last executing test programs: 5m35.606467106s ago: executing program 2 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x11e, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xd, @mcast1, 0x800}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) 5m35.0917456s ago: executing program 2 (id=1168): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000a40)="480eee") r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, r4, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000000000000200fffd0900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001000000000000000700"], 0x68}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) socket$kcm(0x10, 0x2, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x20010840) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r8, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048000) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x4000000) 5m33.828239851s ago: executing program 2 (id=1173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) (async, rerun: 64) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0) (async) ioctl$sock_TIOCINQ(r1, 0x8905, &(0x7f0000000040)) accept(r2, &(0x7f0000000680)=@in={0x2, 0x0, @remote}, &(0x7f0000000200)=0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x1e0, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x100080d4}, 0x5) (async) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xfff, @default, @rose={'rose', 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async, rerun: 32) write$cgroup_int(r3, &(0x7f0000000000), 0x12) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b000000060000000000000800000000060000000000000c03000000000000000400000d0002000000000000000000000efaffffff00008b0f000000000000000e00000001000000000000000000ff"], 0x0, 0x67, 0x0, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000540)="d1926d8eaef41d", &(0x7f0000000240)=@tcp}, 0x20) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) (async, rerun: 64) r6 = socket(0x15, 0x5, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) (async, rerun: 64) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x773c1000) (rerun: 64) 5m33.507014785s ago: executing program 2 (id=1178): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x24000014) (async) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async, rerun: 64) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) (rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[], 0x1fc}}, 0x0) (rerun: 64) 5m33.265219359s ago: executing program 2 (id=1183): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r5, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5, 0x4}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x1}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 5m32.961899086s ago: executing program 2 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x4000000, 0x5, 0xb, 0x6, 0x969b, [0xd3, 0x6]}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x408901, 0x0) write$rfkill(r3, &(0x7f0000000380)={0x81, 0x1, 0x2, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x170, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fffffff, 0x1f}}}}, [@NL80211_ATTR_TESTDATA={0x46, 0x45, "a00f4959448b95d75f956f06a7208162548af8e4596b25e080344343cf1d8ae8ac8dcf0dbb6cae1a85be30115eaa2f0807885c92f9c8b698c61252f3b7976f41f1d4"}, @NL80211_ATTR_TESTDATA={0xfe, 0x45, "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"}]}, 0x170}, 0x1, 0x0, 0x0, 0x12}, 0x20048800) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x24000014) 5m17.948419883s ago: executing program 32 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x4000000, 0x5, 0xb, 0x6, 0x969b, [0xd3, 0x6]}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x408901, 0x0) write$rfkill(r3, &(0x7f0000000380)={0x81, 0x1, 0x2, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x170, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fffffff, 0x1f}}}}, [@NL80211_ATTR_TESTDATA={0x46, 0x45, "a00f4959448b95d75f956f06a7208162548af8e4596b25e080344343cf1d8ae8ac8dcf0dbb6cae1a85be30115eaa2f0807885c92f9c8b698c61252f3b7976f41f1d4"}, @NL80211_ATTR_TESTDATA={0xfe, 0x45, "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"}]}, 0x170}, 0x1, 0x0, 0x0, 0x12}, 0x20048800) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x24000014) 2m40.308531643s ago: executing program 0 (id=3117): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x172, 0x172, 0x8, [@datasec={0x3, 0x6, 0x0, 0xf, 0x2, [{0x1, 0xb3c, 0x4}, {0x4, 0x6, 0x4}, {0x5, 0x311, 0x6}, {0x1, 0x5, 0x9}, {0x4, 0xfffffffc, 0x3}, {0x1, 0xff, 0x10}], '\'m'}, @var={0x6, 0x0, 0x0, 0xe, 0x3, 0x2}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0x10, 0x5}, {0x7, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x2}, {0x8, 0x4}, {0xa, 0x2}]}, @enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x2, [{0xc, 0x2, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xfffffc01}}, @datasec={0xa, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x8}, {0x2, 0xfdf, 0x2}, {0x1, 0x9}, {0x4, 0x4, 0xfffffffd}], '\"\"'}, @datasec={0x4, 0x4, 0x0, 0xf, 0x2, [{0x2, 0x8, 0x3}, {0x5, 0x0, 0x9}, {0x4, 0x7, 0x4}, {0xffffffff, 0x3, 0x6bd}], "1cd9"}]}, {0x0, [0x61, 0x2e, 0x5f, 0x30, 0x61, 0x61]}}, &(0x7f0000000440)=""/99, 0x194, 0x63, 0x1, 0x5}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x4, 0xb, 0x4, 0x0, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0x6, 0xfc, &(0x7f0000000500)=""/252, 0x41000, 0x0, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000800)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xfbeb, r0, 0x5, &(0x7f0000000840)=[r1], &(0x7f0000000880)=[{0x2, 0x1, 0x7, 0x3}, {0x0, 0x1, 0xc}, {0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0x4, 0x3}, {0x0, 0x3, 0x7, 0x3}], 0x10, 0x5}, 0x94) ioctl$sock_ifreq(r2, 0x89b0, &(0x7f0000000380)={'ip6erspan0\x00', @ifru_mtu=0x6}) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) listen(r7, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@exit, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x4d}, @alu={0x4, 0x0, 0xc, 0x1, 0x0, 0x70, 0x4}, @ldst={0x1, 0x0, 0x0, 0x0, 0x3, 0xc, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x41100, 0x8}, 0x94) 2m39.835868582s ago: executing program 0 (id=3123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='pimreg0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='pimreg0\x00', 0x10) r2 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)={0xb5, 0x8, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0xb, 0x7, [0x9, 0x3, 0x2ce5, 0x5, 0x9, 0x3, 0x7]}}]}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2844, 0x528b5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0xd}]}, 0x4c}}, 0x4000040) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2844, 0x528b5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0xd}]}, 0x4c}}, 0x4000040) 2m39.573402005s ago: executing program 0 (id=3127): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x30}}, 0x0) 2m39.349488335s ago: executing program 0 (id=3131): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) 2m39.069330287s ago: executing program 0 (id=3134): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400", @ANYRES32, @ANYRES32=r1, @ANYBLOB="049c01000750050008001300165cb653562a4e24cffefe3197efaea9bc6253eb52dc2e5498d4e8e8aee04626641f3aa8357ff8241ab32306148b074820c1d2012281d1000872e1ec761854a8858ffd9e1f77ce19f26523e4032c41c95c1f2d809daea8b0becd80c2f9b6e31ce314db4fdaf9415252576a623cea604ba1205491b6dc5962a83c44e67f8c22d35f1d1e2213dfd0056975999b10b3b07a550d3b91695859379c3523669f82bb09ad177dfb43d49356f79daa84d51a206ffdb2c6851bb4454232d971f7dfa61b3a9e5dbcb204dce5df8ade86b9589298"], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5, 0x4c3, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000a33553df177fe3a2000000080004000500000034000100240001006270445f686173685f66756e6300000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 2m38.717106493s ago: executing program 0 (id=3137): r0 = epoll_create1(0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x24000014) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 2m23.397523883s ago: executing program 33 (id=3137): r0 = epoll_create1(0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x24000014) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 4.556675604s ago: executing program 5 (id=4622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x50, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xffffffffffffffd2, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xdb}, @device_b, @broadcast, @from_mac=@device_b, {0x0, 0x77}}, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @val={0x72, 0x6}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8014) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xfffffffffffffef5, &(0x7f0000000440)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x3ff, 0x3, 0x96, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0xd, '\x00', 0x1, 0xac, 0xfffffff7, 0xffffffff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0xcb7e, 0x1000, 0x40}}]}}]}, 0x78}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, r8, 0x8, 0x8, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000055}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000480)={0x38, r10, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) socket(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0x800}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0xfd, {@mac=@local, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast1, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x1d, &(0x7f0000000380), 0x8) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000000780)={'batadv0\x00', 0x400}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3.435732129s ago: executing program 5 (id=4629): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) recvfrom(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x40, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}]}, 0x40}}, 0x20) 3.307512932s ago: executing program 5 (id=4632): r0 = socket$inet(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d38", 0x8d}], 0x1}}], 0x1, 0x2090) sendto$inet(r1, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="07000000010006", 0x7) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x218}], 0x1}, 0x0) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x1, 0x4000}, 0x90) syz_emit_ethernet(0x98, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3288a80d00810005000800467100820064000008299078ac1e0101640101009405ea7b56442805000000000d000000060000000300000001020000000000000800000009ffff8001000000044414b311e000000200000005ffffffff00000c1b0000000000000000001000000000000000000400004e2100004e22000000040000000400"/152], 0x0) 3.093360628s ago: executing program 5 (id=4637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x20}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e24, 0x101, @local, 0x2b}, {0xa, 0x4e21, 0xe58, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0xffffffffffffffff, {[0x80000000, 0x6, 0xfffffff7, 0x4, 0x3ff, 0x800, 0x6, 0x4]}}, 0x5c) 2.913308856s ago: executing program 5 (id=4639): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000018000100000000001c0000000a0000000000000000000000080012"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x76, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40080d4) 2.810076202s ago: executing program 5 (id=4642): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) pread64(r3, &(0x7f00000008c0)=""/233, 0xe9, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069106b0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.611380639s ago: executing program 1 (id=4667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x9, 0x80000, 0x10000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0xf0bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}}, 0x24}}, 0x0) 1.311898325s ago: executing program 1 (id=4670): unshare(0xa020480) unshare(0x6020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000380)='-#', 0x2}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r7, &(0x7f0000000440)="bad330752181510000316f3a277f953286ddd1dc9119f98ce83de525e4a40e81692d09dc", 0x24, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x10}, &(0x7f0000000540)=0x8) 1.017203109s ago: executing program 1 (id=4675): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x7688c42f8696cb15}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000240)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r6, &(0x7f00000003c0)=""/132, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000380)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x8, 0x4, 0x7c000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[r6, r7, 0xffffffffffffffff], &(0x7f0000000680)=[{0x5, 0x3, 0xe, 0x7}, {0x3, 0x5, 0x2, 0x8}, {0x5, 0x4, 0xc, 0xa}, {0x0, 0x2, 0x3, 0xc}, {0x1, 0x4, 0x10, 0x2}], 0x10, 0x9}, 0x94) 921.651474ms ago: executing program 1 (id=4679): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x89, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x2, 0x0}, 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xcb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x9, 0xb, 0xd, 0x7, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x80, 0x6c, &(0x7f00000002c0)=""/108, 0x41000, 0x30, '\x00', r3, @fallback=0xe, r5, 0x8, &(0x7f0000000840)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x1, 0xe71, 0x100}, 0x10, r6, r2, 0x4, &(0x7f0000000a00)=[r7, r8], &(0x7f0000000a40)=[{0x3, 0x2, 0x10, 0x7}, {0x5, 0x4, 0xd, 0x5}, {0x4, 0x1, 0x6, 0x8}, {0x3, 0x2, 0x6}], 0x10, 0x3}, 0x94) 872.930128ms ago: executing program 4 (id=4680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000020c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040810) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x3, 0x20000000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000001300000a78000000090a010200000000000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000213c0009800b0001007470726f787900002c000280080003400000000c0800034000000001050001400000000208000140000000000800014000000001140000001000010000000000000000000084000a"], 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x68}}, 0x0) 692.201761ms ago: executing program 6 (id=4681): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r2, 0x12) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x101}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}}, 0x0) 691.022509ms ago: executing program 1 (id=4683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000380)='G', 0x0}, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)={0xa03, 0xfff, 0x1, 0x0, 0x6, 0x0, [{0xfffffffffffffff8, 0x2, 0x0, '\x00', 0x2100}, {0x9, 0x9, 0x8, '\x00', 0x2400}, {0x1, 0x868, 0x2, '\x00', 0x800}, {0x1, 0x6, 0x7, '\x00', 0x9}, {0x2, 0x9, 0x7, '\x00', 0x100}, {0x1, 0x1, 0x9, '\x00', 0x1482}]}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x4, 0x1, @remote}]}, 0x44}}, 0x0) 690.250749ms ago: executing program 6 (id=4684): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/123) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)=0x9, 0x4) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x4, &(0x7f00000001c0)=[{0x100, 0x0, 0x0, 0x8eb9}, {0x1, 0x4, 0x7, 0x3}, {0x8, 0x4, 0x5, 0x3}, {0x9, 0x0, 0x81, 0xfae}]}) close(r2) 638.937218ms ago: executing program 1 (id=4685): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @netrom, @netrom, @remote, @bcast, @netrom, @netrom, @netrom]}, &(0x7f0000000080)=0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$can_bcm(r2, 0x0, 0x4008000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000880)={'wlan1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0x40305829, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r3}) 517.484581ms ago: executing program 4 (id=4686): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x1a043000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x60e712c8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9b}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4008010) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) 463.001056ms ago: executing program 6 (id=4688): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) 457.823986ms ago: executing program 3 (id=4689): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 356.632482ms ago: executing program 6 (id=4690): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = getgid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) 355.614977ms ago: executing program 4 (id=4691): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x900}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 338.740626ms ago: executing program 3 (id=4692): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x1a, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 331.8504ms ago: executing program 4 (id=4693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040094}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1003, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x4e20, @empty}}, 0x3ff, 0x7, 0x7, 0x7ff, 0x25, 0x2, 0x20}, 0x9c) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) 241.403199ms ago: executing program 3 (id=4694): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x0, 0x9}, {0xfff1, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xf8}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20044051) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000122f01"], 0x18}}, 0x0) 239.741009ms ago: executing program 6 (id=4695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x63, &(0x7f0000000400)={&(0x7f0000000140)={0x4c, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}}, 0x4044080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1ef8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r5, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x41000}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x2c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48090}, 0x40004) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000440)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x6000040, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8}, 0x14) 203.372108ms ago: executing program 4 (id=4696): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) 159.85768ms ago: executing program 3 (id=4697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x6, 0x1, 0x0, 0xfffffffc}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4040085) 53.184199ms ago: executing program 3 (id=4698): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x80002, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f00000001c0)=0x7, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7291, 0x5b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40080c0) 52.189922ms ago: executing program 4 (id=4699): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r2, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.312237ms ago: executing program 3 (id=4700): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r2, &(0x7f0000000180), 0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r1, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES32=r1, @ANYBLOB='!'], 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="fc276e5c9cb6e0c54565030600000000000000000f000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) socket(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r2, &(0x7f0000000180), 0x0}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r1, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES32=r1, @ANYBLOB='!'], 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="fc276e5c9cb6e0c54565030600000000000000000f000000"], 0x14}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) (async) 0s ago: executing program 6 (id=4701): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002032000000fc000000000000000000000000000000fffffff0000000000700000000000000000000000000000004000000000000000000000000000020040000000000000008000000000200000700000000000000010000000100000008001000000000000000000000000000f60000000000000000000000000000000400000002008f25018f0000000000004c001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000006900000000000000006bdfa7b400006000"/244], 0x13c}, 0x1, 0x0, 0x0, 0x4004081}, 0x804) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000080)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x43}, 0x4008085) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "00b46f3e73bba1d3", "44151691d09f2c7f2f4b90122af43a243f832083b0a4336d98b0add89ddfb709", "cfe6e77f", "03a617b6ce9f1e4f"}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) socket(0x2, 0x5, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01052cbd7000fedbdf251de6ac7b8b8df3c7", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @broadcast}, {0x2, 0x4e21, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x800200001, 0x1ff, 0xd}) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="080000fa", @ANYRES8=r7, @ANYRESOCT], 0xdc) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r3}, 0x4, &(0x7f0000000000)=[0x8, 0x0, 0x7fffffffffffffff, 0x0], 0x1, 0xf, 0x2}) setsockopt(r3, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) kernel console output (not intermixed with test programs): vsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.527763][T16509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 340.569416][T16690] netlink: 'syz.5.2959': attribute type 3 has an invalid length. [ 340.593839][T16706] bond0: Caught tx_queue_len zero misconfig [ 340.613768][T16702] netlink: 'syz.3.2965': attribute type 1 has an invalid length. [ 340.732044][T16509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 340.742607][T16509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 340.753954][T16509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.766178][T16509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 340.831540][T16711] syzkaller0: entered promiscuous mode [ 340.893658][T16720] debugfs: 'netdev:veth1_to_bridge' already exists in 'phy9' [ 340.917852][T16719] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 341.008135][T16719] bond21: entered promiscuous mode [ 341.015042][T16719] bond21: entered allmulticast mode [ 341.032266][T16719] 8021q: adding VLAN 0 to HW filter on device bond21 [ 341.164064][T16509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.177615][T16509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.195829][T16509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.279200][T16509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.425248][T16509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.486134][T16509] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.515424][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.522633][ T7096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.537318][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.544540][ T7096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.688986][T16763] debugfs: 'netdev:veth1_to_bridge' already exists in 'phy8' [ 341.729667][ T5826] Bluetooth: hci6: command tx timeout [ 341.871908][T16772] SET target dimension over the limit! [ 342.134859][T16788] __nla_validate_parse: 10 callbacks suppressed [ 342.134879][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2989'. [ 342.141312][T16509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.262646][T16792] IPv6: NLM_F_CREATE should be specified when creating new route [ 342.287057][T16792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.294372][T16792] IPv6: NLM_F_CREATE should be set when creating new route [ 342.310456][T16791] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.328167][T16792] openvswitch: netlink: IP tunnel dst address not specified [ 342.377094][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2992'. [ 342.393504][T16509] veth0_vlan: entered promiscuous mode [ 342.460811][T16509] veth1_vlan: entered promiscuous mode [ 342.496045][T16802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2996'. [ 342.497362][T16791] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.507362][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 342.533494][T16802] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2996'. [ 342.544922][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 342.624506][T16791] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.658733][T16509] veth0_macvtap: entered promiscuous mode [ 342.670341][T16509] veth1_macvtap: entered promiscuous mode [ 342.691763][T16806] netlink: 'syz.1.2998': attribute type 1 has an invalid length. [ 342.713514][T16806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.731916][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2999'. [ 342.744281][T16791] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.758697][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2998'. [ 342.792326][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2998'. [ 342.810714][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 342.886663][T16819] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 342.901023][T16819] netlink: 'syz.4.3002': attribute type 7 has an invalid length. [ 342.908941][T16819] netlink: 'syz.4.3002': attribute type 8 has an invalid length. [ 342.920420][T16509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.944471][T16819] NCSI netlink: No device for ifindex 65584 [ 343.041919][T16813] hsr_slave_1 (unregistering): left promiscuous mode [ 343.064795][T16823] debugfs: 'netdev:veth1_to_bridge' already exists in 'phy5' [ 343.076050][T16827] netlink: 'syz.4.3006': attribute type 12 has an invalid length. [ 343.089541][T16509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.149389][T13016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.172694][T13016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.228433][T13016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.245897][T13016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.259082][T13016] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.426848][ T1093] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.535913][T13016] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.581684][ T4861] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.657539][T13016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.694956][T13016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.771069][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.771658][T16859] debugfs: 'netdev:veth1_to_bridge' already exists in 'phy16' [ 343.778926][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.810107][ T5826] Bluetooth: hci6: command tx timeout [ 344.116729][T16878] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.209640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 344.217712][ C0] lec:lec_tx_timeout: lec0 [ 344.222960][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 344.353081][T16887] siw: device registration error -23 [ 344.520302][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.531022][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.542440][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.565025][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.573537][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.605896][T16892] bond11: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 344.646844][T16892] bond11 (unregistering): Released all slaves [ 344.709104][T16891] vxcan1 speed is unknown, defaulting to 1000 [ 345.023456][T16913] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 345.287685][T16932] netlink: 'syz.0.3039': attribute type 4 has an invalid length. [ 345.426235][T16891] chnl_net:caif_netlink_parms(): no params data found [ 345.577971][T16940] syzkaller1: entered promiscuous mode [ 345.590148][T16940] syzkaller1: entered allmulticast mode [ 345.695493][T16891] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.736009][T16891] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.750448][T16891] bridge_slave_0: entered allmulticast mode [ 345.764079][T16891] bridge_slave_0: entered promiscuous mode [ 345.785886][T16891] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.801422][T16891] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.815087][T16968] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 345.817499][T16891] bridge_slave_1: entered allmulticast mode [ 345.843434][T16891] bridge_slave_1: entered promiscuous mode [ 345.889869][ T5833] Bluetooth: hci6: command tx timeout [ 345.900284][T16891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.928553][T16891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.981319][T16891] team0: Port device team_slave_0 added [ 345.990510][T16891] team0: Port device team_slave_1 added [ 345.996833][T16974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.116256][T16891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.124791][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.151856][T16891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.205570][T16891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.225387][ T9] IPVS: starting estimator thread 0... [ 346.232368][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.262621][T16891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.319991][T16987] IPVS: using max 30 ests per chain, 72000 per kthread [ 346.425517][T16891] hsr_slave_0: entered promiscuous mode [ 346.440966][T16891] hsr_slave_1: entered promiscuous mode [ 346.457691][T16891] debugfs: 'hsr0' already exists in 'hsr' [ 346.469744][T16891] Cannot create hsr debugfs directory [ 346.612225][ T5833] Bluetooth: hci4: command tx timeout [ 346.851340][T17014] gre1: entered promiscuous mode [ 346.856345][T17014] gre1: entered allmulticast mode [ 346.966533][T16891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.978591][T16891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.107281][T16891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.140180][T16891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.160352][T17034] __nla_validate_parse: 30 callbacks suppressed [ 347.160372][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3069'. [ 347.182611][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3069'. [ 347.192037][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3069'. [ 347.265884][T16891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.276854][T16891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.369220][T16891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.381736][T16891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.769053][T17066] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3078'. [ 347.781842][T17067] netlink: 'syz.4.3079': attribute type 7 has an invalid length. [ 347.822054][T17067] netlink: 'syz.4.3079': attribute type 26 has an invalid length. [ 347.827434][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3078'. [ 347.859858][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3080'. [ 347.879722][T16891] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.923187][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3080'. [ 347.945296][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3080'. [ 347.963681][T16891] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.969726][ T5833] Bluetooth: hci6: command 0x0405 tx timeout [ 347.997927][T16891] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.038999][T17080] veth0: entered promiscuous mode [ 348.053561][T16891] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.127384][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3083'. [ 348.275289][T17086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.291031][T17073] veth0: left promiscuous mode [ 348.322443][T17086] tipc: Started in network mode [ 348.327346][T17086] tipc: Node identity 5aaa233a5c85, cluster identity 4711 [ 348.335009][T17086] tipc: Enabled bearer , priority 0 [ 348.347583][T17086] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3083'. [ 348.548718][T16891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.608729][T16891] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.674651][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.681856][ T7096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.692109][ T5826] Bluetooth: hci4: command tx timeout [ 348.718522][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.725735][ T7096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.856755][T17117] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 349.052923][T17122] netlink: 'syz.1.3091': attribute type 7 has an invalid length. [ 349.249758][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 349.257799][ C0] lec:lec_tx_timeout: lec0 [ 349.262588][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 349.304512][T17130] bond0 (unregistering): Released all slaves [ 349.369906][T16891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.387049][T17135] netlink: 'syz.1.3096': attribute type 1 has an invalid length. [ 349.801588][T17147] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 349.871459][ T9] tipc: Node number set to 103752506 [ 350.097606][T16891] veth0_vlan: entered promiscuous mode [ 350.170811][T16891] veth1_vlan: entered promiscuous mode [ 350.307107][T16891] veth0_macvtap: entered promiscuous mode [ 350.385522][T16891] veth1_macvtap: entered promiscuous mode [ 350.427723][T17197] ip6t_rpfilter: unknown options [ 350.445049][T17196] ip6t_rpfilter: unknown options [ 350.503955][T16891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.521823][T16891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.612389][ T7096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.641849][ T7096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.666098][ T7096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.687807][ T7096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.770133][ T5826] Bluetooth: hci4: command tx timeout [ 350.819006][T13016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.877951][T13016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.971187][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.994347][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.150090][T17227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.177455][T17231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.349861][T17237] bond0: entered allmulticast mode [ 351.355052][T17237] bond_slave_0: entered allmulticast mode [ 351.389722][T17237] bond_slave_1: entered allmulticast mode [ 351.853580][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.869193][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.891203][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.932776][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.940739][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.145423][T17259] vxcan1 speed is unknown, defaulting to 1000 [ 352.378679][T17276] __nla_validate_parse: 21 callbacks