last executing test programs:

2.273427702s ago: executing program 1 (id=6541):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r0}, 0x20)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect(r0, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x2, 0x2, 0x9, {0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x80)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa88, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x1, 0x0, 0x4, 0xa, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x81}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[r4, r8], &(0x7f0000000280)=[{0x1, 0x2, 0x6, 0x3}, {0x4, 0x1, 0xc, 0x7}, {0x5, 0x5, 0x8, 0x3}], 0x10, 0x7fff}, 0x94)

2.151585911s ago: executing program 4 (id=6543):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000001340)=""/4051, 0xfd3}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}], 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x28}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xf4, 0x0, 0xfffffffe}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r6], 0x78}}, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x3, 0xff, 0x100}, "da2d723c95585d243972f650c0"}}}}, 0x3f)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0)

1.600580237s ago: executing program 1 (id=6549):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)={0x14, r2, 0xd0141dcd7c0ac8e5, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000010)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x400, 0x8, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002800800014000000011080003400000000508000240f9ffff0214000000110001"], 0xdc}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

1.513320155s ago: executing program 4 (id=6550):
syz_emit_ethernet(0x50, &(0x7f0000000bc0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "020000000000"}}}}}}}, 0x0)

1.448085344s ago: executing program 4 (id=6552):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/net\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r4, 0x34da2000)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x48, 0x0, &(0x7f00000002c0))
r5 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000180)={@random="e900000000a2", @multicast, @val={@void, {0x8100, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x1, 0x100, @void}}}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x5}}}}}}}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x4}}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0)

1.383179527s ago: executing program 1 (id=6553):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0xe4d, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xe17, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)

1.071941622s ago: executing program 4 (id=6557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0xffffffff, 0x4)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r3, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c)
close(r3)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x61}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000280)={0x3, 'bond_slave_1\x00', {0x7}, 0x6})
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x810)
readv(r3, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/152, 0x98}], 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x7}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000001)
syz_genetlink_get_family_id$smc(&(0x7f0000000700), r0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x403040}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x10c, 0x1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1a}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7be}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004847}, 0x10)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x4000)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r7, &(0x7f0000000a40)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@any, 0x1}}}, 0xe)
pipe(&(0x7f0000000a80)={<r8=>0xffffffffffffffff})
write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000ac0)={'veth1', 0x32, 0x39}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00)={0x0, r7}, 0x8)
openat$cgroup_type(r8, &(0x7f0000000b40), 0x2, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0)
recvfrom$inet(r8, &(0x7f0000000b80)=""/144, 0x90, 0x0, &(0x7f0000000c40)={0x2, 0x4e21, @broadcast}, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r4)
sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000f40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d00)={0x1cc, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x417194ef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b28}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x840}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x42}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x94e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x151}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000081}, 0x880)

993.931721ms ago: executing program 3 (id=6558):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c)
socket$nl_route(0x10, 0x3, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0x89}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}})
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x0, @void}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})

993.43853ms ago: executing program 1 (id=6559):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/2659], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0xfc00, 0x800}, 0x0)

990.500862ms ago: executing program 2 (id=6560):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = gettid()
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4)

981.62884ms ago: executing program 4 (id=6561):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x4, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f00000003c0), 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f00000003c0), 0x4)
recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r3, 0xff08, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'veth1_to_batadv\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'veth1_to_batadv\x00', @broadcast})
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100"], 0x38}}, 0x0)

903.853104ms ago: executing program 3 (id=6563):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00002000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)

839.675983ms ago: executing program 0 (id=6564):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x89fd, &(0x7f0000000040)={'bond0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x84d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x74, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x46}}}}, [@NL80211_ATTR_VENDOR_DATA={0x11, 0xc5, "02dbf75b3a6968d8a4555195a0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x800000}, @NL80211_ATTR_VENDOR_DATA={0x28, 0xc5, "fc1f9bcf340115e3c8942898b7ff0fdc0b465d91fb72a056b45f541409a6348aa1a1ae45"}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000840}, 0x0)

753.252889ms ago: executing program 2 (id=6565):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000040)=""/63, &(0x7f0000000080)=0x3f)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)

752.230869ms ago: executing program 1 (id=6566):
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @default, @default, @null, @netrom, @bcast, @bcast, @netrom]}, &(0x7f0000000080)=0x48)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000000c0))
pipe(&(0x7f0000000b40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xca, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00'})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, 0x0, 0x800)
syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001080)={'batadv_slave_1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001180)={0x28, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x6}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
accept$inet(r1, 0x0, &(0x7f0000001840))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f0000001900))
syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), r3)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c1}, 0x10)
syz_80211_inject_frame(&(0x7f0000001c00)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2c)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008000)
r5 = accept4$tipc(r1, &(0x7f00000023c0)=@id, &(0x7f0000002400)=0x10, 0x800)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x400, 0x70bd2c, 0x8, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xe}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x200000d0)
r6 = accept$inet(r1, &(0x7f0000002540)={0x2, 0x0, @remote}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x0)

750.837134ms ago: executing program 3 (id=6567):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x3, {0x1, 0x1, 0x3}, {0x0, 0xff}, 0x0, 0x2}], 0x20)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0xb, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)

702.675441ms ago: executing program 0 (id=6568):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

628.730729ms ago: executing program 2 (id=6569):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="040100001600010000000000000000007f000001000000000000000000000000ac14142d00000000000000000000000000000003000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000001000000000000000000bb0000000033000000ac1414aa0000000000000000000000000200000000000000000000000000010000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000ffff000000000000000000000000000000000000000000eaff000038278fb32a535a390a2630830e84"], 0x104}}, 0x0)

515.819108ms ago: executing program 3 (id=6570):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59be176d378767821df88e0", 0x1e}], 0x1}}], 0x1, 0x20008000)
recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
shutdown(r1, 0x1)

514.394051ms ago: executing program 2 (id=6580):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000020aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b58104709db6b54ebd"], 0x0)

467.849666ms ago: executing program 0 (id=6571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000060000040003000b0000000600500000000304006c"], 0x68}}, 0x10)

293.789ms ago: executing program 3 (id=6572):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000180)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r6, 0x1, 0x70bd2a, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x6, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "0bf02d22db7253f8a7ea9cef02122ddab71521deab29d6b8087c2975f0f9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb5b9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4801}, 0x6004040)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'geneve0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f00000005c0)="3605bfa9b05d66571e703e7c88a8f9", 0xf, 0x40080, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b000000020000000000000e0500000001000000002e2e5f2e30"], 0x0, 0x33, 0x0, 0x1, 0x3}, 0x20)
readv(r11, &(0x7f0000000780)=[{&(0x7f0000000080)=""/174, 0xae}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000440)=""/243, 0xf3}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f0000000300)}, {&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)=""/118, 0x76}], 0xa)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}}, 0x0)

237.576825ms ago: executing program 0 (id=6573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x1d7, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x1c9, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "e75adb10fe836419e6d22d24f694ff97ee4ca79431c6079165496e90b742c9ceab6e3b39e6767508ed27b7af37ef837cd5b3a294226ed2f56d71bfb73e44a503ef27dfe47fcee4c7bf92229ad89ef1e88ae65d7490fd0f2467da90c7f385d194d3d0f5c60686475c4597bce637118f4010361993c8258a136fad58208c24d17864adca5c226b2c30d6294006d650a8bdfb8c080ace94"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x0, "b045d1206a51329c95e184f888b4ab90c0537bc85be8c475edf28c093030dfd5c8e97f9eca319a93ae964422a900385d2effa2dafe74d19eff06a11ae7b2fdd64b0d78bad7f77eef3308ce9befef166f07f9e5f47b587962e68a9ca81c67437737d863d9256ac2940036791b820f66ee3dcd6b8de729a82f31c6b885863e6b4249927ac93efd4bc146c70312cdad7a461807aaaf8320c4bfac0625299de40af1c70672eed686bb713f64a4665c0152af00e5c52d1599303dc8ccfafafe5bb478c18810e39a9048bc125a9fa82639ee154aae5c21bbb6a9a37026d9"}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010)

219.158472ms ago: executing program 2 (id=6574):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
syz_emit_ethernet(0x50, &(0x7f0000000bc0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "020000000000"}}}}}}}, 0x0)

163.736383ms ago: executing program 0 (id=6575):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x90ff}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

65.278011ms ago: executing program 3 (id=6576):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)

64.129141ms ago: executing program 0 (id=6577):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe94, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe68, 0x2, [@TCA_FW_ACT={0xe64, 0x4, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1, 0x8000, 0xffffffffffffffff, 0x2, 0x5}, 0xa, 0x1}, [{0x7, 0x500000, 0x8, 0x80, 0x3ff, 0x7}, {0xfffff108, 0x9, 0x3, 0x66a4, 0x8000, 0x6}, {0x4, 0xe7, 0x3, 0x7ff, 0xfffffffb}, {0x8f, 0x81, 0x7, 0x4, 0x6, 0x9}, {0x8, 0x1, 0xc2d, 0x9, 0x0, 0x6b}, {0x5, 0x0, 0x2, 0x3, 0x6, 0x10001}, {0xffffffff, 0x7, 0x9, 0xf0, 0x800, 0xfffffff8}, {0x1, 0xb2b4, 0x4, 0x4, 0x5, 0x3}, {0x1ff, 0x7, 0x0, 0x91, 0x81, 0x9}, {0x8, 0xfff, 0xe, 0x7, 0x6, 0xec74}, {0x8, 0x200, 0xffff, 0xfffffffe, 0x30}, {0x4, 0x72, 0x8, 0x8, 0x0, 0xa}, {0x7, 0x5, 0x6, 0x6, 0xfe7, 0x2}, {0x3ff, 0x3800000, 0x7, 0x7, 0x3813, 0x80000001}, {0x21, 0x80000001, 0xa, 0x0, 0x3, 0x3}, {0x6, 0xfffffe00, 0xcca0, 0x2, 0x2, 0x90}, {0x0, 0x8bb0, 0x10000, 0x5, 0x2, 0xef}, {0x40, 0x0, 0x8, 0xe439, 0x80, 0x6}, {0x8, 0x6, 0x2, 0x5, 0x19f, 0x8}, {0xff, 0x54, 0x3ff, 0x40, 0x0, 0x5}, {0x9, 0x58, 0x4, 0x89ad067, 0x7, 0xc5b3}, {0x10000, 0x2, 0x2, 0xd, 0x4, 0x1ff}, {0x5, 0xe, 0xddc, 0x8, 0x3, 0x81}, {0x37, 0x8001, 0x5, 0x8, 0x4, 0x8}, {0x2, 0x4, 0x0, 0x8, 0x9, 0x5}, {0x386, 0x7ff, 0xe8, 0x1, 0x3, 0xffff}, {0x7a4c, 0x7, 0x4202, 0x8, 0x9, 0x6}, {0x3, 0x5, 0x4, 0x3, 0x2, 0xfffffff8}, {0x7, 0x2, 0x6, 0x8, 0x40, 0x23be}, {0x12c, 0x8000, 0x10, 0x9, 0xfffff328, 0x4}, {0x5, 0x3cf, 0x7, 0x5, 0x36f, 0x5}, {0x2, 0x0, 0x3, 0x7, 0x0, 0xa}, {0x10000, 0xd, 0x10001, 0x8, 0x5, 0x1}, {0x10, 0x9, 0x19, 0x80000001, 0x7, 0x4}, {0x80000001, 0xdb, 0x6, 0x2, 0x376, 0x5b}, {0x6, 0xd, 0x8001, 0x1, 0x1, 0x5}, {0x39, 0x40, 0x1, 0x80000000, 0x10, 0x9}, {0x2, 0x3, 0xfffffffe, 0x0, 0x3c2, 0x1}, {0x4, 0x5, 0x8, 0x1, 0xe, 0x9d}, {0xc370c09, 0x3964, 0x7, 0xffffffc0, 0x400, 0x7f}, {0x8000, 0x9, 0x5, 0x1, 0x8}, {0x20, 0x1, 0x7c, 0x2, 0x540, 0x4}, {0x3, 0x4, 0x3, 0x0, 0x1, 0xf}, {0x9, 0x401, 0x28a3, 0x4, 0x81}, {0x4, 0x8, 0xfffffff7, 0x4, 0x8, 0x5}, {0x6744, 0x7fff, 0x4, 0x8, 0x6, 0x2}, {0x100, 0x1, 0x6, 0x2, 0xffff, 0x80000001}, {0x6, 0x10, 0x1, 0x6, 0x5, 0x9}, {0x800, 0x6, 0x6, 0x8, 0x3, 0x2}, {0x3, 0xfffffff0, 0x2, 0x400, 0x40, 0x297}, {0xfffffffa, 0x0, 0x6, 0x5, 0x8, 0xfffffff9}, {0x4, 0x0, 0x0, 0x5, 0x0, 0x10000}, {0x8, 0x3, 0x5, 0x1, 0x10000, 0x328}, {0xc, 0x8, 0x8, 0x629, 0x80, 0x8}, {0x8, 0x1, 0x8, 0x2, 0x2, 0x4}, {0x8, 0x1, 0x7fffffff, 0xff, 0x4, 0xfffffffe}, {0x0, 0x6, 0x2, 0x1e0, 0x7, 0x5}, {0x5cb, 0x5, 0x7, 0x5, 0x5, 0x6}, {0xda8, 0x80000001, 0x9, 0x1, 0x2170, 0x7e1d}, {0x80, 0x8, 0x0, 0x6a96, 0x0, 0x4}, {0xb, 0xe, 0x7, 0x2, 0x4c6, 0x400}, {0x7, 0xfff, 0xe, 0x2, 0x200, 0x4}, {0xfffffff8, 0x1, 0x2, 0x2, 0x9, 0x1}, {0x1ba, 0x8, 0x1, 0x4, 0x7, 0x5}, {0x2, 0x9, 0x2, 0x80000000, 0x3843, 0x4}, {0x2, 0x5, 0x6a, 0x18b, 0x2, 0x2}, {0x40, 0xd, 0x9f59, 0xfffff56a, 0x9, 0x400}, {0x2b7b8c2b, 0x4, 0xe0, 0x80, 0x4, 0x3}, {0x9202, 0xf038, 0x7ff, 0xfffffff9, 0x0, 0x1}, {0x5, 0x5, 0xffffffff, 0x0, 0x80000001, 0x1}, {0xc6, 0x5, 0xffffffff, 0x40, 0x4, 0x8}, {0xfffffff9, 0x7, 0x0, 0xf000000, 0x1, 0x2}, {0x4, 0xe2, 0x2, 0xfffffffd, 0x5, 0x2}, {0x1ff, 0x7, 0x5, 0x1, 0x3, 0xff}, {0x7, 0x1, 0x8, 0x9, 0x7, 0x1}, {0xaecc, 0x3, 0x8, 0x4, 0x4, 0x1}, {0x6, 0x602, 0x8, 0x6, 0xd, 0x8}, {0xca, 0x4, 0x37, 0x3, 0x9, 0x1}, {0x3, 0x1, 0x1, 0x3, 0x4, 0x2}, {0x6, 0x10000, 0x6, 0x6, 0x92dc}, {0x7, 0x0, 0x9, 0x7fff, 0x1, 0x7fff}, {0x80000000, 0x28, 0x1, 0x6, 0x7fff, 0x2}, {0x7, 0x2000000, 0x6, 0x98, 0xffffffff, 0x4}, {0x80000000, 0xcca, 0x2, 0x8, 0x4, 0x6}, {0x5, 0x8d, 0x9, 0x2, 0x4, 0x903}, {0x0, 0x6, 0x7fffffff, 0xa3f, 0x3, 0x7}, {0x4, 0x5, 0x9, 0x7, 0xdd, 0x4}, {0x1, 0x0, 0x4, 0x1600, 0x1}, {0xfffffad1, 0x2, 0x2, 0x5, 0x3, 0x3}, {0x46d7, 0x8, 0x81, 0x3, 0x6, 0x7}, {0x1, 0x2, 0x80, 0xfffffff9, 0x2, 0xa72b}, {0x4, 0x4, 0x8, 0xff, 0x3}, {0x3, 0x36, 0x1, 0x1, 0x101, 0x9}, {0x8, 0x101, 0x2, 0x8, 0x6, 0x7fffffff}, {0x9, 0x1, 0x1, 0xfffff24f, 0x80000000, 0x5}, {0x3, 0x7, 0x881a, 0xe, 0x9, 0x6}, {0x4, 0x10000, 0x7, 0xfffffffc, 0x0, 0x8}, {0xed, 0x9, 0x4, 0xffffffff, 0x100, 0xeeb}, {0x1, 0x3, 0x0, 0x7, 0x9, 0x57}, {0xb9a, 0x2, 0xb, 0x3, 0x6, 0x6eda}, {0xfff, 0x90d, 0x4, 0x4, 0x7ff, 0x1}, {0x80, 0x4, 0xfffffff9, 0x0, 0xffffffff, 0x7}, {0x4, 0xb, 0xffff, 0x2, 0xc89, 0xfffffffc}, {0xc71, 0x5f85, 0xda1, 0x1, 0x3, 0x5}, {0x6, 0xffffffff, 0x3, 0x80000001, 0x7, 0x7}, {0x80, 0xfffffffa, 0x8, 0x5, 0x13a1, 0x7}, {0x9, 0x0, 0x1, 0x0, 0x3, 0x8}, {0x4, 0x3, 0x3, 0x3, 0x9, 0x8423}, {0x1, 0x98, 0x946, 0x1, 0x9, 0x79}, {0x5, 0xfe4, 0x4, 0xfffffff8, 0x6, 0x1a}, {0x8, 0xb5, 0x9, 0x0, 0x165c, 0x1000}, {0x401, 0x4, 0x2, 0x6, 0x9, 0xa}, {0x1, 0x2, 0xd27, 0x0, 0x8, 0x5}, {0x7, 0x0, 0x2, 0x6, 0x2, 0x3}, {0xa, 0x9, 0x2, 0x2f71, 0xad1, 0x7ff}, {0xc75, 0x6, 0x7, 0x6, 0xf4df, 0x400}, {0x0, 0x0, 0x2, 0x1cf4, 0xfffffff9, 0x9}, {0x2, 0x1, 0xdd0b, 0x2baa, 0x7, 0x1}, {0x2, 0x10000, 0x560d, 0xfdc, 0x4, 0x3}, {0x0, 0x10, 0x3, 0x81, 0x7fffffff}, {0x7, 0x7, 0x80000001, 0x8, 0x3, 0x10e5}, {0xa8, 0x452, 0x8, 0x200, 0x800}, {0x6, 0x6, 0x6, 0x1, 0x2, 0x3c6db9d7}, {0x10000, 0xd3e, 0x0, 0x2, 0x3, 0x6}, {0x4, 0x0, 0x5, 0xe8d, 0x4, 0x5}, {0x0, 0x9, 0xf, 0x4, 0x7, 0x6}, {0x5e17866d, 0x9, 0x4, 0x401, 0xffffffff, 0x6}, {0x80000001, 0x1, 0x1, 0x1, 0xfffffff7, 0x3}], [{0x4, 0x1}, {0x1}, {}, {0x8, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x3, 0x1}, {}, {0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0xe, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5}, {0x4}, {0x4}, {0xaca5ca785aeb6b59, 0x2}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x5}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x8be47fc9529967ff, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x80}, 0x800)

