last executing test programs: 5.062197877s ago: executing program 0 (id=3480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x20040054) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc03, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xa, 0xb}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x0, 0x1, 0x551, 0xfffffff9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.902723594s ago: executing program 4 (id=3483): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002800)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x4060000) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000080001006280b2d6c094ffb65dbcab73edd60049747c3fc8904cd3c7d3e9ba5949a87edb00e2378a8fcc95b366e2423de70681c8431e10fd47e6cff517af63e2e682416f8d9a4a2596640380764b3483fbe906efba5dbbf45efc76692dc09590c0356de798e1c2369261d1f1f9cd7274bd32f26e1301cf147ec20491902d", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400ac1414bb08000700", @ANYRES32=r4, @ANYBLOB="08000500e0000002"], 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008880) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) 4.589616065s ago: executing program 0 (id=3487): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x32, 0x11, 0xf, {0x12, @esp_ip6_spec={@mcast1, @remote, 0x6, 0xf}, {0x0, @remote, 0x5, 0x26a, [0x0, 0x7fffffff]}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x22}, @empty, 0x800, 0x2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x5, 0xfffb, [0x7, 0x8001]}, 0x7, 0x2b9}, 0x4, [0x200, 0x0, 0x5, 0x5]}}) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x6, 0x9, 0x0, 0x1, [@generic="44cc"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c090}, 0xc000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x158, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xbc0}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfe04}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbc59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x687}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d09}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x227}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8841}, 0x840) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x4e21}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0xaf, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d4, 0xff}, 0xa, @in=@broadcast, 0x0, 0x3, 0x3, 0x7f, 0xc1, 0x9, 0x43}]}]}, 0x16c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0x5, @empty, 0xffff}}, 0x0, 0x0, 0x4c, 0x0, "278e1d5eafba284ed8d3541cf464602b551721812e332b2f5cad19f312a53e81668c9af77cb216cd54b4a7e03ccfcba9581283f0395704c0327f4e26d5c301ab9baa6f669b9eb1b80e845dc8fd394571"}, 0xd8) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r6, 0x50) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000b00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="c3212c", 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x3, 0x4, [0x7, 0x9, 0x10, 0x60]}, &(0x7f00000002c0)=0x10) 4.208556433s ago: executing program 4 (id=3494): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000032110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES16=r1, @ANYBLOB="005902006b55b9ec000600000000003990af0d2f14801e1260"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r4, &(0x7f00000018c0)=[{{&(0x7f0000000200)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000000)="4474d893a9aa512b86214f2e211b23", 0xf}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="100000005ba3868433935284e68f0099"], 0x20}}], 0x1, 0x20040004) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x4000011) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="78010000", @ANYRES16=r7, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.132621722s ago: executing program 0 (id=3497): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf8, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x0, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x50, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f516733"}, {0x30, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x10, 0x113, 0x9}, {0x10, 0x110, 0x4}], 0x1c0}, 0x4000c010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) r4 = socket$kcm(0x10, 0x2, 0x4) connect(r3, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x1000065, @mcast2, 0x8000, 0x1}, 0x80) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4044804) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xd8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_NAT={0x4c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0xd8}}, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x101, 0x12) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140)=0x80000000, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf8, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x0, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x50, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f516733"}, {0x30, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x10, 0x113, 0x9}, {0x10, 0x110, 0x4}], 0x1c0}, 0x4000c010) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) (async) socket$kcm(0x10, 0x2, 0x4) (async) connect(r3, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x1000065, @mcast2, 0x8000, 0x1}, 0x80) (async) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4044804) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xd8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_NAT={0x4c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0xd8}}, 0x0) (async) write$cgroup_int(r1, &(0x7f00000000c0)=0x101, 0x12) (async) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140)=0x80000000, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) (async) 3.828337354s ago: executing program 0 (id=3499): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000741feffffc37c000000017c0000040042801c00018006002000800a0000100004002524378d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f00000007c0)=""/103, 0x67}], 0x2}, 0x18020) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000280)="0000f900f0ccb99f73f528e317449f99db5bc11c72c8c792eeecf35b6807ddda2cf2280e5a", 0x25, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @mcast1}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r7, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/1, 0x1}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000034c0)=""/199, 0xc7}, 0x7}], 0x2, 0x10162, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) shutdown(r2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r9, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="540000000108030600000000000000000200090001000024000480080001400000000a0800014019e6ab8f0800014000007fff080001407cc50002050003002f0000000600024000170000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x923a9982d12e767a}, 0x40000d0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f00000006c0)=0x81, 0x4) 3.612597824s ago: executing program 2 (id=3503): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0xfe4f, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c3100004a1000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005010000180001801400020073797a5f74756e0000000000000009000000af815e10999da88eaf7091211185c2ced26b47be07a47a80f34b80258e5300cbc0ae2e38a2fa1453caa66c4b57d8e5090190c608393eb5332fa05811f819cd1c32c318ff9e8724e1451f40006113c0d1f55988090fd30e1310489691da0a79448ba3d8d653396c3ac4b0d40c2febcea5a60e5cbd5468d56694f3a02358c9f2b3080bbaf20b64ea22931d0bd43b8d9f8a9878783d4d01109e70d102d285f1dcd5833ba5c268e439b4d55584a39d1fe7969960e3353d7b05489d9db2621a6329d65d5e10d5"], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xcf) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.553933684s ago: executing program 3 (id=3504): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf25030000002400018008000300ac1e0101080007000a32bcf8bd77525fd740e0398be583ba2aab1f991d8923869759978a58e48bfbe5a6f10bdee60b9b6dd7666d4b88d3a6062a5c", @ANYRES32=0x0, @ANYBLOB="060005004e2400000600010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0xc100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x20, 0x80, 0xffff, 0x0, {{0x2b, 0x4, 0x3, 0x6, 0xac, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x14}, {[@rr={0x7, 0x17, 0xe3, [@multicast2, @remote, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x2b, 0x5f, [@dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @empty]}, @rr={0x7, 0x23, 0x9b, [@multicast2, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x75, 0x1, 0x9, [{@rand_addr=0x64010101, 0x3}, {@empty, 0x7}, {@empty, 0x3}, {@rand_addr=0x64010101, 0x7f}, {@private=0xa010102, 0xffffffff}]}]}}}}}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000002200)=[{{&(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000004c0)="a855a9ef59e1ae8bd043ec2a579b858d1634c760f7260c30e80d9333cfaab24fbce1b22251d64c1cd3bcaa08e8a203cbe35fbc2f4afcfd9dd10ca2eb5abb371893c6902d79a3626abdaec5fda1e44789b78204336f7ee0f240490fd561a57b4867e6cda1eeb7fff88d36883268d6ddbbb49864b7da0febb89e731d24ea8b753ec548715f505937baf6d4a511dd6b7b038f16cd82f5d8fc78661123189d1d26822929fd03ed240d8bb78b50fd7b759f610e48adde446b0071e222a510b0a08cfd0efdb3eb63a8d4712e46800cb813ebb0f3c3f7562da57488d202d7d0807376a1f3d87aa4047ba7f1a981a1f78bd856e2d2ec92a5a2a2d02926439c0ee4c5d4e0172a0d6ff28b9bc863b453fcea771c1df82df10bdc8d471d6738ae017d7ea029b9544b5702e821f351f0d4697e77d5bdd062ab6ff21ee14781265ef1e494fc2f550dd5de91db66bd0ca9d41e5a882e57e056426537a35f7aee4508289bdbd909ed6cec436ef240121ddfdef4522393be39647fdcdcd3bfae341585fb36f12a4833b5d1041b18a7b2e6cc5d05e2edd74813de90c129a975a573b5a825bec96d9bb74e90d1976d34fdb12ff499fddde5d9077b2259510f03ba98a86075cfdeb4b7a49d5899370c3c9517b18e419be4f9defca124f2ddb41ae00dd8c8e581c5b0addf239719176dc796df1730e67665b674ac28350ba7980784f24a4baf28f5a5828b11762868185a1ae887c04334aa8cccd81d308cab47f0a62e09131e6cbd0afc7ed724e043b7c2ff4170e9937e468f6bc152f2e1741d614e0d99b692b219d884695f7bbce0c5c9da76150737ae6f8abff469448d277f4fe6e7753764344665d7ac89459b47e62e2fbdda7060c42069f03db5cde3697a232820b112ad9f0573509feb87d0b329f0926adf1e6d9d3abc0da8f0e41b0119b679bf89b8b7c019066b0ea40b0a648b13325438b34a0a0652251dbc81ff5077607446c105563f78254cc0d41d1011500791f121dac84cad996950085433a823c4db0934d578cc1023be266e01754c156f10b4b2e9a550fdc83fc3ada58cf113e52ea80230cd049ce7e09daa2b2230b424be104347c725c756b4ca38efba93688a3c3d8d9770e3c0a79aca8b08943580b91eecaf15cb31586efdc0752e5186b840950118416907f5e782443bf7f65c1b0e0ad0af90426a08fcaa70fc041e5eb1efef1e1224ebfc824fa2ea02d83618c348b39b3b7221db50645d049d9522298e0395686cdcedde654a2345890cd0cb8b6d7418f41a912474c244b24a5b79ef947072b8c9d002029969121a7ece76f667d6c22393a7133fef71e6c1510942adc40501785c614e25e30f409109ffeff2908a7d5324b55779d2365eb13fb0f9e4d0ff3ca7761c11b976f5cd1e210d704c50d5aba8663ab766a458379db72f2a1ec1bae3c65dd7a76ebd98808e547e3df92611975d9d9c2daae976ee5cbf047c31336ebd6670b817a5da7ffb5222d227c7d0fea1edcbce3255dd9ea43cef7ee5484f60c6f6b4949691e1054d21578e45bf4d4e1fac31ffb8cfbe6994aa79479f8f64a001541c5fb937108b88bbe7246d37b9ccd776df565895884f28bf1a8f847e086a76bcaf59dedfe64de235287ed8daeb8d450651ff5b336dd00b76376a80ed2dda7b0ecf87ccaafcf92ba32e073b3fb86fe788c0007f728c595e7b5f0bf6f5464ebe385af8dc59a5c61d7007ed5029dbf4c2dce8bc266f8ed34df55fed696a16b9aa2e66d2545ced22d64a38106323d463691bc5e4b94c76849ebd033d0e8a02ca9434611dfad16c1067dba8c194b632f40f1b79a7e1aec1e2b53c1054cfb45a9a585863f3dba5d03537c379d015cd39c560df413804c43f43cf04a7557b4a8cac07d6c3449a42789cc5123d64cbfbb8601479df5ae5935a21c9fac7e48059a47bf722ddff0354b69e073ed69c7754", 0x565}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="ff9f324062265082de43cc1cd3b11321a7dd406fb42b66dcf94bbae81bc15be3e5f40e2ff8cc867cb05e7bdbfbe980d3914d20590de09040675a8f41f5a67349527a35e2b6a20d4fe11e27efaaf8e62067c4fcb962053595bc64a12c", 0x5c}, {0x0}], 0x2, &(0x7f0000002340)=ANY=[], 0x68}}], 0x3, 0xc080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={r7, 0x1, 0x6, @remote}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x70, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x56}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe7f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x11) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 3.419374219s ago: executing program 2 (id=3506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000009840)='police\x00', 0x7) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffffffffffe04, 0x8e, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x48810) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1ac, 0x37, 0x2, 0x70bd26, 0x25dfdbfd, {0x2}, [@generic="336686dbb3d73fce3bb911e98ea73312cc8afd9d19902726346cf842ae7269f9d2a0f008cd41822e42959e61b533ef23170ca0e5b4a7b1febf9f0898d2eb58b0731262d51fc9503f1f6866c0f3e4eedb9a2ee1deffb389550bd15c4a5cfac241c85586c3afee612454fe9c8fc236efcc7b5d42a5c8734b4b4be40f456b638b023f5b130d630deb61d2fe0248e8128226e61211caa51c12489f04767b27fbb2a6ccfc9184fe5372945c1f61fbbe080460f3578f7fc4ae32b36bd240dd832742914847eb69846621187e5759cd776a8a52b3e2bac5dee720163342a6a478874c260ab5", @generic="35608bcbebc69598b6fd5431db75ad90bc7ab2bb", @nested={0x8, 0x14d, 0x0, 0x1, [@nested={0x4, 0x6}]}, @generic="fe1831183b40eb918485ba8d8e1c0361d288f737cdbb4f34420b9417a5e675dad387641ba03ae435ae6fa9bab16d2ade5653593f529e6673feacfba0db2f673415cf87d488d5a474a36f9daeb98af123ab7efccf6f64b7310b4e537038e6d3e5de2cbe7ac7e1b52c1c09eb59004cb359f4bd4773a3a2896ebeaa750393ce1b47925df4b5784f7fb4b6b36c302f3f94400da0bc818851103caf"]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 3.294652794s ago: executing program 1 (id=3507): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f00000000c0), 0x43) (async) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) close(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0xfa, @private0, 0xdb}}, 0x0, 0x0, 0x0, 0x0, "1c4546219740d201cc97b7e20383bdfd816a9864273524ed875941bd50ab6dc41acfc345398d79b403b5dea4ccf5b68cbd9fe773ddaea6dc2a9e2ab73b55c71ae5d5fe3ada56758e467069bfa27565f7"}, 0xd8) 3.205710833s ago: executing program 1 (id=3508): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x12, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'veth0_to_hsr\x00', {0x2, 0x0, @broadcast}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x12, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x10) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'veth0_to_hsr\x00', {0x2, 0x0, @broadcast}}) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) (async) 3.204984824s ago: executing program 4 (id=3509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x0, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x3, 0x0, 0xff, 0x0, 0x0, @private=0xa010102, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) 3.195161742s ago: executing program 2 (id=3510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x620501, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/132, 0x84}, {0x0}], 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.0340338s ago: executing program 3 (id=3511): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 3.03333084s ago: executing program 1 (id=3512): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) read$alg(r1, &(0x7f0000000040)=""/82, 0x52) r2 = socket$inet(0x2, 0x6, 0xffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2b, 0x6, 0xfff) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x24}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x20000055) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x6}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000540)={r8, 0x1000, 0x3, 0xfffffff9, 0x6}, &(0x7f0000000580)=0x14) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) write$cgroup_pid(r0, &(0x7f0000000640)=r9, 0x12) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000680)={0x1, 0xe}) r10 = socket$netlink(0x10, 0x3, 0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r10, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r11, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x673, 0x28}}}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x14) r12 = accept4(r10, &(0x7f0000000800)=@nfc, &(0x7f0000000880)=0x80, 0x80800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x48b, &(0x7f00000008c0)={0x0, 'macsec0\x00', 0x1}, 0x18) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) bind$pptp(r12, &(0x7f0000000900)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_emit_ethernet(0x76, &(0x7f0000000940)={@random="4cf3ffe7b998", @local, @void, {@generic={0x22eb, "42e32fc554cce985b3d716ef6eccc5ec92959ac6800c972e9f71a22f3902e574f864cb3ede294b28bb411b2ae28115ae8eb73b97fb02221e25fe74070386ee3b35964a0fe0fe8dde4aa34a4c54eab531164d76d5da7f7384fe5558b095d285d13dc0fcfbdd1ca8c0"}}}, &(0x7f00000009c0)={0x1, 0x3, [0x301, 0xe23, 0x6eb, 0xbd5]}) r13 = socket(0x26, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r13, 0x8982, &(0x7f0000000a00)={0x6, 'dvmrp1\x00', {0x3ff}, 0x30}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b80)={r10, &(0x7f0000000a40)="5d5f5e0e7a9db378e2c85c0ffc08461c68bfbbf3adffb0af94d15e8dbcbee3985e17aca961b0ce06839d282ea13317e627ce7cd76d1b7a4156f229a35213d4b23203673398782322f853dae713f8a20f430378e1cc629d49e6a8e2544b7708f94e6637505c35ae4c859a424a81a674fbf4f9e1f7f4026e030da919656ee2b85bd5debad706628d5b2614f9c4093ddb7e6cd23b3edfc385fc", &(0x7f0000000b00)=""/124}, 0x20) 3.030736943s ago: executing program 4 (id=3513): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x259fdbff, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xff, 0x7eed}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r2, 0xf, 0x10}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) r4 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x400261f3, &(0x7f0000000000)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x40008c0) 2.901367126s ago: executing program 3 (id=3514): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7100030000008900000008000300", @ANYRES32, @ANYBLOB="1800060005"], 0x34}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) 2.850407066s ago: executing program 1 (id=3515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="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", 0x825}], 0x1, 0x0, 0x0, 0xc0}, 0x804) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0x1000}, {0x0, 0x12}], 0x2}, 0x5}], 0x1, 0x102, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32, @ANYBLOB="4cb4f4580466a6faf45305007feabe208c9c9caf57699c77a935e4e0daae7a9709e552ab6d6aec60ee59c77bc3be4a"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f80080001"], 