last executing test programs: 3.301354682s ago: executing program 0 (id=4155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc093235457f25725b81019e5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bbfb5ef8312a53d79fe6e2e7aea4b93b8d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x8b) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r7 = socket(0x2d, 0x2, 0x0) (rerun: 32) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000090280500140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r8], 0x44}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, 0x0) (async) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) r11 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) bind$rds(r11, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x1, 0x207, 0x0, 0x0, 0x1, 0x7, 0x8000}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xe, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0x6f}, {0x8}}]}, 0x38}}, 0x4000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_netprio_ifpriomap(r13, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r14, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) 3.064731589s ago: executing program 0 (id=4161): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.293237012s ago: executing program 0 (id=4175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x10, 0x80003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="01a7c00488fa73a5840000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x840) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0xc0, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3d}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xa0}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8800}, 0x80) 1.880524991s ago: executing program 4 (id=4181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, 0x0) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f00000002c0)=0xffff, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x1400}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x5a1, 0x7fff}}]}]}]}, 0x4c}}, 0x24040800) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}]}}}]}, 0x44}}, 0x0) 1.807339531s ago: executing program 0 (id=4184): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) 1.641898s ago: executing program 3 (id=4187): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", '\x00', "19a4216dfdbf6602"}, 0x28) recvfrom(r3, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18, 0x24000841}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000480), 0x10) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x35, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000200000079102800000000001e509b0000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x1dd}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) 1.587975868s ago: executing program 4 (id=4188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000600000000000d0077c049af07000b2e0a0a0500000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x40000) 1.501409089s ago: executing program 4 (id=4189): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xffff, @rand_addr=0x64010101}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) getpeername$llc(r0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x20, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x516, 0x4) 1.342579737s ago: executing program 1 (id=4194): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) 1.269898333s ago: executing program 1 (id=4195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e6", 0x3}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d659209245589", 0x3e}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x9}, 0x8) 1.169247886s ago: executing program 1 (id=4196): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x65e}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x624}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8800) 1.150643564s ago: executing program 1 (id=4197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', r3, 0x29, 0x9, 0xff, 0x3, 0x1, @private0, @private1, 0x7800, 0x8, 0x80000000, 0x7}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}]}}]}, 0x38}}, 0x0) 1.102474909s ago: executing program 1 (id=4198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @empty, 0x106}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) sendmmsg$sock(r1, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8800) 1.004933529s ago: executing program 2 (id=4200): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xf, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0xb, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @loopback}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8044}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000004100000095000000000000003d789ade838a5adf0c21f97a9d6f55528c474cb385573d9fd2aff88c497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f048bff4c9d61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86c8964c32f955d410083f7567735a2ca010000871611faba526a3501f1753258c767236f2b3addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c35621850000f6ff0000000000000000000000000000000000317dc59df6de3bfd0d7f785ff1e9606c84574e4b80937ae83516d8201e8c4c3fda81599b7c4bf635910dcb747508404034d9478ff88e1cbfe43f46a1a5d9239e393f2bb309160118a787cb0c64b606ffe744f79c1bba0ca081302b0f04e377f1b6a3646cbe934ef6ad95d4f160a9dcc9550f9777ca5d2daa2b239547f27a221d2eefb2c40ffe95c97ce091b7c2a8c0471b9124af726edb5a3b9aba486b93cb5ea7fff68f53401f8e826d5afbb98ed8b015dc328a507d15260a18a79110e68f1d43dad73121b60ec43e98e3f522b61a4f8fc0ba0257e8fd5ac454e1127e9c76395b5a51c2c75d8c1453771915705bd0925cf573b0a9c01d8e552fe288d3c0433cbe801747f335448deb0e7164f6df7d3554bc66ff51352f912d76519aa6290fe7e72402000000e85552c5c049dde27c5294dc77c8a4490492a6deb8108c14ac9a261e2d990f65ea36f217783759c06e37c3a2f3b0b3c38937"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000013c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) 911.10954ms ago: executing program 0 (id=4201): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1a, 0x0, 0x20000000) socket$netlink(0x10, 0x3, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000080)={0x100, 0x1, 0x7, 0x0, 0xf1, 0x6, 0x0, &(0x7f0000000100)=[{0xf, 0xfe, 0x2de}, {0x12, 0x101, 0x2}, {0xd, 0x101, 0x2}, {0x0, 0x1ff, 0x1a}, {0x18, 0x0, 0x1}, {0xe, 0x101, 0x5}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}, [@RTA_MULTIPATH={0x5, 0x9, {0xc15}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_ENCAP_TYPE, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @private=0xa010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) 888.535345ms ago: executing program 2 (id=4202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x2000000000000021, 0x2, 0x2) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x21}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0xf) (async) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x40) 693.368385ms ago: executing program 3 (id=4203): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32=r0, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 662.505031ms ago: executing program 2 (id=4204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000680)=0x8, 0x12) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="26eb6d12cb78af20c43504e686a3130f2b", 0x11}], 0x1) ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f0000000140)={0x6, 0x40, 0x8, 0x8, 0x3}) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00']) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) getsockopt(r6, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) (async) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000180)=0xd74b, 0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xb6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket(0x18, 0x800, 0x6712) 603.809128ms ago: executing program 4 (id=4205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={0x20, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) getsockname(r1, &(0x7f0000000340)=@xdp, &(0x7f0000000080)=0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]}}]}, 0x45c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x144, r7, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x9c, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5b8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4782}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3925}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x605ef41f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x144}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) recvfrom(r1, &(0x7f0000000140)=""/130, 0x82, 0x0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x3, 0x3, 0x4, 0x1}}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 541.342502ms ago: executing program 3 (id=4206): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x800) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x1b, r1, 0x1, 0x1, 0x6, @remote}, 0x14) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/72, 0x48}], 0x1, &(0x7f00000001c0)=""/30, 0x1e}, 0x1000}], 0x1, 0x21, &(0x7f0000000240)={0x77359400}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='memory.current\x00', 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000340)="c5d8e73abec38672900948e8c6ef38249b9f0bbdc88878ae93c5d67eb0342186c28d2dbf81791e6064619db6db8b1f586cc25b4102ae31badc", 0x39, 0x4c000, &(0x7f0000000380)={0xa, 0x4e20, 0x8, @empty, 0x3800}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x140d, 0x310, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f00000004c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) poll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x9104}, {r7, 0x1}, {r3, 0x4022}, {r6, 0x1032}, {r4, 0x2110}, {r6, 0x4}, {r6, 0x100}], 0x7, 0x800) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000580)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000640)={{r0}, r8, 0x10, @inherit={0x80, &(0x7f00000005c0)={0x1, 0x7, 0x0, 0x36e, {0x34, 0x1, 0x5, 0x401, 0xc}, [0x2, 0x8000000000000000, 0xb, 0xd, 0xf, 0xb9a, 0xc077]}}, @subvolid=0x6}) clock_gettime(0x0, &(0x7f0000007440)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000007200)=[{{&(0x7f0000001640)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)=""/133, 0x85}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/222, 0xde}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/48, 0x30}, {&(0x7f0000002980)=""/17, 0x11}], 0x6, &(0x7f0000002a40)=""/254, 0xfe}, 0x401}, {{&(0x7f0000002b40)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003c00)=""/105, 0x69}, 0x9}, {{&(0x7f0000003c80)=@x25, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003d00)=""/254, 0xfe}], 0x1, &(0x7f0000003e40)=""/172, 0xac}, 0x1}, {{&(0x7f0000003f00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000005200)=[{&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/110, 0x6e}, {&(0x7f0000005000)=""/138, 0x8a}, {&(0x7f00000050c0)}, {&(0x7f0000005100)=""/214, 0xd6}], 0x5}, 0x2}, {{&(0x7f0000005280)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000005880)=[{&(0x7f0000005300)=""/211, 0xd3}, {&(0x7f0000005400)=""/163, 0xa3}, {&(0x7f00000054c0)=""/86, 0x56}, {&(0x7f0000005540)=""/105, 0x69}, {&(0x7f00000055c0)=""/32, 0x20}, {&(0x7f0000005600)=""/244, 0xf4}, {&(0x7f0000005700)=""/66, 0x42}, {&(0x7f0000005780)=""/160, 0xa0}, {&(0x7f0000005840)=""/21, 0x15}], 0x9, &(0x7f0000005940)=""/43, 0x2b}, 0x4}, {{&(0x7f0000005980)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005a00)=""/164, 0xa4}, {&(0x7f0000005ac0)=""/165, 0xa5}, {&(0x7f0000005b80)=""/158, 0x9e}], 0x3}, 0x2a}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000005c80)=""/171, 0xab}], 0x1}, 0x80000000}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000005d80)=""/58, 0x3a}, {&(0x7f0000005dc0)=""/254, 0xfe}, {&(0x7f0000005ec0)=""/178, 0xb2}], 0x3, &(0x7f0000005fc0)=""/247, 0xf7}, 0xc6}, {{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f00000060c0)=""/4096, 0x1000}, {&(0x7f00000070c0)=""/166, 0xa6}], 0x2, &(0x7f00000071c0)=""/15, 0xf}, 0x1}], 0x9, 0x142, &(0x7f0000007480)={r9, r10+10000000}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000007600)={{r0, &(0x7f00000074c0)='[\x00', 0x0, &(0x7f0000007500)={@align=0x2, {0x0, 0xff, 0x9, 0x5}}, 0x8000, &(0x7f0000007540)={@_ha_fsid}, &(0x7f0000007580)}, {[0xe9460000, 0x8, 0x0, 0xffff]}, 0xe9, 0x18, &(0x7f00000075c0)=""/24}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000007680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000076c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000007ac0)={&(0x7f0000007700), 0x6e, &(0x7f0000007a00)=[{&(0x7f0000007780)=""/146, 0x92}, {&(0x7f0000007840)=""/64, 0x40}, {&(0x7f0000007880)=""/48, 0x30}, {&(0x7f00000078c0)=""/209, 0xd1}, {&(0x7f00000079c0)=""/4, 0x4}], 0x5, &(0x7f0000007a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000007b00)) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000007cc0)={&(0x7f0000007b40), 0xc, &(0x7f0000007c80)={&(0x7f0000007b80)={0xe8, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_USERDATA={0xa0, 0xd, 0x1, 0x0, "dbe9232781b54cd5fda263ef63703999b35d5be25406ce60efc2a113e88701d3c67c25231f7c88a747142b96c386dfaa0f8723ee3d99548a577ffa95c6c6477f6a2f7453734493758b239f6a68c5ddb18397e0a4405a63228d19c80a309cbf69f50577ad92dd3dd415d3207cb20186ce3619dc242606e187dfb244ae84a6fd10009a9767e4f81add73d62d2ac0873d0ba0b3023c4873e124f89a5d99"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x44800) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000007d00)=0x2, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r13, &(0x7f0000007e00)={&(0x7f0000007d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007dc0)={&(0x7f0000007d80)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r11, 0xf502, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000007e40)) socket$inet6(0xa, 0x2, 0x5) ioctl$EXT4_IOC_SETFSUUID(r13, 0x4008662c, &(0x7f0000007ec0)={0x10, 0x0, "9b2ec1416ce65f2fb781efc3f78e3f36"}) 534.2886ms ago: executing program 0 (id=4207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) sendmsg$key(r2, 0x0, 0x24000840) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e21, 0xd, @remote, 0x1}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000380)=ANY=[@ANYBLOB="79ee7ca42eeabbbbbbbbbbbb86dd6a000000006411fffe8000000000000000000000000000aaff0200000000000000000000000000014e214e20006490780200000000000000040000007d2a58d3d1bc393120755ad8990b341b6ff9f05db886db33106e8efa063df1e656e26192849126844cc7efd176799a6b851ccfcb40a41b613bc37f85d55a3b1d1d5284e7f0b7f82004c1ad9ea28c4790"], 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r7 = socket$inet6(0xa, 0x3, 0x7b) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x80, 0x0, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x9, 0x3}, {0x6, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x3507, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4}}, 0xe8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000000)={r10, 0xfffffffa}, 0x8) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000005c0)={r1, &(0x7f0000000200)='-\x00', 0x200, &(0x7f0000000240)={@align=0xd3a, {0x8e90, 0x6, 0x3, 0xacd3}}, 0x4, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x81}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r12, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c053400", @ANYRES16=r13, @ANYBLOB="01000000000000000000010000000000000002410000001000137564703a73797a3100000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r13, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000100)={r10, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x82}}, 0x7, 0x81}, 0x90) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 528.027724ms ago: executing program 2 (id=4208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc854}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00", @ANYRES16=r6, @ANYBLOB], 0x8c}}, 0x5) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010025bd7000ffdbdf250700000014000200fe80000000000000000000000000004208000400ac1414bb140003"], 0x44}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) 361.437073ms ago: executing program 4 (id=4209): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0xffffffffffffcc1, 0x0, 0x0, 0x6000}, 0x2400c800) 287.393584ms ago: executing program 4 (id=4210): r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xdfdddf82bb4cc70c, 0x28011, r5, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x100010, r3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x2689e000) ioctl$sock_FIOSETOWN(r3, 0x8901, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd705739dfb500"/29, @ANYRES32=r7, @ANYBLOB="04007a80"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0xe20, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}, 0x1c) sendto$inet6(r8, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393cfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xcd, 0xc081, 0x0, 0x0) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000640)=0x9, 0xfffffffffffffe7e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_udp_int(r8, 0x88, 0x1, &(0x7f0000000080), 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xfffffffffffffd7b}}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) socket$rxrpc(0x21, 0x2, 0x7) 286.886927ms ago: executing program 2 (id=4211): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f670014000280060001400000000008000640000000000901000000010000000000000900020073797a3200000000140000001100010000000000000000000000000a06e0f2d2202efb07a83a1b8b02e3cc8408127d16fd97da8840236d123fd2065379600565bbf6"], 0x78}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="405ee2d91f4bd718c31426175bcd80246222b273728c6bada2c57e090000", @ANYRESOCT, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac14140006000300bf000000"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getneigh={0x14, 