63.717221ms ago: executing program 1 (id=6578):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/2659], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0xfcffff, 0x800}, 0x0)

34.315318ms ago: executing program 2 (id=6579):
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, 0x0, 0x20040002)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x20000011)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030000000a00050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

0s ago: executing program 4 (id=6581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x3, {0x1, 0x1, 0x3}, {0x0, 0xff}, 0x0, 0x2}], 0x20)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0xb, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)

kernel console output (not intermixed with test programs):

mit queue 0 timed out 5010 ms
[  668.304491][    C0] lec:lec_tx_timeout: lec0
[  668.309432][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  668.810577][T23183] __nla_validate_parse: 12 callbacks suppressed
[  668.810599][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5042'.
[  668.877883][T23183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5042'.
[  668.905784][T23185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5043'.
[  668.940410][T23191] net_ratelimit: 46 callbacks suppressed
[  668.940434][T23191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.993358][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5042'.
[  669.003226][   T77] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 8472 - 0
[  669.016592][   T77] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 8472 - 0
[  669.025071][T23183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5042'.
[  669.043798][   T77] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 8472 - 0
[  669.083298][   T77] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 8472 - 0
[  669.277699][T23205] veth0: entered promiscuous mode
[  669.292365][T23203] veth0: left promiscuous mode
[  669.684070][T23226] syzkaller0: entered promiscuous mode
[  669.697521][T23226] syzkaller0: entered allmulticast mode
[  669.849706][T23236] openvswitch: netlink: Message has 4 unknown bytes.
[  669.867831][T23239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5057'.
[  669.933285][T23243] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  669.949906][T23238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  669.981202][T23233] tipc: Disabling bearer <eth:syzkaller0>
[  670.195860][T23250] syzkaller0: entered promiscuous mode
[  670.226341][T23250] syzkaller0: entered allmulticast mode
[  670.363194][T23265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5063'.
[  670.589514][T23273] macvtap1: entered allmulticast mode
[  670.594985][T23273] veth0_macvtap: entered allmulticast mode
[  670.695152][T23283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5069'.
[  670.742992][T23287] geneve3: entered promiscuous mode
[  670.751433][ T3528] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 58650 - 0
[  670.766475][ T3528] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 58650 - 0
[  670.776718][T23290] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5069'.
[  670.787348][ T3528] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 58650 - 0
[  670.795999][ T3528] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 58650 - 0
[  670.805617][T23290] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  670.813469][T23283] netlink: 'syz.2.5069': attribute type 2 has an invalid length.
[  670.842301][T23283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5069'.
[  671.079904][T23306] netlink: 'syz.2.5074': attribute type 30 has an invalid length.
[  671.099145][T23309] netlink: 'syz.2.5074': attribute type 30 has an invalid length.
[  671.178562][T23317] netlink: 'syz.1.5076': attribute type 3 has an invalid length.
[  671.194875][T23306] bond11: option arp_missed_max: invalid value (0)
[  671.204945][T23306] bond11: option arp_missed_max: allowed values 1 - 255
[  671.218184][T23306] bond11 (unregistering): Released all slaves
[  671.248487][T23308] veth0: entered promiscuous mode
[  671.255020][T23309] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  671.591767][T23336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  671.663991][T23337] 8021q: VLANs not supported on ip6tnl0
[  672.004649][T23362] sctp: [Deprecated]: syz.1.5084 (pid 23362) Use of int in max_burst socket option.
[  672.004649][T23362] Use struct sctp_assoc_value instead
[  672.072651][T23367] tunl0: left promiscuous mode
[  672.087632][T23367] tunl0: left allmulticast mode
[  672.242279][T23367] 
: left promiscuous mode
[  672.249195][T23367] bond_slave_1: left promiscuous mode
[  672.474542][T23367] macsec1: left promiscuous mode
[  672.487480][T23367] bond9: left promiscuous mode
[  672.522359][T23367] bond10: left promiscuous mode
[  672.532481][T16778] wg1 speed is unknown, defaulting to 1000
[  672.553092][T16778] syz2: Port: 1 Link DOWN
[  672.607470][T11179] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.633149][T11179] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.645608][T11179] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.654077][T23389] netlink: 'syz.1.5095': attribute type 9 has an invalid length.
[  672.694334][T11179] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.744823][T11179] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.755317][T11179] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.786006][T11179] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.812843][T11179] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.953043][T23403] x_tables: duplicate underflow at hook 3
[  672.994502][T23405] lo speed is unknown, defaulting to 1000
[  673.268446][T23419] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4.
[  673.327198][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  673.335327][    C0] lec:lec_tx_timeout: lec0
[  673.340765][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  673.431026][T23405] wg1 speed is unknown, defaulting to 1000
[  673.779567][T23441] bond13: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  673.804274][T23441] bond13 (unregistering): Released all slaves
[  673.839551][T23445] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  673.937229][T23446] syzkaller0: entered promiscuous mode
[  673.942903][T23446] syzkaller0: entered allmulticast mode
[  674.015456][T23450] bridge2: the hash_elasticity option has been deprecated and is always 16
[  674.148871][T23454] netlink: 'syz.0.5113': attribute type 9 has an invalid length.
[  674.157417][T23454] netlink: 'syz.0.5113': attribute type 11 has an invalid length.
[  674.165516][T23454] netlink: 'syz.0.5113': attribute type 12 has an invalid length.
[  674.176344][T23454] __nla_validate_parse: 10 callbacks suppressed
[  674.176363][T23454] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5113'.
[  674.192907][T23454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5113'.
[  674.612002][T23470] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5118'.
[  674.627320][T23470] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5118'.
[  674.815930][T23476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5120'.
[  676.529008][T23487] bond11: entered promiscuous mode
[  676.569376][T23487] macvlan3: entered promiscuous mode
[  676.574759][T23487] macvlan3: entered allmulticast mode
[  676.593025][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5126'.
[  676.618551][T23487] bond11: (slave macvlan3): Opening slave failed
[  676.644945][T23493] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  676.653579][T23499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5127'.
[  676.664545][T23500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5127'.
[  676.682956][T23493] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5126'.
[  676.897948][T23510] netlink: 'syz.2.5131': attribute type 13 has an invalid length.
[  676.972318][T23516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5134'.
[  677.049446][T23510] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  677.081456][T23510] syzkaller0: entered promiscuous mode
[  677.108397][T23510] syzkaller0: entered allmulticast mode
[  677.389023][T23534] bond7: entered promiscuous mode
[  677.433060][T23534] macvlan2: entered promiscuous mode
[  677.463076][T23534] macvlan2: entered allmulticast mode
[  677.477640][T23534] bond7: (slave macvlan2): Opening slave failed
[  677.668889][T23552] netlink: 'syz.0.5147': attribute type 1 has an invalid length.
[  677.668889][T23553] netlink: 'syz.0.5147': attribute type 1 has an invalid length.
[  677.726395][T23552] bond8: entered promiscuous mode
[  677.731990][T23552] 8021q: adding VLAN 0 to HW filter on device bond8
[  677.791779][T23552] bond8: (slave bridge3): making interface the new active one
[  677.800276][T23552] bridge3: entered promiscuous mode
[  677.808954][T23552] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  678.356275][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  678.358097][T23594] netlink: 'syz.3.5158': attribute type 3 has an invalid length.
[  678.364413][    C0] lec:lec_tx_timeout: lec0
[  678.377609][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  678.395497][T23592] netlink: 'syz.0.5159': attribute type 11 has an invalid length.
[  678.411247][T23592] netlink: 'syz.0.5159': attribute type 11 has an invalid length.
[  679.346752][T23643] __nla_validate_parse: 5 callbacks suppressed
[  679.346776][T23643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5171'.
[  679.528836][T23656] netlink: 'syz.0.5174': attribute type 1 has an invalid length.
[  679.600271][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5174'.
[  679.619635][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5174'.
[  679.646725][T23656] bond9: entered promiscuous mode
[  679.652472][T23656] 8021q: adding VLAN 0 to HW filter on device bond9
[  679.789189][T23664] bond11: entered promiscuous mode
[  679.824563][T23667] macvlan0: entered promiscuous mode
[  679.866839][T23667] macvlan0: entered allmulticast mode
[  679.884749][T23667] bond11: (slave macvlan0): Opening slave failed
[  680.409165][T23703] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20001
[  680.431997][T23710] netlink: 'syz.4.5186': attribute type 1 has an invalid length.
[  680.647600][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5187'.
[  680.683590][T23722] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5189'.
[  680.738209][T23722] bridge0: left allmulticast mode
[  680.837170][T23731] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  680.855326][T23731] netlink: 'syz.2.5191': attribute type 39 has an invalid length.
[  680.871101][T23727] bond10: entered promiscuous mode
[  680.910027][T23732] macvlan2: entered promiscuous mode
[  680.939677][T23732] macvlan2: entered allmulticast mode
[  680.953217][T23732] bond10: (slave macvlan2): Opening slave failed
[  681.138497][T23696] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  681.156558][T23696] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  681.214037][T23696] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  681.228733][T23696] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  681.280797][T23696] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  681.320891][T23696] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  681.481618][T23761] FAULT_INJECTION: forcing a failure.
[  681.481618][T23761] name failslab, interval 1, probability 0, space 0, times 0
[  681.499971][T23761] CPU: 1 UID: 0 PID: 23761 Comm: syz.2.5199 Not tainted syzkaller #0 PREEMPT(full) 
[  681.500002][T23761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  681.500016][T23761] Call Trace:
[  681.500024][T23761]  <TASK>
[  681.500032][T23761]  dump_stack_lvl+0xe8/0x150
[  681.500078][T23761]  should_fail_ex+0x412/0x560
[  681.500112][T23761]  should_failslab+0xa8/0x100
[  681.500138][T23761]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  681.500173][T23761]  ? __alloc_skb+0x193/0x390
[  681.500198][T23761]  ? __alloc_skb+0x1d7/0x390
[  681.500220][T23761]  ? __local_bh_enable_ip+0xd0/0x130
[  681.500242][T23761]  ? __alloc_skb+0x193/0x390
[  681.500267][T23761]  __alloc_skb+0x1d7/0x390
[  681.500297][T23761]  inet_rtm_getroute+0x828/0x2930
[  681.500339][T23761]  ? unwind_next_frame+0xa5/0x23c0
[  681.500372][T23761]  ? __pfx_inet_rtm_getroute+0x10/0x10
[  681.500432][T23761]  ? kernel_text_address+0xa5/0xe0
[  681.500464][T23761]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  681.500493][T23761]  ? arch_stack_walk+0xfb/0x150
[  681.500541][T23761]  ? __pfx_inet_rtm_getroute+0x10/0x10
[  681.500571][T23761]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  681.500601][T23761]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  681.500624][T23761]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.500648][T23761]  ? __lock_acquire+0x6b5/0x2cf0
[  681.500695][T23761]  netlink_rcv_skb+0x232/0x4b0
[  681.500720][T23761]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  681.500746][T23761]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  681.500781][T23761]  ? netlink_deliver_tap+0x2e/0x1b0
[  681.500812][T23761]  netlink_unicast+0x80f/0x9b0
[  681.500853][T23761]  ? __pfx_netlink_unicast+0x10/0x10
[  681.500884][T23761]  ? __alloc_skb+0x193/0x390
[  681.500909][T23761]  ? netlink_sendmsg+0x650/0xb40
[  681.500928][T23761]  ? skb_put+0x11b/0x210
[  681.500956][T23761]  netlink_sendmsg+0x813/0xb40
[  681.500988][T23761]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.501014][T23761]  ? aa_sock_msg_perm+0xf1/0x1b0
[  681.501042][T23761]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  681.501076][T23761]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.501097][T23761]  ____sys_sendmsg+0xa68/0xad0
[  681.501124][T23761]  ? __might_fault+0xaf/0x130
[  681.501161][T23761]  ? __pfx_____sys_sendmsg+0x10/0x10
[  681.501200][T23761]  ? import_iovec+0x73/0xa0
[  681.501236][T23761]  ___sys_sendmsg+0x2a5/0x360
[  681.501263][T23761]  ? __lock_acquire+0x6b5/0x2cf0
[  681.501298][T23761]  ? __pfx____sys_sendmsg+0x10/0x10
[  681.501368][T23761]  ? __fget_files+0x2a/0x420
[  681.501391][T23761]  ? __fget_files+0x3a0/0x420
[  681.501427][T23761]  __x64_sys_sendmsg+0x1bd/0x2a0
[  681.501459][T23761]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  681.501500][T23761]  ? __pfx_ksys_write+0x10/0x10
[  681.501545][T23761]  do_syscall_64+0xe2/0xf80
[  681.501567][T23761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.501586][T23761]  ? trace_irq_disable+0x37/0x100
[  681.501606][T23761]  ? clear_bhb_loop+0x60/0xb0
[  681.501630][T23761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.501650][T23761] RIP: 0033:0x7ff5feb9aeb9
[  681.501670][T23761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.501688][T23761] RSP: 002b:00007ff5ffa58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  681.501711][T23761] RAX: ffffffffffffffda RBX: 00007ff5fee15fa0 RCX: 00007ff5feb9aeb9
[  681.501726][T23761] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  681.501740][T23761] RBP: 00007ff5ffa58090 R08: 0000000000000000 R09: 0000000000000000
[  681.501753][T23761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.501766][T23761] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007ffcc8b62f48
[  681.501801][T23761]  </TASK>
[  681.905668][T23757] ip6tnl2: entered allmulticast mode
[  681.969736][T23764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5200'.
[  681.980676][T23764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5200'.
[  682.167881][T23774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5202'.
[  682.339005][T23787] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5206'.
[  682.548993][T23789] bond12: entered promiscuous mode
[  682.577360][T23792] macvlan3: entered promiscuous mode
[  682.585625][T23792] macvlan3: entered allmulticast mode
[  682.594482][T23805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5207'.
[  682.609070][T23792] bond12: (slave macvlan3): Opening slave failed
[  682.759621][T23813] FAULT_INJECTION: forcing a failure.
[  682.759621][T23813] name failslab, interval 1, probability 0, space 0, times 0
[  682.773503][T23813] CPU: 0 UID: 0 PID: 23813 Comm: syz.0.5212 Not tainted syzkaller #0 PREEMPT(full) 
[  682.773535][T23813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  682.773549][T23813] Call Trace:
[  682.773558][T23813]  <TASK>
[  682.773567][T23813]  dump_stack_lvl+0xe8/0x150
[  682.773601][T23813]  should_fail_ex+0x412/0x560
[  682.773633][T23813]  should_failslab+0xa8/0x100
[  682.773659][T23813]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  682.773693][T23813]  ? __alloc_skb+0x193/0x390
[  682.773717][T23813]  ? __alloc_skb+0x1d7/0x390
[  682.773738][T23813]  ? __local_bh_enable_ip+0xd0/0x130
[  682.773759][T23813]  ? __alloc_skb+0x193/0x390
[  682.773784][T23813]  __alloc_skb+0x1d7/0x390
[  682.773813][T23813]  inet_rtm_getroute+0x828/0x2930
[  682.773860][T23813]  ? kasan_quarantine_put+0xbb/0x1f0
[  682.773894][T23813]  ? lockdep_hardirqs_on+0x7a/0x110
[  682.773915][T23813]  ? __pfx_inet_rtm_getroute+0x10/0x10
[  682.773984][T23813]  ? __local_bh_enable_ip+0xd0/0x130
[  682.774010][T23813]  ? __dev_queue_xmit+0x1e6c/0x3850
[  682.774039][T23813]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  682.774096][T23813]  ? __pfx_inet_rtm_getroute+0x10/0x10
[  682.774133][T23813]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  682.774163][T23813]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  682.774186][T23813]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  682.774207][T23813]  ? ref_tracker_free+0x693/0x840
[  682.774233][T23813]  ? __copy_skb_header+0xa3/0x4a0
[  682.774263][T23813]  ? __pfx_ref_tracker_free+0x10/0x10
[  682.774299][T23813]  netlink_rcv_skb+0x232/0x4b0