0x168}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="b0000000af1368db6bf87a353761aae1338114f02922906be034a5239ae8c767b0e7d86ddd14e4f31408e001000000010000007d5087cebc164f2088cb0693f433871fd04dd82ecd7e1f9fc283c14e6d11340415b927869443f562713829f83b72cb15d2037429ba728c1d666a42f830feed2e1bcd45a0846f1e066afa1442c6d8733ba79f2922874a3903f138b9f4561862dc621148633505babc827a8d168157", @ANYRES16=r5, @ANYBLOB="000327bd7000ffdbdf250b00000014006e800400020004000100040001000400010005000800030000005000508004000500110001003076024dd544da7f38ef708a28000000080008800400010011000100272c011685f133b7db7020acac0000000800030001ac0f00080007000100000008000700010000000f000a00ccc707c6a0358dbd61a3450008003700010000000a000600080211000001000009000700fecc306b10000000"], 0xb0}, 0x1, 0x0, 0x0, 0x28c0}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000031404002cbd7000fbdbdf254900007278650014003300d42c4a2ea29b69cc0000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x20084895) r7 = socket$inet(0xa, 0x801, 0x0) sendmsg$sock(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x4f, 0x1}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$l2tp(0x2, 0x2, 0x73) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0x0, 0xb56039c214c1041d, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.804760746s ago: executing program 2 (id=3516): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) write$ppp(r4, &(0x7f00000008c0)="00003be032c6a4", 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000008c0)={{r4}, r5, 0x0, @inherit={0x78, &(0x7f0000000280)={0x0, 0x6, 0x4, 0x6, {0x572f0b19e6743c8b, 0x8000, 0x7, 0x1ff, 0x8000000000000000}, [0x10, 0xcd, 0x2, 0x4, 0xfd, 0x0]}}, @subvolid=0xffffffffffffffff}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300000000ffffffff000900004e250100000000000000000001000000fdffffff000000000400"/56, @ANYRES32=0x0, @ANYBLOB="0100000000fff4000000000800030088000000"], 0x54}}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xe74}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010b00ebff00000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073eb7a30000000000900030073797a320000000060000000060a010400000000000000000100000808000b402000000038000480340001800b00011b65787468647200002400028008000340000000020500020088000000080004400000006e080001400000000e0900010073797a300000000014000000110001e100000000000000000700000a"], 0xd4}}, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x4}, 0x0, 0x0, 0x7, 0x4, 0x3ff, 0x3, 0xc, 0x7}}, @zcopy_cookie={0x10, 0x114, 0xc, 0xf}], 0x68, 0x20008011}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r10, 0x29, 0x37, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="4eaa000000000000711039000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.670818595s ago: executing program 3 (id=3517): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x503, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21110, 0x31}}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x800) 2.572685597s ago: executing program 0 (id=3518): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvfrom(r2, 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, '\x00', "53c200000000f103f005af3d9eff00", '\x00', "e4ffffff7fffffff"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000480)}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x57, "fadab36aa87f895985bacec296e834cb27eafc142d87103665d33ff9b3f77c6e95d8ea9d76dadad47a622459b9bb7e8f697e85e550f12de1df2409f51a099fa3bb0792802d54d9562aec63f5b3cfea40823404687b4ef0"}, &(0x7f0000000000)=0x5f) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e24, 0x8, @mcast2, 0x3}}, 0x101, 0x8, 0x100, 0x9, 0xf0, 0x2, 0xff}, &(0x7f0000000180)=0x9c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 2.517844608s ago: executing program 1 (id=3519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmsg$qrtr(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000160100000600000010000000000000041701000002000000"], 0x20, 0x20008821}, 0x38) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @broadcast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0xe, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYRES16=r6, @ANYRES16=0x0, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08baaa73", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r9, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x12, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x6, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@getchain={0x2c, 0x66, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0x8, 0x1}, {0x9, 0x2}, {0xfff2, 0x6}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 2.492545656s ago: executing program 3 (id=3520): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x8, 0x97, &(0x7f0000000140)=""/151, 0x0, 0x60}, 0x94) 2.408376931s ago: executing program 4 (id=3521): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007b00000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmmsg$alg(r5, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvfrom(r5, &(0x7f00000000c0)=""/74, 0x4a, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x1a071, r3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0xd81, &(0x7f0000000840)={@remote, @random="e80ad0971538", @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x6, 0x6, "8e62aa", 0xd47, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x6, 0x6, "1deb33", 0xf, 0x0, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@dstopts={0x3b, 0x194, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x400}, @generic={0x89, 0xfc, "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"}, @pad1, @jumbo={0xc2, 0x4, 0xa}, @enc_lim={0x4, 0x1, 0x5f}, @jumbo={0xc2, 0x4, 0x10000}, @generic={0xc, 0xb73, "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"}]}], "de40b1de2df49db0addafaa2d264970630dc69627fbb29e2524b96f8475146458f5f2e6214680761bbdc1eded37fb6eaa659f886c11941e7756200a55987df3c610461fa011f4cd6cce44c51242539a158dbc53a4258eb15f61a7e019310cbb282533285bd71d1"}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe10010000711037000000000095"], &(0x7f0000000480)='GPL\x00', 0x5}, 0x94) 2.338449554s ago: executing program 3 (id=3522): unshare(0x6a040000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, 0x0, 0x20000084) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x9, 0x80801, 0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) writev(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00f9ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.281429465s ago: executing program 2 (id=3523): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r0, &(0x7f0000002340)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000080)=""/92, 0x5c}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/11, 0xb}, {&(0x7f0000001140)=""/47, 0x2f}, {&(0x7f0000001180)=""/43, 0x2b}, {&(0x7f00000011c0)=""/228, 0xe4}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x7}, 0x40002100) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000023c0)=@generic={&(0x7f0000002380)='./file0\x00', 0x0, 0x10}, 0x18) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002400), 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002480)=@o_path={&(0x7f0000002440)='./file1\x00', 0x0, 0x8, r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000024c0)={r2, r3}, 0xc) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000002580)={&(0x7f0000002500)=""/75, 0x4b, 0x0, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002700)={r3, &(0x7f00000025c0)="08dff2bad91b9750695107a36226069760d555991b886164105156554700b4609bc39a660aadd99dc3b016258ff0d605a69dfb6dbe781997c0f864c124b00528716b4cbc764f4c3513fa7451f751431848715d978615a064250ab4c9715142641f2e298dabb4111bc197839b5e166f6ac7701833eb9dba7f1fecaa7974b9c94d185e3f2a03afc53ac0505f314681acc42cff98e1c7f4e61b531a6e92f51c394a052cb597b2ffa462863b6e05f4d63156da487d2e688450532a3e06b4b9236ea00ac80ca0467ec321f42c6e01726a8641967176d7084bde8aa6192c", &(0x7f00000026c0)=@udp6=r5, 0x1}, 0x20) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002780), r4) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040890) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000002880)={r4}) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000002940)={r9, r0, 0x9aec, 0x52, &(0x7f00000028c0)="ba07abe2b437787b5b343bef701a7d935e0b00a67071cfbd7076728d2a74d43034381c5c19836e99c9e841972b853b6bfe55552a05e251357d5d7215151976fe29c6fe2902f97ec3e85a22262214960eb04e", 0x7, 0x5, 0x7, 0x5, 0x0, 0x2, 0x4, 'syz0\x00'}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x2084}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x18, 0x1404, 0x8, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0x4800) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x28, r7, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48040) getsockname(0xffffffffffffffff, &(0x7f0000002c00)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000002c80)=0x80) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002d00), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000002d40)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x2c, r10, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002ec0)={'syztnl2\x00', &(0x7f0000002e40)={'ip6_vti0\x00', r11, 0x2f, 0x2, 0x0, 0x1, 0x10, @local, @rand_addr=' \x01\x00', 0x7800, 0x7800, 0xffff, 0xfffffff9}}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002f00)=r2, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000003140)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003100)={&(0x7f0000002fc0)={0x120, r13, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2d}, @NL80211_ATTR_REG_RULES={0x100, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2fca}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x791}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xeea}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf3c6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd3b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x47f5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xbb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x120000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x45) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000003180), 0x2, 0x0) write$nci(r14, &(0x7f00000031c0)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x8, {0x4, 0x2, 0x1, 0xa, 0x4, 0x4}}, 0xc) syz_genetlink_get_family_id$SEG6(&(0x7f0000003200), r12) 2.250416108s ago: executing program 0 (id=3524): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_smc(0x2b, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) bind$inet6(r1, 0x0, 0x0) shutdown(r1, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x20008045, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) close(r5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xfd}, {{@in=@loopback, 0x0, 0x32}, 0x2, @in6=@private1, 0x0, 0x5}]}]}, 0x1fc}}, 0x0) 1.253323587s ago: executing program 2 (id=3525): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000001c0)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x14, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r3}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000003c0)={'mangle\x00', 0x0, [0x2, 0x4, 0x9, 0x7, 0x7ff]}, &(0x7f0000000000)=0x54) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000003d80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRESHEX=r0, @ANYBLOB="25b076f61586e808b463d583707f9e404a332ad492f7a43fce2f79b1f8695743598acd541781498dded48094f9c8a8c3a658ead07e900c2a4274a37a77aebe6ece2fece681f07144343bbde450c3b3b42e2741972dc20bb163574ec302dd97227dd4eb9c4a0ee695f33c8e176ec1241e522ad7d714486d1c94f2e7a08041d7143360c52e35c53e90ee66a4c77dca6d2e4600fc4436d79b1206a011835e45d3fe53a29765f28ad6153946cf8d0718", @ANYBLOB="aa99844584196f1e65188edc037d52da8376a647afe532a613c72bd143564a1bb38826ac36530134dbe554c83d5d3da05ceaf0b55b2766ef5084dd2195", @ANYRES16], 0x144}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000003d80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRESHEX=r0, @ANYBLOB="25b076f61586e808b463d583707f9e404a332ad492f7a43fce2f79b1f8695743598acd541781498dded48094f9c8a8c3a658ead07e900c2a4274a37a77aebe6ece2fece681f07144343bbde450c3b3b42e2741972dc20bb163574ec302dd97227dd4eb9c4a0ee695f33c8e176ec1241e522ad7d714486d1c94f2e7a08041d7143360c52e35c53e90ee66a4c77dca6d2e4600fc4436d79b1206a011835e45d3fe53a29765f28ad6153946cf8d0718", @ANYBLOB="aa99844584196f1e65188edc037d52da8376a647afe532a613c72bd143564a1bb38826ac36530134dbe554c83d5d3da05ceaf0b55b2766ef5084dd2195", @ANYRES16], 0x144}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e21, @multicast1}}) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76a}, 0x1c) socket(0x22, 0xa, 0x2) (async) r8 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/142, 0x8e}], 0x3}, 0x20) close(0x4) 675.048µs ago: executing program 1 (id=3526): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/115, &(0x7f00000000c0)=0x73) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}, {{0x0, 0xfffffffffffffffd, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/206, 0xce}], 0x1}, 0x9}], 0x2, 0x22222, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "e0499dcc6f37dbc4", "c4b46a09d9c2bfad99f0e16197269977b621daf0d14c4379148a8783c5bd04f7", "22a2fc6c", "c5a6a5b92679d71a"}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x4) 0s ago: executing program 4 (id=3527): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): x_genl_dumpit+0x10/0x10 [ 323.308723][T14892] ? __pfx_genl_done+0x10/0x10 [ 323.308753][T14892] ? __lock_acquire+0x6b5/0x2cf0 [ 323.308794][T14892] genl_rcv_msg+0x5e8/0x7a0 [ 323.308832][T14892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.308861][T14892] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 323.308896][T14892] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 323.308941][T14892] netlink_rcv_skb+0x232/0x4b0 [ 323.308966][T14892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.308997][T14892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.309018][T14892] ? genl_rcv+0x19/0x40 [ 323.309065][T14892] ? down_read+0x272/0x2e0 [ 323.309081][T14892] ? genl_rcv+0xd/0x40 [ 323.309111][T14892] genl_rcv+0x28/0x40 [ 323.309137][T14892] netlink_unicast+0x80f/0x9b0 [ 323.309168][T14892] ? __pfx_netlink_unicast+0x10/0x10 [ 323.309190][T14892] ? netlink_sendmsg+0x650/0xb40 [ 323.309211][T14892] ? skb_put+0x11b/0x210 [ 323.309243][T14892] netlink_sendmsg+0x813/0xb40 [ 323.309277][T14892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.309307][T14892] ? aa_sock_msg_perm+0xf1/0x1b0 [ 323.309334][T14892] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.309359][T14892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.309382][T14892] ____sys_sendmsg+0xa68/0xad0 [ 323.309412][T14892] ? __might_fault+0xaf/0x130 [ 323.309450][T14892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.309491][T14892] ? import_iovec+0x73/0xa0 [ 323.309526][T14892] ___sys_sendmsg+0x2a5/0x360 [ 323.309564][T14892] ? __lock_acquire+0x6b5/0x2cf0 [ 323.309595][T14892] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.309668][T14892] ? __fget_files+0x2a/0x420 [ 323.309685][T14892] ? __fget_files+0x3a0/0x420 [ 323.309712][T14892] __x64_sys_sendmsg+0x1bd/0x2a0 [ 323.309738][T14892] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.309774][T14892] ? __pfx_ksys_write+0x10/0x10 [ 323.309811][T14892] do_syscall_64+0xe2/0xf80 [ 323.309836][T14892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.309853][T14892] ? trace_irq_disable+0x37/0x100 [ 323.309869][T14892] ? clear_bhb_loop+0x60/0xb0 [ 323.309897][T14892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.309914][T14892] RIP: 0033:0x7fb51299af79 [ 323.309931][T14892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.309946][T14892] RSP: 002b:00007fb510bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.309965][T14892] RAX: ffffffffffffffda RBX: 00007fb512c15fa0 RCX: 00007fb51299af79 [ 323.309978][T14892] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000005 [ 323.309989][T14892] RBP: 00007fb510bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.310000][T14892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.310011][T14892] R13: 00007fb512c16038 R14: 00007fb512c15fa0 R15: 00007fff0db14ed8 [ 323.310040][T14892] [ 323.763067][T14898] xt_hashlimit: size too large, truncated to 1048576 [ 323.794153][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 323.802202][ C1] lec:lec_tx_timeout: lec0 [ 323.814304][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.404138][T14860] wg1 speed is unknown, defaulting to 1000 [ 324.502466][T14904] netlink: 'syz.3.2305': attribute type 10 has an invalid length. [ 324.711142][T14920] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2308'. [ 325.533802][T14942] netlink: 'syz.3.2317': attribute type 9 has an invalid length. [ 325.602643][T14950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.725050][T14948] lo speed is unknown, defaulting to 1000 [ 325.922596][T14948] wg1 speed is unknown, defaulting to 1000 [ 326.127591][T14969] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2324'. [ 326.138737][T14967] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2323'. [ 326.421857][T14979] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 326.715513][T14979] bond8: entered promiscuous mode [ 326.720986][T14979] 8021q: adding VLAN 0 to HW filter on device bond8 [ 326.917503][T14989] bond8: (slave bridge9): making interface the new active one [ 326.930049][T14989] bridge9: entered promiscuous mode [ 326.969944][T14989] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 327.093637][T15004] bond10: option updelay: invalid value (18446744072924056005) [ 327.111737][T15004] bond10: option updelay: allowed values 0 - 2147483647 [ 327.135165][T15004] bond10 (unregistering): Released all slaves [ 327.359708][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.369749][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.381509][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.447883][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.478464][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.514031][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.554931][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.563963][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.577164][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.589315][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2333'. [ 327.657832][T15030] lo speed is unknown, defaulting to 1000 [ 328.083142][T15049] netlink: 'syz.1.2341': attribute type 2 has an invalid length. [ 328.108059][T15049] netlink: 'syz.1.2341': attribute type 1 has an invalid length. [ 328.253048][T15030] wg1 speed is unknown, defaulting to 1000 [ 328.517641][T15072] netlink: 'syz.0.2348': attribute