last executing test programs: 13.825539481s ago: executing program 4 (id=8643): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/217, 0xd9}, {0x0}, {0x0}, {&(0x7f0000000600)=""/1, 0x1}], 0x9}}], 0x2, 0x40002002, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r3 = getpid() socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r3}) 12.897862945s ago: executing program 4 (id=8646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 12.896483874s ago: executing program 1 (id=8656): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x20021005, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0xffe) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000440)=r6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100009060300", @ANYBLOB="adffa888f00306001c"], 0x3c}}, 0x40050) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 10.902289146s ago: executing program 4 (id=8650): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x20021005, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0xffe) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000440)=r6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100009060300", @ANYBLOB="adffa888f00306001c"], 0x3c}}, 0x40050) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 10.679064466s ago: executing program 1 (id=8651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 9.580017014s ago: executing program 0 (id=8652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r4, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) cachestat(r6, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 9.394061313s ago: executing program 3 (id=8654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 9.15746439s ago: executing program 1 (id=8655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8.321979546s ago: executing program 0 (id=8658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8.208446879s ago: executing program 2 (id=8659): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f00000003c0)={0x3, 0x6}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000400)={0x0, 0x39f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="0580c20000010180c200000008004500005c00000000002faa7800000000ffffffff24806558000000000006feff10000800000086dd080088be0000000010b200000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, 0x0, 0x0) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c) timer_create(0x3, 0x0, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r3, &(0x7f0000000800)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000480)=""/209, 0xd1, 0x2) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000010805000000000000000000010008090c00048008000140000001010900010073797a31000000000900010073797a31000000000600024093000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000240)=[{0x0, 0x0, 0x0}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="eb7783e19397a6e6faa75380d70507b068e05011bf6d8c98003d6e56aaf21e1957e94eae91e66affbd863a5d6e1b", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}], 0x2, 0x40800) recvmmsg$unix(r6, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) 8.004168845s ago: executing program 3 (id=8660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 7.851805329s ago: executing program 1 (id=8661): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x20021005, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0xffe) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000440)=r6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100009060300", @ANYBLOB="adffa888f00306001c"], 0x3c}}, 0x40050) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 6.592425283s ago: executing program 2 (id=8662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 6.508051482s ago: executing program 0 (id=8663): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="03030000000000000000110000000800", @ANYRES32, @ANYBLOB="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"], 0x1c}}, 0x0) 5.288994832s ago: executing program 0 (id=8664): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x4040) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) r4 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@empty, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) 5.287499283s ago: executing program 2 (id=8665): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, 0x0, 0x8000) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) cachestat(r5, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.260844791s ago: executing program 3 (id=8666): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @remote}, &(0x7f0000000480)=0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca3", 0x4}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}, {&(0x7f00000003c0)="e8700e", 0x3}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.898589164s ago: executing program 4 (id=8667): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="03030000000000000000110000000800", @ANYRES32, @ANYBLOB="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"], 0x1c}}, 0x0) 3.881320652s ago: executing program 2 (id=8668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3.608813974s ago: executing program 3 (id=8669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r4, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) cachestat(r6, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.162742607s ago: executing program 2 (id=8670): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/1, 0x1}], 0x8}}], 0x2, 0x40002002, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r3 = getpid() socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r3}) 2.133324682s ago: executing program 3 (id=8671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.938778453s ago: executing program 0 (id=8672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.859733882s ago: executing program 4 (id=8673): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f00000003c0)={0x3, 0x6}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000400)={0x0, 0x39f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="0580c20000010180c200000008004500005c00000000002faa7800000000ffffffff24806558000000000006feff10000800000086dd080088be0000000010b200000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, 0x0, 0x0) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c) timer_create(0x3, 0x0, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r3, &(0x7f0000000800)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000480)=""/209, 0xd1, 0x2) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000010805000000000000000000010008090c00048008000140000001010900010073797a31000000000900010073797a31000000000600024093000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000240)=[{0x0, 0x0, 0x0}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="eb7783e19397a6e6faa75380d70507b068e05011bf6d8c98003d6e56aaf21e1957e94eae91e66affbd863a5d6e1b", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}], 0x2, 0x40800) recvmmsg$unix(r6, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) 1.800961455s ago: executing program 1 (id=8674): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_clone3(0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket$kcm(0x10, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.19943463s ago: executing program 2 (id=8675): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x20021005, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0xffe) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000440)=r6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100009060300", @ANYBLOB="adffa888f00306001c"], 0x3c}}, 