[  682.774321][T23813]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  682.774346][T23813]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  682.774380][T23813]  ? netlink_deliver_tap+0x2e/0x1b0
[  682.774416][T23813]  netlink_unicast+0x80f/0x9b0
[  682.774458][T23813]  ? __pfx_netlink_unicast+0x10/0x10
[  682.774488][T23813]  ? __alloc_skb+0x193/0x390
[  682.774512][T23813]  ? netlink_sendmsg+0x650/0xb40
[  682.774530][T23813]  ? skb_put+0x11b/0x210
[  682.774558][T23813]  netlink_sendmsg+0x813/0xb40
[  682.774591][T23813]  ? __pfx_netlink_sendmsg+0x10/0x10
[  682.774616][T23813]  ? aa_sock_msg_perm+0xf1/0x1b0
[  682.774643][T23813]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  682.774668][T23813]  ? __pfx_netlink_sendmsg+0x10/0x10
[  682.774689][T23813]  ____sys_sendmsg+0xa68/0xad0
[  682.774717][T23813]  ? __might_fault+0xaf/0x130
[  682.774755][T23813]  ? __pfx_____sys_sendmsg+0x10/0x10
[  682.774793][T23813]  ? import_iovec+0x73/0xa0
[  682.774829][T23813]  ___sys_sendmsg+0x2a5/0x360
[  682.774855][T23813]  ? __lock_acquire+0x6b5/0x2cf0
[  682.774890][T23813]  ? __pfx____sys_sendmsg+0x10/0x10
[  682.774957][T23813]  ? __fget_files+0x2a/0x420
[  682.774980][T23813]  ? __fget_files+0x3a0/0x420
[  682.775015][T23813]  __x64_sys_sendmsg+0x1bd/0x2a0
[  682.775047][T23813]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  682.775087][T23813]  ? __pfx_ksys_write+0x10/0x10
[  682.775138][T23813]  do_syscall_64+0xe2/0xf80
[  682.775160][T23813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.775180][T23813]  ? trace_irq_disable+0x37/0x100
[  682.775200][T23813]  ? clear_bhb_loop+0x60/0xb0
[  682.775226][T23813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.775252][T23813] RIP: 0033:0x7fcb3a79aeb9
[  682.775272][T23813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.775291][T23813] RSP: 002b:00007fcb3b6dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  682.775314][T23813] RAX: ffffffffffffffda RBX: 00007fcb3aa15fa0 RCX: 00007fcb3a79aeb9
[  682.775330][T23813] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  682.775343][T23813] RBP: 00007fcb3b6dc090 R08: 0000000000000000 R09: 0000000000000000
[  682.775357][T23813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.775369][T23813] R13: 00007fcb3aa16038 R14: 00007fcb3aa15fa0 R15: 00007ffe09e15ef8
[  682.775405][T23813]  </TASK>
[  683.597194][T23834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  684.166527][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  684.174750][    C0] lec:lec_tx_timeout: lec0
[  684.181619][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  684.502920][T23868] hsr_slave_1 (unregistering): left promiscuous mode
[  684.581894][T23884] __nla_validate_parse: 3 callbacks suppressed
[  684.581914][T23884] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5229'.
[  684.598370][T23871] bond13: entered promiscuous mode
[  684.625084][T23879] macvlan3: entered promiscuous mode
[  684.637242][T23879] macvlan3: entered allmulticast mode
[  684.657720][T23879] bond13: (slave macvlan3): Opening slave failed
[  684.865831][T23897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  684.986055][T23890] bond12: option arp_all_targets: invalid value (18446744073709551613)
[  685.011655][T23890] bond12 (unregistering): Released all slaves
[  685.381752][T23912] netlink: 'syz.4.5233': attribute type 1 has an invalid length.
[  685.511589][T23926] netlink: 'syz.1.5237': attribute type 8 has an invalid length.
[  686.162758][T23965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  686.203166][T23967] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  686.209509][T23969] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5251'.
[  686.255551][T23965] netlink: 'syz.1.5250': attribute type 10 has an invalid length.
[  686.296453][T23967] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5248'.
[  686.324802][T23969] bond12 (unregistering): Released all slaves
[  686.466416][T23977] netlink: 'syz.2.5251': attribute type 4 has an invalid length.
[  686.512028][T23969] netlink: 'syz.2.5251': attribute type 13 has an invalid length.
[  686.736832][T24001] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5258'.
[  686.968238][T24012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5260'.
[  687.075944][T24020] ipt_REJECT: TCP_RESET invalid for non-tcp
[  687.181441][T24021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5261'.
[  687.217065][T24028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5261'.
[  687.311985][T24033] dvmrp0: entered allmulticast mode
[  687.418094][T24035] bond11: option resend_igmp: invalid value (32767)
[  687.444738][T24035] bond11: option resend_igmp: allowed values 0 - 255
[  687.483794][T24035] bond11 (unregistering): Released all slaves
[  687.916833][T24071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5275'.
[  688.070254][T24083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5276'.
[  688.106159][T24086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5276'.
[  688.628032][T24109] syzkaller0: entered promiscuous mode
[  688.633613][T24109] syzkaller0: entered allmulticast mode
[  688.682773][T24118] netlink: ct family unspecified
[  689.211176][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  689.219327][    C0] lec:lec_tx_timeout: lec0
[  689.224280][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  689.874016][T24155] netlink: 'syz.0.5289': attribute type 4 has an invalid length.
[  692.434758][T24122] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  692.444034][T24126] __nla_validate_parse: 9 callbacks suppressed
[  692.444892][T24126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5285'.
[  692.489042][   T11] block nbd0: Possible stuck request ffff888025c18000: control (read@0,1024B). Runtime 240 seconds
[  692.501911][   T11] block nbd0: Possible stuck request ffff888025c18200: control (read@1024,1024B). Runtime 240 seconds
[  692.513449][   T11] block nbd0: Possible stuck request ffff888025c18400: control (read@2048,1024B). Runtime 240 seconds
[  692.525224][   T11] block nbd0: Possible stuck request ffff888025c18600: control (read@3072,1024B). Runtime 240 seconds
[  692.689262][T24167] netlink: 'syz.0.5291': attribute type 16 has an invalid length.
[  692.737518][T24167] netlink: 'syz.0.5291': attribute type 3 has an invalid length.
[  692.754689][T24167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5291'.
[  693.011554][T24195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5297'.
[  693.131954][   T25] block nbd1: Possible stuck request ffff888025c40000: control (read@0,4096B). Runtime 210 seconds
[  693.200830][T24206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5301'.
[  693.215539][T24208] mac80211_hwsim hwsim27 ÿ
: renamed from wlan1
[  693.286084][T24207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5301'.
[  693.322861][T24206] bond12: Invalid ad_actor_system MAC address.
[  693.332810][T24206] bond12: option ad_actor_system: invalid value (1)
[  693.388003][T24206] bond12 (unregistering): Released all slaves
[  693.739519][T24232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5306'.
[  693.830301][T24239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5309'.
[  693.949995][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5311'.
[  693.971590][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5310'.
[  694.045755][T11184] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  694.063461][T11184] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  694.081924][T24251] lo: Caught tx_queue_len zero misconfig
[  694.101037][T11184] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  694.113196][T24256] netlink: 'syz.0.5313': attribute type 12 has an invalid length.
[  694.125208][T11184] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  694.153113][T24257] syzkaller0: entered promiscuous mode
[  694.168892][T24257] syzkaller0: entered allmulticast mode
[  694.192729][T24268] netlink: 'syz.3.5315': attribute type 6 has an invalid length.
[  694.237193][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  694.245370][    C0] lec:lec_tx_timeout: lec0
[  694.250674][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  694.354718][T24275] x_tables: ip6_tables: mh match: only valid for protocol 135
[  694.813081][ T5850] IPVS: starting estimator thread 0...
[  694.948726][T24307] IPVS: using max 29 ests per chain, 69600 per kthread
[  694.987979][T24313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5325'.
[  695.285950][T24326] tipc: Enabled bearer <ib:gretap0>, priority 10
[  696.090354][T24380] syzkaller0: entered promiscuous mode
[  696.127462][T24380] syzkaller0: entered allmulticast mode
[  696.394941][T24396] netlink: 'syz.2.5346': attribute type 2 has an invalid length.
[  696.404624][T24396] netlink: 'syz.2.5346': attribute type 2 has an invalid length.
[  696.800134][T24404] ip6tnl0: Caught tx_queue_len zero misconfig
[  697.074680][T24427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  697.094866][T24427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.127029][T24427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37417 - 0
[  697.320515][T24427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  697.359770][T24427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.402418][T24427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37417 - 0
[  697.513665][T24427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  697.524339][T24427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.538860][T24427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37417 - 0
[  697.796054][T24427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  697.884599][T24427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.905588][T24427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37417 - 0
[  697.985209][T24480] syzkaller0: entered promiscuous mode
[  697.994464][T24480] syzkaller0: entered allmulticast mode
[  698.078332][T24480] __nla_validate_parse: 6 callbacks suppressed
[  698.078353][T24480] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.5367'.
[  698.150513][ T9235] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  698.159091][ T9235] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 37417 - 0
[  698.188452][ T9235] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  698.260227][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  698.274077][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 37417 - 0
[  698.286175][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  698.368061][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  698.377623][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 37417 - 0
[  698.386136][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  698.414790][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  698.424400][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 37417 - 0
[  698.433412][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  698.559892][T24497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5371'.
[  698.659392][T24497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5371'.
[  698.878938][T24517] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  699.266514][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  699.274641][    C0] lec:lec_tx_timeout: lec0
[  699.279911][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  699.303172][T24534] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  699.361599][T24537] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  699.489906][T24556] vlan0: entered allmulticast mode
[  699.669240][T24575] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5391'.
[  699.827668][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5391'.
[  700.202007][T24596] netlink: 'syz.2.5397': attribute type 12 has an invalid length.
[  700.332348][T24596] bond12: option primary_reselect: invalid value (255)
[  700.379079][T24596] bond12 (unregistering): Released all slaves
[  700.414272][T24603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  700.630017][T24612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5402'.
[  700.766177][T24626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5405'.
[  700.819908][T24630] netlink: 'syz.1.5407': attribute type 22 has an invalid length.
[  700.829143][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5407'.
[  700.851837][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  700.851874][T24630] netlink: 'syz.1.5407': attribute type 22 has an invalid length.
[  700.877876][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  700.881602][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5407'.
[  700.905337][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  700.923393][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  700.924360][T24634] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5410'.
[  701.043307][T24634] syzkaller0: entered promiscuous mode
[  701.077095][T24634] syzkaller0: entered allmulticast mode
[  701.364822][T24658] netlink: 'syz.2.5417': attribute type 7 has an invalid length.
[  701.624965][T24670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  702.428043][T24710] sctp: [Deprecated]: syz.1.5435 (pid 24710) Use of int in max_burst socket option.
[  702.428043][T24710] Use struct sctp_assoc_value instead
[  702.594344][T24723] xt_hashlimit: size too large, truncated to 1048576
[  702.760638][T24737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  702.859764][T24744] netlink: 'syz.3.5443': attribute type 11 has an invalid length.
[  702.876188][T24745] IPv6: sit2: Disabled Multicast RS
[  702.883853][T24745] sit2: entered allmulticast mode
[  702.937360][T24746] IPv6: sit2: Disabled Multicast RS
[  702.944091][T24746] sit2: entered allmulticast mode
[  703.142127][T24752] tipc: Invalid UDP bearer configuration
[  703.142187][T24752] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  703.187400][T24755] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  703.373862][T24767] IPv6: addrconf: prefix option has invalid lifetime
[  703.392000][T24762] bond11: entered promiscuous mode
[  703.443839][T24765] macvlan2: entered promiscuous mode
[  703.450209][T24765] macvlan2: entered allmulticast mode
[  703.457574][T24765] bond11: (slave macvlan2): Opening slave failed
[  703.554385][T24779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  703.574527][T24779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  703.651012][T24784] __nla_validate_parse: 12 callbacks suppressed
[  703.651033][T24784] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5457'.
[  703.827634][T24788] netlink: 'syz.1.5459': attribute type 19 has an invalid length.
[  703.950506][T24798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  703.963938][T24801] netlink: 'syz.3.5465': attribute type 1 has an invalid length.
[  703.975182][T24801] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5465'.
[  703.984910][T24801] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5465'.
[  703.994842][T24801] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5465'.
[  704.052996][T24803] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  704.280437][T24816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5469'.
[  704.296530][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  704.304672][    C0] lec:lec_tx_timeout: lec0
[  704.310499][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  704.384220][T24815] bond12: entered promiscuous mode
[  704.399974][T24822] macvlan4: entered promiscuous mode
[  704.405427][T24822] macvlan4: entered allmulticast mode
[  704.413200][T24822] bond12: (slave macvlan4): Opening slave failed
[  704.737377][T24842] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5476'.
[  704.772525][T24846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5480'.
[  705.093890][T24863] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5484'.
[  705.148944][T24860] bond14: option arp_all_targets: invalid value (18446744073709551613)
[  705.155015][T24869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  705.170777][T24860] bond14 (unregistering): Released all slaves
[  705.219120][T24867] gre2: entered promiscuous mode
[  705.224487][T24867] gre2: entered allmulticast mode
[  705.335518][T24875] netlink: 'syz.4.5489': attribute type 1 has an invalid length.
[  705.351597][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5487'.
[  705.880323][T24911] Cannot find map_set index 33 as target
[  706.018075][T24921] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5502'.
[  706.057170][T24921] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  706.414397][T24944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  706.815338][T24961] IPv6: Can't replace route, no match found
[  706.824278][T24968] sctp: [Deprecated]: syz.2.5515 (pid 24968) Use of struct sctp_assoc_value in delayed_ack socket option.
[  706.824278][T24968] Use struct sctp_sack_info instead
[  706.826865][T24967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  707.891089][T25012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  707.972288][T25010] bond14: entered promiscuous mode
[  708.588483][T25040] xfrm1: entered allmulticast mode
[  708.611232][T25047] sctp: [Deprecated]: syz.0.5534 (pid 25047) Use of int in max_burst socket option deprecated.
[  708.611232][T25047] Use struct sctp_assoc_value instead
[  708.854620][T25057] bond13: entered promiscuous mode
[  708.884282][T25064] macvlan4: entered promiscuous mode
[  708.893879][T25064] macvlan4: entered allmulticast mode
[  708.901744][T25064] bond13: (slave macvlan4): Opening slave failed
[  708.944145][T25060] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  709.326247][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  709.342738][    C0] lec:lec_tx_timeout: lec0
[  709.348358][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  709.364280][   T30] audit: type=1107 audit(1769608854.074:9): pid=25088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='mÙg¤vœ^‹�Ñð:5í¿˜9Ì#Y9x…pùJö•·>Ç�õÿø	”ïÓý�/¾¥Løá9»^|¢¦P#²'
