered allmulticast mode [ 238.690536][T11431] netlink: 'syz.1.1624': attribute type 21 has an invalid length. [ 238.698972][T11431] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.899510][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 238.909659][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 239.166631][T11465] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1634'. [ 239.200641][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 239.361613][T11485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1639'. [ 239.423531][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 239.443752][T11488] syzkaller0: entered promiscuous mode [ 239.462991][T11491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.464918][T11488] syzkaller0: entered allmulticast mode [ 239.575093][T11502] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1645'. [ 239.648493][T11507] openvswitch: netlink: IP tunnel dst address not specified [ 239.806972][T11518] netlink: 'syz.2.1651': attribute type 8 has an invalid length. [ 239.875073][T11528] SET target dimension over the limit! [ 239.988922][T11540] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 240.218551][T11560] syzkaller0: entered promiscuous mode [ 240.224304][T11560] syzkaller0: entered allmulticast mode [ 240.471207][T11580] bridge0: port 3(team0) entered disabled state [ 240.477900][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.485644][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.517005][T11580] bond_slave_0: left promiscuous mode [ 240.645544][T11580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.659768][T11580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.679045][T11590] netlink: get zone limit has 8 unknown bytes [ 240.774947][ T148] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.784986][ T148] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.805006][ T148] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.852374][ T148] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.021109][T11600] bond5: entered promiscuous mode [ 241.031083][T11600] bond5: entered allmulticast mode [ 241.056937][T11600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.077656][T11612] xt_policy: too many policy elements [ 241.192290][T11617] x_tables: duplicate underflow at hook 1 [ 241.275068][T11629] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 241.289387][T11625] tipc: Cannot configure node identity twice [ 241.300475][T11625] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 241.840805][T11666] xt_CT: No such helper "syz1" [ 241.857521][T11673] xt_connbytes: Forcing CT accounting to be enabled [ 241.867523][T11668] xt_CT: No such helper "syz1" [ 241.950250][T11680] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 242.057197][T11685] bond2: option miimon: invalid value (18446744073709551585) [ 242.064943][T11685] bond2: option miimon: allowed values 0 - 2147483647 [ 242.093318][T11685] bond2 (unregistering): Released all slaves [ 242.192757][T11689] tipc: Enabled bearer , priority 0 [ 242.203969][T11689] syzkaller0: entered promiscuous mode [ 242.214249][T11689] syzkaller0: entered allmulticast mode [ 242.320698][T11689] tipc: Resetting bearer [ 242.350681][T11688] tipc: Resetting bearer [ 242.356814][T11702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.397230][T11688] tipc: Disabling bearer [ 242.751311][T11735] netlink: 'syz.1.1714': attribute type 21 has an invalid length. [ 242.817143][T11735] syzkaller0: entered promiscuous mode [ 242.823548][T11735] syzkaller0: entered allmulticast mode [ 243.373151][T11779] netlink: 'syz.2.1727': attribute type 6 has an invalid length. [ 243.382614][T11779] openvswitch: netlink: Missing key (keys=40, expected=80) [ 243.605491][T11794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.631460][T11794] pimreg3: entered allmulticast mode [ 243.657859][T11798] __nla_validate_parse: 26 callbacks suppressed [ 243.657875][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1731'. [ 243.682755][T11800] netlink: 'syz.3.1733': attribute type 13 has an invalid length. [ 243.702145][T11800] macvtap0: entered allmulticast mode [ 243.715332][T11800] macvtap0: refused to change device tx_queue_len [ 243.752477][T11805] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 243.754630][T11806] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 243.764623][T11808] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1733'. [ 243.771355][T11806] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 243.782822][T11805] netlink: 'syz.0.1734': attribute type 2 has an invalid length. [ 243.794177][T11808] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1733'. [ 243.807198][T11810] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1734'. [ 243.809876][T11805] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 243.820530][T11801] sctp: [Deprecated]: syz.4.1732 (pid 11801) Use of int in max_burst socket option. [ 243.820530][T11801] Use struct sctp_assoc_value instead [ 243.826671][T11808] netlink: 'syz.3.1733': attribute type 5 has an invalid length. [ 243.848197][T11805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1734'. [ 243.874414][T11808] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1733'. [ 243.895565][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1735'. [ 244.066351][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1739'. [ 244.105996][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 244.194059][T11838] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 244.206064][T11832] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1740'. [ 244.423827][T11858] erspan0: entered promiscuous mode [ 244.429444][T11858] erspan0: entered allmulticast mode [ 244.623995][T11873] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 244.760384][T11884] syzkaller0: entered promiscuous mode [ 244.769352][T11884] syzkaller0: entered allmulticast mode [ 244.903185][T11893] IPVS: Error connecting to the multicast addr [ 245.258355][T11916] bridge0: port 1(syz_tun) entered disabled state [ 245.400034][T11927] openvswitch: netlink: Missing valid actions attribute. [ 245.411208][T11927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.493434][T11929] syzkaller0: entered promiscuous mode [ 245.501107][T11929] syzkaller0: entered allmulticast mode [ 245.501192][T11931] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 245.797878][T11953] tipc: Enabled bearer , priority 0 [ 245.813063][T11953] syzkaller0: entered promiscuous mode [ 245.819646][T11953] syzkaller0: entered allmulticast mode [ 245.850893][T11953] tipc: Resetting bearer [ 246.018150][T11949] tipc: Resetting bearer [ 246.036969][T11949] tipc: Disabling bearer [ 246.158748][T11981] tipc: Cannot configure node identity twice [ 246.209054][T11985] syzkaller0: entered promiscuous mode [ 246.214734][T11985] syzkaller0: entered allmulticast mode [ 246.333166][T11988] bridge0: port 1(batadv4) entered blocking state [ 246.340056][T11988] bridge0: port 1(batadv4) entered disabled state [ 246.347499][T11988] batadv4: entered allmulticast mode [ 246.360435][T11988] batadv4: entered promiscuous mode [ 246.380258][T11992] netlink: 'syz.2.1797': attribute type 4 has an invalid length. [ 246.452380][T11997] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 246.463074][T11997] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 246.471730][T11997] netlink: 'syz.2.1799': attribute type 8 has an invalid length. [ 246.824663][ T36] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 246.833936][ T36] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 246.885174][T12026] IPVS: Unknown mcast interface: vxcan1 [ 247.046682][T12038] bridge0: port 3(batadv1) entered blocking state [ 247.053245][T12038] bridge0: port 3(batadv1) entered disabled state [ 247.060556][T12038] batadv1: entered allmulticast mode [ 247.074765][T12038] batadv1: entered promiscuous mode [ 247.561060][ T148] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 247.570778][ T148] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 247.629833][T12047] syzkaller0: entered promiscuous mode [ 247.636032][T12047] syzkaller0: entered allmulticast mode [ 247.654378][T12063] sctp: [Deprecated]: syz.4.1811 (pid 12063) Use of int in maxseg socket option. [ 247.654378][T12063] Use struct sctp_assoc_value instead [ 248.950976][T12070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.045064][T12076] netlink: 'syz.0.1815': attribute type 10 has an invalid length. [ 249.060937][T12076] syz_tun: entered allmulticast mode [ 249.071195][T12079] __nla_validate_parse: 34 callbacks suppressed [ 249.071212][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1816'. [ 249.083280][T12076] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 249.116480][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1814'. [ 249.145441][T12084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1814'. [ 249.170394][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1814'. [ 249.179597][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1814'. [ 249.224808][T12092] nbd: must specify a size in bytes for the device [ 249.232849][T12093] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1820'. [ 249.236148][T12089] : entered promiscuous mode [ 249.349808][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1823'. [ 249.370413][T12107] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 249.394304][T12104] TCP: TCP_TX_DELAY enabled [ 249.465149][T12109] nbd0: detected capacity change from 0 to 127 [ 249.478447][ T5829] block nbd0: Receive control failed (result -104) [ 249.487239][T12113] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:56552 [ 249.512677][T12113] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 249.527662][T12113] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 249.559058][T12117] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1828'. [ 249.660593][T12122] netlink: 'syz.3.1830': attribute type 9 has an invalid length. [ 249.681008][T12122] netlink: 'syz.3.1830': attribute type 6 has an invalid length. [ 249.852335][T12140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1834'. [ 249.949047][T12143] syzkaller1: entered promiscuous mode [ 249.971041][T12143] syzkaller1: entered allmulticast mode [ 249.977644][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 249.999481][T12151] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 250.009982][T12149] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 250.113875][T12157] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 250.255624][T12170] netlink: 'syz.4.1845': attribute type 1 has an invalid length. [ 250.338864][T12170] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.351745][T12170] bond6: (slave bond7): making interface the new active one [ 250.360315][T12170] bond6: (slave bond7): Enslaving as an active interface with an up link [ 250.390167][T12176] bond6: (slave gretap4): Enslaving as a backup interface with an up link [ 250.443823][T12174] syzkaller0: entered promiscuous mode [ 250.450376][T12174] syzkaller0: entered allmulticast mode [ 250.462926][T12170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 250.610320][T12186] netlink: 'syz.0.1849': attribute type 10 has an invalid length. [ 250.706868][T12188] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 251.953143][T12199] syz_tun: entered allmulticast mode [ 251.960795][T12197] syz_tun: left allmulticast mode [ 252.779964][T12249] syzkaller1: entered promiscuous mode [ 252.788669][T12249] syzkaller1: entered allmulticast mode [ 253.258478][T12268] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 253.345143][T12280] netlink: 'syz.2.1878': attribute type 1 has an invalid length. [ 253.955269][T12292] gre0: entered promiscuous mode [ 253.960275][T12292] gre0: entered allmulticast mode [ 254.085819][T12304] __nla_validate_parse: 15 callbacks suppressed [ 254.085838][T12304] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1886'. [ 254.263498][T12312] syzkaller0: entered promiscuous mode [ 254.272582][T12312] syzkaller0: entered allmulticast mode [ 254.284274][T12311] batman_adv: batadv0: Adding interface: dummy0 [ 254.291392][T12311] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.317194][T12311] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 254.339898][T12316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1887'. [ 254.457748][T12308] xt_CT: No such helper "snmp_trap" [ 254.565536][T12326] syzkaller1: entered promiscuous mode [ 254.571227][T12326] syzkaller1: entered allmulticast mode [ 254.589467][T12332] netlink: 'syz.3.1895': attribute type 10 has an invalid length. [ 254.598911][T12332] bridge0: port 2(team0) entered blocking state [ 254.609357][T12332] bridge0: port 2(team0) entered disabled state [ 254.618296][T12332] team0: entered allmulticast mode [ 254.623553][T12332] batadv1: entered allmulticast mode [ 254.637931][T12332] batadv3: entered allmulticast mode [ 254.665049][T12332] team0: entered promiscuous mode [ 254.670560][T12332] batadv1: entered promiscuous mode [ 254.684804][T12332] batadv3: entered promiscuous mode [ 254.698108][T12344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1896'. [ 254.787054][ T36] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 254.796470][ T36] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 254.894760][T12354] xt_bpf: check failed: parse error [ 254.924934][ T3465] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 254.934207][ T3465] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 255.043024][T12374] netlink: 'syz.2.1905': attribute type 2 has an invalid length. [ 255.059105][T12374] netlink: 'syz.2.1905': attribute type 1 has an invalid length. [ 255.287631][T12390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1910'. [ 