0x40050) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 413.178653ms ago: executing program 3 (id=8676): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_clone3(0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket$kcm(0x10, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 91.274938ms ago: executing program 4 (id=8677): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) r9 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) r10 = syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) 20.175878ms ago: executing program 0 (id=8678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 0s ago: executing program 1 (id=8679): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, 0x0, 0x8000) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) cachestat(r5, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2406.022718][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.032540][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.156242][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2406.164913][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2406.203708][ T10] usb 3-1: USB disconnect, device number 84 [ 2406.295220][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2406.415529][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2406.535987][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2406.654230][ T5079] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2406.673565][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2406.796078][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2406.915413][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2407.420910][ T5101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8044'. [ 2407.755274][ T3407] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2408.540774][ T5108] netlink: 'syz.0.8046': attribute type 4 has an invalid length. [ 2408.699889][ T3407] usb 4-1: config 0 has no interfaces? [ 2408.710141][ T3407] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2408.743232][ T3407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.781810][ T5115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2408.804103][ T3407] usb 4-1: Product: syz [ 2408.814495][ T3407] usb 4-1: Manufacturer: syz [ 2408.839916][ T3407] usb 4-1: SerialNumber: syz [ 2408.873897][ T3407] usb 4-1: config 0 descriptor?? [ 2409.110263][ T5116] netlink: 'syz.4.8048': attribute type 20 has an invalid length. [ 2409.189275][ T5120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2409.215728][ T5120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2410.003053][ T5127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8050'. [ 2410.063802][ T5127] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 2410.387769][ T5138] netlink: 'syz.2.8051': attribute type 4 has an invalid length. [ 2410.587716][ T5146] 8021q: adding VLAN 0 to HW filter on device batadv55 [ 2410.654101][ T5146] team0: Port device batadv55 added [ 2410.925556][T10388] net_ratelimit: 37 callbacks suppressed [ 2410.925571][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2411.075098][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2411.244738][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2411.374764][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2411.384869][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2411.515272][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2411.634955][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2411.776792][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2411.894825][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2412.024785][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2412.148588][ T5167] 8021q: adding VLAN 0 to HW filter on device batadv62 [ 2412.175390][ T5167] team0: Port device batadv62 added [ 2412.482117][ T5174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8056'. [ 2412.775662][ T5179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8057'. [ 2413.586469][ T5189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8058'. [ 2413.770475][T29301] usb 4-1: USB disconnect, device number 102 [ 2414.031402][ T5200] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2414.109330][ T5202] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2415.974998][T28322] net_ratelimit: 36 callbacks suppressed [ 2415.975020][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2416.137125][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2416.265399][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2416.409462][ T5225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8063'. [ 2416.418684][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2416.450069][ T5225] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 2416.555344][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2416.564934][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2416.675258][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2416.815219][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2416.934822][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2417.100093][ T5236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8065'. [ 2417.149591][ T5240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8066'. [ 2417.215074][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2419.837448][ T5261] netlink: 'syz.1.8070': attribute type 20 has an invalid length. [ 2419.845672][ T5261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2420.799709][ T5277] 8021q: adding VLAN 0 to HW filter on device batadv63 [ 2420.822224][ T5277] team0: Port device batadv63 added [ 2421.055131][T10388] net_ratelimit: 11 callbacks suppressed [ 2421.055147][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2421.078114][ T10] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 2421.144982][ T3407] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2421.214742][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2421.361645][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2421.381626][ T10] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2421.421446][ T10] usb 2-1: config 0 has no interface number 0 [ 2421.461072][ T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2421.494687][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2421.522395][ T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2421.597413][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2421.607953][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2421.653514][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.693613][ T10] usb 2-1: Product: syz [ 2421.722426][ T10] usb 2-1: Manufacturer: syz [ 2421.744672][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2421.761128][ T10] usb 2-1: SerialNumber: syz [ 2421.765869][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2421.822233][ T10] usb 2-1: config 0 descriptor?? [ 2421.894674][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2421.905656][ T5280] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2421.975730][ T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2422.032694][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2422.199713][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2422.961572][ T3407] usb 4-1: config 0 has no interfaces? [ 2422.986542][ T3407] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2423.012906][ T3407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.028021][ T3407] usb 4-1: Product: syz [ 2423.037053][ T3407] usb 4-1: Manufacturer: syz [ 2423.047193][ T3407] usb 4-1: SerialNumber: syz [ 2423.100284][ T3407] usb 4-1: config 0 descriptor?? [ 2423.662627][ T3407] usb 4-1: can't set config #0, error -71 [ 2423.698143][ T3407] usb 4-1: USB disconnect, device number 103 [ 2423.771113][T29301] usb 2-1: USB disconnect, device number 86 [ 2423.779456][T29301] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2423.859853][ T5294] netlink: 'syz.4.8077': attribute type 20 has an invalid length. [ 2423.868659][ T5291] netlink: 'syz.2.8076': attribute type 20 has an invalid length. [ 2423.883080][ T5291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2424.149996][ T5309] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2424.782116][ T5320] netlink: 'syz.2.8082': attribute type 4 has an invalid length. [ 2426.135468][ T498] net_ratelimit: 38 callbacks suppressed [ 2426.135489][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2426.214667][ T5329] netlink: 'syz.0.8084': attribute type 20 has an invalid length. [ 2426.255236][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2426.365155][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2426.513035][ T5340] 8021q: adding VLAN 0 to HW filter on device batadv64 [ 2426.553157][ T5340] team0: Port device batadv64 added [ 2426.605501][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2426.745322][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2426.874753][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2426.966200][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2426.994732][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2427.115800][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2427.270517][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2428.049504][ T5349] netlink: 'syz.0.8088': attribute type 20 has an invalid length. [ 2428.334787][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2428.514204][ T10] usb 2-1: config 0 has no interfaces? [ 2428.522101][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2428.538012][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2428.553090][ T10] usb 2-1: Product: syz [ 2428.562924][ T10] usb 2-1: Manufacturer: syz [ 2428.597604][ T10] usb 2-1: SerialNumber: syz [ 2428.663756][ T10] usb 2-1: config 0 descriptor?? [ 2428.889062][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2429.001799][ T5370] netlink: 'syz.3.8092': attribute type 4 has an invalid length. [ 2429.612352][ T5373] netlink: 'syz.0.8093': attribute type 20 has an invalid length. [ 2430.025735][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2430.437233][ T5392] netlink: 'syz.3.8097': attribute type 4 has an invalid length. [ 2430.836650][ T5399] 8021q: adding VLAN 0 to HW filter on device batadv65 [ 2430.874248][ T5399] team0: Port device batadv65 added [ 2431.245936][ T60] net_ratelimit: 38 callbacks suppressed [ 2431.245956][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2431.415212][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2431.545297][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2431.700304][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2431.815101][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2431.935104][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2432.086493][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2432.133104][ T5404] netlink: 'syz.4.8099': attribute type 20 has an invalid length. [ 2432.174647][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2432.204727][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2432.335258][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2432.421238][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv56 [ 2432.477539][ T5418] team0: Port device batadv56 added [ 2432.612837][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8100'. [ 2436.181685][ T5454] netlink: 'syz.2.8108': attribute type 20 has an invalid length. [ 2436.193611][ T5454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2436.275362][T28322] net_ratelimit: 34 callbacks suppressed [ 2436.275383][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2436.324641][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2436.405307][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2436.478459][ T5464] netlink: 'syz.4.8110': attribute type 4 has an invalid length. [ 2436.545614][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2436.676236][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2436.805101][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2436.924698][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2436.933638][ T10] usb 2-1: USB disconnect, device number 87 [ 2437.035131][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2437.144758][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2437.194317][ T5472] netlink: 'syz.0.8112': attribute type 4 has an invalid length. [ 2437.255166][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2437.366317][ T5481] netlink: 'syz.2.8113': attribute type 4 has an invalid length. [ 2437.880187][ T5473] netlink: 'syz.1.8111': attribute type 20 has an invalid length. [ 2437.917757][ T5473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2439.307870][ T5507] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2440.011913][ T5520] netlink: 'syz.1.8120': attribute type 4 has an invalid length. [ 2440.350237][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8119'. [ 2441.306006][ T5538] netlink: 'syz.2.8123': attribute type 4 has an invalid length. [ 2441.325162][ T3407] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2441.335272][T10386] net_ratelimit: 38 callbacks suppressed [ 2441.335285][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2441.483364][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2441.510052][ T3407] usb 4-1: config 0 has no interfaces? [ 2441.526737][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2441.539264][ T3407] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2441.549143][ T3407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.635182][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2441.649240][ T3407] usb 4-1: Product: syz [ 2441.660829][ T3407] usb 4-1: Manufacturer: syz [ 2441.724547][ T3407] usb 4-1: SerialNumber: syz [ 2441.739038][ T3407] usb 4-1: config 0 descriptor?? [ 2441.757725][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2441.884681][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2441.969958][ T5534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2442.014731][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2442.157123][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2442.295342][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2442.416552][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2442.516978][ T5534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2442.590133][ T5546] netlink: 'syz.1.8124': attribute type 20 has an invalid length. [ 2442.614856][ T5546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2443.335528][ T3407] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 2443.511369][ T3407] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2443.562253][ T3407] usb 3-1: config 0 has no interface number 0 [ 2444.787239][ T3407] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2444.839594][ T3407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.869860][ T3407] usb 3-1: Product: syz [ 2444.899835][ T3407] usb 3-1: Manufacturer: syz [ 2444.910407][ T3407] usb 3-1: SerialNumber: syz [ 2444.938124][ T3407] usb 3-1: config 0 descriptor?? [ 2444.966731][ T3407] yurex 3-1:0.50: Could not find endpoints [ 2444.979011][ T5573] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2446.133059][ T984] usb 4-1: USB disconnect, device number 104 [ 2446.356472][ T60] net_ratelimit: 