suppressed [ 352.378699][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 352.561977][T17283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3140'. [ 352.610883][T17285] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3141'. [ 352.836449][T17305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3144'. [ 352.860528][ T5833] Bluetooth: hci4: command tx timeout [ 352.881922][T17304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3144'. [ 352.977275][T17310] @0Ù: renamed from bond_slave_1 [ 353.106425][T17259] chnl_net:caif_netlink_parms(): no params data found [ 353.203356][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3148'. [ 353.214258][T17315] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3148'. [ 353.241448][T17317] netem: unknown loss type 0 [ 353.246796][T17317] netem: change failed [ 353.406368][T17259] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.417042][T17259] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.426728][T17259] bridge_slave_0: entered allmulticast mode [ 353.436183][T17259] bridge_slave_0: entered promiscuous mode [ 353.455030][T17259] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.476096][T17259] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.499036][T17259] bridge_slave_1: entered allmulticast mode [ 353.507697][T17259] bridge_slave_1: entered promiscuous mode [ 353.601673][T17259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.631006][T17259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.687833][T17259] team0: Port device team_slave_0 added [ 353.703535][T17259] team0: Port device team_slave_1 added [ 353.810573][T17259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.817560][T17259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.844819][T17259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.859114][T17259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.891332][T17259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.918887][T17259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.050198][ T5833] Bluetooth: hci2: command tx timeout [ 354.139131][T17365] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3162'. [ 354.181337][T17259] hsr_slave_0: entered promiscuous mode [ 354.188235][T17259] hsr_slave_1: entered promiscuous mode [ 354.198349][T17259] debugfs: 'hsr0' already exists in 'hsr' [ 354.204465][T17259] Cannot create hsr debugfs directory [ 354.269680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 354.277725][ C0] lec:lec_tx_timeout: lec0 [ 354.282456][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 354.293432][T17371] netlink: 'syz.1.3166': attribute type 3 has an invalid length. [ 354.347633][T17371] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 354.362215][T17371] bond9 (unregistering): Released all slaves [ 354.368019][T17377] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3167'. [ 354.942698][T17259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.972520][T17259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.986202][T17259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 355.194414][T17259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.204991][T17259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.217874][T17259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 355.265138][T17399] delete_channel: no stack [ 355.343893][T17259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.359161][T17259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.374508][T17259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 355.477206][T17259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.506896][T17259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.530193][T17259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 355.532120][T17420] blkio.reset_stats is deprecated [ 355.645998][T17426] xt_hashlimit: size too large, truncated to 1048576 [ 355.873088][T17259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.916380][T17259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.945183][T17259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.972473][T17446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.997120][T17259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.130422][ T5833] Bluetooth: hci2: command tx timeout [ 356.235217][T17259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.242163][T17466] netlink: 'syz.5.3193': attribute type 17 has an invalid length. [ 356.242186][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3193'. [ 356.321794][T17467] netlink: 'syz.3.3191': attribute type 1 has an invalid length. [ 356.334758][T17259] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.345492][T17467] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 356.359215][ T4861] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.375452][ T4861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.448289][ T4861] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.455499][ T4861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.807791][T17259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.261933][T17515] netlink: 'syz.1.3205': attribute type 8 has an invalid length. [ 357.358761][T17259] veth0_vlan: entered promiscuous mode [ 357.408675][T17517] vlan2: entered promiscuous mode [ 357.426955][T17517] bridge0: entered promiscuous mode [ 357.482303][T17518] sit2: entered promiscuous mode [ 357.494171][T17518] sit2: entered allmulticast mode [ 357.519211][T17259] veth1_vlan: entered promiscuous mode [ 357.594371][T17259] veth0_macvtap: entered promiscuous mode [ 357.615582][T17259] veth1_macvtap: entered promiscuous mode [ 357.676536][T17259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.707243][T17259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.748124][ T1093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.760448][ T1093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.786603][ T1093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.813519][ T1093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.998954][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.023935][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.102105][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.133535][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.215062][ T5833] Bluetooth: hci2: command tx timeout [ 358.367723][T17542] x_tables: duplicate underflow at hook 1 [ 358.812913][T17552] __nla_validate_parse: 7 callbacks suppressed [ 358.812931][T17552] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3215'. [ 358.837441][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.847859][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.858506][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.879258][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.887132][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.915391][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3215'. [ 359.142480][T17554] vxcan1 speed is unknown, defaulting to 1000 [ 359.289631][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 359.297848][ C0] lec:lec_tx_timeout: lec0 [ 359.302626][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 359.440616][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3219'. [ 359.518833][T17570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3220'. [ 359.912952][T17588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3227'. [ 359.928083][T17585] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 360.000034][T17597] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 360.067482][T17591] vxcan1 speed is unknown, defaulting to 1000 [ 360.211250][T17554] chnl_net:caif_netlink_parms(): no params data found [ 360.289941][ T5833] Bluetooth: hci2: command tx timeout [ 360.408389][T17554] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.469119][T17554] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.491126][T17554] bridge_slave_0: entered allmulticast mode [ 360.555829][T17554] bridge_slave_0: entered promiscuous mode [ 360.586606][T17614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3232'. [ 360.627676][T17554] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.636391][T17554] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.644534][T17554] bridge_slave_1: entered allmulticast mode [ 360.657705][T17554] bridge_slave_1: entered promiscuous mode [ 360.898945][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3234'. [ 360.909836][T17623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3234'. [ 360.919122][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3234'. [ 360.929345][T17623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3234'. [ 360.930123][ T5833] Bluetooth: hci1: command tx timeout [ 360.949849][T17554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.963395][T17554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.081439][T17628] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 361.085462][T17554] team0: Port device team_slave_0 added [ 361.098837][T17617] netlink: 'syz.4.3233': attribute type 2 has an invalid length. [ 361.281268][T17554] team0: Port device team_slave_1 added [ 361.455553][T17634] TCP: TCP_TX_DELAY enabled [ 361.455846][T17554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.473678][T17554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.505937][T17554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.519202][T17554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.526411][T17554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.566995][T17554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.636212][T17638] syzkaller0: entered promiscuous mode [ 361.642624][T17638] syzkaller0: entered allmulticast mode [ 361.665897][T17554] hsr_slave_0: entered promiscuous mode [ 361.673022][T17554] hsr_slave_1: entered promiscuous mode [ 361.680263][T17554] debugfs: 'hsr0' already exists in 'hsr' [ 361.686155][T17554] Cannot create hsr debugfs directory [ 361.943153][T17651] netlink: 'syz.3.3243': attribute type 10 has an invalid length. [ 362.009528][T17651] bond0: left allmulticast mode [ 362.016023][T17651] bond_slave_0: left allmulticast mode [ 362.032117][T17651] bond_slave_1: left allmulticast mode [ 362.070361][T17651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.083157][T17651] team0: Port device bond0 added [ 362.157319][T17654] netlink: 'syz.5.3244': attribute type 12 has an invalid length. [ 362.468949][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 363.010106][ T5833] Bluetooth: hci1: command tx timeout [ 364.319643][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 364.327713][ C0] lec:lec_tx_timeout: lec0 [ 364.332373][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 365.090055][ T5833] Bluetooth: hci1: command tx timeout [ 365.097929][T17554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.113090][T17554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 365.124478][T17554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.161429][T17657] syzkaller1: entered promiscuous mode [ 365.166950][T17657] syzkaller1: entered allmulticast mode [ 365.245504][T17554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.259273][T17554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 365.270383][T17554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.422990][T17554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.427560][T17681] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 365.433977][T17554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 365.450161][T17554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.464830][T17679] netlink: 'syz.3.3250': attribute type 5 has an invalid length. [ 365.481353][T17675] tipc: Enabling of bearer rejected, already enabled [ 365.494386][T17675] tipc: Resetting bearer [ 365.501463][T17675] __nla_validate_parse: 3 callbacks suppressed [ 365.501481][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3249'. [ 365.547722][T17554] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.558584][T17554] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 365.571539][T17554] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.823930][T17694] netlink: 'syz.5.3255': attribute type 1 has an invalid length. [ 366.008086][T17554] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 366.045312][T17554] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 366.103249][T17554] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.128884][T17554] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.385649][T17554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.468472][T17554] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.503369][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.510580][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.541679][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 366.599633][T13016] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.606830][T13016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.966170][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 367.092455][T17755] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 367.112834][T17755] netlink: 'syz.4.3267': attribute type 1 has an invalid length. [ 367.172400][ T5833] Bluetooth: hci1: command tx timeout [ 367.246044][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3268'. [ 367.266631][T17554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.839527][T17554] veth0_vlan: entered promiscuous mode [ 367.901803][T17554] veth1_vlan: entered promiscuous mode [ 367.980937][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.982408][T17554] veth0_macvtap: entered promiscuous mode [ 367.997329][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.006860][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.017283][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.025328][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.077784][T17554] veth1_macvtap: entered promiscuous mode [ 368.105278][T17784] netlink: 'syz.3.3272': attribute type 12 has an invalid length. [ 368.131151][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3272'. [ 368.169857][T17554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.184254][T17781] vxcan1 speed is unknown, defaulting to 1000 [ 368.191118][T17788] netlink: 'syz.5.3273': attribute type 33 has an invalid length. [ 368.218228][ T1093] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.245673][T17793] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 368.263254][T17554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.409260][T17788] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 368.474223][T17788] bond0 (unregistering): Released all slaves [ 368.543288][T17792] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3274'. [ 368.566225][ T1093] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.619196][T17794] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 368.637102][T17794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 368.661675][ T1093] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.696552][ T1093] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.752584][ T1093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.765971][ T1093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.828576][ T1093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.854156][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.945657][T17809] Bluetooth: MGMT ver 1.23 [ 369.194737][T17820] syzkaller0: entered promiscuous mode [ 369.201382][T17820] syzkaller0: entered allmulticast mode [ 369.307405][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.329828][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.339612][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 369.347719][ C0] lec:lec_tx_timeout: lec0 [ 369.352408][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 369.414202][T17820] tipc: Started in network mode [ 369.419128][T17820] tipc: Node identity 6ab7d68ed231, cluster identity 4711 [ 369.427653][T17820] tipc: Enabled bearer , priority 0 [ 369.437386][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.446690][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.469016][T17819] tipc: Resetting bearer [ 369.501117][T17819] tipc: Disabling bearer [ 369.520056][T17781] chnl_net:caif_netlink_parms(): no params data found [ 369.726515][T17839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3212'. [ 369.764603][T17844] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3285'. [ 369.852544][T17781] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.869055][T17781] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.879478][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3288'. [ 369.880164][T17781] bridge_slave_0: entered allmulticast mode [ 369.898404][T17781] bridge_slave_0: entered promiscuous mode [ 369.916456][T17781] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.924186][T17781] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.937829][T17854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3288'. [ 369.954095][T17781] bridge_slave_1: entered allmulticast mode [ 369.962481][T17781] bridge_slave_1: entered promiscuous mode [ 370.066083][T17781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.114687][T17781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.131645][ T5833] Bluetooth: hci0: command tx timeout [ 