[  709.384831][T25091] __nla_validate_parse: 8 callbacks suppressed
[  709.384853][T25091] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5546'.
[  709.514301][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5551'.
[  709.571740][T25104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5552'.
[  709.582888][T25104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5552'.
[  709.604239][T25102] : entered promiscuous mode
[  709.707571][T25110] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5553'.
[  709.900711][T25128] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5557'.
[  709.928303][T25128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  709.982160][T25132] FAULT_INJECTION: forcing a failure.
[  709.982160][T25132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  709.995685][T25132] CPU: 0 UID: 0 PID: 25132 Comm: syz.2.5559 Not tainted syzkaller #0 PREEMPT(full) 
[  709.995715][T25132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  709.995730][T25132] Call Trace:
[  709.995739][T25132]  <TASK>
[  709.995749][T25132]  dump_stack_lvl+0xe8/0x150
[  709.995782][T25132]  should_fail_ex+0x412/0x560
[  709.995815][T25132]  _copy_to_user+0x31/0xb0
[  709.995851][T25132]  simple_read_from_buffer+0xe1/0x170
[  709.995881][T25132]  proc_fail_nth_read+0x1bb/0x230
[  709.995916][T25132]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  709.995951][T25132]  ? rw_verify_area+0x2a6/0x4d0
[  709.995982][T25132]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  709.996015][T25132]  vfs_read+0x20c/0xa70
[  709.996045][T25132]  ? fdget_pos+0x246/0x320
[  709.996074][T25132]  ? __pfx___mutex_lock+0x10/0x10
[  709.996099][T25132]  ? __pfx_vfs_read+0x10/0x10
[  709.996131][T25132]  ? __fget_files+0x2a/0x420
[  709.996160][T25132]  ? __fget_files+0x3a0/0x420
[  709.996187][T25132]  ? __fget_files+0x2a/0x420
[  709.996219][T25132]  ksys_read+0x150/0x270
[  709.996269][T25132]  ? __pfx_ksys_read+0x10/0x10
[  709.996307][T25132]  ? __pfx_sock_ioctl+0x10/0x10
[  709.996349][T25132]  do_syscall_64+0xe2/0xf80
[  709.996371][T25132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.996391][T25132]  ? trace_irq_disable+0x37/0x100
[  709.996411][T25132]  ? clear_bhb_loop+0x60/0xb0
[  709.996438][T25132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.996458][T25132] RIP: 0033:0x7ff5feb5b78e
[  709.996479][T25132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  709.996498][T25132] RSP: 002b:00007ff5ffa57fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  709.996521][T25132] RAX: ffffffffffffffda RBX: 00007ff5ffa586c0 RCX: 00007ff5feb5b78e
[  709.996537][T25132] RDX: 000000000000000f RSI: 00007ff5ffa580a0 RDI: 0000000000000003
[  709.996551][T25132] RBP: 00007ff5ffa58090 R08: 0000000000000000 R09: 0000000000000000
[  709.996565][T25132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.996579][T25132] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007ffcc8b62f48
[  709.996615][T25132]  </TASK>
[  710.303368][T25140] openvswitch: netlink: Missing key (keys=40, expected=100)
[  710.338745][T25142] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5562'.
[  710.367575][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5563'.
[  710.491010][T25144] bond0: (slave bond_slave_1): Releasing backup interface
[  710.509335][T25148] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5564'.
[  710.539825][T25148] netlink: 'syz.2.5564': attribute type 1 has an invalid length.
[  710.567797][T25148] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5564'.
[  710.820777][T25158] vlan4: entered promiscuous mode
[  710.826125][T25158] vlan4: entered allmulticast mode
[  710.849251][T25158] hsr_slave_1: entered allmulticast mode
[  710.860383][T25167] netlink: 'syz.2.5569': attribute type 3 has an invalid length.
[  710.920402][T25158] bond0: entered promiscuous mode
[  710.925539][T25158] bond_slave_0: entered promiscuous mode
[  710.955990][T25158] bond0: left promiscuous mode
[  710.972088][T25158] bond_slave_0: left promiscuous mode
[  711.174320][T25177] geneve2: entered promiscuous mode
[  711.813326][T25221] gretap1: left allmulticast mode
[  711.828411][T25221] gretap1: left promiscuous mode
[  711.837913][T25221] bridge0: port 3(gretap1) entered disabled state
[  711.857854][T25221] bridge_slave_1: left allmulticast mode
[  711.863937][T25221] bridge_slave_1: left promiscuous mode
[  711.881735][T25221] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.896131][T25221] bridge_slave_0: left allmulticast mode
[  711.904444][T25221] bridge_slave_0: left promiscuous mode
[  711.918977][T25221] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.070078][T25221] bridge0 (unregistering): left allmulticast mode
[  712.135302][T25242] FAULT_INJECTION: forcing a failure.
[  712.135302][T25242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  712.165115][T25242] CPU: 0 UID: 0 PID: 25242 Comm: syz.3.5592 Not tainted syzkaller #0 PREEMPT(full) 
[  712.165147][T25242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  712.165161][T25242] Call Trace:
[  712.165170][T25242]  <TASK>
[  712.165180][T25242]  dump_stack_lvl+0xe8/0x150
[  712.165214][T25242]  should_fail_ex+0x412/0x560
[  712.165245][T25242]  _copy_from_iter+0x1d3/0x1670
[  712.165282][T25242]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  712.165319][T25242]  ? __pfx__copy_from_iter+0x10/0x10
[  712.165349][T25242]  ? __build_skb_around+0x22d/0x3c0
[  712.165379][T25242]  ? __alloc_skb+0x193/0x390
[  712.165403][T25242]  ? netlink_sendmsg+0x650/0xb40
[  712.165423][T25242]  ? skb_put+0x11b/0x210
[  712.165453][T25242]  netlink_sendmsg+0x6c0/0xb40
[  712.165486][T25242]  ? __pfx_netlink_sendmsg+0x10/0x10
[  712.165513][T25242]  ? aa_sock_msg_perm+0xf1/0x1b0
[  712.165542][T25242]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  712.165568][T25242]  ? __pfx_netlink_sendmsg+0x10/0x10
[  712.165590][T25242]  ____sys_sendmsg+0xa68/0xad0
[  712.165618][T25242]  ? __might_fault+0xaf/0x130
[  712.165656][T25242]  ? __pfx_____sys_sendmsg+0x10/0x10
[  712.165695][T25242]  ? import_iovec+0x73/0xa0
[  712.165731][T25242]  ___sys_sendmsg+0x2a5/0x360
[  712.165758][T25242]  ? __lock_acquire+0x6b5/0x2cf0
[  712.165792][T25242]  ? __pfx____sys_sendmsg+0x10/0x10
[  712.165868][T25242]  ? __fget_files+0x2a/0x420
[  712.165892][T25242]  ? __fget_files+0x3a0/0x420
[  712.165926][T25242]  __x64_sys_sendmsg+0x1bd/0x2a0
[  712.165964][T25242]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  712.166003][T25242]  ? __pfx_ksys_write+0x10/0x10
[  712.166048][T25242]  do_syscall_64+0xe2/0xf80
[  712.166071][T25242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.166093][T25242]  ? trace_irq_disable+0x37/0x100
[  712.166114][T25242]  ? clear_bhb_loop+0x60/0xb0
[  712.166140][T25242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.166161][T25242] RIP: 0033:0x7fcc2879aeb9
[  712.166181][T25242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.166200][T25242] RSP: 002b:00007fcc296cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  712.166222][T25242] RAX: ffffffffffffffda RBX: 00007fcc28a15fa0 RCX: 00007fcc2879aeb9
[  712.166238][T25242] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003
[  712.166252][T25242] RBP: 00007fcc296cc090 R08: 0000000000000000 R09: 0000000000000000
[  712.166266][T25242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  712.166278][T25242] R13: 00007fcc28a16038 R14: 00007fcc28a15fa0 R15: 00007ffc65677658
[  712.166310][T25242]  </TASK>
[  712.551188][T25249] syzkaller1: entered promiscuous mode
[  712.557061][T25249] syzkaller1: entered allmulticast mode
[  712.821749][T25263] block nbd2: Unsupported socket: should be TCP or UNIX.
[  712.852061][T25263] netlink: 'syz.4.5599': attribute type 12 has an invalid length.
[  712.870791][T25263] netlink: 'syz.4.5599': attribute type 29 has an invalid length.
[  712.916396][T25263] netlink: 'syz.4.5599': attribute type 2 has an invalid length.
[  713.042673][T25272] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  713.406019][T25289] xt_cgroup: xt_cgroup: no path or classid specified
[  713.472721][T25285] delete_channel: no stack
[  714.295415][T25334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  714.356889][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  714.365109][    C0] lec:lec_tx_timeout: lec0
[  714.370175][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  714.483751][T25341] __nla_validate_parse: 24 callbacks suppressed
[  714.483773][T25341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5624'.
[  714.666909][T25353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5626'.
[  714.690941][T25353] netlink: 'syz.4.5626': attribute type 3 has an invalid length.
[  714.713610][T25353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5626'.
[  714.929744][T25363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5633'.
[  715.063386][T25375] --map-set only usable from mangle table
[  715.082811][T25376] --map-set only usable from mangle table
[  715.260955][T25386] bond13: option arp_all_targets: invalid value (18446744073709551613)
[  715.289041][T25386] bond13 (unregistering): Released all slaves
[  715.302813][T25395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5643'.
[  715.312019][T25395] netlink: 'syz.0.5643': attribute type 3 has an invalid length.
[  715.322819][T25395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5643'.
[  715.354293][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805a8f5400: rx timeout, send abort
[  715.393611][T25391] syzkaller0: entered promiscuous mode
[  715.409656][T25391] syzkaller0: entered allmulticast mode
[  715.486148][T25391] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5642'.
[  715.517391][T25407] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.5646'.
[  715.854506][    C1] vcan0: j1939_tp_rxtimer: 0xffff888057c82400: rx timeout, send abort
[  715.862966][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805a8f5400: abort rx timeout. Force session deactivation
[  715.990086][T25428] x_tables: unsorted underflow at hook 3
[  715.998238][T25428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5651'.
[  716.020797][T25432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5655'.
[  716.044340][T25432] netlink: 'syz.1.5655': attribute type 3 has an invalid length.
[  716.362898][    C1] vcan0: j1939_tp_rxtimer: 0xffff888057c82400: abort rx timeout. Force session deactivation
[  716.490927][T25457] geneve5: entered promiscuous mode
[  716.780002][T25478] netlink: 'syz.2.5668': attribute type 3 has an invalid length.
[  717.411752][T25513] netlink: 'syz.3.5679': attribute type 3 has an invalid length.
[  717.492204][T25515] erspan0: entered allmulticast mode
[  717.902481][T25535] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  718.444570][   T30] audit: type=1800 audit(1769608863.154:10): pid=25569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5696" name="memory.events" dev="tmpfs" ino=2375 res=0 errno=0
[  719.192805][T25611] FAULT_INJECTION: forcing a failure.
[  719.192805][T25611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  719.208674][T25611] CPU: 1 UID: 0 PID: 25611 Comm: syz.3.5710 Not tainted syzkaller #0 PREEMPT(full) 
[  719.208704][T25611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  719.208719][T25611] Call Trace:
[  719.208728][T25611]  <TASK>
[  719.208737][T25611]  dump_stack_lvl+0xe8/0x150
[  719.208771][T25611]  should_fail_ex+0x412/0x560
[  719.208803][T25611]  _copy_from_user+0x2d/0xb0
[  719.208837][T25611]  ___sys_sendmsg+0x1c6/0x360
[  719.208865][T25611]  ? __lock_acquire+0x6b5/0x2cf0
[  719.208900][T25611]  ? __pfx____sys_sendmsg+0x10/0x10
[  719.208967][T25611]  ? __fget_files+0x2a/0x420
[  719.208991][T25611]  ? __fget_files+0x3a0/0x420
[  719.209025][T25611]  __x64_sys_sendmsg+0x1bd/0x2a0
[  719.209058][T25611]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  719.209098][T25611]  ? __pfx_ksys_write+0x10/0x10
[  719.209142][T25611]  do_syscall_64+0xe2/0xf80
[  719.209166][T25611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.209187][T25611]  ? trace_irq_disable+0x37/0x100
[  719.209208][T25611]  ? clear_bhb_loop+0x60/0xb0
[  719.209235][T25611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.209256][T25611] RIP: 0033:0x7fcc2879aeb9
[  719.209276][T25611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.209295][T25611] RSP: 002b:00007fcc296cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  719.209318][T25611] RAX: ffffffffffffffda RBX: 00007fcc28a15fa0 RCX: 00007fcc2879aeb9
[  719.209335][T25611] RDX: 000000002000c0c4 RSI: 0000200000000180 RDI: 0000000000000003
[  719.209350][T25611] RBP: 00007fcc296cc090 R08: 0000000000000000 R09: 0000000000000000
[  719.209363][T25611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  719.209376][T25611] R13: 00007fcc28a16038 R14: 00007fcc28a15fa0 R15: 00007ffc65677658
[  719.209425][T25611]  </TASK>
[  719.720592][T25627] __nla_validate_parse: 14 callbacks suppressed
[  719.720618][T25627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5716'.
[  720.166218][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  720.174395][    C0] lec:lec_tx_timeout: lec0
[  720.183852][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  720.267293][T25646] veth1_vlan (unregistering): left allmulticast mode
[  720.373897][T25664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5731'.
[  721.375338][T25699] netlink: 'syz.3.5739': attribute type 10 has an invalid length.
[  721.592590][T25711] xt_connbytes: Forcing CT accounting to be enabled
[  721.643700][T25710] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5742'.
[  721.683379][T25710] block nbd0: reconnected socket
[  721.692438][ T5841] block nbd0: Receive control failed (result -32)
[  721.942157][T25720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  722.068157][T25724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.098796][T25728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5749'.
[  722.193139][T25724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.316486][T25724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.370091][T25738] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5753'.
[  722.402406][T25724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.580479][ T4592] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  722.588979][   T11] block nbd0: Possible stuck request ffff888025c18000: control (read@0,1024B). Runtime 270 seconds
[  722.603393][   T11] block nbd0: Possible stuck request ffff888025c18200: control (read@1024,1024B). Runtime 270 seconds
[  722.615565][T25744] block nbd0: Dead connection, failed to find a fallback
[  722.624547][   T11] block nbd0: Possible stuck request ffff888025c18400: control (read@2048,1024B). Runtime 270 seconds
[  722.636660][T25744] block nbd0: shutting down sockets
[  722.642990][T25744] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.654934][   T11] block nbd0: Possible stuck request ffff888025c18600: control (read@3072,1024B). Runtime 270 seconds
[  722.668079][T25744] Buffer I/O error on dev nbd0, logical block 1, async page read
[  722.676958][T25744] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.686625][T25744] Buffer I/O error on dev nbd0, logical block 0, async page read
[  722.694461][T25744] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.704765][T25744] Buffer I/O error on dev nbd0, logical block 3, async page read
[  722.712780][T25744] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.722457][T25744] Buffer I/O error on dev nbd0, logical block 2, async page read
[  722.732814][T16367] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.743894][T16367] Buffer I/O error on dev nbd0, logical block 0, async page read
[  722.752035][T16367] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.762283][T16367] Buffer I/O error on dev nbd0, logical block 1, async page read
[  722.770401][T16367] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.780492][T16367] Buffer I/O error on dev nbd0, logical block 2, async page read
[  722.789217][T16367] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.798803][T16367] Buffer I/O error on dev nbd0, logical block 3, async page read
[  722.810465][T16367] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.820685][T16367] Buffer I/O error on dev nbd0, logical block 0, async page read
[  722.828802][T16367] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  722.838569][T16367] Buffer I/O error on dev nbd0, logical block 1, async page read
[  722.848255][T16367] ldm_validate_partition_table(): Disk read failed.
[  722.855866][T16367] Dev nbd0: unable to read RDB block 0
[  722.862163][T25749] netlink: 'syz.4.5757': attribute type 4 has an invalid length.
[  722.863445][T16367]  nbd0: unable to read partition table
[  722.913804][ T5199] udevd[5199]: worker [16367] terminated by signal 9 (Killed)
[  722.921845][T25754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5758'.
[  722.922053][ T5199] udevd[5199]: worker [16367] failed while handling '/devices/virtual/block/nbd0'
[  722.949192][T25756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5758'.
[  722.959012][T25757] netlink: 'syz.4.5757': attribute type 4 has an invalid length.
[  722.987031][ T4592] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  723.005180][ T4592] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  723.068238][ T4592] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.089915][T16792] lo speed is unknown, defaulting to 1000
[  723.139483][T25747] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  723.157743][ T5921] lo speed is unknown, defaulting to 1000
[  723.163585][T16792] lo speed is unknown, defaulting to 1000
[  723.187791][T25749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5757'.
[  723.213830][   T25] block nbd1: Possible stuck request ffff888025c40000: control (read@0,4096B). Runtime 240 seconds
