last executing test programs: 3.954805873s ago: executing program 4 (id=3294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES64, @ANYBLOB="000000000000000000000000e6628dac1c1bc1e262154485dabb31f9a0af1dfe117c7d5e9f26c3e7467f09481340328c5d507d7966b6dceac46043784c81a6f960939230220ee33072a14b8273b9de2e546bf8afdf88b75a97809cb86b2e120e44eb46ca0f6160b5f0b871477b3f9d3cba56bb5f6d8f7f5fbb4b3a4230450c2eae4af72de0cc7a0a85f66489406f54573705752927aee95267058103e451c48a0b3e8dd7c4c3fec72668f0163d58461e8432094318d54ec58521aaf0738854d490a9994b4a51aabc188166a825568eae40a1269e0d3dfce19cb665daa3bf9224db700e000000000000", @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES16], 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES16=r2, @ANYRESDEC=r2], 0x3c}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000800) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r8, 0x2}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r4, 0x25, 0x0, @val=@tcx={@void, @value=r7}}, 0x1c) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r3}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)) r9 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) 3.732402954s ago: executing program 4 (id=3295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000e060102000000000000000002003ba40e1f50fb8137f7b6219ffcd063ae00010900020073797a300000000005000100070000000900020073797a32000000000900020073797a31000000000900020073797a30000000000900020073797a31000000003f7096ff04af68dcb97d8cf6f170c99bf7d901ec3c6f37f1be0859416627750ad4cb6d5a0c0d7015e7a086a149fed65f8b614bc34ffb0417d9ba8ea398f27ecee780feb411acea1734d59d27864249739110f9dab7c0fbcbf9e88a050bfd1a79c40856bb17193f698f7304a5d8f96285341b0d05a054ecd9aacba541284c416ea7d1bd5fe034007f31c7c8b5a822af648ff2480ae1bceabb88febcf43da7a147c48016f63a3d997264ad7c3bb8f655792f42be795a2457e851832f033adb4fcbcfc998dd7a5c28d9a1464a57572c0fdaa8f0c2f6c0a03537a6ab928c0b7ef402b0bc4018c992d0a1c58841508fa4aa217b44aeb2606b3aa9cc8e2cf80b5b424cb9a108477d82ba7edc73cd7a5c46861c29445bebf51998a02c03d0972745"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.715384956s ago: executing program 4 (id=3296): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x0, 0x33, 0x7c, &(0x7f0000000000)="9a6e03ef32d3702457cff0a7cd4c0b86065181f2e887fcf302c73de5d6c8ec4b93e519ce64ceca2df371c5995e41b0258e1818", &(0x7f0000000080)=""/124, 0x6, 0x0, 0xaf, 0x1000, &(0x7f0000000100)="c09fddec886af80dba147904cc6013dec7a5fbcaee0eb6556d32804919126f326d06a2e04a971a2fc8e5172119fc717f06c547182901d2a71fae7ff0649987f2e8c1b1e7b466eca0a9ab1e05544602cb3c851fa4c3726f71e17bc2f5ac06aaca3fd1bd3cf22d187df3710c9e336a2f7a1f779219aa1231239323bf5f9ef80b16104c2c5c1f485b1f122b886eef8284ca7961d0ab836fd1a77e153c008cc518dce120e2ab335ac1f97c1e3f2baffd4a", &(0x7f00000001c0)="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", 0x4, 0x0, 0x200}, 0x50) 3.606662944s ago: executing program 4 (id=3297): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x20, 0x12, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18020, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x94, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xa}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc02"], 0x58}, 0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2.387285483s ago: executing program 0 (id=3300): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0xc00) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @empty, 0xfffffffe}, 0x1c) poll(&(0x7f0000001140)=[{r7, 0x702}], 0x1, 0x6) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @local}}, [0xf097, 0x4, 0x26d0, 0x8000000000000000, 0xfd, 0xcf60, 0x5a, 0x9, 0x2, 0x5, 0x1c000, 0x7ff, 0xfffffffffffff39c, 0x9]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000004c0)={r8, @in6={{0xa, 0x4e24, 0x4, @remote, 0x9}}, [0x4, 0x4, 0x56e2, 0x81, 0x4, 0x7fff, 0x3, 0x6, 0x1, 0x10001, 0x9, 0x1, 0x1ff, 0x2, 0x2]}, &(0x7f0000000200)=0x100) sendmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.296599414s ago: executing program 4 (id=3301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a0001007175657565000000140002d85c0004400000001006000340001200000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "214a5bb43ffe3f3ff2952a98bf"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 2.292964242s ago: executing program 3 (id=3303): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044004}, 0x240008da) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x0, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44480}, 0x2000c000) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000280)=""/241, &(0x7f0000000380)=0xf1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x201, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x4000000) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0xa00, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3de0d609334f9a0e) sendto$rose(0xffffffffffffffff, &(0x7f00000006c0)="061d44be513b30127909dc9b8c3229e058d41b6a84948f4834d9907693f626b67019dd5e1f9a9d386fcd9fa20862fed73f0f357185aa585f7a88b09966813637aaaf189412d9d470488e8f654ddeb944b01d3cfe0f27106eae0ba32b1dd9a55a2f4a992c3d3c9a6493b6f91d12ff5064ec989871e5", 0x75, 0x44, &(0x7f0000000740)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000780)={0x0, 'ip6_vti0\x00', {0x1}, 0x6}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000007c0)={0x0, 0x6, 0x6, [0xaec9, 0x9, 0xcfe8, 0x4, 0x8, 0x0]}, &(0x7f0000000800)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000840)={r5, 0x1}, &(0x7f0000000880)=0x8) write$cgroup_type(r0, &(0x7f00000008c0), 0x9) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4054) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000a00)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a40)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @broadcast, 0xc, 0x9}}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) recvfrom$rxrpc(r0, &(0x7f0000000ac0)=""/62, 0x3e, 0x10000, &(0x7f0000000b00)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb0, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "691f599650f53df66e972c4dbb2fcfd03e957d8f5758205d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ecde8f0d7ab3c5c03541230eb157052b62390a873e9a6f8a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000040) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000fc0)={0x5, &(0x7f0000000cc0)=[{@none}, {}, {@fixed}, {@fixed}, {@fixed}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r7, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'devlink\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x4000804) 2.190969108s ago: executing program 3 (id=3304): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f000000f840), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f000000f980)={0x0, 0x0, &(0x7f000000f940)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05042bbd700200000025210000001c002d8008000200110000f60400010004000000050004000100000008000300", @ANYRES32=r10], 0x38}}, 0x54) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="0c00060000000000000000000c0006000100000001000000380030800500020007000000050002000100000024000300ad4d79e2a053e40161aac0fff169f76db2bbe0fb214fa66737c34a12497d1c310c0006000200000002000000"], 0x90}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f00000005c0)={@val={0x8, 0x6005}, @val={0x2, 0x3, 0x6, 0x2, 0x5, 0x7}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}}, {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "5e3eed473cd627b2865347f50eeb4fd43c0903b0af139d25", "324e8e9b034860c08f32f589f7ca2e3984189d377c7cbd49c652d215cd736cf8"}}}}, 0x6a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) 2.032694636s ago: executing program 4 (id=3306): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x4012, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) r3 = socket$can_j1939(0x1d, 0x2, 0x7) close(r3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3502, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1.984120439s ago: executing program 0 (id=3307): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) write$cgroup_int(r0, &(0x7f00000000c0)=0x200000000000000a, 0xfffffffffffffeed) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) (async) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x470bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000016}, 0x2000400c) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fddbdf251200000008000100", @ANYBLOB="72fc8729a29141c8427f9c8be42b090b440896c4c4365dd6e153bdee61b7dc50c7289b188175a9618496298e2bdb9ecf38485a76626fdf0e7ab848846c4c07e104d6142784312c6e50c5abc21f88871a70a78dd7eea255b6389c224b6b713658fada3e8352bf9aa680791f279d24e72a3c05c57499a27e3dbcce6dca3451d92fa2b4222bf40c6b0d91b2533806b4e13675", @ANYBLOB="08000100", @ANYRES32=r12, @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x800) 1.756719639s ago: executing program 2 (id=3309): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0xa5, &(0x7f0000000340)="a5ac9264156c9e5499d66ea91c2fdc0cd80a109c1e4048fc86e6ff58a23e450d18a1b88a5f371dad27140e77fa8a9da30e93419bd3a4d8e7e7323a8922914671733d35eb05ada4c80af18e08eccc3eedf49c97012ac3aae1a5d0e88a35c5bcd4da808a612febff1012f707ffdf2df52e1c03923c4dc8652e37075c75858da9f8e362dfa36986457b87dc7af57047fc03f7db50b8fce91682675bf63fb94d3934f748fba52f"}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000003000000002000000000000000000000300000000010000000300000002000000000000000000000203000000090000000000000c"], 0x0, 0x4a}, 0x28) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r6, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000980), 0xc, &(0x7f00000009c0)={&(0x7f0000000ac0)={0xd0, r6, 0x120, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xb185}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfff8}, {0x8, 0x15, 0x3}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffff001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x36}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x1, 0xd, 0x7, 0x9, 0xffffffffffffffff, 0x10}, @ldst={0x1, 0x1, 0x4, 0x2, 0x7, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x1b, &(0x7f00000000c0)=""/27, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x1f, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x10, 0x5, 0x2266}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r4, r4, r4, r4, r4, r4, r3], 0x0, 0x10, 0x7fffffff}, 0x94) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r10, 0x1, 0x8, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 1.632005668s ago: executing program 0 (id=3310): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r3, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={0x0, 0x0, 0x18}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="75080000000000000057df2bd6e07d8cbbf2da54757941c9275a9aedbbb2025b41dde996", 0x24}], 0x1}}], 0x1, 0x20008000) r7 = socket$kcm(0x23, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000580)={&(0x7f0000000080), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xec32}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008001}, 0x40080) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp, 0x80, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000002300)=[{{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f00000015c0)=""/129, 0x81}, {&(0x7f0000001680)=""/221, 0xdd}, {&(0x7f0000001780)=""/150, 0xa6}, {&(0x7f0000001840)=""/153, 0x99}, {&(0x7f0000001900)=""/97, 0x61}], 0x8, &(0x7f0000001a00)=""/127, 0x7f}, 0x401}, {{&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000180)=""/2, 0x2}, {&(0x7f0000001b00)=""/178, 0xb2}, {&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f00000004c0)}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/24, 0x18}], 0x6, &(0x7f0000001d80)=""/138, 0x8a}, 0x1}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e40)=""/182, 0xb6}, {&(0x7f0000001f00)=""/70, 0xffffffffffffffb1}], 0x2, &(0x7f0000001fc0)=""/191, 0xbf}, 0x61}, {{&(0x7f0000002080)=@ax25={{0x3, @netrom}, [@bcast, @default, @rose, @remote, @remote, @null, @default, @bcast]}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002100)=""/127, 0x7f}, {&(0x7f0000002180)}, {&(0x7f00000021c0)=""/98, 0x62}], 0x3, &(0x7f0000002280)=""/126, 0x7e}, 0x3}], 0x4, 0x100, &(0x7f0000002400)={0x0, 0x989680}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x20040000) 1.628735885s ago: executing program 3 (id=3311): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) close(r1) socket$can_j1939(0x1d, 0x2, 0x7) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="fe5de0e90314110000000000000000000900020025797a300000000008004100727865001400338120204b2acd0e958718c252481808f5e9bfd619c6428476842d", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x81000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x400}, 0x1c) close(r2) 1.601433347s ago: executing program 1 (id=3312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x200, 0xfffffff9, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x24408, 0x55007}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xaacd}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x20000004) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) 1.506181662s ago: executing program 2 (id=3313): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth0_virt_wifi\x00', &(0x7f0000000180)=@ethtool_cmd={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000, 0x3]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x49, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000ffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) 1.331979533s ago: executing program 1 (id=3314): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x10, 0xffffffffffffffff, 0x0) 1.33173078s ago: executing program 3 (id=3315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x6, 0x9d, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x1, 0xef}}]}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000000000000200"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677265000c00028006000200c4000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.096582366s ago: executing program 3 (id=3316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xf, 0x5, [0xd, 0x1, 0x0, 0x8, 0x400]}, &(0x7f0000000140)=0x12) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x5, 0x6}, 0xc) getsockopt$bt_hci(r2, 0x84, 0x7d, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000700000000000019078ac1e0001ac1414aa03099078000701004510011d00640008f38900010a010101ac14143b8903dc830fedac1e010400000000000000ff862400000002011275955c05cc97d4e384fadd5647c17bcc050cf55913fec5e4340af196000183050b70e9000000"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x8914}, @void, @llc={@llc={0xfe, 0x8e, "f2", "28dbcb38b8b39a6f93b256d5e37e9027b92aa0ad142971a7fbd62bda68987b63107404151ed16138766da33f4e6f4d65a98e8691c4d054b61e0bfb9c1c7d37882c6f6f2f471546711cfaf5e858b7726acef26ba3e57a10019e3f3a67ac3ac4dc0520091237fc9d882d95192873ed4de6adf1d86c6038698a856ff17316e7c28c6a12"}}}, 0x89) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x0, 'veth0_to_team\x00', 0x4}, 0x18) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d08003577642cd10a0d01d9cd1b4582f4fb018eb90e037334", 0x62}, {&(0x7f0000000980)="437ef70cd5d9cf21c0e515ab0c9a381b21f11c01", 0x14}], 0x2}}], 0x1, 0x20005040) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x5eb, 0x278}) 1.053091882s ago: executing program 2 (id=3317): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) sendmsg$inet(r0, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f00000008c0), 0x4) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0xca, 0x0, 0x1000, {[@sack={0x5, 0x1a, [0x7, 0xe3c, 0x7ff, 0x6, 0xb, 0xff]}, @nop, @mss={0x2, 0x4, 0x1}, @timestamp={0x8, 0xa, 0x1, 0x8a}, @exp_fastopen={0xfe, 0x13, 0xf989, "444e38caa511b9096239c28c183b3f"}, @exp_fastopen={0xfe, 0x9, 0xf989, "00fcc69177"}, @timestamp={0x8, 0xa, 0x2, 0x3}]}}}}}}}, 0x0) 878.24036ms ago: executing program 3 (id=3318): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) recvmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000000)=""/115, 0x73}], 0x2, &(0x7f00000000c0)=""/166, 0xa6}, 0x22) 872.865473ms ago: executing program 2 (id=3319): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) sendmsg$sock(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="60c6c0b0373ef1f9d0f13b02c4f7cee2c082f5cae325cb4755b71c55860ebc807236b995f22410b7f2023fd26a049f6e0d18dbbe178242d797200119e21a8ddb63881e1ab5d21a71357079a685a68a92502c1070fbeea2b42a9bd4834b25f42dcb10eea20ca9410e92d9a64765e0697f99d8cdb06fa1fb1d3cf4ab111b8ebc3cb5d5927f589b195d52cfe1ad3786591e4d7639becb03fe06e5675176c4760d6c446c904d3d2a5e41a13485f092063a473b9a38", 0xb3}, {&(0x7f00000004c0)="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", 0x2dc}, {&(0x7f0000000400)="06bd0a9c9294c5155999edeb059c1f6b07b01560692244ed7307615da53f722c66e0a9eaa489780d3ac7931e1b8332a1e1150364738165740592b6a9dbade5cb2c88b9c00f99ac152fc4e4fa618530bcb3a95a651256969f03d1ef9890c8e7c49a04be31197391dbf8e7e6a2199990d555e982e9c9aa96a4be465a20679650708608002d32be4b3761009da12c12dcdd7af49d968782c3715ebc28ab50db5c8cdbb2c180c19332", 0xa7}, {&(0x7f00000000c0)="aecdf187c87ed557f64b6faa59b6577e53fa", 0x12}], 0x4, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x11e1}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x90}, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x22}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) 600.323844ms ago: executing program 1 (id=3320): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x56) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 536.884683ms ago: executing program 2 (id=3321): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd70c8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce971e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb63657424026a", 0x81}, {&(0x7f0000000200)="49ca212b4ee03b192d1048f96cc5eae838645dd5da7cc767a7fa4a8bbf9958", 0x1f}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r2, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) 467.993581ms ago: executing program 0 (id=3322): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000f300000002bb000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000002b00000008002600c814000008002700020000000800a100ffff0000"], 0x40}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r1, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r7, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r8) sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f00000008c0)=@x25, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000700)="7dbd907e2b2a01b9da33e4821d21d7d4937b48e42748aca8a5f03ba8b256de69db36d9", 0x23}, {&(0x7f0000000a00)="e13a2f9b7203c6b15be1dedc2b5c733a44a67b8d9cfe55b1a1a31b8f17d68d39e8bcf92ffdc1d6345f68d05fdf758602158aa079e957b2867bfbaa726963e0691a1be301e55b103add79fbe305a07823d92c564a1fe555def285ea4509fbb4e236e6d14416fcc77fb98abae37161abb2b56287ea5a6e06847fdc95a7c06abed98bfe5642f339afb0b22f92afc6dd97f6a7c9f499f44a9e57dc58214f650c6a0ef39145d7b41a03c9631a878ec72f6b7836a82dc56cc5a93d30", 0xb9}, {&(0x7f0000000ac0)="160d5718ad92725a4a244255d3f21c25ec8f9a1a7e4eb41a86ffc4fd5d5c5ebb9b0065d13f38862feba0efbfb5af3f57e9c27bddd2d8caec099a9a084c48718c4e571d3041d807c87b622061920a", 0x4e}, {&(0x7f0000000940)="e14177d737e834f83fabda94191a847b8579dadde7b7e6bd6069fe2f93135091aac6ffd559d4977de49a3b", 0x2b}, {&(0x7f0000000b40)="2823b202363bdb11af046e89c9928306936886dcdc", 0x15}], 