type 13 has an invalid length. [ 328.525787][T15073] netlink: 'syz.0.2348': attribute type 13 has an invalid length. [ 328.735236][T15075] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 328.834481][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 328.842569][ C1] lec:lec_tx_timeout: lec0 [ 328.848330][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.513451][T15126] ip6tnl0: Caught tx_queue_len zero misconfig [ 330.228643][T15156] veth0: entered promiscuous mode [ 330.253149][T15156] veth0 (unregistering): left promiscuous mode [ 330.570823][T15171] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 330.656762][T15171] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.824355][T15178] bond4: (slave veth5): Enslaving as an active interface with a down link [ 330.862096][T15171] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 330.891125][T15171] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 330.993341][T15200] netlink: 'syz.1.2388': attribute type 1 has an invalid length. [ 331.008254][T15201] netlink: 'syz.1.2388': attribute type 1 has an invalid length. [ 331.222635][T15216] tipc: Enabled bearer , priority 0 [ 331.240685][T15216] syzkaller0: entered promiscuous mode [ 331.255385][T15216] syzkaller0: entered allmulticast mode [ 331.353222][T15217] lo speed is unknown, defaulting to 1000 [ 331.393294][T15220] syzkaller1: entered promiscuous mode [ 331.409736][T15220] syzkaller1: entered allmulticast mode [ 331.625944][T15216] tipc: Resetting bearer [ 331.652513][T15215] tipc: Resetting bearer [ 331.735358][T15215] tipc: Disabling bearer [ 331.890679][T15241] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 332.061415][T15217] wg1 speed is unknown, defaulting to 1000 [ 332.063550][T15212] lo speed is unknown, defaulting to 1000 [ 332.149424][T15260] gtp0: entered promiscuous mode [ 332.170700][T15260] gtp0: entered allmulticast mode [ 332.200907][T15262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.382368][T15259] syzkaller0: entered promiscuous mode [ 332.389100][T15259] syzkaller0: entered allmulticast mode [ 332.521551][T15276] sctp: [Deprecated]: syz.1.2407 (pid 15276) Use of int in maxseg socket option. [ 332.521551][T15276] Use struct sctp_assoc_value instead [ 332.880903][T15283] __nla_validate_parse: 68 callbacks suppressed [ 332.880932][T15283] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2410'. [ 332.945372][T15283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2410'. [ 332.999156][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 333.864171][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 333.872227][ C1] lec:lec_tx_timeout: lec0 [ 333.876922][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.589656][T15212] wg1 speed is unknown, defaulting to 1000 [ 335.039643][T15311] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2414'. [ 335.060935][T15309] syzkaller0: entered promiscuous mode [ 335.072427][T15309] syzkaller0: entered allmulticast mode [ 335.100754][T15309] 0: reclassify loop, rule prio 0, protocol 800 [ 335.115022][ T5902] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 335.335311][ T5902] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 335.502117][T15324] netlink: 744 bytes leftover after parsing attributes in process `syz.1.2418'. [ 335.674448][ T8246] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 336.826171][T15371] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2426'. [ 336.984439][T15385] x_tables: duplicate underflow at hook 1 [ 337.564300][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 337.880710][ T8242] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 337.889375][ T8242] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 337.900900][T15371] 8021q: VLANs not supported on gre0 [ 338.045193][T15405] netlink: 'syz.1.2435': attribute type 1 has an invalid length. [ 338.053349][T15405] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2435'. [ 338.102829][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2438'. [ 338.157636][ T797] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 338.442762][T15425] bridge_slave_1: entered promiscuous mode [ 338.463778][T15425] netlink: 'syz.2.2441': attribute type 10 has an invalid length. [ 338.499722][T15425] veth1_macvtap (unregistering): left allmulticast mode [ 338.528743][T15425] macsec0 (unregistering): left allmulticast mode [ 338.649015][T15435] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 338.796591][T15438] netlink: 'syz.1.2444': attribute type 2 has an invalid length. [ 338.849610][T15441] netlink: 'syz.0.2446': attribute type 4 has an invalid length. [ 338.859698][T15441] netlink: 'syz.0.2446': attribute type 1 has an invalid length. [ 338.870888][T15441] netlink: 15506 bytes leftover after parsing attributes in process `syz.0.2446'. [ 338.884260][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 338.892373][ C1] lec:lec_tx_timeout: lec0 [ 338.897656][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.101190][T15455] netlink: 'syz.0.2448': attribute type 8 has an invalid length. [ 339.253022][T15468] netlink: 'syz.4.2450': attribute type 28 has an invalid length. [ 339.296225][T15471] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2452'. [ 339.373720][T15473] dvmrp1: entered allmulticast mode [ 339.382678][T15468] lo: left allmulticast mode [ 339.389889][T15468] dvmrp1: left allmulticast mode [ 339.516804][T15464] syz_tun: entered allmulticast mode [ 340.134639][T15460] syz_tun: left allmulticast mode [ 340.147463][T15506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2461'. [ 340.336438][T15511] syzkaller1: entered promiscuous mode [ 340.371384][T15511] syzkaller1: entered allmulticast mode [ 340.767207][T15537] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2468'. [ 340.827594][T15537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.871240][T15537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.895733][T15537] bond0 (unregistering): Released all slaves [ 341.061727][T15556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2477'. [ 341.684255][T15584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2483'. [ 341.710835][T15584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2483'. [ 341.901071][T15598] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2488'. [ 342.039099][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 342.123443][T15603] tipc: Enabled bearer , priority 0 [ 342.137693][T15603] syzkaller0: entered promiscuous mode [ 342.150094][T15603] syzkaller0: entered allmulticast mode [ 342.165622][T15605] lo speed is unknown, defaulting to 1000 [ 342.212805][T15603] tipc: Resetting bearer [ 342.224772][T15602] tipc: Resetting bearer [ 342.268215][T15602] tipc: Disabling bearer [ 342.616906][T15605] wg1 speed is unknown, defaulting to 1000 [ 342.623747][T15607] lo speed is unknown, defaulting to 1000 [ 343.352574][T15607] wg1 speed is unknown, defaulting to 1000 [ 343.458365][T15666] __nla_validate_parse: 4 callbacks suppressed [ 343.458384][T15666] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2502'. [ 343.826719][T15684] netlink: 'syz.4.2503': attribute type 1 has an invalid length. [ 343.856671][T15686] netlink: 5532 bytes leftover after parsing attributes in process `syz.2.2505'. [ 343.904186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 343.912350][ C1] lec:lec_tx_timeout: lec0 [ 343.918380][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 343.932994][T15686] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 344.011692][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 344.048256][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 344.284471][T15684] lo speed is unknown, defaulting to 1000 [ 344.426011][T15695] tipc: Enabled bearer , priority 0 [ 344.466808][T15695] syzkaller0: entered promiscuous mode [ 344.473530][T15695] syzkaller0: entered allmulticast mode [ 344.624426][T15695] tipc: Resetting bearer [ 344.705448][T15695] tipc: Disabling bearer [ 344.822669][T15704] sit0: entered promiscuous mode [ 344.846265][T15704] netlink: 'syz.3.2508': attribute type 1 has an invalid length. [ 344.896107][T15704] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2508'. [ 344.940192][T15684] wg1 speed is unknown, defaulting to 1000 [ 344.987123][T15709] tipc: Enabled bearer , priority 0 [ 345.003913][T15708] syzkaller0: entered promiscuous mode [ 345.011062][T15708] syzkaller0: entered allmulticast mode [ 345.094572][T15708] tipc: Resetting bearer [ 345.113208][T15708] tipc: Disabling bearer [ 345.390100][T15716] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2513'. [ 345.483064][T15723] block nbd0: NBD_DISCONNECT [ 345.498163][T15723] block nbd0: Send disconnect failed -32 [ 345.512379][T15723] block nbd0: shutting down sockets [ 345.573208][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2516'. [ 345.822907][T15745] bond0: (slave rose0): Releasing backup interface [ 345.923458][T15754] lo speed is unknown, defaulting to 1000 [ 346.580996][T15754] wg1 speed is unknown, defaulting to 1000 [ 347.338442][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 347.348257][T15822] netlink: 'syz.4.2538': attribute type 30 has an invalid length. [ 347.403044][ T980] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.412675][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 347.421856][T15824] netlink: 'syz.3.2539': attribute type 291 has an invalid length. [ 347.430292][T15822] netlink: 'syz.4.2538': attribute type 30 has an invalid length. [ 347.483432][ T980] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.516019][ T980] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.555764][ T980] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.850701][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2543'. [ 347.955832][T15841] syzkaller0: entered allmulticast mode [ 348.076648][T15860] nbd: must specify at least one socket [ 348.113197][T15868] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 348.469067][T15883] __nla_validate_parse: 2 callbacks suppressed [ 348.469087][T15883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2552'. [ 348.543637][T15886] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2552'. [ 348.616914][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 348.619312][T15881] Cannot find add_set index 3 as target [ 348.637526][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 348.658043][T15890] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2552'. [ 348.944358][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 348.952469][ C1] lec:lec_tx_timeout: lec0 [ 348.959540][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 349.361182][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'. [ 349.490908][T15927] netlink: 'syz.4.2562': attribute type 2 has an invalid length. [ 349.747872][T15927] : entered promiscuous mode [ 349.805419][T15935] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2564'. [ 349.817972][T15934] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2564'. [ 349.835601][T15935] netlink: Conntrack attr has 4 unknown bytes [ 349.841898][T15934] netlink: Conntrack attr has 4 unknown bytes [ 349.863904][T15940] IPVS: Unknown mcast interface: dvmrp1 [ 349.883363][T15940] netlink: 'syz.0.2565': attribute type 13 has an invalid length. [ 349.898971][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2565'. [ 349.916529][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'. [ 350.066704][T15940] macvtap2: entered promiscuous mode [ 350.096900][T15940] veth1_to_hsr: entered promiscuous mode [ 350.121814][T15940] macvtap2: entered allmulticast mode [ 350.132192][T15940] veth1_to_hsr: entered allmulticast mode [ 350.354249][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 350.503276][T15960] lo speed is unknown, defaulting to 1000 [ 350.749788][T15974] vlan0: entered allmulticast mode [ 350.757483][T15974] veth0_to_bond: entered allmulticast mode [ 350.806114][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 351.010429][T15984] lo speed is unknown, defaulting to 1000 [ 351.045027][T15960] wg1 speed is unknown, defaulting to 1000 [ 351.171870][T16000] bond0: entered promiscuous mode [ 351.422541][T15984] wg1 speed is unknown, defaulting to 1000 [ 351.605428][T16016] can: request_module (can-proto-0) failed. [ 352.212083][T16040] syzkaller0: entered promiscuous mode [ 352.217945][T16040] syzkaller0: entered allmulticast mode [ 352.539136][T16055] lo speed is unknown, defaulting to 1000 [ 352.867145][T16075] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 352.897819][T16081] syzkaller0: entered promiscuous mode [ 352.903515][T16081] syzkaller0: entered allmulticast mode [ 353.003434][T16055] wg1 speed is unknown, defaulting to 1000 [ 353.243876][T16092] batadv_slave_1: entered promiscuous mode [ 353.311521][T16091] batadv_slave_1: left promiscuous mode [ 353.657229][T16116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.686753][T16117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.707641][T16116] __nla_validate_parse: 12 callbacks suppressed [ 353.707659][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2617'. [ 353.974518][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 353.982647][ C1] lec:lec_tx_timeout: lec0 [ 353.987664][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 354.272683][T16133] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2621'. [ 354.420042][T16141] lo speed is unknown, defaulting to 1000 [ 354.497256][T16148] sctp: [Deprecated]: syz.2.2623 (pid 16148) Use of int in maxseg socket option. [ 354.497256][T16148] Use struct sctp_assoc_value instead [ 354.857456][T16160] netlink: 'syz.0.2628': attribute type 29 has an invalid length. [ 354.893041][T16160] netlink: 'syz.0.2628': attribute type 29 has an invalid length. [ 354.933426][T16160] netlink: 'syz.0.2628': attribute type 40 has an invalid length. [ 355.016735][T16168] IPVS: Error connecting to the multicast addr [ 355.225558][T16141] wg1 speed is unknown, defaulting to 1000 [ 355.365313][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 355.379102][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2634'. [ 355.526158][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2635'. [ 355.572818][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2635'. [ 355.586789][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2635'. [ 355.602561][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2635'. [ 355.619052][T16198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2635'. [ 355.630652][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2635'. [ 356.350186][T16194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.397854][T16194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.735464][ T34] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.794387][ T1166] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.804630][ T1166] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.813032][ T1166] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 357.224447][T16239] tipc: Can't bind to reserved service type 1 [ 357.678435][T16268] IPv6: sit2: Disabled Multicast RS [ 358.696850][T16302] veth1_vlan: left promiscuous mode [ 359.095309][T16323] syzkaller1: entered promiscuous mode [ 359.104680][T16323] syzkaller1: entered allmulticast mode [ 359.326546][T16334] __nla_validate_parse: 131 callbacks suppressed [ 359.326565][T16334] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2672'. [ 359.525737][T16352] team_slave_1: Caught tx_queue_len zero misconfig [ 359.954093][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5970 ms [ 359.962301][ C1] lec:lec_tx_timeout: lec0 [ 359.967173][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.024894][T16372] openvswitch: netlink: Message has -2 unknown bytes. [ 360.040740][T16372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.344308][T16390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2687'. [ 360.573009][T16404] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2690'. [ 360.735749][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 360.756294][T16407] xt_bpf: check failed: parse error [ 360.764801][T16409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2692'. [ 360.802079][T16415] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2694'. [ 360.963891][T16420] netlink: 'syz.0.2695': attribute type 10 has an invalid length. [ 361.016993][T16425] tipc: Enabling of bearer rejected, failed to enable media [ 361.100459][T16420] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 361.123582][T16420] bond0: (slave hsr0): Error -95 calling set_mac_address [ 361.235975][T16430] netlink: 'syz.3.2700': attribute type 2 has an invalid length. [ 361.311828][T16438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2702'. [ 361.346189][T16441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2703'. [ 361.521478][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2708'. [ 361.552382][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2710'. [ 361.627674][T16458] sctp: [Deprecated]: syz.1.2711 (pid 16458) Use of int in maxseg socket option. [ 361.627674][T16458] Use struct sctp_assoc_value instead [ 361.872514][T16465] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 362.003808][T16465] 8021q: adding VLAN 0 to HW filter on device bond10 [ 362.017113][T16475] erspan0: entered allmulticast mode [ 362.023710][T16468] netlink: 'syz.1.2714': attribute type 4 has an invalid length. [ 362.049130][T16475] bond3: (slave erspan0): Releasing active interface [ 362.087104][T16475] ip6gretap1: entered promiscuous mode [ 362.120173][T16475] bond10: (slave erspan0): making interface the new active one [ 362.144538][T16475] bond10: (slave erspan0): Enslaving as an active interface with an up link [ 362.644633][T16494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.685224][T16494] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 362.708132][T16494] bond0: (slave gre0): Error -95 calling set_mac_address [ 363.113444][T16514] vlan3: entered allmulticast mode [ 363.133059][T16514] bond0: entered allmulticast mode [ 363.862868][T16543] tipc: Enabled bearer , priority 0 [ 363.879826][T16543] syzkaller0: entered promiscuous mode [ 363.886791][T16543] syzkaller0: entered allmulticast mode [ 363.908196][T16542] xt_hashlimit: size too large, truncated to 1048576 [ 363.915569][T16542] xt_hashlimit: max too large, truncated to 1048576 [ 363.924210][T16545] xt_socket: unknown flags 0x50 [ 364.434859][T16564] __nla_validate_parse: 9 callbacks suppressed [ 