0x1e, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 286.394881ms ago: executing program 3 (id=4212): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000641064fb52c107827a2d9c58ab2ecc0d8ecaec334eb84818bb3cc74e785f86e612056498fd576b23cbfa45c72794dec297830fa097c5cdfede941bdbf17fb541bd85e0a9758835239cee682423501fb1e384398ba5b9738ac0f3a465a46fc425fedfa7a0f5947aa340eed416d7e92ba80870576d65f2c6f0791bf5bb280c8ed5915e5a5a03ecc214657ff8bfbef0dc678c2097f7c6ed3f7ecd55d490bfa3f7", @ANYRES16=r0, @ANYBLOB="01002bbd70000400000005000000080009000000000008000c00a40a000008000b00feffffff0600010007000000"], 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40820) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000641064fb52c107827a2d9c58ab2ecc0d8ecaec334eb84818bb3cc74e785f86e612056498fd576b23cbfa45c72794dec297830fa097c5cdfede941bdbf17fb541bd85e0a9758835239cee682423501fb1e384398ba5b9738ac0f3a465a46fc425fedfa7a0f5947aa340eed416d7e92ba80870576d65f2c6f0791bf5bb280c8ed5915e5a5a03ecc214657ff8bfbef0dc678c2097f7c6ed3f7ecd55d490bfa3f7", @ANYRES16=r0, @ANYBLOB="01002bbd70000400000005000000080009000000000008000c00a40a000008000b00feffffff0600010007000000"], 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40820) (async) 120.361354ms ago: executing program 2 (id=4213): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="3019", 0x2}], 0x1) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 64) connect$unix(r0, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000440061190400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x2f, 0xd, 0x6, 0x7f, 0x30, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x8000, 0x1, 0x6, 0xffff3fa1}}) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000c40)={0x0, @isdn={0x22, 0x7, 0xcf, 0x9, 0x3}, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x4}, @can={0x1d, r4}, 0x6, 0x0, 0x0, 0x0, 0x24, &(0x7f0000000c00)='lo\x00', 0x8, 0x0, 0x2}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) r5 = accept(r2, &(0x7f0000000340)=@hci, &(0x7f0000000800)=0x80) recvmsg$unix(r5, &(0x7f00000007c0)={&(0x7f0000000440), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000cc0)=""/210, 0xd2}, {&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f00000004c0)=""/119, 0x77}], 0x6}, 0x40000002) r6 = socket$inet6(0xa, 0x3, 0x3a) (async, rerun: 32) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000010500160002000000040012000500170040"], 0x60}}, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, @bcast, @bpq0, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]}) (async) sendmmsg$inet6(r6, &(0x7f0000001a80)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000) (async) getsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000170100037c0000080001800400060004000000000000000000002bd0fde746a06c5d66f422f05fff6a675fbec789311ed1c05c4ce7146e5e698504b3a3ad92"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 119.069738ms ago: executing program 3 (id=4214): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x18, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x17a, 0x0, 0x0, 0x0, 0xbe49}, {}, {}, [@ldst={0x2, 0x3, 0x474ea81da21bd95b, 0x3, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x3, 0x3, 0x4, 0xb, 0x5, 0x10, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x8a, &(0x7f0000000100)=""/138, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x5, 0x5, 0x6, 0x1}, {0x2, 0x2, 0xd, 0x4}, {0x1, 0x3, 0x7, 0x8}, {0x5, 0x4, 0x9, 0x5}, {0x1, 0x5, 0xd, 0x7}, {0x2, 0x3, 0xc, 0x7}], 0x10, 0x7}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r0}, 0xc) 72.299609ms ago: executing program 1 (id=4215): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)="3f5dcb20e1a89f492cbd556ad1ba55c4ac2b136ee5b6ee2d7f89039ab6e577d9597193733f70f8aa6f", 0x29) 0s ago: executing program 3 (id=4216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800104018008001b000600000008001b000000010019dd5a7cbcd0d7810ef994c95db27baf7c994fceb4723910867b6a12156396526052a775cd11e440fdcd93d1b6a5474e2b6f277e13d32bc6430ffc115c25e7b922e4b1f1a10b8adfd27c14a4b74b8d05008b7214c8ce73ef69dc4662a84df51820d254d8421e6925c0de11ad7bea4b80f380"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x5, 0x9, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8, 0x6, 0xff}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a00)={@multicast1, @multicast2, 0x0}, &(0x7f0000000a40)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000a80)={@empty, 0x0}, &(0x7f0000000ac0)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r0, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000bc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800010000000000fedbdf251d01060008000a00", @ANYRES32=r14, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r15, @ANYBLOB="08000e00", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000e00)={'ip_vti0\x00', 0x0, 0x10, 0xf800, 0x73d1, 0xee9, {{0x7, 0x4, 0x1, 0x7, 0x1c, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x98, [@loopback]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001540)={0x55c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe3b}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x492}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0xffffffffffffffe4}, {0x8, 0x4, 0x5}}}]}}]}, 0x55c}}, 0x801) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x178, 0x1a, 0x633, 0x70bd28, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in=@multicast2, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x92be, 0x6}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0x3, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x0, 0x0, 0x10}, [@encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in6=@mcast2}}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x178}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) ioctl$FICLONE(r3, 0x40049409, r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) kernel console output (not intermixed with test programs): 6] geneve4: entered allmulticast mode [ 329.039386][ T2994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.069391][T15097] syzkaller1: entered allmulticast mode [ 329.132690][ T2994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.155911][T15096] __nla_validate_parse: 36 callbacks suppressed [ 329.155931][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 329.162525][ T2994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.183825][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2535'. [ 329.221424][ T2994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.244368][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 329.254228][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2535'. [ 329.264444][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 329.309996][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2535'. [ 329.329689][T15111] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2541'. [ 329.332613][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 329.351005][T15115] openvswitch: netlink: EtherType 50a is less than min 600 [ 329.353348][T15115] openvswitch: netlink: EtherType 50a is less than min 600 [ 329.362457][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2535'. [ 329.384678][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 329.578034][T15126] netlink: 'syz.0.2544': attribute type 21 has an invalid length. [ 329.620702][T15132] netlink: 'syz.0.2544': attribute type 21 has an invalid length. [ 329.639174][T15132] netlink: 'syz.0.2544': attribute type 4 has an invalid length. [ 329.647700][T15132] netlink: 'syz.0.2544': attribute type 5 has an invalid length. [ 329.691156][T15126] netlink: 'syz.0.2544': attribute type 4 has an invalid length. [ 329.708637][T15132] netlink: 'syz.0.2544': attribute type 21 has an invalid length. [ 329.714774][T15146] openvswitch: netlink: Flow actions attr not present in new flow. [ 329.717959][T15126] netlink: 'syz.0.2544': attribute type 5 has an invalid length. [ 329.754256][T15126] netlink: 'syz.0.2544': attribute type 21 has an invalid length. [ 329.764517][T15132] netlink: 'syz.0.2544': attribute type 4 has an invalid length. [ 329.777189][T15132] netlink: 'syz.0.2544': attribute type 5 has an invalid length. [ 329.848419][ T2278] block nbd0: Possible stuck request ffff888027298000: control (read@0,4096B). Runtime 210 seconds [ 330.008480][T15162] NCSI netlink: No device for ifindex 131092 [ 331.653319][T15298] FAULT_INJECTION: forcing a failure. [ 331.653319][T15298] name failslab, interval 1, probability 0, space 0, times 0 [ 331.674163][T15298] CPU: 1 UID: 0 PID: 15298 Comm: syz.1.2598 Not tainted syzkaller #0 PREEMPT(full) [ 331.674188][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.674213][T15298] Call Trace: [ 331.674220][T15298] [ 331.674227][T15298] dump_stack_lvl+0xe8/0x150 [ 331.674260][T15298] should_fail_ex+0x412/0x560 [ 331.674284][T15298] should_failslab+0xa8/0x100 [ 331.674307][T15298] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 331.674337][T15298] ? __alloc_skb+0x1d0/0x7d0 [ 331.674357][T15298] ? __local_bh_enable_ip+0xd0/0x130 [ 331.674381][T15298] __alloc_skb+0x1d0/0x7d0 [ 331.674405][T15298] ? netlink_ack_tlv_len+0x6c/0x210 [ 331.674427][T15298] netlink_ack+0x146/0xa50 [ 331.674444][T15298] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.674470][T15298] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 331.674486][T15298] ? __pfx_nl80211_post_doit+0x10/0x10 [ 331.674503][T15298] ? __lock_acquire+0x6b5/0x2cf0 [ 331.674533][T15298] netlink_rcv_skb+0x2b6/0x4b0 [ 331.674551][T15298] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.674574][T15298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.674606][T15298] ? down_read+0x272/0x2e0 [ 331.674621][T15298] ? genl_rcv+0xd/0x40 [ 331.674645][T15298] genl_rcv+0x28/0x40 [ 331.674665][T15298] netlink_unicast+0x80f/0x9b0 [ 331.674690][T15298] ? __pfx_netlink_unicast+0x10/0x10 [ 331.674707][T15298] ? netlink_sendmsg+0x650/0xb40 [ 331.674725][T15298] ? skb_put+0x11b/0x210 [ 331.674748][T15298] netlink_sendmsg+0x813/0xb40 [ 331.674784][T15298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.674806][T15298] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.674828][T15298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.674846][T15298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.674867][T15298] ____sys_sendmsg+0xa68/0xad0 [ 331.674897][T15298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.674927][T15298] ? import_iovec+0x73/0xa0 [ 331.674951][T15298] ___sys_sendmsg+0x2a5/0x360 [ 331.674979][T15298] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.675102][T15298] ? __fget_files+0x2a/0x420 [ 331.675134][T15298] ? __fget_files+0x3a0/0x420 [ 331.675164][T15298] __x64_sys_sendmsg+0x1bd/0x2a0 [ 331.675191][T15298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.675223][T15298] ? __pfx_ksys_write+0x10/0x10 [ 331.675254][T15298] do_syscall_64+0x14d/0xf80 [ 331.675277][T15298] ? trace_irq_disable+0x3b/0x150 [ 331.675302][T15298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.675320][T15298] ? clear_bhb_loop+0x40/0x90 [ 331.675339][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.675354][T15298] RIP: 0033:0x7f26a319c629 [ 331.675369][T15298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.675383][T15298] RSP: 002b:00007f26a3fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.675404][T15298] RAX: ffffffffffffffda RBX: 00007f26a3415fa0 RCX: 00007f26a319c629 [ 331.675415][T15298] RDX: 0000000020000040 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 331.675425][T15298] RBP: 00007f26a3fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 331.675434][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.675442][T15298] R13: 00007f26a3416038 R14: 00007f26a3415fa0 R15: 00007fff2cd629d8 [ 331.675471][T15298] [ 331.675909][T15294] tipc: Enabled bearer , priority 0 [ 331.851301][T15304] xt_connbytes: Forcing CT accounting to be enabled [ 332.089320][T15299] syzkaller0: entered promiscuous mode [ 332.095177][T15299] syzkaller0: entered allmulticast mode [ 332.101213][T15299] tipc: Resetting bearer [ 332.175205][ T36] tipc: Resetting bearer [ 332.205983][T15312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.224586][ T5889] syz_tun: tun_net_xmit 90 [ 332.247602][T15293] tipc: Resetting bearer [ 332.505918][ T797] syz_tun: tun_net_xmit 90 [ 333.806815][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 333.815066][ C1] lec:lec_tx_timeout: lec0 [ 333.819694][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.039118][T15293] tipc: Disabling bearer [ 334.157435][T15343] syz_tun: tun_net_xmit 42 [ 334.190130][T15347] __nla_validate_parse: 179 callbacks suppressed [ 334.190148][T15347] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2612'. [ 334.210670][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2612'. [ 334.294259][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 334.347324][T15353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2613'. [ 334.406398][T15363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2613'. [ 334.427391][T15367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2618'. [ 334.721872][T15384] netlink: 79 bytes leftover after parsing attributes in process `syz.4.2622'. [ 334.809108][T15391] validate_nla: 197 callbacks suppressed [ 334.809128][T15391] netlink: 'syz.4.2624': attribute type 12 has an invalid length. [ 334.860807][T15391] bond6: option primary_reselect: invalid value (255) [ 334.878768][T15391] bond6 (unregistering): Released all slaves [ 334.988637][T15399] bond7 (unregistering): Released all slaves [ 335.129203][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2631'. [ 335.223379][T15416] bond12: entered promiscuous mode [ 335.230410][T15416] bond12: entered allmulticast mode [ 335.238058][T15416] 8021q: adding VLAN 0 to HW filter on device bond12 [ 335.274012][T15426] macvlan0: entered promiscuous mode [ 335.294325][T15426] macvlan0: entered allmulticast mode [ 335.318881][T15426] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 335.345146][T15434] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2637'. [ 335.577915][T15445] x_tables: duplicate underflow at hook 1 [ 335.761746][T15460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2649'. [ 335.861031][T15462] syzkaller0: entered promiscuous mode [ 335.868609][T15462] syzkaller0: entered allmulticast mode [ 336.416491][T15509] netlink: 'syz.4.2663': attribute type 1 has an invalid length. [ 336.661838][T15534] netlink: 'syz.0.2669': attribute type 1 has an invalid length. [ 336.842460][T15548] netlink: 'syz.4.2674': attribute type 1 has an invalid length. [ 336.920327][T15548] bond6: entered promiscuous mode [ 336.938364][T15548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.019452][T15558] smc: removing ib device syz2 [ 337.127274][T15561] bond6: (slave bridge7): making interface the new active one [ 337.144083][T15561] bridge7: entered promiscuous mode [ 337.180038][T15561] bridge7: left promiscuous mode [ 337.279365][T15567] netlink: 'syz.0.2677': attribute type 11 has an invalid length. [ 337.721768][T15581] netlink: 'syz.0.2680': attribute type 11 has an invalid length. [ 338.753000][T15632] netlink: 'syz.4.2696': attribute type 33 has an invalid length. [ 338.785770][T15630] xt_l2tp: v2 tid > 0xffff: 1114244 [ 338.833725][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 338.842000][ C1] lec:lec_tx_timeout: lec0 [ 338.846653][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.308839][T15674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.335327][ T797] syz_tun: tun_net_xmit 90 [ 339.378976][T15676] __nla_validate_parse: 9 callbacks suppressed [ 339.378997][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2710'. [ 339.422199][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'. [ 339.522062][ T5896] syz_tun: tun_net_xmit 90 [ 339.672951][T15701] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2714'. [ 339.738390][T15705] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2719'. [ 339.758301][T15705] openvswitch: netlink: Flow key attr not present in new flow. [ 339.897201][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 339.929433][T15717] IPv6: NLM_F_REPLACE set, but no existing node found! [ 340.040565][T15721] netlink: 'syz.2.2725': attribute type 4 has an invalid length. [ 340.056924][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2728'. [ 340.105994][T15725] tipc: Failed to remove unknown binding: 66,0,0/0:3665115306/3665115307 [ 340.243592][T15735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.281067][T15732] openvswitch: netlink: IP tunnel TTL not specified. [ 340.569461][T15747] netlink: 'syz.4.2734': attribute type 1 has an invalid length. [ 340.643179][T15747] bond7: entered promiscuous mode [ 340.675089][T15747] 8021q: adding VLAN 0 to HW filter on device bond7 [ 340.690791][T15752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2735'. [ 340.742515][T15747] bond7: (slave bridge7): making interface the new active one [ 340.753426][T15747] bridge7: entered promiscuous mode [ 340.771586][T15747] bridge7: left promiscuous mode [ 340.845698][T15752] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2735'. [ 340.866623][T15752] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2735'. [ 340.891088][T15752] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2735'. [ 341.102305][T15765] macsec2: entered promiscuous mode [ 341.133369][T15768] macsec2: entered promiscuous mode [ 341.150026][T15773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.288624][T15784] tap0: tun_chr_ioctl cmd 1074025676 [ 341.303909][T15784] tap0: owner set to 0 [ 341.422439][T15796] netlink: 'syz.4.2747': attribute type 1 has an invalid length. [ 341.442784][T15796] netlink: 'syz.4.2747': attribute type 3 has an