[  723.432037][T25779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5764'.
[  723.442546][T25777] FAULT_INJECTION: forcing a failure.
[  723.442546][T25777] name failslab, interval 1, probability 0, space 0, times 0
[  723.467443][T25779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5764'.
[  723.508259][T25777] CPU: 1 UID: 0 PID: 25777 Comm: syz.0.5763 Not tainted syzkaller #0 PREEMPT(full) 
[  723.508291][T25777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  723.508305][T25777] Call Trace:
[  723.508315][T25777]  <TASK>
[  723.508325][T25777]  dump_stack_lvl+0xe8/0x150
[  723.508360][T25777]  should_fail_ex+0x412/0x560
[  723.508393][T25777]  should_failslab+0xa8/0x100
[  723.508420][T25777]  kmem_cache_alloc_noprof+0x87/0x6e0
[  723.508469][T25777]  ? __netlink_lookup+0xc6/0x8b0
[  723.508494][T25777]  ? skb_clone+0x212/0x3a0
[  723.508529][T25777]  skb_clone+0x212/0x3a0
[  723.508562][T25777]  __netlink_deliver_tap+0x404/0x850
[  723.508597][T25777]  ? netlink_deliver_tap+0x2e/0x1b0
[  723.508621][T25777]  netlink_deliver_tap+0x19c/0x1b0
[  723.508644][T25777]  netlink_unicast+0x7e3/0x9b0
[  723.508687][T25777]  ? __pfx_netlink_unicast+0x10/0x10
[  723.508718][T25777]  ? __alloc_skb+0x193/0x390
[  723.508743][T25777]  ? netlink_sendmsg+0x650/0xb40
[  723.508763][T25777]  ? skb_put+0x11b/0x210
[  723.508793][T25777]  netlink_sendmsg+0x813/0xb40
[  723.508826][T25777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  723.508853][T25777]  ? aa_sock_msg_perm+0xf1/0x1b0
[  723.508881][T25777]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  723.508915][T25777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  723.508937][T25777]  ____sys_sendmsg+0xa68/0xad0
[  723.508964][T25777]  ? __might_fault+0xaf/0x130
[  723.509003][T25777]  ? __pfx_____sys_sendmsg+0x10/0x10
[  723.509042][T25777]  ? import_iovec+0x73/0xa0
[  723.509079][T25777]  ___sys_sendmsg+0x2a5/0x360
[  723.509106][T25777]  ? __lock_acquire+0x6b5/0x2cf0
[  723.509143][T25777]  ? __pfx____sys_sendmsg+0x10/0x10
[  723.509211][T25777]  ? __fget_files+0x2a/0x420
[  723.509242][T25777]  ? __fget_files+0x3a0/0x420
[  723.509278][T25777]  __x64_sys_sendmsg+0x1bd/0x2a0
[  723.509311][T25777]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  723.509351][T25777]  ? __pfx_ksys_write+0x10/0x10
[  723.509396][T25777]  do_syscall_64+0xe2/0xf80
[  723.509418][T25777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.509439][T25777]  ? trace_irq_disable+0x37/0x100
[  723.509460][T25777]  ? clear_bhb_loop+0x60/0xb0
[  723.509487][T25777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.509508][T25777] RIP: 0033:0x7fcb3a79aeb9
[  723.509527][T25777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  723.509546][T25777] RSP: 002b:00007fcb3b6dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  723.509570][T25777] RAX: ffffffffffffffda RBX: 00007fcb3aa15fa0 RCX: 00007fcb3a79aeb9
[  723.509586][T25777] RDX: 000000002000c0c4 RSI: 0000200000000180 RDI: 0000000000000003
[  723.509601][T25777] RBP: 00007fcb3b6dc090 R08: 0000000000000000 R09: 0000000000000000
[  723.509614][T25777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  723.509628][T25777] R13: 00007fcb3aa16038 R14: 00007fcb3aa15fa0 R15: 00007ffe09e15ef8
[  723.509663][T25777]  </TASK>
[  723.889546][T25779] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  723.892910][T25781] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  723.960033][T25792] atomic_op ffff888030339198 conn xmit_atomic 0000000000000000
[  724.150406][T25809] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  724.205704][T25807] netlink: 'syz.1.5773': attribute type 2 has an invalid length.
[  724.307473][T25812] macvtap2: entered allmulticast mode
[  724.312939][T25812] veth0_macvtap: entered allmulticast mode
[  724.481025][T25823] syzkaller0: entered promiscuous mode
[  724.489761][T25823] syzkaller0: entered allmulticast mode
[  724.518505][T25827] netlink: 'syz.0.5782': attribute type 1 has an invalid length.
[  724.559301][T25827] netlink: 'syz.0.5782': attribute type 1 has an invalid length.
[  724.581133][T25827] netlink: 'syz.0.5782': attribute type 8 has an invalid length.
[  724.730190][T25838] __nla_validate_parse: 4 callbacks suppressed
[  724.730214][T25838] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5785'.
[  724.815516][T25845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5787'.
[  724.864446][T25845] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5787'.
[  724.975502][T25858] xt_NFQUEUE: number of total queues is 0
[  725.043534][T25858] syzkaller0: entered promiscuous mode
[  725.078665][T25858] syzkaller0: entered allmulticast mode
[  725.108864][T25862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5792'.
[  725.129982][T25862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5792'.
[  725.148544][T25866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5793'.
[  725.206421][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  725.214589][    C0] lec:lec_tx_timeout: lec0
[  725.220311][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  725.292061][T25871] FAULT_INJECTION: forcing a failure.
[  725.292061][T25871] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  725.311843][T25873] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5796'.
[  725.346376][T25871] CPU: 0 UID: 0 PID: 25871 Comm: syz.2.5795 Not tainted syzkaller #0 PREEMPT(full) 
[  725.346407][T25871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  725.346421][T25871] Call Trace:
[  725.346431][T25871]  <TASK>
[  725.346466][T25871]  dump_stack_lvl+0xe8/0x150
[  725.346501][T25871]  should_fail_ex+0x412/0x560
[  725.346534][T25871]  _copy_from_user+0x2d/0xb0
[  725.346569][T25871]  kstrtouint_from_user+0xd6/0x180
[  725.346600][T25871]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  725.346647][T25871]  proc_fail_nth_write+0x8e/0x210
[  725.346680][T25871]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  725.346717][T25871]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  725.346758][T25871]  vfs_write+0x29a/0xb90
[  725.346799][T25871]  ? __pfx_vfs_write+0x10/0x10
[  725.346833][T25871]  ? __fget_files+0x2a/0x420
[  725.346862][T25871]  ? __fget_files+0x3a0/0x420
[  725.346885][T25871]  ? __fget_files+0x2a/0x420
[  725.346918][T25871]  ksys_write+0x150/0x270
[  725.346952][T25871]  ? __pfx_ksys_write+0x10/0x10
[  725.346996][T25871]  do_syscall_64+0xe2/0xf80
[  725.347018][T25871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.347039][T25871]  ? trace_irq_disable+0x37/0x100
[  725.347060][T25871]  ? clear_bhb_loop+0x60/0xb0
[  725.347087][T25871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.347108][T25871] RIP: 0033:0x7ff5feb5b78e
[  725.347128][T25871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  725.347148][T25871] RSP: 002b:00007ff5ffa57fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  725.347173][T25871] RAX: ffffffffffffffda RBX: 00007ff5ffa586c0 RCX: 00007ff5feb5b78e
[  725.347189][T25871] RDX: 0000000000000001 RSI: 00007ff5ffa580a0 RDI: 0000000000000004
[  725.347203][T25871] RBP: 00007ff5ffa58090 R08: 0000000000000000 R09: 0000000000000000
[  725.347217][T25871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.347231][T25871] R13: 00007ff5fee16038 R14: 00007ff5fee15fa0 R15: 00007ffcc8b62f48
[  725.347269][T25871]  </TASK>
[  725.574468][T25877] netlink: zone id is out of range
[  725.579983][T25877] netlink: get zone limit has 8 unknown bytes
[  725.658727][T25883] x_tables: duplicate entry at hook 3
[  725.711775][T25885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5800'.
[  725.774474][T25892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5800'.
[  725.854025][T25893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5803'.
[  725.937187][T25893] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  726.450977][T25939] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  726.513855][T25939] syzkaller0: entered promiscuous mode
[  726.520460][T25939] syzkaller0: entered allmulticast mode
[  726.843585][T25962] syzkaller1: entered promiscuous mode
[  726.855120][T25962] syzkaller1: entered allmulticast mode
[  727.105976][T25976] lo speed is unknown, defaulting to 1000
[  727.205763][T25986] netlink: 'syz.1.5832': attribute type 8 has an invalid length.
[  727.370802][T25976] wg1 speed is unknown, defaulting to 1000
[  727.686587][T26005] tc_dump_action: action bad kind
[  728.407893][T26036] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  728.730385][T26068] netlink: 'syz.1.5855': attribute type 1 has an invalid length.
[  728.748224][T26068] netlink: 'syz.1.5855': attribute type 3 has an invalid length.
[  728.788640][T26068] syzkaller0: entered promiscuous mode
[  728.814470][T26071] xt_hashlimit: size too large, truncated to 1048576
[  728.830344][T26068] syzkaller0: entered allmulticast mode
[  728.927234][T26076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  728.950147][T26078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.354037][T26107] IPv6: sit1: Disabled Multicast RS
[  729.381568][T26107] sit1: entered allmulticast mode
[  729.478918][T26112] netlink: 'syz.2.5866': attribute type 1 has an invalid length.
[  729.634445][T26119] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  729.889259][T26135] xt_hashlimit: size too large, truncated to 1048576
[  730.215410][T26139] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20004
[  730.236248][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  730.244455][    C0] lec:lec_tx_timeout: lec0
[  730.250574][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  730.258360][T26152] __nla_validate_parse: 15 callbacks suppressed
[  730.258382][T26152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5877'.
[  730.497809][T26162] netlink: 'syz.0.5881': attribute type 1 has an invalid length.
[  730.580547][T26162] bond12: entered promiscuous mode
[  730.585852][T26162] bond12: entered allmulticast mode
[  730.596902][T26162] 8021q: adding VLAN 0 to HW filter on device bond12
[  730.674218][T26178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5885'.
[  730.871514][T26191] xt_hashlimit: size too large, truncated to 1048576
[  730.914393][T26189] tipc: Failed to remove unknown binding: 66,0,0/0:4101900953/4101900954
[  730.924572][T26189] tipc: Failed to remove unknown binding: 66,0,0/0:4101900953/4101900954
[  731.080189][T26200] ipt_REJECT: ECHOREPLY no longer supported.
[  731.196813][T26208] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5894'.
[  731.255971][T26212] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5895'.
[  731.283028][T26203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5892'.
[  731.502068][T26219] netlink: 'syz.2.5896': attribute type 33 has an invalid length.
[  731.547511][T26219] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5896'.
[  731.633816][T26219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5896'.
[  731.727815][T26233] xt_CONNSECMARK: invalid mode: 0
[  731.863088][T26238] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5901'.
[  732.082487][T26250] xt_hashlimit: size too large, truncated to 1048576
[  732.245638][T26262] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5910'.
[  732.323221][T26264] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  732.708537][T26285] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5918'.
[  732.766290][T26286] macsec3: entered promiscuous mode
[  732.771812][T26286] bridge0: entered promiscuous mode
[  732.778306][T26286] macsec3: entered allmulticast mode
[  732.783821][T26286] bridge0: entered allmulticast mode
[  732.791958][T26286] bridge0: port 3(macsec3) entered blocking state
[  732.799602][T26286] bridge0: port 3(macsec3) entered disabled state
[  732.817521][T26289] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20002
[  732.835076][T26286] bridge0: left allmulticast mode
[  732.841368][T26286] bridge0: left promiscuous mode
[  733.215160][T26309] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  733.270948][T26309] bond14 (unregistering): Released all slaves
[  733.280482][T26317] xt_hashlimit: size too large, truncated to 1048576
[  733.545095][T26327] netlink: 'syz.3.5930': attribute type 1 has an invalid length.
[  733.613650][T26327] 8021q: adding VLAN 0 to HW filter on device bond14
[  733.622379][T26326] bond14: entered allmulticast mode
[  735.269088][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  735.277183][    C0] lec:lec_tx_timeout: lec0
[  735.282110][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  736.300870][T26356] syzkaller1: entered promiscuous mode
[  736.311376][T26356] syzkaller1: entered allmulticast mode
[  736.339804][T26359] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  736.392795][T26359] __nla_validate_parse: 6 callbacks suppressed
[  736.392816][T26359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5939'.
[  736.472500][T26359] bond13: entered promiscuous mode
[  736.496336][T26359] bond13: entered allmulticast mode
[  736.529293][T26359] 8021q: adding VLAN 0 to HW filter on device bond13
[  736.566929][T26370] macvlan3: entered promiscuous mode
[  736.577494][T26370] macvlan3: entered allmulticast mode
[  736.584735][T26370] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  736.899229][T26394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5950'.
[  737.032938][T26405] xt_hashlimit: size too large, truncated to 1048576
[  737.057719][T26407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  737.140613][T26411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5954'.
[  737.199759][T26411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5954'.
[  737.227204][T26415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5954'.
[  737.261336][T26416] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5955'.
[  737.445665][T26419] bond14: entered promiscuous mode
[  737.477750][T26419] macvlan3: entered promiscuous mode
[  737.483221][T26419] macvlan3: entered allmulticast mode
[  737.498283][T26419] bond14: (slave macvlan3): Opening slave failed
[  737.542872][T26427] veth5: entered allmulticast mode
[  738.018652][T26456] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5965'.
[  738.047143][T26460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5967'.
[  738.151929][T26464] xt_hashlimit: size too large, truncated to 1048576
[  738.364508][T26473] bond15: entered promiscuous mode
[  738.451251][T26475] macvlan3: entered promiscuous mode
[  738.476394][T26475] macvlan3: entered allmulticast mode
[  738.502355][T26475] bond15: (slave macvlan3): Opening slave failed
[  738.539304][T26481] ipt_REJECT: TCP_RESET invalid for non-tcp
[  738.714609][T26488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5976'.
[  738.737516][T26489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5976'.
[  739.089970][T26511] xt_hashlimit: size too large, truncated to 1048576
[  739.213579][T26514] bond15: entered promiscuous mode
[  739.263911][T26523] macvlan0: entered promiscuous mode
[  739.285744][T26523] macvlan0: entered allmulticast mode
[  739.314168][T26523] bond15: (slave macvlan0): Opening slave failed
[  739.480092][T26530] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  739.679242][T26536] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  739.690196][T26536] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  739.700127][T26536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  739.708643][T26536] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  739.716696][T26536] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  739.737242][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  739.744645][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  739.752468][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  739.760591][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  739.769689][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  740.021450][T26549] ip6gre2: entered promiscuous mode
[  740.041568][T26549] ip6gre2: entered allmulticast mode
[  740.082156][T26533] lo speed is unknown, defaulting to 1000
[  740.296346][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  740.304433][    C0] lec:lec_tx_timeout: lec0
[  740.309121][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  740.545823][T26568] xt_hashlimit: size too large, truncated to 1048576
[  740.555205][T26569] IPv6: NLM_F_CREATE should be specified when creating new route
[  740.610076][T26569] syzkaller0: entered promiscuous mode
[  740.648854][T26569] syzkaller0: entered allmulticast mode
[  740.927771][T26533] wg1 speed is unknown, defaulting to 1000
[  741.125162][T26580] bond15: entered promiscuous mode
[  741.144592][T26580] macvlan3: entered promiscuous mode
[  741.150272][T26580] macvlan3: entered allmulticast mode
[  741.158828][T26580] bond15: (slave macvlan3): Opening slave failed
[  741.510254][T26533] chnl_net:caif_netlink_parms(): no params data found
[  741.631097][T26533] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.638847][T26533] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.646101][T26533] bridge_slave_0: entered allmulticast mode
[  741.654130][T26533] bridge_slave_0: entered promiscuous mode
[  741.662912][T26533] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.670271][T26533] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.678256][T26533] bridge_slave_1: entered allmulticast mode
[  741.685531][T26533] bridge_slave_1: entered promiscuous mode
[  741.717508][T26533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  741.729528][T26533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  741.761831][T26533] team0: Port device team_slave_0 added
[  741.771335][T26533] team0: Port device team_slave_1 added
[  741.800149][T26533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  741.807357][T26533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  741.834008][T26533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  741.846713][   T53] Bluetooth: hci0: command tx timeout