370.222303][T17781] team0: Port device team_slave_0 added [ 370.234968][T17781] team0: Port device team_slave_1 added [ 370.274287][T17781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.282005][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.310653][T17781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.356401][T17876] netlink: 'syz.4.3296': attribute type 11 has an invalid length. [ 370.477955][T17781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.497531][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.542336][T17781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.578666][T17881] netlink: 'syz.5.3293': attribute type 9 has an invalid length. [ 370.609092][T17890] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 370.617808][T17890] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 370.695999][T17895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.753529][T17897] netlink: 'syz.1.3301': attribute type 11 has an invalid length. [ 370.776071][T17781] hsr_slave_0: entered promiscuous mode [ 370.790963][T17781] hsr_slave_1: entered promiscuous mode [ 370.797652][T17781] debugfs: 'hsr0' already exists in 'hsr' [ 370.809424][T17781] Cannot create hsr debugfs directory [ 370.821201][T17901] netlink: 'syz.4.3302': attribute type 1 has an invalid length. [ 370.983060][T17907] ip6t_srh: unknown srh match flags 5F28 [ 371.035273][T17905] syzkaller0: entered promiscuous mode [ 371.061356][T17905] syzkaller0: entered allmulticast mode [ 371.256256][T17916] vxcan1 speed is unknown, defaulting to 1000 [ 371.273524][T17905] netlink: 'syz.3.3304': attribute type 32 has an invalid length. [ 371.306079][T17905] __nla_validate_parse: 3 callbacks suppressed [ 371.306099][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3304'. [ 371.371293][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3310'. [ 371.383576][T17929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3310'. [ 371.393528][T17929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3310'. [ 371.456720][T17905] bond1: option coupled_control: invalid value (47) [ 371.484854][T17905] bond1 (unregistering): Released all slaves [ 371.561714][T17781] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 371.603110][T17781] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 371.632046][T17781] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 371.663626][T17781] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 371.710095][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'. [ 371.869536][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 371.903564][T17948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3315'. [ 371.920054][T17948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3315'. [ 372.113005][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 372.165709][T17965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3318'. [ 372.221711][ T5833] Bluetooth: hci0: command tx timeout [ 372.467301][T17781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.593587][T17781] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.614804][T17980] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 372.627781][T17978] macsec1: entered promiscuous mode [ 372.658328][T17980] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 372.674411][ T4861] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.681612][ T4861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.734043][ T4861] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.741521][ T4861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.885885][T17993] tipc: Started in network mode [ 372.893207][T17993] tipc: Node identity fe684f72786d, cluster identity 4711 [ 372.901123][T17993] tipc: Enabled bearer , priority 0 [ 372.913391][T17993] syzkaller0: entered promiscuous mode [ 372.921757][T17993] syzkaller0: entered allmulticast mode [ 372.945992][T17993] tipc: Resetting bearer [ 372.957345][T17991] tipc: Resetting bearer [ 372.978132][T17991] tipc: Disabling bearer [ 373.217357][T17781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.503421][T18026] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 373.741795][T17781] veth0_vlan: entered promiscuous mode [ 373.769305][T17781] veth1_vlan: entered promiscuous mode [ 373.816218][T18039] xt_hashlimit: invalid interval [ 373.831425][T17781] veth0_macvtap: entered promiscuous mode [ 373.844840][T17781] veth1_macvtap: entered promiscuous mode [ 373.924068][T17781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.963897][T17781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.006434][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.037661][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.131793][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.156491][T13016] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.300435][ T5833] Bluetooth: hci0: command tx timeout [ 374.359621][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 374.367706][ C0] lec:lec_tx_timeout: lec0 [ 374.373191][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 374.400532][ T7096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.435867][ T7096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.527234][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.551445][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.744790][T18085] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 375.301350][T18122] netlink: 'syz.3.3364': attribute type 6 has an invalid length. [ 375.322663][T18122] netlink: 'syz.3.3364': attribute type 5 has an invalid length. [ 375.585100][T18146] netlink: 'syz.4.3371': attribute type 10 has an invalid length. [ 375.871614][T18160] Unsupported ieee802154 address type: 0 [ 376.017731][T18164] netlink: 'syz.3.3376': attribute type 1 has an invalid length. [ 376.085630][T18167] netlink: 'syz.5.3377': attribute type 10 has an invalid length. [ 376.119719][T18164] netlink: 'syz.3.3376': attribute type 2 has an invalid length. [ 376.356772][T18178] bond1 (unregistering): Released all slaves [ 376.370293][ T5833] Bluetooth: hci0: command tx timeout [ 376.564118][T18185] xt_policy: output policy not valid in PREROUTING and INPUT [ 376.571777][ T30] audit: type=1804 audit(1769914858.715:8): pid=18185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3384" name="/newroot/445/cgroup.controllers" dev="tmpfs" ino=2279 res=1 errno=0 [ 376.658795][ T30] audit: type=1800 audit(1769914858.715:9): pid=18185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3384" name="cgroup.controllers" dev="tmpfs" ino=2279 res=0 errno=0 [ 376.686550][T18189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.729222][T18191] netlink: 'syz.6.3387': attribute type 6 has an invalid length. [ 376.780505][T18189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.843449][T18195] ip_vti0: entered promiscuous mode [ 376.863979][T18195] __nla_validate_parse: 22 callbacks suppressed [ 376.864000][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 377.066784][T18212] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.104867][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3389'. [ 377.232313][T18221] netlink: 1128 bytes leftover after parsing attributes in process `syz.5.3393'. [ 377.242404][T18221] netlink: 1128 bytes leftover after parsing attributes in process `syz.5.3393'. [ 377.375094][T18230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3396'. [ 378.048715][T18269] delete_channel: no stack [ 378.072447][T18271] netlink: 'syz.1.3409': attribute type 1 has an invalid length. [ 378.101830][T18273] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3411'. [ 378.111040][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3409'. [ 378.148237][T18271] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.167036][T18271] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.210508][T18278] netlink: 'syz.1.3409': attribute type 16 has an invalid length. [ 378.246060][T18278] netlink: 'syz.1.3409': attribute type 17 has an invalid length. [ 378.283960][T18278] ip_vti0: left promiscuous mode [ 378.330732][T18278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.485751][T18285] netlink: 192124 bytes leftover after parsing attributes in process `syz.1.3416'. [ 379.058753][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 379.076637][T18316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.251351][T18316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.258149][T18332] netlink: 46 bytes leftover after parsing attributes in process `syz.3.3429'. [ 379.373802][T18329] siw: device registration error -23 [ 379.379610][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 379.387685][ C0] lec:lec_tx_timeout: lec0 [ 379.392649][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 379.906741][T18371] netlink: 'syz.1.3441': attribute type 10 has an invalid length. [ 379.914684][T18372] syz.4.3443: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 379.914850][T18372] CPU: 0 UID: 0 PID: 18372 Comm: syz.4.3443 Not tainted syzkaller #0 PREEMPT(full) [ 379.914873][T18372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 379.914893][T18372] Call Trace: [ 379.914901][T18372] [ 379.914911][T18372] dump_stack_lvl+0xe8/0x150 [ 379.914947][T18372] warn_alloc+0x249/0x340 [ 379.914978][T18372] ? stack_trace_save+0xa9/0x100 [ 379.915010][T18372] ? __pfx_warn_alloc+0x10/0x10 [ 379.915036][T18372] ? kasan_save_track+0x4f/0x80 [ 379.915053][T18372] ? kasan_save_track+0x3e/0x80 [ 379.915068][T18372] ? __kasan_kmalloc+0x93/0xb0 [ 379.915088][T18372] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 379.915106][T18372] ? xskq_create+0x56/0x170 [ 379.915126][T18372] ? xsk_setsockopt+0x54c/0x990 [ 379.915151][T18372] ? do_sock_setsockopt+0x17c/0x1b0 [ 379.915175][T18372] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 379.915196][T18372] ? do_syscall_64+0xe2/0xf80 [ 379.915219][T18372] __vmalloc_node_range_noprof+0x132/0x1730 [ 379.915272][T18372] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 379.915297][T18372] ? __kasan_kmalloc+0x93/0xb0 [ 379.915320][T18372] vmalloc_user_noprof+0xad/0xe0 [ 379.915338][T18372] ? xskq_create+0xbf/0x170 [ 379.915355][T18372] xskq_create+0xbf/0x170 [ 379.915374][T18372] xsk_init_queue+0xad/0x110 [ 379.915402][T18372] xsk_setsockopt+0x54c/0x990 [ 379.915431][T18372] ? __pfx_xsk_setsockopt+0x10/0x10 [ 379.915456][T18372] ? __pfx_aa_sk_perm+0x10/0x10 [ 379.915482][T18372] ? aa_sock_opt_perm+0xff/0x1a0 [ 379.915507][T18372] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 379.915530][T18372] ? __pfx_xsk_setsockopt+0x10/0x10 [ 379.915561][T18372] do_sock_setsockopt+0x17c/0x1b0 [ 379.915588][T18372] __x64_sys_setsockopt+0x13d/0x1b0 [ 379.915615][T18372] do_syscall_64+0xe2/0xf80 [ 379.915633][T18372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.915660][T18372] ? trace_irq_disable+0x37/0x100 [ 379.915682][T18372] ? clear_bhb_loop+0x60/0xb0 [ 379.915704][T18372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.915725][T18372] RIP: 0033:0x7f511e99aeb9 [ 379.915743][T18372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.915759][T18372] RSP: 002b:00007f511f816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 379.915778][T18372] RAX: ffffffffffffffda RBX: 00007f511ec15fa0 RCX: 00007f511e99aeb9 [ 379.915793][T18372] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 379.915809][T18372] RBP: 00007f511ea08c1f R08: 0000000000000004 R09: 0000000000000000 [ 379.915820][T18372] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.915832][T18372] R13: 00007f511ec16038 R14: 00007f511ec15fa0 R15: 00007ffff591bee8 [ 379.915863][T18372] [ 379.918548][T18372] Mem-Info: [ 379.957783][T18371] team0: Device veth0_macvtap failed to register rx_handler [ 380.031911][T18373] netlink: 'syz.1.3441': attribute type 1 has an invalid length. [ 380.039768][T18372] active_anon:10365 inactive_anon:0 isolated_anon:0 [ 380.039768][T18372] active_file:3281 inactive_file:40056 isolated_file:0 [ 380.039768][T18372] unevictable:768 dirty:116 writeback:0 [ 380.039768][T18372] slab_reclaimable:12655 slab_unreclaimable:129845 [ 380.039768][T18372] mapped:39791 shmem:1357 pagetables:1386 [ 380.039768][T18372] sec_pagetables:0 bounce:0 [ 380.039768][T18372] kernel_misc_reclaimable:0 [ 380.039768][T18372] free:1252840 free_pcp:21252 free_cma:0 [ 380.309329][T18372] Node 0 active_anon:42072kB inactive_anon:0kB active_file:13124kB inactive_file:160020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159092kB dirty:468kB writeback:0kB shmem:4096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16112kB pagetables:5532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 380.344630][T18372] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 380.411159][T18372] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.449063][T18372] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 380.455784][T18372] Node 0 DMA32 free:1111128kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41472kB inactive_anon:0kB active_file:13124kB inactive_file:160020kB unevictable:1536kB writepending:468kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:64988kB local_pcp:30452kB free_cma:0kB [ 380.515878][T18392] netlink: 'syz.1.3448': attribute type 11 has an invalid length. [ 380.524941][T18372] lowmem_reserve[]: 0 0 1 1 1 [ 380.531436][T18372] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.563439][T18372] lowmem_reserve[]: 0 0 0 0 0 [ 380.568442][T18372] Node 1 Normal free:3889160kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15716kB local_pcp:8196kB free_cma:0kB [ 380.644544][T18372] lowmem_reserve[]: 0 0 0 0 0 [ 380.655685][T18372] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 380.671399][T18372] Node 0 DMA32: 3420*4kB (UME) 3427*8kB (UME) 819*16kB (UME) 43*32kB (UME) 22*64kB (UME) 10*128kB (UME) 21*256kB (UM) 107*512kB (UM) 108*1024kB (UME) 48*2048kB (UM) 190*4096kB (UM) = 1105560kB [ 380.714634][T18372] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 380.740346][T18372] Node 1 Normal: 192*4kB (UE) 49*8kB (UME) 46*16kB (UME) 101*32kB (UME) 34*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3889160kB [ 380.777320][T18372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.788042][T18372] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.799011][T18372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.811148][T18372] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.820739][T18372] 44691 total pagecache pages [ 380.829336][T18372] 0 pages in swap cache [ 380.835103][T18372] Free swap = 124996kB [ 380.841302][T18372] Total swap = 124996kB [ 380.854928][T18372] 2097051 pages RAM [ 380.885584][T18372] 0 pages HighMem/MovableOnly [ 380.899998][T18372] 426622 pages reserved [ 380.904583][T18372] 0 pages cma reserved [ 381.402228][T18428] validate_nla: 2 callbacks suppressed [ 381.402245][T18428] netlink: 'syz.1.3460': attribute type 7 has an invalid length. [ 381.420958][T18428] netlink: 'syz.1.3460': attribute type 8 has an invalid length. [ 381.688776][T18451] netlink: 'syz.1.3467': attribute type 22 has an invalid length. [ 381.749366][T18451] netlink: 'syz.1.3467': attribute type 22 has an invalid length. [ 381.751416][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.807174][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.818237][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.827726][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.887039][T18462] netlink: 'syz.4.3470': attribute type 6 has an invalid length. [ 381.906641][T18462] netlink: 'syz.4.3470': attribute type 6 has an invalid length. [ 381.976633][T18464] __nla_validate_parse: 13 callbacks suppressed [ 381.976667][T18464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3471'. [ 382.072056][T18476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.203522][T18481] netlink: 'syz.3.3476': attribute type 13 has an invalid length. [ 382.226134][T18477] syzkaller0: entered promiscuous mode [ 382.240208][T18477] syzkaller0: entered allmulticast mode [ 382.255199][T18481] veth0_macvtap: left promiscuous mode [ 382.264088][T18481] macvtap0: entered allmulticast mode [ 382.284092][T18481] macvtap0: refused to change device tx_queue_len [ 382.444423][T18495] SET target dimension over the limit! [ 382.674469][T18507] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3481'. [ 384.323315][T18517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.339122][T18518] tipc: Resetting bearer [ 384.346824][T18518] syzkaller0: left promiscuous mode [ 384.399651][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 384.407778][ C0] lec:lec_tx_timeout: lec0 [ 384.412380][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 384.746008][T18544] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3490'. [ 384.750271][T18547] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:19997 [ 384.851619][T18544] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 384.913577][T18544] 0ªî{X¹¦: entered allmulticast mode [ 384.919507][T18544] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 385.126945][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3496'. [ 385.393489][T18583] syzkaller0: entered promiscuous mode [ 385.404888][T18582] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3499'. [ 385.431278][T18583] syzkaller0: entered allmulticast mode [ 385.438439][T18580] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 