invalid length. [ 342.614034][T15858] netlink: 'syz.3.2761': attribute type 27 has an invalid length. [ 342.648342][ T2312] block nbd2: Possible stuck request ffff888027352800: control (read@0,1024B). Runtime 30 seconds [ 342.659568][ T2312] block nbd2: Possible stuck request ffff888027352a00: control (read@1024,1024B). Runtime 30 seconds [ 342.672578][ T2312] block nbd2: Possible stuck request ffff888027352c00: control (read@2048,1024B). Runtime 30 seconds [ 342.686699][ T2312] block nbd2: Possible stuck request ffff888027352e00: control (read@3072,1024B). Runtime 30 seconds [ 342.991583][T15887] openvswitch: netlink: Message has 6 unknown bytes. [ 343.187895][T15899] netlink: 'syz.1.2772': attribute type 39 has an invalid length. [ 343.422514][T15912] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 343.574345][T15918] bond6: (slave geneve3): making interface the new active one [ 343.615307][T15918] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 343.645604][T11190] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 343.655651][T11190] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 343.666049][T11190] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 343.691203][T11190] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 343.853711][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 343.862558][ C1] lec:lec_tx_timeout: lec0 [ 343.867702][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 343.892213][T15939] tipc: Enabled bearer , priority 0 [ 343.918244][T15939] syzkaller0: entered promiscuous mode [ 343.945582][T15939] syzkaller0: entered allmulticast mode [ 343.957934][T15939] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 343.998405][T15939] tipc: Resetting bearer [ 344.016547][T15938] tipc: Resetting bearer [ 344.088709][T15938] tipc: Disabling bearer [ 344.100368][T15958] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 344.146536][T15958] 8021q: adding VLAN 0 to HW filter on device bond13 [ 344.169126][T15959] bond13: (slave geneve3): making interface the new active one [ 344.180637][T15959] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 344.210954][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.236232][T15962] netlink: 'syz.3.2794': attribute type 23 has an invalid length. [ 344.245265][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.285779][T15962] team0: Device ip6gre2 is of different type [ 344.299969][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.309835][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.430418][T15978] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 344.441627][T15979] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 344.453173][T15978] __nla_validate_parse: 13 callbacks suppressed [ 344.453190][T15978] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2798'. [ 344.585116][T15978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.979578][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2803'. [ 345.049959][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2803'. [ 345.061811][T16001] SET target dimension over the limit! [ 345.172629][T16004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2805'. [ 345.271983][T16016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2807'. [ 345.446791][T16020] syzkaller0: entered promiscuous mode [ 345.470173][T16020] syzkaller0: entered allmulticast mode [ 345.745929][T16043] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 345.882026][T16056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2819'. [ 345.893375][T16057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2819'. [ 345.961196][T16061] syzkaller1: entered promiscuous mode [ 345.981123][T16061] syzkaller1: entered allmulticast mode [ 346.279320][T16089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.345311][T16090] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 346.361740][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2831'. [ 346.374289][T16089] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 346.477030][T16104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2833'. [ 346.482902][T16095] netlink: 'syz.3.2831': attribute type 7 has an invalid length. [ 346.544147][T16095] xt_recent: Unsupported userspace flags (000000b1) [ 346.695567][T16126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 346.737046][T16112] dvmrp8: entered allmulticast mode [ 346.772526][T16112] dvmrp8: left allmulticast mode [ 346.860196][T16131] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 346.910448][T16131] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20000 [ 347.015700][T16139] syzkaller0: entered promiscuous mode [ 347.032639][T16139] syzkaller0: entered allmulticast mode [ 347.056211][T16147] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.064078][T16147] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.310439][T16168] syzkaller0: entered promiscuous mode [ 347.317516][T16168] syzkaller0: entered allmulticast mode [ 347.413389][T16178] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 347.695637][T16201] tipc: Enabled bearer , priority 0 [ 347.787835][T16201] syzkaller0: entered promiscuous mode [ 347.801099][T16201] syzkaller0: entered allmulticast mode [ 347.808196][T16201] tipc: Resetting bearer [ 347.827165][T16211] netlink: 'syz.1.2861': attribute type 5 has an invalid length. [ 347.827184][T16212] netlink: 'syz.1.2861': attribute type 5 has an invalid length. [ 347.852724][T16200] tipc: Resetting bearer [ 348.265313][T16233] netlink: 'syz.1.2865': attribute type 11 has an invalid length. [ 348.885178][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 348.893889][ C1] lec:lec_tx_timeout: lec0 [ 348.899446][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 349.320759][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.341369][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.350805][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.378941][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.396860][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.457952][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.480481][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.498622][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.519939][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.539852][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.319401][T16200] tipc: Disabling bearer [ 350.436121][T16260] __nla_validate_parse: 10 callbacks suppressed [ 350.436140][T16260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2871'. [ 350.443049][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2873'. [ 350.537041][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2873'. [ 350.556740][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2873'. [ 350.682215][T16274] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2876'. [ 350.723619][T16281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2879'. [ 350.768226][T16281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2879'. [ 350.825769][T16284] geneve4: entered promiscuous mode [ 350.846729][T16281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 351.101287][T16297] syzkaller0: entered promiscuous mode [ 351.118391][T16297] syzkaller0: entered allmulticast mode [ 351.547490][T16324] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2889'. [ 351.607316][ T5837] Bluetooth: hci5: command tx timeout [ 351.744685][T16345] sctp: [Deprecated]: syz.1.2892 (pid 16345) Use of int in maxseg socket option. [ 351.744685][T16345] Use struct sctp_assoc_value instead [ 352.113184][T16251] chnl_net:caif_netlink_parms(): no params data found [ 352.511083][T16251] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.548499][T16251] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.557952][T16251] bridge_slave_0: entered allmulticast mode [ 352.567526][T16251] bridge_slave_0: entered promiscuous mode [ 352.624756][T16251] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.632042][T16251] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.651961][T16251] bridge_slave_1: entered allmulticast mode [ 352.661513][T16251] bridge_slave_1: entered promiscuous mode [ 352.670324][T16388] bond3: (slave lo): Releasing active interface [ 352.687011][T16388] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 352.706663][T16388] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 352.788848][T16251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.816535][T16251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.905914][T16251] team0: Port device team_slave_0 added [ 352.922599][T16251] team0: Port device team_slave_1 added [ 352.983120][T16406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2902'. [ 353.006382][T16251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.028117][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.079080][T16251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.112005][T16251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.124771][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.153585][T16251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.170769][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'. [ 353.307059][T16251] hsr_slave_0: entered promiscuous mode [ 353.332261][T16251] hsr_slave_1: entered promiscuous mode [ 353.698563][ T5837] Bluetooth: hci5: command tx timeout [ 353.882033][T16251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.913767][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 353.922443][ C1] lec:lec_tx_timeout: lec0 [ 353.927439][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 354.019898][T16251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.121275][T16459] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.150198][T16251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.233912][T16251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.520795][T16486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.542479][T16251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 354.553534][T16496] netlink: 'syz.1.2931': attribute type 9 has an invalid length. [ 354.566433][T16251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 354.589270][T16251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 354.608706][T16251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 354.623522][T16486] syzkaller0: entered promiscuous mode [ 354.630927][T16486] syzkaller0: entered allmulticast mode [ 354.822017][T16513] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 354.844688][T16513] bond14 (unregistering): Released all slaves [ 354.978990][T16515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.094929][T16251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.114668][T16535] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 355.123183][T16251] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.140075][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.147275][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.201940][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.209120][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.311402][T16545] netlink: zone id is out of range [ 355.317334][T16545] netlink: zone id is out of range [ 355.322719][T16545] netlink: zone id is out of range [ 355.329930][T16545] netlink: zone id is out of range [ 355.336369][T16545] netlink: zone id is out of range [ 355.338154][T16542] bond14: entered promiscuous mode [ 355.342143][T16545] netlink: zone id is out of range [ 355.348037][T16542] bond14: entered allmulticast mode [ 355.366883][T16542] 8021q: adding VLAN 0 to HW filter on device bond14 [ 355.385968][T16548] macvlan0: entered promiscuous mode [ 355.430912][T16251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.690321][T16572] __nla_validate_parse: 13 callbacks suppressed [ 355.690341][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 355.761679][T16579] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2953'. [ 355.764574][ T5837] Bluetooth: hci5: command tx timeout [ 355.797439][T16579] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 355.940624][T16251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.000807][T16592] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2958'. [ 356.079969][T16251] veth0_vlan: entered promiscuous mode [ 356.126342][T16251] veth1_vlan: entered promiscuous mode [ 356.219566][T16251] veth0_macvtap: entered promiscuous mode [ 356.235950][T16251] veth1_macvtap: entered promiscuous mode [ 356.298342][T16251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.331575][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2962'. [ 356.359826][T16251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.407111][T11190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.426219][T11190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.445492][T11190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.474417][T11190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.585125][T11190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.607722][T11190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.681535][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.705050][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.029574][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.041687][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.056454][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.067675][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.076710][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.241891][T16642] syzkaller1: entered promiscuous mode [ 357.265018][T16642] syzkaller1: entered allmulticast mode [ 357.305850][T16642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2973'. [ 357.407213][T16647] netlink: 'syz.2.2974': attribute type 21 has an invalid length. [ 357.420254][T16647] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2974'. [ 357.570708][T16650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2976'. [ 357.617971][T16253] udevd[16253]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 357.661898][T16256] udevd[16256]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 357.778000][T16664] netlink: 401 bytes leftover after parsing attributes in process `syz.3.2979'. [ 357.808132][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'. [ 357.814139][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'. [ 357.845408][ T5837] Bluetooth: hci5: command tx timeout [ 357.909015][T16669] geneve4: entered promiscuous mode [ 357.915315][T16669] geneve4: entered allmulticast mode [ 357.935595][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.956533][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 357.974756][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 357.984574][ T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.993342][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 358.002677][ T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 358.017820][ T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.037171][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 358.063766][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 358.129574][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.160663][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 358.202040][ T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 358.588669][T16637] chnl_net:caif_netlink_parms(): no params data found [ 358.738435][T16730] netlink: 'syz.2.2996': attribute type 21 has an invalid length. [ 358.809616][T16730] netlink: 'syz.2.2996': attribute type 5 has an invalid length. [ 358.903164][T16742] sctp: [Deprecated]: syz.3.2999 (pid 16742) Use of int in maxseg socket option. [ 358.903164][T16742] Use struct sctp_assoc_value instead [ 358.921488][T16637] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.933241][T16637] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.940959][T16637] bridge_slave_0: entered allmulticast mode [ 358.943865][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 358.949039][T16637] bridge_slave_0: entered promiscuous mode [ 358.955562][ C1] lec:lec_tx_timeout: lec0 [ 358.963198][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 359.001724][T16745] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 359.044734][T16637] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.052177][T16637] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.084534][T16637] bridge_slave_1: entered allmulticast mode [ 359.092641][T16637] bridge_slave_1: entered promiscuous mode [ 359.123923][ T5837] Bluetooth: hci2: command tx timeout [ 359.264501][T16637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.278665][T16637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.447605][T16637] team0: Port device team_slave_0 added [ 359.477081][T16637] team0: Port device team_slave_1 added [ 359.516739][T16776] ip6t_srh: unknown srh match flags 5F28 [ 359.542113][T16637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.550368][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.580150][T16637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.617409][T16637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.651343][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.678990][T16637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.691737][T16781] net_ratelimit: 49 callbacks suppressed [ 359.691755][T16781] openvswitch: netlink: Flow key attribute not present in set flow. [ 359.781348][T16637] hsr_slave_0: entered promiscuous mode [ 359.789943][T16637] hsr_slave_1: entered promiscuous mode [ 359.805204][T16637] debugfs: 'hsr0' already exists in 'hsr' [ 359.810963][T16637] Cannot create hsr debugfs directory [ 