[  741.853471][T26533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  741.861090][T26533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  741.887675][T26533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  741.932880][T26533] hsr_slave_0: entered promiscuous mode
[  741.939530][T26533] hsr_slave_1: entered promiscuous mode
[  741.945816][T26533] debugfs: 'hsr0' already exists in 'hsr'
[  741.952287][T26533] Cannot create hsr debugfs directory
[  742.074735][T26533] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.145073][T26533] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.201885][T26533] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.242012][T26533] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.377934][T26533] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  742.389403][T26533] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  742.400355][T26533] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  742.413283][T26533] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  742.445459][T26533] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.452655][T26533] bridge0: port 2(bridge_slave_1) entered forwarding state
[  742.460232][T26533] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.467396][T26533] bridge0: port 1(bridge_slave_0) entered forwarding state
[  742.527780][T26533] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.544015][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.553936][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.581743][T26533] 8021q: adding VLAN 0 to HW filter on device team0
[  742.594018][T11181] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.601199][T11181] bridge0: port 1(bridge_slave_0) entered forwarding state
[  742.616686][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.623839][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  742.823044][T26533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  742.872422][T26533] veth0_vlan: entered promiscuous mode
[  742.885239][T26533] veth1_vlan: entered promiscuous mode
[  742.921755][T26533] veth0_macvtap: entered promiscuous mode
[  742.931727][T26533] veth1_macvtap: entered promiscuous mode
[  742.950795][T26533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  742.964753][T26533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  742.981952][T11181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  742.992214][T11181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.006010][T11181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.016988][T11181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.089174][ T4592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.097640][ T4592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.137936][T10911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.145893][T10911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.204472][T26617] __nla_validate_parse: 10 callbacks suppressed
[  743.204487][T26617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'.
[  743.229318][T26617] ipvlan2: entered allmulticast mode
[  743.235059][T26617] batadv_slave_1: entered allmulticast mode
[  743.927365][   T53] Bluetooth: hci0: command tx timeout
[  745.316641][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  745.324690][    C0] lec:lec_tx_timeout: lec0
[  745.329351][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  746.007069][   T53] Bluetooth: hci0: command tx timeout
[  748.086620][   T53] Bluetooth: hci0: command tx timeout
[  750.336353][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  750.344386][    C0] lec:lec_tx_timeout: lec0
[  750.349255][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  753.287302][   T25] block nbd1: Possible stuck request ffff888025c40000: control (read@0,4096B). Runtime 270 seconds
[  755.356291][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  755.364471][    C0] lec:lec_tx_timeout: lec0
[  755.369346][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  760.376995][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  760.385209][    C0] lec:lec_tx_timeout: lec0
[  760.390338][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  766.726280][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6330 ms
[  766.734470][    C0] lec:lec_tx_timeout: lec0
[  766.740177][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  769.802558][T26632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  770.088885][T26536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  770.109210][T26536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  770.122387][T26536] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  770.134242][T26536] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  770.142129][T26536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  770.270858][T26645] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6018'.
[  770.292735][T26640] lo speed is unknown, defaulting to 1000
[  770.629779][ T8984] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  770.659871][ T8984] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  770.688912][ T8984] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  770.711365][ T8984] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 58650 - 0
[  771.118460][ T8984] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  771.159177][ T8984] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  771.198439][ T8984] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.243022][ T8984] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 58650 - 0
[  771.398214][T26640] wg1 speed is unknown, defaulting to 1000
[  771.500905][ T8984] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  771.521032][ T8984] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  771.541638][ T8984] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.563543][ T8984] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 58650 - 0
[  771.662302][ T8984] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  771.684959][ T8984] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  771.707033][ T8984] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.735279][ T8984] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 58650 - 0
[  772.269361][T26536] Bluetooth: hci5: command tx timeout
[  772.340331][ T8984] bridge_slave_1: left allmulticast mode
[  772.346107][ T8984] bridge_slave_1: left promiscuous mode
[  772.367936][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.447603][ T8984] bridge_slave_0: left allmulticast mode
[  772.453347][ T8984] bridge_slave_0: left promiscuous mode
[  772.459966][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.486207][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  772.494327][    C0] lec:lec_tx_timeout: lec0
[  772.499658][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  772.704738][T26701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6036'.
[  772.952710][    C0] vcan0: j1939_tp_rxtimer: 0xffff88808deb4400: rx timeout, send abort
[  773.233553][ T8984] gretap0 (unregistering): left promiscuous mode
[  773.419671][ T8984] dvmrp0 (unregistering): left allmulticast mode
[  773.452845][    C0] vcan0: j1939_tp_rxtimer: 0xffff88808deb4800: rx timeout, send abort
[  773.461281][    C0] vcan0: j1939_tp_rxtimer: 0xffff88808deb4400: abort rx timeout. Force session deactivation
[  773.700492][ T8984] bond6 (unregistering): (slave bridge1): Releasing backup interface
[  773.709149][ T8984] bridge1 (unregistering): left promiscuous mode
[  773.871920][ T8984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  773.884934][ T8984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.916110][ T8984] bond0 (unregistering): Released all slaves
[  773.961193][    C0] vcan0: j1939_tp_rxtimer: 0xffff88808deb4800: abort rx timeout. Force session deactivation
[  774.173807][ T8984] bond1 (unregistering): Released all slaves
[  774.336071][ T8984] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface
[  774.338413][T26536] Bluetooth: hci5: command tx timeout
[  774.348961][ T8984] veth0_to_bond: left promiscuous mode
[  774.356081][ T8984] veth0_to_bond: left allmulticast mode
[  774.364365][ T8984] bond2 (unregistering): Released all slaves
[  774.380241][ T8984] bond3 (unregistering): Released all slaves
[  774.394972][ T8984] bond4 (unregistering): Released all slaves
[  774.416810][ T8984] bond5 (unregistering): Released all slaves
[  774.581931][ T8984] bond6 (unregistering): Released all slaves
[  774.596663][ T8984] bond7 (unregistering): Released all slaves
[  774.747050][ T8984] bond8 (unregistering): Released all slaves
[  774.909676][ T8984] bond9 (unregistering): Released all slaves
[  774.924955][ T8984] bond10 (unregistering): Released all slaves
[  774.940427][ T8984] bond11 (unregistering): Released all slaves
[  774.954893][ T8984] bond12 (unregistering): Released all slaves
[  774.974156][ T8984] bond13 (unregistering): Released all slaves
[  774.991784][ T8984] bond14 (unregistering): Released all slaves
[  775.024361][ T8984] bond15 (unregistering): Released all slaves
[  775.039075][T26697] 8021q: VLANs not supported on dvmrp1
[  775.148911][T26640] chnl_net:caif_netlink_parms(): no params data found
[  775.192411][ T8984] tipc: Disabling bearer <udp:syz2>
[  775.207807][ T8984] tipc: Left network mode
[  776.069625][T26640] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.091872][T26640] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.100797][T26764] netlink: 'syz.3.6060': attribute type 6 has an invalid length.
[  776.121484][T26640] bridge_slave_0: entered allmulticast mode
[  776.130639][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6060'.
[  776.150825][T26640] bridge_slave_0: entered promiscuous mode
[  776.178829][T26762] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2
[  776.193827][T26640] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.206051][T26762] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file1
[  776.216480][T26640] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.239712][T26640] bridge_slave_1: entered allmulticast mode
[  776.251278][T26640] bridge_slave_1: entered promiscuous mode
[  776.409935][T26536] Bluetooth: hci5: command tx timeout
[  776.499260][T26640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  776.561161][T26640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  776.719089][T26788] netlink: 'syz.2.6067': attribute type 1 has an invalid length.
[  776.791452][T26640] team0: Port device team_slave_0 added
[  776.825198][T26640] team0: Port device team_slave_1 added
[  776.987053][T26640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  776.994119][T26640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  777.089226][T26798] netlink: 'syz.0.6070': attribute type 6 has an invalid length.
[  777.096538][T26640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  777.137319][T26640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  777.144394][T26640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  777.183206][T26640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  777.242549][ T8984] hsr_slave_0: left promiscuous mode
[  777.257588][ T8984] hsr_slave_1: left promiscuous mode
[  777.263779][ T8984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  777.274472][ T8984] batman_adv: batadv0: Removing interface: batadv_slave_0
[  777.352972][ T8984] veth0_macvtap: left allmulticast mode
[  777.359130][ T8984] vlan0: left allmulticast mode
[  777.367668][ T8984] veth0_vlan: left allmulticast mode
[  777.376737][ T8984] vlan0: left promiscuous mode
[  777.389768][ T8984] veth1_macvtap: left promiscuous mode
[  777.408833][ T8984] veth0_macvtap: left promiscuous mode
[  777.414617][ T8984] veth1_vlan: left promiscuous mode
[  777.431261][ T8984] veth0_vlan: left promiscuous mode
[  778.250298][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  778.258398][    C0] lec:lec_tx_timeout: lec0
[  778.263505][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  778.500641][T26536] Bluetooth: hci5: command tx timeout
[  778.744301][ T8984] team0 (unregistering): Port device team_slave_1 removed
[  778.798424][ T8984] team0 (unregistering): Port device team_slave_0 removed
[  779.182973][T11181] smc: removing ib device syz0
[  779.593487][T26828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6083'.
[  779.811083][T26640] hsr_slave_0: entered promiscuous mode
[  779.848555][T26640] hsr_slave_1: entered promiscuous mode
[  779.871390][T26640] debugfs: 'hsr0' already exists in 'hsr'
[  779.893796][T26640] Cannot create hsr debugfs directory
[  779.917139][T26842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6086'.
[  780.063296][T26830] syzkaller0: entered promiscuous mode
[  780.071781][T26830] syzkaller0: entered allmulticast mode
[  783.022488][T26864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6094'.
[  783.032136][T26864] bridge_slave_0: default FDB implementation only supports local addresses
[  783.276260][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  783.284380][    C0] lec:lec_tx_timeout: lec0
[  783.289197][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  783.368956][   T25] block nbd1: Possible stuck request ffff888025c40000: control (read@0,4096B). Runtime 300 seconds
[  783.471835][T26882] syzkaller0: entered promiscuous mode
[  783.491039][T26882] syzkaller0: entered allmulticast mode
[  783.643709][T26889] tipc: Started in network mode
[  783.666273][T26889] tipc: Node identity 66b9f9d7eb25, cluster identity 4711
[  783.697604][T26889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  783.735697][T26880] tipc: Resetting bearer <eth:syzkaller0>
[  783.791797][T26880] tipc: Disabling bearer <eth:syzkaller0>
[  783.813895][T26903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  783.934645][ T8984] IPVS: stop unused estimator thread 0...
[  784.329695][T26925] macvtap1: entered promiscuous mode
[  784.354768][T26925] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  784.689098][T26640] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  784.749572][T26640] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  784.772485][T26947] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6120'.
[  784.795470][T26640] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  784.848244][T26640] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  785.052065][T26955] syzkaller0: entered promiscuous mode
[  785.070520][T26955] syzkaller0: entered allmulticast mode
[  788.067480][T26975] syzkaller0: entered promiscuous mode
[  788.073007][T26975] syzkaller0: entered allmulticast mode
[  788.282837][T27025] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6133'.
[  788.301829][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  788.309982][    C0] lec:lec_tx_timeout: lec0
[  788.314995][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  791.835681][T26640] 8021q: adding VLAN 0 to HW filter on device bond0
[  791.897133][T26640] 8021q: adding VLAN 0 to HW filter on device team0
[  791.951351][T11178] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.958606][T11178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  791.999154][T11178] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.006408][T11178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  792.071500][T27088] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6161'.
[  792.473994][T27110] xt_hashlimit: max too large, truncated to 1048576
[  792.537456][T26640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  793.171516][T26640] veth0_vlan: entered promiscuous mode
[  793.195860][T26640] veth1_vlan: entered promiscuous mode
[  793.260051][T26640] veth0_macvtap: entered promiscuous mode
[  793.272447][T26640] veth1_macvtap: entered promiscuous mode
[  793.319325][T26640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  793.326810][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  793.326845][    C0] lec:lec_tx_timeout: lec0
[  793.339544][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  793.365222][T26640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  793.396094][ T6443] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.409925][T27152] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode
[  793.430253][ T6443] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.440635][ T6443] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.460782][ T6443] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.664570][ T8984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.690485][ T8984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.758373][ T8236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.781626][ T8236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  794.240564][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  794.253344][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  794.262210][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  794.272195][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  794.284090][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  794.350218][T27181] wg1 speed is unknown, defaulting to 1000
[  794.367811][T27185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6195'.
[  794.413525][T27186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  794.763969][T27181] chnl_net:caif_netlink_parms(): no params data found
[  794.952102][T27181] bridge0: port 1(bridge_slave_0) entered blocking state
[  794.960483][T27181] bridge0: port 1(bridge_slave_0) entered disabled state
[  794.968558][T27181] bridge_slave_0: entered allmulticast mode
[  794.977162][T27181] bridge_slave_0: entered promiscuous mode
[  794.988879][T27181] bridge0: port 2(bridge_slave_1) entered blocking state
[  794.997595][T27181] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.005952][T27181] bridge_slave_1: entered allmulticast mode
[  795.014023][T27181] bridge_slave_1: entered promiscuous mode