0x5, &(0x7f0000003800)=ANY=[@ANYBLOB="2000000000000000130100008000000022fc196be402fc644046890000000000a0000000000000000b0100000200000059b95255bbec7eafd480c019e6e156d3b5f5dbb2b9f8ecb0ec2ddd8fd7ba5b9d10654145302f70e772b123fdeebb30796bdf9eeb679ddf43f0210b5818fe309099a22d5404a2265c0c6e4b70d4d603feb863262849259425ecfc9dae8386e93e93436514007575710d8b309498d79f796e13f4d1b101d0dc5889719f55afd78ffdd0277bc36e9b96c3960000000000001010000000000000880000006a0400005af33a17ac67d93d7219a1ae56531349394bd24579f2de3c41fb334401875e6397ed5207c1133f0f486828170d21ad50a4cebcd4c7b9b08cb9199a06720faffe5d0c4bfaaedfe0cc4c58b6c568336ebadf1d883fbd1760fe2f3eaf4a8c68d9702c611e9250c878a708e258ae06e462185dd7271bf3002827044c2fedb2be8c4c5d245a82d5a3875a402b687c56ad636a5513cc96f7aabbbb41f9219f1ebf2b137688ead5fc2a4406505fc0bd917152e3e83ea404423fe942478c6121e6dfbe8598beb72101d25cc15e6dbfe7a505dfcc558faad528acdac8dc7842f4174392253b4ea582d85e8d7193c40c6bd02ad25136e9c39864309b868ca901998b954afc62c52e0fae77fad8ad353ca02276da3878684b52c53ed93387965cf682486f3835c9e6edc4c8a6f9c340bf31a15ee61aff97522446fa9a6ffae857e8cdbc60053a67499aa7a0839c9554b4a353ba813c4cb42a7b3c87e6a847ae7918587267a8e5c15e0017f4ff94f76fe98adea6825debb2dbf97037805e65694c56de99f8b2a9079d27f04dd4bfa4e8e66a0934d3b46f102691bdb0b5365fafb5310fdab3f6d3dbefa9c85b68f6a3da29a899b2c031bdce930dd2159628094cc401041ab6527dca49e8333945749b00dfb6ddd35d6d59187ed008e2293076544871a09df28fb8836c39ade30877d942b9882546b47a98ed72a370948e07dd7262f8d36e09164157f41cb063612b202ed6559e2dbca708d1119fe3857bf891105b65ea470bff7405f9d64b2818c6cbfc70f6f8bee046c1fa7a869b671f67d63491e2a32fc2728808f17af6d1296cca10d2ab3b57f7c8d1df1866bae1f330f945c1963d1cdc3086ccd6e215c458c2e85dcf6b6bbca0f4b807d7f3f53140902bb3ea123d09194b3db99d0db046c8c68e8159788bea9d8166db65e0a0da8ed93fef587ab93230c0ba0bd5709e7d018e16751d647d9493135b1badc0295997355225b5107323ec93dc61e4d64abd9f0b61facae56633142aa5e63de95b6049c0cbee9174691fbb92b49b54748f3d6a5bded09e1e040847a3851a64e4689e4970fbe1d84751592a0282c26ecdb49ade669d30f3692552f255e65c365b9aa5a9b88150bd345cb35465c0f212714046da6551f8016bca13608ecf4a2ea5b014059109bf13b4891ef92fec44d2d9140dfae4744205bbb5f465ab36216d22157c5dd36d649c68f638b9bdf6e08e9061938e286d9a6737707695447bd99115bc494cef1edfe018daa4f26adaa6cba099eef480505c5549f85708b09d620097a71f41b11e764e15d8902504ca008305643d70e98de24313fbf67fe5ea36475d5647c4b0072ece8fcb267a54725c32a1bfbe51071edd045c92d00f9e6ed5d21b56a9230857b8d864de19dd1bc7ccd68abe1a0532a636f8c6481d8fccb946580529c59c1a1010e078d2fbdb23922ee2bf4c5f42249aa37a8b078217f99690958464dda32b2a9e350e2078cfbc9ece8f70a00e41aa97372d9092ca0d6de491fbf59b70bd2eadc3989e5d5acce3fb09f712ae27ed474a91e55a6804b6e6a18fb567681bea6d466c1574c5cb36bda052d2d084419c8caac302c9259e418bcf95c4140b5a259e84d384af426f9b0a4a75afdc3dd51017eb8fd6d9d6bbeab465552d6707b956cbb5e13ef878baca91b98fdcf669d18b0cc1f022896cd058f6e3e3673ee6586d69274e798130d72605b1c0195d21af09ac0ed799394c6c1a335b4a4f28d2004e7cba09ef4265ac1c4c580be282621e6fb18ab030634f7b9a43f72cad77654cf34422feb0b1f878de4ad78fb6f7822b54b28f2e755e0d660e373e3fef0c19e495954950b4edaef415f35a7a66df4103e80525f5849b4134a275a3dcb7ead1eacf0d9829ac97b04e5dc10838058a3306cc9cff4ce19da7a5fd51fd5fee60b0f797e92823d836b3920739a9105d6a014781889d3ad63bc6b7201c19d7ad6c762ef91ddc68f75f7d7a04017ee107045ae5bf7796853e4fc3a3fe6b54791b5ff042661ad7ff4460f7d0ebd6f8372e4174019dca0dbb9df4eddd6600b226b2f272c7a5f8705d5919c2268d4fd67273c8d27581db038f86eaf7c51ca2df42d5d6a66d9f288ceef074dd3ed7f4da27eae917c7819fd81053e7996d5cbaaf58a38aa1a4cf8d27d8c609f3747f65437a3212b4d52e81276512aba7775ec9811eec0d3e46db5ce15ebe408488bb819370e1afca6aebb4724dac46bebd9384c82d96bc89640c40bdfd5a62b51e50694179677505d71d754390eff4b53f1a1707613d2f50d020dcaddfc4b49882c89080df1e3bbff31c328ca3aee0b8cb8c9ec93f94c147a572ac26d248f7b39674bfeaa8474e7bb8d890550af88a2a8ae7e89279d7a37418146d3a2f249ca98f86fa754b8bc987de8ab1abbc59ac64adb78d65ad9f975c5e6ee437233062c0239a065384f637330e5350bb73277eb703b15ce59b867f22f81405ae883fc95993d067178e1f13abb7858ab862c7c630c8f23c49078ff1a26d9237811708cba164ff15498b4e0c5b2cb0917e4a6232d94c6a6348abb8196a223e55d0a0e64283ce7d0f8a9a7c0ebd47f3e9337b970aad9ebb17cbe399b4af19e6a6bd618f11f2db0aeb90abaff9dbf81696f0ed60aadd50624796eff0ccc1f91b3f74f341e76d938af2a6be58c05aa483b00b223dd21aa7b907d06fec381f5588668240915dd4cebee6182f1fd5c530aa97a2ab6e892b550b179ca29219394ac570b901a1a9d9884cf02098030aa941b413ba1ccccc41a6e1835963ab3cc11fc8b2d584f20d3f6be6619dc318a1dedee60c1e0e5ef61ae13fb3dd00f16c652c2c30b8b3d3a4f8bb042f3eec9fe064e26fab8becd7026c58ff24e032ee105612d15c8afcc2bf961c9eea74784803f34038a0f31e0bf5a90765b13cfc7dc0d3012521efd7632559679b41d5bc738b8eebfd42e5568bde07a0705c515f70237b5c707fd823ef75488493953eb5ccb07b31b8beb61148297f4f95b9433335509dab863d6fb6f6541f5db6a6c2c901a5a2ef7a43a5869fe95fcb5d0b1092cc96063600640ec963c15ad5284d78b21eb6a20b09fbb32e87501b67528713afeba83ad1706895fd0e24a87cbf4d90031798f056c00901a8f656e9f49f53515ec753daca1d61f27fd0654e0a376263789f6b2fdd5154568364abd8cc09b0a032845f46518b0ddf6705128d8ea12a5c254f6c253dbd813bb03efe2ee0a497a8159014f97950a9dab0888092f35274706cfb75eee0c47d19e3a9266d4eaa0498130fa56262256fc42381cc19440eb8363234b0cf2651e19416551b280ac480dd5b3b9683a3f0abca2420e472d80787eb70731cda01e728e1a0ea203d3bc1dd9dcda66f1d0e6839d5bfdcea8e7e65df45913f917d4e3d0488d2e9d0a08ac0fe517be26bc8e0454ae48cc822b7dddae7a58da089defa2034dfa6d4106016ecf3311166ced088b2c65c43407a2b2552e232c3a9c7a050686155f6a7ec740ac3563d81d0d9910c9634fc429063ea73e64612aa1f22f85d7a29832f51eb0c081107d24fb0bfc0b843d395e7e0397997b322dfbf074990f1e82eb94df0316799a53dccef3f88b7eaae7783dd5a18867ad0c52fac203955ad8c0ac5a77cca277477acd81ca8bd94b79399010bf1e99253af48c7b0b4ee84496e437e231a9bad58f8ebb9279f99ddfc57099468bb4ed72d3a026d7d3ca079f24e7c98a1278c3d72fde8bad980c92eac5d7125a45f813ddc263556e6d19aaf55ae5c58e1b586f2f330a1dcc3521292a26f2cdcecf742373ccb95bac5067157c5232ba06f6bd0c2273a2c4716b01ce54e79f858cf1b1d95f4ac2ba8fdc1e2ff884668d7a56dbfc9c1df961667134672278ed7184c4ac6492ab0851f3e2772c90b503bbb9b2cf02e477ef7d9de412558f9c288f2e7f1acc0345589b9f10652cac9b3f7021d38fba1cc1ec7d2cb67421b01597e2bc77199ad27e63641e48730df77f3af207933430c26ce2223f6fffb03730f7f89960ccad45fd6da257888d89ae50be91d66b7cab59c044f7a4c10fb3f0f574dab8435a72a4e8354100894c4d79b7d92bad366ea2e7bc4e318fd923519c99c292c2122b9808fe76d54b54e6fa9f3297655cfcbcdcfe7e0bf48668b33fcd4c5737fd9adceca00ac66d410742239e38403435b89154771ed4fc154dda8caaf259cba328a1dcc775b9942f0595856d149f84f6ddff068c11c28b490fc3d2fa0252755f89194af2c16aa011ceb500929010002aaef530e5534c883bee4cd092f248479671f20782da12fc7f752c2ad27869a20bfd6db7c90103b42976421f3ae508a7b9208928362af74d3b3e6a4717d24b812bd183c76abf0f2b1dd1eb6f26ce1cc4218f8587e9d93afdb8119d2e567a82ad6374991deb9a1d1fea0316168bfe30f8295a1ec283e109b9bb59d40cf8c4f444f914baf8512016f14ebed65ff40f38f3936e7e3a5d462d0a9eb492ef73cc08afd72e3263c8c2b8246b85d217e2fa870fd54107d6b18449699755a27c2eb658e73a9511e91ed196cfe80de4d87fe2a262d96d57c63c40a8e764e9150a5b269ff1d8361377b3d9d00f9c42d357e8c272fcae91d349fc41afddd3b82ef6dd07ce87a688b3304dc0802a24354271c9fe4c7077401b57639f6a33354810b0835763b34964d6e9a7185714ae48d466ed8d0845c02bf5f21e568b6a90161250189c5b79ec2052f215b7afbbe99fc1054f69d62df8486248cb2678c1ea10b6635e945c00e6871f11b07907aa087424d286f20993128011344d6bbbe09fa41fd7f3092ae76c4b0a246a669d80d3563c42706cd33cb7f71c2a334337ba357f713342164e98f343a5bf2245ef8dd73c0a805d2613812d60dc83225aa913a116efa25ceaaf480f89420d5b9c3c8cb41a0a9aa17fc6e223880ec9c24a7ecd2e8af59126a1627b862af9e188cf02cb130ce213713061f4e8d2c5460f1926ccbc69314163ed48dbbfee6f2fa1244f4abac05839bd4a58c5c9ca26fb7081f3a0ac39150e4c590da22908949276389b7f811fc4bbb2dd2306dbfb419e6f60ac861a43de418b7d11ff23bf228203e0d1d46a53f90c526b11ab02f57b55b37057c18aaea063a56f7a00dcfd8957ac17aea4a026f15955a6ebf282d89e91ebd365772f249f075af0a415907047ea35511fd566e1b35accfba0d417e573304f51b3c8cf3d9d4424bbedff1e4bce76e9326e458c20eea8015eea702878db8f986d4397af646a60fadfc376f5c67eb81d4f7a8316b72d7b908dd2c8a22e5bc5ee6545f7e69817035fa5b4cff6ee806ff9d94bbd8c04eae9a05fa505ea04655737a5d9a17fa5ec55df79d049231b469e18b74d92528e71244bfaed2e2cb7b510b3fa8dd6905d4c86f01621835adba345cd0741dbbe810184e0eebbd70f80dec0e31f200058961a2fe242defb3cff62f5783f6048c8fdabb7040e79c090f7091ed3b3beb58c995ad61410e2c833b625b91643aa8bf6cd207a51e1dff140f844fcf7065ad3fcc0e784a0b95a256759c235aa42e813b0039b8c945346643196626640c0bbbfeb7931dbf718758d046ae788e7ff1dad689042ecbdfae9e6477084999d51f4586642943d4c5d5fc0f7378a8bf890074c1bc446f1530472d60716facc23d9301a27368f1074bb654f13bc42c63c8be6295e12da976022e27cb71318b3a32193713d0d382d0feef898498fc387ad1733b0dd8a36397be30b0da9ff9e78f8c1daeea93230ce1efb32fca76eb510ace07741f0aaf7ee06b58000000000000000c010000070000201f972579ff5da330d3aa99b505437b7de0245721eaefc1ca20a4f1f945cea29aef026aa4312fe7985e4c308106ce6bc826aa1a63b09f446b51bcb7cd35f900d0000000000000000d010000020000003c18c9a51c3c03620a8f8219656d902578e4516f9a6427a136418764722952603e485844708c378728fb09b094fb0984c18f3f84c37fbc6d3c0d830a13c06a48f579be9e4285fe2a985d9765f5e073670bacb91f1f72a13564f01201d33ae96fbea814c1c259f7d3496fc9217e044b566eb66ff535e21f0b88589f1e611771fa21ba5397bfa5f1111151f5bf4e0bed32547eb31194f69f0c428b7bbb86344f195d6bdd14bf1c3e51b0334a375f2e85dda17ae4793bb76ff339bc9af4ecbf95001358dbd45b9c824fa3d4469714d1f2753ea79dd623658e196dbbb5658ab9117ec0c2cda976c493e359c256117bee4db84f88d7c2814f7329cb130d7915dc9712f5c1c3670b4af0e7a76283e024c5f7cd0d24d365dbd7e9db1707392d409fefdc1311a74e42f330c6c104e475a619d992ff44aea80dbe14d864d7e2275a674bdcb1c12ea39cea0627a16971bab3d9b30ba81fd5c56f9eed70fc5d1489d0c204663b498a0291ba941b324e89d0f6b05bd0f5d0331ac3f12e995ff9d15e387c6c60f100330e956b57e35232259e3f361ccd803b4f2013e0063647e60249d51da9249d9557f23310637b27ebfc24eec6485fef77ea"], 0x11f8}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="eab133e816410daa4d0f99ec6c26bc32e41f0419825a07ebd8ce5a2d7b6a0bd6b9f369389c8b67dda5592ee6eed30cf0d2593ae6050f69f91f00343cbb7656c8357ea2c29400f28bdd061700"/90, @ANYRES16=r9, @ANYBLOB="000828bd7000fddbdf25020000000500060081000000100004006c0000000000000084fe296505000500020000000500050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x8001) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000200000000000000ffff05000100070000000900020073797a3000000000050005000a000000050004000000000016000300686173683a6e65742c706f72742c6e65740000001400078008000840000000000500150002"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r14, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40041) 442.373328ms ago: executing program 1 (id=3323): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 160.366238ms ago: executing program 1 (id=3324): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x0, 0x4, 0xfffffffc, 0x25dfdbfd}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0xb4, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xa0, 0x1, '\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc1\x9fz\x14T\xd5o\xdd\xf9m3vH\xf7\xcf\xc3\xc0A?\xc7\xce^\x12\xbc\xba\xd6\x80\xb7\xa9\xbc\xc9\x0e\x8ek\x83a\xdb\x14\xf7\xe8\xfb\xa0\f\x12\xf3R\xf8\xeb\xfb\xa7\xc0j_[\xc0\x1d}M\x81\xc2\x02\xbc\x84\xd4&RTP\xa7\xfb\xefe+\xfcuy\x832i\x87m\tB\x86\xf24S[\x89\x7f\xe23\xc6bj\xa7\xe4\x9c\x8eH\x86\xd9\xd4#\xa6\xda\x88\xbf\xf3\xe4\f\xf1jT\x80j\xcd\x1a\x1b\xd8^\xef\x99\x14\x8a*\xe6K\x87c\x93my\x18\xe8H\x103\xf0'}]}, 0xb4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 159.236429ms ago: executing program 2 (id=3325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x85, 0x0, &(0x7f00000004c0)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) recvmmsg$unix(r9, &(0x7f00000062c0)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000440)=""/76, 0x4c}], 0x1}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)=""/6, 0x6}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000780)=""/135, 0x87}], 0x4, &(0x7f0000000840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/121, 0x79}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/217, 0xd9}, {&(0x7f0000000b00)=""/113, 0x71}, {&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000b80)=""/74, 0x4a}, {&(0x7f0000000c00)=""/210, 0xd2}], 0x7, &(0x7f0000000d80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000e40)=@abs, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000ec0)=""/112, 0x70}, {&(0x7f0000000f40)=""/124, 0x7c}, {&(0x7f0000000fc0)=""/116, 0x74}, {&(0x7f0000001040)=""/67, 0x43}], 0x4, &(0x7f0000001100)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001200)=""/42, 0x2a}, {&(0x7f0000001300)=""/156, 0x9c}, {&(0x7f0000001240)=""/75, 0x4b}, {&(0x7f00000013c0)=""/205, 0xcd}, {&(0x7f00000014c0)=""/153, 0x99}, {&(0x7f0000001580)=""/114, 0x72}, {&(0x7f0000001600)=""/198, 0xc6}], 0x7, &(0x7f0000001780)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001880)=""/93, 0x5d}, {&(0x7f0000001900)=""/220, 0xdc}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/153, 0x99}, {&(0x7f0000001ac0)=""/171, 0xab}], 0x5, &(0x7f0000001c00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000001d00), 0x6e, &(0x7f00000020c0)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/146, 0x92}, {&(0x7f0000001e40)=""/201, 0xc9}, {&(0x7f0000001f40)=""/67, 0x43}, {&(0x7f0000001fc0)=""/151, 0x97}, {&(0x7f0000002080)=""/35, 0x23}], 0x6}}], 0x7, 0xa94858367234795f, &(0x7f0000002140)={0x77359400}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4", 0x20}, {&(0x7f00000001c0)="43ef6e06729e", 0x6}], 0x2}, 0x4) 157.741031ms ago: executing program 0 (id=3326): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000dee722ad009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4}, 0x90) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe1b}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 9.796469ms ago: executing program 1 (id=3327): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x3000000, 0x32, 0xffffffffffffffff, 0x1a326000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000e00)=0x20, 0x4) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0xe0, 0x428, 0x338, 0x338, 0x338, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x9, 0x10000, @value=r4}, 0x28) unshare(0x26020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xfff1}, {0xf, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x80, 0x2, {{0x6, 0x2, 0x10000, 0x5, 0xffffffff}, [@TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x6, 0x2, 0xd58}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffffffaf, 0x1000, 0x5, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0xb1b, 0x401, 0x1, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xfffffffb, 0xff, 0x4, 0x6}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0xe, 0x4}}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x128, 0x1170, 0x1398, 0x0, 0x1170, 0x248, 0x1398, 0x1398, 0x248, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x62, 0x2, 0x3}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x7f], 0x0, 0x22}}, @inet=@rpfilter={{0x28}, {0x57f1718df6184a85}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x7, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="40010000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESDEC=r11, @ANYRESHEX=r0, @ANYRESOCT=r11, @ANYRES32, @ANYRES32=r11], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 0s ago: executing program 0 (id=3328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd2c, 0xe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4814}, 0x4008004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52, 0x0, 0x0, 0xffff}, 0x28) kernel console output (not intermixed with test programs): 2816 - 0 [ 196.927904][T12215] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 196.957904][T12215] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 197.174482][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 197.416491][T12339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.437063][T12344] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 197.495287][T12353] 8021q: VLANs not supported on gre0 [ 197.697040][T12372] tipc: Enabling of bearer rejected, failed to enable media [ 197.739574][T12372] netlink: 'syz.3.1764': attribute type 3 has an invalid length. [ 197.762677][T12376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.808904][T12378] tc_dump_action: action bad kind [ 197.881598][T12380] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 198.050393][T12393] openvswitch: netlink: Multiple metadata blocks provided [ 198.261939][T12412] netlink: 'syz.4.1782': attribute type 2 has an invalid length. [ 198.283895][T12412] netlink: 'syz.4.1782': attribute type 8 has an invalid length. [ 198.515405][T12439] syzkaller0: entered promiscuous mode [ 198.534377][T12439] syzkaller0: entered allmulticast mode [ 198.682591][T12454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.739888][T12459] RDS: rds_bind could not find a transport for ::ffff:172.30.255.2, load rds_tcp or rds_rdma? [ 198.996695][T12465] wg1 speed is unknown, defaulting to 1000 [ 199.297593][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 199.774295][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 199.782383][ C1] lec:lec_tx_timeout: lec0 [ 199.787013][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 200.058067][T12515] __nla_validate_parse: 11 callbacks suppressed [ 200.058085][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 200.452579][T12537] netlink: 'syz.4.1814': attribute type 4 has an invalid length. [ 200.668756][T12540] syzkaller0: entered promiscuous mode [ 200.675673][T12540] syzkaller0: entered allmulticast mode [ 200.701118][T12551] bond0: entered promiscuous mode [ 200.706538][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 200.717167][T12551] batadv0: entered promiscuous mode [ 200.724136][T12551] debugfs: 'hsr1' already exists in 'hsr' [ 200.730241][T12551] Cannot create hsr debugfs directory [ 200.735992][T12551] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 200.746764][T12551] hsr1: entered allmulticast mode [ 200.751813][T12551] bond0: entered allmulticast mode [ 200.757082][T12551] batadv0: entered allmulticast mode [ 200.762750][T12551] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 200.771107][T12551] bond0: left promiscuous mode [ 200.776757][T12551] batadv0: left promiscuous mode [ 200.798285][T12553] batman_adv: batadv0: Adding interface: dummy0 [ 200.805267][T12553] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.831813][T12553] batman_adv: batadv0: Interface activated: dummy0 [ 200.851380][T12548] batadv0: mtu less than device minimum [ 200.859289][T12548] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 200.871177][T12548] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.013778][T12568] sctp: [Deprecated]: syz.3.1821 (pid 12568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.013778][T12568] Use struct sctp_sack_info instead [ 202.491732][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 202.499841][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'. [ 202.517340][T12595] syzkaller0: entered promiscuous mode [ 202.522869][T12595] syzkaller0: entered allmulticast mode [ 202.531474][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 202.762445][T12613] sctp: [Deprecated]: syz.0.1838 (pid 12613) Use of int in max_burst socket option deprecated. [ 202.762445][T12613] Use struct sctp_assoc_value instead [ 202.804977][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 202.957097][T12633] netlink: 'syz.2.1844': attribute type 11 has an invalid length. [ 