364.434877][T16564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2742'. [ 364.613408][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2735'. [ 364.855324][T16541] tipc: Resetting bearer [ 364.865505][T16560] netlink: 'syz.4.2741': attribute type 10 has an invalid length. [ 364.903825][T16541] tipc: Disabling bearer [ 364.974422][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 364.982507][ C1] lec:lec_tx_timeout: lec0 [ 364.987231][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.062129][T16584] rdma_op ffff88805733b9f0 conn xmit_rdma 0000000000000000 [ 365.349239][T16598] netlink: 'syz.0.2751': attribute type 2 has an invalid length. [ 365.374290][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 365.398444][T16598] sit0: Caught tx_queue_len zero misconfig [ 365.473768][T16602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2754'. [ 365.642957][T16604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.690836][T16613] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2758'. [ 365.700752][T16612] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2756'. [ 365.742420][T16613] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2758'. [ 365.760547][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 366.294493][ T30] audit: type=1107 audit(1770721725.778:8): pid=16636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 366.318460][T16642] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 366.324442][T16642] pim6reg1: linktype set to 776 [ 366.727077][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.737068][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.747272][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.755784][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.763671][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.785376][T16662] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.2772'. [ 366.795024][T16662] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.2772'. [ 366.839901][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.864359][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.873615][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.894339][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.902207][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.994275][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 367.121847][T16656] lo speed is unknown, defaulting to 1000 [ 367.719709][T16702] netlink: 'syz.3.2783': attribute type 21 has an invalid length. [ 367.850416][T16656] wg1 speed is unknown, defaulting to 1000 [ 367.954897][T16704] lo speed is unknown, defaulting to 1000 [ 367.960809][T16707] syzkaller0: entered promiscuous mode [ 367.966429][T16707] syzkaller0: entered allmulticast mode [ 368.008935][T16709] ip6t_srh: unknown srh match flags 4000 [ 368.197730][T16717] netlink: 'syz.3.2789': attribute type 1 has an invalid length. [ 368.535653][T16656] chnl_net:caif_netlink_parms(): no params data found [ 368.680285][T16704] wg1 speed is unknown, defaulting to 1000 [ 368.861390][T16743] netlink: 'syz.2.2797': attribute type 66 has an invalid length. [ 369.001482][ T5824] Bluetooth: hci5: command tx timeout [ 369.212054][T16753] syzkaller0: entered promiscuous mode [ 369.217891][T16753] syzkaller0: entered allmulticast mode [ 369.258366][T16748] netlink: 'syz.3.2799': attribute type 12 has an invalid length. [ 369.282100][T16656] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.301647][T16656] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.324335][T16656] bridge_slave_0: entered allmulticast mode [ 369.357861][T16656] bridge_slave_0: entered promiscuous mode [ 370.793659][T16656] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.801093][T16656] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.808423][T16656] bridge_slave_1: entered allmulticast mode [ 370.816193][T16656] bridge_slave_1: entered promiscuous mode [ 370.832702][T16766] __nla_validate_parse: 12 callbacks suppressed [ 370.832718][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 370.844224][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 370.857064][ C1] lec:lec_tx_timeout: lec0 [ 370.862176][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 370.866358][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'. [ 370.877604][T16766] netlink: 'syz.2.2803': attribute type 6 has an invalid length. [ 370.944862][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 370.964736][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'. [ 370.979359][T16656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.984540][T16766] netlink: 'syz.2.2803': attribute type 6 has an invalid length. [ 371.049379][T16656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.080060][ T5824] Bluetooth: hci5: command tx timeout [ 371.209478][T16656] team0: Port device team_slave_0 added [ 371.247323][T16656] team0: Port device team_slave_1 added [ 371.354619][T16780] vlan0: entered allmulticast mode [ 371.363520][T16780] veth0_to_bond: entered allmulticast mode [ 371.377815][T16784] lo speed is unknown, defaulting to 1000 [ 371.378484][T16789] syzkaller1: entered promiscuous mode [ 371.392284][T16789] syzkaller1: entered allmulticast mode [ 371.475159][T16656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.482183][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.737089][T16656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.832916][T16784] wg1 speed is unknown, defaulting to 1000 [ 371.840213][T16656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.858400][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.890116][T16656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.126623][T16656] hsr_slave_0: entered promiscuous mode [ 372.157350][T16656] hsr_slave_1: entered promiscuous mode [ 372.688800][T16833] vlan0: entered allmulticast mode [ 372.703914][T16833] bridge0: port 2(vlan0) entered blocking state [ 372.711084][T16833] bridge0: port 2(vlan0) entered disabled state [ 372.722606][T16833] vlan0: entered promiscuous mode [ 372.790124][T16839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2819'. [ 372.800518][T16839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2819'. [ 372.810142][T16839] netlink: 'syz.0.2819': attribute type 5 has an invalid length. [ 372.821468][T16839] netlink: 'syz.0.2819': attribute type 1 has an invalid length. [ 372.867400][T16656] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.882377][T16656] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 52395 - 0 [ 372.920225][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2819'. [ 372.969845][T16656] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.996239][T16656] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 52395 - 0 [ 373.099614][T16656] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.113419][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2820'. [ 373.124536][T16656] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 52395 - 0 [ 373.159468][ T5824] Bluetooth: hci5: command tx timeout [ 373.178272][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2823'. [ 373.190817][T16857] netlink: 'syz.2.2823': attribute type 20 has an invalid length. [ 373.199325][T16857] netlink: 'syz.2.2823': attribute type 21 has an invalid length. [ 373.229472][T16656] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.255211][T16656] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 52395 - 0 [ 373.448940][T16868] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 373.561140][T16656] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.593640][T16656] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.619568][T16656] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.650221][T16656] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.836933][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 374.089028][T16656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.141759][T16656] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.206771][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.213977][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.245632][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.252827][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.467106][ T5823] IPVS: starting estimator thread 0... [ 374.566738][T16915] IPVS: using max 31 ests per chain, 74400 per kthread [ 374.852884][T16656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.925672][T16936] bridge_slave_1: entered promiscuous mode [ 375.005557][T16656] veth0_vlan: entered promiscuous mode [ 375.051121][T16656] veth1_vlan: entered promiscuous mode [ 375.058173][T16942] netlink: 'syz.0.2847': attribute type 83 has an invalid length. [ 375.159424][T16656] veth0_macvtap: entered promiscuous mode [ 375.196775][T16656] veth1_macvtap: entered promiscuous mode [ 375.219710][T16951] veth0: Caught tx_queue_len zero misconfig [ 375.250036][ T5824] Bluetooth: hci5: command tx timeout [ 375.322948][T16656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.336909][T16656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.352560][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.379048][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.404026][ T8253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.451903][ T8253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.541494][T16961] syzkaller0: entered allmulticast mode [ 375.572068][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.592191][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.606199][T16961] syzkaller0 (unregistering): left allmulticast mode [ 375.687716][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.696541][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.874506][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.882642][ C1] lec:lec_tx_timeout: lec0 [ 375.887595][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.903237][T16985] __nla_validate_parse: 7 callbacks suppressed [ 375.903253][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2859'. [ 375.948445][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2859'. [ 375.978048][T16980] veth1_to_hsr: left allmulticast mode [ 375.989397][T16980] veth1_to_hsr: left promiscuous mode [ 376.019737][ T8250] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 376.049876][T16977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2857'. [ 376.058864][T16985] netlink: 'syz.2.2859': attribute type 4 has an invalid length. [ 376.058884][T16985] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2859'. [ 376.076812][T16986] lo speed is unknown, defaulting to 1000 [ 376.087216][ T8250] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 376.103181][ T8250] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 376.136377][ T8250] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 376.350978][T17000] veth1_to_team: Caught tx_queue_len zero misconfig [ 376.378834][T17005] tipc: Started in network mode [ 376.392974][T17005] tipc: Node identity ac14140f, cluster identity 4711 [ 376.451409][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 376.495314][T17005] tipc: New replicast peer: 255.255.255.255 [ 376.501942][T17005] tipc: Enabled bearer , priority 10 [ 376.514368][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 376.555826][T17005] netlink: 'syz.1.2863': attribute type 13 has an invalid length. [ 376.641594][T17019] netlink: 'syz.2.2864': attribute type 4 has an invalid length. [ 376.667606][T17019] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2864'. [ 376.763502][T17005] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.771324][T17005] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.860827][T17005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.875283][T17005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.016311][T16986] wg1 speed is unknown, defaulting to 1000 [ 377.101204][ T8253] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.125171][ T8253] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.140912][ T8253] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.178501][ T8253] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.264427][T17033] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2869'. [ 377.514226][ T5895] tipc: Node number set to 2886997007 [ 377.737526][T17050] netlink: 'syz.1.2874': attribute type 5 has an invalid length. [ 377.774919][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.794238][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.907577][T17068] syzkaller1: entered promiscuous mode [ 377.913174][ T30] audit: type=1800 audit(1770721737.398:9): pid=17054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2872" name="memory.events" dev="tmpfs" ino=2929 res=0 errno=0 [ 377.954374][T17068] syzkaller1: entered allmulticast mode [ 378.092500][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'. [ 378.117262][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'. [ 378.286481][T17078] veth0_virt_wifi: entered promiscuous mode [ 378.295444][T17078] veth0_virt_wifi: left promiscuous mode [ 378.348291][T17080] veth0_virt_wifi: entered promiscuous mode [ 378.367693][T17080] veth0_virt_wifi: left promiscuous mode [ 378.577881][T17086] netlink: 'syz.3.2881': attribute type 1 has an invalid length. [ 378.636683][T17086] vlan4: entered allmulticast mode [ 378.642186][T17086] bond9: entered allmulticast mode [ 378.995578][T17116] x_tables: duplicate underflow at hook 3 [ 379.045100][T17105] syzkaller0: entered promiscuous mode [ 379.050637][T17105] syzkaller0: entered allmulticast mode [ 379.173859][T17121] lo speed is unknown, defaulting to 1000 [ 379.479723][T17133] batadv0: entered promiscuous mode [ 379.487774][T17133] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 379.505976][T17121] wg1 speed is unknown, defaulting to 1000 [ 379.762332][T17143] netlink: 'syz.1.2894': attribute type 2 has an invalid length. [ 379.798666][T17143] : entered promiscuous mode [ 380.894187][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.902288][ C1] lec:lec_tx_timeout: lec0 [ 380.906948][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 381.808334][T17094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.056513][T17158] __nla_validate_parse: 3 callbacks suppressed [ 382.057481][T17158] netlink: 63 bytes leftover after parsing attributes in process `syz.4.2899'. [ 382.146945][T17154] lo speed is unknown, defaulting to 1000 [ 382.506311][T17154] wg1 speed is unknown, defaulting to 1000 [ 382.613703][T17193] syzkaller0: entered promiscuous mode [ 382.621246][T17193] syzkaller0: entered allmulticast mode [ 383.007241][T17202] netem: change failed [ 383.028019][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'. [ 383.038858][T17203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.790833][T17215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'. [ 383.972455][T17221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.047551][T17223] netlink: 'syz.1.2918': attribute type 21 has an invalid length. [ 384.143690][T17225] netlink: 'syz.1.2919': attribute type 10 has an invalid length. [ 384.155491][T17225] team0: Port device dummy0 added [ 384.161630][T17225] netlink: 'syz.1.2919': attribute type 10 has an invalid length. [ 384.176091][T17225] team0: Port device dummy0 removed [ 384.184440][T17225] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 384.456567][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 384.757871][T17239] netlink: 'syz.1.2923': attribute type 2 has an invalid length. [ 384.771398][T17239] !: entered promiscuous mode [ 385.013957][T17164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.291886][T17261] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2927'. [ 385.522854][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'. [ 385.600639][T17268] syzkaller0: entered promiscuous mode [ 385.629027][T17268] syzkaller0: entered allmulticast mode [ 385.728801][T17278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2931'. [ 385.891007][T17287] FAULT_INJECTION: forcing a failure. [ 385.891007][T17287] name failslab, interval 1, probability 0, space 0, times 0 [ 385.914357][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.922436][ C1] lec:lec_tx_timeout: lec0 [ 385.930714][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.953345][T17287] CPU: 1 UID: 0 PID: 17287 Comm: syz.1.2934 Not tainted syzkaller #0 PREEMPT(full) [ 385.953369][T17287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 385.953386][T17287] Call Trace: [ 385.953394][T17287] [ 385.953407][T17287] dump_stack_lvl+0xe8/0x150 [ 385.953438][T17287] should_fail_ex+0x412/0x560 [ 385.953466][T17287] should_failslab+0xa8/0x100 [ 385.953491][T17287] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 385.953519][T17287] ? simple_start_creating+0xcc/0x110 [ 385.953541][T17287] ? alloc_inode+0x6a/0x1b0 [ 385.953563][T17287] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 385.953588][T17287] alloc_inode+0x6a/0x1b0 [ 385.953609][T17287] new_inode+0x22/0x170 [ 385.953635][T17287] __debugfs_create_file+0xb8/0x400 [ 385.953662][T17287] debugfs_create_file_full+0x3f/0x60 [ 385.953689][T17287] ref_tracker_dir_debugfs+0x197/0x360 [ 385.953715][T17287] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 385.953767][T17287] ? trace_kmalloc+0x1f/0xb0 [ 385.953782][T17287] ? __kvmalloc_node_noprof+0x5ba/0x8d0 [ 385.953807][T17287] ? __raw_spin_lock_init+0x45/0x100 [ 385.953833][T17287] alloc_netdev_mqs+0x272/0x11b0 [ 385.953850][T17287] ? __pfx_macvtap_setup+0x10/0x10 [ 385.953882][T17287] rtnl_create_link+0x31f/0xd70 [ 385.953907][T17287] rtnl_newlink_create+0x277/0xb70 [ 385.953933][T17287] ? __pfx___nla_validate_parse+0x10/0x10 [ 385.953970][T17287] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 385.953999][T17287] ? __pfx___mutex_lock+0x10/0x10 [ 385.954040][T17287] ? full_name_hash+0x89/0xe0 [ 385.954059][T17287] ? __dev_get_by_name+0x36/0x140 [ 385.954082][T17287] rtnl_newlink+0x1666/0x1be0 [ 385.954121][T17287] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.954162][T17287] ? __lock_acquire+0x6b5/0x2cf0 [ 385.954191][T17287] ? __lock_acquire+0x6b5/0x2cf0 [ 385.954225][T17287] ? unwind_next_frame+0xa5/0x23c0 [ 385.954253][T17287] ? unwind_next_frame+0xa5/0x23c0 [ 385.954275][T17287] ? is_bpf_text_address+0x26/0x2b0 [ 385.954303][T17287] ? __lock_acquire+0x6b5/0x2cf0 [ 385.954338][T17287] ? is_bpf_text_address+0x292/0x2b0 [ 385.954359][T17287] ? is_bpf_text_address+0x26/0x2b0 [ 385.954392][T17287] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 