385.504254][T18587] netlink: 'syz.1.3501': attribute type 21 has an invalid length. [ 385.513472][T18587] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3501'. [ 385.525548][T18587] netlink: 'syz.1.3501': attribute type 5 has an invalid length. [ 385.536326][T18587] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3501'. [ 385.868406][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 385.944864][T18603] hsr_slave_0 (unregistering): left promiscuous mode [ 386.045177][T18617] Bluetooth: MGMT ver 1.23 [ 386.557118][T18626] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 386.696606][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3514'. [ 388.591236][T18592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.114825][T18660] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 389.419654][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 389.427698][ C0] lec:lec_tx_timeout: lec0 [ 389.432406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 389.525985][T18676] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3531'. [ 389.572357][T18676] netlink: 'syz.6.3531': attribute type 1 has an invalid length. [ 389.655636][T18690] netlink: 'syz.1.3533': attribute type 13 has an invalid length. [ 390.234457][T18717] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 390.260849][T18717] bond2 (unregistering): Released all slaves [ 390.308950][T18726] netlink: 'syz.6.3543': attribute type 13 has an invalid length. [ 390.448717][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3545'. [ 390.497661][T18739] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3546'. [ 390.755192][T18752] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.3551'. [ 391.006314][T18768] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002 [ 391.132919][T18775] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3561'. [ 391.147538][T18776] netlink: 'syz.6.3558': attribute type 2 has an invalid length. [ 391.414213][T18792] netlink: 'syz.6.3565': attribute type 4 has an invalid length. [ 391.467082][T18792] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3565'. [ 391.595048][T18805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3571'. [ 391.776782][T18822] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 391.826217][T18820] syzkaller1: entered promiscuous mode [ 391.870222][T18820] syzkaller1: entered allmulticast mode [ 391.973049][T18818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.105986][T18842] netlink: 'syz.6.3580': attribute type 4 has an invalid length. [ 392.115444][T18842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.278140][T18853] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3584'. [ 392.644365][T18873] netlink: 'syz.1.3589': attribute type 8 has an invalid length. [ 392.668578][T18878] netlink: 'syz.6.3591': attribute type 1 has an invalid length. [ 392.676643][T18878] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3591'. [ 392.822357][T18885] syzkaller0: entered promiscuous mode [ 392.913061][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3596'. [ 392.944457][T18895] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 392.954233][T18895] team0: Port device batadv1 added [ 393.042582][T18899] netlink: 'syz.5.3597': attribute type 1 has an invalid length. [ 393.044530][T18902] netlink: 'syz.3.3598': attribute type 1 has an invalid length. [ 393.124300][T18904] Bluetooth: MGMT ver 1.23 [ 393.129918][T18904] Bluetooth: hci1: too big key_count value 32778 [ 393.533741][T18930] smc: net device team0 applied user defined pnetid SYZ2 [ 393.795601][T18938] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 394.248561][T18963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.343741][T18963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.371502][T18963] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 394.389299][T18974] sctp: [Deprecated]: syz.3.3624 (pid 18974) Use of int in max_burst socket option. [ 394.389299][T18974] Use struct sctp_assoc_value instead [ 394.408121][T18963] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 394.569549][T18982] __nla_validate_parse: 7 callbacks suppressed [ 394.598102][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3627'. [ 394.631785][T18982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3627'. [ 394.682142][T18986] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3630'. [ 394.733121][T18989] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 394.793271][T18995] FAULT_INJECTION: forcing a failure. [ 394.793271][T18995] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 394.824442][T18995] CPU: 0 UID: 0 PID: 18995 Comm: syz.1.3632 Not tainted syzkaller #0 PREEMPT(full) [ 394.824469][T18995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 394.824481][T18995] Call Trace: [ 394.824489][T18995] [ 394.824497][T18995] dump_stack_lvl+0xe8/0x150 [ 394.824524][T18995] should_fail_ex+0x412/0x560 [ 394.824585][T18995] _copy_from_user+0x2d/0xb0 [ 394.824610][T18995] ___sys_sendmsg+0x1c6/0x360 [ 394.824631][T18995] ? __lock_acquire+0x6b5/0x2cf0 [ 394.824658][T18995] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.824711][T18995] ? __fget_files+0x2a/0x420 [ 394.824736][T18995] ? __fget_files+0x3a0/0x420 [ 394.824763][T18995] __x64_sys_sendmsg+0x1bd/0x2a0 [ 394.824788][T18995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.824815][T18995] ? __pfx_ksys_write+0x10/0x10 [ 394.824846][T18995] do_syscall_64+0xe2/0xf80 [ 394.824865][T18995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.824879][T18995] ? trace_irq_disable+0x37/0x100 [ 394.824895][T18995] ? clear_bhb_loop+0x60/0xb0 [ 394.824915][T18995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.824930][T18995] RIP: 0033:0x7f9806f9aeb9 [ 394.824947][T18995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.824961][T18995] RSP: 002b:00007f9807e23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.824980][T18995] RAX: ffffffffffffffda RBX: 00007f9807215fa0 RCX: 00007f9806f9aeb9 [ 394.824992][T18995] RDX: 0000000000008010 RSI: 0000200000000340 RDI: 0000000000000004 [ 394.825004][T18995] RBP: 00007f9807e23090 R08: 0000000000000000 R09: 0000000000000000 [ 394.825014][T18995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.825024][T18995] R13: 00007f9807216038 R14: 00007f9807215fa0 R15: 00007ffe7a3181a8 [ 394.825052][T18995] [ 394.885467][T18999] syzkaller0: entered promiscuous mode [ 395.061309][T18999] syzkaller0: entered allmulticast mode [ 395.138079][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3637'. [ 395.545455][T19024] vlan2: entered promiscuous mode [ 395.559714][T19024] bridge0: entered promiscuous mode [ 395.729700][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6300 ms [ 395.737825][ C0] lec:lec_tx_timeout: lec0 [ 395.744421][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 395.845414][T19043] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 395.937664][T19048] syzkaller0: entered promiscuous mode [ 395.953606][T19048] syzkaller0: entered allmulticast mode [ 396.023163][T19056] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 396.062926][T19048] dvmrp0: entered allmulticast mode [ 396.480385][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3663'. [ 396.645522][T19050] infiniband syz0: set active [ 396.657855][T19050] infiniband syz0: added bond_slave_0 [ 396.871287][T19050] RDS/IB: syz0: added [ 396.889082][T19050] smc: adding ib device syz0 with port count 1 [ 396.903710][T19050] smc: ib device syz0 port 1 has no pnetid [ 397.091242][T19109] lo: Caught tx_queue_len zero misconfig [ 397.147657][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3675'. [ 397.210756][T19118] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3676'. [ 397.246677][T19111] tap0: tun_chr_ioctl cmd 1074025673 [ 397.262515][T19109] tap0: tun_chr_ioctl cmd 1074025676 [ 397.268029][T19109] tap0: owner set to 0 [ 397.280121][T19118] gretap0: entered promiscuous mode [ 397.286326][T19111] tap0: tun_chr_ioctl cmd 1074025676 [ 397.292059][T19111] tap0: owner set to 0 [ 400.482834][T19230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3686'. [ 400.492150][T19230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3686'. [ 400.585993][T19139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.919874][T19256] validate_nla: 1 callbacks suppressed [ 400.919894][T19256] netlink: 'syz.5.3693': attribute type 27 has an invalid length. [ 401.036524][T19249] vxcan1 speed is unknown, defaulting to 1000 [ 401.111033][T19273] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3697'. [ 401.158509][T19273] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3697'. [ 401.254709][T19273] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3697'. [ 401.281312][T19275] netlink: 'syz.4.3698': attribute type 1 has an invalid length. [ 401.431817][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3700'. [ 401.489616][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 401.497688][ C0] lec:lec_tx_timeout: lec0 [ 401.504309][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 401.561579][T19284] team0: Port device team_slave_0 removed [ 401.792956][T19302] netlink: 'syz.6.3708': attribute type 2 has an invalid length. [ 402.501484][T19351] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3723'. [ 403.005757][T19376] bridge0: port 3(syz_tun) entered blocking state [ 403.027198][T19376] bridge0: port 3(syz_tun) entered disabled state [ 403.039474][T19385] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3729'. [ 403.050268][T19376] syz_tun: entered allmulticast mode [ 403.071890][T19386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.107570][T19376] syz_tun: entered promiscuous mode [ 403.138498][T19376] bridge0: port 3(syz_tun) entered blocking state [ 403.145524][T19376] bridge0: port 3(syz_tun) entered forwarding state [ 403.150713][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3731'. [ 403.232288][T19390] openvswitch: netlink: Unknown key attributes 2 [ 403.238826][T19387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.307468][T19390] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3733'. [ 407.249784][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 407.257921][ C0] lec:lec_tx_timeout: lec0 [ 407.264698][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 412.279684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 412.287896][ C0] lec:lec_tx_timeout: lec0 [ 412.292935][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 417.299726][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 417.307805][ C0] lec:lec_tx_timeout: lec0 [ 417.312415][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 422.319772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 422.327985][ C0] lec:lec_tx_timeout: lec0 [ 422.332676][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 427.339734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 427.347764][ C0] lec:lec_tx_timeout: lec0 [ 427.352320][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 432.370021][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 432.378176][ C0] lec:lec_tx_timeout: lec0 [ 432.383183][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 437.389777][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 437.397865][ C0] lec:lec_tx_timeout: lec0 [ 437.402774][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 442.409808][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 442.417842][ C0] lec:lec_tx_timeout: lec0 [ 442.422856][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.000891][T19398] netlink: 292 bytes leftover after parsing attributes in process `syz.5.3736'. [ 445.074077][T19404] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.151435][T19413] netlink: 'syz.6.3740': attribute type 1 has an invalid length. [ 445.177615][T19413] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3740'. [ 445.361043][T19425] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3744'. [ 445.647789][T19457] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3752'. [ 445.748054][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3756'. [ 445.786547][T19467] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3758'. [ 445.810521][T19459] netlink: 'syz.6.3755': attribute type 4 has an invalid length. [ 446.172971][T19497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.376513][T19506] netlink: 'syz.3.3768': attribute type 9 has an invalid length. [ 446.962194][T19552] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 446.987509][T19552] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3780'. [ 447.025287][T19552] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3780'. [ 447.059698][T19552] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 447.067570][T19552] netlink: 'syz.1.3780': attribute type 8 has an invalid length. [ 447.112577][T19552] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3780'. [ 447.235034][T19568] IPVS: Error connecting to the multicast addr [ 447.238423][T19566] netlink: 'syz.5.3783': attribute type 1 has an invalid length. [ 447.278903][T19566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.381165][T19566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.406427][T19566] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 447.418844][T19566] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 447.481788][T19581] veth3: entered promiscuous mode [ 447.507683][T19581] bond0: (slave veth3): Enslaving as an active interface with a down link [ 447.510914][T19588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3788'. [ 447.544967][T19590] netlink: 'syz.1.3790': attribute type 3 has an invalid length. [ 447.556394][T19582] vlan2: entered allmulticast mode [ 447.561751][T19582] bond0: entered allmulticast mode [ 447.887445][T19612] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 448.083281][T19627] netlink: 'syz.6.3804': attribute type 6 has an invalid length. [ 448.106915][T19632] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 448.209608][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 448.217675][ C0] lec:lec_tx_timeout: lec0 [ 448.223717][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 448.299072][T19642] netlink: 'syz.6.3809': attribute type 3 has an invalid length. [ 448.320846][T19642] nft_compat: unsupported protocol 0 [ 448.684464][T19667] syzkaller0: entered promiscuous mode [ 448.698734][T19667] syzkaller0: entered allmulticast mode [ 448.984733][T19699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 448.991876][T19698] xt_hashlimit: size too large, truncated to 1048576 [ 450.953321][T19678] validate_nla: 2 callbacks suppressed [ 450.953346][T19678] netlink: 'syz.4.3820': attribute type 12 has an invalid length. [ 450.971524][T19710] bridge0: entered allmulticast mode [ 450.996315][T19713] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 451.152784][T19719] __nla_validate_parse: 12 callbacks suppressed [ 451.152805][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3830'. [ 451.161554][ T5833] Bluetooth: hci0: link tx timeout [ 451.180109][ T5833] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.204073][ T5833] Bluetooth: hci0: link tx timeout [ 451.209237][ T5833] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.217085][ T5833] Bluetooth: hci0: link tx timeout [ 451.222257][ T5833] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.230965][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3830'. [ 451.240277][ T5833] Bluetooth: hci0: link tx timeout [ 451.245418][ T5833] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.257663][ T5833] Bluetooth: hci0: link tx timeout [ 451.263434][ T5833] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.271659][ T5833] Bluetooth: hci0: link tx timeout [ 451.277778][ T5833] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.361087][T19732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3836'. [ 451.585706][T19755] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.653023][T19760] xt_TPROXY: Can be used only with -p tcp or -p udp [ 451.695155][T19759] syzkaller0: entered promiscuous mode [ 451.703336][T19759] syzkaller0: entered allmulticast mode [ 451.836931][T19769] netlink: 'syz.1.3846': attribute type 3 has an invalid length. [ 451.909145][T19771] openvswitch: netlink: Key type 61 is out of range max 32 [ 452.099791][T19788] IPv4: Oversized IP packet from 172.20.20.24 [ 452.108670][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 452.115447][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 452.393109][T19807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.417664][T19807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.561649][T19811] veth1_macvtap: left promiscuous mode [ 452.596522][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3862'. [ 452.609296][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3862'. [ 452.634161][T19822] netlink: 54 bytes leftover after parsing attributes in process `syz.5.3862'. [ 452.643671][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3862'. [ 452.708406][T19826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 452.788061][T19826] bond2: entered promiscuous mode [ 452.793559][T19837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 452.794053][T19826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.808058][T19837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 452.875021][T19826] bond2: (slave xfrm1): refused to change