203.105004][T12644] netlink: 'syz.1.1847': attribute type 39 has an invalid length. [ 203.176784][T12646] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1847'. [ 203.197992][T12646] netlink: 'syz.1.1847': attribute type 1 has an invalid length. [ 203.238040][T12646] bond3: entered promiscuous mode [ 203.243828][T12646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.245794][T12652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1850'. [ 203.341054][T12658] netlink: 'syz.1.1851': attribute type 10 has an invalid length. [ 203.352330][T12659] netlink: 'syz.1.1851': attribute type 10 has an invalid length. [ 203.393752][T12658] syz_tun: entered promiscuous mode [ 203.402254][T12665] nbd: must specify at least one socket [ 203.416991][T12665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1853'. [ 203.435900][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 203.451125][T12658] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 203.467657][T12659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.481911][T12659] team0: Port device bond0 added [ 204.048661][T12718] veth0: entered promiscuous mode [ 204.099461][T12719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.328514][T12713] syzkaller1: entered promiscuous mode [ 204.334052][T12713] syzkaller1: entered allmulticast mode [ 204.489095][T12740] dvmrp0: entered allmulticast mode [ 204.576633][T12742] veth0: entered promiscuous mode [ 204.592862][T12742] wireguard0: entered promiscuous mode [ 204.602761][T12742] wireguard0: entered allmulticast mode [ 204.638055][T12742] team0: Device wireguard0 is of different type [ 204.804264][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 204.812366][ C1] lec:lec_tx_timeout: lec0 [ 204.817208][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 204.843887][T12746] syzkaller0: entered promiscuous mode [ 204.849816][T12746] syzkaller0: entered allmulticast mode [ 204.906155][T12760] vxcan0: entered allmulticast mode [ 206.133024][T12741] veth0: left promiscuous mode [ 206.139380][T12747] syzkaller0: entered promiscuous mode [ 206.145012][T12747] syzkaller0: entered allmulticast mode [ 206.158696][T12762] bond0: entered promiscuous mode [ 206.166178][T12762] batadv0: entered promiscuous mode [ 206.172759][T12762] debugfs: 'hsr1' already exists in 'hsr' [ 206.179119][T12762] Cannot create hsr debugfs directory [ 206.185025][T12762] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 206.204895][T12762] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 206.269419][T12773] __nla_validate_parse: 10 callbacks suppressed [ 206.269437][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 206.288561][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 206.309414][T12773] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1884'. [ 206.322795][T12771] net_ratelimit: 17 callbacks suppressed [ 206.322809][T12771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.649293][ T6054] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.663616][ T6054] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.673543][ T6054] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.697797][ T6054] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.815102][T12804] syzkaller0: entered promiscuous mode [ 206.820844][T12804] syzkaller0: entered allmulticast mode [ 207.321162][T12817] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1897'. [ 207.661961][T12833] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1898'. [ 208.188448][T12825] tipc: Enabled bearer , priority 0 [ 208.310511][T12828] syzkaller0: entered promiscuous mode [ 208.316932][T12838] ipt_REJECT: TCP_RESET invalid for non-tcp [ 208.325995][T12828] syzkaller0: entered allmulticast mode [ 208.332204][T12828] tipc: Resetting bearer [ 208.348682][T12818] tipc: Resetting bearer [ 208.428416][T12843] netlink: 157136 bytes leftover after parsing attributes in process `syz.0.1904'. [ 209.582729][T12818] tipc: Disabling bearer [ 209.620259][ T5918] tipc: Node number set to 2453968889 [ 209.740778][T12859] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1907'. [ 209.753120][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'. [ 209.824547][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.832616][ C1] lec:lec_tx_timeout: lec0 [ 209.838065][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.890844][T12866] netlink: 'syz.1.1912': attribute type 1 has an invalid length. [ 210.081552][T12883] syzkaller0: entered promiscuous mode [ 210.087964][T12883] syzkaller0: entered allmulticast mode [ 210.201042][T12903] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1919'. [ 211.650267][T12915] syzkaller1: entered promiscuous mode [ 211.656125][T12915] syzkaller1: entered allmulticast mode [ 212.008724][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 212.165937][T12960] syzkaller0: entered promiscuous mode [ 212.171674][T12960] syzkaller0: entered allmulticast mode [ 212.307105][T12972] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20003 [ 212.327503][T12972] netlink: 'syz.3.1938': attribute type 4 has an invalid length. [ 212.378368][T12973] netlink: 'syz.3.1938': attribute type 4 has an invalid length. [ 212.389323][T12971] syzkaller0: entered promiscuous mode [ 212.396964][T12971] syzkaller0: entered allmulticast mode [ 212.428227][T12976] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004 [ 212.466018][T12982] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 212.485338][T12982] bond5 (unregistering): Released all slaves [ 212.498646][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 212.888359][T13010] syz.1.1947: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.910546][T13010] CPU: 1 UID: 0 PID: 13010 Comm: syz.1.1947 Not tainted syzkaller #0 PREEMPT(full) [ 212.910575][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 212.910590][T13010] Call Trace: [ 212.910600][T13010] [ 212.910609][T13010] dump_stack_lvl+0xe8/0x150 [ 212.910639][T13010] warn_alloc+0x249/0x340 [ 212.910662][T13010] ? stack_trace_save+0xa9/0x100 [ 212.910692][T13010] ? __pfx_warn_alloc+0x10/0x10 [ 212.910713][T13010] ? kasan_save_track+0x4f/0x80 [ 212.910727][T13010] ? kasan_save_track+0x3e/0x80 [ 212.910740][T13010] ? __kasan_kmalloc+0x93/0xb0 [ 212.910755][T13010] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 212.910769][T13010] ? xskq_create+0x56/0x170 [ 212.910786][T13010] ? xsk_setsockopt+0x54c/0x990 [ 212.910800][T13010] ? do_sock_setsockopt+0x17c/0x1b0 [ 212.910821][T13010] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 212.910841][T13010] ? do_syscall_64+0xe2/0xf80 [ 212.910871][T13010] __vmalloc_node_range_noprof+0x132/0x1730 [ 212.910909][T13010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.910928][T13010] ? __kasan_kmalloc+0x93/0xb0 [ 212.910948][T13010] vmalloc_user_noprof+0xad/0xe0 [ 212.910962][T13010] ? xskq_create+0xbf/0x170 [ 212.910981][T13010] xskq_create+0xbf/0x170 [ 212.911001][T13010] xsk_init_queue+0xad/0x110 [ 212.911020][T13010] xsk_setsockopt+0x54c/0x990 [ 212.911038][T13010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.911054][T13010] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.911075][T13010] ? aa_sock_opt_perm+0xff/0x1a0 [ 212.911096][T13010] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 212.911109][T13010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.911126][T13010] do_sock_setsockopt+0x17c/0x1b0 [ 212.911150][T13010] __x64_sys_setsockopt+0x13d/0x1b0 [ 212.911175][T13010] do_syscall_64+0xe2/0xf80 [ 212.911195][T13010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.911208][T13010] ? trace_irq_disable+0x37/0x100 [ 212.911226][T13010] ? clear_bhb_loop+0x60/0xb0 [ 212.911243][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.911257][T13010] RIP: 0033:0x7f2661d9acb9 [ 212.911274][T13010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.911287][T13010] RSP: 002b:00007f2662b75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.911304][T13010] RAX: ffffffffffffffda RBX: 00007f2662015fa0 RCX: 00007f2661d9acb9 [ 212.911314][T13010] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 212.911323][T13010] RBP: 00007f2661e08bf7 R08: 0000000000000004 R09: 0000000000000000 [ 212.911332][T13010] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.911341][T13010] R13: 00007f2662016038 R14: 00007f2662015fa0 R15: 00007ffd67726728 [ 212.911364][T13010] [ 212.911488][T13010] Mem-Info: [ 213.187587][T13010] active_anon:5845 inactive_anon:0 isolated_anon:0 [ 213.187587][T13010] active_file:2950 inactive_file:39974 isolated_file:0 [ 213.187587][T13010] unevictable:768 dirty:49 writeback:0 [ 213.187587][T13010] slab_reclaimable:11712 slab_unreclaimable:109198 [ 213.187587][T13010] mapped:29114 shmem:1363 pagetables:1560 [ 213.187587][T13010] sec_pagetables:0 bounce:0 [ 213.187587][T13010] kernel_misc_reclaimable:0 [ 213.187587][T13010] free:1313044 free_pcp:14838 free_cma:0 [ 213.236324][T13010] Node 0 active_anon:23380kB inactive_anon:0kB active_file:11800kB inactive_file:159696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116456kB dirty:196kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13936kB pagetables:6108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.269776][T13010] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.300937][T13010] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.331959][T13010] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 213.338577][T13010] Node 0 DMA32 free:1349576kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23380kB inactive_anon:0kB active_file:11800kB inactive_file:159696kB unevictable:1536kB writepending:196kB zspages:0kB present:3129332kB managed:2555788kB mlocked:0kB bounce:0kB free_pcp:37776kB local_pcp:20088kB free_cma:0kB [ 213.372891][T13010] lowmem_reserve[]: 0 0 1 1 1 [ 213.380237][T13010] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.410531][T13010] lowmem_reserve[]: 0 0 0 0 0 [ 213.415901][T13010] Node 1 Normal free:3887240kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21740kB local_pcp:13288kB free_cma:0kB [ 213.448697][T13010] lowmem_reserve[]: 0 0 0 0 0 [ 213.453453][T13010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.466831][T13010] Node 0 DMA32: 3826*4kB (UM) 2964*8kB (UM) 1252*16kB (UM) 97*32kB (ME) 300*64kB (UM) 446*128kB (UME) 385*256kB (UME) 297*512kB (UM) 196*1024kB (UME) 21*2048kB (UM) 175*4096kB (UM) = 1349576kB [ 213.486928][T13010] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 213.499150][T13010] Node 1 Normal: 152*4kB (UE) 49*8kB (UME) 48*16kB (UME) 81*32kB (UME) 28*64kB (UME) 9*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3887240kB [ 213.518124][T13010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.528106][T13010] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.538141][T13010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.548026][T13010] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.557959][T13010] 44283 total pagecache pages [ 213.562657][T13010] 0 pages in swap cache [ 213.567342][T13010] Free swap = 124996kB [ 213.571616][T13010] Total swap = 124996kB [ 213.576321][T13010] 2097051 pages RAM [ 213.580153][T13010] 0 pages HighMem/MovableOnly [ 213.585362][T13010] 426142 pages reserved [ 213.589827][T13010] 0 pages cma reserved [ 214.844746][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.852795][ C1] lec:lec_tx_timeout: lec0 [ 214.857485][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.973776][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1953'. [ 215.019763][T13034] sctp: [Deprecated]: syz.3.1953 (pid 13034) Use of int in max_burst socket option. [ 215.019763][T13034] Use struct sctp_assoc_value instead [ 215.046329][T13034] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 215.063343][T13034] syz_tun: entered promiscuous mode [ 215.119956][T13049] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 215.131754][T13034] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 215.165750][T13049] bond0: left promiscuous mode [ 215.172498][T13034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1953'. [ 215.196209][T13049] bond_slave_0: left promiscuous mode [ 215.231484][T13049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.253842][T13049] team0: Port device bond0 added [ 215.260902][T13059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1961'. [ 215.272749][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 215.319318][T13059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1961'. [ 215.342038][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 215.384037][T13061] syzkaller0: entered promiscuous mode [ 215.392118][T13061] syzkaller0: entered allmulticast mode [ 215.799843][T13095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1971'. [ 215.805804][T13081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1966'. [ 217.032430][T13095] gretap2: entered promiscuous mode [ 217.038804][T13095] gretap2: entered allmulticast mode [ 217.567450][T13136] __nla_validate_parse: 3 callbacks suppressed [ 217.567471][T13136] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1983'. [ 217.583536][T13138] syzkaller0: entered promiscuous mode [ 217.583558][T13138] syzkaller0: entered allmulticast mode [ 217.758408][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 217.764075][T13150] netlink: 'syz.1.1988': attribute type 18 has an invalid length. [ 217.779531][T13146] syzkaller0: entered promiscuous mode [ 217.786078][T13146] syzkaller0: entered allmulticast mode [ 217.811550][T13151] vlan1: entered allmulticast mode [ 217.829079][T13151] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 218.131307][T13172] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1994'. [ 218.169759][T13173] syz.0.1994 uses old SIOCAX25GETINFO [ 218.180066][T13175] erspan0: entered promiscuous mode [ 218.188480][T13175] erspan0: entered allmulticast mode [ 218.209116][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 218.407728][T13186] syzkaller0: entered promiscuous mode [ 218.415729][T13186] syzkaller0: entered allmulticast mode [ 218.560591][T13195] x_tables: duplicate underflow at hook 2 [ 219.775400][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.874309][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 219.882692][ C1] lec:lec_tx_timeout: lec0 [ 219.887905][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 221.311440][T13201] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 221.367322][T13212] kthread_run failed with err -4 [ 221.373227][T13219] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2006'. [ 221.422021][T13224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2007'. [ 221.431674][T13224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2007'. [ 221.770768][T13244] syzkaller0: entered promiscuous mode [ 221.777851][T13244] syzkaller0: entered allmulticast mode [ 221.795614][T13249] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.2018'. [ 221.806542][T13249] netlink: Unknown conntrack attr (type=2304, max=9) [ 221.949988][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 222.013079][T13267] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.2024'. [ 222.343054][T13274] Bluetooth: MGMT ver 1.23 [ 222.348011][T13274] Bluetooth: hci1: too big key_count value 32778 [ 223.422139][T13265] hsr_slave_0 (unregistering): left promiscuous mode [ 223.463705][T13268] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 223.473714][T13268] team0: Device macvtap1 is already an upper device of the team interface [ 223.709411][T13283] __nla_validate_parse: 2 callbacks suppressed [ 223.709430][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 223.766557][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'. [ 223.795848][T13297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2029'. [ 223.826272][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'. [ 223.835599][T13297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2029'. [ 223.929531][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'. [ 224.122914][T13321] macsec0: vlans aren't supported yet for dev_uc|mc_add() [ 224.226371][T13329] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2041'. [ 224.226371][T13319] syzkaller0: entered promiscuous mode [ 224.226397][T13319] syzkaller0: entered allmulticast mode [ 224.268988][T13330] netlink: 'syz.4.2041': attribute type 29 has an invalid length. [ 224.301206][T13329] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2041'. [ 224.905530][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.913612][ C1] lec:lec_tx_timeout: lec0 [ 224.918419][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 225.741275][T13333] netlink: 'syz.4.2041': attribute type 29 has an invalid length. [ 225.865630][T13352] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2047'. [ 225.882567][T13352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.917862][T13358] netlink: 'syz.4.2046': attribute type 10 has an invalid length. [ 225.992451][T13358] veth0_vlan: left promiscuous mode [ 226.004034][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2046'. [ 226.028216][T13358] veth0_vlan: entered promiscuous mode [ 226.039413][T13358] team0: Device veth0_vlan failed to register rx_handler [ 226.108727][T13360] bond4: Removing last ns target with arp_interval on [ 226.155259][T13367] bond5: option resend_igmp: invalid value (32767) [ 226.161995][T13367] bond5: option resend_igmp: allowed values 0 - 255 [ 226.173437][T13367] bond5 (unregistering): Released all slaves [ 226.215264][T13371] team0: Port device veth3 added [ 226.627605][T13408] netlink: 'syz.4.2054': attribute type 10 has an invalid length. [ 228.084909][T13408] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 228.093081][T13408] batman_adv: batadv0: Adding interface: netdevsim0 [ 228.100706][T13408] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.130694][T13408] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 228.168743][T13427] IPv6: sit2: Disabled Multicast RS [ 228.643026][T13466] netlink: 'syz.1.2074': attribute type 21 has an invalid length. [ 228.733133][T13473] netlink: 'syz.0.2077': attribute type 3 has an invalid length. [ 228.742553][T13475] netlink: 'syz.1.2076': attribute type 1 has an invalid length. [ 228.754935][T13473] __nla_validate_parse: 3 callbacks suppressed [ 228.754951][T13473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2077'. [ 228.859506][T13479] sctp: [Deprecated]: syz.4.2078 (pid 13479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.859506][T13479] Use struct sctp_sack_info instead [ 228.883501][T13482] syzkaller0: entered allmulticast mode [ 228.893285][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 228.917101][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 229.219645][T13503] netlink: 'syz.3.2087': attribute type 11 has an invalid length. [ 229.269192][T13497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2085'. [ 229.299738][T13497] netlink: 'syz.0.2085': attribute type 3 has an invalid length. [ 229.317045][T13497] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2085'. [ 229.367112][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 229.571730][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 229.760545][T13525] bond6: entered promiscuous mode [ 229.777271][T13525] bond6: entered allmulticast mode [ 