359.848583][T16794] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 359.882566][T16796] xt_l2tp: wrong L2TP version: 0 [ 359.910295][T16794] sctp: [Deprecated]: syz.1.3012 (pid 16794) Use of int in maxseg socket option. [ 359.910295][T16794] Use struct sctp_assoc_value instead [ 359.928841][ T2278] block nbd0: Possible stuck request ffff888027298000: control (read@0,4096B). Runtime 240 seconds [ 360.273277][T16637] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.336647][T16807] gretap2: entered promiscuous mode [ 360.360146][T16807] gretap2: entered allmulticast mode [ 360.371666][T16637] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.430854][T11190] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.453303][T11190] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.477212][T11190] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.502466][T16637] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.530825][T11190] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.556066][T16827] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 360.575697][T16637] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.791024][T16637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 360.827222][T16637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.850471][T16637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.874558][T16637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.099572][T16637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.111466][T16856] __nla_validate_parse: 10 callbacks suppressed [ 361.111484][T16856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3029'. [ 361.172893][T16637] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.186246][T16868] netlink: 'syz.1.3032': attribute type 29 has an invalid length. [ 361.203945][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 361.212893][ T5837] Bluetooth: hci2: command tx timeout [ 361.224401][T16868] netlink: 'syz.1.3032': attribute type 29 has an invalid length. [ 361.248784][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 361.263193][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.270401][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.324390][T11190] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.332018][T11190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.354915][T16875] bond7: option min_links: invalid value (18446744073709551614) [ 361.362908][T16875] bond7: option min_links: allowed values 0 - 2147483647 [ 361.376245][T16875] bond7 (unregistering): Released all slaves [ 361.452514][T16877] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 361.474118][T16880] team0: Device ip6gre1 is of different type [ 361.809501][T16909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3041'. [ 361.831215][T16637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.978477][T16922] Unknown options in mask b7f2 [ 362.270889][T16947] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3052'. [ 362.281905][T16637] veth0_vlan: entered promiscuous mode [ 362.289907][T16942] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 362.345022][T16637] veth1_vlan: entered promiscuous mode [ 362.528101][T16637] veth0_macvtap: entered promiscuous mode [ 362.541381][T16637] veth1_macvtap: entered promiscuous mode [ 362.571396][T16637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.596004][T16637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.641403][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.652430][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.671398][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.683949][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.851328][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'. [ 362.864758][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.877655][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.942619][T16974] bridge7: port 1(veth3) entered blocking state [ 362.951028][T16974] bridge7: port 1(veth3) entered disabled state [ 362.960550][T16974] veth3: entered allmulticast mode [ 362.986567][T16974] veth3: entered promiscuous mode [ 363.046061][T16983] bridge7: port 2(veth0_to_bond) entered blocking state [ 363.055243][T16983] bridge7: port 2(veth0_to_bond) entered disabled state [ 363.063199][T16983] veth0_to_bond: entered allmulticast mode [ 363.072884][T16983] veth0_to_bond: entered promiscuous mode [ 363.092023][T11190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.123072][T11190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.370909][ T5837] Bluetooth: hci2: command tx timeout [ 363.671620][T17017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3071'. [ 363.744474][T17017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3071'. [ 363.910928][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.938807][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.939987][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 363.964097][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.988823][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.996775][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.214790][T17044] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3080'. [ 364.225908][T17046] unsupported nlmsg_type 40 [ 364.240794][T17046] netlink: 'syz.1.3081': attribute type 1 has an invalid length. [ 364.255926][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.270037][T17049] netlink: 'syz.3.3079': attribute type 24 has an invalid length. [ 364.293919][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 32906 - 0 [ 364.315374][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.334301][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 364.483278][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.516531][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 32906 - 0 [ 364.536518][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.548627][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 364.617372][T17071] netlink: 'syz.3.3086': attribute type 3 has an invalid length. [ 364.665459][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.712769][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 32906 - 0 [ 364.757045][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.785933][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 364.856463][T17080] veth0: entered promiscuous mode [ 364.880973][T17080] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 364.921254][T17080] bond7 (unregistering): Released all slaves [ 365.028808][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.043714][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6080 ms [ 365.049148][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 32906 - 0 [ 365.051958][ C1] lec:lec_tx_timeout: lec0 [ 365.067385][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.097675][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.129533][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 365.189590][T17079] veth0: left promiscuous mode [ 365.443964][ T5842] Bluetooth: hci2: command tx timeout [ 365.489023][T17115] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 365.512610][T17115] bond15 (unregistering): Released all slaves [ 365.757772][ T36] bridge_slave_1: left allmulticast mode [ 365.780305][T17131] netlink: 'syz.1.3102': attribute type 1 has an invalid length. [ 365.792847][ T36] bridge_slave_1: left promiscuous mode [ 365.801633][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.841337][ T36] bridge_slave_0: left allmulticast mode [ 365.848137][ T36] bridge_slave_0: left promiscuous mode [ 365.857912][T17135] sctp: [Deprecated]: syz.3.3105 (pid 17135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.857912][T17135] Use struct sctp_sack_info instead [ 365.858484][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.927949][T17145] sctp: [Deprecated]: syz.3.3105 (pid 17145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.927949][T17145] Use struct sctp_sack_info instead [ 365.960019][ T36] veth0_to_bond: left allmulticast mode [ 365.984721][ T36] veth0_to_bond: left promiscuous mode [ 365.994134][ T36] bridge7: port 2(veth0_to_bond) entered disabled state [ 366.015596][ T36] veth3: left allmulticast mode [ 366.020794][ T36] veth3: left promiscuous mode [ 366.027790][ T36] bridge7: port 1(veth3) entered disabled state [ 366.083925][ T5842] Bluetooth: hci1: command tx timeout [ 366.351140][ T36] erspan0 (unregistering): left promiscuous mode [ 366.383421][ T36] gretap0 (unregistering): left promiscuous mode [ 366.463474][ T36] bond6 (unregistering): (slave geneve3): Releasing active interface [ 366.829718][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.841187][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.853270][ T36] bond0 (unregistering): Released all slaves [ 366.864380][ T36] bond1 (unregistering): Released all slaves [ 366.879065][ T36] bond2 (unregistering): Released all slaves [ 366.895855][ T36] bond3 (unregistering): Released all slaves [ 366.913799][ T36] bond4 (unregistering): Released all slaves [ 366.930595][ T36] bond5 (unregistering): Released all slaves [ 366.951148][ T36] bond6 (unregistering): Released all slaves [ 366.971928][T17131] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 367.132012][ T36] 9: left promiscuous mode [ 367.393128][T17026] chnl_net:caif_netlink_parms(): no params data found [ 367.555274][T17195] __nla_validate_parse: 7 callbacks suppressed [ 367.555294][T17195] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3113'. [ 368.118752][T17026] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.136742][T17026] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.145228][T17026] bridge_slave_0: entered allmulticast mode [ 368.163898][ T5842] Bluetooth: hci1: command tx timeout [ 368.174040][T17026] bridge_slave_0: entered promiscuous mode [ 368.216401][T17026] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.230542][T17026] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.239492][T17026] bridge_slave_1: entered allmulticast mode [ 368.254943][T17026] bridge_slave_1: entered promiscuous mode [ 368.270129][T17234] tipc: Enabled bearer , priority 0 [ 368.291076][T17243] netlink: 'syz.2.3127': attribute type 1 has an invalid length. [ 368.396882][T17253] sctp: [Deprecated]: syz.1.3125 (pid 17253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.396882][T17253] Use struct sctp_sack_info instead [ 368.520300][T17234] syzkaller0: entered promiscuous mode [ 368.531460][T17234] syzkaller0: entered allmulticast mode [ 368.559249][T17243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.568808][T17250] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 368.640018][T17026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.650139][T17253] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 368.729566][T17248] tipc: Resetting bearer [ 368.738293][T17026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.752460][T17268] netlink: 'syz.4.3129': attribute type 10 has an invalid length. [ 368.779424][T17268] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3129'. [ 368.791943][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 368.822700][T17233] tipc: Resetting bearer [ 368.847168][T17233] tipc: Disabling bearer [ 368.918783][T17026] team0: Port device team_slave_0 added [ 368.985677][T17026] team0: Port device team_slave_1 added [ 369.054080][T17277] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3132'. [ 369.172222][T17283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.208450][T17283] nbd: must specify at least one socket [ 369.275310][T17293] syzkaller0: entered promiscuous mode [ 369.327948][T17293] syzkaller0: entered allmulticast mode [ 369.501274][T17304] netlink: 'syz.3.3136': attribute type 11 has an invalid length. [ 369.516521][T17026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.552655][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.625141][T17026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.683934][T17311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'. [ 369.792636][T17026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.901983][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.931795][T17026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.248917][ T5842] Bluetooth: hci1: command tx timeout [ 370.808329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 370.816733][ C1] lec:lec_tx_timeout: lec0 [ 370.822437][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.782293][ T36] hsr_slave_0: left promiscuous mode [ 371.789219][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.799616][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.816556][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.824916][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.847836][ T36] veth1_macvtap: left promiscuous mode [ 371.855550][ T36] veth1_vlan: left promiscuous mode [ 371.861100][ T36] veth0_vlan: left promiscuous mode [ 372.325831][ T5842] Bluetooth: hci1: command tx timeout [ 372.342769][T17350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3142'. [ 372.726701][ T2312] block nbd2: Possible stuck request ffff888027352800: control (read@0,1024B). Runtime 60 seconds [ 372.738830][ T2312] block nbd2: Possible stuck request ffff888027352a00: control (read@1024,1024B). Runtime 60 seconds [ 372.750656][ T2312] block nbd2: Possible stuck request ffff888027352c00: control (read@2048,1024B). Runtime 60 seconds [ 372.762280][ T2312] block nbd2: Possible stuck request ffff888027352e00: control (read@3072,1024B). Runtime 60 seconds [ 374.076868][T17026] hsr_slave_0: entered promiscuous mode [ 374.083322][T17026] hsr_slave_1: entered promiscuous mode [ 374.091903][T17026] debugfs: 'hsr0' already exists in 'hsr' [ 374.101136][T17026] Cannot create hsr debugfs directory [ 374.247602][T17361] netlink: 'syz.3.3144': attribute type 3 has an invalid length. [ 374.255746][T17361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3144'. [ 374.451425][ T36] IPVS: stop unused estimator thread 0... [ 374.760921][T17379] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3148'. [ 374.772363][T17378] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3148'. [ 375.171082][T17026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.206231][T17406] netlink: 'syz.3.3153': attribute type 11 has an invalid length. [ 375.213462][T17026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.239159][T17026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.302885][T17026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.379874][T17406] can: request_module (can-proto-5) failed. [ 375.513124][T17026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.619486][T17026] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.711527][T17430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.767950][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.775158][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.826639][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.834009][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.841589][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.849786][ C1] lec:lec_tx_timeout: lec0 [ 375.854863][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.964212][T17430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.012390][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 376.060458][T17026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.080203][T17459] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3163'. [ 376.146067][T17430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.241625][T17475] netlink: 'syz.3.3166': attribute type 21 has an invalid length. [ 376.278216][T17430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.468566][T17485] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3168'. [ 376.520151][T17485] netlink: 'syz.1.3168': attribute type 1 has an invalid length. [ 376.540701][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 376.578145][T17485] netlink: 'syz.1.3168': attribute type 1 has an invalid length. [ 376.599758][T10510] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.626276][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 376.730158][T10510] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.746543][T10510] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.770810][T10510] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.820486][T17026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.974665][T17026] veth0_vlan: entered promiscuous mode [ 376.988471][T17514] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3175'. [ 377.017193][T17026] veth1_vlan: entered promiscuous mode [ 377.197192][T17026] veth0_macvtap: entered promiscuous mode [ 377.249298][T17026] veth1_macvtap: entered promiscuous mode [ 377.382803][T17026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.427800][T17026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.494126][ T2994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.526410][ T2994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.535553][T17537] delete_channel: no stack [ 377.565727][ T2994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.601662][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.760277][T17545] netem: change failed [ 377.811046][T17546] syzkaller0: entered promiscuous mode [ 377.840075][T17546] syzkaller0: entered allmulticast mode [ 377.863396][T17550] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3186'. [ 377.881262][T11190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.913027][T11190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.081473][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.114647][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.275025][T17564] veth3: entered promiscuous mode [ 378.498125][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.511027][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.569493][T17582] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 378.933554][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.945756][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.954291][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.963365][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.975543][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.025137][T17618] netlink: 'syz.1.3200': attribute type 3 has an invalid length. [ 379.261394][T17632] Bluetooth: MGMT ver 1.23 [ 379.312490][T17631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.329517][T17631] __nla_validate_parse: 6 callbacks suppressed [ 379.329533][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 380.088749][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.152236][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.198361][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 380.346509][T17688] syzkaller0: entered promiscuous mode [ 380.352792][T17688] syzkaller0: entered allmulticast mode [ 380.406796][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.428882][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.447202][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 380.873737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.883773][ C1] lec:lec_tx_timeout: lec0 [ 380.889294][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 381.049342][ T5837] Bluetooth: hci0: command tx timeout [ 382.415761][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.426936][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.437749][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.530096][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.541068][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.552322][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.652481][T17605] chnl_net:caif_netlink_parms(): no params data found [ 382.907738][T17671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.090985][T17731] netlink: 'syz.0.3219': attribute type 21 has an invalid length. [ 383.110923][T17731] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3219'. [ 383.123927][ T5837] Bluetooth: hci0: command tx timeout [ 383.132701][T17735] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3221'. [ 383.282231][T17741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3222'. [ 383.440598][ T36] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 383.577969][ T36] bond0 (unregistering): Released all slaves [ 383.589167][ T36] bond1 (unregistering): Released all slaves [ 383.603195][ T36] bond2 (unregistering): Released all slaves [ 383.626778][ T36] bond3 (unregistering): Released all slaves [ 383.642263][ T36] bond4 (unregistering): Released all slaves [ 383.658605][ T36] bond5 (unregistering): Released all slaves [ 383.679638][ T36] bond6 (unregistering): Released all slaves [ 383.808352][ T36] tipc: Left network mode [ 383.813454][T17605] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.821463][T17605] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.831510][T17605] bridge_slave_0: entered allmulticast mode [ 383.865336][T17605] bridge_slave_0: entered promiscuous mode [ 383.902876][T17605] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.910510][T17605] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.936341][T17605] bridge_slave_1: entered allmulticast mode [ 383.953862][T17605] bridge_slave_1: entered promiscuous mode [ 384.041706][T17605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.055658][ T36] IPVS: stopping master sync thread 8177 ... [ 384.128150][T17605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.272766][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807c0e9c00: rx timeout, send abort [ 384.283176][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807c0e9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 384.350592][T17769] tc_dump_action: action bad kind [ 384.390291][T17770] vlan2: entered promiscuous mode [ 384.412810][T17770] geneve1: entered promiscuous mode [ 384.438481][T17770] vlan2: entered allmulticast mode [ 384.443822][T17770] geneve1: entered allmulticast mode [ 384.487327][T17605] team0: Port device team_slave_0 added [ 384.531726][T17605] team0: Port device team_slave_1 added [ 384.658568][T17605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.668663][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.697736][T17605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.822089][T17605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.834092][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.863955][T17605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.070128][T17797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3237'. [ 385.087100][T17605] hsr_slave_0: entered promiscuous mode [ 385.096378][T17605] hsr_slave_1: entered promiscuous mode [ 385.103213][T17605] debugfs: 'hsr0' already exists in 'hsr' [ 385.110394][T17605] Cannot create hsr debugfs directory [ 385.205416][ T5842] Bluetooth: hci0: command tx timeout [ 385.551885][T17816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.699808][T17835] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3243'. [ 385.803439][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3244'. [ 385.903725][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.911811][ C1] lec:lec_tx_timeout: lec0 [ 385.918180][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.510406][ T36] hsr_slave_0: left promiscuous mode [ 386.522308][ T36] hsr_slave_1: left promiscuous mode [ 386.540423][ T36] veth1_macvtap: left promiscuous mode [ 386.553966][ T36] veth0_macvtap: left promiscuous mode [ 386.563388][T17877] netlink: 'syz.2.3254': attribute type 10 has an invalid length. [ 386.572176][ T36] veth1_vlan: left promiscuous mode [ 386.577931][ T36] veth0_vlan: left promiscuous mode [ 386.586611][T17877] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3254'. [ 386.700051][T17884] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3256'. [ 386.757939][ T36] team0 (unregistering): Port device wireguard0 removed [ 386.781849][ T36] pimreg3 (unregistering): left allmulticast mode [ 387.033225][ T36] smc: removing net device caif0 with user defined pnetid SYZ2 [ 387.048809][ T36] smc: removing net device team0 with user defined pnetid SYZ2 [ 387.284391][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 387.286418][T17882] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.298908][T17882] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.569229][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.596015][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.919587][T17893] macvtap0: entered promiscuous mode [ 387.935099][T10510] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.965615][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.010678][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.097463][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.354780][T17908] tipc: Enabling of bearer rejected, failed to enable media [ 388.369749][T17914] netlink: 'syz.0.3260': attribute type 4 has an invalid length. [ 388.396310][T17605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.408181][T17914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3260'. [ 388.473871][T17605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.533013][T17605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.577934][T17605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.048191][ T36] IPVS: stop unused estimator thread 0... [ 389.127981][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 389.162104][T17951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3268'. [ 389.330761][T17605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.365954][ T5837] Bluetooth: hci0: command 0x0419 tx timeout [ 389.388826][T17963] xt_hashlimit: size too large, truncated to 1048576 [ 389.417443][T17962] xt_hashlimit: size too large, truncated to 1048576 [ 389.547791][T17965] : renamed from vxcan1 [ 389.570956][T17605] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.641580][T11190] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.649126][T11190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.714723][T11190] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.722261][T11190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.005543][ T2278] block nbd0: Possible stuck request ffff888027298000: control (read@0,4096B). Runtime 270 seconds [ 390.081754][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'. [ 390.574323][T18012] netlink: 'syz.2.3281': attribute type 4 has an invalid length. [ 390.641773][T18012] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 390.676156][T18012] team0: Port device batadv1 added [ 390.688358][T17605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.749325][T18020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3283'. [ 390.795189][T18020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3283'. [ 390.836216][T18029] blkio.reset_stats is deprecated [ 390.933732][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 390.941943][ C1] lec:lec_tx_timeout: lec0 [ 390.946687][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 390.948262][T17605] veth0_vlan: entered promiscuous mode [ 391.028713][T17605] veth1_vlan: entered promiscuous mode [ 391.088850][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3288'. [ 391.175228][T17605] veth0_macvtap: entered promiscuous mode [ 391.187654][T17605] veth1_macvtap: entered promiscuous mode [ 391.208084][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 391.268583][T17605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.321847][T17605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.360238][T11190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.385418][T11190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.409109][T11190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.446075][T11190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.688175][T10510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.722651][T10510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.806174][T11190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.834097][T11190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.032000][T18093] netlink: 'syz.4.3301': attribute type 12 has an invalid length. [ 392.120459][T18093] bond2: option primary_reselect: invalid value (255) [ 392.136500][T18093] bond2 (unregistering): Released all slaves [ 392.366469][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3305'. [ 392.375495][T18119] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3306'. [ 392.375526][T18119] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3306'. [ 392.670496][ T9] IPVS: starting estimator thread 0... [ 392.722913][T18142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.774918][T18136] IPVS: using max 35 ests per chain, 84000 per kthread [ 392.932590][T18155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3317'. [ 392.969122][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.991857][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.001391][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.012067][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.020502][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.114517][T18164] syzkaller0: entered promiscuous mode [ 393.120235][T18164] syzkaller0: entered allmulticast mode [ 393.129589][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 393.138962][T18164] openvswitch: netlink: Duplicate key (type 32). [ 393.364956][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 393.469032][T10510] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.607476][T10510] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.645318][T18191] openvswitch: netlink: IP tunnel dst address not specified [ 393.744514][T10510] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.867984][T10510] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.233080][T18157] chnl_net:caif_netlink_parms(): no params data found [ 394.271381][T10510] vlan2: left promiscuous mode [ 394.285228][T10510] bond0: left promiscuous mode [ 394.305804][T10510] bridge_slave_1: left promiscuous mode [ 394.311743][T10510] bridge0: port 1(vlan2) entered disabled state [ 394.540736][T10510] bond7 (unregistering): (slave gretap2): Releasing active interface [ 394.566145][T10510] bond9 (unregistering): (slave gretap3): Releasing active interface [ 394.600786][T10510] bond13 (unregistering): (slave geneve3): Releasing active interface [ 394.857521][T10510] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 394.866037][T10510] bridge5 (unregistering): left promiscuous mode [ 395.054251][ T5837] Bluetooth: hci4: command tx timeout [ 395.079508][T10510] bond3 (unregistering): (slave macvlan2): Releasing active interface [ 395.097783][ T138] smc: removing ib device syz0 [ 395.105919][T10510] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 395.116975][T10510] bridge_slave_1: left allmulticast mode [ 395.123520][T10510] bond0 (unregistering): Released all slaves [ 395.134873][T10510] bond1 (unregistering): Released all slaves [ 395.149846][T10510] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 395.158672][T10510] bond2 (unregistering): Released all slaves [ 395.182027][T10510] bond3 (unregistering): Released all slaves [ 395.202994][T10510] bond4 (unregistering): Released all slaves [ 395.220581][T10510] bond5 (unregistering): Released all slaves [ 395.237616][T10510] bond6 (unregistering): Released all slaves [ 395.250924][T10510] bond7 (unregistering): Released all slaves [ 395.267354][T10510] bond8 (unregistering): Released all slaves [ 395.280502][T10510] bond9 (unregistering): Released all slaves [ 395.300579][T10510] bond10 (unregistering): Released all slaves [ 395.318183][T10510] bond11 (unregistering): Released all slaves [ 395.330736][T10510] bond12 (unregistering): Released all slaves [ 395.343967][T10510] bond13 (unregistering): Released all slaves [ 395.357918][T10510] bond14 (unregistering): Released all slaves [ 395.542450][T18231] syzkaller0: entered promiscuous mode [ 395.557243][T18231] syzkaller0: entered allmulticast mode [ 395.565228][T18233] tipc: Started in network mode [ 395.570298][T18233] tipc: Node identity , cluster identity 4711 [ 395.579958][T18233] tipc: Failed to obtain node identity [ 395.586160][T18233] tipc: Enabling of bearer rejected, failed to enable media [ 396.334441][ T5837] Bluetooth: hci0: command 0x0419 tx timeout [ 396.341465][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 396.733959][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 396.742082][ C1] lec:lec_tx_timeout: lec0 [ 396.747058][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 397.133892][ T5842] Bluetooth: hci4: command tx timeout [ 398.189784][T18252] tipc: Enabling of bearer rejected, failed to enable media [ 398.358545][T18157] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.374337][T18157] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.384231][T18280] __nla_validate_parse: 8 callbacks suppressed [ 398.384249][T18280] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3346'. [ 398.419131][T18157] bridge_slave_0: entered allmulticast mode [ 398.428531][T18157] bridge_slave_0: entered promiscuous mode [ 398.444080][T18157] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.456339][T18157] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.474559][T18157] bridge_slave_1: entered allmulticast mode [ 398.491041][T18157] bridge_slave_1: entered promiscuous mode [ 398.600039][T18157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.710309][T18157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.727909][T10510] : left promiscuous mode [ 398.851492][T18157] team0: Port device team_slave_0 added [ 398.866643][T18157] team0: Port device team_slave_1 added [ 398.888312][T10510] tipc: Left network mode [ 399.005756][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3352'. [ 399.055889][T18157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.062863][T18157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.108779][T18157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.146418][T18157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.153555][T18157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.201785][T18157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.214686][ T5842] Bluetooth: hci4: command tx timeout [ 399.348570][T18332] netlink: 'syz.4.3357': attribute type 1 has an invalid length. [ 399.433453][T18338] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 399.443080][T18332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.476478][T18157] hsr_slave_0: entered promiscuous mode [ 399.484308][T18157] hsr_slave_1: entered promiscuous mode [ 399.491278][T18157] debugfs: 'hsr0' already exists in 'hsr' [ 399.501783][T18157] Cannot create hsr debugfs directory [ 399.741574][T18349] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3362'. [ 400.087220][T10510] hsr_slave_0: left promiscuous mode [ 400.093145][T10510] hsr_slave_1: left promiscuous mode [ 400.251767][T10510] smc: removing net device caif0 with user defined pnetid SYZ2 [ 400.276427][T10510] smc: removing net device team0 with user defined pnetid SYZ2 [ 400.493457][T10510] IPVS: stop unused estimator thread 0... [ 401.284336][ T5842] Bluetooth: hci4: command tx timeout [ 