device type [ 453.249772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 453.252840][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 453.257856][ C0] lec:lec_tx_timeout: lec0 [ 453.258445][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 453.463830][T19887] bond0: (slave rose0): Error: Device can not be enslaved while up [ 453.547188][T19892] bond3: option all_slaves_active: invalid value (222) [ 453.564364][T19892] bond3 (unregistering): Released all slaves [ 453.875670][T19918] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 453.896180][T19920] netlink: 'syz.3.3888': attribute type 1 has an invalid length. [ 454.493706][T19952] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 455.351375][T20012] xt_hashlimit: invalid interval [ 455.425525][T20028] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 455.445395][T20027] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 455.564402][T20032] netlink: 'syz.4.3914': attribute type 1 has an invalid length. [ 455.946627][T20063] netlink: 'syz.6.3922': attribute type 2 has an invalid length. [ 455.961333][T20063] netlink: 'syz.6.3922': attribute type 4 has an invalid length. [ 455.970603][T20066] netlink: 'syz.3.3924': attribute type 3 has an invalid length. [ 456.114448][T20073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.222293][T20085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.546951][T20081] __nla_validate_parse: 26 callbacks suppressed [ 456.546998][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3927'. [ 456.614744][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3927'. [ 456.873628][T20106] can: request_module (can-proto-0) failed. [ 456.964063][T20114] geneve2: entered promiscuous mode [ 456.991406][T20114] geneve2: entered allmulticast mode [ 457.044882][T20124] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3944'. [ 457.102574][T20126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3945'. [ 457.114028][T20126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3945'. [ 457.141974][T20129] netlink: 'syz.1.3946': attribute type 4 has an invalid length. [ 457.184032][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3945'. [ 457.193567][T20132] bridge_slave_1: left allmulticast mode [ 457.199558][T20132] bridge_slave_1: left promiscuous mode [ 457.209044][T20132] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.225624][T20132] bridge_slave_0: left allmulticast mode [ 457.233519][T20132] bridge_slave_0: left promiscuous mode [ 457.251251][T20132] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.544401][T20154] netlink: 'syz.5.3952': attribute type 1 has an invalid length. [ 457.563880][T20154] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3952'. [ 457.575617][T20155] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 457.583082][T20154] netlink: 658 bytes leftover after parsing attributes in process `syz.5.3952'. [ 457.593207][T20154] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3952'. [ 457.716733][T20170] sctp: [Deprecated]: syz.6.3957 (pid 20170) Use of int in max_burst socket option deprecated. [ 457.716733][T20170] Use struct sctp_assoc_value instead [ 457.746289][T20171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3957'. [ 457.746523][T20170] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 457.769927][T20170] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 457.864476][T20171] team0 (unregistering): Port device team_slave_1 removed [ 457.901906][T20171] team0 (unregistering): Port device batadv1 removed [ 458.262498][T20219] netlink: 'syz.3.3969': attribute type 5 has an invalid length. [ 458.279687][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 458.287814][ C0] lec:lec_tx_timeout: lec0 [ 458.293153][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 458.312817][T20226] tipc: Enabling of bearer rejected, failed to enable media [ 458.522794][T20237] netlink: 'syz.1.3972': attribute type 21 has an invalid length. [ 458.566831][T20237] netlink: 'syz.1.3972': attribute type 1 has an invalid length. [ 458.647725][T20244] siw: device registration error -23 [ 458.674542][T20245] siw: device registration error -23 [ 459.199309][T20278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.218933][T20275] syzkaller1: entered promiscuous mode [ 459.225452][T20275] syzkaller1: entered allmulticast mode [ 459.756011][T20310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.763476][T20310] IPv6: NLM_F_CREATE should be set when creating new route [ 459.800726][T20311] macvlan0: entered promiscuous mode [ 460.016285][T20324] macvlan0: entered promiscuous mode [ 460.273247][T20332] netlink: 'syz.1.4003': attribute type 2 has an invalid length. [ 460.381283][T20337] sctp: [Deprecated]: syz.3.4004 (pid 20337) Use of int in max_burst socket option deprecated. [ 460.381283][T20337] Use struct sctp_assoc_value instead [ 460.830942][T20374] ipvlan2: entered promiscuous mode [ 461.057744][T20379] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 461.099501][T20379] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 461.330712][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 461.593863][T20426] netlink: 'syz.1.4026': attribute type 7 has an invalid length. [ 461.600959][T20427] tipc: Enabling of bearer rejected, media not registered [ 461.610513][T20426] __nla_validate_parse: 13 callbacks suppressed [ 461.610531][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 461.635706][T20426] netlink: 'syz.1.4026': attribute type 7 has an invalid length. [ 461.644446][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 461.806300][T20438] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4027'. [ 461.816024][ T5833] Bluetooth: hci6: command 0x0405 tx timeout [ 461.882545][T20440] netlink: 'syz.1.4029': attribute type 1 has an invalid length. [ 461.933079][T20440] bond3: entered promiscuous mode [ 461.939148][T20440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.082645][T20440] bond3: (slave bridge2): making interface the new active one [ 462.092692][T20440] bridge2: entered promiscuous mode [ 462.121131][T20440] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 462.357777][T20464] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4035'. [ 462.367928][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4035'. [ 462.432040][T20466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4037'. [ 462.444877][T20466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4037'. [ 462.646204][T20475] netlink: 'syz.4.4040': attribute type 1 has an invalid length. [ 462.675827][T20476] bond4: entered promiscuous mode [ 462.696160][T20476] macvlan2: entered promiscuous mode [ 462.702394][T20476] macvlan2: entered allmulticast mode [ 462.709222][T20476] bond4: (slave macvlan2): Opening slave failed [ 462.948217][T20486] syzkaller0: entered promiscuous mode [ 462.954463][T20486] syzkaller0: entered allmulticast mode [ 462.995072][T20491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4042'. [ 463.081944][T20491] macvtap1: entered promiscuous mode [ 463.088648][T20491] vlan0: entered promiscuous mode [ 463.105207][T20491] macvtap1: entered allmulticast mode [ 463.131305][T20491] vlan0: entered allmulticast mode [ 463.136491][T20491] veth0_vlan: entered allmulticast mode [ 463.188621][T20501] tap0: tun_chr_ioctl cmd 1074025672 [ 463.194559][T20501] tap0: ignored: set checksum disabled [ 463.234117][T20506] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4048'. [ 463.313505][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 463.321554][ C0] lec:lec_tx_timeout: lec0 [ 463.326188][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 463.375558][T20496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4044'. [ 463.394765][T20503] netlink: 'syz.3.4048': attribute type 1 has an invalid length. [ 463.616446][T20513] netlink: 'syz.3.4051': attribute type 10 has an invalid length. [ 463.673344][T20513] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 463.778860][T20530] netlink: 'syz.1.4056': attribute type 13 has an invalid length. [ 463.790526][T20531] netlink: 'syz.6.4053': attribute type 1 has an invalid length. [ 464.233094][T20562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.296740][T20559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.306213][T20559] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 464.316257][T20559] team0: Failed to send options change via netlink (err -105) [ 464.326326][T20559] team0: Port device batadv0 added [ 464.345871][T20566] netlink: 'syz.4.4067': attribute type 1 has an invalid length. [ 464.878443][T20603] netlink: 'syz.5.4078': attribute type 2 has an invalid length. [ 464.890303][T20605] FAULT_INJECTION: forcing a failure. [ 464.890303][T20605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.945158][T20605] CPU: 1 UID: 0 PID: 20605 Comm: syz.6.4076 Not tainted syzkaller #0 PREEMPT(full) [ 464.945181][T20605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 464.945192][T20605] Call Trace: [ 464.945201][T20605] [ 464.945209][T20605] dump_stack_lvl+0xe8/0x150 [ 464.945240][T20605] should_fail_ex+0x412/0x560 [ 464.945266][T20605] _copy_from_user+0x2d/0xb0 [ 464.945298][T20605] ___sys_sendmsg+0x1c6/0x360 [ 464.945332][T20605] ? __lock_acquire+0x6b5/0x2cf0 [ 464.945359][T20605] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.945410][T20605] ? __fget_files+0x2a/0x420 [ 464.945429][T20605] ? __fget_files+0x3a0/0x420 [ 464.945455][T20605] __x64_sys_sendmsg+0x1bd/0x2a0 [ 464.945478][T20605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.945516][T20605] ? __pfx_ksys_write+0x10/0x10 [ 464.945548][T20605] do_syscall_64+0xe2/0xf80 [ 464.945569][T20605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.945584][T20605] ? trace_irq_disable+0x37/0x100 [ 464.945600][T20605] ? clear_bhb_loop+0x60/0xb0 [ 464.945619][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.945635][T20605] RIP: 0033:0x7f2f2f99aeb9 [ 464.945650][T20605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.945664][T20605] RSP: 002b:00007f2f3091e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.945683][T20605] RAX: ffffffffffffffda RBX: 00007f2f2fc16090 RCX: 00007f2f2f99aeb9 [ 464.945694][T20605] RDX: 0000000000000810 RSI: 00002000000001c0 RDI: 0000000000000003 [ 464.945705][T20605] RBP: 00007f2f3091e090 R08: 0000000000000000 R09: 0000000000000000 [ 464.945715][T20605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.945724][T20605] R13: 00007f2f2fc16128 R14: 00007f2f2fc16090 R15: 00007ffda0678108 [ 464.945750][T20605] [ 465.176598][T20616] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 465.251262][T20620] geneve2: entered promiscuous mode [ 465.342056][T20623] syzkaller0: entered promiscuous mode [ 465.347647][T20623] syzkaller0: entered allmulticast mode [ 466.480172][ T30] audit: type=1804 audit(1769914948.625:10): pid=20689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4102" name="/newroot/166/cgroup.controllers" dev="tmpfs" ino=867 res=1 errno=0 [ 466.554590][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 466.572582][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 466.576575][ T30] audit: type=1800 audit(1769914948.625:11): pid=20689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4102" name="cgroup.controllers" dev="tmpfs" ino=867 res=0 errno=0 [ 466.603005][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 466.639997][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 466.661717][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 466.810867][T20701] __nla_validate_parse: 16 callbacks suppressed [ 466.810885][T20701] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4107'. [ 466.812112][T20690] vxcan1 speed is unknown, defaulting to 1000 [ 466.913333][ T51] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.057406][ T51] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.188207][ T51] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.225359][T20726] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4112'. [ 467.338943][ T51] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.450845][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4114'. [ 467.936559][ T51] tipc: Resetting bearer [ 467.972092][T20762] validate_nla: 1 callbacks suppressed [ 467.972113][T20762] netlink: 'syz.1.4123': attribute type 10 has an invalid length. [ 467.990318][T20762] netlink: 'syz.1.4123': attribute type 2 has an invalid length. [ 468.339727][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 468.347813][ C0] lec:lec_tx_timeout: lec0 [ 468.352937][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 468.700393][ T5833] Bluetooth: hci7: command tx timeout [ 468.792369][ T51] tipc: Disabling bearer [ 469.207706][ T51] bond1 (unregistering): Released all slaves [ 469.323425][ T51] bond0 (unregistering): (slave veth3): Releasing active interface [ 469.335308][ T51] bond0 (unregistering): Released all slaves [ 469.483020][ T5902] infiniband syz1: ib_query_port failed (-19) [ 469.535752][T20783] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 469.659101][ T51] tipc: Left network mode [ 470.303748][T20830] bond6 (unregistering): Released all slaves [ 470.387634][T20690] chnl_net:caif_netlink_parms(): no params data found [ 470.534890][T20840] netlink: 'syz.4.4139': attribute type 2 has an invalid length. [ 470.660116][T20842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'. [ 470.677727][T20842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4140'. [ 470.697897][T20850] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4141'. [ 470.701999][T20690] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.722811][T20690] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.727158][T20842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4140'. [ 470.731578][T20690] bridge_slave_0: entered allmulticast mode [ 470.748785][T20690] bridge_slave_0: entered promiscuous mode [ 470.771181][ T5826] Bluetooth: hci7: command tx timeout [ 470.859478][T20853] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 470.916041][T20690] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.938435][T20690] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.970029][T20690] bridge_slave_1: entered allmulticast mode [ 471.000788][T20690] bridge_slave_1: entered promiscuous mode [ 471.032039][T20823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 471.055757][T20862] 8021q: VLANs not supported on ip6_vti0 [ 471.111075][T20862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4144'. [ 471.139897][T20862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4144'. [ 471.216286][T20862] syz_tun: entered promiscuous mode [ 471.224752][T20862] erspan0: entered promiscuous mode [ 471.282392][T20872] netlink: 'syz.4.4148': attribute type 1 has an invalid length. [ 471.288290][T20873] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 471.321136][T20690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.372928][T20878] sctp: [Deprecated]: syz.1.4149 (pid 20878) Use of int in maxseg socket option. [ 471.372928][T20878] Use struct sctp_assoc_value instead [ 471.420677][T20690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.767426][T20690] team0: Port device team_slave_0 added [ 471.804233][T20891] veth0: entered promiscuous mode [ 471.813165][T20898] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4154'. [ 471.903981][T20690] team0: Port device team_slave_1 added [ 471.963345][T20891] veth0: left promiscuous mode [ 472.025264][T20910] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 472.053251][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 472.099809][T20910] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 472.128859][T20910] gretap0: entered promiscuous mode [ 472.149401][T20910] gretap0: entered allmulticast mode [ 472.188394][T20926] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 472.205038][T20912] tipc: Enabling not permitted [ 472.229499][T20912] tipc: Enabling of bearer rejected, failed to enable media [ 472.270965][T20690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.290498][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 472.326433][T20690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.443997][T20690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.494261][T20690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.510044][T20690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.538826][T20690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.564627][ T51] hsr_slave_0: left promiscuous mode [ 472.579951][ T51] hsr_slave_1: left promiscuous mode [ 472.672335][ T51] pim6reg (unregistering): left allmulticast mode [ 472.854576][ T5833] Bluetooth: hci7: command tx timeout [ 473.359683][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 473.367825][ C0] lec:lec_tx_timeout: lec0 [ 473.373029][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 473.564508][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.573857][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.582360][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.590390][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.598176][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.606305][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.616406][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.624394][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.632327][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.640416][T20933] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 