229.799517][T13525] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.877566][T13530] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2098'. [ 229.934451][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 229.942510][ C1] lec:lec_tx_timeout: lec0 [ 229.947384][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 229.968249][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 230.001636][T13533] syzkaller0: entered promiscuous mode [ 230.009556][T13533] syzkaller0: entered allmulticast mode [ 230.814606][ C0] hrtimer: interrupt took 714280 ns [ 231.629284][T13538] syzkaller1: entered promiscuous mode [ 231.635175][T13538] syzkaller1: entered allmulticast mode [ 231.643371][T13497] wg1 speed is unknown, defaulting to 1000 [ 231.657725][T13565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2104'. [ 231.671666][T13569] tipc: Enabling of bearer rejected, media not registered [ 231.767721][T13574] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 231.876189][T13582] netlink: 'syz.4.2110': attribute type 1 has an invalid length. [ 231.989606][T13583] tipc: Resetting bearer [ 232.144323][T13583] syz_tun: left promiscuous mode [ 232.166214][T13583] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.208958][T13583] batman_adv: batadv0: Interface deactivated: dummy0 [ 232.299772][T13583] wg1: left promiscuous mode [ 232.329295][T13583] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 233.070387][ T5883] IPVS: starting estimator thread 0... [ 233.206164][T13633] IPVS: using max 33 ests per chain, 79200 per kthread [ 233.810240][T13682] syz_tun: entered allmulticast mode [ 233.840018][T13684] __nla_validate_parse: 9 callbacks suppressed [ 233.840037][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 233.884898][T13675] syz_tun: left allmulticast mode [ 234.004802][T13684] hsr_slave_1 (unregistering): left promiscuous mode [ 234.011791][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2134'. [ 234.057697][T13691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.091290][T13693] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 234.371182][T13691] bond4 (unregistering): (slave dummy0): Releasing backup interface [ 234.386284][T13691] bond4 (unregistering): Released all slaves [ 234.404088][T13695] netlink: 'syz.3.2135': attribute type 2 has an invalid length. [ 234.413187][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 234.445028][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 234.477251][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 234.627503][T13724] netlink: 'syz.3.2144': attribute type 1 has an invalid length. [ 234.735404][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 234.788650][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 234.862134][T13745] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2148'. [ 234.954512][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 234.962572][ C1] lec:lec_tx_timeout: lec0 [ 234.967711][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 235.181400][T13767] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2154'. [ 235.356680][T13786] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 235.414189][T13789] x_tables: duplicate underflow at hook 1 [ 235.508493][T13793] netlink: 'syz.3.2161': attribute type 1 has an invalid length. [ 235.609449][T13795] erspan0: left promiscuous mode [ 235.624960][T13795] erspan0: left allmulticast mode [ 235.665190][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2166'. [ 235.721928][T13810] netlink: 'syz.4.2167': attribute type 5 has an invalid length. [ 235.973096][T13816] 8021q: adding VLAN 0 to HW filter on device bond7 [ 236.119224][T13817] bond7 (unregistering): Released all slaves [ 237.042063][T13894] rdma_op ffff88814d4fa1f0 conn xmit_rdma 0000000000000000 [ 237.198924][T13914] syzkaller0: entered promiscuous mode [ 237.204634][T13914] syzkaller0: entered allmulticast mode [ 238.667036][T13949] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 238.675747][T13950] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 239.211546][T13965] netlink: 'syz.0.2209': attribute type 9 has an invalid length. [ 239.220310][T13965] netlink: 'syz.0.2209': attribute type 11 has an invalid length. [ 239.231228][T13965] netlink: 'syz.0.2209': attribute type 12 has an invalid length. [ 239.239301][T13965] __nla_validate_parse: 11 callbacks suppressed [ 239.239315][T13965] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2209'. [ 239.360933][T13974] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2212'. [ 239.476612][T13983] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 239.556633][T13983] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.574074][T13983] bond5: (slave bond6): making interface the new active one [ 239.583848][T13983] bond5: (slave bond6): Enslaving as an active interface with an up link [ 239.655543][T13992] bond5: (slave gretap3): Enslaving as a backup interface with an up link [ 239.665135][T13994] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2219'. [ 239.678507][T13994] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 239.969623][T14024] xt_bpf: check failed: parse error [ 239.993246][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 240.003587][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 240.067792][T14031] netlink: 'syz.3.2230': attribute type 4 has an invalid length. [ 240.207116][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2234'. [ 240.221463][T14041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2234'. [ 240.322635][T14049] netlink: 'syz.1.2237': attribute type 2 has an invalid length. [ 240.332426][T14049] netlink: 'syz.1.2237': attribute type 1 has an invalid length. [ 240.355223][T14052] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2238'. [ 240.427300][T14056] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2239'. [ 240.443429][T14056] 0{X: renamed from gretap0 (while UP) [ 240.459736][T14056] 0{X: entered allmulticast mode [ 240.465757][T14056] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 240.509074][T14056] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 240.644968][T14070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2241'. [ 240.781127][T14079] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 240.793780][T14079] bond4 (unregistering): Released all slaves [ 240.863047][T14082] bond6: entered allmulticast mode [ 240.878679][T14082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.894271][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5930 ms [ 240.902296][ C1] lec:lec_tx_timeout: lec0 [ 240.907361][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 240.930404][T14083] bond7: entered allmulticast mode [ 240.936334][T14083] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.973006][T14094] netlink: 'syz.1.2247': attribute type 9 has an invalid length. [ 240.981367][T14094] netlink: 'syz.1.2247': attribute type 11 has an invalid length. [ 240.987499][T14093] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 240.990145][T14094] netlink: 'syz.1.2247': attribute type 12 has an invalid length. [ 240.998116][T14093] tipc: Enabled bearer , priority 10 [ 241.023654][T14094] netlink: 'syz.1.2247': attribute type 1 has an invalid length. [ 241.033970][T14094] openvswitch: netlink: IPv4 tunnel dst address is zero [ 241.180715][T14110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.320705][T14120] Bluetooth: MGMT ver 1.23 [ 241.906822][T14152] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 241.954056][T14152] bond4 (unregistering): Released all slaves [ 241.975616][T14163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.051159][T14166] netlink: 'syz.2.2268': attribute type 12 has an invalid length. [ 242.119016][T14146] wg1 speed is unknown, defaulting to 1000 [ 242.370589][T14183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.700499][T14211] openvswitch: netlink: Message has 592 unknown bytes. [ 242.715726][T14211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.202274][T14242] openvswitch: netlink: IP tunnel dst address not specified [ 245.442314][T14312] macvtap1: entered promiscuous mode [ 245.469899][T14312] team0: entered promiscuous mode [ 245.479109][T14312] team_slave_0: entered promiscuous mode [ 245.495568][T14312] team_slave_1: entered promiscuous mode [ 245.501954][T14312] bond0: entered promiscuous mode [ 245.515130][T14312] bond_slave_0: entered promiscuous mode [ 245.524166][T14312] @0: entered promiscuous mode [ 245.546308][T14312] macvtap1: entered allmulticast mode [ 245.551835][T14312] team0: entered allmulticast mode [ 245.557464][T14312] team_slave_0: entered allmulticast mode [ 245.563284][T14312] team_slave_1: entered allmulticast mode [ 245.570673][T14312] bond0: entered allmulticast mode [ 245.577002][T14312] bond_slave_0: entered allmulticast mode [ 245.592990][T14312] @0: entered allmulticast mode [ 245.599520][T14312] syz_tun: entered allmulticast mode [ 245.611504][T14331] validate_nla: 4 callbacks suppressed [ 245.611521][T14331] netlink: 'syz.2.2314': attribute type 2 has an invalid length. [ 245.616350][T14312] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 245.625216][T14331] netlink: 'syz.2.2314': attribute type 8 has an invalid length. [ 245.635763][T14313] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 245.657493][T14325] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 245.661247][T14313] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 245.670561][T14331] __nla_validate_parse: 23 callbacks suppressed [ 245.670578][T14331] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2314'. [ 245.692627][T14313] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 245.749816][T14337] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2316'. [ 245.914390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 245.922562][ C1] lec:lec_tx_timeout: lec0 [ 245.927955][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.000411][T14348] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 246.103308][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 246.103809][T14358] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2323'. [ 246.129381][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 246.368891][T14371] netlink: 'syz.1.2327': attribute type 4 has an invalid length. [ 246.390645][T14375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2329'. [ 246.439852][T14371] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2327'. [ 246.723458][T14370] wg1 speed is unknown, defaulting to 1000 [ 246.849165][T14398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2338'. [ 246.976858][T14408] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2340'. [ 247.044512][T14415] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2340'. [ 247.293547][T14430] tipc: Can't bind to reserved service type 0 [ 247.527358][T14444] pim6reg: entered allmulticast mode [ 247.557833][T14444] bond0: entered promiscuous mode [ 247.572044][T14444] bond_slave_0: entered promiscuous mode [ 247.580024][T14439] netlink: 'syz.4.2350': attribute type 1 has an invalid length. [ 247.596064][T14444] syz_tun: entered promiscuous mode [ 247.605364][T14444] bond0: entered allmulticast mode [ 247.620864][T14444] bond_slave_0: entered allmulticast mode [ 247.641370][T14444] syz_tun: entered allmulticast mode [ 247.663989][T14444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.706950][ T36] bond0: (slave syz_tun): link status definitely down, disabling slave [ 247.802411][T14463] netlink: 'syz.2.2358': attribute type 11 has an invalid length. [ 247.899544][T14465] syzkaller0: entered promiscuous mode [ 247.907610][T14465] syzkaller0: entered allmulticast mode [ 247.965856][T14465] tipc: Enabled bearer , priority 0 [ 247.987624][T14464] tipc: Resetting bearer [ 248.153400][T14464] tipc: Disabling bearer [ 248.391570][T14498] sctp: [Deprecated]: syz.1.2368 (pid 14498) Use of int in maxseg socket option. [ 248.391570][T14498] Use struct sctp_assoc_value instead [ 248.863367][T14502] syzkaller0: entered promiscuous mode [ 248.871363][T14502] syzkaller0: entered allmulticast mode [ 250.944519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 250.952652][ C1] lec:lec_tx_timeout: lec0 [ 250.957305][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 251.392329][T14564] sctp: [Deprecated]: syz.1.2382 (pid 14564) Use of int in maxseg socket option. [ 251.392329][T14564] Use struct sctp_assoc_value instead [ 251.439906][T14566] netlink: 'syz.0.2383': attribute type 10 has an invalid length. [ 251.458786][T14566] bridge_slave_1: left allmulticast mode [ 251.473355][T14566] bridge_slave_1: left promiscuous mode [ 251.488680][T14566] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.652206][T14566] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 251.967476][T14588] syzkaller0: entered promiscuous mode [ 251.973166][T14588] syzkaller0: entered allmulticast mode [ 251.989829][T14591] ipvlan3: entered promiscuous mode [ 253.635363][T14627] __nla_validate_parse: 8 callbacks suppressed [ 253.635382][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 253.729359][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 254.230681][T14682] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 254.260117][T14682] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 254.353969][T14689] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2413'. [ 254.379219][T14689] netlink: 4062 bytes leftover after parsing attributes in process `syz.2.2413'. [ 254.400253][T14689] netlink: 5460 bytes leftover after parsing attributes in process `syz.2.2413'. [ 254.439111][T14699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.459289][T14699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2416'. [ 254.505664][T14700] ip6tnl2: entered promiscuous mode [ 254.538217][T14702] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 255.082570][ T6047] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.112417][ T6047] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.142826][ T6047] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.166206][ T6047] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.265002][T14743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2429'. [ 255.278502][T14748] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2431'. [ 255.294185][T14742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2429'. [ 255.607111][T14775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2440'. [ 256.162958][T14815] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 256.670129][T14849] bond7: ARP target 1.0.0.0 is already present [ 256.684490][T14849] bond7: option arp_ip_target: invalid value (1) [ 256.695154][T14849] bond7 (unregistering): Released all slaves [ 256.712620][T14850] netlink: 'syz.1.2456': attribute type 4 has an invalid length. [ 256.744248][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 256.752269][ C1] lec:lec_tx_timeout: lec0 [ 256.757528][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 256.881985][T14869] netlink: 'syz.3.2463': attribute type 1 has an invalid length. [ 257.027974][T14873] syzkaller0: entered promiscuous mode [ 257.034873][T14873] syzkaller0: entered allmulticast mode [ 258.489010][ T30] audit: type=1800 audit(1769300679.006:6): pid=14890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2470" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 258.490040][T14895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.510479][T14890] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 258.545819][T14890] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 258.560747][T14890] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 258.777938][T14906] block nbd2: shutting down sockets [ 258.815695][T14910] syzkaller1: entered promiscuous mode [ 258.871755][T14910] syzkaller1: entered allmulticast mode [ 259.084737][T14933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.111407][T14933] netlink: 'syz.0.2482': attribute type 1 has an invalid length. [ 259.341367][T14953] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 259.379008][T14957] netlink: 'syz.0.2484': attribute type 10 has an invalid length. [ 259.401868][T14958] __nla_validate_parse: 8 callbacks suppressed [ 259.401989][T14958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'. [ 259.442500][T14957] team0: Port device dummy0 added [ 259.534670][T14963] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2489'. [ 259.586613][T14968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2492'. [ 259.750788][T14981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2497'. [ 259.846447][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 259.899266][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'. [ 259.909133][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'. [ 259.981272][T14994] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2502'. [ 260.004132][T14994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.021722][T14994] netlink: 'syz.3.2502': attribute type 21 has an invalid length. [ 260.030645][T14994] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2502'. [ 260.042903][T14994] netlink: 'syz.3.2502': attribute type 4 has an invalid length. [ 260.051723][T14994] netlink: 'syz.3.2502': attribute type 5 has an invalid length. [ 260.060065][T14994] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2502'. [ 260.241122][T15010] netlink: 'syz.0.2509': attribute type 1 has an invalid length. [ 260.338494][T15018] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 260.351849][T15018] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 260.392409][T15010] gretap1: entered promiscuous mode [ 260.403808][T15010] bond4: (slave gretap1): making interface the new active one [ 260.427271][T15010] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 260.521525][T15010] macvlan4: entered promiscuous mode [ 260.528436][T15010] macvlan4: entered allmulticast mode [ 260.537119][T15010] bond4: entered promiscuous mode [ 260.548302][T15010] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 260.560098][T15010] bond4: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 260.573295][T15010] bond4: left promiscuous mode [ 260.842149][T15037] vlan1: entered promiscuous mode [ 260.862247][T15037] batadv0: entered promiscuous mode [ 260.958699][ T30] audit: type=1800 audit(1769300681.476:7): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2520" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 260.980232][T15052] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 261.007376][T15052] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 261.032895][T15052] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 261.105161][T15064] syzkaller0: entered promiscuous mode [ 261.112245][T15064] syzkaller0: entered allmulticast mode [ 261.303322][T15078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.348078][T15067] tipc: Enabled bearer , priority 0 [ 261.359540][T15065] tipc: Enabling of bearer rejected, already enabled [ 261.492385][T15086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.560457][T15092] sit0: entered promiscuous mode [ 261.707237][T15075] wg1 speed is unknown, defaulting to 1000 [ 261.766560][T15099] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 261.774841][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 261.774912][ C1] lec:lec_tx_timeout: lec0 [ 261.788144][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.803664][T15099] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 261.952174][T15063] tipc: Resetting bearer [ 261.990877][T15063] tipc: Disabling bearer [ 262.055500][T15114] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 262.847536][T15160] veth1_macvtap: left promiscuous mode [ 263.293210][T15180] syzkaller0: entered promiscuous mode [ 263.314929][T15180] syzkaller0: entered allmulticast mode [ 263.820194][T15202] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 264.357194][T15243] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 264.386783][T15243] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 264.406130][T15243] __nla_validate_parse: 20 callbacks suppressed [ 264.406150][T15243] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.2576'. [ 264.639605][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'. [ 264.766072][T15265] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2583'. [ 264.956331][T15279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.875614][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'. [ 265.969364][T15303] syzkaller0: entered promiscuous mode [ 265.984383][T15303] syzkaller0: entered allmulticast mode [ 266.009074][T15303] TC_ACT_REPEAT abuse ? [ 266.213581][T15321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.256573][T15321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.277328][T15321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.315117][T15323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.794253][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 266.802296][ C1] lec:lec_tx_timeout: lec0 [ 266.807391][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 266.877335][T15332] netlink: 'syz.2.2599': attribute type 29 has an invalid length. [ 266.903970][T15333] netlink: 'syz.2.2599': attribute type 29 has an invalid length. [ 266.904161][T15339] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2601'. [ 266.913621][T15332] netlink: 'syz.2.2599': attribute type 29 has an invalid length. [ 266.932871][T15332] netlink: 'syz.2.2599': attribute type 29 has an invalid length. [ 266.943916][T15332] netlink: 'syz.2.2599': attribute type 29 has an invalid length. [ 266.953353][T15332] netlink: 'syz.2.2599': attribute type 29 has an invalid length. [ 266.983742][T15332] netlink: 'syz.2.2599': attribute type 29 has an invalid length. [ 267.017752][T15342] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2602'. [ 267.114369][T15344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2604'. [ 267.130156][T15344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2604'. [ 267.216131][T15358] bond6 (unregistering): Released all slaves [ 267.313710][T15360] bond7: (slave gretap4): making interface the new active one [ 267.528745][T15360] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 267.940921][T15388] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 267.955741][T15388] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 268.050452][T15395] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2615'. [ 268.943402][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2632'. [ 269.161709][T15463] bond7: option mode: invalid value (133) [ 269.180175][T15463] bond7 (unregistering): Released all slaves [ 269.320231][T15463] tipc: Enabled bearer , priority 0 [ 269.398679][T15463] syzkaller0: entered promiscuous mode [ 269.404632][T15463] syzkaller0: entered allmulticast mode [ 269.411138][T15463] tipc: Resetting bearer [ 269.426709][T15474] syzkaller0: entered promiscuous mode [ 269.436220][T15474] syzkaller0: entered allmulticast mode [ 269.515436][T15469] netlink: set zone limit has 4 unknown bytes [ 269.531437][T15462] tipc: Resetting bearer [ 269.645865][T15495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2642'. [ 269.659753][T15497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2642'. [ 269.668373][T15499] validate_nla: 7 callbacks suppressed [ 269.668392][T15499] netlink: 'syz.0.2641': attribute type 1 has an invalid length. [ 269.683683][T15499] netlink: 'syz.0.2641': attribute type 1 has an invalid length. [ 271.188316][T15462] tipc: Disabling bearer [ 271.271851][T15514] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.286366][T15514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.287066][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 271.348258][T15521] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2648'. [ 271.388514][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2647'. [ 271.502590][T15530] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 271.580666][T15540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2649'. [ 271.608566][T15540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2649'. [ 271.733541][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 271.744827][T15548] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2653'. [ 271.756108][T15548] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2653'. [ 271.824537][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 271.832608][ C1] lec:lec_tx_timeout: lec0 [ 271.837802][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 271.880137][T15558] geneve3: entered promiscuous mode [ 271.893304][T15558] geneve3: entered allmulticast mode [ 271.915568][T15558] netlink: 'syz.3.2657': attribute type 1 has an invalid length. [ 272.160248][T15572] 0{X: renamed from gretap0 [ 272.186619][T15572] tipc: Disabling bearer [ 272.206793][T15572] 0{X: entered allmulticast mode [ 272.229399][T15572] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 272.614166][T15610] netlink: 'syz.2.2671': attribute type 3 has an invalid length. [ 272.653952][T15610] netlink: 'syz.2.2671': attribute type 2 has an invalid length. [ 273.116325][T15649] tipc: Enabling of bearer rejected, already enabled [ 273.581895][T15682] netlink: 'syz.2.2687': attribute type 32 has an invalid length. [ 273.636250][T15682] bond8: option coupled_control: invalid value (7) [ 273.653840][T15682] bond8 (unregistering): Released all slaves [ 274.055668][T15716] netlink: 'syz.1.2693': attribute type 1 has an invalid length. [ 274.115095][T15722] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.137550][T15716] bond7: entered promiscuous mode [ 274.153108][T15716] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.321703][T15728] syzkaller0: entered promiscuous mode [ 274.327308][T15728] syzkaller0: entered allmulticast mode [ 274.336941][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 274.736511][T15753] __nla_validate_parse: 15 callbacks suppressed [ 274.736531][T15753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2703'. [ 274.776855][T15753] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2703'. [ 274.868232][T15753] veth13: entered promiscuous mode [ 275.068959][T15746] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 275.300276][T15783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2710'. [ 275.380597][T15792] netlink: 'syz.3.2713': attribute type 2 has an invalid length. [ 275.397938][T15788] tap0: tun_chr_ioctl cmd 1074025672 [ 275.403599][T15792] netlink: 'syz.3.2713': attribute type 2 has an invalid length. [ 275.412875][T15788] tap0: ignored: set checksum disabled [ 275.420323][T15788] tap0: tun_chr_ioctl cmd 37729 [ 275.445553][T15788] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2712'. [ 275.563108][T15803] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2714'. [ 275.604118][T15803] netlink: 'syz.3.2714': attribute type 9 has an invalid length. [ 275.699877][T15803] netlink: 'syz.3.2714': attribute type 11 has an invalid length. [ 275.730518][T15803] netlink: 'syz.3.2714': attribute type 12 has an invalid length. [ 275.811479][T15803] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2714'. [ 275.853470][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2714'. [ 275.937779][T15824] only policy match revision 0 supported [ 275.937799][T15824] unable to load match [ 276.017328][T15830] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2723'. [ 276.083895][T15835] openvswitch: netlink: IPv4 tunnel dst address is zero [ 276.149014][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2726'. [ 276.176133][T15839] bridge_slave_0: default FDB implementation only supports local addresses [ 276.683672][T15880] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 276.691787][T15880] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2735'. [ 276.811059][T15889] xt_nat: multiple ranges no longer supported [ 276.844245][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 276.852305][ C1] lec:lec_tx_timeout: lec0 [ 276.857559][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.973868][T15898] netlink: 'syz.0.2740': attribute type 11 has an invalid length. [ 277.522158][T15922] syzkaller0: entered promiscuous mode [ 277.549309][T15922] syzkaller0: entered allmulticast mode [ 279.100523][T15926] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 279.218970][T15964] netlink: 'syz.1.2753': attribute type 10 has an invalid length. [ 279.278167][T15964] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 279.290663][T15964] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 279.327425][T15964] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 279.362689][T15975] 8021q: VLANs not supported on ip6_vti0 [ 279.385755][T15983] rdma_op ffff8880260cf1f0 conn xmit_rdma 0000000000000000 [ 279.407025][T15980] vxcan1 speed is unknown, defaulting to 1000 [ 279.439003][T15980] vxcan1 speed is unknown, defaulting to 1000 [ 279.471587][T15980] vxcan1 speed is unknown, defaulting to 1000 [ 279.720323][T15996] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 279.736576][T16000] netlink: 'syz.4.2762': attribute type 2 has an invalid length. [ 279.776739][T15980] infiniband syz1: set active [ 279.782514][T15980] infiniband syz1: added vxcan1 [ 279.789324][ T6068] vxcan1 speed is unknown, defaulting to 1000 [ 279.919276][T15980] RDS/IB: syz1: added [ 279.933779][T15980] smc: adding ib device syz1 with port count 1 [ 279.958151][T15980] smc: ib device syz1 port 1 has no pnetid [ 279.997028][T16019] __nla_validate_parse: 5 callbacks suppressed [ 279.997047][T16019] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2765'. [ 280.002435][T16010] syzkaller0: entered promiscuous mode [ 280.028395][T16010] syzkaller0: entered allmulticast mode [ 280.043148][ T6068] vxcan1 speed is unknown, defaulting to 1000 [ 280.077305][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2768'. [ 281.666317][T15980] vxcan1 speed is unknown, defaulting to 1000 [ 281.864256][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 281.872331][ C1] lec:lec_tx_timeout: lec0 [ 281.877159][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 281.958775][T16056] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 282.053376][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2778'. [ 282.054678][T15980] vxcan1 speed is unknown, defaulting to 1000 [ 282.257592][T16076] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2782'. [ 282.328460][T16084] netlink: 'syz.4.2784': attribute type 1 has an invalid length. [ 282.623329][T15980] vxcan1 speed is unknown, defaulting to 1000 [ 282.927655][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'. [ 283.057888][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2793'. [ 283.068759][T16121] netlink: 'syz.4.2793': attribute type 1 has an invalid length. [ 283.167634][T15980] vxcan1 speed is unknown, defaulting to 1000 [ 283.370220][T16142] netlink: 'syz.0.2801': attribute type 1 has an invalid length. [ 283.599067][T15980] vxcan1 speed is unknown, defaulting to 1000 [ 283.635461][T16161] netlink: 'syz.3.2805': attribute type 6 has an invalid length. [ 284.613049][T16208] netlink: 'syz.0.2813': attribute type 2 has an invalid length. [ 284.678447][T16215] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2808'. [ 284.688529][T16214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2815'. [ 284.704429][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2815'. [ 284.731148][T16205] openvswitch: netlink: Duplicate or invalid key (type 0). [ 284.754393][T16205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.849094][T16221] syzkaller0: entered promiscuous mode [ 284.857312][T16221] syzkaller0: entered allmulticast mode [ 285.044369][T16229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2821'. [ 285.087431][T16231] netlink: 'syz.0.2823': attribute type 1 has an invalid length. [ 285.096997][T16232] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2821'. [ 285.165249][T16231] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 285.236271][T16242] netlink: 'syz.0.2825': attribute type 1 has an invalid length. [ 285.279762][T16245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2826'. [ 285.297718][T16245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.308332][T16199] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 285.323410][T16242] bond7: entered promiscuous mode [ 285.355092][T16242] bond7: entered allmulticast mode [ 285.360730][T16242] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.386931][T16249] bridge: RTM_NEWNEIGH with invalid ether address [ 285.407792][T16250] bridge: RTM_NEWNEIGH with invalid ether address [ 285.425378][T16254] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2829'. [ 285.469721][ T6054] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.479122][T16258] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2831'. [ 285.524823][ T6054] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.572372][T16261] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2831'. [ 285.583056][T16261] ksmbd: Unknown IPC event: 3, ignore. [ 285.781845][T16284] netlink: 'syz.3.2838': attribute type 1 has an invalid length. [ 285.815710][T16284] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2838'. [ 285.816925][T16287] netlink: 'syz.3.2838': attribute type 1 has an invalid length. [ 285.833590][T16287] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2838'. [ 285.949624][T11083] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.030183][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2841'. [ 286.030681][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 286.059801][T16304] smc: net device caif0 applied user defined pnetid SYZ2 [ 286.087087][T16298] vlan0: entered allmulticast mode [ 286.135863][T16300] vlan0: entered allmulticast mode [ 286.258824][T16319] netlink: 'syz.0.2847': attribute type 11 has an invalid length. [ 286.468099][T11083] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.481032][T16336] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 286.505142][ T5918] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 286.732331][T16359] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 286.884911][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 286.893073][ C1] lec:lec_tx_timeout: lec0 [ 286.897770][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 287.001466][T16355] wg1 speed is unknown, defaulting to 1000 [ 287.010386][T16355] vxcan1 speed is unknown, defaulting to 1000 [ 287.376685][ T5918] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 287.407640][T16391] tipc: Enabled bearer , priority 0 [ 287.490903][T16391] tipc: Disabling bearer [ 287.599320][T16405] sctp: [Deprecated]: syz.2.2873 (pid 16405) Use of int in max_burst socket option. [ 287.599320][T16405] Use struct sctp_assoc_value instead [ 287.947773][T16424] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 288.238205][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.248116][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.262689][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.285330][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.292945][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.518953][ T5832] bond0: (slave syz_tun): Releasing backup interface [ 288.529174][ T5832] syz_tun (unregistering): left allmulticast mode [ 288.783767][T16455] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 288.911940][ T8737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.925452][ T8737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.930966][T16459] validate_nla: 3 callbacks suppressed [ 288.930986][T16459] netlink: 'syz.4.2889': attribute type 1 has an invalid length. [ 288.955749][T16432] wg1 speed is unknown, defaulting to 1000 [ 288.983911][T16432] vxcan1 speed is unknown, defaulting to 1000 [ 289.044288][ T8737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.074623][ T8737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.152142][T16468] smc: removing net device team0 with user defined pnetid SYZ2 [ 289.192828][T16468] team0 (unregistering): Port device team_slave_0 removed [ 289.212419][T16468] team0 (unregistering): Port device team_slave_1 removed [ 289.240322][T16468] team0 (unregistering): Port device dummy0 removed [ 289.341837][ T8737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.353054][ T8737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.372637][T12221] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.381597][T12221] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.390812][T12221] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.419347][T12221] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.492936][ T8737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.522831][ T8737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.657378][T11083] wg1 speed is unknown, defaulting to 1000 [ 289.663442][T11083] syz0: Port: 1 Link DOWN [ 290.103730][T16522] __nla_validate_parse: 22 callbacks suppressed [ 290.103755][T16522] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2907'. [ 290.243054][T16531] netlink: 'syz.0.2906': attribute type 1 has an invalid length. [ 290.266198][T16531] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2906'. [ 290.291660][T16531] netlink: 1960 bytes leftover after parsing attributes in process `syz.0.2906'. [ 290.336353][ T5848] Bluetooth: hci5: command tx timeout [ 290.358343][T16541] SET target dimension over the limit! [ 290.391700][T16531] openvswitch: netlink: Message has 592 unknown bytes. [ 290.403707][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 290.418596][T16531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.647772][ T8737] dvmrp6 (unregistering): left allmulticast mode [ 290.747864][ T8737] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 290.756429][ T8737] bridge0 (unregistering): left promiscuous mode [ 290.762836][ T8737] bridge0 (unregistering): left allmulticast mode [ 291.036441][ T8737] bond0 (unregistering): left promiscuous mode [ 291.042704][ T8737] bond_slave_0: left promiscuous mode [ 291.048977][ T8737] @0: left promiscuous mode [ 291.055289][ T8737] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 291.062973][ T8737] bond0 (unregistering): left allmulticast mode [ 291.070713][ T8737] bond_slave_0: left allmulticast mode [ 291.076866][ T8737] @0: left allmulticast mode [ 291.082090][ T8737] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 291.091246][ T8737] team0: Port device bond0 removed [ 291.099511][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.111195][ T8737] bond0 (unregistering): (slave c@0): Releasing