255.297769][T12390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1910'. [ 255.309090][T12390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1910'. [ 255.320076][T12390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1910'. [ 255.343967][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 255.523627][T12404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'. [ 255.523703][T12400] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1914'. [ 255.564083][T12404] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.602945][T12404] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.612281][T12404] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 255.623659][T12404] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 255.768930][T12417] netlink: zone id is out of range [ 255.774342][T12416] netlink: zone id is out of range [ 255.783806][T12417] netlink: get zone limit has 4 unknown bytes [ 255.792075][T12416] netlink: get zone limit has 4 unknown bytes [ 255.845969][T12424] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 255.914911][T12422] syzkaller0: entered promiscuous mode [ 255.930674][T12422] syzkaller0: entered allmulticast mode [ 256.074004][T12434] netlink: 'syz.4.1926': attribute type 1 has an invalid length. [ 256.114946][T12434] bond8: entered promiscuous mode [ 256.120125][T12434] bond8: entered allmulticast mode [ 256.126582][T12434] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.148057][T12434] macvlan6: entered promiscuous mode [ 256.153389][T12434] macvlan6: entered allmulticast mode [ 256.191656][T12434] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 256.216586][T12444] netlink: 'syz.0.1929': attribute type 6 has an invalid length. [ 256.380113][T12456] netlink: 'syz.2.1934': attribute type 1 has an invalid length. [ 256.544877][T12465] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.567462][T12465] bond6: (slave bond7): making interface the new active one [ 256.583891][T12465] bond6: (slave bond7): Enslaving as an active interface with an up link [ 256.644367][T12456] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 256.657444][T12465] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.681956][T12478] syzkaller0: entered promiscuous mode [ 256.687717][T12478] syzkaller0: entered allmulticast mode [ 257.017782][T12506] macsec3: entered promiscuous mode [ 257.524921][T12538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.557385][T12538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.690449][T12549] bridge0: port 3(batadv7) entered blocking state [ 257.701596][T12549] bridge0: port 3(batadv7) entered disabled state [ 257.720921][T12549] batadv7: entered allmulticast mode [ 257.728249][T12549] batadv7: entered promiscuous mode [ 257.769344][T12545] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 258.184756][ T148] batman_adv: batadv7: IGMP Querier appeared [ 258.190919][ T148] batman_adv: batadv7: MLD Querier appeared [ 258.227451][T12569] netlink: 'syz.1.1969': attribute type 9 has an invalid length. [ 258.332290][T12578] team0: Refused to change device type [ 258.422799][T12587] batadv1: left allmulticast mode [ 258.428390][T12587] batadv1: left promiscuous mode [ 258.433807][T12587] bridge0: port 3(batadv1) entered disabled state [ 258.445818][T12587] .: left allmulticast mode [ 258.450507][T12587] .: left promiscuous mode [ 258.457355][T12587] bridge0: port 2(.) entered disabled state [ 258.486802][T12587] bridge_slave_0: left promiscuous mode [ 258.508360][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.835591][T12601] netem: unknown loss type 0 [ 258.849602][T12601] netem: change failed [ 259.140682][T12620] __nla_validate_parse: 24 callbacks suppressed [ 259.140701][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1984'. [ 259.218183][T12622] syzkaller0: entered promiscuous mode [ 259.244605][T12622] syzkaller0: entered allmulticast mode [ 259.334176][T12628] tipc: Started in network mode [ 259.354147][T12628] tipc: Node identity 66d13fc0e5a2, cluster identity 4711 [ 259.366714][T12628] tipc: Enabled bearer , priority 0 [ 259.399074][T12614] tipc: Resetting bearer [ 259.485979][T12614] tipc: Disabling bearer [ 259.545405][T12637] bond2: ARP target 1.0.0.0 is already present [ 259.551611][T12637] bond2: option arp_ip_target: invalid value (1) [ 259.570512][T12637] bond2 (unregistering): Released all slaves [ 259.608830][T12627] netlink: 'syz.1.1986': attribute type 2 has an invalid length. [ 259.901996][T12662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.928987][T12663] gtp1: entered promiscuous mode [ 259.944237][T12663] gtp1: entered allmulticast mode [ 260.160339][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1997'. [ 260.223487][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1997'. [ 260.326331][T12682] netlink: 'syz.1.2000': attribute type 4 has an invalid length. [ 260.476972][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 260.851230][T12712] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2012'. [ 260.887204][T12712] gre0: left promiscuous mode [ 260.895617][T12712] gre0: left allmulticast mode [ 261.007616][T12725] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 261.062659][T12728] netlink: 'syz.1.2017': attribute type 4 has an invalid length. [ 261.130405][T12724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.139323][T12724] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.157122][T12724] batman_adv: batadv0: Interface activated: dummy0 [ 261.167244][T12724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.204301][T12724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.215331][T12724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.232292][T12724] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 261.267533][T12715] macvtap1: entered allmulticast mode [ 261.273089][T12715] veth0_macvtap: entered allmulticast mode [ 261.655175][T12759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2025'. [ 261.735434][T12759] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 261.779809][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2025'. [ 261.819546][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2025'. [ 261.832453][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2025'. [ 262.028202][T12781] Unsupported ieee802154 address type: 0 [ 262.091685][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 262.120669][T12781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.203240][T12781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.710206][ T5492] veth0_macvtap: entered promiscuous mode [ 263.996916][T12841] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:16 [ 264.446834][T12877] __nla_validate_parse: 2 callbacks suppressed [ 264.446853][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2052'. [ 264.565125][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2052'. [ 265.103979][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'. [ 265.136832][T12914] bridge0: port 2(batadv5) entered blocking state [ 265.143600][T12914] bridge0: port 2(batadv5) entered disabled state [ 265.151264][T12914] batadv5: entered allmulticast mode [ 265.159581][T12914] batadv5: entered promiscuous mode [ 265.237886][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 265.285648][T12924] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 265.396332][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 265.417245][T12935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2066'. [ 265.602797][T12946] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 265.611979][T12949] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 265.624631][ T1162] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 265.633918][ T1162] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 265.698441][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2073'. [ 265.713754][T12955] bridge0: port 3(batadv6) entered blocking state [ 265.720662][T12955] bridge0: port 3(batadv6) entered disabled state [ 265.721243][T12957] xt_l2tp: invalid flags combination: 8 [ 265.727964][T12955] batadv6: entered allmulticast mode [ 265.729569][T12955] batadv6: entered promiscuous mode [ 265.797818][T12959] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2074'. [ 265.890233][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2077'. [ 266.086835][T12976] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2078'. [ 266.172167][T12975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.214699][ T1162] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 266.224103][ T1162] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 266.297722][T12975] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.350201][ T5909] IPVS: starting estimator thread 0... [ 266.445476][T12987] IPVS: using max 29 ests per chain, 69600 per kthread [ 266.601865][T13003] syzkaller0: entered promiscuous mode [ 266.609660][T13003] syzkaller0: entered allmulticast mode [ 268.050822][T13020] gre1: entered promiscuous mode [ 268.059238][T13020] gre1: entered allmulticast mode [ 268.220165][T13048] bond8: option all_slaves_active: invalid value (222) [ 268.233398][T13048] bond8 (unregistering): Released all slaves [ 268.445828][T13060] syzkaller0: entered promiscuous mode [ 268.451334][T13060] syzkaller0: entered allmulticast mode [ 268.741819][T13090] tipc: Failed to remove unknown binding: 66,0,0/0:3532164164/3532164165 [ 268.768213][T13090] tipc: Failed to remove unknown binding: 66,0,0/0:3532164164/3532164165 [ 269.128652][T13109] IPVS: set_ctl: invalid protocol: 102 172.20.20.187:20004 [ 269.343121][T13126] netlink: 'syz.4.2127': attribute type 32 has an invalid length. [ 269.386374][T13127] macvtap2: entered promiscuous mode [ 269.391677][T13127] vlan0: entered promiscuous mode [ 269.397628][T13127] macvtap2: entered allmulticast mode [ 269.403022][T13127] vlan0: entered allmulticast mode [ 269.408669][T13127] veth0_vlan: entered allmulticast mode [ 269.437789][T13126] bond9: Setting coupled_control to off (0) [ 269.490088][T13145] __nla_validate_parse: 12 callbacks suppressed [ 269.490105][T13145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2131'. [ 269.511121][T13142] tipc: Enabling of bearer rejected, failed to enable media [ 269.619479][T13155] netlink: 'syz.0.2133': attribute type 1 has an invalid length. [ 269.646303][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 269.667392][T13161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2135'. [ 269.675764][T13155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.680044][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2135'. [ 269.720281][T13162] bond2: (slave ip6gretap1): making interface the new active one [ 269.775759][T13162] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 269.819822][T13157] netlink: 'syz.1.2134': attribute type 4 has an invalid length. [ 269.832965][T13155] veth3: entered promiscuous mode [ 269.842406][T13155] bond2: (slave veth3): Enslaving as an active interface with a down link [ 269.937810][T13155] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 269.997606][T13176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2138'. [ 270.010315][T13176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2138'. [ 270.019862][T13176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2138'. [ 270.029956][T13176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2138'. [ 270.282124][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 270.427126][T13192] syzkaller1: entered promiscuous mode [ 270.432836][T13192] syzkaller1: entered allmulticast mode [ 270.441844][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 270.452376][T13192] netlink: 'syz.0.2144': attribute type 7 has an invalid length. [ 270.466439][T13192] netlink: 'syz.0.2144': attribute type 13 has an invalid length. [ 270.868183][T13180] lec:lec_atm_close: lec0: Shut down! [ 271.039060][T13219] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 271.260858][T13226] tipc: Enabled bearer , priority 0 [ 271.307159][ T10] lec:lec_start_xmit: lec0:No lecd attached [ 271.315280][T13226] syzkaller0: entered promiscuous mode [ 271.320952][T13226] syzkaller0: entered allmulticast mode [ 271.398738][T13239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.406111][T13239] IPv6: NLM_F_CREATE should be set when creating new route [ 271.413466][T13239] IPv6: NLM_F_CREATE should be set when creating new route [ 271.420749][T13239] IPv6: NLM_F_CREATE should be set when creating new route [ 271.447413][T13239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.569307][T13252] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 271.578408][T13252] bond5: option packets_per_slave: allowed values 0 - 65535 [ 271.592983][T13252] bond5 (unregistering): Released all slaves [ 271.784803][T13269] netlink: 'syz.4.2162': attribute type 2 has an invalid length. [ 271.938086][T13272] netlink: 'syz.1.2163': attribute type 1 has an invalid length. [ 271.959024][T13223] tipc: Resetting bearer [ 271.994071][T13223] tipc: Disabling bearer [ 272.061770][T13272] bond1: entered promiscuous mode [ 272.169415][T13272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.319786][T13288] bond1: (slave bridge0): making interface the new active one [ 272.357696][T13288] bridge0: entered promiscuous mode [ 272.379365][T13288] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 272.472224][T13312] syzkaller0: entered promiscuous mode [ 272.484642][T13312] syzkaller0: entered allmulticast mode [ 272.708254][T13328] sit0: entered promiscuous mode [ 272.734758][T13328] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 273.555533][T13389] netlink: 'syz.0.2190': attribute type 5 has an invalid length. [ 273.587813][T13394] netlink: 'syz.3.2191': attribute type 11 has an invalid length. [ 273.625715][T13394] syz_tun: left allmulticast mode [ 273.641129][T13394] syz_tun: left promiscuous mode [ 273.654764][T13394] bridge0: port 1(syz_tun) entered disabled state [ 273.725682][T13403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.822574][T13394] team0: left allmulticast mode [ 273.847491][T13394] batadv1: left allmulticast mode [ 273.852576][T13394] batadv3: left allmulticast mode [ 273.861207][T13394] team0: left promiscuous mode [ 273.866441][T13394] batadv1: left promiscuous mode [ 273.871725][T13394] batadv3: left promiscuous mode [ 273.878402][T13394] bridge0: port 2(team0) entered disabled state [ 273.897884][T13394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 273.943917][T13401] bridge9: entered promiscuous mode [ 273.951111][T13401] bridge9: entered allmulticast mode [ 273.960668][T13401] team0: Port device bridge9 added [ 274.129235][T13421] netlink: 'syz.4.2199': attribute type 2 has an invalid length. [ 274.269621][T13437] netlink: 'syz.0.2203': attribute type 1 has an invalid length. [ 274.429494][T13437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.461918][T13442] bond3: (slave veth5): Enslaving as an active interface with a down link [ 274.542384][T13457] set match dimension is over the limit! [ 274.543605][T13442] vlan0: entered allmulticast mode [ 274.553834][T13442] veth1: entered allmulticast mode [ 274.560506][T13456] __nla_validate_parse: 28 callbacks suppressed [ 274.560524][T13456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2206'. [ 274.702026][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 274.735869][T13468] xt_cgroup: path and classid specified [ 274.742083][T13468] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2210'. [ 274.917509][T13483] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 274.928561][T13484] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 275.025890][T13495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2214'. [ 275.058678][T13498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2215'. [ 275.090915][T13504] xt_hashlimit: size too large, truncated to 1048576 [ 275.706308][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 275.947961][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 275.962408][T13534] netlink: 'syz.0.2223': attribute type 4 has an invalid length. [ 276.008848][T13565] netlink: 'syz.3.2231': attribute type 4 has an invalid length. [ 276.062251][T13565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 276.075307][T13569] netlink: 'syz.1.2232': attribute type 11 has an invalid length. [ 276.413129][T13592] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2236'. [ 276.704517][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 276.712871][ C1] lec:lec_tx_timeout: lec0 [ 276.718865][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.741799][T13602] sit2: entered promiscuous mode [ 276.766170][T13604] sctp: [Deprecated]: syz.4.2242 (pid 13604) Use of int in max_burst socket option. [ 276.766170][T13604] Use struct sctp_assoc_value instead [ 276.770392][T13606] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2243'. [ 276.781087][T13602] sit2: entered allmulticast mode [ 277.693276][T13642] team0: Device gtp0 is up. Set it down before adding it as a team port [ 277.978265][T13654] netlink: 'syz.1.2254': attribute type 1 has an invalid length. [ 278.017091][T13660] netlink: 'syz.2.2257': attribute type 33 has an invalid length. [ 278.082256][T13660] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 278.188843][T13679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2254'. [ 278.202421][T13664] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.228682][T13664] bond5: (slave bond6): making interface the new active one [ 278.239574][T13664] bond5: (slave bond6): Enslaving as an active interface with an up link [ 278.302091][T13654] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 278.314035][T13679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.817705][T13720] netlink: 'syz.2.2271': attribute type 10 has an invalid length. [ 278.847325][T13720] dummy0: entered promiscuous mode [ 278.853993][T13720] team0: Port device dummy0 added [ 279.083735][T13746] netlink: 'syz.2.2278': attribute type 1 has an invalid length. [ 279.091783][T13746] netlink: 'syz.2.2278': attribute type 1 has an invalid length. [ 279.353521][T13756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.630043][T13768] __nla_validate_parse: 9 callbacks suppressed [ 279.630061][T13768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2281'. [ 279.654809][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 279.663941][T13768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2281'. [ 279.673400][T13768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2281'. [ 279.791990][T13774] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2288'. [ 279.914324][ T25] block nbd0: Possible stuck request ffff888025808000: control (read@0,1024B). Runtime 30 seconds [ 279.927394][ T25] block nbd0: Possible stuck request ffff888025808200: control (read@1024,1024B). Runtime 30 seconds [ 279.938787][ T25] block nbd0: Possible stuck request ffff888025808400: control (read@2048,1024B). Runtime 30 seconds [ 279.949911][ T25] block nbd0: Possible stuck request ffff888025808600: control (read@3072,1024B). Runtime 30 seconds [ 280.083560][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 280.159185][T13797] xt_hashlimit: max too large, truncated to 1048576 [ 280.353478][T13807] netlink: 'syz.0.2294': attribute type 10 has an invalid length. [ 280.412214][T13807] bond0: (slave team0): Releasing backup interface [ 280.463424][T13807] team0: left allmulticast mode [ 280.483629][T13807] team_slave_1: left allmulticast mode [ 280.608777][T13816] syzkaller0: entered promiscuous mode [ 280.620074][T13816] syzkaller0: entered allmulticast mode [ 280.674952][T13816] tipc: Enabled bearer , priority 0 [ 280.817083][T13816] tipc: Resetting bearer [ 280.848423][T13816] tipc: Disabling bearer [ 280.893149][T13829] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 280.983695][T13838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2308'. [ 281.006593][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2307'. [ 281.080110][T13848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2310'. [ 281.123259][T13848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2310'. [ 281.526086][T13885] tipc: Cannot configure node identity twice [ 281.533768][T13885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.727413][T13895] tipc: Enabling of bearer rejected, failed to enable media [ 281.744556][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 281.753076][ C1] lec:lec_tx_timeout: lec0 [ 281.758132][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 282.480926][T13935] veth11: entered allmulticast mode [ 282.650512][T13946] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 282.728922][T13952] vcan0: entered promiscuous mode [ 282.744031][T13952] vcan0: entered allmulticast mode [ 283.912752][T14021] macvtap2: entered allmulticast mode [ 283.928623][T14021] veth0_macvtap: entered allmulticast mode [ 284.263779][T14042] macsec1: entered promiscuous mode [ 284.290626][T14042] macsec1: entered allmulticast mode [ 284.307095][T14042] bridge0: entered allmulticast mode [ 284.339127][T14042] bridge0: port 4(macsec1) entered blocking state [ 284.367268][T14042] bridge0: port 4(macsec1) entered disabled state [ 284.401942][T14042] bridge0: left allmulticast mode [ 284.457779][ T30] audit: type=1800 audit(1770638333.102:2): pid=14052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2367" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2426 res=0 errno=0 [ 284.669180][T14068] __nla_validate_parse: 13 callbacks suppressed [ 284.669209][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 284.697018][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 284.893333][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 284.980373][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2378'. [ 285.098065][T14102] netlink: 'syz.1.2383': attribute type 3 has an invalid length. [ 285.099672][T14089] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2378'. [ 285.123090][T14102] netlink: 'syz.1.2383': attribute type 10 has an invalid length. [ 285.146241][T14102] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2383'. [ 285.222900][T14108] netlink: 'syz.2.2385': attribute type 29 has an invalid length. [ 285.247653][T14108] netlink: 'syz.2.2385': attribute type 29 has an invalid length. [ 285.262321][T14109] netlink: 'syz.2.2385': attribute type 29 has an invalid length. [ 285.328628][T14108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2385'. [ 285.384413][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'. [ 285.405344][T14118] netlink: 'syz.0.2387': attribute type 1 has an invalid length. [ 285.417550][T14118] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2387'. [ 285.529863][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'. [ 285.887677][T14152] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 286.329341][T14189] x_tables: unsorted entry at hook 1 [ 286.764531][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 286.772621][ C1] lec:lec_tx_timeout: lec0 [ 286.778113][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 287.020622][T14237] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 288.586310][T14270] netlink: 'syz.3.2428': attribute type 25 has an invalid length. [ 288.616458][ T43] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.625829][T14270] netlink: 'syz.3.2428': attribute type 25 has an invalid length. [ 288.648563][ T43] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.714716][ T43] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.724113][T14270] syzkaller1: entered promiscuous mode [ 288.770703][T14270] syzkaller1: entered allmulticast mode [ 288.798171][ T1162] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.690745][ T9060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.716058][ T9060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.796714][ T9060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.843340][T14353] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 289.892182][ T9060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.979311][T14367] syzkaller0: entered allmulticast mode [ 290.105107][T14379] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 290.125038][T14379] __nla_validate_parse: 11 callbacks suppressed [ 290.125057][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2453'. [ 290.166519][T14386] xt_time: unknown flags 0xf4 [ 290.184305][T14386] netlink: 'syz.3.2455': attribute type 13 has an invalid length. [ 290.271736][T14376] sit0: left promiscuous mode [ 290.278281][T14376] bond1: left promiscuous mode [ 290.283338][T14376] gretap2: left promiscuous mode [ 290.290797][T14376] vlan3: left promiscuous mode [ 290.303939][T14376] bridge0: left promiscuous mode [ 290.328798][T14376] bond5: left promiscuous mode [ 290.373173][T14376] bond8: left promiscuous mode [ 290.391050][T14376] veth0_macvtap: left allmulticast mode [ 290.397160][T14376] veth0_macvtap: left promiscuous mode [ 290.414187][T14376] gre1: left promiscuous mode [ 290.428164][T14376] vlan0: left allmulticast mode [ 290.433054][T14376] veth0_vlan: left allmulticast mode [ 290.440545][T14376] vlan0: left promiscuous mode [ 290.447795][T14376] macvtap2: left promiscuous mode [ 290.466738][T14387] FAULT_INJECTION: forcing a failure. [ 290.466738][T14387] name failslab, interval 1, probability 0, space 0, times 0 [ 290.482934][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2453'. [ 290.493023][T14392] batadv_slave_0: Caught tx_queue_len zero misconfig [ 290.501412][T14387] CPU: 1 UID: 0 PID: 14387 Comm: syz.0.2454 Not tainted syzkaller #0 PREEMPT(full) [ 290.501428][T14387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 290.501446][T14387] Call Trace: [ 290.501451][T14387] [ 290.501456][T14387] dump_stack_lvl+0xe8/0x150 [ 290.501473][T14387] should_fail_ex+0x412/0x560 [ 290.501489][T14387] should_failslab+0xa8/0x100 [ 290.501502][T14387] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 290.501519][T14387] ? __alloc_skb+0x1d7/0x390 [ 290.501531][T14387] ? __local_bh_enable_ip+0xd0/0x130 [ 290.501541][T14387] ? __alloc_skb+0x193/0x390 [ 290.501553][T14387] __alloc_skb+0x1d7/0x390 [ 290.501566][T14387] netlink_ack+0x146/0xa50 [ 290.501576][T14387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.501590][T14387] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 290.501604][T14387] ? __pfx_nl80211_post_doit+0x10/0x10 [ 290.501618][T14387] ? __pfx_ref_tracker_free+0x10/0x10 [ 290.501635][T14387] netlink_rcv_skb+0x2b6/0x4b0 [ 290.501645][T14387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.501659][T14387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.501667][T14387] ? genl_rcv+0x19/0x40 [ 290.501688][T14387] ? down_read+0x272/0x2e0 [ 290.501699][T14387] ? genl_rcv+0xd/0x40 [ 290.501712][T14387] genl_rcv+0x28/0x40 [ 290.501723][T14387] netlink_unicast+0x80f/0x9b0 [ 290.501742][T14387] ? __pfx_netlink_unicast+0x10/0x10 [ 290.501756][T14387] ? __alloc_skb+0x193/0x390 [ 290.501768][T14387] ? netlink_sendmsg+0x650/0xb40 [ 290.501777][T14387] ? skb_put+0x11b/0x210 [ 290.501790][T14387] netlink_sendmsg+0x813/0xb40 [ 290.501812][T14387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.501825][T14387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 290.501843][T14387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.501855][T14387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.501864][T14387] ____sys_sendmsg+0xa68/0xad0 [ 290.501877][T14387] ? __might_fault+0xaf/0x130 [ 290.501895][T14387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.501912][T14387] ? import_iovec+0x73/0xa0 [ 290.501929][T14387] ___sys_sendmsg+0x2a5/0x360 [ 290.501941][T14387] ? __lock_acquire+0x6b5/0x2cf0 [ 290.501958][T14387] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.501989][T14387] ? __fget_files+0x2a/0x420 [ 290.501999][T14387] ? __fget_files+0x3a0/0x420 [ 290.502015][T14387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 290.502030][T14387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.502048][T14387] ? __pfx_ksys_write+0x10/0x10 [ 290.502069][T14387] do_syscall_64+0xe2/0xf80 [ 290.502079][T14387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.502088][T14387] ? trace_irq_disable+0x37/0x100 [ 290.502098][T14387] ? clear_bhb_loop+0x60/0xb0 [ 290.502109][T14387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.502119][T14387] RIP: 0033:0x7f57eab9af79 [ 290.502130][T14387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.502138][T14387] RSP: 002b:00007f57eba0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.502150][T14387] RAX: ffffffffffffffda RBX: 00007f57eae15fa0 RCX: 00007f57eab9af79 [ 290.502157][T14387] RDX: 0000000026002894 RSI: 0000200000000180 RDI: 0000000000000003 [ 290.502163][T14387] RBP: 00007f57eba0c090 R08: 0000000000000000 R09: 0000000000000000 [ 290.502169][T14387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.502175][T14387] R13: 00007f57eae16038 R14: 00007f57eae15fa0 R15: 00007ffd9daa4048 [ 290.502190][T14387] [ 290.867055][ T1162] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 290.882344][ T1162] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 290.912656][ T1162] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 290.997112][ T1162] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 291.141555][T14416] netlink: 'syz.2.2460': attribute type 12 has an invalid length. [ 291.193453][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'. [ 291.264312][T14423] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2462'. [ 291.291659][T14423] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2462'. [ 291.318007][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'. [ 291.337506][T14416] netlink: 'syz.2.2460': attribute type 12 has an invalid length. [ 291.355487][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'. [ 291.761509][T14444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2468'. [ 291.765874][T14441] FAULT_INJECTION: forcing a failure. [ 291.765874][T14441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.784777][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 291.784838][ C1] lec:lec_tx_timeout: lec0 [ 291.797485][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 291.928931][T14441] CPU: 0 UID: 0 PID: 14441 Comm: syz.2.2467 Not tainted syzkaller #0 PREEMPT(full) [ 291.928959][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 291.928970][T14441] Call Trace: [ 291.928977][T14441] [ 291.928984][T14441] dump_stack_lvl+0xe8/0x150 [ 291.929011][T14441] should_fail_ex+0x412/0x560 [ 291.929037][T14441] _copy_to_user+0x31/0xb0 [ 291.929063][T14441] simple_read_from_buffer+0xe1/0x170 [ 291.929086][T14441] proc_fail_nth_read+0x1bb/0x230 [ 291.929112][T14441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.929138][T14441] ? rw_verify_area+0x2a6/0x4d0 [ 291.929159][T14441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.929183][T14441] vfs_read+0x20c/0xa70 [ 291.929204][T14441] ? fdget_pos+0x246/0x320 [ 291.929227][T14441] ? __pfx___mutex_lock+0x10/0x10 [ 291.929247][T14441] ? __pfx_vfs_read+0x10/0x10 [ 291.929271][T14441] ? __fget_files+0x2a/0x420 [ 291.929293][T14441] ? __fget_files+0x3a0/0x420 [ 291.929311][T14441] ? __fget_files+0x2a/0x420 [ 291.929336][T14441] ksys_read+0x150/0x270 [ 291.929359][T14441] ? __pfx_ksys_read+0x10/0x10 [ 291.929392][T14441] do_syscall_64+0xe2/0xf80 [ 291.929410][T14441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.929437][T14441] ? trace_irq_disable+0x37/0x100 [ 291.929453][T14441] ? clear_bhb_loop+0x60/0xb0 [ 291.929473][T14441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.929490][T14441] RIP: 0033:0x7efd4d55b84e [ 291.929507][T14441] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.929521][T14441] RSP: 002b:00007efd4e3fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.929541][T14441] RAX: ffffffffffffffda RBX: 00007efd4e3ff6c0 RCX: 00007efd4d55b84e [ 291.929554][T14441] RDX: 000000000000000f RSI: 00007efd4e3ff0a0 RDI: 0000000000000005 [ 291.929565][T14441] RBP: 00007efd4e3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 291.929575][T14441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.929586][T14441] R13: 00007efd4d816038 R14: 00007efd4d815fa0 R15: 00007fffd33c9528 [ 291.929615][T14441] [ 291.938828][T14450] ip6tnl0: Caught tx_queue_len zero misconfig [ 291.974139][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2470'. [ 292.102706][T14456] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2471'. [ 292.319335][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.344696][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.379100][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.417969][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.531981][T14505] bond11: Unable to set up delay as MII monitoring is disabled [ 293.622468][T14505] bond11 (unregistering): Released all slaves [ 293.953836][T14556] netlink: 'syz.2.2492': attribute type 2 has an invalid length. [ 294.110828][T14558] bond9 (unregistering): Released all slaves [ 294.162281][T14561] netlink: 'syz.4.2495': attribute type 29 has an invalid length. [ 294.171862][T14561] netlink: 'syz.4.2495': attribute type 29 has an invalid length. [ 294.486574][T14581] vNV_macvp: renamed from veth0_macvtap [ 294.511697][T14591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.870929][T14612] x9: renamed from bridge_slave_0 [ 295.359067][T14636] __nla_validate_parse: 16 callbacks suppressed [ 295.359087][T14636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2516'. [ 295.445424][T14641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2519'. [ 295.473878][T14643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2517'. [ 295.484263][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2517'. [ 295.493319][T14643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2517'. [ 295.517020][T14643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2517'. [ 295.532560][T14613] lec:lec_atm_close: lec0: Shut down! [ 295.598434][T14649] team0: left allmulticast mode [ 295.603568][T14649] team_slave_0: left allmulticast mode [ 295.620882][T14651] netlink: 'syz.2.2522': attribute type 5 has an invalid length. [ 295.638234][T14649] team_slave_1: left allmulticast mode [ 295.644735][T14649] batadv2: left allmulticast mode [ 295.650600][T14649] team0: left promiscuous mode [ 295.657823][T14649] team_slave_0: left promiscuous mode [ 295.665868][T14649] team_slave_1: left promiscuous mode [ 295.677891][T14649] bridge4: left promiscuous mode [ 295.685230][T14649] batadv2: left promiscuous mode [ 295.691696][T14649] bridge0: port 3(team0) entered disabled state [ 295.701910][T14649] bridge_slave_0: left allmulticast mode [ 295.708310][T14649] bridge_slave_0: left promiscuous mode [ 295.714230][T14649] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.724310][T14649] bridge_slave_1: left allmulticast mode [ 295.730807][T14649] bridge_slave_1: left promiscuous mode [ 295.737451][T14649] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.747963][T14658] xt_hashlimit: size too large, truncated to 1048576 [ 295.763114][T14649] bond0: (slave bond_slave_0): Releasing backup interface [ 295.774098][T14649] bond0: (slave bond_slave_1): Releasing backup interface [ 295.784433][T14649] team0: Port device team_slave_0 removed [ 295.793520][T14649] team0: Port device team_slave_1 removed [ 295.800949][T14649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.825628][T14649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.833459][T14649] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.851011][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2523'. [ 295.901978][T14664] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2527'. [ 295.911781][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2527'. [ 295.923776][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 296.056648][T14676] bridge0: port 1(batadv3) entered blocking state [ 296.099327][T14676] bridge0: port 1(batadv3) entered disabled state [ 296.113826][T14676] batadv3: entered allmulticast mode [ 296.121438][T14676] batadv3: entered promiscuous mode [ 296.178779][T14682] netlink: 'syz.0.2533': attribute type 2 has an invalid length. [ 296.193396][T14682] 9: entered promiscuous mode [ 296.473771][T14709] s5: renamed from vlan1 [ 296.528929][T14711] gretap3: entered promiscuous mode [ 296.534565][T14711] gretap3: entered allmulticast mode [ 296.554634][ T60] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 296.563936][ T60] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 296.640947][T14715] bridge0: port 1(batadv8) entered blocking state [ 296.647986][T14715] bridge0: port 1(batadv8) entered disabled state [ 296.663150][T14715] batadv8: entered allmulticast mode [ 296.684808][T14715] batadv8: entered promiscuous mode [ 296.794725][T14737] tipc: Enabled bearer , priority 0 [ 296.858811][T14737] syzkaller0: entered promiscuous mode [ 296.864945][T14737] syzkaller0: entered allmulticast mode [ 296.871180][T14737] tipc: Resetting bearer [ 296.873464][T14744] netlink: 'syz.3.2552': attribute type 4 has an invalid length. [ 296.908118][T14737] tipc: Resetting bearer [ 297.144842][ T3465] batman_adv: batadv8: IGMP Querier appeared [ 297.150973][ T3465] batman_adv: batadv8: MLD Querier appeared [ 298.413150][T14737] tipc: Disabling bearer [ 298.479931][ T5909] tipc: Node number set to 928837200 [ 298.563698][T14772] FAULT_INJECTION: forcing a failure. [ 298.563698][T14772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.604169][T14772] CPU: 1 UID: 0 PID: 14772 Comm: syz.2.2558 Not tainted syzkaller #0 PREEMPT(full) [ 298.604196][T14772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 298.604207][T14772] Call Trace: [ 298.604214][T14772] [ 298.604222][T14772] dump_stack_lvl+0xe8/0x150 [ 298.604249][T14772] should_fail_ex+0x412/0x560 [ 298.604274][T14772] _copy_from_iter+0x1d3/0x1670 [ 298.604297][T14772] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.604320][T14772] ? __pfx_policy_nodemask+0x10/0x10 [ 298.604343][T14772] ? __pfx__copy_from_iter+0x10/0x10 [ 298.604371][T14772] ? set_page_refcounted+0xa0/0x1e0 [ 298.604390][T14772] ? page_copy_sane+0x4e/0x270 [ 298.604413][T14772] copy_page_from_iter+0xdd/0x170 [ 298.604439][T14772] tun_get_user+0x1d4b/0x3dd0 [ 298.604456][T14772] ? tun_get_user+0x6ff/0x3dd0 [ 298.604489][T14772] ? aa_file_perm+0x440/0x1630 [ 298.604508][T14772] ? __pfx_tun_get_user+0x10/0x10 [ 298.604526][T14772] ? __lock_acquire+0x6b5/0x2cf0 [ 298.604559][T14772] ? ref_tracker_alloc+0x363/0x4d0 [ 298.604579][T14772] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 298.604598][T14772] ? tun_get+0x1c/0x2f0 [ 298.604614][T14772] ? tun_get+0x1c/0x2f0 [ 298.604634][T14772] ? tun_get+0x1c/0x2f0 [ 298.604647][T14772] ? tun_get+0x1c/0x2f0 [ 298.604667][T14772] tun_chr_write_iter+0x113/0x200 [ 298.604689][T14772] vfs_write+0x61d/0xb90 [ 298.604719][T14772] ? __pfx_vfs_write+0x10/0x10 [ 298.604752][T14772] ? __fget_files+0x2a/0x420 [ 298.604779][T14772] ksys_write+0x150/0x270 [ 298.604803][T14772] ? __pfx_ksys_write+0x10/0x10 [ 298.604836][T14772] do_syscall_64+0xe2/0xf80 [ 298.604854][T14772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.604870][T14772] ? trace_irq_disable+0x37/0x100 [ 298.604886][T14772] ? clear_bhb_loop+0x60/0xb0 [ 298.604906][T14772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.604923][T14772] RIP: 0033:0x7efd4d55b84e [ 298.604939][T14772] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.604953][T14772] RSP: 002b:00007efd4e3fefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.604972][T14772] RAX: ffffffffffffffda RBX: 00007efd4e3ff6c0 RCX: 00007efd4d55b84e [ 298.604985][T14772] RDX: 0000000000000066 RSI: 0000200000000180 RDI: 00000000000000c8 [ 298.604996][T14772] RBP: 00007efd4e3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 298.605007][T14772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.605017][T14772] R13: 00007efd4d816038 R14: 00007efd4d815fa0 R15: 00007fffd33c9528 [ 298.605047][T14772] [ 298.906080][T14778] syzkaller1: entered promiscuous mode [ 298.911583][T14778] syzkaller1: entered allmulticast mode [ 299.322507][T14804] netlink: 'syz.1.2567': attribute type 2 has an invalid length. [ 300.613338][T14817] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 300.627197][T14817] __nla_validate_parse: 14 callbacks suppressed [ 300.627213][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2573'. [ 300.651221][T14817] block nbd2: Unsupported socket: should be TCP or UNIX. [ 300.685794][T14817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2573'. [ 300.704654][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 300.712701][ C1] lec:lec_tx_timeout: lec0 [ 300.718159][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.264111][T14819] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2574'. [ 301.289759][T14819] lo: Caught tx_queue_len zero misconfig [ 301.304660][T14819] netem: invalid attributes len -24 [ 301.309893][T14819] netem: change failed [ 301.879582][T14822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2575'. [ 301.891433][T14822] tipc: Invalid UDP bearer configuration [ 301.891486][T14822] tipc: Enabling of bearer rejected, failed to enable media [ 301.958517][T14836] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 301.969623][T14836] bond0: (slave gre0): Error -95 calling set_mac_address [ 302.099266][T14836] bond0: (slave rose0): Enslaving as an active interface with an up link [ 302.128168][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2578'. [ 302.138631][T14842] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 302.159592][T14842] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 302.163771][T14844] netlink: 'syz.0.2578': attribute type 7 has an invalid length. [ 302.191514][T14844] netlink: 'syz.0.2578': attribute type 8 has an invalid length. [ 302.199832][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'. [ 302.348933][T14860] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 302.385736][T14861] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 302.473705][T14863] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2584'. [ 302.490742][T14863] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2584'. [ 302.688887][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 303.299517][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 303.357716][T14905] bridge0: port 2(batadv9) entered blocking state [ 303.366793][T14905] bridge0: port 2(batadv9) entered disabled state [ 303.373395][T14905] batadv9: entered allmulticast mode [ 303.388669][T14905] batadv9: entered promiscuous mode [ 303.560364][T14929] smc: removing ib device syz0 [ 303.567984][T14930] x_tables: duplicate entry at hook 2 [ 303.845533][ T1162] batman_adv: batadv9: IGMP Querier appeared [ 303.851548][ T1162] batman_adv: batadv9: MLD Querier appeared [ 303.873943][T14949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.263762][T14968] bridge0: port 2(batadv2) entered blocking state [ 304.285770][T14968] bridge0: port 2(batadv2) entered disabled state [ 304.319390][T14968] batadv2: entered allmulticast mode [ 304.354185][T14968] batadv2: entered promiscuous mode [ 304.617854][T14991] FAULT_INJECTION: forcing a failure. [ 304.617854][T14991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.684547][T14991] CPU: 1 UID: 0 PID: 14991 Comm: syz.2.2617 Not tainted syzkaller #0 PREEMPT(full) [ 304.684572][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 304.684582][T14991] Call Trace: [ 304.684589][T14991] [ 304.684596][T14991] dump_stack_lvl+0xe8/0x150 [ 304.684621][T14991] should_fail_ex+0x412/0x560 [ 304.684646][T14991] _copy_from_iter+0x1d3/0x1670 [ 304.684673][T14991] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 304.684698][T14991] ? __pfx__copy_from_iter+0x10/0x10 [ 304.684718][T14991] ? __build_skb_around+0x22d/0x3c0 [ 304.684739][T14991] ? __alloc_skb+0x193/0x390 [ 304.684757][T14991] ? netlink_sendmsg+0x650/0xb40 [ 304.684773][T14991] ? skb_put+0x11b/0x210 [ 304.684795][T14991] netlink_sendmsg+0x6c0/0xb40 [ 304.684822][T14991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.684844][T14991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 304.684864][T14991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.684883][T14991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.684896][T14991] ____sys_sendmsg+0xa68/0xad0 [ 304.684917][T14991] ? __might_fault+0xaf/0x130 [ 304.684945][T14991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.684972][T14991] ? import_iovec+0x73/0xa0 [ 304.684997][T14991] ___sys_sendmsg+0x2a5/0x360 [ 304.685016][T14991] ? __lock_acquire+0x6b5/0x2cf0 [ 304.685042][T14991] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.685097][T14991] ? __fget_files+0x2a/0x420 [ 304.685115][T14991] ? __fget_files+0x3a0/0x420 [ 304.685141][T14991] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.685174][T14991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.685204][T14991] ? __pfx_ksys_write+0x10/0x10 [ 304.685237][T14991] do_syscall_64+0xe2/0xf80 [ 304.685256][T14991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.685272][T14991] ? trace_irq_disable+0x37/0x100 [ 304.685288][T14991] ? clear_bhb_loop+0x60/0xb0 [ 304.685308][T14991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.685324][T14991] RIP: 0033:0x7efd4d59af79 [ 304.685338][T14991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.685351][T14991] RSP: 002b:00007efd4e3ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.685368][T14991] RAX: ffffffffffffffda RBX: 00007efd4d815fa0 RCX: 00007efd4d59af79 [ 304.685379][T14991] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000005 [ 304.685389][T14991] RBP: 00007efd4e3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 304.685398][T14991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.685408][T14991] R13: 00007efd4d816038 R14: 00007efd4d815fa0 R15: 00007fffd33c9528 [ 304.685435][T14991] [ 304.734623][ T1162] batman_adv: batadv2: IGMP Querier appeared [ 304.959193][ T1162] batman_adv: batadv2: MLD Querier appeared [ 305.462719][T15011] syzkaller0: entered promiscuous mode [ 305.469951][T15011] syzkaller0: entered allmulticast mode [ 305.743860][T15036] netlink: 'syz.3.2630': attribute type 27 has an invalid length. [ 305.754518][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 305.762530][ C1] lec:lec_tx_timeout: lec0 [ 305.772925][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 305.795210][T15037] __nla_validate_parse: 6 callbacks suppressed [ 305.795227][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2630'. [ 306.947141][T15026] tunl0: entered promiscuous mode [ 306.962539][T15026] netlink: 'syz.0.2627': attribute type 3 has an invalid length. [ 306.970906][T15026] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2627'. [ 307.005798][T15044] FAULT_INJECTION: forcing a failure. [ 307.005798][T15044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.022501][T15044] CPU: 1 UID: 0 PID: 15044 Comm: syz.1.2632 Not tainted syzkaller #0 PREEMPT(full) [ 307.022526][T15044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 307.022537][T15044] Call Trace: [ 307.022544][T15044] [ 307.022551][T15044] dump_stack_lvl+0xe8/0x150 [ 307.022578][T15044] should_fail_ex+0x412/0x560 [ 307.022604][T15044] _copy_from_iter+0x1d3/0x1670 [ 307.022631][T15044] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 307.022658][T15044] ? __pfx__copy_from_iter+0x10/0x10 [ 307.022680][T15044] ? __build_skb_around+0x22d/0x3c0 [ 307.022702][T15044] ? __alloc_skb+0x193/0x390 [ 307.022722][T15044] ? netlink_sendmsg+0x650/0xb40 [ 307.022738][T15044] ? skb_put+0x11b/0x210 [ 307.022761][T15044] netlink_sendmsg+0x6c0/0xb40 [ 307.022789][T15044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.022810][T15044] ? aa_sock_msg_perm+0xf1/0x1b0 [ 307.022832][T15044] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.022853][T15044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.022870][T15044] ____sys_sendmsg+0xa68/0xad0 [ 307.022891][T15044] ? __might_fault+0xaf/0x130 [ 307.022919][T15044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.022950][T15044] ? import_iovec+0x73/0xa0 [ 307.022976][T15044] ___sys_sendmsg+0x2a5/0x360 [ 307.022995][T15044] ? __lock_acquire+0x6b5/0x2cf0 [ 307.023022][T15044] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.023078][T15044] ? __fget_files+0x2a/0x420 [ 307.023094][T15044] ? __fget_files+0x3a0/0x420 [ 307.023122][T15044] __x64_sys_sendmsg+0x1bd/0x2a0 [ 307.023146][T15044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.023177][T15044] ? __pfx_ksys_write+0x10/0x10 [ 307.023211][T15044] do_syscall_64+0xe2/0xf80 [ 307.023236][T15044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.023252][T15044] ? trace_irq_disable+0x37/0x100 [ 307.023268][T15044] ? clear_bhb_loop+0x60/0xb0 [ 307.023289][T15044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.023304][T15044] RIP: 0033:0x7f3536d9af79 [ 307.023320][T15044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.023334][T15044] RSP: 002b:00007f3537cbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.023353][T15044] RAX: ffffffffffffffda RBX: 00007f3537015fa0 RCX: 00007f3536d9af79 [ 307.023366][T15044] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000005 [ 307.023378][T15044] RBP: 00007f3537cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 307.023389][T15044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.023400][T15044] R13: 00007f3537016038 R14: 00007f3537015fa0 R15: 00007ffc1326dbb8 [ 307.023429][T15044] [ 307.412031][T15053] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2636'. [ 307.606168][T15070] bridge0: entered allmulticast mode [ 307.612538][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 307.667516][T15073] team0: Device gtp0 is up. Set it down before adding it as a team port [ 307.692770][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 307.736689][T15079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2641'. [ 307.755305][T15079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2641'. [ 307.771757][T15079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2641'. [ 307.781183][T15079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2641'. [ 307.798000][T15086] netlink: 'syz.2.2647': attribute type 1 has an invalid length. [ 307.839642][T15086] bond9: (slave xfrm2): The slave device specified does not support setting the MAC address [ 307.850096][T15086] bond9: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 307.862439][T15086] bond9: (slave xfrm2): making interface the new active one [ 307.872404][T15086] bond9: (slave xfrm2): Enslaving as an active interface with an up link [ 307.889740][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2647'. [ 307.904355][T15086] bond9 (unregistering): (slave xfrm2): Releasing backup interface [ 307.918337][T15086] bond9 (unregistering): Released all slaves [ 308.114899][T15101] nbd: illegal input index 2958377 [ 308.680844][T15130] netlink: 'syz.1.2660': attribute type 3 has an invalid length. [ 308.695768][T15130] netlink: 'syz.1.2660': attribute type 1 has an invalid length. [ 309.026091][T15138] netlink: 'syz.0.2662': attribute type 1 has an invalid length. [ 309.489485][T15162] syzkaller0: entered promiscuous mode [ 309.496055][T15162] syzkaller0: entered allmulticast mode [ 309.987663][ T25] block nbd0: Possible stuck request ffff888025808000: control (read@0,1024B). Runtime 60 seconds [ 309.998501][ T25] block nbd0: Possible stuck request ffff888025808200: control (read@1024,1024B). Runtime 60 seconds [ 310.009474][ T25] block nbd0: Possible stuck request ffff888025808400: control (read@2048,1024B). Runtime 60 seconds [ 310.021314][ T25] block nbd0: Possible stuck request ffff888025808600: control (read@3072,1024B). Runtime 60 seconds [ 310.233156][T15201] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 310.239217][T15189] syzkaller0: entered promiscuous mode [ 310.245447][T15201] IPVS: ip_vs_edit_dest(): server weight less than zero [ 310.246728][T15189] syzkaller0: entered allmulticast mode [ 310.259364][ T798] IPVS: starting estimator thread 0... [ 310.377211][T15205] IPVS: using max 30 ests per chain, 72000 per kthread [ 311.924332][T15209] lec:lec_atm_close: lec0: Shut down! [ 312.349267][T15269] __nla_validate_parse: 14 callbacks suppressed [ 312.349286][T15269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2690'. [ 312.666657][T15287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2694'. [ 312.845091][T15294] syzkaller0: entered promiscuous mode [ 312.850713][T15294] syzkaller0: entered allmulticast mode [ 312.947465][T15299] netlink: 'syz.0.2698': attribute type 4 has an invalid length. [ 312.955459][T15299] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2698'. [ 312.970261][T15297] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 313.210782][T15301] syzkaller0: entered promiscuous mode [ 313.216595][T15301] syzkaller0: entered allmulticast mode [ 313.388416][T15321] ipt_ECN: cannot use operation on non-tcp rule [ 313.516774][ T30] audit: type=1800 audit(1770638362.172:3): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2706" name="memory.events" dev="tmpfs" ino=2811 res=0 errno=0 [ 313.545280][T15321] netlink: 'syz.0.2705': attribute type 3 has an invalid length. [ 313.554314][T15321] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2705'. [ 313.565152][ T30] audit: type=1804 audit(1770638362.172:4): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2706" name="/newroot/549/memory.events" dev="tmpfs" ino=2811 res=1 errno=0 [ 313.647867][T15331] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2708'. [ 313.994278][T15350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.158180][T15358] netlink: 'syz.1.2717': attribute type 4 has an invalid length. [ 314.193587][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2717'. [ 314.407333][T15373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2720'. [ 314.416513][T15373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2720'. [ 314.458822][T15373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2720'. [ 314.587806][T15385] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.2723'. [ 314.871825][T15401] gretap0: entered promiscuous mode [ 315.000286][T15415] netlink: 'syz.3.2732': attribute type 39 has an invalid length. [ 315.325582][T15441] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 315.426924][T15446] netlink: 'syz.2.2738': attribute type 10 has an invalid length. [ 315.788723][T15468] netlink: 'syz.3.2744': attribute type 1 has an invalid length. [ 315.810150][T15468] netlink: 'syz.3.2744': attribute type 2 has an invalid length. [ 315.915036][T15479] sctp: [Deprecated]: syz.2.2748 (pid 15479) Use of int in max_burst socket option. [ 315.915036][T15479] Use struct sctp_assoc_value instead [ 316.104288][T15480] netlink: 'syz.0.2747': attribute type 5 has an invalid length. [ 316.605020][T15531] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 316.720390][T15542] netlink: 'syz.1.2766': attribute type 1 has an invalid length. [ 316.729057][T15542] netlink: 'syz.1.2766': attribute type 4 has an invalid length. [ 