473.777762][T20690] hsr_slave_0: entered promiscuous mode [ 473.791070][T20690] hsr_slave_1: entered promiscuous mode [ 473.807131][T20690] debugfs: 'hsr0' already exists in 'hsr' [ 473.819139][T20690] Cannot create hsr debugfs directory [ 473.868006][T20949] veth0: entered promiscuous mode [ 473.887806][T20947] veth0: left promiscuous mode [ 474.208688][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4169'. [ 474.304249][T20976] bond6: (slave gretap1): making interface the new active one [ 474.321579][T20976] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 474.356226][ T51] IPVS: stop unused estimator thread 0... [ 474.778588][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4180'. [ 474.816766][T21009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4180'. [ 474.929760][ T5833] Bluetooth: hci7: command tx timeout [ 475.156757][T21036] syzkaller0: entered promiscuous mode [ 475.167986][T21036] syzkaller0: entered allmulticast mode [ 477.031653][T21046] lo: Caught tx_queue_len zero misconfig [ 477.170318][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 477.367568][T21068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'. [ 477.387581][T21068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'. [ 477.602111][T21084] syzkaller0: entered promiscuous mode [ 477.611108][T21084] syzkaller0: entered allmulticast mode [ 477.684443][T21016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.711568][T20690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.761303][T20690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.883435][T20690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.913768][T21093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4193'. [ 477.920347][T20690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.973987][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4194'. [ 478.249067][T21128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'. [ 478.328181][T21128] syzkaller0: entered promiscuous mode [ 478.345143][T21128] syzkaller0: entered allmulticast mode [ 478.366082][T21128] TC_ACT_REPEAT abuse ? [ 478.379741][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 478.387809][ C0] lec:lec_tx_timeout: lec0 [ 478.392522][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 478.448160][T20690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.489391][T20690] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.522060][T13016] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.529347][T13016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.673881][T13016] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.681102][T13016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.812547][T21142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4201'. [ 478.942626][T21149] pim6reg: entered allmulticast mode [ 479.161152][T21164] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 479.211088][T21164] bridge0: port 3(syz_tun) entered disabled state [ 479.218318][T21164] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.412631][T20690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.577390][T21191] syzkaller0: entered promiscuous mode [ 479.584315][T21191] syzkaller0: entered allmulticast mode [ 479.624173][T21195] validate_nla: 43 callbacks suppressed [ 479.624192][T21195] netlink: 'syz.4.4214': attribute type 21 has an invalid length. [ 479.657741][T21195] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4214'. [ 479.747664][T21198] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4215'. [ 479.766142][T21198] xt_policy: neither incoming nor outgoing policy selected [ 479.862178][T20690] veth0_vlan: entered promiscuous mode [ 479.874244][T20690] veth1_vlan: entered promiscuous mode [ 479.921945][T20690] veth0_macvtap: entered promiscuous mode [ 479.933596][T20690] veth1_macvtap: entered promiscuous mode [ 479.958857][T20690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.997210][T20690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.060723][ T7103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.079717][ T7103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.106220][ T7103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.139543][ T7103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.169980][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4218'. [ 480.199548][T21213] netlink: 'syz.1.4220': attribute type 11 has an invalid length. [ 480.230032][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4221'. [ 480.258637][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4221'. [ 480.260418][ T7096] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.279459][ T7096] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.315424][ T7096] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.333366][ T7096] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.345177][T21219] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 480.377985][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4220'. [ 480.459355][ T7096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.482874][ T7096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.526258][ T7096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.535462][ T7096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.636068][T21236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.643399][T21236] IPv6: NLM_F_CREATE should be set when creating new route [ 480.650689][T21236] IPv6: NLM_F_CREATE should be set when creating new route [ 480.666774][T21236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.242543][T21276] netlink: 'syz.6.4234': attribute type 64 has an invalid length. [ 481.259784][T21276] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4234'. [ 481.391651][T21282] tipc: Enabled bearer , priority 0 [ 481.444256][T21282] tipc: Resetting bearer [ 481.451396][T21282] bond0: Device is already in use. [ 481.483479][T21281] tipc: Disabling bearer [ 481.491834][T21291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4242'. [ 481.518414][T21290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4241'. [ 481.529134][T21290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4241'. [ 481.693852][T21290] netlink: 'syz.1.4241': attribute type 10 has an invalid length. [ 481.828969][T21290] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 482.135690][T21322] x_tables: unsorted underflow at hook 1 [ 482.292123][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 482.304159][T21327] netlink: 'syz.4.4252': attribute type 1 has an invalid length. [ 482.860914][T21364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.987177][T21373] geneve2: entered promiscuous mode [ 483.055914][T21380] netlink: 'syz.5.4274': attribute type 35 has an invalid length. [ 483.073490][T21375] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 483.308176][T21401] netlink: 'syz.5.4280': attribute type 1 has an invalid length. [ 483.399648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 483.407807][ C0] lec:lec_tx_timeout: lec0 [ 483.413333][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 483.546784][T21409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.689540][T21423] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 483.735429][T21425] netlink: 'syz.4.4289': attribute type 8 has an invalid length. [ 483.968576][T21433] syzkaller0: entered promiscuous mode [ 483.975256][T21433] syzkaller0: entered allmulticast mode [ 484.048332][T21443] netlink: 'syz.6.4295': attribute type 1 has an invalid length. [ 484.149919][T21448] netlink: 'syz.1.4296': attribute type 30 has an invalid length. [ 484.236442][T21448] bond7: option arp_missed_max: invalid value (0) [ 484.260712][T21448] bond7: option arp_missed_max: allowed values 1 - 255 [ 484.290899][T21448] bond7 (unregistering): Released all slaves [ 484.419514][T21455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.707304][T21477] syzkaller0: entered promiscuous mode [ 484.713979][T21477] syzkaller0: entered allmulticast mode [ 484.936383][T21495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.954901][T21495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.007886][T21495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.057944][T21495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.379877][T21530] 8021q: adding VLAN 0 to HW filter on device bond7 [ 487.890987][T21501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.100378][T21564] validate_nla: 5 callbacks suppressed [ 488.100396][T21564] netlink: 'syz.6.4318': attribute type 53 has an invalid length. [ 488.105181][T21566] __nla_validate_parse: 37 callbacks suppressed [ 488.105198][T21566] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4319'. [ 488.139070][T21566] syzkaller1: entered promiscuous mode [ 488.146786][T21566] syzkaller1: entered allmulticast mode [ 488.155770][T21566] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 488.218397][T21569] syzkaller1: left promiscuous mode [ 488.223725][T21569] syzkaller1: left allmulticast mode [ 488.245861][ T24] IPVS: starting estimator thread 0... [ 488.343874][T21567] IPVS: using max 35 ests per chain, 84000 per kthread [ 488.414581][T21579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4323'. [ 488.429625][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 488.437696][ C0] lec:lec_tx_timeout: lec0 [ 488.442536][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 488.513758][T21581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4324'. [ 488.539168][T21581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4324'. [ 488.629444][T21590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4327'. [ 488.638580][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4328'. [ 488.641591][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4328'. [ 488.669314][T21590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4327'. [ 488.697736][T21590] netlink: 'syz.3.4327': attribute type 12 has an invalid length. [ 488.730549][T21590] netlink: 'syz.3.4327': attribute type 11 has an invalid length. [ 488.778540][T21597] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4329'. [ 488.852204][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4330'. [ 489.143780][T21613] netlink: 'syz.1.4334': attribute type 16 has an invalid length. [ 489.337195][T21635] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 489.351108][T21635] bond5 (unregistering): Released all slaves [ 489.423522][T21644] netlink: 'syz.5.4342': attribute type 4 has an invalid length. [ 489.593638][T21648] netlink: 'syz.1.4343': attribute type 3 has an invalid length. [ 489.604104][T21651] netlink: 'syz.5.4344': attribute type 29 has an invalid length. [ 489.604816][T21649] netlink: 'syz.1.4343': attribute type 3 has an invalid length. [ 489.626949][T21651] netlink: 'syz.5.4344': attribute type 29 has an invalid length. [ 490.139484][T21696] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 490.427187][T21712] block nbd1: NBD_DISCONNECT [ 490.431962][T21712] block nbd1: Send disconnect failed -32 [ 490.438043][T21712] block nbd1: shutting down sockets [ 490.564000][T21719] bond5 (unregistering): Released all slaves [ 491.009837][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 491.016051][ T5833] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 491.395511][T21776] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 491.614760][T21789] openvswitch: netlink: IP tunnel dst address not specified [ 491.777276][T21802] syzkaller1: entered promiscuous mode [ 491.782996][T21802] syzkaller1: entered allmulticast mode [ 491.906802][T21811] netlink: 'syz.1.4391': attribute type 1 has an invalid length. [ 492.128344][T21823] batman_adv: batadv0: Adding interface: netdevsim0 [ 492.146188][T21823] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.184135][T21823] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 492.220285][T21827] C: renamed from lo (while UP) [ 492.231300][T21827] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 492.270143][T21823] team0: Device ip6gre1 is of different type [ 492.425553][T21838] hsr_slave_1 (unregistering): left promiscuous mode [ 492.471278][T21846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.502966][T21853] veth5: entered promiscuous mode [ 492.522712][T21853] bond5: (slave veth5): Enslaving as an active interface with a down link [ 492.613827][T21848] bond5: (slave ip6gretap1): making interface the new active one [ 492.626779][T21848] ip6gretap1: entered promiscuous mode [ 492.633284][T21848] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 492.693249][T21846] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 492.842323][T21872] xt_hashlimit: size too large, truncated to 1048576 [ 492.870428][T21874] openvswitch: netlink: EtherType 50a is less than min 600 [ 492.906255][T21878] openvswitch: netlink: EtherType 50a is less than min 600 [ 492.984292][T21880] syzkaller0: entered promiscuous mode [ 492.993433][T21880] syzkaller0: entered allmulticast mode [ 493.154306][T21897] __nla_validate_parse: 21 callbacks suppressed [ 493.154325][T21897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4417'. [ 493.336492][T21911] tipc: Enabling of bearer rejected, failed to enable media [ 493.391802][T21914] tipc: Failed to obtain node identity [ 493.406582][T21914] tipc: Enabling of bearer rejected, failed to enable media [ 493.525114][T21924] validate_nla: 7 callbacks suppressed [ 493.525135][T21924] netlink: 'syz.6.4425': attribute type 2 has an invalid length. [ 493.613129][T21929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.781668][T21939] netlink: 'syz.5.4430': attribute type 4 has an invalid length. [ 493.845458][T21943] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4432'. [ 493.906525][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4433'. [ 493.916200][T21949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4434'. [ 493.934646][T21949] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4434'. [ 493.946206][T21949] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4434'. [ 494.289788][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5850 ms [ 494.297868][ C0] lec:lec_tx_timeout: lec0 [ 494.303471][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 494.315680][T21965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4440'. [ 494.327785][T21964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4440'. [ 494.345398][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'. [ 494.373131][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'. [ 495.422777][T22014] syzkaller0: entered promiscuous mode [ 495.454526][T22014] syzkaller0: entered allmulticast mode [ 495.472122][T22014] TC_ACT_REPEAT abuse ? [ 495.485993][T22019] tipc: Enabled bearer , priority 10 [ 495.603962][T22027] atomic_op ffff88807e580198 conn xmit_atomic 0000000000000000 [ 496.014040][T22061] syzkaller0: entered promiscuous mode [ 496.019855][T22061] syzkaller0: entered allmulticast mode [ 496.599877][ T5902] tipc: Node number set to 2248494962 [ 498.647962][T22032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.973006][T22088] nft_compat: unsupported protocol 1 [ 498.984977][T22092] netlink: 'syz.3.4480': attribute type 1 has an invalid length. [ 499.036161][T22097] netlink: 'syz.3.4480': attribute type 1 has an invalid length. [ 499.105488][T22101] __nla_validate_parse: 12 callbacks suppressed [ 499.105507][T22101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4482'. [ 499.215502][T22103] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.4483'. [ 499.254267][T22109] bridge5: entered promiscuous mode [ 499.278039][T22109] bridge5: entered allmulticast mode [ 499.309690][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 499.317825][ C0] lec:lec_tx_timeout: lec0 [ 499.322919][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 499.345631][T22117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4489'. [ 499.364392][T22109] team0: Port device bridge5 added [ 499.407150][T22123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.430762][T22109] bridge0: port 1(team0) entered blocking state [ 499.437123][T22109] bridge0: port 1(team0) entered disabled state [ 499.448278][T22109] team0: entered allmulticast mode [ 499.453765][T22109] team_slave_0: entered allmulticast mode [ 499.464776][T22109] team_slave_1: entered allmulticast mode [ 499.471804][T22109] bond0: entered allmulticast mode [ 499.477246][T22109] bond_slave_0: entered allmulticast mode [ 499.502732][T22109] bond_slave_1: entered allmulticast mode [ 499.508571][T22109] syz_tun: entered allmulticast mode [ 499.517858][T22109] team0: entered promiscuous mode [ 499.528311][T22109] team_slave_0: entered promiscuous mode [ 499.538919][T22133] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 499.541079][T22134] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 499.561440][T22109] team_slave_1: entered promiscuous mode [ 499.574144][T22109] bond0: entered promiscuous mode [ 499.583004][T22109] bond_slave_0: entered promiscuous mode [ 499.585468][T22132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.591385][T22109] bond_slave_1: entered promiscuous mode [ 499.605308][T22109] syz_tun: entered promiscuous mode [ 499.615803][T22109] bridge0: port 1(team0) entered blocking state [ 