backup interface [ 291.122800][ T8737] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 291.140635][ T8737] bond0 (unregistering): Released all slaves [ 291.231970][ T8737] bond1 (unregistering): Released all slaves [ 291.332549][ T8737] bond2 (unregistering): Released all slaves [ 291.429294][ T8737] bond3 (unregistering): Released all slaves [ 291.520208][ T8737] bond4 (unregistering): Released all slaves [ 291.533322][ T8737] bond5 (unregistering): Released all slaves [ 291.628361][ T8737] bond6 (unregistering): Released all slaves [ 291.718985][ T8737] bond7 (unregistering): Released all slaves [ 291.754519][T16432] chnl_net:caif_netlink_parms(): no params data found [ 291.904240][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 291.912298][ C1] lec:lec_tx_timeout: lec0 [ 291.917264][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 291.955151][ T8737] tipc: Disabling bearer [ 291.963206][ T8737] tipc: Left network mode [ 292.108280][T16556] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2915'. [ 292.177332][T16556] sock: sock_timestamping_bind_phc: sock not bind to device [ 292.197774][T16555] sock: sock_timestamping_bind_phc: sock not bind to device [ 292.225243][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'. [ 292.252887][T16555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2915'. [ 292.262761][T16556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2915'. [ 292.414538][ T5848] Bluetooth: hci5: command tx timeout [ 292.496813][T16581] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2919'. [ 292.582075][T16432] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.610052][T16432] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.637340][T16432] bridge_slave_0: entered allmulticast mode [ 292.676022][T16432] bridge_slave_0: entered promiscuous mode [ 292.698731][T16549] tipc: Enabled bearer , priority 0 [ 292.849753][T16588] syzkaller0: entered promiscuous mode [ 292.855839][T16588] syzkaller0: entered allmulticast mode [ 292.862157][T16588] tipc: Resetting bearer [ 292.868531][T16432] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.876257][T16432] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.883667][T16432] bridge_slave_1: entered allmulticast mode [ 292.891969][T16432] bridge_slave_1: entered promiscuous mode [ 292.899255][T16579] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2913'. [ 293.035774][T12221] tipc: Resetting bearer [ 293.088741][T16547] tipc: Resetting bearer [ 294.504472][ T5848] Bluetooth: hci5: command tx timeout [ 294.638907][T16547] tipc: Disabling bearer [ 294.719366][T16432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.797541][T16432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.968262][T16638] xt_ecn: cannot match TCP bits for non-tcp packets [ 295.039630][T16432] team0: Port device team_slave_0 added [ 295.096992][T16432] team0: Port device team_slave_1 added [ 295.153812][T16654] __nla_validate_parse: 2 callbacks suppressed [ 295.153830][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2932'. [ 295.432174][T16432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.443824][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.473652][T16432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.502212][T16432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.520775][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.572203][T16432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.690112][T16677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2932'. [ 295.723134][T16662] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 295.813828][ T8737] hsr_slave_0: left promiscuous mode [ 295.834565][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.842044][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.857810][T16688] netlink: 'syz.2.2936': attribute type 10 has an invalid length. [ 295.879156][ T8737] team0: left allmulticast mode [ 295.886256][ T8737] team_slave_0: left allmulticast mode [ 295.891751][ T8737] team_slave_1: left allmulticast mode [ 295.897514][ T8737] team0: left promiscuous mode [ 295.902454][ T8737] team_slave_0: left promiscuous mode [ 295.909072][ T8737] team_slave_1: left promiscuous mode [ 295.916265][ T8737] veth1_macvtap: left promiscuous mode [ 295.922469][ T8737] veth0_macvtap: left promiscuous mode [ 296.448137][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 296.477314][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 296.574850][ T5848] Bluetooth: hci5: command tx timeout [ 296.743417][T12215] smc: removing ib device syz1 [ 296.934288][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 296.942335][ C1] lec:lec_tx_timeout: lec0 [ 296.947675][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 297.002630][T16688] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 297.072630][ T797] vxcan1 speed is unknown, defaulting to 1000 [ 297.116611][ T797] syz1: Port: 1 Link DOWN [ 297.238779][T16707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2940'. [ 297.302500][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 297.336117][T16712] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 297.352543][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2941'. [ 297.399518][T16432] hsr_slave_0: entered promiscuous mode [ 297.442989][T16432] hsr_slave_1: entered promiscuous mode [ 297.462914][T16432] debugfs: 'hsr0' already exists in 'hsr' [ 297.494830][T16432] Cannot create hsr debugfs directory [ 297.842041][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2946'. [ 297.878487][T16732] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2946'. [ 297.895707][T16732] netlink: 'syz.4.2946': attribute type 5 has an invalid length. [ 297.982362][T16732] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2946'. [ 298.163701][T16749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2950'. [ 298.253024][T16756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2951'. [ 298.798799][T16778] vlan1: entered promiscuous mode [ 298.803881][T16778] geneve1: entered promiscuous mode [ 298.835231][T16778] vlan1: entered allmulticast mode [ 298.847134][T16778] geneve1: entered allmulticast mode [ 298.988896][ T8737] IPVS: stop unused estimator thread 0... [ 299.152467][T16798] netlink: 'syz.2.2961': attribute type 9 has an invalid length. [ 300.038680][T16822] netlink: 'syz.4.2967': attribute type 3 has an invalid length. [ 300.881444][T16828] __nla_validate_parse: 3 callbacks suppressed [ 300.881466][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 300.924511][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 301.010808][T16832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2970'. [ 301.061952][T16432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.114082][T16432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.188301][T16432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.259739][T16432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.510653][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2975'. [ 301.539577][T16876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2977'. [ 301.642496][T16876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2977'. [ 301.724162][T16432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.762885][T16432] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.789087][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.796339][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.830950][T16891] netlink: 'syz.3.2980': attribute type 9 has an invalid length. [ 301.842505][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.849699][ T8737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.861380][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2979'. [ 301.885548][T16891] netlink: 'syz.3.2980': attribute type 6 has an invalid length. [ 301.954414][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 301.962502][ C1] lec:lec_tx_timeout: lec0 [ 301.967532][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.337178][T16916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2987'. [ 302.368255][T16915] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 302.401418][T16915] CPU: 1 UID: 0 PID: 16915 Comm: syz.3.2988 Not tainted syzkaller #0 PREEMPT(full) [ 302.401445][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 302.401471][T16915] Call Trace: [ 302.401478][T16915] [ 302.401485][T16915] dump_stack_lvl+0xe8/0x150 [ 302.401517][T16915] sysfs_warn_dup+0x8e/0xa0 [ 302.401539][T16915] sysfs_do_create_link_sd+0xc0/0x110 [ 302.401563][T16915] device_add_class_symlinks+0x1cf/0x240 [ 302.401598][T16915] device_add+0x475/0xb70 [ 302.401629][T16915] wiphy_register+0x1d6c/0x2d50 [ 302.401668][T16915] ? __pfx_wiphy_register+0x10/0x10 [ 302.401690][T16915] ? __pfx_netdev_run_todo+0x10/0x10 [ 302.401712][T16915] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 302.401737][T16915] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 302.401770][T16915] ieee80211_register_hw+0x34d2/0x4150 [ 302.401788][T16915] ? __lock_acquire+0x6b5/0x2cf0 [ 302.401818][T16915] ? ieee80211_register_hw+0x1461/0x4150 [ 302.401846][T16915] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 302.401880][T16915] ? __hrtimer_setup+0x181/0x200 [ 302.401903][T16915] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 302.401928][T16915] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 302.402002][T16915] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 302.402029][T16915] ? kstrndup+0xbf/0x160 [ 302.402058][T16915] hwsim_new_radio_nl+0xf85/0x1c30 [ 302.402091][T16915] ? __pfx___nla_validate_parse+0x10/0x10 [ 302.402124][T16915] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 302.402161][T16915] ? rcu_is_watching+0x15/0xb0 [ 302.402188][T16915] ? __nla_parse+0x40/0x60 [ 302.402210][T16915] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 302.402244][T16915] genl_family_rcv_msg_doit+0x22a/0x330 [ 302.402276][T16915] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 302.402316][T16915] ? bpf_lsm_capable+0x9/0x20 [ 302.402335][T16915] ? security_capable+0x7e/0x2c0 [ 302.402363][T16915] genl_rcv_msg+0x61c/0x7a0 [ 302.402395][T16915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.402416][T16915] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 302.402460][T16915] netlink_rcv_skb+0x232/0x4b0 [ 302.402481][T16915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.402508][T16915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.402525][T16915] ? genl_rcv+0x19/0x40 [ 302.402566][T16915] ? down_read+0x272/0x2e0 [ 302.402582][T16915] ? genl_rcv+0xd/0x40 [ 302.402609][T16915] genl_rcv+0x28/0x40 [ 302.402632][T16915] netlink_unicast+0x80f/0x9b0 [ 302.402669][T16915] ? __pfx_netlink_unicast+0x10/0x10 [ 302.402699][T16915] ? netlink_sendmsg+0x650/0xb40 [ 302.402716][T16915] ? skb_put+0x11b/0x210 [ 302.402748][T16915] netlink_sendmsg+0x813/0xb40 [ 302.402779][T16915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.402809][T16915] ? aa_sock_msg_perm+0xf1/0x1b0 [ 302.402835][T16915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.402851][T16915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.402871][T16915] __sock_sendmsg+0x21c/0x270 [ 302.402897][T16915] ____sys_sendmsg+0x4d7/0x810 [ 302.402916][T16915] ? __might_fault+0xaf/0x130 [ 302.402958][T16915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.402985][T16915] ? import_iovec+0x73/0xa0 [ 302.403010][T16915] ___sys_sendmsg+0x2a5/0x360 [ 302.403026][T16915] ? __lock_acquire+0x6b5/0x2cf0 [ 302.403051][T16915] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.403075][T16915] ? futex_wait+0x29a/0x380 [ 302.403125][T16915] ? __fget_files+0x2a/0x420 [ 302.403147][T16915] ? __fget_files+0x3a0/0x420 [ 302.403176][T16915] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.403196][T16915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.403222][T16915] ? rcu_is_watching+0x15/0xb0 [ 302.403259][T16915] do_syscall_64+0xe2/0xf80 [ 302.403286][T16915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.403303][T16915] ? trace_irq_disable+0x37/0x100 [ 302.403326][T16915] ? clear_bhb_loop+0x60/0xb0 [ 302.403350][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.403368][T16915] RIP: 0033:0x7f50e2b9acb9 [ 302.403385][T16915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.403402][T16915] RSP: 002b:00007f50e3af9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.403423][T16915] RAX: ffffffffffffffda RBX: 00007f50e2e15fa0 RCX: 00007f50e2b9acb9 [ 302.403437][T16915] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 302.403454][T16915] RBP: 00007f50e2c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 302.403466][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.403477][T16915] R13: 00007f50e2e16038 R14: 00007f50e2e15fa0 R15: 00007fffb27d75e8 [ 302.403510][T16915] [ 302.881664][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.894074][T16922] netlink: 'syz.3.2988': attribute type 12 has an invalid length. [ 302.904908][T16922] netlink: 'syz.3.2988': attribute type 29 has an invalid length. [ 302.912915][T16922] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2988'. [ 302.923059][T16922] netlink: 'syz.3.2988': attribute type 2 has an invalid length. [ 302.945604][T16922] netlink: 'syz.3.2988': attribute type 3 has an invalid length. [ 302.973921][T16924] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2989'. [ 303.149140][T16432] veth0_vlan: entered promiscuous mode [ 303.211644][T16432] veth1_vlan: entered promiscuous mode [ 303.283201][T16940] syzkaller0: entered promiscuous mode [ 303.330627][T16940] syzkaller0: entered allmulticast mode [ 303.417535][T16940] netlink: 'syz.0.2994': attribute type 10 has an invalid length. [ 303.450884][T16951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.458204][T16951] IPv6: NLM_F_CREATE should be set when creating new route [ 303.464938][T16432] veth0_macvtap: entered promiscuous mode [ 303.465494][T16951] IPv6: NLM_F_CREATE should be set when creating new route [ 303.501757][T16432] veth1_macvtap: entered promiscuous mode [ 303.583225][T16954] xt_hashlimit: overflow, try lower: 3/0 [ 303.600290][T16432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.623433][T16432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.658587][T16958] netlink: 'syz.3.2997': attribute type 3 has an invalid length. [ 303.719121][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.739092][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.778111][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.802980][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.823884][T16968] erspan0: entered allmulticast mode [ 304.008024][T12220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.042604][T12220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.087605][T12220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.099855][T12220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.655346][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.666403][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.674983][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.682933][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.691669][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.250006][T17037] netlink: 'syz.3.3017': attribute type 33 has an invalid length. [ 305.265756][T17032] syzkaller0: entered promiscuous mode [ 305.271250][T17032] syzkaller0: entered allmulticast mode [ 305.498087][T17051] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 305.514762][T17051] netlink: 'syz.4.3019': attribute type 2 has an invalid length. [ 306.736335][ T5836] Bluetooth: hci1: command tx timeout [ 306.766634][T17051] __nla_validate_parse: 10 callbacks suppressed [ 306.766652][T17051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3019'. [ 306.782659][T17051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3019'. [ 306.898364][T17059] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3022'. [ 306.979892][T17063] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3023'. [ 306.990303][T17063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3023'. [ 307.078536][T17006] chnl_net:caif_netlink_parms(): no params data found [ 307.199665][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 307.298598][T17078] bond1: Invalid ad_actor_system MAC address. [ 307.305972][T17078] bond1: option ad_actor_system: invalid value (1) [ 307.316990][T17078] bond1 (unregistering): Released all slaves [ 307.339736][T17022] infiniband syz0: set down [ 307.345636][T17022] infiniband syz0: added bond_slave_0 [ 307.352952][T17022] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 307.357588][T17022] infiniband syz0: Couldn't open port 1 [ 307.383674][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'. [ 307.393335][T17022] RDS/IB: syz0: added [ 307.393403][T17022] smc: adding ib device syz0 with port count 1 [ 307.393424][T17022] smc: ib device syz0 port 1 has no pnetid [ 307.476742][T17006] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.493147][T17006] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.510647][T17006] bridge_slave_0: entered allmulticast mode [ 307.524081][T17006] bridge_slave_0: entered promiscuous mode [ 307.554030][T17006] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.584584][T17006] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.601243][T17006] bridge_slave_1: entered allmulticast mode [ 307.639383][T17006] bridge_slave_1: entered promiscuous mode [ 307.712725][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 307.728399][T17006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.768039][T17099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3031'. [ 307.797846][T17006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.804414][T17099] openvswitch: netlink: Flow key attr not present in new flow. [ 307.815083][T17108] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3032'. [ 307.937326][T17006] team0: Port device team_slave_0 added [ 308.001445][T17006] team0: Port device team_slave_1 added [ 308.065961][T17006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.072941][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.104617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6140 ms [ 308.112640][ C1] lec:lec_tx_timeout: lec0 [ 308.117840][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.123845][T17006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.141241][T17006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.149609][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.192477][T17006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.283944][T17120] syzkaller0: entered promiscuous mode [ 308.290224][T17120] syzkaller0: entered allmulticast mode [ 308.824336][ T5836] Bluetooth: hci1: command tx timeout [ 309.664793][T17006] hsr_slave_0: entered promiscuous mode [ 309.678769][T17006] hsr_slave_1: entered promiscuous mode [ 309.687955][T17006] debugfs: 'hsr0' already exists in 'hsr' [ 309.693789][T17006] Cannot create hsr debugfs directory [ 310.040735][T17006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 310.075177][T17006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.088893][T17147] validate_nla: 1 callbacks suppressed [ 310.088911][T17147] netlink: 'syz.4.3045': attribute type 1 has an invalid length. [ 