385.954438][T17287] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.954461][T17287] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 385.954488][T17287] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 385.954510][T17287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.954532][T17287] ? __lock_acquire+0x6b5/0x2cf0 [ 385.954572][T17287] netlink_rcv_skb+0x232/0x4b0 [ 385.954595][T17287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.954620][T17287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.954653][T17287] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.954682][T17287] netlink_unicast+0x80f/0x9b0 [ 385.954710][T17287] ? __pfx_netlink_unicast+0x10/0x10 [ 385.954730][T17287] ? netlink_sendmsg+0x650/0xb40 [ 385.954750][T17287] ? skb_put+0x11b/0x210 [ 385.954778][T17287] netlink_sendmsg+0x813/0xb40 [ 385.954808][T17287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.954832][T17287] ? aa_sock_msg_perm+0xf1/0x1b0 [ 385.954857][T17287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.954880][T17287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.954900][T17287] ____sys_sendmsg+0xa68/0xad0 [ 385.954927][T17287] ? __might_fault+0xaf/0x130 [ 385.954961][T17287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.954998][T17287] ? import_iovec+0x73/0xa0 [ 385.955029][T17287] ___sys_sendmsg+0x2a5/0x360 [ 385.955055][T17287] ? __lock_acquire+0x6b5/0x2cf0 [ 385.955085][T17287] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.955148][T17287] ? __fget_files+0x2a/0x420 [ 385.955169][T17287] ? __fget_files+0x3a0/0x420 [ 385.955200][T17287] __x64_sys_sendmsg+0x1bd/0x2a0 [ 385.955230][T17287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.955267][T17287] ? __pfx_ksys_write+0x10/0x10 [ 385.955306][T17287] do_syscall_64+0xe2/0xf80 [ 385.955332][T17287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.955350][T17287] ? trace_irq_disable+0x37/0x100 [ 385.955368][T17287] ? clear_bhb_loop+0x60/0xb0 [ 385.955390][T17287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.955421][T17287] RIP: 0033:0x7f4ddff9af79 [ 385.955440][T17287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.955456][T17287] RSP: 002b:00007f4de0f1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.955476][T17287] RAX: ffffffffffffffda RBX: 00007f4de0215fa0 RCX: 00007f4ddff9af79 [ 385.955489][T17287] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000004 [ 385.955502][T17287] RBP: 00007f4de0f1b090 R08: 0000000000000000 R09: 0000000000000000 [ 385.955513][T17287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.955525][T17287] R13: 00007f4de0216038 R14: 00007f4de0215fa0 R15: 00007fffd881a948 [ 385.955557][T17287] [ 386.483415][T17287] debugfs: out of free dentries, can not create file 'netdev@ffff88807c610620' [ 386.939924][T17306] netlink: 'syz.0.2938': attribute type 2 has an invalid length. [ 387.306727][T17325] lo speed is unknown, defaulting to 1000 [ 387.513234][T17325] wg1 speed is unknown, defaulting to 1000 [ 387.542902][T17330] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 387.828863][T17340] FAULT_INJECTION: forcing a failure. [ 387.828863][T17340] name failslab, interval 1, probability 0, space 0, times 0 [ 387.897489][T17340] CPU: 0 UID: 0 PID: 17340 Comm: syz.2.2947 Not tainted syzkaller #0 PREEMPT(full) [ 387.897519][T17340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 387.897532][T17340] Call Trace: [ 387.897540][T17340] [ 387.897549][T17340] dump_stack_lvl+0xe8/0x150 [ 387.897583][T17340] should_fail_ex+0x412/0x560 [ 387.897614][T17340] should_failslab+0xa8/0x100 [ 387.897641][T17340] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 387.897674][T17340] ? simple_start_creating+0xcc/0x110 [ 387.897698][T17340] ? alloc_inode+0x6a/0x1b0 [ 387.897724][T17340] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 387.897750][T17340] alloc_inode+0x6a/0x1b0 [ 387.897773][T17340] new_inode+0x22/0x170 [ 387.897802][T17340] __debugfs_create_file+0xb8/0x400 [ 387.897832][T17340] debugfs_create_file_full+0x3f/0x60 [ 387.897862][T17340] ref_tracker_dir_debugfs+0x197/0x360 [ 387.897891][T17340] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 387.897959][T17340] ? trace_kmalloc+0x1f/0xb0 [ 387.897976][T17340] ? __kvmalloc_node_noprof+0x5ba/0x8d0 [ 387.898004][T17340] ? __raw_spin_lock_init+0x45/0x100 [ 387.898031][T17340] alloc_netdev_mqs+0x272/0x11b0 [ 387.898051][T17340] ? __pfx_macvtap_setup+0x10/0x10 [ 387.898085][T17340] rtnl_create_link+0x31f/0xd70 [ 387.898114][T17340] rtnl_newlink_create+0x277/0xb70 [ 387.898149][T17340] ? __mutex_lock+0x5ac/0x1300 [ 387.898185][T17340] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 387.898217][T17340] ? __pfx___mutex_lock+0x10/0x10 [ 387.898258][T17340] ? full_name_hash+0x89/0xe0 [ 387.898280][T17340] ? __dev_get_by_name+0x36/0x140 [ 387.898304][T17340] rtnl_newlink+0x1666/0x1be0 [ 387.898347][T17340] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.898393][T17340] ? __lock_acquire+0x6b5/0x2cf0 [ 387.898425][T17340] ? __lock_acquire+0x6b5/0x2cf0 [ 387.898466][T17340] ? unwind_next_frame+0xa5/0x23c0 [ 387.898497][T17340] ? unwind_next_frame+0xa5/0x23c0 [ 387.898524][T17340] ? is_bpf_text_address+0x26/0x2b0 [ 387.898568][T17340] ? __lock_acquire+0x6b5/0x2cf0 [ 387.898607][T17340] ? is_bpf_text_address+0x292/0x2b0 [ 387.898629][T17340] ? is_bpf_text_address+0x26/0x2b0 [ 387.898679][T17340] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 387.898717][T17340] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.898740][T17340] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 387.898767][T17340] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 387.898790][T17340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.898812][T17340] ? __lock_acquire+0x6b5/0x2cf0 [ 387.898853][T17340] netlink_rcv_skb+0x232/0x4b0 [ 387.898876][T17340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.898901][T17340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.898965][T17340] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.898997][T17340] netlink_unicast+0x80f/0x9b0 [ 387.899028][T17340] ? __pfx_netlink_unicast+0x10/0x10 [ 387.899052][T17340] ? netlink_sendmsg+0x650/0xb40 [ 387.899072][T17340] ? skb_put+0x11b/0x210 [ 387.899103][T17340] netlink_sendmsg+0x813/0xb40 [ 387.899137][T17340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.899165][T17340] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.899193][T17340] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.899216][T17340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.899239][T17340] ____sys_sendmsg+0xa68/0xad0 [ 387.899268][T17340] ? __might_fault+0xaf/0x130 [ 387.899304][T17340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.899343][T17340] ? import_iovec+0x73/0xa0 [ 387.899378][T17340] ___sys_sendmsg+0x2a5/0x360 [ 387.899406][T17340] ? __lock_acquire+0x6b5/0x2cf0 [ 387.899439][T17340] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.899507][T17340] ? __fget_files+0x2a/0x420 [ 387.899530][T17340] ? __fget_files+0x3a0/0x420 [ 387.899564][T17340] __x64_sys_sendmsg+0x1bd/0x2a0 [ 387.899597][T17340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.899637][T17340] ? __pfx_ksys_write+0x10/0x10 [ 387.899681][T17340] do_syscall_64+0xe2/0xf80 [ 387.899724][T17340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.899743][T17340] ? trace_irq_disable+0x37/0x100 [ 387.899762][T17340] ? clear_bhb_loop+0x60/0xb0 [ 387.899787][T17340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.899807][T17340] RIP: 0033:0x7fb51299af79 [ 387.899826][T17340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.899844][T17340] RSP: 002b:00007fb510bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.899866][T17340] RAX: ffffffffffffffda RBX: 00007fb512c15fa0 RCX: 00007fb51299af79 [ 387.899880][T17340] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000004 [ 387.899893][T17340] RBP: 00007fb510bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 387.899906][T17340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.899918][T17340] R13: 00007fb512c16038 R14: 00007fb512c15fa0 R15: 00007fff0db14ed8 [ 387.899960][T17340] [ 388.000575][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.020629][T17340] debugfs: out of free dentries, can not create file 'netdev@ffff8880270e0620' [ 388.028220][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.155140][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 388.165219][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.412446][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.420367][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.485287][T17336] lo speed is unknown, defaulting to 1000 [ 388.658919][T17346] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2948'. [ 388.996391][T17343] lo speed is unknown, defaulting to 1000 [ 389.005608][T17336] wg1 speed is unknown, defaulting to 1000 [ 389.605179][ T30] audit: type=1800 audit(1770721749.098:10): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2953" name="memory.events" dev="tmpfs" ino=2899 res=0 errno=0 [ 389.667889][T17343] wg1 speed is unknown, defaulting to 1000 [ 389.861581][ T8250] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.883762][ T8250] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.988517][ T8250] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.006134][ T8250] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.166061][ T8250] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.194610][ T8250] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.396592][ T8250] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.417094][ T8250] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.434515][ T5829] Bluetooth: hci3: command tx timeout [ 390.503893][T17373] lo speed is unknown, defaulting to 1000 [ 390.896615][T17373] wg1 speed is unknown, defaulting to 1000 [ 390.917452][T17343] chnl_net:caif_netlink_parms(): no params data found [ 390.954098][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 390.962162][ C1] lec:lec_tx_timeout: lec0 [ 390.967099][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.358986][ T8250] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 391.374152][ T8250] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 3a:c7:c2:0d:d7:be - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 391.434914][ T8250] ip6gretap1 (unregistering): left promiscuous mode [ 391.656068][T17421] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2961'. [ 391.997024][ T8250] bond10 (unregistering): (slave erspan0): Releasing active interface [ 392.087748][ T8250] batman_adv: batadv0: Removing interface: gretap3 [ 392.162664][ T8250] bond9 (unregistering): (slave geneve3): Releasing active interface [ 392.430645][ T8250] bond1 (unregistering): Released all slaves [ 392.446826][ T8250] bond2 (unregistering): Released all slaves [ 392.467246][ T8250] bond3 (unregistering): (slave veth5): Releasing active interface [ 392.476596][ T8250] bond3 (unregistering): Released all slaves [ 392.493347][ T8250] bond4 (unregistering): Released all slaves [ 392.508887][ T8250] bond5 (unregistering): Released all slaves [ 392.515016][ T5829] Bluetooth: hci3: command tx timeout [ 392.529150][ T8250] bond6 (unregistering): Released all slaves [ 392.547461][ T8250] bond7 (unregistering): (slave bond8): Releasing backup interface [ 392.555794][ T8250] bond8 (unregistering): left promiscuous mode [ 392.562953][ T8250] bond7 (unregistering): Released all slaves [ 392.581149][ T8250] bond8 (unregistering): Released all slaves [ 392.596594][ T8250] bond9 (unregistering): Released all slaves [ 392.611845][ T8250] bond0 (unregistering): Released all slaves [ 392.631301][ T8250] bond10 (unregistering): Released all slaves [ 392.802972][ T8250] : left promiscuous mode [ 392.865074][T17430] netlink: 'syz.3.2964': attribute type 4 has an invalid length. [ 392.918383][T17435] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2964'. [ 393.123277][T17343] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.134256][T17343] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.142268][T17343] bridge_slave_0: entered allmulticast mode [ 393.179655][T17343] bridge_slave_0: entered promiscuous mode [ 393.196834][ T8250] tipc: Left network mode [ 393.202797][T17343] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.235574][T17343] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.242858][T17343] bridge_slave_1: entered allmulticast mode [ 393.300660][ T8250] IPVS: stopping backup sync thread 12170 ... [ 393.316834][T17343] bridge_slave_1: entered promiscuous mode [ 393.590556][T17343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.627301][T17343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.706665][T17447] lo speed is unknown, defaulting to 1000 [ 393.756559][T17452] syzkaller0: entered promiscuous mode [ 393.772386][T17452] syzkaller0: entered allmulticast mode [ 394.153513][T17343] team0: Port device team_slave_0 added [ 394.249849][T17343] team0: Port device team_slave_1 added [ 394.511070][T17482] openvswitch: netlink: Actions may not be safe on all matching packets [ 394.591686][T17343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.598868][ T5829] Bluetooth: hci3: command tx timeout [ 394.616244][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.646407][T17343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.660149][T17447] wg1 speed is unknown, defaulting to 1000 [ 394.669507][T17343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.684181][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.738736][T17343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.826975][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 395.145427][T17343] hsr_slave_0: entered promiscuous mode [ 395.164624][T17343] hsr_slave_1: entered promiscuous mode [ 395.176693][T17343] debugfs: 'hsr0' already exists in 'hsr' [ 395.190321][T17343] Cannot create hsr debugfs directory [ 395.229005][ T8250] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 395.378580][T17516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2981'. [ 395.413375][T17519] netlink: 'syz.1.2980': attribute type 1 has an invalid length. [ 395.447776][T17519] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2980'. [ 395.701070][T17526] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2982'. [ 395.718967][T17527] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2982'. [ 395.974484][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 395.982666][ C1] lec:lec_tx_timeout: lec0 [ 395.987407][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 396.088254][T17539] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2985'. [ 396.121634][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 396.144439][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2986'. [ 396.181790][T17544] netlink: 'syz.3.2986': attribute type 4 has an invalid length. [ 396.199952][T17544] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2986'. [ 396.237390][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2987'. [ 396.341325][T17544] .`: renamed from bond0 (while UP) [ 396.393583][ T8250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.401614][T17548] netlink: 'syz.2.2987': attribute type 4 has an invalid length. [ 396.403096][ T8250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.489138][ T8250] pim6reg99999999 (unregistering): left allmulticast mode [ 396.609200][ T8250] team0 (unregistering): Port device team_slave_1 removed [ 396.638652][ T8250] team0 (unregistering): Port device team_slave_0 removed [ 396.678113][ T5829] Bluetooth: hci3: command tx timeout [ 396.838380][ T8250] team0 (unregistering): Port device dummy0 removed [ 397.424942][T17583] FAULT_INJECTION: forcing a failure. [ 397.424942][T17583] name failslab, interval 1, probability 0, space 0, times 0 [ 397.446316][T17583] CPU: 1 UID: 0 PID: 17583 Comm: syz.0.2994 Not tainted syzkaller #0 PREEMPT(full) [ 397.446344][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 397.446357][T17583] Call Trace: [ 397.446365][T17583] [ 397.446373][T17583] dump_stack_lvl+0xe8/0x150 [ 397.446406][T17583] should_fail_ex+0x412/0x560 [ 397.446436][T17583] should_failslab+0xa8/0x100 [ 397.446460][T17583] __kvmalloc_node_noprof+0x166/0x8d0 [ 397.446484][T17583] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 397.446512][T17583] alloc_netdev_mqs+0xa4b/0x11b0 [ 397.446539][T17583] rtnl_create_link+0x31f/0xd70 [ 397.446566][T17583] rtnl_newlink_create+0x277/0xb70 [ 397.446597][T17583] ? __mutex_lock+0x5ac/0x1300 [ 397.446632][T17583] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 397.446663][T17583] ? __pfx___mutex_lock+0x10/0x10 [ 397.446701][T17583] ? full_name_hash+0x89/0xe0 [ 397.446723][T17583] ? __dev_get_by_name+0x36/0x140 [ 397.446746][T17583] rtnl_newlink+0x1666/0x1be0 [ 397.446786][T17583] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.446829][T17583] ? __lock_acquire+0x6b5/0x2cf0 [ 397.446862][T17583] ? __lock_acquire+0x6b5/0x2cf0 [ 397.446900][T17583] ? unwind_next_frame+0xa5/0x23c0 [ 397.446931][T17583] ? unwind_next_frame+0xa5/0x23c0 [ 397.446955][T17583] ? is_bpf_text_address+0x26/0x2b0 [ 397.446985][T17583] ? __lock_acquire+0x6b5/0x2cf0 [ 397.447022][T17583] ? is_bpf_text_address+0x292/0x2b0 [ 397.447044][T17583] ? is_bpf_text_address+0x26/0x2b0 [ 397.447079][T17583] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 397.447119][T17583] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.447143][T17583] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 397.447171][T17583] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 397.447194][T17583] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.447225][T17583] ? __lock_acquire+0x6b5/0x2cf0 [ 397.447268][T17583] netlink_rcv_skb+0x232/0x4b0 [ 397.447296][T17583] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.447323][T17583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.447357][T17583] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.447389][T17583] netlink_unicast+0x80f/0x9b0 [ 397.447442][T17583] ? __pfx_netlink_unicast+0x10/0x10 [ 397.447465][T17583] ? netlink_sendmsg+0x650/0xb40 [ 397.447487][T17583] ? skb_put+0x11b/0x210 [ 397.447519][T17583] netlink_sendmsg+0x813/0xb40 [ 397.447553][T17583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.447582][T17583] ? aa_sock_msg_perm+0xf1/0x1b0 [ 397.447611][T17583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.447636][T17583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.447658][T17583] ____sys_sendmsg+0xa68/0xad0 [ 397.447686][T17583] ? __might_fault+0xaf/0x130 [ 397.447724][T17583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.447763][T17583] ? import_iovec+0x73/0xa0 [ 397.447799][T17583] ___sys_sendmsg+0x2a5/0x360 [ 397.447848][T17583] ? __lock_acquire+0x6b5/0x2cf0 [ 397.447882][T17583] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.447951][T17583] ? __fget_files+0x2a/0x420 [ 397.447972][T17583] ? __fget_files+0x3a0/0x420 [ 397.448008][T17583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 397.448041][T17583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.448083][T17583] ? __pfx_ksys_write+0x10/0x10 [ 397.448127][T17583] do_syscall_64+0xe2/0xf80 [ 397.448155][T17583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.448176][T17583] ? trace_irq_disable+0x37/0x100 [ 397.448196][T17583] ? clear_bhb_loop+0x60/0xb0 [ 397.448229][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.448250][T17583] RIP: 0033:0x7f3a2e79af79 [ 397.448268][T17583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.448286][T17583] RSP: 002b:00007f3a2f707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.448309][T17583] RAX: ffffffffffffffda RBX: 00007f3a2ea15fa0 RCX: 00007f3a2e79af79 [ 397.448324][T17583] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000004 [ 397.448337][T17583] RBP: 00007f3a2f707090 R08: 0000000000000000 R09: 0000000000000000 [ 397.448350][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.448362][T17583] R13: 00007f3a2ea16038 R14: 00007f3a2ea15fa0 R15: 00007ffe7f2ad3c8 [ 397.448389][T17583] [ 398.360463][ T8250] IPVS: stop unused estimator thread 0... [ 398.605927][T17630] syzkaller0: entered promiscuous mode [ 398.611467][T17630] syzkaller0: entered allmulticast mode [ 398.797969][T17343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 398.812688][T17343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 398.830545][T17343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 398.859339][T17343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.168889][T17343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.233565][T17659] batadv_slave_0: Caught tx_queue_len zero misconfig [ 399.298226][T17343] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.339417][T17665] xfrm0: Caught tx_queue_len zero misconfig [ 399.449694][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.456930][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.573923][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.581154][ T8250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.913404][T17697] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.944680][T17697] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 400.105779][T17697] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.154177][T17697] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 400.198647][T17698] lo speed is unknown, defaulting to 1000 [ 400.272300][T17697] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.314174][T17697] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 400.410218][T17343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.447804][T17697] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.507560][T17697] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 400.577866][T17716] vlan2: entered promiscuous mode [ 400.582972][T17716] geneve1: entered promiscuous mode [ 400.633442][T17716] vlan2: entered allmulticast mode [ 400.663140][T17716] geneve1: entered allmulticast mode [ 400.811364][ T8250] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.832527][ T8250] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 400.895602][ T8250] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.915826][ T8250] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 400.935780][ T8250] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.947320][ T8250] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 400.999436][ T980] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.011923][ T980] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 401.301250][T17744] __nla_validate_parse: 6 callbacks suppressed [ 401.301269][T17744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3018'. [ 401.350401][T17737] lo speed is unknown, defaulting to 1000 [ 401.631834][T17343] veth0_vlan: entered promiscuous mode [ 401.952235][T17766] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 401.973881][T17343] veth1_vlan: entered promiscuous mode [ 402.194131][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms [ 402.202252][ C1] lec:lec_tx_timeout: lec0 [ 402.212027][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 402.255588][T17766] erspan0: left promiscuous mode [ 402.272937][T17766] sit0: left promiscuous mode [ 402.288227][T17766] ip6tnl0: left promiscuous mode [ 402.353515][T17766] bridge0: port 3(dummy0) entered disabled state [ 402.571330][T17766] batadv0: left promiscuous mode [ 403.010094][T17766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.435504][T17766] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 403.580738][T17766] bridge1: left allmulticast mode [ 403.627278][T17766] ip6gre1: left promiscuous mode [ 403.632365][T17766] ip6gre1: left allmulticast mode [ 403.706599][T17766] bond3: left promiscuous mode [ 403.711434][T17766] bond3: left allmulticast mode [ 403.724859][T17766] ip6erspan0: left promiscuous mode [ 403.757273][T17766] bond7: left promiscuous mode [ 403.762057][T17766] vti0: left promiscuous mode [ 403.785829][T17766] bond8: left promiscuous mode [ 403.791171][T17766] bridge9: left promiscuous mode [ 403.821954][T17778] tipc: Enabling of bearer rejected, failed to enable media [ 403.842427][ T8253] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.864468][ T8253] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.873481][ T8253] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 403.882947][ T8253] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.900315][ T8253] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.910527][ T8253] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 403.975574][ T8253] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.997009][ T8253] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.007659][ T8253] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 404.021486][ T8253] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.031069][ T8253] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.041274][ T8253] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 404.079450][T17343] veth0_macvtap: entered promiscuous mode [ 404.090369][T17343] veth1_macvtap: entered promiscuous mode [ 404.141819][T17343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.181909][T17343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.216558][ T8253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.242543][ T8253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.273168][ T8253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.310397][ T8253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.471648][ T980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.489525][ T980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.544934][ T8246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.556120][ T8246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.671930][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 404.841850][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3032'. [ 404.859383][T17844] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 404.869456][T17844] macvtap1: entered promiscuous mode [ 405.348623][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 405.363729][T17866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3038'. [ 405.594241][T17893] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 405.800775][T17909] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 405.816106][T17908] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3047'. [ 405.838622][T17909] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3048'. [ 406.432893][T17918] pimreg: entered allmulticast mode [ 406.441806][T17918] pimreg: left allmulticast mode [ 406.511711][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.529398][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.538417][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.556295][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.565548][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.832509][T17921] lo speed is unknown, defaulting to 1000 [ 407.211170][T17928] lo speed is unknown, defaulting to 1000 [ 407.497767][T17962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3060'. [ 407.767230][T17977] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3064'. [ 407.839517][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3064'. [ 407.901569][ T980] vlan0: left allmulticast mode [ 407.908442][ T980] vlan0: left promiscuous mode [ 407.915301][ T980] bridge0: port 2(vlan0) entered disabled state [ 407.954060][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 407.962105][ C1] lec:lec_tx_timeout: lec0 [ 407.974166][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 407.992270][ T980] dummy0: left allmulticast mode [ 408.015226][ T980] dummy0: left promiscuous mode [ 408.020349][ T980] bridge0: port 3(dummy0) entered disabled state [ 408.042512][ T980] bridge_slave_0: left allmulticast mode [ 408.048487][ T980] bridge_slave_0: left promiscuous mode [ 408.055243][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.093845][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'. [ 408.162457][T17997] Cannot find del_set index 4 as target [ 408.348120][ T980] bond7 (unregistering): (slave vti0): Releasing backup interface [ 408.406282][ T980] bond2 (unregistering): (slave gretap1): Releasing active interface [ 408.599981][ T5824] Bluetooth: hci4: command tx timeout [ 408.649748][ T980] bond1 (unregistering): (slave geneve2): Releasing active interface [ 409.108376][ T980] bond8 (unregistering): (slave bridge9): Releasing backup interface [ 409.196581][ T980] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.206166][ T980] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.215511][ T980] .` (unregistering): Released all slaves [ 409.226359][ T980] bond1 (unregistering): Released all slaves [ 409.246927][ T980] bond2 (unregistering): Released all slaves [ 409.261228][ T980] bond3 (unregistering): Released all slaves [ 409.276081][ T980] bond4 (unregistering): Released all slaves [ 409.292670][ T980] bond5 (unregistering): Released all slaves [ 409.307082][ T980] bond6 (unregistering): Released all slaves [ 409.325310][ T980] bond7 (unregistering): Released all slaves [ 409.339153][ T980] bond8 (unregistering): Released all slaves [ 409.353571][ T980] bond9 (unregistering): Released all slaves [ 409.539641][ T980] : left promiscuous mode [ 409.603881][T17921] chnl_net:caif_netlink_parms(): no params data found [ 409.644459][ T980] tipc: Disabling bearer [ 409.662395][ T980] tipc: Left network mode [ 409.885046][T18041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3072'. [ 409.936551][T18041] openvswitch: netlink: IP tunnel dst address not specified [ 410.247529][T17921] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.274999][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.291266][T17921] bridge_slave_0: entered allmulticast mode [ 410.316486][T17921] bridge_slave_0: entered promiscuous mode [ 410.346792][T18055] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 410.391473][T17921] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.422288][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.442337][T17921] bridge_slave_1: entered allmulticast mode [ 410.466740][T17921] bridge_slave_1: entered promiscuous mode [ 410.581060][T18061] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3075'. [ 410.605085][T18061] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3075'. [ 410.654521][T18058] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3075'. [ 410.684289][ T5824] Bluetooth: hci4: command tx timeout [ 410.688069][T17921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.718039][T18062] netlink: 'syz.4.3076': attribute type 10 has an invalid length. [ 410.728730][T18069] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3077'. [ 410.750861][T18070] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3077'. [ 410.890505][T17921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.929119][T18062] team0: Device vxcan1 is of different type [ 411.143500][T17921] team0: Port device team_slave_0 added [ 411.162583][T17921] team0: Port device team_slave_1 added [ 411.298291][T17921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.309360][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.338250][T17921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.352079][T18100] netlink: 'syz.4.3082': attribute type 1 has an invalid length. [ 411.366293][T17921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.373924][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.410087][T17921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.421577][T18105] Cannot find set identified by id 0 to match [ 411.739017][T17921] hsr_slave_0: entered promiscuous mode [ 411.763077][T17921] hsr_slave_1: entered promiscuous mode [ 411.791678][T17921] debugfs: 'hsr0' already exists in 'hsr' [ 411.819764][T17921] Cannot create hsr debugfs directory [ 411.855575][T18110] lo speed is unknown, defaulting to 1000 [ 411.884589][T18127] ip6erspan0: entered allmulticast mode [ 412.420374][T18142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.660081][ T980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.755619][ T5824] Bluetooth: hci4: command tx timeout [ 412.810840][ T980] pim6reg (unregistering): left allmulticast mode [ 413.031010][ T980] team0 (unregistering): Port device team_slave_1 removed [ 413.052104][ T980] team0 (unregistering): Port device team_slave_0 removed [ 413.171212][ T3528] smc: removing ib device sqz0 [ 413.513519][T18174] xt_TCPMSS: Only works on TCP SYN packets [ 413.710316][T18185] __nla_validate_parse: 1 callbacks suppressed [ 413.710336][T18185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3096'. [ 413.786812][T18180] tunl0: Caught tx_queue_len zero misconfig [ 413.794235][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 413.802260][ C1] lec:lec_tx_timeout: lec0 [ 413.807695][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 414.534292][T18207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.822308][T18221] xt_CT: No such helper "syz0" [ 414.847926][ T5824] Bluetooth: hci4: command tx timeout [ 414.923204][T18218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.934201][T18227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3106'. [ 415.149349][T18234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3108'. [ 415.218665][T18236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3107'. [ 415.600244][T17921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.628413][T17921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.711830][T17921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.815156][T17921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 416.075118][T18257] bond8: option ad_select: invalid value (34) [ 416.098087][T18257] bond8 (unregistering): Released all slaves [ 416.223497][ T980] IPVS: stop unused estimator thread 0... [ 416.565150][T17921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.575489][T18279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3114'. [ 416.606938][T18280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3113'. [ 416.682514][T18280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3113'. [ 416.809380][T18287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3115'. [ 416.886019][T17921] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.058986][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.066269][ T8246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.110875][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.118109][ T8246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.376958][T18305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3118'. [ 417.770689][T18321] lo speed is unknown, defaulting to 1000 [ 417.818297][T18321] lo speed is unknown, defaulting to 1000 [ 417.867354][T18321] lo speed is unknown, defaulting to 1000 [ 417.904819][T17921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.928243][T18321] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 418.050102][T17921] veth0_vlan: entered promiscuous mode [ 418.078892][T18321] lo speed is unknown, defaulting to 1000 [ 418.090955][T17921] veth1_vlan: entered promiscuous mode [ 418.118802][T18321] lo speed is unknown, defaulting to 1000 [ 418.158854][T18321] lo speed is unknown, defaulting to 1000 [ 418.189467][T17921] veth0_macvtap: entered promiscuous mode [ 418.218752][T18321] lo speed is unknown, defaulting to 1000 [ 418.229001][T17921] veth1_macvtap: entered promiscuous mode [ 418.239231][T18321] lo speed is unknown, defaulting to 1000 [ 418.252518][T18321] lo speed is unknown, defaulting to 1000 [ 418.281596][T17921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.323092][T17921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.368292][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.386581][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.421010][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.443830][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.672917][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.716620][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.783940][T18341] lo speed is unknown, defaulting to 1000 [ 418.814076][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 418.822122][ C1] lec:lec_tx_timeout: lec0 [ 418.826833][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 418.944449][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.962536][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.216625][T18352] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3126'. [ 419.327930][T18356] xt_hashlimit: size too large, truncated to 1048576 [ 420.314548][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.335548][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.343324][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.351512][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.385769][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.693051][T18376] lo speed is unknown, defaulting to 1000 [ 420.857933][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3132'. [ 420.867257][T18392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3132'. [ 420.928731][T18392] netlink: 'syz.0.3132': attribute type 4 has an invalid length. [ 420.937359][T18392] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3132'. [ 420.965226][T18392] .