316.836095][T15554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.841294][T15560] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 316.887755][T15560] bond11: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 316.914021][T15560] bond11 (unregistering): Released all slaves [ 316.935224][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 316.943350][ C1] lec:lec_tx_timeout: lec0 [ 316.948202][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.258418][T15590] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 317.262144][T15589] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 317.282358][T15591] tap0: tun_chr_ioctl cmd 1074025672 [ 317.288276][T15591] tap0: ignored: set checksum disabled [ 317.304672][T15592] tap0: tun_chr_ioctl cmd 1074025673 [ 317.631984][T15609] syzkaller0: entered promiscuous mode [ 317.645083][T15609] syzkaller0: entered allmulticast mode [ 317.995439][T15634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.060475][T15634] validate_nla: 1 callbacks suppressed [ 318.060493][T15634] netlink: 'syz.2.2791': attribute type 2 has an invalid length. [ 318.295330][T15651] x_tables: duplicate underflow at hook 2 [ 318.325221][T15651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.518373][T15659] __nla_validate_parse: 83 callbacks suppressed [ 318.518393][T15659] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2796'. [ 318.755443][T15681] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2802'. [ 318.772522][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'. [ 318.893710][T15683] bond0 (unregistering): Released all slaves [ 318.916814][T15696] ip6gre1: entered promiscuous mode [ 318.923016][T15696] ip6gre1: entered allmulticast mode [ 318.931606][ T148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.934305][T15696] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.944316][ T148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.956244][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.971910][T15698] netlink: 'syz.0.2808': attribute type 1 has an invalid length. [ 319.007993][T15696] 8021q: adding VLAN 0 to HW filter on device bond9 [ 319.025964][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2808'. [ 319.039908][T15705] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2809'. [ 319.081946][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'. [ 319.357014][T15734] bridge0: entered allmulticast mode [ 319.366050][T15736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 319.527093][T15750] erspan0: left promiscuous mode [ 319.670049][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.824753][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.867572][T15784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2829'. [ 319.988436][T15801] ip6gre1: entered allmulticast mode [ 319.996149][T15802] ip6gre0: entered promiscuous mode [ 320.001384][T15802] ip6gre0: entered allmulticast mode [ 320.012308][T15805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2832'. [ 320.208132][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2837'. [ 320.430650][T15835] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 320.450200][T15842] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 320.526759][T15839] netlink: 'syz.4.2842': attribute type 1 has an invalid length. [ 320.535690][T15842] bond0: entered allmulticast mode [ 320.596433][T15839] bond11: entered promiscuous mode [ 320.602146][T15839] 8021q: adding VLAN 0 to HW filter on device bond11 [ 320.633805][T15843] bond11: (slave bridge7): making interface the new active one [ 320.643255][T15843] bridge7: entered promiscuous mode [ 320.651941][T15843] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 321.177246][T15889] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 321.493141][ T43] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.516955][ T43] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.536211][ T43] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.570806][ T43] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.618047][T15929] netlink: 'syz.0.2868': attribute type 4 has an invalid length. [ 322.183276][T15961] netlink: 'syz.4.2876': attribute type 3 has an invalid length. [ 322.423897][T15971] tipc: Enabling of bearer rejected, failed to enable media [ 322.699040][T15986] geneve4: entered promiscuous mode [ 322.784509][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5840 ms [ 322.792581][ C1] lec:lec_tx_timeout: lec0 [ 322.797601][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.865002][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.923845][T16003] bridge0: port 2(batadv4) entered blocking state [ 322.931601][T16003] bridge0: port 2(batadv4) entered disabled state [ 322.955330][T16003] batadv4: entered allmulticast mode [ 322.969631][T16003] batadv4: entered promiscuous mode [ 323.111456][ T5492] veth1_macvtap: left promiscuous mode [ 323.319833][T16032] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0 [ 323.336174][T16026] IPVS: stopping master sync thread 16032 ... [ 323.445790][ T148] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 323.455273][ T148] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 323.671274][T16060] __nla_validate_parse: 18 callbacks suppressed [ 323.671292][T16060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2899'. [ 323.714139][T16060] ip6tnl0: Caught tx_queue_len zero misconfig [ 323.751434][T16065] netlink: 'syz.2.2901': attribute type 5 has an invalid length. [ 323.805571][T16067] lo: Caught tx_queue_len zero misconfig [ 323.849866][T16067] netem: change failed [ 324.018492][T16081] netlink: 'syz.1.2904': attribute type 10 has an invalid length. [ 324.028133][T16081] veth1_macvtap: left promiscuous mode [ 324.041914][T16081] team0: Device veth1_macvtap failed to register rx_handler [ 324.059533][T16085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2906'. [ 324.246915][T16099] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 324.485845][T16111] syzkaller1: entered promiscuous mode [ 324.504880][T16119] xt_TCPMSS: Only works on TCP SYN packets [ 324.516424][T16111] syzkaller1: entered allmulticast mode [ 324.749147][T16139] netlink: 'syz.1.2921': attribute type 10 has an invalid length. [ 324.803858][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 324.826478][T16143] netlink: 'syz.3.2922': attribute type 10 has an invalid length. [ 324.836469][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2922'. [ 324.847962][T16143] netlink: 'syz.3.2922': attribute type 7 has an invalid length. [ 324.889856][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2924'. [ 324.891682][T16143] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.915882][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2924'. [ 324.938202][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2924'. [ 324.957508][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2924'. [ 325.046702][T16161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2929'. [ 325.055969][T16161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2929'. [ 325.067196][T16161] ipt_ECN: cannot use operation on non-tcp rule [ 325.249365][T16176] netlink: 'syz.1.2933': attribute type 4 has an invalid length. [ 325.538835][T16188] netlink: 'syz.2.2938': attribute type 11 has an invalid length. [ 325.550542][T16188] delete_channel: no stack [ 325.705538][T16209] netlink: 'syz.2.2945': attribute type 1 has an invalid length. [ 326.020120][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.030367][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.039829][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.049030][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.067496][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.093034][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.100525][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.120579][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.134022][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.151072][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.270061][T16230] syzkaller0: entered promiscuous mode [ 326.312014][T16230] syzkaller0: entered allmulticast mode [ 326.400514][T16241] vxcan2: entered allmulticast mode [ 326.409849][T16230] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 326.730392][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.878956][T16270] veth5: entered promiscuous mode [ 326.896232][T16270] veth5: entered allmulticast mode [ 326.938732][T16271] veth7: entered promiscuous mode [ 326.944078][T16271] veth7: entered allmulticast mode [ 326.977267][T16267] syzkaller1: entered promiscuous mode [ 326.983692][T16267] syzkaller1: entered allmulticast mode [ 327.092681][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.323896][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.489067][ T43] bond0: (slave netdevsim0): Releasing backup interface [ 327.567015][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.805031][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.813111][ C1] lec:lec_tx_timeout: lec0 [ 327.817963][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.034035][T16310] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 328.078712][T16327] FAULT_INJECTION: forcing a failure. [ 328.078712][T16327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.093907][T16327] CPU: 1 UID: 0 PID: 16327 Comm: syz.3.2976 Not tainted syzkaller #0 PREEMPT(full) [ 328.093943][T16327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 328.093954][T16327] Call Trace: [ 328.093961][T16327] [ 328.093969][T16327] dump_stack_lvl+0xe8/0x150 [ 328.093995][T16327] should_fail_ex+0x412/0x560 [ 328.094019][T16327] _copy_to_user+0x31/0xb0 [ 328.094038][T16327] simple_read_from_buffer+0xe1/0x170 [ 328.094056][T16327] proc_fail_nth_read+0x1bb/0x230 [ 328.094079][T16327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.094103][T16327] ? rw_verify_area+0x2a6/0x4d0 [ 328.094123][T16327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.094146][T16327] vfs_read+0x20c/0xa70 [ 328.094164][T16327] ? fdget_pos+0x246/0x320 [ 328.094185][T16327] ? __pfx___mutex_lock+0x10/0x10 [ 328.094203][T16327] ? __pfx_vfs_read+0x10/0x10 [ 328.094224][T16327] ? __fget_files+0x2a/0x420 [ 328.094242][T16327] ? __fget_files+0x3a0/0x420 [ 328.094256][T16327] ? __fget_files+0x2a/0x420 [ 328.094278][T16327] ksys_read+0x150/0x270 [ 328.094300][T16327] ? __pfx_ksys_read+0x10/0x10 [ 328.094330][T16327] do_syscall_64+0xe2/0xf80 [ 328.094347][T16327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.094361][T16327] ? trace_irq_disable+0x37/0x100 [ 328.094375][T16327] ? clear_bhb_loop+0x60/0xb0 [ 328.094395][T16327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.094409][T16327] RIP: 0033:0x7f929a15b84e [ 328.094425][T16327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 328.094438][T16327] RSP: 002b:00007f929b004fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.094460][T16327] RAX: ffffffffffffffda RBX: 00007f929b0056c0 RCX: 00007f929a15b84e [ 328.094471][T16327] RDX: 000000000000000f RSI: 00007f929b0050a0 RDI: 0000000000000008 [ 328.094480][T16327] RBP: 00007f929b005090 R08: 0000000000000000 R09: 0000000000000000 [ 328.094489][T16327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.094498][T16327] R13: 00007f929a416128 R14: 00007f929a416090 R15: 00007fff55b62898 [ 328.094526][T16327] [ 328.331100][T16329] vxcan2: entered allmulticast mode [ 328.338975][ T5833] Bluetooth: hci5: command tx timeout [ 328.392469][T16222] chnl_net:caif_netlink_parms(): no params data found [ 328.562526][T16341] IPVS: Unknown mcast interface: vcan0 [ 328.592867][ T43] batadv6: left allmulticast mode [ 328.607374][ T43] batadv6: left promiscuous mode [ 328.614935][ T43] bridge0: port 3(batadv6) entered disabled state [ 328.639931][ T43] batadv5: left allmulticast mode [ 328.647278][ T43] batadv5: left promiscuous mode [ 328.658174][ T43] bridge0: port 2(batadv5) entered disabled state [ 328.683542][ T43] batadv4: left allmulticast mode [ 328.690519][ T43] batadv4: left promiscuous mode [ 328.697034][ T43] bridge0: port 1(batadv4) entered disabled state [ 329.267226][ T43] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 329.496104][ T43] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 329.745482][ T43] bond0 (unregistering): Released all slaves [ 329.755449][ T43] bond1 (unregistering): Released all slaves [ 329.868039][ T43] bond2 (unregistering): Released all slaves [ 329.977458][ T43] bond3 (unregistering): Released all slaves [ 330.077667][ T43] bond4 (unregistering): Released all slaves [ 330.179619][ T43] bond5 (unregistering): (slave bond6): Releasing backup interface [ 330.188985][ T43] bond5 (unregistering): Released all slaves [ 330.290890][ T43] bond6 (unregistering): Released all slaves [ 330.302898][ T43] bond7 (unregistering): Released all slaves [ 330.346139][ T148] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 330.389601][ T5833] Bluetooth: hci5: command tx timeout [ 330.494339][T16390] netlink: 'syz.4.2988': attribute type 2 has an invalid length. [ 330.530175][ T43] 9: left promiscuous mode [ 330.587234][T16222] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.601595][T16222] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.610134][T16222] bridge_slave_0: entered allmulticast mode [ 330.639356][T16222] bridge_slave_0: entered promiscuous mode [ 330.657499][T16222] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.667032][T16222] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.674294][T16222] bridge_slave_1: entered allmulticast mode [ 330.685129][T16222] bridge_slave_1: entered promiscuous mode [ 330.712077][T16394] netlink: 'syz.2.2989': attribute type 4 has an invalid length. [ 330.730825][T16398] bond2: option mode: unable to set because the bond device has slaves [ 330.744932][ T43] tipc: Left network mode [ 330.794302][T16222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.823786][T16222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.945014][T16222] team0: Port device team_slave_0 added [ 330.961017][T16222] team0: Port device team_slave_1 added [ 330.975860][T16414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.100644][T16222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.114755][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.122189][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.193079][T16222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.246216][T16430] __nla_validate_parse: 7 callbacks suppressed [ 331.246235][T16430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2999'. [ 331.250666][T16222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.314159][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.366504][T16430] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2999'. [ 331.395652][T16222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.592586][T16452] netlink: 'syz.0.3004': attribute type 11 has an invalid length. [ 331.627803][T16452] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3004'. [ 331.650161][T16454] netlink: 'syz.3.3003': attribute type 4 has an invalid length. [ 331.696921][T16456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.775752][T16222] hsr_slave_0: entered promiscuous mode [ 331.785475][T16222] hsr_slave_1: entered promiscuous mode [ 331.792036][T16222] debugfs: 'hsr0' already exists in 'hsr' [ 331.829759][T16222] Cannot create hsr debugfs directory [ 331.932268][T16469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3008'. [ 331.977971][T16469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3008'. [ 332.148227][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3010'. [ 332.288133][T16476] syzkaller0: entered promiscuous mode [ 332.304348][T16476] syzkaller0: entered allmulticast mode [ 332.474952][ T5833] Bluetooth: hci5: command tx timeout [ 332.573344][T16506] sctp: [Deprecated]: syz.0.3015 (pid 16506) Use of int in max_burst socket option deprecated. [ 332.573344][T16506] Use struct sctp_assoc_value instead [ 332.828200][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 332.836699][ C1] lec:lec_tx_timeout: lec0 [ 332.841806][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.480915][ T43] hsr_slave_0: left promiscuous mode [ 334.493965][ T43] hsr_slave_1: left promiscuous mode [ 334.503710][ T43] batman_adv: batadv0: Removing interface: ipvlan2 [ 334.545869][ T5833] Bluetooth: hci5: command tx timeout [ 334.576879][T16548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3021'. [ 335.233877][ T5197] udevd[5197]: worker [11523] /devices/virtual/block/nbd0 is taking a long time [ 335.403972][T16531] syzkaller0: entered promiscuous mode [ 335.413681][T16531] syzkaller0: entered allmulticast mode [ 335.435895][T16534] tipc: Enabled bearer , priority 0 [ 335.455626][T16542] tipc: Resetting bearer [ 335.523397][T16562] netlink: 'syz.3.3024': attribute type 1 has an invalid length. [ 335.531683][T16562] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3024'. [ 335.578627][T16542] tipc: Resetting bearer [ 335.603324][T16542] tipc: Disabling bearer [ 335.665099][T16563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3025'. [ 335.849567][T16581] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 336.174067][T16597] syzkaller0: entered promiscuous mode [ 336.182150][T16597] syzkaller0: entered allmulticast mode [ 336.333515][T16609] xt_connbytes: Forcing CT accounting to be enabled [ 336.410262][ T43] IPVS: stop unused estimator thread 0... [ 336.459090][T16222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.477930][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 336.529445][T16222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.580178][T16222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.613911][T16222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.930450][T16222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.007883][T16222] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.056964][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.064136][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.109524][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.116720][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.170593][T16672] xt_ecn: cannot match TCP bits for non-tcp packets [ 337.197788][T16675] netlink: 'syz.2.3047': attribute type 2 has an invalid length. [ 337.334015][T16667] IPVS: set_ctl: invalid protocol: 30768 48.48.48.48:12336 [ 337.537386][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3051'. [ 337.563208][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3051'. [ 337.573556][T16694] netlink: 'syz.4.3051': attribute type 12 has an invalid length. [ 337.582827][T16694] netlink: 'syz.4.3051': attribute type 11 has an invalid length. [ 337.668286][T16222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.794257][T16222] veth0_vlan: entered promiscuous mode [ 337.852428][T16222] veth1_vlan: entered promiscuous mode [ 337.858002][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.866084][ C1] lec:lec_tx_timeout: lec0 [ 337.872450][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.952454][T16222] veth0_macvtap: entered promiscuous mode [ 337.989491][T16222] veth1_macvtap: entered promiscuous mode [ 338.037112][T16222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.080960][T16222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.107845][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 338.115641][ T9060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.150691][ T9060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.166832][ T9060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.199575][ T9060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.249924][T16732] syzkaller1: entered promiscuous mode [ 338.268030][T16732] syzkaller1: entered allmulticast mode [ 338.451017][T16625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.475000][T16625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.520241][T16623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.554922][T16623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.559574][T16747] netlink: 'syz.3.3065': attribute type 1 has an invalid length. [ 338.582965][T16750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3066'. [ 338.693034][T16755] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3067'. [ 338.722983][T16752] bond11: (slave gretap2): making interface the new active one [ 338.777191][T16752] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 338.959600][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 339.010681][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.021367][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.035726][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.043941][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.062628][T16782] sock: sock_timestamping_bind_phc: sock not bind to device [ 339.071984][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.118244][T16782] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3071'. [ 339.172647][T16786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3072'. [ 339.215899][T16786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3072'. [ 339.244818][T16786] netlink: 'syz.3.3072': attribute type 25 has an invalid length. [ 339.260574][T16786] netlink: 'syz.3.3072': attribute type 25 has an invalid length. [ 339.404292][T16798] netlink: 'syz.4.3074': attribute type 1 has an invalid length. [ 339.550294][T16798] bond12: entered promiscuous mode [ 339.581627][T16798] 8021q: adding VLAN 0 to HW filter on device bond12 [ 339.809763][ T5823] bond0: (slave syz_tun): Releasing backup interface [ 339.831213][ T5823] syz_tun (unregistering): left allmulticast mode [ 340.023591][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.055319][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.086101][ T25] block nbd0: Possible stuck request ffff888025808000: control (read@0,1024B). Runtime 90 seconds [ 340.097540][ T25] block nbd0: Possible stuck request ffff888025808200: control (read@1024,1024B). Runtime 90 seconds [ 340.109371][ T25] block nbd0: Possible stuck request ffff888025808400: control (read@2048,1024B). Runtime 90 seconds [ 340.120604][ T25] block nbd0: Possible stuck request ffff888025808600: control (read@3072,1024B). Runtime 90 seconds [ 340.248099][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.258806][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.438267][T16858] netlink: 'syz.1.3087': attribute type 10 has an invalid length. [ 340.457108][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.484600][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.551775][T16864] veth0: entered promiscuous mode [ 340.648019][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.675161][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.711988][T16861] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 340.728445][T16863] veth0: left promiscuous mode [ 340.983122][T16775] chnl_net:caif_netlink_parms(): no params data found [ 341.104710][ T5833] Bluetooth: hci0: command tx timeout [ 341.260721][ T60] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 341.297563][ T60] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 9e:b8:9e:22:f5:5a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 341.861613][ T60] bond0 (unregistering): left allmulticast mode [ 341.868372][ T60] bond_slave_0: left allmulticast mode [ 341.873841][ T60] bond_slave_1: left allmulticast mode [ 341.881571][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.892903][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.902437][ T60] bond0 (unregistering): Released all slaves [ 342.000190][ T60] bond1 (unregistering): Released all slaves [ 342.095628][ T60] bond2 (unregistering): (slave veth3): Releasing active interface [ 342.105509][ T60] bond2 (unregistering): Released all slaves [ 342.198340][ T60] bond3 (unregistering): (slave veth5): Releasing active interface [ 342.208093][ T60] bond3 (unregistering): Released all slaves [ 342.220313][ T60] bond4 (unregistering): Released all slaves [ 342.257117][T16902] bridge13: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 342.450273][ T60] : left promiscuous mode [ 342.552252][T16775] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.556757][T16938] __nla_validate_parse: 11 callbacks suppressed [ 342.556776][T16938] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3099'. [ 342.642992][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.650856][T16775] bridge_slave_0: entered allmulticast mode [ 342.668571][T16775] bridge_slave_0: entered promiscuous mode [ 342.687108][ T60] 9: left promiscuous mode [ 342.721583][T16775] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.742260][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.798384][T16775] bridge_slave_1: entered allmulticast mode [ 342.823803][T16775] bridge_slave_1: entered promiscuous mode [ 342.881112][T16953] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 342.896755][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 342.896789][ C1] lec:lec_tx_timeout: lec0 [ 342.905923][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.942313][T16952] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 342.967570][ T60] tipc: Left network mode [ 343.121206][T16775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.144432][T16775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.186549][ T5833] Bluetooth: hci0: command tx timeout [ 343.379918][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3109'. [ 343.402236][T16775] team0: Port device team_slave_0 added [ 343.481657][T16775] team0: Port device team_slave_1 added [ 343.561276][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 343.688209][T16997] tap0: tun_chr_ioctl cmd 1074025678 [ 343.700553][T16997] tap0: group set to 0 [ 343.758242][T17006] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3113'. [ 343.765934][T16775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.800469][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.891377][T16775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.936649][T16775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.943631][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.007116][T16775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.201553][T16775] hsr_slave_0: entered promiscuous mode [ 344.227040][T16775] hsr_slave_1: entered promiscuous mode [ 344.419239][T17052] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3120'. [ 344.703636][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 344.984190][T17082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.065228][T17082] Bluetooth: MGMT ver 1.23 [ 345.134650][T17085] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3129'. [ 345.172911][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3129'. [ 345.265571][ T5833] Bluetooth: hci0: command tx timeout [ 345.271695][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.291542][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.317421][T17082] [ 345.319796][T17082] ====================================================== [ 345.326817][T17082] WARNING: possible circular locking dependency detected [ 345.333932][T17082] syzkaller #0 Not tainted [ 345.338347][T17082] ------------------------------------------------------ [ 345.345367][T17082] syz.3.3129/17082 is trying to acquire lock: [ 345.351419][T17082] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 345.360961][T17082] [ 345.360961][T17082] but task is already holding lock: [ 345.368302][T17082] ffff888025206938 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 