310.113882][T17149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.186239][T17149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.226653][T17153] erspan0: entered promiscuous mode [ 310.250988][T17006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 310.285118][T17006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.350408][T17160] netlink: 'syz.3.3048': attribute type 1 has an invalid length. [ 310.364059][T17151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.390832][T17151] bond0: (slave rose0): Enslaving as an active interface with an up link [ 310.502541][T17166] xt_addrtype: ipv6 does not support BROADCAST matching [ 310.511944][T17006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 310.523753][T17006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.647271][T17006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 310.678459][T17006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.894699][ T5836] Bluetooth: hci1: command tx timeout [ 311.083110][T17006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.139101][T17006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.185577][T17006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.253131][T17006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.601490][T17006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.796601][T17006] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.819101][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.826368][T12221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.868257][T12221] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.875436][T12221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.087724][T17242] syzkaller1: entered promiscuous mode [ 312.108248][T17242] syzkaller1: entered allmulticast mode [ 312.446276][T17265] __nla_validate_parse: 8 callbacks suppressed [ 312.446295][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3071'. [ 312.672469][T17006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.795677][T17283] netlink: 'syz.3.3075': attribute type 1 has an invalid length. [ 312.856571][T17293] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 312.919919][T17293] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.974858][ T5836] Bluetooth: hci1: command tx timeout [ 313.033782][T17006] veth0_vlan: entered promiscuous mode [ 313.065783][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'. [ 313.089910][T17006] veth1_vlan: entered promiscuous mode [ 313.116215][T17297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3077'. [ 313.128459][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3077'. [ 313.143775][T17297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3077'. [ 313.153711][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3077'. [ 313.320923][T17006] veth0_macvtap: entered promiscuous mode [ 313.357354][T17006] veth1_macvtap: entered promiscuous mode [ 313.432353][T17006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.490774][T17006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.533905][T12220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.563777][T12220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.588031][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'. [ 313.606850][T12220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.616633][T12220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.628484][T17335] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 313.652210][T17337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3086'. [ 313.671202][T17335] IPv6: sit1: Disabled Multicast RS [ 313.678154][T17335] sit1: entered allmulticast mode [ 313.854221][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 313.862330][ C1] lec:lec_tx_timeout: lec0 [ 313.865800][T17346] tipc: Enabled bearer , priority 0 [ 313.867721][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.888582][T12222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.911459][T12222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.949118][T17345] tipc: Disabling bearer [ 313.978078][T12222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.002380][T12222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.039511][T17350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3088'. [ 314.051422][T17350] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3088'. [ 314.560200][T17370] netlink: 'syz.1.3094': attribute type 1 has an invalid length. [ 314.637952][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.649715][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.662175][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.672567][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.682525][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.970474][T17385] netlink: 'syz.4.3097': attribute type 7 has an invalid length. [ 315.267007][ T5839] bond0: (slave syz_tun): Releasing backup interface [ 315.306326][ T5839] syz_tun (unregistering): left promiscuous mode [ 315.312703][ T5839] syz_tun (unregistering): left allmulticast mode [ 315.607724][ T6054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.639376][ T6054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.669473][T17414] netlink: 'syz.1.3108': attribute type 12 has an invalid length. [ 315.680813][T17418] netlink: 'syz.0.3110': attribute type 1 has an invalid length. [ 315.906120][ T6054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.923163][ T6054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.981666][T17419] syzkaller0: entered promiscuous mode [ 315.993874][T17419] syzkaller0: entered allmulticast mode [ 316.063938][ T6054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.074539][ T6054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.159295][T17435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.738279][ T5836] Bluetooth: hci0: command tx timeout [ 317.551862][T17452] __nla_validate_parse: 3 callbacks suppressed [ 317.551878][T17452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3119'. [ 317.630850][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3120'. [ 317.655639][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3120'. [ 317.670873][T17458] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 317.671029][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3120'. [ 317.790678][T17458] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3121'. [ 317.857790][T17462] bond8: (slave gretap0): making interface the new active one [ 317.879857][T17469] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3121'. [ 317.880487][T17462] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 317.910849][T17468] vlan2: entered promiscuous mode [ 317.916318][T17468] vlan2: entered allmulticast mode [ 317.922544][T17468] hsr_slave_1: entered allmulticast mode [ 317.965675][T17372] chnl_net:caif_netlink_parms(): no params data found [ 318.072068][T17475] netlink: 'syz.1.3123': attribute type 1 has an invalid length. [ 318.128150][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.156613][ T6054] bridge_slave_0: left allmulticast mode [ 318.167225][ T6054] bridge_slave_0: left promiscuous mode [ 318.173061][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.254102][T17487] "syz.4.3127" (17487) uses obsolete ecb(arc4) skcipher [ 318.390112][ T6054] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 318.399472][ T6054] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 92:c5:3e:d8:7d:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 318.582981][ T6054] bond5 (unregistering): (slave gretap3): Releasing backup interface [ 318.605293][ T6054] bond7 (unregistering): (slave gretap4): Releasing active interface [ 318.814921][ T5836] Bluetooth: hci0: command tx timeout [ 318.886790][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.894830][ C1] lec:lec_tx_timeout: lec0 [ 318.900003][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.370573][ T6054] team0: Port device bond0 removed [ 319.377750][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.387299][ T6054] bond_slave_0: left promiscuous mode [ 319.392782][ T6054] bond_slave_0: left allmulticast mode [ 319.399956][ T6054] bond0 (unregistering): Released all slaves [ 319.488289][ T6054] bond1 (unregistering): Released all slaves [ 319.501511][ T6054] bond2 (unregistering): Released all slaves [ 319.515444][ T6054] bond3 (unregistering): (slave veth7): Releasing backup interface [ 319.528933][ T6054] bond3 (unregistering): Released all slaves [ 319.542109][ T6054] bond4 (unregistering): Released all slaves [ 319.555651][ T6054] bond5 (unregistering): (slave bond6): Releasing backup interface [ 319.564827][ T6054] bond5 (unregistering): Released all slaves [ 319.666055][ T6054] bond6 (unregistering): Released all slaves [ 319.679647][ T6054] bond7 (unregistering): Released all slaves [ 319.692195][ T6054] bond8 (unregistering): Released all slaves [ 319.705782][ T6054] bond9 (unregistering): Released all slaves [ 319.753385][T17497] syzkaller0: entered promiscuous mode [ 319.777929][T17497] syzkaller0: entered allmulticast mode [ 319.798440][T17514] sctp: [Deprecated]: syz.1.3134 (pid 17514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.798440][T17514] Use struct sctp_sack_info instead [ 319.958692][ T6054] : left promiscuous mode [ 320.072070][ T6054] tipc: Left network mode [ 320.169368][T17372] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.200050][T17372] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.229382][T17372] bridge_slave_0: entered allmulticast mode [ 320.261863][T17372] bridge_slave_0: entered promiscuous mode [ 320.295585][T17372] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.326509][T17372] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.343961][T17372] bridge_slave_1: entered allmulticast mode [ 320.362068][T17372] bridge_slave_1: entered promiscuous mode [ 320.482833][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'. [ 320.501510][T17372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.573018][T17372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.639768][T17566] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3146'. [ 320.749692][T17372] team0: Port device team_slave_0 added [ 320.802349][T17572] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3147'. [ 320.815564][T17372] team0: Port device team_slave_1 added [ 320.869417][T17580] netlink: 'syz.1.3148': attribute type 5 has an invalid length. [ 320.894770][ T5836] Bluetooth: hci0: command tx timeout [ 320.921723][T17580] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3148'. [ 320.962418][T17372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.008565][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.072028][T17372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.121878][T17372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.132524][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.162151][T17372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.351180][T17606] openvswitch: netlink: Message has 6 unknown bytes. [ 321.513052][T17606] 8021q: VLANs not supported on ip_vti0 [ 321.537868][T17604] syzkaller0: entered promiscuous mode [ 321.543888][T17604] syzkaller0: entered allmulticast mode [ 321.672891][T17372] hsr_slave_0: entered promiscuous mode [ 321.688574][T17372] hsr_slave_1: entered promiscuous mode [ 321.717528][T17372] debugfs: 'hsr0' already exists in 'hsr' [ 321.731063][T17372] Cannot create hsr debugfs directory [ 321.884977][T17621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.042545][ T6054] hsr_slave_1: left promiscuous mode [ 322.065378][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.072790][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.098675][ T6054] batman_adv: batadv0: Removing interface: dummy0 [ 322.125697][ T6054] veth1_macvtap: left promiscuous mode [ 322.140882][ T6054] veth1_vlan: left promiscuous mode [ 322.147227][ T6054] veth0_vlan: left promiscuous mode [ 322.302289][ T6054] pim6reg (unregistering): left allmulticast mode [ 322.791340][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 322.839617][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 322.975895][ T5836] Bluetooth: hci0: command tx timeout [ 323.280701][T17646] syzkaller0: entered promiscuous mode [ 323.301385][T17646] syzkaller0: entered allmulticast mode [ 323.425370][T17671] __nla_validate_parse: 2 callbacks suppressed [ 323.425388][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 323.645382][T17671] hsr_slave_1 (unregistering): left promiscuous mode [ 323.663548][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3173'. [ 323.700083][T17686] xt_SECMARK: invalid mode: 9 [ 323.753591][T17688] lo: entered promiscuous mode [ 323.766698][T17688] netlink: 'syz.1.3175': attribute type 2 has an invalid length. [ 323.777223][T17688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.801749][T17688] netlink: 'syz.1.3175': attribute type 1 has an invalid length. [ 323.891622][T17694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3175'. [ 323.924240][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 323.932276][ C1] lec:lec_tx_timeout: lec0 [ 323.937280][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 323.980726][ T6054] IPVS: stop unused estimator thread 0... [ 324.281580][T17372] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 324.293483][T17372] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 324.305770][T17372] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 324.319322][T17372] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.441153][T17372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.481084][T17372] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.499550][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.506691][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.522989][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.530105][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.776157][T17372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.846827][T17372] veth0_vlan: entered promiscuous mode [ 324.860985][T17372] veth1_vlan: entered promiscuous mode [ 324.903002][T17372] veth0_macvtap: entered promiscuous mode [ 324.917179][T17372] veth1_macvtap: entered promiscuous mode [ 324.941684][T17372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.959738][T17372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.976883][ T6054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.990062][ T6054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.010144][ T6054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.029221][ T6054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.105464][ T6054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.113314][ T6054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.165203][ T8739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.173049][ T8739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.944583][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 328.952601][ C1] lec:lec_tx_timeout: lec0 [ 328.957155][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.417279][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.734249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 334.742284][ C1] lec:lec_tx_timeout: lec0 [ 334.747117][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.774405][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 339.782426][ C1] lec:lec_tx_timeout: lec0 [ 339.787128][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 344.794274][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 344.802291][ C1] lec:lec_tx_timeout: lec0 [ 344.806929][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 349.814534][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 349.822555][ C1] lec:lec_tx_timeout: lec0 [ 349.827276][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 352.986717][T17794] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3179'. [ 353.405745][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.426605][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.434916][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.447966][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.455943][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.718491][T12225] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.745881][T12225] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.766471][T17841] netlink: 'syz.3.3191': attribute type 1 has an invalid length. [ 353.789513][T17841] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3191'. [ 353.814074][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3193'. [ 353.831188][T17839] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3193'. [ 353.842571][T17839] netlink: 'syz.0.3193': attribute type 5 has an invalid length. [ 353.860484][T12225] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.882757][T12225] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.991772][T17848] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 354.002689][T12225] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.020954][T12225] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.049612][T17848] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 354.093660][T12225] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.108901][T12225] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.137155][T17853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3197'. [ 354.614318][T12225] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 354.844979][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 354.853046][ C1] lec:lec_tx_timeout: lec0 [ 354.858190][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.213293][T12225] bond1 (unregistering): Released all slaves [ 355.226997][T12225] bond2 (unregistering): Released all slaves [ 355.324304][T12225] bond3 (unregistering): Released all slaves [ 355.420640][T12225] bond0 (unregistering): Released all slaves [ 355.433478][T12225] bond4 (unregistering): Released all slaves [ 355.446218][T12225] bond5 (unregistering): Released all slaves [ 355.535846][ T5836] Bluetooth: hci3: command tx timeout [ 355.558042][T12225] bond6 (unregistering): Released all slaves [ 355.651715][T12225] bond7 (unregistering): Released all slaves [ 355.663955][T12225] bond8 (unregistering): Released all slaves [ 355.679350][T12225] bond9 (unregistering): Released all slaves [ 355.757327][T17878] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 355.771484][T17874] syzkaller1: entered promiscuous mode [ 355.800885][T17874] syzkaller1: entered allmulticast mode [ 355.909306][T12225] : left promiscuous mode [ 355.951831][T17886] netlink: 'syz.4.3206': attribute type 12 has an invalid length. [ 355.966581][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3206'. [ 356.017777][T12225] tipc: Left network mode [ 356.027757][T17886] netlink: 'syz.4.3206': attribute type 12 has an invalid length. [ 356.068337][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3206'. [ 356.275487][T17904] vlan2: entered allmulticast mode [ 356.280647][T17904] hsr0: entered allmulticast mode [ 356.302194][T17904] hsr_slave_0: entered allmulticast mode [ 356.308804][T17904] hsr_slave_1: entered allmulticast mode [ 356.436660][T17822] chnl_net:caif_netlink_parms(): no params data found [ 