401.620195][T18305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.636447][T18157] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.708172][T18157] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.763752][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 401.772061][ C1] lec:lec_tx_timeout: lec0 [ 401.777169][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.802263][T18157] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.838742][T18365] bridge0: port 3(syz_tun) entered blocking state [ 401.852313][T18365] bridge0: port 3(syz_tun) entered disabled state [ 401.871440][T18365] syz_tun: entered allmulticast mode [ 401.887308][T18365] syz_tun: entered promiscuous mode [ 401.894860][T18365] bridge0: port 3(syz_tun) entered blocking state [ 401.901810][T18365] bridge0: port 3(syz_tun) entered forwarding state [ 401.945053][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'. [ 401.973551][T18157] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.271602][T18394] tipc: Enabling of bearer rejected, failed to enable media [ 402.344982][T18405] syzkaller0: create flow: hash 3584660231 index 1 [ 402.363534][T18399] netlink: 'syz.4.3373': attribute type 14 has an invalid length. [ 402.523522][T18390] syzkaller0: delete flow: hash 3584660231 index 1 [ 402.808585][ T2312] block nbd2: Possible stuck request ffff888027352800: control (read@0,1024B). Runtime 90 seconds [ 402.819884][ T2312] block nbd2: Possible stuck request ffff888027352a00: control (read@1024,1024B). Runtime 90 seconds [ 402.831359][ T2312] block nbd2: Possible stuck request ffff888027352c00: control (read@2048,1024B). Runtime 90 seconds [ 402.842462][ T2312] block nbd2: Possible stuck request ffff888027352e00: control (read@3072,1024B). Runtime 90 seconds [ 404.325993][T18406] syzkaller1: entered promiscuous mode [ 404.332593][T18406] syzkaller1: entered allmulticast mode [ 404.497687][T18157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.572956][T18157] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.592233][T18452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3383'. [ 404.639889][T11190] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.647087][T11190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.688850][ T5193] udevd[5193]: worker [5825] /devices/virtual/block/nbd2 is taking a long time [ 404.731038][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3385'. [ 404.766068][T11190] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.773262][T11190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.818924][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3386'. [ 405.013045][T18472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3389'. [ 405.053952][T18476] veth0: entered promiscuous mode [ 405.156580][T18493] geneve2: entered promiscuous mode [ 405.203150][T18476] veth0: left promiscuous mode [ 405.413986][T18157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.428642][T18510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.435968][T18510] IPv6: NLM_F_CREATE should be set when creating new route [ 405.443204][T18510] IPv6: NLM_F_CREATE should be set when creating new route [ 405.450482][T18510] IPv6: NLM_F_CREATE should be set when creating new route [ 405.512089][T18157] veth0_vlan: entered promiscuous mode [ 405.557588][T18157] veth1_vlan: entered promiscuous mode [ 405.623202][T18157] veth0_macvtap: entered promiscuous mode [ 405.649804][T18519] netlink: 'syz.4.3396': attribute type 21 has an invalid length. [ 405.660798][T18157] veth1_macvtap: entered promiscuous mode [ 405.706894][T18157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.738946][T18157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.787260][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.802784][T18478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.844998][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.881115][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.905455][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.028505][T18526] syzkaller1: entered promiscuous mode [ 406.035592][T18526] syzkaller1: entered allmulticast mode [ 406.062101][T18536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3400'. [ 406.074719][T18536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3400'. [ 406.132270][T18541] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 406.274294][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3402'. [ 406.293598][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.338596][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.701339][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.732168][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.783716][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.792058][ C1] lec:lec_tx_timeout: lec0 [ 406.797175][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.924753][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3405'. [ 406.980238][T18562] syzkaller0: entered promiscuous mode [ 406.986076][T18562] syzkaller0: entered allmulticast mode [ 407.042831][T18562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3405'. [ 409.097546][T18590] syzkaller0: entered promiscuous mode [ 409.103044][T18590] syzkaller0: entered allmulticast mode [ 409.261708][T18636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3414'. [ 409.458597][T18645] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 409.499424][T18645] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 409.643311][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.726358][T18659] bridge_slave_0: left allmulticast mode [ 409.745719][T18659] bridge_slave_0: left promiscuous mode [ 409.753140][T18659] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.779735][T18668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.800365][T18659] bridge_slave_1: left allmulticast mode [ 409.839168][T18659] bridge_slave_1: left promiscuous mode [ 409.871166][T18659] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.899514][T18677] __nla_validate_parse: 4 callbacks suppressed [ 409.899533][T18677] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3428'. [ 409.904355][T18676] netlink: 'syz.3.3429': attribute type 1 has an invalid length. [ 409.937215][T18659] bond0: (slave bond_slave_0): Releasing backup interface [ 409.967651][T18659] bond0: (slave bond_slave_1): Releasing backup interface [ 409.987979][T18683] netlink: 'syz.1.3430': attribute type 4 has an invalid length. [ 410.022496][T18659] team0: Port device team_slave_0 removed [ 410.048915][T18659] team0: Port device team_slave_1 removed [ 410.070704][T18659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.090513][T18689] netlink: 'syz.4.3433': attribute type 11 has an invalid length. [ 410.102079][T18689] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3433'. [ 410.103842][T18659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.115386][T18689] xt_bpf: check failed: parse error [ 410.125290][T18691] netlink: 'syz.4.3433': attribute type 11 has an invalid length. [ 410.135983][T18689] xt_bpf: check failed: parse error [ 410.137196][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3434'. [ 410.141794][T18691] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3433'. [ 410.160863][T18659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.171933][T18659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.182053][T18659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 410.314056][T18701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3436'. [ 410.563322][T18717] sctp: [Deprecated]: syz.0.3440 (pid 18717) Use of int in max_burst socket option. [ 410.563322][T18717] Use struct sctp_assoc_value instead [ 410.853148][T18742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3445'. [ 410.957468][T18741] syzkaller0: entered promiscuous mode [ 410.974379][T18741] syzkaller0: entered allmulticast mode [ 411.264372][T18765] netlink: 'syz.3.3453': attribute type 2 has an invalid length. [ 411.294180][T18765] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3453'. [ 411.572578][T18775] openvswitch: netlink: Missing key (keys=40, expected=80) [ 411.803733][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 411.811911][ C1] lec:lec_tx_timeout: lec0 [ 411.817048][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 413.181234][ T5488] veth0_macvtap: left promiscuous mode [ 413.312239][T18788] netlink: 'syz.3.3458': attribute type 39 has an invalid length. [ 413.608660][T18802] netlink: 'syz.4.3464': attribute type 61 has an invalid length. [ 413.652774][T18810] netlink: 'syz.2.3466': attribute type 1 has an invalid length. [ 413.681290][T18810] netlink: 'syz.2.3466': attribute type 17 has an invalid length. [ 413.696634][T18810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3466'. [ 413.713473][T18813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3467'. [ 413.755126][T18810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3466'. [ 413.798948][T18810] gretap0: entered promiscuous mode [ 413.863933][T18810] gretap0: left promiscuous mode [ 413.892814][T18830] bond0: option ad_select: unable to set because the bond device is up [ 414.220541][T18851] sctp: [Deprecated]: syz.1.3479 (pid 18851) Use of int in maxseg socket option. [ 414.220541][T18851] Use struct sctp_assoc_value instead [ 414.546155][T18863] syzkaller0: entered promiscuous mode [ 414.551669][T18863] syzkaller0: entered allmulticast mode [ 414.962502][T18888] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 414.991780][T18888] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 415.193266][T18904] Cannot find map_set index 65533 as target [ 415.274835][T18900] syzkaller0: entered promiscuous mode [ 415.280589][T18900] syzkaller0: entered allmulticast mode [ 415.362756][T18906] bond3: option miimon: invalid value (18446744073709551585) [ 415.371517][T18906] bond3: option miimon: allowed values 0 - 2147483647 [ 415.406151][T18906] bond3 (unregistering): Released all slaves [ 415.567884][T18930] __nla_validate_parse: 3 callbacks suppressed [ 415.567897][T18930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3501'. [ 415.742088][T18887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.823755][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 416.831808][ C1] lec:lec_tx_timeout: lec0 [ 416.836545][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 417.640905][T18944] tipc: Started in network mode [ 417.646787][T18944] tipc: Node identity 0eca2d4abbe5, cluster identity 4711 [ 417.654902][T18944] tipc: Enabled bearer , priority 0 [ 417.662903][T18946] syzkaller0: entered promiscuous mode [ 417.676112][T18946] syzkaller0: entered allmulticast mode [ 417.690595][T18954] tipc: Resetting bearer [ 417.738495][T18960] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 417.760349][T18967] netlink: 'syz.4.3506': attribute type 1 has an invalid length. [ 417.795638][T18967] netlink: 'syz.4.3506': attribute type 3 has an invalid length. [ 417.808100][T18954] tipc: Resetting bearer [ 417.815453][T18967] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3506'. [ 417.837209][T18954] tipc: Disabling bearer [ 418.044419][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3513'. [ 418.096176][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3513'. [ 418.122233][T18980] xt_CT: No such helper "syz1" [ 418.129075][T18988] tipc: Started in network mode [ 418.137351][T18988] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 418.146884][T18988] tipc: Enabling of bearer rejected, failed to enable media [ 418.324483][T19012] netlink: 'syz.3.3517': attribute type 9 has an invalid length. [ 418.426917][T19019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3520'. [ 418.466854][T19019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3520'. [ 418.558230][T19022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3521'. [ 418.835531][T19039] netlink: 'syz.3.3528': attribute type 1 has an invalid length. [ 418.863809][T19039] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3528'. [ 418.939598][T19045] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3528'. [ 418.983544][T19046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3529'. [ 419.170156][T19059] syzkaller0: entered promiscuous mode [ 419.180782][T19059] syzkaller0: entered allmulticast mode [ 419.294381][T19071] netlink: 'syz.0.3538': attribute type 5 has an invalid length. [ 419.618378][T19091] raw_sendmsg: syz.1.3542 forgot to set AF_INET. Fix it! [ 419.653203][T19098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 419.943311][T19118] vlan4: entered allmulticast mode [ 419.949350][T19118] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 419.975408][T19124] netlink: 'syz.2.3553': attribute type 24 has an invalid length. [ 420.086709][ T2278] block nbd0: Possible stuck request ffff888027298000: control (read@0,4096B). Runtime 300 seconds [ 420.221713][T19076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.465602][T19148] netlink: 'syz.2.3560': attribute type 3 has an invalid length. [ 420.531734][T19153] : entered promiscuous mode [ 420.605591][T19153] netlink: 'syz.4.3561': attribute type 10 has an invalid length. [ 420.686842][T19153] bridge_slave_1: left allmulticast mode [ 420.706576][T19153] bridge_slave_1: left promiscuous mode [ 420.744164][T19153] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.777378][T19153] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 420.929125][T19177] SET target dimension over the limit! [ 421.063160][T19179] syzkaller0: entered promiscuous mode [ 421.085057][T19179] syzkaller0: entered allmulticast mode [ 421.097902][T19179] __nla_validate_parse: 3 callbacks suppressed [ 421.097922][T19179] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3567'. [ 421.499017][T19230] netlink: 'syz.1.3577': attribute type 3 has an invalid length. [ 421.509679][T19230] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3577'. [ 421.730788][T19246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3581'. [ 421.745681][T19246] netlink: 'syz.1.3581': attribute type 7 has an invalid length. [ 421.755037][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3581'. [ 421.849630][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 421.858760][ C1] lec:lec_tx_timeout: lec0 [ 421.865242][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 421.871999][T19184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.006767][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'. [ 422.047973][T19257] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.3582'. [ 422.078947][T19257] openvswitch: netlink: Flow key attr not present in new flow. [ 422.145539][T19268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.168444][T19271] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 422.195323][T19273] smc: net device team0 applied user defined pnetid SYZ2 [ 422.291585][T19279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3590'. [ 422.458306][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3593'. [ 422.485097][T19291] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 422.496062][T19291] team0: Port device batadv2 added [ 422.619049][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3597'. [ 422.638246][T19301] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3598'. [ 422.987624][T19332] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.996642][T19332] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.504834][T19371] validate_nla: 4 callbacks suppressed [ 423.504852][T19371] netlink: 'syz.0.3620': attribute type 4 has an invalid length. [ 423.527168][T19368] syzkaller0: entered promiscuous mode [ 423.533076][T19368] syzkaller0: entered allmulticast mode [ 423.545964][T19371] `: renamed from bond0 (while UP) [ 423.653124][T19376] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 423.910372][T19397] netlink: 'syz.3.3627': attribute type 1 has an invalid length. [ 425.362013][T19395] tipc: Enabled bearer , priority 0 [ 425.383617][T19397] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 425.585798][T19398] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.608013][T19398] syzkaller0: entered promiscuous mode [ 425.613597][T19398] syzkaller0: entered allmulticast mode [ 425.621554][T19398] tipc: Resetting bearer [ 425.628951][T19385] tipc: Resetting bearer [ 425.644469][T19385] tipc: Disabling bearer [ 425.678740][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.692548][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.739961][T19426] xt_hashlimit: size too large, truncated to 1048576 [ 425.772014][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.816987][T19426] netlink: 'syz.1.3632': attribute type 5 has an invalid length. [ 425.917668][T19435] netlink: zone id is out of range [ 425.922840][T19435] netlink: zone id is out of range [ 425.963772][T19435] netlink: zone id is out of range [ 425.998877][T19435] netlink: zone id is out of range [ 426.012693][T19435] netlink: zone id is out of range [ 426.032631][T19435] netlink: zone id is out of range [ 426.052130][T19435] netlink: zone id is out of range [ 426.061069][T19435] netlink: zone id is out of range [ 426.068879][T19435] netlink: zone id is out of range [ 426.078325][T19435] netlink: zone id is out of range [ 426.185935][T19453] __nla_validate_parse: 20 callbacks suppressed [ 426.185954][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3640'. [ 426.651903][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3649'. [ 426.788888][T19498] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3651'. [ 426.874829][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 426.883133][ C1] lec:lec_tx_timeout: lec0 [ 426.888144][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.946848][T19502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3652'. [ 