[  795.055528][T27181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  795.070681][T27181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  795.144250][T27212] netlink: 566 bytes leftover after parsing attributes in process `syz.4.6206'.
[  795.158411][T27181] team0: Port device team_slave_0 added
[  795.181770][T27181] team0: Port device team_slave_1 added
[  795.291786][T27181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  795.304523][T27181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  795.346466][T27181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  795.399866][T27181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  795.412634][T27181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  795.474434][T27181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  795.620245][T27181] hsr_slave_0: entered promiscuous mode
[  795.647545][T27181] hsr_slave_1: entered promiscuous mode
[  795.666050][T27181] debugfs: 'hsr0' already exists in 'hsr'
[  795.674497][T27181] Cannot create hsr debugfs directory
[  796.173249][T27181] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  796.336323][   T53] Bluetooth: hci4: command tx timeout
[  796.493505][T27181] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  796.518893][T27269] batadv_slave_1: entered promiscuous mode
[  796.538998][T27269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6234'.
[  796.784391][T27181] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  796.875961][T27268] batadv_slave_1: left promiscuous mode
[  797.292596][T27181] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  797.450109][T27181] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  797.737458][T27311] syzkaller0: entered promiscuous mode
[  797.752610][T27311] syzkaller0: entered allmulticast mode
[  797.854478][T27181] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  797.881580][T27181] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  797.907011][T27181] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  797.931678][T27181] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  798.121524][T27338] tap0: tun_chr_ioctl cmd 1074025677
[  798.146692][T27338] tap0: linktype set to 820
[  798.214634][T27181] 8021q: adding VLAN 0 to HW filter on device bond0
[  798.255680][T27181] 8021q: adding VLAN 0 to HW filter on device team0
[  798.291948][T11177] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.299227][T11177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  798.335080][T11177] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.342369][T11177] bridge0: port 2(bridge_slave_1) entered forwarding state
[  798.350404][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  798.358498][    C0] lec:lec_tx_timeout: lec0
[  798.363530][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  798.407533][T26536] Bluetooth: hci4: command tx timeout
[  798.947299][T27376] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6273'.
[  799.005472][T27181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  799.163286][T27181] veth0_vlan: entered promiscuous mode
[  799.199654][T27181] veth1_vlan: entered promiscuous mode
[  799.270100][T27181] veth0_macvtap: entered promiscuous mode
[  799.294816][T27181] veth1_macvtap: entered promiscuous mode
[  799.338284][T27181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  799.389866][T27181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  799.425717][ T9270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  799.453218][ T9270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  799.481445][ T9270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  799.506819][ T9270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  799.588300][T27403] xt_hashlimit: max too large, truncated to 1048576
[  799.707514][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.728684][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.805835][ T9270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.817824][ T9270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.289266][T27426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6296'.
[  800.393857][T18824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  800.405115][T18824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  800.419238][T18824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  800.429468][T18824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  800.440259][T18824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  800.486665][T26536] Bluetooth: hci4: command 0x040f tx timeout
[  800.709695][T27449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6301'.
[  800.722999][T27432] wg1 speed is unknown, defaulting to 1000
[  800.727024][T27449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6301'.
[  800.812595][T27449] erspan0: entered promiscuous mode
[  800.827703][T27449] gretap0: entered promiscuous mode
[  800.833911][T27449] debugfs: 'hsr1' already exists in 'hsr'
[  800.874287][T27449] Cannot create hsr debugfs directory
[  800.947682][T27457] siw: device registration error -23
[  801.085813][T27463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6307'.
[  801.091540][T27464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6307'.
[  801.135334][T27467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6309'.
[  801.199130][T27463] bond13 (unregistering): Released all slaves
[  801.278275][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6310'.
[  801.316838][T27477] openvswitch: netlink: Flow key attr not present in new flow.
[  801.339020][T27464] bond13 (unregistering): Released all slaves
[  801.525281][T27486] bond2: entered promiscuous mode
[  801.542036][T27484] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6313'.
[  801.583946][T27486] macvlan2: entered promiscuous mode
[  801.595067][T27486] macvlan2: entered allmulticast mode
[  801.603262][T27486] bond2: (slave macvlan2): Opening slave failed
[  801.783306][T27496] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  801.795446][T27506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6319'.
[  801.800042][T27507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6318'.
[  801.894249][T27432] chnl_net:caif_netlink_parms(): no params data found
[  802.009216][T27512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  802.051591][T27514] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.059589][T27514] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.318022][T27432] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.325307][T27432] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.356939][T27432] bridge_slave_0: entered allmulticast mode
[  802.394092][T27432] bridge_slave_0: entered promiscuous mode
[  802.403401][T27432] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.418736][T27432] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.445386][T27432] bridge_slave_1: entered allmulticast mode
[  802.468636][T27432] bridge_slave_1: entered promiscuous mode
[  802.472950][T27536] xt_hashlimit: size too large, truncated to 1048576
[  802.496569][   T53] Bluetooth: hci1: command tx timeout
[  802.529650][T27534] bond13: option packets_per_slave: invalid value (18446744073709551615)
[  802.538797][T27534] bond13: option packets_per_slave: allowed values 0 - 65535
[  802.549817][T27534] bond13 (unregistering): Released all slaves
[  802.567129][   T53] Bluetooth: hci4: command 0x040f tx timeout
[  802.608031][T27541] netlink: 'syz.4.6331': attribute type 7 has an invalid length.
[  802.652882][T27432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  802.670102][T27432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.728510][T27432] team0: Port device team_slave_0 added
[  802.744086][T27432] team0: Port device team_slave_1 added
[  802.955036][T27432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  802.975558][T27432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  803.043404][T27552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  803.065405][T27432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  803.102961][T27432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  803.114477][T27432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  803.151234][T27432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  803.319339][T27432] hsr_slave_0: entered promiscuous mode
[  803.326779][T27432] hsr_slave_1: entered promiscuous mode
[  803.333348][T27432] debugfs: 'hsr0' already exists in 'hsr'
[  803.339506][T27432] Cannot create hsr debugfs directory
[  803.376545][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  803.384714][    C0] lec:lec_tx_timeout: lec0
[  803.389468][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  803.399759][T27565] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.407564][T27565] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.644422][T27576] xt_hashlimit: size too large, truncated to 1048576
[  803.692166][T27574] team0: Device ip6gre1 is of different type
[  803.782803][T27580] netlink: 'syz.2.6346': attribute type 2 has an invalid length.
[  803.819352][T27580] netlink: 'syz.2.6346': attribute type 8 has an invalid length.
[  803.881315][T27432] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.029225][T27432] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.054998][T27587] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  804.128052][T27432] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.249465][T27432] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.320497][T27599] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.328330][T27599] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.381711][T27601] bond1: entered promiscuous mode
[  804.423328][T27605] macvlan2: entered promiscuous mode
[  804.437059][T27605] macvlan2: entered allmulticast mode
[  804.447475][T27605] bond1: (slave macvlan2): Opening slave failed
[  804.568986][   T53] Bluetooth: hci1: command tx timeout
[  804.646635][   T53] Bluetooth: hci4: command 0x040f tx timeout
[  804.714832][T27616] siw: device registration error -23
[  804.794733][T27432] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  804.835130][T27432] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  804.865368][T27432] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  804.924902][T27432] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  805.160812][T27432] 8021q: adding VLAN 0 to HW filter on device bond0
[  805.192746][T27432] 8021q: adding VLAN 0 to HW filter on device team0
[  805.245070][T10911] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.252359][T10911] bridge0: port 1(bridge_slave_0) entered forwarding state
[  805.295085][T10911] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.302394][T10911] bridge0: port 2(bridge_slave_1) entered forwarding state
[  805.363735][T27651] __nla_validate_parse: 15 callbacks suppressed
[  805.363758][T27651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6373'.
[  805.383527][T27651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6373'.
[  805.399223][T27653] siw: device registration error -23
[  805.413244][T27651] erspan0: entered promiscuous mode
[  805.420533][T27651] gretap0: entered promiscuous mode
[  805.429032][T27651] debugfs: 'hsr1' already exists in 'hsr'
[  805.434923][T27651] Cannot create hsr debugfs directory
[  805.667599][T27662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6377'.
[  805.917633][T27432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  806.002717][T27432] veth0_vlan: entered promiscuous mode
[  806.032369][T27432] veth1_vlan: entered promiscuous mode
[  806.104267][T27432] veth0_macvtap: entered promiscuous mode
[  806.114696][T27682] siw: device registration error -23
[  806.133543][T27432] veth1_macvtap: entered promiscuous mode
[  806.183279][T27432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  806.208415][T27432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  806.235766][T11178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  806.258234][T11178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  806.287077][T11178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  806.313349][T11178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  806.333909][T27692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6386'.
[  806.395062][T27692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6386'.
[  806.549538][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  806.571992][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  806.649597][T26536] Bluetooth: hci1: command tx timeout
[  806.656914][ T9270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  806.664798][ T9270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  806.867878][T27706] bond2: entered promiscuous mode
[  806.883397][T27713] macvlan2: entered promiscuous mode
[  806.890339][T27713] macvlan2: entered allmulticast mode
[  806.897311][T27713] bond2: (slave macvlan2): Opening slave failed
[  806.910796][T27715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6394'.
[  806.920729][T27715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6394'.
[  806.962411][T27717] netlink: 'syz.1.6394': attribute type 1 has an invalid length.
[  807.116578][T27719] siw: device registration error -23
[  807.156013][T27721] xt_hashlimit: size too large, truncated to 1048576
[  807.356759][T27729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6399'.
[  807.360321][T18824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  807.387411][T18824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  807.398301][T18824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  807.408292][T18824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  807.416080][T18824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  807.563300][T27726] wg1 speed is unknown, defaulting to 1000
[  807.600148][T27735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6402'.
[  807.650219][T27735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6402'.
[  807.733347][T27735] erspan0: entered promiscuous mode
[  807.755817][T27735] gretap0: entered promiscuous mode
[  807.767715][T27735] debugfs: 'hsr1' already exists in 'hsr'
[  807.780670][T27735] Cannot create hsr debugfs directory
[  807.972337][T27750] siw: device registration error -23
[  807.998810][T27743] bond3: entered promiscuous mode
[  808.033660][T27753] sctp: [Deprecated]: syz.2.6409 (pid 27753) Use of int in maxseg socket option.
[  808.033660][T27753] Use struct sctp_assoc_value instead
[  808.037083][T27748] macvlan2: entered promiscuous mode
[  808.066497][T27748] macvlan2: entered allmulticast mode
[  808.073648][T27748] bond3: (slave macvlan2): Opening slave failed
[  808.110435][T27757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  808.202319][T27757] batman_adv: batadv0: Removing interface: batadv_slave_0
[  808.615989][T27780] xt_hashlimit: size too large, truncated to 1048576
[  808.625706][T27726] chnl_net:caif_netlink_parms(): no params data found
[  808.729318][T26536] Bluetooth: hci1: command 0x0419 tx timeout
[  808.760739][T27785] siw: device registration error -23
[  808.889129][T27791] macvlan2: entered promiscuous mode
[  808.906541][T27791] macvlan2: entered allmulticast mode
[  808.956468][T27726] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.963815][T27726] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.996558][T27726] bridge_slave_0: entered allmulticast mode
[  809.004562][T27726] bridge_slave_0: entered promiscuous mode
[  809.030183][T27726] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.048016][T27726] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.055388][T27726] bridge_slave_1: entered allmulticast mode
[  809.084504][T27726] bridge_slave_1: entered promiscuous mode
[  809.190904][T27726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  809.240223][T27726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  809.338425][T27726] team0: Port device team_slave_0 added
[  809.359575][T27726] team0: Port device team_slave_1 added
[  809.449667][   T53] Bluetooth: hci2: command tx timeout
[  809.501094][T27726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  809.536289][T27726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  809.601299][T27726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  809.611966][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6220 ms
[  809.611995][    C0] lec:lec_tx_timeout: lec0
[  809.622084][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  809.637395][T27819] siw: device registration error -23
[  809.668792][T27726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  809.675812][T27726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  809.752363][T27726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  809.823295][T27828] xt_hashlimit: size too large, truncated to 1048576
[  809.839699][T27823] bond3: entered promiscuous mode
[  809.883111][T27830] macvlan2: entered promiscuous mode
[  809.899052][T27830] macvlan2: entered allmulticast mode
[  809.907034][T27830] bond3: (slave macvlan2): Opening slave failed
[  809.935454][T27825] syzkaller0: entered promiscuous mode
[  809.941892][T27825] syzkaller0: entered allmulticast mode
[  810.142791][T27726] hsr_slave_0: entered promiscuous mode
[  810.157776][T27726] hsr_slave_1: entered promiscuous mode
[  810.177437][T27726] debugfs: 'hsr0' already exists in 'hsr'
[  810.183262][T27726] Cannot create hsr debugfs directory
[  810.387576][T27852] __nla_validate_parse: 10 callbacks suppressed
[  810.387597][T27852] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6441'.
[  810.445077][T27858] siw: device registration error -23
[  810.594151][T27726] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  810.615169][T27726] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 37417 - 0