356.729623][T17926] tipc: Started in network mode [ 356.765192][T17926] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 356.773831][T17926] tipc: Enabled bearer , priority 2 [ 356.933457][T17822] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.940941][T17822] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.951318][T17822] bridge_slave_0: entered allmulticast mode [ 356.970776][T17822] bridge_slave_0: entered promiscuous mode [ 357.020594][T17944] IPv6: sit1: Disabled Multicast RS [ 357.058405][T17944] sit1: entered allmulticast mode [ 357.168459][T17822] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.182166][T17822] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.189620][T17822] bridge_slave_1: entered allmulticast mode [ 357.212359][T17822] bridge_slave_1: entered promiscuous mode [ 357.299771][T17952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3222'. [ 357.336408][T17822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.392299][T17822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.584800][T12225] batadv0: left promiscuous mode [ 357.609812][T12225] hsr_slave_0: left promiscuous mode [ 357.614793][ T5836] Bluetooth: hci3: command tx timeout [ 357.634192][T12225] hsr_slave_1: left promiscuous mode [ 357.672577][T12225] veth1_macvtap: left promiscuous mode [ 357.685766][T12225] veth0_macvtap: left promiscuous mode [ 357.925824][T12225] team0 (unregistering): Port device veth3 removed [ 358.684824][T17962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3226'. [ 358.708491][T11098] tipc: Node number set to 10463914 [ 358.727069][T17822] team0: Port device team_slave_0 added [ 358.769106][T17822] team0: Port device team_slave_1 added [ 358.879421][T17984] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3231'. [ 358.890268][T17822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.914382][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.941961][T17984] ksmbd: Unknown IPC event: 3, ignore. [ 359.004261][T17822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.052283][T17822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.091866][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.193798][T17822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.357338][T12222] smc: removing ib device syz0 [ 359.399904][T17822] hsr_slave_0: entered promiscuous mode [ 359.460984][T17822] hsr_slave_1: entered promiscuous mode [ 359.638573][T18029] netlink: 'syz.0.3239': attribute type 23 has an invalid length. [ 359.694289][ T5836] Bluetooth: hci3: command tx timeout [ 359.821763][T18038] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3239'. [ 359.864199][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 359.872608][ C1] lec:lec_tx_timeout: lec0 [ 359.877242][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.311514][T18056] tipc: New replicast peer: 255.255.255.255 [ 360.336251][T18056] tipc: Enabled bearer , priority 10 [ 360.547499][T18062] tipc: Started in network mode [ 360.570720][T18062] tipc: Node identity 32fe65572017, cluster identity 4711 [ 360.616140][T18062] tipc: Enabled bearer , priority 0 [ 360.649883][T18069] dummy0: entered promiscuous mode [ 360.688328][T18069] dummy0: entered allmulticast mode [ 360.773763][T18062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3246'. [ 360.774844][T18075] tipc: Resetting bearer [ 361.036408][T18061] tipc: Disabling bearer [ 361.305684][T18095] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3251'. [ 361.339743][T18095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 361.353336][T18095] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3251'. [ 361.363508][T18095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 361.437615][T18095] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3251'. [ 361.462612][T18095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 361.686380][T18105] Bluetooth: MGMT ver 1.23 [ 361.774739][ T5848] Bluetooth: hci3: command tx timeout [ 362.061177][T18120] netlink: 'syz.0.3259': attribute type 2 has an invalid length. [ 362.073267][T18117] : renamed from hsr0 (while UP) [ 362.093620][T18120] netlink: 'syz.0.3259': attribute type 1 has an invalid length. [ 362.295800][T12225] IPVS: stop unused estimator thread 0... [ 362.437103][T17822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.500540][T17822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.545783][T17822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.594500][T17822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.858967][T17822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.928072][T17822] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.952769][T12222] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.960032][T12222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.993269][T18173] netlink: 'syz.1.3272': attribute type 10 has an invalid length. [ 363.030695][T12222] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.037905][T12222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.061703][T18173] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.092501][T18173] bond0: (slave team0): Enslaving as an active interface with an up link [ 363.786308][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 363.797795][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 363.829731][T18222] __nla_validate_parse: 132 callbacks suppressed [ 363.829750][T18222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3282'. [ 363.832873][T17822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.900256][T17822] veth0_vlan: entered promiscuous mode [ 363.918155][T17822] veth1_vlan: entered promiscuous mode [ 363.947605][T17822] veth0_macvtap: entered promiscuous mode [ 364.028654][T18231] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 364.036336][T17822] veth1_macvtap: entered promiscuous mode [ 364.106440][T17822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.155299][T17822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.210694][ T6047] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.242554][ T6047] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.286521][ T6047] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.307205][ T6047] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.591292][T18248] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3289'. [ 364.601376][T18222] netlink: 'syz.4.3282': attribute type 29 has an invalid length. [ 364.685832][T18222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3282'. [ 364.706812][T18255] syzkaller0: entered promiscuous mode [ 364.712449][T18255] syzkaller0: entered allmulticast mode [ 364.741353][T18229] netlink: 'syz.4.3282': attribute type 29 has an invalid length. [ 364.884320][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 364.892421][ C1] lec:lec_tx_timeout: lec0 [ 365.398111][T18296] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3295'. [ 365.617367][ T5841] Bluetooth: hci3: command 0x0405 tx timeout [ 366.679431][T12220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.698405][T12220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.836167][T12220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.863147][T12220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.953621][T18324] bond1: Removing last ns target with arp_interval on [ 367.163267][T18342] netlink: 'syz.3.3304': attribute type 1 has an invalid length. [ 367.189282][T18342] syzkaller1: entered promiscuous mode [ 367.196465][T18342] syzkaller1: entered allmulticast mode [ 367.599214][T18368] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 367.707276][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.716670][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.729697][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.737739][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.748812][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.777665][T18379] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3313'. [ 367.841396][T18379] pim6reg: entered allmulticast mode [ 367.886118][T18379] pim6reg: left allmulticast mode [ 368.350751][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 368.375397][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 368.803151][T18415] netlink: 'syz.1.3323': attribute type 11 has an invalid length. [ 368.810613][T18409] dvmrp0: entered allmulticast mode [ 368.825320][T18415] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3323'. [ 369.006654][T18421] netlink: 'syz.1.3324': attribute type 1 has an invalid length. [ 369.011042][T18373] chnl_net:caif_netlink_parms(): no params data found [ 369.098473][T18429] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3326'. [ 369.152793][T18426] syzkaller0: entered promiscuous mode [ 369.183235][T18426] syzkaller0: entered allmulticast mode [ 369.278273][T18441] SET target dimension over the limit! [ 369.285664][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3328'. [ 369.295198][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 369.305029][ C1] ------------[ cut here ]------------ [ 369.310665][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 369.317356][ C1] WARNING: kernel/workqueue.c:2252 at __queue_work+0xd1f/0xf90, CPU#1: rcu_exp_gp_kthr/18 [ 369.327267][ C1] Modules linked in: [ 369.331470][ C1] CPU: 1 UID: 0 PID: 18 Comm: rcu_exp_gp_kthr Not tainted syzkaller #0 PREEMPT(full) [ 369.341029][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 369.351521][ C1] RIP: 0010:__queue_work+0xd4a/0xf90 [ 369.356821][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 e7 3e 9e 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce 31 [ 369.376514][ C1] RSP: 0018:ffffc90000a08c10 EFLAGS: 00010086 [ 369.382578][ C1] RAX: 1ffff1100bb84951 RBX: 0000000000000008 RCX: ffff88801cea1e80 [ 369.390537][ C1] RDX: ffff888032c2d978 RSI: ffffffff8a6ef3c0 RDI: ffffffff8fd1c080 [ 369.398498][ C1] RBP: 0000000000000100 R08: ffffffff8fced977 R09: 1ffffffff1f9db2e [ 369.406461][ C1] R10: dffffc0000000000 R11: ffffffff818b6500 R12: dffffc0000000000 [ 369.414422][ C1] R13: ffff88805dc24a88 R14: ffffffff8fd1c080 R15: ffff888032c2d978 [ 369.422416][ C1] FS: 0000000000000000(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 369.431335][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.437938][ C1] CR2: 00007f2b5615d368 CR3: 000000007ab64000 CR4: 00000000003526f0 [ 369.445904][ C1] Call Trace: [ 369.449174][ C1] [ 369.452092][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.457119][ C1] call_timer_fn+0x192/0x5a0 [ 369.461706][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 369.467512][ C1] ? call_timer_fn+0xd4/0x5a0 [ 369.472200][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 369.477318][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 369.482433][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 369.488238][ C1] __run_timer_base+0x67e/0x8b0 [ 369.493093][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 369.498447][ C1] ? clockevents_program_event+0x247/0x350 [ 369.504252][ C1] ? sched_clock_cpu+0x74/0x440 [ 369.509103][ C1] run_timer_softirq+0xb7/0x170 [ 369.514108][ C1] handle_softirqs+0x22a/0x7c0 [ 369.518894][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 369.523666][ C1] __irq_exit_rcu+0x5f/0x150 [ 369.528246][ C1] irq_exit_rcu+0x9/0x30 [ 369.532500][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 369.538228][ C1] [ 369.541161][ C1] [ 369.544095][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.550075][ C1] RIP: 0010:finish_task_switch+0x241/0x920 [ 369.555889][ C1] Code: 0f 84 bd 01 00 00 48 85 db 0f 85 e4 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 19 73 e8 09 e8 74 96 37 00 fb 4c 8b 65 c0 <49> 8d bc 24 48 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 369.575487][ C1] RSP: 0018:ffffc900001777d8 EFLAGS: 00000202 [ 369.581547][ C1] RAX: 000000000009af57 RBX: 0000000000000000 RCX: 0000000080000001 [ 369.589504][ C1] RDX: 0000000000000000 RSI: ffffffff8dacf9c4 RDI: ffffffff8be73880 [ 369.597464][ C1] RBP: ffffc90000177830 R08: ffffffff8fced977 R09: 1ffffffff1f9db2e [ 369.605425][ C1] R10: dffffc0000000000 R11: fffffbfff1f9db2f R12: ffff88801cea1e80 [ 369.613382][ C1] R13: dffffc0000000000 R14: ffff88802c8c0000 R15: ffff8880b873b498 [ 369.621384][ C1] ? finish_task_switch+0x23c/0x920 [ 369.626588][ C1] __schedule+0x14f7/0x4fb0 [ 369.631084][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 369.636011][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.641043][ C1] ? __pfx___schedule+0x10/0x10 [ 369.645891][ C1] ? schedule+0x90/0x360 [ 369.650131][ C1] schedule+0x164/0x360 [ 369.654293][ C1] schedule_timeout+0x158/0x2c0 [ 369.659148][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.664167][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 369.669541][ C1] ? __pfx_process_timeout+0x10/0x10 [ 369.674823][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 369.680618][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 369.685808][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 369.691620][ C1] rcu_exp_sel_wait_wake+0x71d/0xe50 [ 369.696897][ C1] ? __pfx_rcu_exp_sel_wait_wake+0x10/0x10 [ 369.702701][ C1] kthread_worker_fn+0x4ee/0xb00 [ 369.707631][ C1] ? kthread_worker_fn+0xe2/0xb00 [ 369.712645][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 369.717921][ C1] kthread+0x726/0x8b0 [ 369.721981][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 369.727426][ C1] ? __pfx_kthread+0x10/0x10 [ 369.732005][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.737191][ C1] ? __pfx_kthread+0x10/0x10 [ 369.741768][ C1] ret_from_fork+0x51b/0xa40 [ 369.746348][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 369.751448][ C1] ? __switch_to+0xc82/0x1410 [ 369.756130][ C1] ? __pfx_kthread+0x10/0x10 [ 369.760711][ C1] ret_from_fork_asm+0x1a/0x30 [ 369.765478][ C1] [ 369.768493][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 369.775757][ C1] CPU: 1 UID: 0 PID: 18 Comm: rcu_exp_gp_kthr Not tainted syzkaller #0 PREEMPT(full) [ 369.785285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 369.795334][ C1] Call Trace: [ 369.798601][ C1] [ 369.801430][ C1] vpanic+0x1e0/0x670 [ 369.805407][ C1] panic+0xc5/0xd0 [ 369.809121][ C1] ? __pfx_panic+0x10/0x10 [ 369.813530][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 369.818461][ C1] __warn+0x315/0x4a0 [ 369.822430][ C1] ? __queue_work+0xd1f/0xf90 [ 369.827095][ C1] ? __queue_work+0xd1f/0xf90 [ 369.831757][ C1] __report_bug+0x29a/0x540 [ 369.836257][ C1] ? __queue_work+0xd1f/0xf90 [ 369.840922][ C1] ? __pfx___report_bug+0x10/0x10 [ 369.845932][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 369.851217][ C1] ? register_lock_class+0x31/0x2e0 [ 369.856410][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 369.861343][ C1] report_bug_entry+0x19a/0x290 [ 369.866185][ C1] ? __queue_work+0xd4a/0xf90 [ 369.870850][ C1] ? __queue_work+0xd4f/0xf90 [ 369.875511][ C1] handle_bug+0xca/0x200 [ 369.879738][ C1] exc_invalid_op+0x1a/0x50 [ 369.884227][ C1] asm_exc_invalid_op+0x1a/0x20 [ 369.889073][ C1] RIP: 0010:__queue_work+0xd4a/0xf90 [ 369.894348][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 e7 3e 9e 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce 31 [ 369.913952][ C1] RSP: 0018:ffffc90000a08c10 EFLAGS: 00010086 [ 369.920012][ C1] RAX: 1ffff1100bb84951 RBX: 0000000000000008 RCX: ffff88801cea1e80 [ 369.928058][ C1] RDX: ffff888032c2d978 RSI: ffffffff8a6ef3c0 RDI: ffffffff8fd1c080 [ 369.936016][ C1] RBP: 0000000000000100 R08: ffffffff8fced977 R09: 1ffffffff1f9db2e [ 369.943972][ C1] R10: dffffc0000000000 R11: ffffffff818b6500 R12: dffffc0000000000 [ 369.951931][ C1] R13: ffff88805dc24a88 R14: ffffffff8fd1c080 R15: ffff888032c2d978 [ 369.959901][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 369.965706][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 369.970990][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.976016][ C1] call_timer_fn+0x192/0x5a0 [ 369.980597][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 369.986390][ C1] ? call_timer_fn+0xd4/0x5a0 [ 369.991053][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 369.996170][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 370.001276][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 370.007078][ C1] __run_timer_base+0x67e/0x8b0 [ 370.011927][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 370.017284][ C1] ? clockevents_program_event+0x247/0x350 [ 370.023087][ C1] ? sched_clock_cpu+0x74/0x440 [ 370.027926][ C1] run_timer_softirq+0xb7/0x170 [ 370.032764][ C1] handle_softirqs+0x22a/0x7c0 [ 370.037518][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 370.042276][ C1] __irq_exit_rcu+0x5f/0x150 [ 370.046855][ C1] irq_exit_rcu+0x9/0x30 [ 370.051080][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 370.056724][ C1] [ 370.059647][ C1] [ 370.062572][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.068542][ C1] RIP: 0010:finish_task_switch+0x241/0x920 [ 370.074342][ C1] Code: 0f 84 bd 01 00 00 48 85 db 0f 85 e4 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 19 73 e8 09 e8 74 96 37 00 fb 4c 8b 65 c0 <49> 8d bc 24 48 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 370.094048][ C1] RSP: 0018:ffffc900001777d8 EFLAGS: 00000202 [ 370.100110][ C1] RAX: 000000000009af57 RBX: 0000000000000000 RCX: 0000000080000001 [ 370.108068][ C1] RDX: 0000000000000000 RSI: ffffffff8dacf9c4 RDI: ffffffff8be73880 [ 370.116028][ C1] RBP: ffffc90000177830 R08: ffffffff8fced977 R09: 1ffffffff1f9db2e [ 370.123984][ C1] R10: dffffc0000000000 R11: fffffbfff1f9db2f R12: ffff88801cea1e80 [ 370.131939][ C1] R13: dffffc0000000000 R14: ffff88802c8c0000 R15: ffff8880b873b498 [ 370.139913][ C1] ? finish_task_switch+0x23c/0x920 [ 370.145111][ C1] __schedule+0x14f7/0x4fb0 [ 370.149609][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 370.154537][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.159578][ C1] ? __pfx___schedule+0x10/0x10 [ 370.164449][ C1] ? schedule+0x90/0x360 [ 370.168718][ C1] schedule+0x164/0x360 [ 370.172884][ C1] schedule_timeout+0x158/0x2c0 [ 370.177738][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.182767][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 370.188132][ C1] ? __pfx_process_timeout+0x10/0x10 [ 370.193414][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 370.199212][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 370.204398][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 370.210193][ C1] rcu_exp_sel_wait_wake+0x71d/0xe50 [ 370.215472][ C1] ? __pfx_rcu_exp_sel_wait_wake+0x10/0x10 [ 370.221272][ C1] kthread_worker_fn+0x4ee/0xb00 [ 370.226209][ C1] ? kthread_worker_fn+0xe2/0xb00 [ 370.231228][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 370.236504][ C1] kthread+0x726/0x8b0 [ 370.240570][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 370.246018][ C1] ? __pfx_kthread+0x10/0x10 [ 370.250599][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.255789][ C1] ? __pfx_kthread+0x10/0x10 [ 370.260373][ C1] ret_from_fork+0x51b/0xa40 [ 370.264964][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 370.270062][ C1] ? __switch_to+0xc82/0x1410 [ 370.274733][ C1] ? __pfx_kthread+0x10/0x10 [ 370.279312][ C1] ret_from_fork_asm+0x1a/0x30 [ 370.284076][ C1] [ 370.287478][ C1] Kernel Offset: disabled [ 370.291791][ C1] Rebooting in 86400 seconds..