426.952877][T19499] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3651'. [ 427.053889][T19508] netlink: 'syz.0.3654': attribute type 3 has an invalid length. [ 427.067522][T19504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3654'. [ 427.166779][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3655'. [ 427.211179][T19512] : entered promiscuous mode [ 427.240463][T19519] veth0: entered promiscuous mode [ 427.270683][T19519] xt_TPROXY: Can be used only with -p tcp or -p udp [ 427.290297][T19519] netlink: 'syz.2.3659': attribute type 6 has an invalid length. [ 427.304474][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 427.314634][T19519] netlink: 'syz.2.3659': attribute type 6 has an invalid length. [ 427.314913][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 427.334785][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3659'. [ 427.970662][T19578] syzkaller0: entered promiscuous mode [ 427.992473][T19578] syzkaller0: entered allmulticast mode [ 428.245363][T19530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.388694][T19603] netlink: 'syz.4.3680': attribute type 1 has an invalid length. [ 428.444310][T19603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 428.512523][T19603] vlan5: entered promiscuous mode [ 428.549617][T19603] bond3: entered promiscuous mode [ 428.568712][T19603] vlan5: entered allmulticast mode [ 428.575570][T19603] bond3: entered allmulticast mode [ 428.618862][T19608] bond3: (slave bridge2): making interface the new active one [ 428.628151][T19608] bridge2: entered promiscuous mode [ 428.648670][T19608] bridge2: entered allmulticast mode [ 428.658924][T19608] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 428.853425][T19630] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 429.730874][T19636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.857391][T19699] macvlan2: entered promiscuous mode [ 429.864921][T19699] macvlan2: entered allmulticast mode [ 429.871254][T19699] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 430.187907][T19716] xt_CT: No such helper "snmp_trap" [ 430.389663][T19729] tipc: Started in network mode [ 430.424134][T19729] tipc: Node identity 92ccaa90b556, cluster identity 4711 [ 430.443924][T19729] tipc: Enabled bearer , priority 0 [ 430.471421][T19742] syzkaller0: entered promiscuous mode [ 430.489513][T19742] syzkaller0: entered allmulticast mode [ 430.519449][T19745] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 430.525495][T19748] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 430.540301][T19729] tipc: Disabling bearer [ 430.584741][ T5937] IPVS: starting estimator thread 0... [ 430.637405][T19748] net veth1_virt_wifi : renamed from virt_wifi0 [ 430.694155][T19750] IPVS: using max 34 ests per chain, 81600 per kthread [ 430.713218][T19757] ieee802154 phy1 wpan1: encryption failed: -22 [ 430.802632][T19767] netlink: 'syz.3.3726': attribute type 1 has an invalid length. [ 430.860994][T19767] bond1: entered promiscuous mode [ 430.890694][T19767] bond1: entered allmulticast mode [ 430.906164][T19772] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 430.913502][T19767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.944363][T19776] bridge1: entered promiscuous mode [ 430.949838][T19776] bridge1: entered allmulticast mode [ 430.961316][T19776] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 430.965706][ T138] net_ratelimit: 7 callbacks suppressed [ 430.965726][ T138] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.031757][T19767] bridge2: entered promiscuous mode [ 431.044738][T19767] bridge2: entered allmulticast mode [ 431.071506][T19767] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 431.146315][ T138] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.748017][T19817] __nla_validate_parse: 8 callbacks suppressed [ 431.748035][T19817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3735'. [ 431.903897][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 431.912319][ C1] lec:lec_tx_timeout: lec0 [ 431.917044][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 432.117395][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3741'. [ 432.287169][T19849] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 432.323318][T19849] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 432.332652][T19849] gretap1: entered promiscuous mode [ 432.340664][T19849] gretap1: entered allmulticast mode [ 432.504476][T19853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3744'. [ 432.513477][T19853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3744'. [ 432.571552][T19858] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 432.591077][T19853] erspan0: entered promiscuous mode [ 432.605980][T19857] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 432.616283][T19859] Cannot find add_set index 0 as target [ 432.633748][T19853] gretap0: entered promiscuous mode [ 432.656755][T19857] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 432.660344][T19858] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 432.700219][T19867] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3747'. [ 432.884910][ T2312] block nbd2: Possible stuck request ffff888027352800: control (read@0,1024B). Runtime 120 seconds [ 432.897194][ T2312] block nbd2: Possible stuck request ffff888027352a00: control (read@1024,1024B). Runtime 120 seconds [ 432.908739][ T2312] block nbd2: Possible stuck request ffff888027352c00: control (read@2048,1024B). Runtime 120 seconds [ 432.915040][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 432.921083][ T2312] block nbd2: Possible stuck request ffff888027352e00: control (read@3072,1024B). Runtime 120 seconds [ 432.966068][T19880] netlink: 'syz.4.3750': attribute type 3 has an invalid length. [ 433.040053][T19885] netlink: 'syz.0.3751': attribute type 1 has an invalid length. [ 433.060824][T19877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3750'. [ 433.092246][T19886] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 433.133921][T19886] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 433.148026][T19886] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 433.292758][T19901] xt_TCPMSS: Only works on TCP SYN packets [ 433.580543][T19913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3757'. [ 433.591754][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'. [ 433.603391][T19913] ipt_REJECT: ECHOREPLY no longer supported. [ 433.956593][T19944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3766'. [ 434.117332][T19900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.292517][T19901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.501860][T19970] netlink: 'syz.4.3773': attribute type 1 has an invalid length. [ 436.613447][T19979] dvmrp8: entered allmulticast mode [ 436.623313][T19979] dvmrp8: left allmulticast mode [ 436.848720][T20009] netlink: 'syz.4.3783': attribute type 2 has an invalid length. [ 436.858250][T20009] netlink: 'syz.4.3783': attribute type 2 has an invalid length. [ 436.923727][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 436.932745][ C1] lec:lec_tx_timeout: lec0 [ 436.938325][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 437.865943][T20028] __nla_validate_parse: 2 callbacks suppressed [ 437.865957][T20028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3789'. [ 437.885104][T20028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3789'. [ 437.898237][T20028] sch_fq: defrate 0 ignored. [ 439.705885][T19987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.891869][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3793'. [ 439.928107][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 439.944070][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.034841][T20065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3799'. [ 440.505946][T20090] pimreg: entered allmulticast mode [ 440.768480][T20104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3809'. [ 440.871100][T20112] syzkaller0: entered promiscuous mode [ 440.877363][T20112] syzkaller0: entered allmulticast mode [ 441.059144][T20120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3813'. [ 441.424763][T20093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.590099][T20139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3819'. [ 441.672613][T20136] syzkaller0: entered promiscuous mode [ 441.680247][T20136] syzkaller0: entered allmulticast mode [ 442.736866][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 442.744906][ C1] lec:lec_tx_timeout: lec0 [ 442.750387][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 443.567333][ T5842] Bluetooth: hci4: link tx timeout [ 443.573082][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 443.590186][ T30] audit: type=1107 audit(1771598463.519:2): pid=20168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 443.621787][T20175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3827'. [ 443.668544][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 443.678972][T20175] openvswitch: netlink: Key type 278 is out of range max 32 [ 443.755582][T20180] l2tp_ppp: sess 2/0: no socket in recv [ 443.818157][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3833'. [ 443.831231][T20189] netlink: 'syz.3.3833': attribute type 2 has an invalid length. [ 443.847586][T20189] : entered promiscuous mode [ 443.884987][T20196] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3829'. [ 444.066598][T20208] openvswitch: netlink: Key type 31 is not supported [ 444.124911][T20210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.141407][T20210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.410629][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3845'. [ 445.604087][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 446.752786][T20184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.898293][T20247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3849'. [ 446.935036][T20247] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 446.935188][T20247] block (null): Could not allocate knbd recv work queue. [ 446.950604][T20258] netlink: 'syz.1.3851': attribute type 21 has an invalid length. [ 446.962973][T20258] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.994259][T20247] nbd: failed to add new device [ 447.370033][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3860'. [ 447.397965][T20289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3860'. [ 447.520849][T20300] netlink: 'syz.2.3863': attribute type 10 has an invalid length. [ 447.530396][T20300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3863'. [ 447.547444][T20300] dummy0: entered promiscuous mode [ 447.556453][T20300] bridge0: port 3(dummy0) entered blocking state [ 447.563071][T20300] bridge0: port 3(dummy0) entered disabled state [ 447.570259][T20300] dummy0: entered allmulticast mode [ 447.587093][T20300] bridge0: port 3(dummy0) entered blocking state [ 447.593613][T20300] bridge0: port 3(dummy0) entered forwarding state [ 447.667854][T20303] atomic_op ffff88805b716198 conn xmit_atomic 0000000000000000 [ 447.763789][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 447.771871][ C1] lec:lec_tx_timeout: lec0 [ 447.776548][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.858265][T20316] netlink: 'syz.3.3870': attribute type 33 has an invalid length. [ 447.895317][T20316] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3870'. [ 448.040409][T20340] openvswitch: netlink: Unknown nsh attribute 0 [ 448.178169][T20352] syzkaller0: entered promiscuous mode [ 448.185763][T20352] syzkaller0: entered allmulticast mode [ 450.186186][ T2278] block nbd0: Possible stuck request ffff888027298000: control (read@0,4096B). Runtime 330 seconds [ 450.890202][T20321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.014373][T20358] __nla_validate_parse: 1 callbacks suppressed [ 451.014392][T20358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3881'. [ 451.102956][T20358] netlink: 'syz.2.3881': attribute type 5 has an invalid length. [ 451.116940][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3881'. [ 451.545028][T20405] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3895'. [ 451.568763][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'. [ 451.580164][T20402] netlink: get zone limit has 4 unknown bytes [ 452.042186][T20435] tunl0: entered promiscuous mode [ 452.050133][T20435] netlink: 'syz.2.3902': attribute type 3 has an invalid length. [ 452.065324][T20435] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3902'. [ 452.092905][T20437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3906'. [ 452.179396][T20452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3906'. [ 452.179419][T20451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3906'. [ 452.194014][T20452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3906'. [ 452.254040][T20435] syzkaller0: entered promiscuous mode [ 452.260633][T20435] syzkaller0: entered allmulticast mode [ 452.266331][T20451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3906'. [ 452.676972][T20490] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 452.791370][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 452.799930][ C1] lec:lec_tx_timeout: lec0 [ 452.804718][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 455.279804][T20583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.865994][T20641] netlink: 'syz.0.3955': attribute type 11 has an invalid length. [ 455.884556][T20633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.903933][T20645] nbd: must specify an index to disconnect [ 455.913933][T20644] nbd: must specify an index to disconnect [ 456.014124][T20652] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.023448][T20654] netlink: 'syz.2.3960': attribute type 7 has an invalid length. [ 456.035138][T20654] __nla_validate_parse: 9 callbacks suppressed [ 456.035153][T20654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3960'. [ 456.036214][T20655] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3960'. [ 456.049275][T20654] gretap0: entered promiscuous mode [ 456.074415][T20654] gretap0: left promiscuous mode [ 456.256725][T20673] netlink: 'syz.0.3963': attribute type 29 has an invalid length. [ 456.527667][T20698] netlink: 'syz.0.3973': attribute type 32 has an invalid length. [ 456.550932][T20702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.713982][T20714] netlink: 'syz.2.3979': attribute type 3 has an invalid length. [ 456.721751][T20714] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3979'. [ 456.895704][ T5896] IPVS: starting estimator thread 0... [ 457.005132][T20732] IPVS: using max 26 ests per chain, 62400 per kthread [ 457.153043][T20749] netlink: 'syz.3.3989': attribute type 5 has an invalid length. [ 457.191097][T20749] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3989'. [ 457.285460][T20765] netlink: 'syz.4.3995': attribute type 10 has an invalid length. [ 457.305360][T20765] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 457.331654][T20764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.459628][T20777] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.729714][T20779] bond2 (unregistering): Released all slaves [ 457.813765][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 457.821812][ C1] lec:lec_tx_timeout: lec0 [ 457.826779][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 457.827579][T20787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4000'. [ 457.842395][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4000'. [ 457.980368][T20794] 8021q: VLANs not supported on ipvlan0 [ 458.015240][T20795] syzkaller0: entered promiscuous mode [ 458.020968][T20795] syzkaller0: entered allmulticast mode [ 458.132195][T20803] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4006'. [ 458.229779][T20808] openvswitch: netlink: Flow actions attr not present in new flow. [ 458.275620][T20809] dvmrp6: entered allmulticast mode [ 458.329002][T20820] netlink: 'syz.4.4011': attribute type 10 has an invalid length. [ 458.488682][T20828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4015'. [ 458.515110][T20834] geneve3: entered promiscuous mode [ 458.520359][T20834] geneve3: entered allmulticast mode [ 458.567033][T20841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4015'. [ 458.664749][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 458.680143][T20848] netlink: 83 bytes leftover after parsing attributes in process `syz.3.4019'. [ 458.724826][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 458.733142][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 458.764761][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 458.976230][T20873] netlink: 'syz.4.4027': attribute type 1 has an invalid length. [ 459.352527][T20897] netlink: 'syz.0.4037': attribute type 1 has an invalid length. [ 459.391683][T20899] netlink: 'syz.2.4039': attribute type 39 has an invalid length. [ 459.420402][T20897] bond2: entered promiscuous mode [ 459.426079][T20897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.445023][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 459.549411][T20897] bond2: (slave bridge1): making interface the new active one [ 459.558558][T20897] bridge1: entered promiscuous mode [ 459.565997][T20897] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 459.719031][T20918] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.4044:20918 [ 460.516988][ T30] audit: type=1107 audit(1771598480.439:3): pid=20964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 461.139441][T20991] netlink: 'syz.4.4061': attribute type 10 has an invalid length. [ 461.258725][T20991] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 461.587881][T21014] netlink: 'syz.0.4068': attribute type 28 has an invalid length. [ 