345.378556][T17082] [ 345.378556][T17082] which lock already depends on the new lock. [ 345.378556][T17082] [ 345.388946][T17082] [ 345.388946][T17082] the existing dependency chain (in reverse order) is: [ 345.397974][T17082] [ 345.397974][T17082] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 345.406578][T17082] blk_alloc_queue+0x52f/0x610 [ 345.411866][T17082] __blk_mq_alloc_disk+0x197/0x390 [ 345.417485][T17082] nbd_dev_add+0x499/0xb50 [ 345.422415][T17082] nbd_init+0x168/0x1f0 [ 345.427086][T17082] do_one_initcall+0x250/0x840 [ 345.432365][T17082] do_initcall_level+0x104/0x190 [ 345.437816][T17082] do_initcalls+0x59/0xa0 [ 345.442654][T17082] kernel_init_freeable+0x2a6/0x3d0 [ 345.448626][T17082] kernel_init+0x1d/0x1d0 [ 345.453640][T17082] ret_from_fork+0x51b/0xa40 [ 345.458734][T17082] ret_from_fork_asm+0x1a/0x30 [ 345.464098][T17082] [ 345.464098][T17082] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 345.471303][T17082] fs_reclaim_acquire+0x71/0x100 [ 345.476748][T17082] prepare_alloc_pages+0x152/0x650 [ 345.482366][T17082] __alloc_frozen_pages_noprof+0x12f/0x380 [ 345.488767][T17082] __alloc_pages_noprof+0xa/0x30 [ 345.494263][T17082] pcpu_populate_chunk+0x182/0xb30 [ 345.499882][T17082] pcpu_alloc_noprof+0xc4a/0x18d0 [ 345.505410][T17082] xt_percpu_counter_alloc+0x161/0x220 [ 345.511388][T17082] translate_table+0x134a/0x2110 [ 345.516831][T17082] ipt_register_table+0x11b/0x7f0 [ 345.522359][T17082] iptable_security_table_init+0x41/0x70 [ 345.528506][T17082] xt_find_table_lock+0x30c/0x3e0 [ 345.534058][T17082] xt_request_find_table_lock+0x26/0x100 [ 345.540221][T17082] do_ipt_get_ctl+0x716/0x1240 [ 345.545504][T17082] nf_getsockopt+0x26e/0x290 [ 345.550612][T17082] ip_getsockopt+0x19e/0x230 [ 345.555714][T17082] do_sock_getsockopt+0x2d3/0x3f0 [ 345.561256][T17082] __x64_sys_getsockopt+0x1a4/0x240 [ 345.566968][T17082] do_syscall_64+0xe2/0xf80 [ 345.571986][T17082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.578385][T17082] [ 345.578385][T17082] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 345.586106][T17082] __lock_acquire+0x15a5/0x2cf0 [ 345.591466][T17082] lock_acquire+0x106/0x330 [ 345.596477][T17082] __mutex_lock+0x19f/0x1300 [ 345.601575][T17082] pcpu_alloc_noprof+0x272/0x18d0 [ 345.607104][T17082] sbitmap_init_node+0x1e1/0x640 [ 345.612567][T17082] sbitmap_queue_init_node+0x3e/0x4d0 [ 345.618454][T17082] blk_mq_init_tags+0x15c/0x2d0 [ 345.623825][T17082] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 345.629793][T17082] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 345.636118][T17082] nbd_start_device+0x17f/0xb10 [ 345.641496][T17082] nbd_genl_connect+0x165b/0x1cf0 [ 345.648034][T17082] genl_family_rcv_msg_doit+0x22a/0x330 [ 345.654282][T17082] genl_rcv_msg+0x61c/0x7a0 [ 345.659305][T17082] netlink_rcv_skb+0x232/0x4b0 [ 345.664578][T17082] genl_rcv+0x28/0x40 [ 345.669088][T17082] netlink_unicast+0x80f/0x9b0 [ 345.674399][T17082] netlink_sendmsg+0x813/0xb40 [ 345.679683][T17082] ____sys_sendmsg+0xa68/0xad0 [ 345.685050][T17082] ___sys_sendmsg+0x2a5/0x360 [ 345.690259][T17082] __x64_sys_sendmsg+0x1bd/0x2a0 [ 345.695729][T17082] do_syscall_64+0xe2/0xf80 [ 345.700893][T17082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.707329][T17082] [ 345.707329][T17082] other info that might help us debug this: [ 345.707329][T17082] [ 345.717642][T17082] Chain exists of: [ 345.717642][T17082] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 345.717642][T17082] [ 345.731294][T17082] Possible unsafe locking scenario: [ 345.731294][T17082] [ 345.738727][T17082] CPU0 CPU1 [ 345.744074][T17082] ---- ---- [ 345.749422][T17082] lock(&q->q_usage_counter(io)#51); [ 345.754790][T17082] lock(fs_reclaim); [ 345.761360][T17082] lock(&q->q_usage_counter(io)#51); [ 345.769329][T17082] lock(pcpu_alloc_mutex); [ 345.773822][T17082] [ 345.773822][T17082] *** DEADLOCK *** [ 345.773822][T17082] [ 345.781954][T17082] 6 locks held by syz.3.3129/17082: [ 345.787329][T17082] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 345.795870][T17082] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 345.804827][T17082] #2: ffff8880253d31d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 345.816401][T17082] #3: ffff8880253d30d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 345.827358][T17082] #4: ffff888025206938 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 345.838062][T17082] #5: ffff888025206970 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 345.849020][T17082] [ 345.849020][T17082] stack backtrace: [ 345.854892][T17082] CPU: 0 UID: 0 PID: 17082 Comm: syz.3.3129 Not tainted syzkaller #0 PREEMPT(full) [ 345.854911][T17082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 345.854921][T17082] Call Trace: [ 345.854929][T17082] [ 345.854936][T17082] dump_stack_lvl+0xe8/0x150 [ 345.854956][T17082] print_circular_bug+0x2e1/0x300 [ 345.854973][T17082] check_noncircular+0x12e/0x150 [ 345.854991][T17082] __lock_acquire+0x15a5/0x2cf0 [ 345.855017][T17082] ? kernel_text_address+0xa5/0xe0 [ 345.855037][T17082] ? pcpu_alloc_noprof+0x272/0x18d0 [ 345.855051][T17082] lock_acquire+0x106/0x330 [ 345.855070][T17082] ? pcpu_alloc_noprof+0x272/0x18d0 [ 345.855089][T17082] __mutex_lock+0x19f/0x1300 [ 345.855106][T17082] ? pcpu_alloc_noprof+0x272/0x18d0 [ 345.855120][T17082] ? stack_depot_save_flags+0x3f3/0x810 [ 345.855140][T17082] ? kasan_save_track+0x4f/0x80 [ 345.855153][T17082] ? kasan_save_track+0x3e/0x80 [ 345.855165][T17082] ? pcpu_alloc_noprof+0x272/0x18d0 [ 345.855179][T17082] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 345.855193][T17082] ? blk_mq_init_tags+0x83/0x2d0 [ 345.855212][T17082] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 345.855227][T17082] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 345.855246][T17082] ? __pfx___mutex_lock+0x10/0x10 [ 345.855262][T17082] ? genl_rcv+0x28/0x40 [ 345.855280][T17082] ? ____sys_sendmsg+0xa68/0xad0 [ 345.855298][T17082] ? ___sys_sendmsg+0x2a5/0x360 [ 345.855322][T17082] pcpu_alloc_noprof+0x272/0x18d0 [ 345.855344][T17082] sbitmap_init_node+0x1e1/0x640 [ 345.855367][T17082] sbitmap_queue_init_node+0x3e/0x4d0 [ 345.855390][T17082] blk_mq_init_tags+0x15c/0x2d0 [ 345.855411][T17082] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 345.855427][T17082] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.855443][T17082] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 345.855460][T17082] ? kfree+0x1be/0x650 [ 345.855478][T17082] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 345.855502][T17082] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 345.855527][T17082] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 345.855547][T17082] ? sysfs_add_file_mode_ns+0x259/0x300 [ 345.855569][T17082] nbd_start_device+0x17f/0xb10 [ 345.855591][T17082] ? device_create_file+0xf4/0x1b0 [ 345.855612][T17082] nbd_genl_connect+0x165b/0x1cf0 [ 345.855646][T17082] ? __pfx_nbd_genl_connect+0x10/0x10 [ 345.855672][T17082] ? __nla_parse+0x40/0x60 [ 345.855692][T17082] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 345.855715][T17082] genl_family_rcv_msg_doit+0x22a/0x330 [ 345.855738][T17082] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 345.855765][T17082] ? __lock_acquire+0x6b5/0x2cf0 [ 345.855788][T17082] genl_rcv_msg+0x61c/0x7a0 [ 345.855808][T17082] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.855826][T17082] ? __pfx_nbd_genl_connect+0x10/0x10 [ 345.855850][T17082] netlink_rcv_skb+0x232/0x4b0 [ 345.855865][T17082] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.855884][T17082] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.855897][T17082] ? genl_rcv+0x19/0x40 [ 345.855921][T17082] ? down_read+0x272/0x2e0 [ 345.855936][T17082] ? genl_rcv+0xd/0x40 [ 345.855954][T17082] genl_rcv+0x28/0x40 [ 345.855970][T17082] netlink_unicast+0x80f/0x9b0 [ 345.856000][T17082] ? __pfx_netlink_unicast+0x10/0x10 [ 345.856020][T17082] ? __alloc_skb+0x193/0x390 [ 345.856037][T17082] ? netlink_sendmsg+0x650/0xb40 [ 345.856051][T17082] ? skb_put+0x11b/0x210 [ 345.856070][T17082] netlink_sendmsg+0x813/0xb40 [ 345.856088][T17082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.856105][T17082] ? aa_sock_msg_perm+0xf1/0x1b0 [ 345.856122][T17082] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.856139][T17082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.856154][T17082] ____sys_sendmsg+0xa68/0xad0 [ 345.856173][T17082] ? __might_fault+0xaf/0x130 [ 345.856196][T17082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.856218][T17082] ? import_iovec+0x73/0xa0 [ 345.856239][T17082] ___sys_sendmsg+0x2a5/0x360 [ 345.856258][T17082] ? __lock_acquire+0x6b5/0x2cf0 [ 345.856279][T17082] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.856299][T17082] ? futex_wake+0x4ac/0x580 [ 345.856329][T17082] ? __fget_files+0x2a/0x420 [ 345.856344][T17082] ? __fget_files+0x3a0/0x420 [ 345.856363][T17082] __x64_sys_sendmsg+0x1bd/0x2a0 [ 345.856383][T17082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.856405][T17082] ? rcu_is_watching+0x15/0xb0 [ 345.856424][T17082] do_syscall_64+0xe2/0xf80 [ 345.856440][T17082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.856454][T17082] ? trace_irq_disable+0x37/0x100 [ 345.856468][T17082] ? clear_bhb_loop+0x60/0xb0 [ 345.856485][T17082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.856504][T17082] RIP: 0033:0x7f929a19af79 [ 345.856520][T17082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.856534][T17082] RSP: 002b:00007f929b026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.856551][T17082] RAX: ffffffffffffffda RBX: 00007f929a415fa0 RCX: 00007f929a19af79 [ 345.856562][T17082] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 345.856573][T17082] RBP: 00007f929a2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 345.856582][T17082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.856591][T17082] R13: 00007f929a416038 R14: 00007f929a415fa0 R15: 00007fff55b62898 [ 345.856609][T17082] [ 346.442150][ T60] batman_adv: batadv0: Interface deactivated: dummy0 [ 346.449333][ T60] batman_adv: batadv0: Removing interface: dummy0 [ 346.472679][ T60] veth0_macvtap: left allmulticast mode [ 346.558201][ T5833] block nbd2: Receive control failed (result -32) [ 346.583735][ T5833] block nbd2: Receive control failed (result -32) [ 346.591017][ T5833] block nbd2: Receive control failed (result -32) [ 346.602364][ T5829] block nbd2: Receive control failed (result -32) [ 346.634923][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3131'. [ 346.948911][ T60] pimreg3 (unregistering): left allmulticast mode [ 347.105038][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.157462][ T60] team0 (unregistering): Port device team_slave_1 removed [ 347.354812][ T5829] Bluetooth: hci0: command tx timeout [ 347.406514][ T5835] syz_tun (unregistering): left allmulticast mode [ 347.413026][ T5835] syz_tun (unregistering): left promiscuous mode [ 347.419513][ T5835] bridge0: port 1(syz_tun) entered disabled state [ 347.914642][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 347.922759][ C1] lec:lec_tx_timeout: lec0 [ 347.927736][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 347.986592][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.078521][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.129138][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.188342][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.271004][ T60] bridge_slave_1: left allmulticast mode [ 348.278978][ T60] bridge_slave_1: left promiscuous mode [ 348.284861][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.293433][ T60] bridge_slave_0: left allmulticast mode [ 348.300221][ T60] bridge_slave_0: left promiscuous mode [ 348.306398][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.432457][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.444578][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.454616][ T60] bond0 (unregistering): Released all slaves [ 348.796819][ T60] hsr_slave_0: left promiscuous mode [ 348.802841][ T60] hsr_slave_1: left promiscuous mode [ 348.808695][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.816232][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.823866][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.832396][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.843036][ T60] veth1_macvtap: left promiscuous mode [ 348.848735][ T60] veth0_macvtap: left promiscuous mode [ 348.854264][ T60] veth1_vlan: left promiscuous mode [ 348.859789][ T60] veth0_vlan: left promiscuous mode [ 348.991933][ T60] team0 (unregistering): Port device team_slave_1 removed [ 349.017943][ T60] team0 (unregistering): Port device team_slave_0 removed [ 349.398286][ T60] bridge_slave_1: left allmulticast mode [ 349.403998][ T60] bridge_slave_1: left promiscuous mode [ 349.410068][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.418557][ T60] bridge_slave_0: left allmulticast mode [ 349.424222][ T60] bridge_slave_0: left promiscuous mode [ 349.430303][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.499285][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.513503][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.527722][ T60] bond0 (unregistering): Released all slaves [ 349.704229][ T60] hsr_slave_0: left promiscuous mode [ 349.726439][ T60] hsr_slave_1: left promiscuous mode [ 349.734398][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.742241][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.810862][ T60] team0 (unregistering): Port device team_slave_1 removed [ 349.821274][ T60] team0 (unregistering): Port device team_slave_0 removed [ 353.754542][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 353.762615][ C1] lec:lec_tx_timeout: lec0 [ 353.767369][ C1] lec:lec_start_xmit: lec0:No lecd attached