499.622295][T22109] bridge0: port 1(team0) entered forwarding state [ 499.736771][T22136] netlink: 'syz.5.4493': attribute type 11 has an invalid length. [ 499.776498][T22136] netlink: 199788 bytes leftover after parsing attributes in process `syz.5.4493'. [ 500.028065][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4497'. [ 500.154224][T22162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4498'. [ 500.311259][T22178] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4502'. [ 500.334449][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4502'. [ 500.362903][T22178] netlink: 'syz.5.4502': attribute type 11 has an invalid length. [ 500.418653][T22182] netlink: 'syz.6.4505': attribute type 10 has an invalid length. [ 500.531443][T22191] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 500.628401][T22195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4511'. [ 500.678241][T22197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4512'. [ 500.813738][T22207] netlink: 'syz.5.4515': attribute type 32 has an invalid length. [ 500.858187][T22207] bond2: option coupled_control: invalid value (52) [ 500.868518][T22207] bond2 (unregistering): Released all slaves [ 501.317035][T22234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.864155][T22283] syzkaller0: entered promiscuous mode [ 501.870019][T22283] syzkaller0: entered allmulticast mode [ 502.102118][T22298] netlink: 'syz.3.4544': attribute type 29 has an invalid length. [ 502.110873][T22298] netlink: 'syz.3.4544': attribute type 29 has an invalid length. [ 502.216519][T22307] netlink: 'syz.3.4548': attribute type 1 has an invalid length. [ 502.438172][ T24] IPVS: starting estimator thread 0... [ 502.552578][T22338] IPVS: using max 35 ests per chain, 84000 per kthread [ 502.601926][T22343] netlink: 'syz.5.4557': attribute type 9 has an invalid length. [ 502.638734][T22351] sctp: [Deprecated]: syz.1.4556 (pid 22351) Use of int in max_burst socket option. [ 502.638734][T22351] Use struct sctp_assoc_value instead [ 502.830690][T22369] netlink: 'syz.4.4563': attribute type 1 has an invalid length. [ 502.868278][T22371] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 503.024295][ T5900] IPVS: starting estimator thread 0... [ 503.033118][T22380] vxcan1 speed is unknown, defaulting to 1000 [ 503.120058][T22387] IPVS: using max 34 ests per chain, 81600 per kthread [ 503.406014][T22425] netlink: 'syz.4.4581': attribute type 21 has an invalid length. [ 503.526900][T22427] team0 (unregistering): Port device team_slave_0 removed [ 503.552213][T22427] team0 (unregistering): Port device team_slave_1 removed [ 503.578475][T22427] team0 (unregistering): Port device batadv0 removed [ 503.670525][T22437] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 503.963941][ T7096] ip6gretap1: left promiscuous mode [ 504.329648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 504.337751][ C0] lec:lec_tx_timeout: lec0 [ 504.347119][T22485] validate_nla: 2 callbacks suppressed [ 504.347136][T22485] netlink: 'syz.6.4597': attribute type 2 has an invalid length. [ 504.366376][T22485] __nla_validate_parse: 156 callbacks suppressed [ 504.366393][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4597'. [ 504.403073][T22490] syzkaller0: entered promiscuous mode [ 504.408742][T22490] syzkaller0: entered allmulticast mode [ 504.642539][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4601'. [ 504.731240][T22516] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4603'. [ 504.760462][T22516] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4603'. [ 504.810186][T22523] netlink: 'syz.5.4604': attribute type 1 has an invalid length. [ 504.943959][T22528] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4606'. [ 504.948589][T22534] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 504.958702][T22528] nbd: socks must be embedded in a SOCK_ITEM attr [ 504.978178][T22532] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4607'. [ 505.027688][T22532] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4607'. [ 505.059823][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4606'. [ 505.727736][T22578] netlink: 'syz.5.4618': attribute type 33 has an invalid length. [ 505.759899][T22578] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4618'. [ 505.824450][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 505.872852][T22543] vlan0 (unregistering): left allmulticast mode [ 505.879155][T22543] veth0_vlan (unregistering): left allmulticast mode [ 505.886165][T22543] vlan0 (unregistering): left promiscuous mode [ 506.326511][T22576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4619'. [ 507.317039][T22607] bridge0: left allmulticast mode [ 507.454055][T22621] netlink: 'syz.4.4626': attribute type 1 has an invalid length. [ 507.492900][T22621] bond6: entered promiscuous mode [ 507.498662][T22625] netlink: 'syz.6.4627': attribute type 10 has an invalid length. [ 507.510534][T22621] 8021q: adding VLAN 0 to HW filter on device bond6 [ 507.558439][T22621] bond6: (slave bridge5): making interface the new active one [ 507.567521][T22621] bridge5: entered promiscuous mode [ 507.574867][T22621] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 507.619037][T22630] netlink: 'syz.5.4629': attribute type 29 has an invalid length. [ 507.632318][T22630] netlink: 'syz.5.4629': attribute type 29 has an invalid length. [ 507.715349][T22636] ip6gre0: Caught tx_queue_len zero misconfig [ 507.752389][T22640] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 507.955331][T22648] netlink: 'syz.5.4637': attribute type 5 has an invalid length. [ 508.017177][T22654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.155107][T22660] syzkaller0: entered promiscuous mode [ 508.443433][T22678] syzkaller0: entered promiscuous mode [ 508.449149][T22678] syzkaller0: entered allmulticast mode [ 508.693711][T22697] netlink: 'syz.6.4653': attribute type 39 has an invalid length. [ 508.732734][T22697] syz_tun (unregistering): left allmulticast mode [ 508.742631][T22697] syz_tun (unregistering): left promiscuous mode [ 508.753093][T22697] bridge0: port 3(syz_tun) entered disabled state [ 509.066136][ T30] audit: type=1107 audit(1769914991.215:12): pid=22717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 509.423088][T22739] __nla_validate_parse: 14 callbacks suppressed [ 509.423113][T22739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4667'. [ 509.593011][T22746] netlink: 'syz.4.4669': attribute type 1 has an invalid length. [ 509.730220][T22753] syzkaller0: entered promiscuous mode [ 509.732435][T22755] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4671'. [ 509.735952][T22753] syzkaller0: entered allmulticast mode [ 509.745979][T22757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4671'. [ 509.921346][T22764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4674'. [ 510.030842][T22768] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4676'. [ 510.240263][T22781] netlink: 'syz.4.4680': attribute type 1 has an invalid length. [ 510.248042][T22781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4680'. [ 510.267526][T22781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4680'. [ 510.297743][T22788] tap0: tun_chr_ioctl cmd 2148553947 [ 510.305344][T22790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4683'. [ 510.583007][T22808] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4689'. [ 510.807786][T22820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4695'. [ 510.822535][T22820] syzkaller0: entered promiscuous mode [ 510.829684][T22820] syzkaller0: entered allmulticast mode [ 510.925916][T22829] veth1_macvtap: left promiscuous mode [ 510.934302][ T31] INFO: task syz.0.3137:17274 blocked for more than 143 seconds. [ 510.950769][ T31] Not tainted syzkaller #0 [ 510.955794][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.991528][ T31] task:syz.0.3137 state:D stack:26648 pid:17274 tgid:17273 ppid:16509 task_flags:0x400140 flags:0x00080002 [ 511.006107][ T31] Call Trace: [ 511.009430][ T31] [ 511.013938][ T31] __schedule+0x14ea/0x5050 [ 511.018507][ T31] ? preempt_schedule_notrace+0x57/0x90 [ 511.024528][ T31] ? __pfx___schedule+0x10/0x10 [ 511.029424][ T31] ? schedule+0x90/0x360 [ 511.038715][ T31] schedule+0x164/0x360 [ 511.043543][ T31] schedule_preempt_disabled+0x13/0x30 [ 511.049104][ T31] __mutex_lock+0x7fe/0x1300 [ 511.056682][ T31] ? __mutex_lock+0x5ac/0x1300 [ 511.061860][ T31] ? nfsd_nl_listener_set_doit+0x141/0x16c0 [ 511.067802][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 511.076448][ T31] ? __asan_memset+0x22/0x50 [ 511.081481][ T31] ? do_syscall_64+0xe2/0xf80 [ 511.086527][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.096246][ T31] nfsd_nl_listener_set_doit+0x141/0x16c0 [ 511.102708][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 511.108766][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 511.115528][ T31] ? rcu_is_watching+0x15/0xb0 [ 511.120892][ T31] ? __nla_parse+0x40/0x60 [ 511.126681][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 511.134491][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 511.140989][ T31] ? __asan_memcpy+0x40/0x70 [ 511.145736][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 511.152430][ T31] ? bpf_lsm_capable+0x9/0x20 [ 511.157263][ T31] ? security_capable+0x7e/0x2c0 [ 511.163278][ T31] genl_rcv_msg+0x61c/0x7a0 [ 511.167930][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.174596][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 511.189971][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 511.202098][ T31] netlink_rcv_skb+0x232/0x4b0 [ 511.213879][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.219900][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.225363][ T31] ? genl_rcv+0x19/0x40 [ 511.231368][ T31] ? down_read+0x272/0x2e0 [ 511.235925][ T31] ? genl_rcv+0xd/0x40 [ 511.240585][ T31] genl_rcv+0x28/0x40 [ 511.256804][ T31] netlink_unicast+0x80f/0x9b0 [ 511.261877][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 511.261910][ C0] lec:lec_tx_timeout: lec0 [ 511.279208][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 511.285214][ T31] ? __alloc_skb+0x193/0x390 [ 511.289962][ T31] ? netlink_sendmsg+0x650/0xb40 [ 511.295008][ T31] ? skb_put+0x11b/0x210 [ 511.304788][ T31] netlink_sendmsg+0x813/0xb40 [ 511.310036][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.315389][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 511.320461][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.325772][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.331244][ T31] ____sys_sendmsg+0xa68/0xad0 [ 511.336033][ T31] ? __might_fault+0xaf/0x130 [ 511.340865][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.346272][ T31] ? import_iovec+0x73/0xa0 [ 511.350913][ T31] ___sys_sendmsg+0x2a5/0x360 [ 511.355613][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 511.360759][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.365975][ T31] ? futex_wait+0x29a/0x380 [ 511.370723][ T31] ? __fget_files+0x2a/0x420 [ 511.375328][ T31] ? __fget_files+0x3a0/0x420 [ 511.381002][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 511.385984][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.391671][ T31] ? rcu_is_watching+0x15/0xb0 [ 511.396491][ T31] do_syscall_64+0xe2/0xf80 [ 511.401659][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.407744][ T31] ? trace_irq_disable+0x37/0x100 [ 511.413703][ T31] ? clear_bhb_loop+0x60/0xb0 [ 511.418407][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.424431][ T31] RIP: 0033:0x7f18e9f9aeb9 [ 511.428937][ T31] RSP: 002b:00007f18eaf05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.437574][ T31] RAX: ffffffffffffffda RBX: 00007f18ea215fa0 RCX: 00007f18e9f9aeb9 [ 511.445689][ T31] RDX: 0000000024000014 RSI: 0000200000000100 RDI: 0000000000000005 [ 511.453785][ T31] RBP: 00007f18ea008c1f R08: 0000000000000000 R09: 0000000000000000 [ 511.462017][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.471634][ T31] R13: 00007f18ea216038 R14: 00007f18ea215fa0 R15: 00007ffeb4945428 [ 511.479733][ T31] [ 511.482835][ T31] [ 511.482835][ T31] Showing all locks held in the system: [ 511.502922][ T31] 1 lock held by khungtaskd/31: [ 511.507840][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 511.518801][ T31] 2 locks held by getty/5586: [ 511.523702][ T31] #0: ffff8880306990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 511.533569][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 511.543804][ T31] 2 locks held by kworker/u9:3/5830: [ 511.549087][ T31] #0: ffff8880252e9148 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 511.560393][ T31] #1: ffffc9000457fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 511.573809][ T31] 3 locks held by kworker/u8:10/7103: [ 511.579214][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 511.591181][ T31] #1: ffffc9000e117bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 511.603526][ T31] #2: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 511.613684][ T31] 2 locks held by syz.2.1188/10328: [ 511.619006][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.627293][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 511.637572][ T31] 2 locks held by syz.0.3137/17274: [ 511.642861][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.654930][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 511.665227][ T31] [ 511.667572][ T31] ============================================= [ 511.667572][ T31] [ 511.680740][ T31] NMI backtrace for cpu 1 [ 511.680761][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 511.680781][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 511.680791][ T31] Call Trace: [ 511.680798][ T31] [ 511.680807][ T31] dump_stack_lvl+0xe8/0x150 [ 511.680834][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 511.680857][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 511.680884][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 511.680908][ T31] sys_info+0x135/0x170 [ 511.680926][ T31] watchdog+0xf90/0xfe0 [ 511.680949][ T31] ? watchdog+0x209/0xfe0 [ 511.681000][ T31] kthread+0x726/0x8b0 [ 511.681023][ T31] ? __pfx_watchdog+0x10/0x10 [ 511.681040][ T31] ? __pfx_kthread+0x10/0x10 [ 511.681062][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.681084][ T31] ? __pfx_kthread+0x10/0x10 [ 511.681108][ T31] ret_from_fork+0x51b/0xa40 [ 511.681135][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 511.681154][ T31] ? __switch_to+0xc82/0x1410 [ 511.681181][ T31] ? __pfx_kthread+0x10/0x10 [ 511.681201][ T31] ret_from_fork_asm+0x1a/0x30 [ 511.681235][ T31] [ 511.681241][ T31] Sending NMI from CPU 1 to CPUs 0: [ 511.806357][ C0] NMI backtrace for cpu 0 [ 511.806376][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 511.806392][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 511.806401][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 511.806446][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 511.806459][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 511.806473][ C0] RAX: 0000000000203e59 RBX: ffffffff8199570d RCX: 0000000080000001 [ 511.806484][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc9137 RDI: ffffffff8c073980 [ 511.806498][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 511.806509][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1a70 [ 511.806520][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 511.806530][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 511.806542][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.806552][ C0] CR2: 000000110c2c9e17 CR3: 000000007ec8e000 CR4: 00000000003526f0 [ 511.806565][ C0] Call Trace: [ 511.806572][ C0] [ 511.806579][ C0] default_idle+0x9/0x20 [ 511.806595][ C0] default_idle_call+0x72/0xb0 [ 511.806612][ C0] do_idle+0x1bd/0x500 [ 511.806630][ C0] ? __pfx_do_idle+0x10/0x10 [ 511.806651][ C0] ? do_idle+0x4d0/0x500 [ 511.806665][ C0] cpu_startup_entry+0x43/0x60 [ 511.806678][ C0] rest_init+0x2de/0x300 [ 511.806695][ C0] start_kernel+0x380/0x3d0 [ 511.806719][ C0] x86_64_start_reservations+0x24/0x30 [ 511.806734][ C0] x86_64_start_kernel+0x143/0x1c0 [ 511.806749][ C0] common_startup_64+0x13e/0x147 [ 511.806774][ C0] [ 511.993181][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 512.000051][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 512.009168][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 512.019215][ T31] Call Trace: [ 512.022491][ T31] [ 512.025413][ T31] vpanic+0x1e0/0x670 [ 512.029424][ T31] panic+0xc5/0xd0 [ 512.033160][ T31] ? __pfx_panic+0x10/0x10 [ 512.037569][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 512.042952][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 512.049101][ T31] watchdog+0xfda/0xfe0 [ 512.053256][ T31] ? watchdog+0x209/0xfe0 [ 512.057750][ T31] kthread+0x726/0x8b0 [ 512.061812][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.066518][ T31] ? __pfx_kthread+0x10/0x10 [ 512.071181][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.076374][ T31] ? __pfx_kthread+0x10/0x10 [ 512.080952][ T31] ret_from_fork+0x51b/0xa40 [ 512.085540][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 512.090669][ T31] ? __switch_to+0xc82/0x1410 [ 512.095336][ T31] ? __pfx_kthread+0x10/0x10 [ 512.099914][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.104674][ T31] [ 512.108161][ T31] Kernel Offset: disabled [ 512.112481][ T31] Rebooting in 86400 seconds..