461.614072][T21014] netlink: 'syz.0.4068': attribute type 3 has an invalid length. [ 461.646269][T21014] __nla_validate_parse: 7 callbacks suppressed [ 461.646290][T21014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4068'. [ 461.691392][T21009] syzkaller0: entered promiscuous mode [ 461.723818][T21009] syzkaller0: entered allmulticast mode [ 461.737969][T21009] tipc: Enabled bearer , priority 0 [ 461.745900][T21021] netlink: 'syz.1.4070': attribute type 32 has an invalid length. [ 461.757038][T21008] tipc: Resetting bearer [ 461.821351][T21008] tipc: Disabling bearer [ 462.484552][T21070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4081'. [ 462.516661][T21078] netlink: 'syz.1.4084': attribute type 25 has an invalid length. [ 462.542677][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'. [ 462.587256][T21080] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4085'. [ 462.600276][T21070] macvlan0: entered allmulticast mode [ 462.635193][T21078] netlink: 'syz.1.4084': attribute type 25 has an invalid length. [ 462.643046][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'. [ 462.653433][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.701091][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.730485][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.788805][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.833721][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 462.835273][T21089] syzkaller0: entered promiscuous mode [ 462.841764][ C1] lec:lec_tx_timeout: lec0 [ 462.842096][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 462.868003][T21089] syzkaller0: entered allmulticast mode [ 462.895286][T21086] netlink: 'syz.4.4087': attribute type 1 has an invalid length. [ 462.917906][T21086] syzkaller0: entered promiscuous mode [ 462.923447][T21086] syzkaller0: entered allmulticast mode [ 462.966386][ T2312] block nbd2: Possible stuck request ffff888027352800: control (read@0,1024B). Runtime 150 seconds [ 462.977383][ T2312] block nbd2: Possible stuck request ffff888027352a00: control (read@1024,1024B). Runtime 150 seconds [ 462.989844][ T2312] block nbd2: Possible stuck request ffff888027352c00: control (read@2048,1024B). Runtime 150 seconds [ 463.001383][ T2312] block nbd2: Possible stuck request ffff888027352e00: control (read@3072,1024B). Runtime 150 seconds [ 463.119120][T21090] netlink: 'syz.2.4088': attribute type 1 has an invalid length. [ 463.166184][T21103] netlink: 'syz.0.4090': attribute type 1 has an invalid length. [ 463.169913][T21100] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4088'. [ 463.183552][T21103] nbd: error processing sock list [ 463.189533][T21103] block nbd3: shutting down sockets [ 463.326100][T21111] syz_tun: entered promiscuous mode [ 463.331921][T21111] macvtap1: entered promiscuous mode [ 463.377283][T21111] syz_tun: left promiscuous mode [ 463.531073][T21121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4094'. [ 463.543066][T21121] netlink: 'syz.0.4094': attribute type 14 has an invalid length. [ 463.551526][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4094'. [ 463.583579][ T2994] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.583919][T21121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4094'. [ 463.608751][T21121] netlink: 'syz.0.4094': attribute type 14 has an invalid length. [ 463.609142][ T2994] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.617923][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4094'. [ 463.648837][ T2994] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.666453][ T2994] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.918107][T21148] vlan2: entered allmulticast mode [ 463.980215][T21148] geneve1: entered allmulticast mode [ 464.599941][T21199] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.623130][T21194] bond2: (slave ip6gretap0): making interface the new active one [ 464.632529][T21194] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 464.667730][T21204] bond0: (slave gre0): Error: Device type is different from other slaves [ 464.766742][ T30] audit: type=1800 audit(1771598484.699:4): pid=21205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4118" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 464.767097][T21205] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 464.798775][T21205] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 464.820646][T21205] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 465.109759][T21245] sctp: [Deprecated]: syz.3.4133 (pid 21245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.109759][T21245] Use struct sctp_sack_info instead [ 465.382819][T21259] tipc: Enabled bearer , priority 0 [ 465.455120][T21259] syzkaller0: entered promiscuous mode [ 465.461713][T21259] syzkaller0: entered allmulticast mode [ 465.472510][T21259] tipc: Resetting bearer [ 465.566435][T21267] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 465.617126][T21267] bond3: entered promiscuous mode [ 465.622911][T21267] bond3: entered allmulticast mode [ 465.635095][T21267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.642682][T21258] tipc: Resetting bearer [ 467.489735][T21258] tipc: Disabling bearer [ 467.504873][T21272] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 467.511479][T21284] validate_nla: 3 callbacks suppressed [ 467.511500][T21284] netlink: 'syz.4.4144': attribute type 4 has an invalid length. [ 467.543286][T21285] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 467.605398][ T5937] tipc: Node number set to 664447632 [ 467.630738][T21294] : renamed from hsr0 (while UP) [ 467.710977][T21298] netlink: 'syz.0.4147': attribute type 6 has an invalid length. [ 467.827528][T21309] xt_cgroup: invalid path, errno=-2 [ 467.834918][T21309] __nla_validate_parse: 23 callbacks suppressed [ 467.834940][T21309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4150'. [ 467.863707][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 467.871861][ C1] lec:lec_tx_timeout: lec0 [ 467.876599][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 468.056233][T21328] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4157'. [ 468.085400][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4157'. [ 468.129482][T21331] syzkaller0: entered promiscuous mode [ 468.137290][T21331] syzkaller0: entered allmulticast mode [ 468.234404][T21345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4161'. [ 468.270173][T21345] netlink: 'syz.0.4161': attribute type 10 has an invalid length. [ 468.318180][T21345] wlan1: mtu less than device minimum [ 468.331071][T21357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4163'. [ 468.343770][T21345] `: (slave wlan1): Error -22 calling dev_set_mtu [ 468.386002][T21344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.481219][T21363] netlink: 'syz.3.4165': attribute type 39 has an invalid length. [ 468.508489][T21363] bridge0: port 3(syz_tun) entered disabled state [ 468.539940][T21363] syz_tun (unregistering): left allmulticast mode [ 468.548041][T21363] syz_tun (unregistering): left promiscuous mode [ 468.556862][T21363] bridge0: port 3(syz_tun) entered disabled state [ 468.740100][T21378] netlink: 'syz.4.4170': attribute type 11 has an invalid length. [ 468.763625][T21378] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4170'. [ 469.016672][T21390] xt_cgroup: invalid path, errno=-2 [ 469.026765][T21392] xt_cgroup: invalid path, errno=-2 [ 469.139230][T21400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4175'. [ 469.322351][T21409] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 469.402717][T21412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.480718][T21419] syzkaller0: entered promiscuous mode [ 469.494458][T21419] syzkaller0: entered allmulticast mode [ 469.659683][T21434] netlink: 'syz.3.4187': attribute type 1 has an invalid length. [ 469.677773][T21434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4187'. [ 469.777921][T21441] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4190'. [ 469.787981][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4190'. [ 469.824728][T21434] macvlan0: entered promiscuous mode [ 469.875065][T21450] delete_channel: no stack [ 470.397096][T21478] xt_hashlimit: size too large, truncated to 1048576 [ 470.722350][T21493] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 470.749539][T21493] gre0: entered promiscuous mode [ 470.764563][T21493] gre0: entered allmulticast mode [ 471.293209][ T31] INFO: task udevd:5831 blocked for more than 143 seconds. [ 471.310678][ T31] Not tainted syzkaller #0 [ 471.322740][ T31] Blocked by coredump. [ 471.333298][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.352493][ T31] task:udevd state:D stack:23256 pid:5831 tgid:5831 ppid:5193 task_flags:0x40054c flags:0x00080003 [ 471.379857][ T31] Call Trace: [ 471.392005][ T31] [ 471.399868][ T31] __schedule+0x1585/0x5340 [ 471.410129][ T31] ? __lock_acquire+0x146e/0x2cf0 [ 471.420899][ T31] ? __pfx___schedule+0x10/0x10 [ 471.427509][ T31] ? schedule+0x90/0x360 [ 471.431857][ T31] schedule+0x164/0x360 [ 471.436412][ T31] io_schedule+0x7f/0xd0 [ 471.440874][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 471.447557][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 471.454430][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 471.460280][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 471.466654][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 471.472261][ T31] truncate_inode_pages_range+0x48b/0xe30 [ 471.480004][ T31] ? finish_task_switch+0x240/0x920 [ 471.485925][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 471.492413][ T31] ? preempt_schedule_common+0x82/0xd0 [ 471.498290][ T31] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 471.504816][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 471.510226][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 471.516133][ T31] bdev_release+0x417/0x650 [ 471.520681][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 471.526503][ T31] blkdev_release+0x15/0x20 [ 471.531036][ T31] __fput+0x44f/0xa70 [ 471.535408][ T31] task_work_run+0x1d9/0x270 [ 471.540109][ T31] ? __pfx_task_work_run+0x10/0x10 [ 471.545886][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 471.553737][ T31] do_exit+0x69b/0x2320 [ 471.558064][ T31] ? __up_read+0x291/0x6b0 [ 471.562924][ T31] ? __pfx_do_exit+0x10/0x10 [ 471.574009][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 471.579102][ T31] do_group_exit+0x21b/0x2d0 [ 471.593833][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.599089][ T31] get_signal+0x1284/0x1330 [ 471.607411][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 471.617128][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 471.623632][ T31] ? ksys_read+0x1fc/0x270 [ 471.628698][ T31] exit_to_user_mode_loop+0x86/0x480 [ 471.634895][ T31] ? rcu_is_watching+0x15/0xb0 [ 471.639897][ T31] do_syscall_64+0x32d/0xf80 [ 471.645034][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.651350][ T31] ? clear_bhb_loop+0x40/0x90 [ 471.657143][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.663283][ T31] RIP: 0033:0x7f7be50a7407 [ 471.669140][ T31] RSP: 002b:00007fff8d7933a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 471.680304][ T31] RAX: fffffffffffffffc RBX: 00007f7be5787880 RCX: 00007f7be50a7407 [ 471.690445][ T31] RDX: 0000000000000200 RSI: 00007f7be5786000 RDI: 0000000000000009 [ 471.705426][ T31] RBP: 000055b242dff050 R08: 0000000000000000 R09: 0000000000000000 [ 471.714641][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 471.722650][ T31] R13: 0000000000000000 R14: 000055b242e011f8 R15: 00007f7be584c39c [ 471.731350][ T31] [ 471.736378][T21541] smc: removing net device team0 with user defined pnetid SYZ2 [ 471.742652][ T31] [ 471.742652][ T31] Showing all locks held in the system: [ 471.766911][T21541] team0 (unregistering): Port device team_slave_0 removed [ 471.779511][ T31] 1 lock held by khungtaskd/31: [ 471.817014][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 471.827963][ T31] 3 locks held by kworker/u8:2/36: [ 471.833126][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 471.845602][ T31] #1: ffffc90000ac7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 471.857654][ T31] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 471.866996][ T31] 3 locks held by kworker/u8:3/49: [ 471.872705][ T31] #0: ffff888031907948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 471.885198][ T31] #1: ffffc90000b97c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 471.899188][ T31] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 471.908805][ T31] 3 locks held by klogd/5182: [ 471.914146][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 471.925445][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 471.934418][ T31] #2: ffff888034b42890 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1390 [ 471.943728][ T31] 2 locks held by getty/5585: [ 471.948659][ T31] #0: ffff8880325710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 471.958775][ T31] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 471.969236][ T31] 1 lock held by udevd/5825: [ 471.973895][ T31] #0: ffff888027319358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 471.983339][ T31] 1 lock held by udevd/5831: [ 471.988223][ T31] #0: ffff888027251358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 471.997952][ T31] 2 locks held by syz.3.4216/21541: [ 472.003168][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 472.012407][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 472.023972][ T31] 1 lock held by syz.2.4218/21552: [ 472.029106][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 472.038464][ T31] [ 472.040798][ T31] ============================================= [ 472.040798][ T31] [ 472.047192][T21541] team0 (unregistering): Port device team_slave_1 removed [ 472.050442][ T31] NMI backtrace for cpu 1 [ 472.050466][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 472.050486][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.050495][ T31] Call Trace: [ 472.050502][ T31] [ 472.050510][ T31] dump_stack_lvl+0xe8/0x150 [ 472.050538][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 472.050559][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 472.050582][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 472.050604][ T31] sys_info+0x135/0x170 [ 472.050620][ T31] watchdog+0xfd9/0x1030 [ 472.050647][ T31] ? watchdog+0x21a/0x1030 [ 472.050675][ T31] kthread+0x388/0x470 [ 472.050699][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.050720][ T31] ? __pfx_kthread+0x10/0x10 [ 472.050737][ T31] ret_from_fork+0x51e/0xb90 [ 472.050760][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 472.050779][ T31] ? __switch_to+0xc7d/0x1450 [ 472.050801][ T31] ? __pfx_kthread+0x10/0x10 [ 472.050817][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.050853][ T31] [ 472.050859][ T31] Sending NMI from CPU 1 to CPUs 0: [ 472.167434][ C0] NMI backtrace for cpu 0 [ 472.167451][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 472.167467][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.167476][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 472.167502][ C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 472.167515][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 472.167528][ C0] RAX: 00000000001d2535 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 472.167538][ C0] RDX: 0000000000000001 RSI: ffffffff8def1a36 RDI: ffffffff8c27a480 [ 472.167549][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 472.167559][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901172b0 [ 472.167569][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 472.167579][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 472.167591][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.167601][ C0] CR2: 00007f78f5db2e9c CR3: 00000000327b0000 CR4: 00000000003526f0 [ 472.167614][ C0] Call Trace: [ 472.167620][ C0] [ 472.167625][ C0] default_idle+0x9/0x20 [ 472.167639][ C0] default_idle_call+0x72/0xb0 [ 472.167655][ C0] do_idle+0x1bd/0x500 [ 472.167677][ C0] ? __pfx_do_idle+0x10/0x10 [ 472.167696][ C0] ? do_idle+0xa/0x500 [ 472.167715][ C0] cpu_startup_entry+0x43/0x60 [ 472.167733][ C0] rest_init+0x2de/0x300 [ 472.167750][ C0] start_kernel+0x385/0x3d0 [ 472.167770][ C0] x86_64_start_reservations+0x24/0x30 [ 472.167786][ C0] x86_64_start_kernel+0x143/0x1c0 [ 472.167800][ C0] common_startup_64+0x13e/0x147 [ 472.167822][ C0] [ 472.362498][T21552] dummy0: left allmulticast mode [ 472.362608][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 472.362630][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 472.362649][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.362661][ T31] Call Trace: [ 472.362668][ T31] [ 472.362676][ T31] vpanic+0x56c/0xa60 [ 472.362704][ T31] ? __pfx___schedule+0x10/0x10 [ 472.362729][ T31] ? __pfx_vpanic+0x10/0x10 [ 472.362750][ T31] ? __pfx_console_unlock+0x10/0x10 [ 472.362781][ T31] panic+0xc5/0xd0 [ 472.362802][ T31] ? __pfx_panic+0x10/0x10 [ 472.362824][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 472.362848][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 472.362873][ T31] watchdog+0x1023/0x1030 [ 472.362909][ T31] ? watchdog+0x21a/0x1030 [ 472.362938][ T31] kthread+0x388/0x470 [ 472.362955][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.362977][ T31] ? __pfx_kthread+0x10/0x10 [ 472.362994][ T31] ret_from_fork+0x51e/0xb90 [ 472.363019][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 472.363039][ T31] ? __switch_to+0xc7d/0x1450 [ 472.363061][ T31] ? __pfx_kthread+0x10/0x10 [ 472.363079][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.363116][ T31] [ 472.367710][ T31] Kernel Offset: disabled