[  810.629161][T27726] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  810.698332][T27726] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  810.717202][T27726] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 37417 - 0
[  810.733055][T27871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6447'.
[  810.743844][T27726] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  810.809252][   T53] Bluetooth: hci1: command 0x0419 tx timeout
[  810.837371][T27870] bond4: entered promiscuous mode
[  810.926025][T27875] macvlan2: entered promiscuous mode
[  810.933111][T27875] macvlan2: entered allmulticast mode
[  810.948325][T27875] bond4: (slave macvlan2): Opening slave failed
[  810.979320][T27879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6449'.
[  810.993658][T27879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6449'.
[  810.999685][T27726] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  811.020757][T27726] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 37417 - 0
[  811.030921][T27726] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  811.096846][T27726] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  811.107283][T27726] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 37417 - 0
[  811.117713][T27726] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  811.341416][T27893] siw: device registration error -23
[  811.351042][T27892] netlink: 'syz.2.6455': attribute type 1 has an invalid length.
[  811.536779][   T53] Bluetooth: hci2: command tx timeout
[  811.554297][T27726] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  811.594753][T27726] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  811.614270][T27908] netlink: 'syz.3.6459': attribute type 21 has an invalid length.
[  811.642235][T27726] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  811.665571][T27908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6459'.
[  811.678321][T27726] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  811.722832][T27912] xt_hashlimit: size too large, truncated to 1048576
[  811.740705][T27915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  811.928426][T27726] 8021q: adding VLAN 0 to HW filter on device bond0
[  811.961355][T27726] 8021q: adding VLAN 0 to HW filter on device team0
[  811.975478][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.982674][ T8984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  812.042609][T11177] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.049920][T11177] bridge0: port 2(bridge_slave_1) entered forwarding state
[  812.294406][T27936] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  812.316728][T27939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6468'.
[  812.450472][T27945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6469'.
[  812.516525][T27950] netlink: 'syz.4.6471': attribute type 1 has an invalid length.
[  812.597830][T27955] netlink: 'syz.2.6470': attribute type 1 has an invalid length.
[  812.611196][T27950] 8021q: adding VLAN 0 to HW filter on device bond5
[  812.666779][T27960] siw: device registration error -23
[  812.690858][T27955] 8021q: adding VLAN 0 to HW filter on device bond5
[  812.712378][T27957] bond5: (slave gretap1): making interface the new active one
[  812.723412][T27957] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  812.783543][T27949] bond5: (slave geneve2): making interface the new active one
[  812.801770][T27949] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  812.889602][   T30] audit: type=1800 audit(1769608957.604:11): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6474" name="memory.events" dev="tmpfs" ino=234 res=0 errno=0
[  813.013879][T27726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  813.078875][T27971] xt_hashlimit: size too large, truncated to 1048576
[  813.097952][T27974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6478'.
[  813.169524][T27726] veth0_vlan: entered promiscuous mode
[  813.198751][T27726] veth1_vlan: entered promiscuous mode
[  813.280950][T27726] veth0_macvtap: entered promiscuous mode
[  813.319995][T27726] veth1_macvtap: entered promiscuous mode
[  813.379023][T27726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  813.404073][T27987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6482'.
[  813.437087][T27726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  813.458934][   T25] block nbd1: Possible stuck request ffff888025c40000: control (read@0,4096B). Runtime 330 seconds
[  813.549928][T27991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6483'.
[  813.606657][   T53] Bluetooth: hci2: command tx timeout
[  813.620445][ T6973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  813.631607][ T6973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  813.645265][ T6973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  813.654467][ T6973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  813.994672][T27998] team0: Port device team_slave_0 removed
[  814.073469][T10755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  814.110066][T10755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.516013][T28028] xt_hashlimit: size too large, truncated to 1048576
[  814.586600][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  814.594513][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.865385][T28041] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  815.366182][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  815.374401][    C0] lec:lec_tx_timeout: lec0
[  815.381817][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  815.666578][T28078] bond6: entered promiscuous mode
[  815.688082][   T53] Bluetooth: hci2: command tx timeout
[  815.704231][T28089] macvlan2: entered promiscuous mode
[  815.710054][T28089] macvlan2: entered allmulticast mode
[  815.720655][T28089] bond6: (slave macvlan2): Opening slave failed
[  815.733578][T28093] __nla_validate_parse: 8 callbacks suppressed
[  815.733600][T28093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6518'.
[  815.819822][T28095] SET target dimension over the limit!
[  815.860944][T28095] netlink: 'syz.0.6519': attribute type 12 has an invalid length.
[  815.946927][T28095] bond1: option primary_reselect: invalid value (255)
[  815.982153][T28095] bond1 (unregistering): Released all slaves
[  816.037399][T28105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6522'.
[  816.049470][T28106] siw: device registration error -23
[  816.422871][T28122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6530'.
[  816.477625][T28128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6533'.
[  816.554106][T28129] bond6: entered promiscuous mode
[  816.674955][T28141] siw: device registration error -23
[  816.752567][T28134] macvlan2: entered promiscuous mode
[  816.761309][T28134] macvlan2: entered allmulticast mode
[  816.768897][T28134] bond6: (slave macvlan2): Opening slave failed
[  816.979919][T28152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6540'.
[  817.000954][T28154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6542'.
[  817.012595][T28155] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6542'.
[  817.119814][T28160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6543'.
[  817.160789][T28160] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6543'.
[  817.227648][T28160] syzkaller1: entered promiscuous mode
[  817.233236][T28160] syzkaller1: entered allmulticast mode
[  817.269740][T28167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  817.281876][T28165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6545'.
[  817.642520][T28182] siw: device registration error -23
[  817.723014][T28185] netlink: 'syz.0.6551': attribute type 1 has an invalid length.
[  817.790590][   T30] audit: type=1804 audit(1769608962.504:12): pid=28187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6552" name="/newroot/86/cgroup.controllers" dev="tmpfs" ino=450 res=1 errno=0
[  817.841031][   T30] audit: type=1800 audit(1769608962.504:13): pid=28187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6552" name="cgroup.controllers" dev="tmpfs" ino=450 res=0 errno=0
[  818.003025][T28187] bond7: entered promiscuous mode
[  818.008689][T28187] bond7: entered allmulticast mode
[  818.015947][T28187] 8021q: adding VLAN 0 to HW filter on device bond7
[  818.446764][T28221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  818.691825][T28233] xt_hashlimit: size too large, truncated to 1048576
[  818.929428][T28243] netlink: 'syz.3.6572': attribute type 1 has an invalid length.
[  819.224893][   T31] INFO: task udevd:16395 blocked for more than 143 seconds.
[  819.239972][   T31]       Not tainted syzkaller #0
[  819.265399][   T31]       Blocked by coredump.
[  819.272944][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  819.294477][   T31] task:udevd           state:D stack:23288 pid:16395 tgid:16395 ppid:5199   task_flags:0x40054c flags:0x00080003
[  819.307982][   T31] Call Trace:
[  819.311483][   T31]  <TASK>
[  819.314901][   T31]  __schedule+0x14ea/0x5050
[  819.321244][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  819.329724][   T31]  ? __pfx___schedule+0x10/0x10
[  819.335398][   T31]  ? schedule+0x90/0x360
[  819.340330][   T31]  schedule+0x164/0x360
[  819.344689][   T31]  io_schedule+0x7f/0xd0
[  819.353395][   T31]  folio_wait_bit_common+0x6d8/0xbc0
[  819.359729][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  819.365789][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  819.373678][   T31]  ? __filemap_get_folio_mpol+0x81/0xb00
[  819.380628][   T31]  __filemap_get_folio_mpol+0x13e/0xb00
[  819.386648][   T31]  ? __pfx___filemap_fdatawait_range+0x10/0x10
[  819.393125][   T31]  truncate_inode_pages_range+0x48b/0xe30
[  819.399435][   T31]  ? __pfx_truncate_inode_pages_range+0x10/0x10
[  819.406014][   T31]  ? __pfx_call_function_single_prep_ipi+0x10/0x10
[  819.414170][   T31]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  819.421393][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  819.426923][   T31]  ? __pfx_has_bh_in_lru+0x10/0x10
[  819.432325][   T31]  blkdev_flush_mapping+0x109/0x2f0
[  819.440200][   T31]  bdev_release+0x417/0x650
[  819.444982][   T31]  ? __pfx_blkdev_release+0x10/0x10
[  819.452988][   T31]  blkdev_release+0x15/0x20
[  819.462634][   T31]  __fput+0x44f/0xa70
[  819.468127][   T31]  task_work_run+0x1d9/0x270
[  819.475202][   T31]  ? __pfx_task_work_run+0x10/0x10
[  819.480973][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[  819.486537][   T31]  do_exit+0x69b/0x2310
[  819.490748][   T31]  ? cgroup1_freezing+0x20/0x350
[  819.495714][   T31]  ? __pfx_do_exit+0x10/0x10
[  819.501334][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  819.506484][   T31]  do_group_exit+0x21b/0x2d0
[  819.511145][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  819.516575][   T31]  get_signal+0x1284/0x1330
[  819.521172][   T31]  arch_do_signal_or_restart+0xbc/0x830
[  819.527675][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  819.533969][   T31]  ? ksys_read+0x1fc/0x270
[  819.538663][   T31]  exit_to_user_mode_loop+0x86/0x480
[  819.544017][   T31]  ? rcu_is_watching+0x15/0xb0
[  819.550698][   T31]  do_syscall_64+0x2b7/0xf80
[  819.555332][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.562255][   T31]  ? trace_irq_disable+0x37/0x100
[  819.571152][   T31]  ? clear_bhb_loop+0x60/0xb0
[  819.578761][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.584717][   T31] RIP: 0033:0x7f72072a7407
[  819.590039][   T31] RSP: 002b:00007ffd20780860 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  819.598590][   T31] RAX: fffffffffffffffc RBX: 00007f7207a92880 RCX: 00007f72072a7407
[  819.607350][   T31] RDX: 0000000000000200 RSI: 00007f7207a91000 RDI: 0000000000000009
[  819.615376][   T31] RBP: 00005614c3198050 R08: 0000000000000000 R09: 0000000000000000
[  819.624172][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  819.632233][   T31] R13: 0000000000000000 R14: 00005614c319baf8 R15: 00007f7207bb939c
[  819.640501][   T31]  </TASK>
[  819.643817][   T31] 
[  819.643817][   T31] Showing all locks held in the system:
[  819.652543][   T31] 1 lock held by khungtaskd/31:
[  819.659041][   T31]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  819.671133][   T31] 2 locks held by getty/5587:
[  819.675983][   T31]  #0: ffff8880351ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  819.691250][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  819.701783][   T31] 2 locks held by kworker/u9:5/5841:
[  819.707340][   T31]  #0: ffff888025c9a148 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  819.719387][   T31]  #1: ffffc9000426fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  819.731442][   T31] 1 lock held by udevd/16395:
[  819.736258][   T31]  #0: ffff888025b79358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650
[  819.746039][   T31] 2 locks held by syz.0.6577/28251:
[  819.752040][   T31]  #0: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  819.761183][   T31]  #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  819.773643][   T31] 2 locks held by syz.2.6579/28259:
[  819.781056][   T31]  #0: ffffffff8ff12148 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  819.790929][   T31]  #1: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  819.800956][   T31] 1 lock held by syz.4.6581/28264:
[  819.808397][   T31]  #0: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820
[  819.817770][   T31] 1 lock held by syz.1.6582/28265:
[  819.823025][   T31]  #0: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  819.832650][   T31] 
[  819.835396][   T31] =============================================
[  819.835396][   T31] 
[  819.845261][   T31] NMI backtrace for cpu 1
[  819.845283][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  819.845307][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  819.845322][   T31] Call Trace:
[  819.845331][   T31]  <TASK>
[  819.845341][   T31]  dump_stack_lvl+0xe8/0x150
[  819.845374][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  819.845405][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  819.845441][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  819.845475][   T31]  sys_info+0x135/0x170
[  819.845501][   T31]  watchdog+0xf90/0xfe0
[  819.845530][   T31]  ? watchdog+0x209/0xfe0
[  819.845562][   T31]  kthread+0x726/0x8b0
[  819.845591][   T31]  ? __pfx_watchdog+0x10/0x10
[  819.845614][   T31]  ? __pfx_kthread+0x10/0x10
[  819.845643][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  819.845675][   T31]  ? __pfx_kthread+0x10/0x10
[  819.845701][   T31]  ret_from_fork+0x51b/0xa40
[  819.845739][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  819.845771][   T31]  ? __switch_to+0xc82/0x1410
[  819.845805][   T31]  ? __pfx_kthread+0x10/0x10
[  819.845830][   T31]  ret_from_fork_asm+0x1a/0x30
[  819.845878][   T31]  </TASK>
[  819.845889][   T31] Sending NMI from CPU 1 to CPUs 0:
[  819.979092][    C0] NMI backtrace for cpu 0
[  819.979112][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  819.979134][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  819.979146][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  819.979173][    C0] Code: d8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 97 12 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  819.979191][    C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242
[  819.979208][    C0] RAX: 00000000002bbd6d RBX: ffffffff81995e9d RCX: 0000000080000001
[  819.979223][    C0] RDX: 0000000000000001 RSI: ffffffff8dcc8d2b RDI: ffffffff8c073980
[  819.979237][    C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  819.979251][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef0570
[  819.979266][    C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000
[  819.979280][    C0] FS:  0000000000000000(0000) GS:ffff8881256f8000(0000) knlGS:0000000000000000
[  819.979295][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  819.979309][    C0] CR2: 0000557a9bd21168 CR3: 00000000795f4000 CR4: 00000000003526f0
[  819.979327][    C0] Call Trace:
[  819.979335][    C0]  <TASK>
[  819.979342][    C0]  default_idle+0x9/0x20
[  819.979365][    C0]  default_idle_call+0x72/0xb0
[  819.979388][    C0]  do_idle+0x1bd/0x500
[  819.979404][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  819.979426][    C0]  ? __pfx_do_idle+0x10/0x10
[  819.979447][    C0]  cpu_startup_entry+0x43/0x60
[  819.979464][    C0]  rest_init+0x2de/0x300
[  819.979489][    C0]  start_kernel+0x380/0x3d0
[  819.979515][    C0]  x86_64_start_reservations+0x24/0x30
[  819.979535][    C0]  x86_64_start_kernel+0x143/0x1c0
[  819.979554][    C0]  common_startup_64+0x13e/0x147
[  819.979587][    C0]  </TASK>
[  820.169006][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  820.175916][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  820.185069][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  820.195178][   T31] Call Trace:
[  820.198504][   T31]  <TASK>
[  820.201483][   T31]  vpanic+0x1e0/0x670
[  820.205501][   T31]  panic+0xc5/0xd0
[  820.209257][   T31]  ? __pfx_panic+0x10/0x10
[  820.213708][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  820.219126][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  820.225318][   T31]  watchdog+0xfda/0xfe0
[  820.229514][   T31]  ? watchdog+0x209/0xfe0
[  820.233901][   T31]  kthread+0x726/0x8b0
[  820.237998][   T31]  ? __pfx_watchdog+0x10/0x10
[  820.242701][   T31]  ? __pfx_kthread+0x10/0x10
[  820.247331][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  820.252570][   T31]  ? __pfx_kthread+0x10/0x10
[  820.257189][   T31]  ret_from_fork+0x51b/0xa40
[  820.261835][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  820.266982][   T31]  ? __switch_to+0xc82/0x1410
[  820.271702][   T31]  ? __pfx_kthread+0x10/0x10
[  820.276327][   T31]  ret_from_fork_asm+0x1a/0x30
[  820.281150][   T31]  </TASK>
[  820.284807][   T31] Kernel Offset: disabled
[  820.289141][   T31] Rebooting in 86400 seconds..