`: renamed from bond0 [ 421.267398][T18376] chnl_net:caif_netlink_parms(): no params data found [ 421.476151][T18376] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.483556][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.494747][T18376] bridge_slave_0: entered allmulticast mode [ 421.518079][T18376] bridge_slave_0: entered promiscuous mode [ 421.534958][T18376] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.542136][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.552824][T18376] bridge_slave_1: entered allmulticast mode [ 421.562676][T18376] bridge_slave_1: entered promiscuous mode [ 421.669557][T18376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.698974][T18376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.863069][T18376] team0: Port device team_slave_0 added [ 421.887215][T18376] team0: Port device team_slave_1 added [ 422.010929][T18376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.024120][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.058235][T18376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.089298][T18376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.104139][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.190691][T18376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.415505][T18376] hsr_slave_0: entered promiscuous mode [ 422.426099][T18376] hsr_slave_1: entered promiscuous mode [ 422.432520][T18376] debugfs: 'hsr0' already exists in 'hsr' [ 422.439006][ T5824] Bluetooth: hci0: command tx timeout [ 422.454201][T18376] Cannot create hsr debugfs directory [ 422.470712][T18433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3138'. [ 422.570315][T18430] lo speed is unknown, defaulting to 1000 [ 423.027059][T18376] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.062106][T18376] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 423.165897][T18457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3141'. [ 423.294898][T18450] syzkaller0: entered promiscuous mode [ 423.300608][T18450] syzkaller0: entered allmulticast mode [ 423.340571][T18376] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.374137][T18376] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 423.690044][T18376] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.721736][T18376] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 423.834135][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 423.842205][ C1] lec:lec_tx_timeout: lec0 [ 423.847167][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 423.882790][T18376] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.895741][T18376] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 424.286405][T18376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.312759][T18376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.349280][T18376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.384906][T18376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.520435][ T5824] Bluetooth: hci0: command tx timeout [ 424.530784][T18376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.587510][T18376] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.635636][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.642952][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.700714][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.707944][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.219134][T18376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.276988][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3148'. [ 425.361706][T18242] Set syz1 is full, maxelem 65536 reached [ 425.375347][T18523] netlink: 'syz.0.3149': attribute type 1 has an invalid length. [ 425.673399][T18376] veth0_vlan: entered promiscuous mode [ 425.753098][T18376] veth1_vlan: entered promiscuous mode [ 425.949741][T18376] veth0_macvtap: entered promiscuous mode [ 426.009436][T18376] veth1_macvtap: entered promiscuous mode [ 426.082524][T18557] netlink: 'syz.1.3156': attribute type 1 has an invalid length. [ 426.095078][T18376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.135760][T18563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3156'. [ 426.146014][T18376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.154501][T18557] netlink: 'syz.1.3156': attribute type 1 has an invalid length. [ 426.206767][ T8250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.218405][ T8250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.271499][ T8250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.323398][ T8250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.390368][T18568] lo speed is unknown, defaulting to 1000 [ 426.412166][T18573] ip6gretap2: entered promiscuous mode [ 426.596677][ T5824] Bluetooth: hci0: command tx timeout [ 426.636472][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.686738][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.056005][ T8250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.083271][ T8250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.503732][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 427.549195][T18634] vlan2: entered promiscuous mode [ 427.567637][T18634] gretap0: entered promiscuous mode [ 427.893404][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.909329][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.917404][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.925760][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.933529][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.031149][T18647] lo speed is unknown, defaulting to 1000 [ 428.376330][T18665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.462447][T18666] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3179'. [ 428.674415][ T5824] Bluetooth: hci0: command tx timeout [ 428.854080][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 428.862184][ C1] lec:lec_tx_timeout: lec0 [ 428.866894][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 429.187346][T18677] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.195024][T18677] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.411576][T18677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.437534][T18677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.454307][T18673] delete_channel: no stack [ 429.612951][T18677] macvtap1: left promiscuous mode [ 429.631268][T18677] vlan2: left promiscuous mode [ 429.640587][T18677] gretap0: left promiscuous mode [ 429.660274][T18686] netlink: 'syz.3.3181': attribute type 1 has an invalid length. [ 429.678428][ T1166] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.678575][T18686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3181'. [ 429.699438][ T1166] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.710675][T18686] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 429.756877][T18647] chnl_net:caif_netlink_parms(): no params data found [ 429.810298][ T1166] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.819623][ T1166] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.961985][ T5824] Bluetooth: hci2: command tx timeout [ 429.962935][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.020756][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.046514][T18647] bridge_slave_0: entered allmulticast mode [ 430.055148][T18647] bridge_slave_0: entered promiscuous mode [ 430.074584][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.081816][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.093943][T18647] bridge_slave_1: entered allmulticast mode [ 430.113367][T18647] bridge_slave_1: entered promiscuous mode [ 430.196889][T18735] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3190'. [ 430.252391][T18647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.378815][T18730] lo speed is unknown, defaulting to 1000 [ 430.389224][T18647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.483788][T18647] team0: Port device team_slave_0 added [ 430.511370][T18647] team0: Port device team_slave_1 added [ 430.600308][T18647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.608710][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.635839][T18647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.653024][T18755] x_tables: duplicate underflow at hook 3 [ 430.666917][T18647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.682722][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.709137][T18647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.720426][T18749] lo speed is unknown, defaulting to 1000 [ 430.946079][T18647] hsr_slave_0: entered promiscuous mode [ 430.953388][T18647] hsr_slave_1: entered promiscuous mode [ 430.960484][T18647] debugfs: 'hsr0' already exists in 'hsr' [ 430.968903][T18647] Cannot create hsr debugfs directory [ 430.983366][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 431.044387][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 431.053782][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 431.107705][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 431.131422][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 431.158211][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 431.230622][T18771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3196'. [ 431.265000][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 431.330982][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 431.353976][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3195'. [ 431.709900][T18764] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.717758][T18764] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.035904][ T5824] Bluetooth: hci2: command tx timeout [ 432.263407][T18764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.321683][T18764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.039441][T18778] tipc: Started in network mode [ 433.044449][T18778] tipc: Node identity fa4b6f72e8f6, cluster identity 4711 [ 433.051718][T18778] tipc: Enabled bearer , priority 0 [ 433.087948][T18779] syzkaller0: entered promiscuous mode [ 433.093484][T18779] syzkaller0: entered allmulticast mode [ 433.164667][ T8253] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.188536][ T8253] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.229621][T18779] tipc: Resetting bearer [ 433.257242][T18779] tipc: Disabling bearer [ 433.289489][ T8253] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.303533][ T8253] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.393538][T18800] macvlan2: entered promiscuous mode [ 433.870091][T18821] bridge_slave_1: left allmulticast mode [ 433.875881][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 433.875932][ C1] lec:lec_tx_timeout: lec0 [ 433.884689][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 433.928407][T18821] bridge_slave_1: left promiscuous mode [ 433.934736][T18821] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.956907][T18821] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 433.960635][T18828] xt_TCPMSS: Only works on TCP SYN packets [ 434.092897][T18830] lo speed is unknown, defaulting to 1000 [ 434.114259][ T5824] Bluetooth: hci2: command tx timeout [ 434.371343][T18839] lo speed is unknown, defaulting to 1000 [ 434.587616][T18647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.600581][T18647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.612300][T18647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 434.627554][T18647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 434.883662][T18856] sctp: [Deprecated]: syz.3.3215 (pid 18856) Use of int in max_burst socket option. [ 434.883662][T18856] Use struct sctp_assoc_value instead [ 435.037598][T18647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.105931][T18869] netlink: 'syz.3.3219': attribute type 3 has an invalid length. [ 435.114225][T18869] netlink: 'syz.3.3219': attribute type 1 has an invalid length. [ 435.231176][T18647] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.300405][T18647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.311087][T18647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.339802][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.347010][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.370367][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.377660][ T8250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.448085][T16208] IPVS: starting estimator thread 0... [ 435.454810][T18875] netlink: 'syz.1.3221': attribute type 1 has an invalid length. [ 435.487591][T18881] syzkaller0: entered promiscuous mode [ 435.493153][T18881] syzkaller0: entered allmulticast mode [ 435.503248][T18881] TC_ACT_REPEAT abuse ? [ 435.547373][T18875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.554236][T18882] IPVS: using max 27 ests per chain, 64800 per kthread [ 435.630627][T18875] bond1: (slave gretap1): making interface the new active one [ 435.646711][T18875] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 435.917754][T18906] Bluetooth: MGMT ver 1.23 [ 435.951071][T18647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.080482][T18647] veth0_vlan: entered promiscuous mode [ 436.130065][T18647] veth1_vlan: entered promiscuous mode [ 436.190454][T18647] veth0_macvtap: entered promiscuous mode [ 436.204716][ T5824] Bluetooth: hci2: command tx timeout [ 436.219130][T18647] veth1_macvtap: entered promiscuous mode [ 436.379757][T18928] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 436.396293][T18928] bond1 (unregistering): Released all slaves [ 436.468406][T18942] vlan2: entered promiscuous mode [ 436.473595][T18942] geneve1: entered promiscuous mode [ 436.479185][T18942] vlan2: entered allmulticast mode [ 436.500080][T18930] Bluetooth: MGMT ver 1.23 [ 436.514397][T18942] geneve1: entered allmulticast mode [ 436.564691][T18647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.579456][T18647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.620256][ T3528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.644004][ T3528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.655703][ T3528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.673535][ T3528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.854774][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.868846][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.936886][ T8246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.953976][ T8246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.978800][T18962] __nla_validate_parse: 201 callbacks suppressed [ 436.978819][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'. [ 436.997286][T18962] block nbd0: not configured, cannot reconfigure [ 437.017863][T18962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3243'. [ 437.131363][T18972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3173'. [ 437.207482][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3246'. [ 437.371018][T18991] vlan3: entered allmulticast mode [ 437.404234][T18991] bond0: entered allmulticast mode [ 437.409435][T18991] bond_slave_0: entered allmulticast mode [ 437.457040][T18998] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3250'. [ 437.494158][T18991] bond_slave_1: entered allmulticast mode [ 437.563508][ T5902] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 437.615840][T18998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.667503][T18991] xt_CT: No such helper "snmp_trap" [ 437.688611][T18998] bond_slave_0: left allmulticast mode [ 437.719526][T18998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.786222][T18998] bond_slave_1: left allmulticast mode [ 437.797747][T18998] bond0 (unregistering): Released all slaves [ 437.840532][T19010] fido_id[19010]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 437.941547][T19015] tipc: Enabling of bearer rejected, failed to enable media [ 437.951531][T19015] bond_slave_0: entered promiscuous mode [ 437.965326][T19017] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3254'. [ 437.974370][T19015] bond_slave_0: entered allmulticast mode [ 438.041615][T19027] netlink: 'syz.2.3256': attribute type 10 has an invalid length. [ 438.048133][T19018] netlink: 'syz.4.3253': attribute type 10 has an invalid length. [ 438.059020][T19018] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3253'. [ 438.071309][T19027] team0: Failed to send options change via netlink (err -105) [ 438.079170][T19027] team0: Port device dummy0 added [ 438.344091][T19041] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3259'. [ 438.729629][T19058] wg1 speed is unknown, defaulting to 1000 [ 438.731489][T19059] siw: device registration error -23 [ 438.752532][T19058] wg1 speed is unknown, defaulting to 1000 [ 438.792107][T19067] : entered promiscuous mode [ 438.818803][T19064] netlink: 15658 bytes leftover after parsing attributes in process `syz.2.3263'. [ 438.824489][T19058] wg1 speed is unknown, defaulting to 1000 [ 438.829317][T19063] netlink: 15658 bytes leftover after parsing attributes in process `syz.2.3263'. [ 438.880754][T19058] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 438.900596][T19069] syzkaller0: entered promiscuous mode [ 438.906375][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 438.906405][ C1] lec:lec_tx_timeout: lec0 [ 438.914605][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 438.926805][T19069] syzkaller0: entered allmulticast mode [ 439.013551][T19058] wg1 speed is unknown, defaulting to 1000 [ 439.030319][T19058] wg1 speed is unknown, defaulting to 1000 [ 439.077201][T19058] wg1 speed is unknown, defaulting to 1000 [ 439.098507][T19058] wg1 speed is unknown, defaulting to 1000 [ 439.108204][T19058] wg1 speed is unknown, defaulting to 1000 [ 439.241249][T19058] wg1 speed is unknown, defaulting to 1000 [ 439.250331][T19058] wg1 speed is unknown, defaulting to 1000 [ 439.258106][T19058] wg1 speed is unknown, defaulting to 1000 [ 439.838450][T19117] netlink: 'syz.0.3278': attribute type 3 has an invalid length. [ 439.861238][T19116] netlink: 'syz.0.3278': attribute type 3 has an invalid length. [ 439.915054][T19122] netlink: 'syz.0.3280': attribute type 1 has an invalid length. [ 440.314495][T19143] bond2: option ad_select: invalid value (34) [ 440.327900][T19143] bond2 (unregistering): Released all slaves [ 440.511897][T19160] netlink: 'syz.2.3291': attribute type 1 has an invalid length. [ 440.614606][T19160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.625874][T19158] tipc: Enabled bearer , priority 0 [ 440.638914][T19165] bond1: entered allmulticast mode [ 440.646938][T19158] syzkaller0: entered promiscuous mode [ 440.656223][T19158] syzkaller0: entered allmulticast mode [ 440.668225][T19168] netlink: 'syz.0.3292': attribute type 1 has an invalid length. [ 440.734632][T19158] tipc: Resetting bearer [ 440.749796][T19156] tipc: Resetting bearer [ 440.780559][T19156] tipc: Disabling bearer [ 440.802167][T19174] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 441.561284][T19211] 6eth1_to_bond: renamed from erspan0 [ 441.580373][T19211] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 441.620218][T19213] bond0: entered promiscuous mode [ 441.625722][T19213] bond_slave_1: entered promiscuous mode [ 441.633360][T19213] batadv0: entered promiscuous mode [ 441.684748][T19214] bridge0: port 3(batadv1) entered blocking state [ 441.729330][T19214] bridge0: port 3(batadv1) entered disabled state [ 441.739360][T19214] batadv1: entered allmulticast mode [ 441.747277][T19214] batadv1: entered promiscuous mode [ 441.757864][T19219] tipc: Enabling of bearer rejected, failed to enable media [ 441.897966][T19222] syzkaller1: entered promiscuous mode [ 441.903505][T19222] syzkaller1: entered allmulticast mode [ 442.146711][T19237] netlink: 'syz.1.3316': attribute type 1 has an invalid length. [ 442.184160][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 442.193484][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 442.336280][T19238] bond0 (unregistering): Released all slaves [ 442.640323][T19258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.671065][T19269] netlink: 'syz.4.3325': attribute type 2 has an invalid length. [ 442.689276][T19269] !: entered promiscuous mode [ 442.903780][T19282] x_tables: duplicate underflow at hook 3 [ 443.380767][T19299] __nla_validate_parse: 11 callbacks suppressed [ 443.380800][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3333'. [ 443.402985][T19297] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3332'. [ 443.458274][T19297] netlink: 'syz.0.3332': attribute type 11 has an invalid length. [ 443.512698][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3333'. [ 443.697341][T19305] netlink: 'syz.4.3335': attribute type 10 has an invalid length. [ 443.754078][T19305] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3335'. [ 443.820130][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 443.893324][T19319] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.3338'. [ 443.924064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 443.932255][ C1] lec:lec_tx_timeout: lec0 [ 443.936838][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 444.122342][T19326] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 444.177970][T19326] : renamed from bond_slave_0 (while UP) [ 444.252152][T19332] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3343'. [ 444.353076][T19339] netlink: 'syz.1.3346': attribute type 1 has an invalid length. [ 444.362060][T19339] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3346'. [ 444.875429][T19370] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 444.990747][T19377] netlink: 'syz.4.3357': attribute type 3 has an invalid length. [ 445.251768][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3365'. [ 445.277013][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3365'. [ 445.287844][T19402] netlink: 'syz.3.3365': attribute type 15 has an invalid length. [ 445.346998][ T797] IPVS: starting estimator thread 0... [ 445.434150][T19406] IPVS: using max 29 ests per chain, 69600 per kthread [ 445.479874][T19413] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 445.503710][T19413] bond2 (unregistering): Released all slaves [ 445.799559][T19440] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 446.178349][ T9] IPVS: starting estimator thread 0... [ 446.191143][T19447] vlan4: entered allmulticast mode [ 446.200955][T19447] bridge0: port 3(vlan4) entered blocking state [ 446.208035][T19447] bridge0: port 3(vlan4) entered disabled state [ 446.216335][T19447] vlan4: entered promiscuous mode [ 446.284232][T19448] IPVS: using max 30 ests per chain, 72000 per kthread [ 446.338324][T19452] syzkaller1: entered promiscuous mode [ 446.343872][T19452] syzkaller1: entered allmulticast mode [ 446.675821][T19464] ¾x9ÿ: renamed from bridge_slave_0 [ 448.469569][T19417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.683531][T19475] netlink: 'syz.3.3390': attribute type 1 has an invalid length. [ 448.707980][T19477] syzkaller0: entered promiscuous mode [ 448.713521][T19477] syzkaller0: entered allmulticast mode [ 448.725331][T19477] __nla_validate_parse: 2 callbacks suppressed [ 448.725348][T19477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3391'. [ 448.944125][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 448.952224][ C1] lec:lec_tx_timeout: lec0 [ 448.957070][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 449.082258][T19498] openvswitch: netlink: IP tunnel dst address not specified [ 449.134325][T19505] netlink: 'syz.0.3400': attribute type 1 has an invalid length. [ 449.146302][T19505] netlink: 'syz.0.3400': attribute type 2 has an invalid length. [ 449.356808][T19518] erspan0: entered promiscuous mode [ 449.366825][T19518] erspan0: left promiscuous mode [ 449.507316][T19532] netlink: 'syz.4.3407': attribute type 10 has an invalid length. [ 449.522716][T19532] team0: Port device dummy0 added [ 449.533018][T19532] netlink: 'syz.4.3407': attribute type 10 has an invalid length. [ 449.568808][T19532] team0: Port device dummy0 removed [ 449.581051][T19532] dummy0: entered promiscuous mode [ 449.591685][T19532] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 452.281580][T19513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.517237][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3417'. [ 452.797855][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'. [ 452.818591][T19584] bond0: Error: Cannot enslave bond to itself. [ 452.918013][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3423'. [ 452.937054][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3424'. [ 452.965556][T19590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3423'. [ 453.018746][T19601] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3427'. [ 453.116737][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 453.142348][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 453.213185][T19607] tipc: Started in network mode [ 453.220309][T19607] tipc: Node identity 0e12436eaad6, cluster identity 4711 [ 453.242010][T19607] tipc: Enabled bearer , priority 0 [ 453.287227][T19607] syzkaller0: entered promiscuous mode [ 453.293122][T19607] syzkaller0: entered allmulticast mode [ 453.305790][T19622] netlink: 'syz.4.3432': attribute type 1 has an invalid length. [ 453.431497][T19622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.450493][T19634] netlink: 'syz.1.3429': attribute type 6 has an invalid length. [ 453.460390][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3432'. [ 453.512479][T19613] lo speed is unknown, defaulting to 1000 [ 453.571529][T19632] bond1: (slave gretap1): making interface the new active one [ 453.586530][T19632] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 453.599335][T19633] tipc: Resetting bearer [ 453.640094][T19635] bond1 (unregistering): (slave gretap1): Releasing active interface [ 453.663674][T19635] bond1 (unregistering): Released all slaves [ 453.715026][T19613] wg1 speed is unknown, defaulting to 1000 [ 453.843434][T19606] tipc: Resetting bearer [ 453.858984][T19606] tipc: Disabling bearer [ 453.878316][T16208] wg1 speed is unknown, defaulting to 1000 [ 453.889693][T19643] __nla_validate_parse: 2 callbacks suppressed [ 453.889720][T19643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3435'. [ 453.974123][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 453.982253][ C1] lec:lec_tx_timeout: lec0 [ 453.987240][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 454.111735][T19650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.163354][T19650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3437'. [ 454.384890][T19663] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 454.456994][T19667] xt_hashlimit: size too large, truncated to 1048576 [ 454.525686][T19666] veth0_to_team: entered allmulticast mode [ 454.541754][T19666] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3440'. [ 454.871807][T19677] lo speed is unknown, defaulting to 1000 [ 454.919601][T19677] wg1 speed is unknown, defaulting to 1000 [ 454.972026][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 455.008334][T19689] openvswitch: netlink: Flow actions attr not present in new flow. [ 455.245631][T19702] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 455.258690][T19702] bond2 (unregistering): Released all slaves [ 455.525474][T19712] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 [ 455.592731][T19715] gre1: entered allmulticast mode [ 455.986018][T19734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3463'. [ 456.019605][T19738] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3465'. [ 456.158095][T19745] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 456.184756][T19745] bond0: (slave gre0): Error -95 calling set_mac_address [ 456.284380][T19750] ªªªªªª: renamed from wg2 [ 456.499636][T19763] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3471'. [ 456.525284][T19768] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2959707796/2959707797 [ 456.535235][T19765] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2959707796/2959707797 [ 456.546184][T19767] tipc: Enabled bearer , priority 0 [ 456.564535][T19768] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2959707796/2959707797 [ 456.574668][T19767] syzkaller0: entered promiscuous mode [ 456.580176][T19767] syzkaller0: entered allmulticast mode [ 456.639226][T19767] tipc: Resetting bearer [ 456.651045][T19766] tipc: Resetting bearer [ 456.673747][T19766] tipc: Disabling bearer [ 456.875923][T19777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3477'. [ 456.941878][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 456.960031][T19777] hsr_slave_0: left promiscuous mode [ 456.970407][T19777] hsr_slave_1: left promiscuous mode [ 457.011383][T19789] tipc: Started in network mode [ 457.034442][T19789] tipc: Node identity 127221270add, cluster identity 4711 [ 457.053062][T19789] tipc: Enabled bearer , priority 0 [ 457.060842][T19790] 8021q: VLANs not supported on nlmon0 [ 457.082742][T19789] syzkaller0: entered promiscuous mode [ 457.099256][T19789] syzkaller0: entered allmulticast mode [ 457.126798][T19789] tipc: Resetting bearer [ 457.198221][T19800] netlink: 'syz.3.3484': attribute type 1 has an invalid length. [ 457.223203][T19789] tipc: Resetting bearer [ 457.232871][T19788] tipc: Resetting bearer [ 457.268951][T19788] tipc: Disabling bearer [ 457.336657][T19800] bond0: entered promiscuous mode [ 457.344686][T19800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.373606][T19801] bond0: (slave veth3): making interface the new active one [ 457.381204][T19801] veth3: entered promiscuous mode [ 457.397922][T19801] bond0: (slave veth3): Enslaving as an active interface with an up link [ 457.429880][T19802] lo speed is unknown, defaulting to 1000 [ 457.439160][T19802] wg1 speed is unknown, defaulting to 1000 [ 457.651637][T19822] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3490'. [ 457.671488][T19822] netlink: 'syz.1.3490': attribute type 9 has an invalid length. [ 458.053145][T19848] ip6tnl3: entered promiscuous mode [ 458.063095][T19848] ip6tnl3: entered allmulticast mode [ 458.082361][T19846] lo speed is unknown, defaulting to 1000 [ 458.092219][T19846] wg1 speed is unknown, defaulting to 1000 [ 458.450981][T19868] lo speed is unknown, defaulting to 1000 [ 458.458895][T19868] wg1 speed is unknown, defaulting to 1000 [ 458.481715][ T5824] block nbd0: Receive control failed (result -107) [ 458.596688][T19875] batadv_slave_0: entered promiscuous mode [ 458.852957][T19867] batadv_slave_0: left promiscuous mode [ 459.207786][T19906] lo speed is unknown, defaulting to 1000 [ 459.217112][T19911] netlink: 'syz.3.3514': attribute type 11 has an invalid length. [ 459.227038][T19906] wg1 speed is unknown, defaulting to 1000 [ 459.252729][T19912] __nla_validate_parse: 16 callbacks suppressed [ 459.252749][T19912] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3515'. [ 459.279865][T19912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3515'. [ 459.300509][T19912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3515'. [ 459.349489][T19912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3515'. [ 459.399316][T19917] netlink: 416 bytes leftover after parsing attributes in process `syz.2.3516'. [ 459.607333][T19921] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 459.617863][T19921] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 459.665672][T19926] tipc: Enabling of bearer rejected, failed to enable media [ 459.794081][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 459.802184][ C1] lec:lec_tx_timeout: lec0 [ 459.807098][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 459.978839][T19943] lo speed is unknown, defaulting to 1000 [ 459.999317][T19943] wg1 speed is unknown, defaulting to 1000 [ 460.264181][T19926] syzkaller0: entered promiscuous mode [ 460.275331][T19926] syzkaller0: entered allmulticast mode [ 460.839238][T19962] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 460.875058][T19965] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 461.771456][T19932] lo speed is unknown, defaulting to 1000 [ 461.784726][T19932] wg1 speed is unknown, defaulting to 1000 [ 462.012889][T19964] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 462.024857][T19964] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 462.033308][T19964] CPU: 1 UID: 0 PID: 19964 Comm: syz.2.3525 Not tainted syzkaller #0 PREEMPT(full) [ 462.042709][T19964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 462.052796][T19964] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 462.058562][T19964] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 1d 81 68 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 f5 80 68 f7 4d 8b 75 00 4d 8d a7 30 [ 462.078212][T19964] RSP: 0018:ffffc9000ba77828 EFLAGS: 00010046 [ 462.084311][T19964] RAX: 0000000000000000 RBX: ffff88806ef02c00 RCX: dffffc0000000000 [ 462.092300][T19964] RDX: 0000000000000000 RSI: ffffffff8c0739e0 RDI: ffff88806ef02c00 [ 462.100373][T19964] RBP: ffff8880567b0000 R08: ffffffff8ed01ab3 R09: 1ffffffff1da0356 [ 462.108365][T19964] R10: dffffc0000000000 R11: fffffbfff1da0357 R12: ffff88807a7ff650 [ 462.116444][T19964] R13: 0000000000000000 R14: ffff88806ef02c30 R15: ffff88807a7ff000 [ 462.124439][T19964] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 462.133383][T19964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.139976][T19964] CR2: 00007f4de0d456b8 CR3: 00000000541c8000 CR4: 00000000003526f0 [ 462.147972][T19964] Call Trace: [ 462.151263][T19964] [ 462.154220][T19964] lec_push+0x3cb/0x19d0 [ 462.158496][T19964] ? __local_bh_enable_ip+0xd0/0x130 [ 462.163800][T19964] ? __pfx_lec_push+0x10/0x10 [ 462.168501][T19964] vcc_release+0x15f/0x580 [ 462.172952][T19964] sock_close+0xc3/0x240 [ 462.177210][T19964] ? __pfx_sock_close+0x10/0x10 [ 462.182077][T19964] __fput+0x44f/0xa70 [ 462.186079][T19964] task_work_run+0x1d9/0x270 [ 462.190778][T19964] ? __pfx_task_work_run+0x10/0x10 [ 462.195908][T19964] ? do_raw_spin_unlock+0xf5/0x210 [ 462.201038][T19964] do_exit+0x69b/0x2310 [ 462.205223][T19964] ? __pfx_do_exit+0x10/0x10 [ 462.209839][T19964] ? do_raw_spin_lock+0x12b/0x2f0 [ 462.214964][T19964] do_group_exit+0x21b/0x2d0 [ 462.219585][T19964] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.224806][T19964] get_signal+0x1284/0x1330 [ 462.229338][T19964] arch_do_signal_or_restart+0xbc/0x830 [ 462.234903][T19964] ? unshare_nsproxy_namespaces+0x143/0x160 [ 462.240845][T19964] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 462.247357][T19964] ? ksys_unshare+0x7fc/0x900 [ 462.252052][T19964] ? __pfx_ksys_unshare+0x10/0x10 [ 462.257096][T19964] exit_to_user_mode_loop+0x86/0x480 [ 462.262400][T19964] ? rcu_is_watching+0x15/0xb0 [ 462.267273][T19964] do_syscall_64+0x2b7/0xf80 [ 462.271890][T19964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.277969][T19964] ? trace_irq_disable+0x37/0x100 [ 462.283096][T19964] ? clear_bhb_loop+0x60/0xb0 [ 462.287793][T19964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.293702][T19964] RIP: 0033:0x7f2f3619af79 [ 462.298140][T19964] Code: Unable to access opcode bytes at 0x7f2f3619af4f. [ 462.305178][T19964] RSP: 002b:00007f2f37098028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 462.313602][T19964] RAX: fffffffffffffffc RBX: 00007f2f36416090 RCX: 00007f2f3619af79 [ 462.321680][T19964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 462.329664][T19964] RBP: 00007f2f362316e0 R08: 0000000000000000 R09: 0000000000000000 [ 462.337656][T19964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.345646][T19964] R13: 00007f2f36416128 R14: 00007f2f36416090 R15: 00007ffd2f0b8878 [ 462.353639][T19964] [ 462.356679][T19964] Modules linked in: [ 462.360604][T19964] ---[ end trace 0000000000000000 ]--- [ 462.366071][T19964] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 462.371824][T19964] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 1d 81 68 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 f5 80 68 f7 4d 8b 75 00 4d 8d a7 30 [ 462.391443][T19964] RSP: 0018:ffffc9000ba77828 EFLAGS: 00010046 [ 462.397547][T19964] RAX: 0000000000000000 RBX: ffff88806ef02c00 RCX: dffffc0000000000 [ 462.405542][T19964] RDX: 0000000000000000 RSI: ffffffff8c0739e0 RDI: ffff88806ef02c00 [ 462.413536][T19964] RBP: ffff8880567b0000 R08: ffffffff8ed01ab3 R09: 1ffffffff1da0356 [ 462.421546][T19964] R10: dffffc0000000000 R11: fffffbfff1da0357 R12: ffff88807a7ff650 [ 462.429536][T19964] R13: 0000000000000000 R14: ffff88806ef02c30 R15: ffff88807a7ff000 [ 462.437550][T19964] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 462.446496][T19964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.453112][T19964] CR2: 00007f4de0d456b8 CR3: 00000000541c8000 CR4: 00000000003526f0 [ 462.461154][T19964] Kernel panic - not syncing: Fatal exception [ 462.467849][T19964] Kernel Offset: disabled [ 462.472195][T19964] Rebooting in 86400 seconds..