38 callbacks suppressed [ 2446.356486][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2446.495345][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2446.626690][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2446.724636][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2446.765193][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2446.811652][ T5595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8133'. [ 2446.927471][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2447.061419][ T3407] usb 3-1: USB disconnect, device number 85 [ 2447.075287][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2447.185184][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2447.295304][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2447.435893][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2447.802457][ T5600] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2449.498870][ T5618] netlink: 'syz.1.8137': attribute type 20 has an invalid length. [ 2449.517927][ T5618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2450.095811][ T5628] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2450.264350][ T5643] netlink: 'syz.4.8141': attribute type 4 has an invalid length. [ 2451.058953][ T5653] netlink: 'syz.1.8142': attribute type 4 has an invalid length. [ 2451.481132][T10380] net_ratelimit: 37 callbacks suppressed [ 2451.481152][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2451.606603][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2451.726456][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2451.866462][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2451.924907][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2451.986209][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2452.108509][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2452.225150][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2452.365379][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2452.495607][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2452.935189][T29301] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2453.032826][ T5662] netlink: 'syz.2.8144': attribute type 20 has an invalid length. [ 2453.056757][ T5662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2453.101359][T29301] usb 2-1: config 0 has no interfaces? [ 2454.352510][T29301] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2454.415916][T29301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.467877][T29301] usb 2-1: Product: syz [ 2454.473283][T29301] usb 2-1: Manufacturer: syz [ 2454.515329][T29301] usb 2-1: SerialNumber: syz [ 2454.561093][T29301] usb 2-1: config 0 descriptor?? [ 2454.801151][ T5674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2455.115824][ T5700] netlink: 'syz.0.8151': attribute type 20 has an invalid length. [ 2456.211810][ T5715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8153'. [ 2456.516663][T10388] net_ratelimit: 38 callbacks suppressed [ 2456.516678][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2456.726371][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2456.813384][ T5716] netlink: 'syz.3.8154': attribute type 20 has an invalid length. [ 2456.856664][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2456.995835][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2457.124636][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2457.135044][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2457.245017][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2457.354773][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2457.475647][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2457.615231][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2458.235872][ T5727] netlink: 'syz.4.8155': attribute type 20 has an invalid length. [ 2459.020482][ T5674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2459.408100][T29301] usb 2-1: USB disconnect, device number 88 [ 2460.027035][ T5766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8161'. [ 2461.576351][T10380] net_ratelimit: 36 callbacks suppressed [ 2461.576367][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2461.716144][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2461.892380][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2461.913408][ T5788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8166'. [ 2462.055640][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2462.185617][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2462.315094][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2462.324941][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2462.455534][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2462.605098][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2462.736542][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2463.372162][ T5799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8169'. [ 2463.386161][ T5795] netlink: 'syz.4.8168': attribute type 20 has an invalid length. [ 2465.576142][ T5843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8174'. [ 2465.997861][ T5844] netlink: 'syz.3.8173': attribute type 20 has an invalid length. [ 2466.278958][ T5849] netlink: 'syz.4.8175': attribute type 20 has an invalid length. [ 2466.642756][ T498] net_ratelimit: 27 callbacks suppressed [ 2466.642779][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2466.786523][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8177'. [ 2466.856074][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2466.997314][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2467.135064][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2467.165993][ T5914] netlink: 'syz.3.8178': attribute type 4 has an invalid length. [ 2467.246602][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2467.286213][ T5916] netlink: 'syz.4.8179': attribute type 4 has an invalid length. [ 2467.367470][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2467.480267][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.488166][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.514726][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2467.524646][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2467.687622][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2467.816526][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2468.161477][ T5920] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2469.723767][ T5935] netlink: 'syz.4.8183': attribute type 20 has an invalid length. [ 2470.493044][ T5955] netlink: 'syz.3.8187': attribute type 4 has an invalid length. [ 2470.993915][ T5956] netlink: 'syz.4.8186': attribute type 20 has an invalid length. [ 2471.591591][ T5963] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2471.684652][ C0] net_ratelimit: 36 callbacks suppressed [ 2471.684672][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2471.725956][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2471.855846][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2471.985024][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2472.135260][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2472.265235][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2472.415247][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2472.595268][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2472.608761][ T5970] netlink: 'syz.4.8189': attribute type 20 has an invalid length. [ 2472.724953][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2472.737699][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2473.303683][ T5982] netlink: 'syz.0.8191': attribute type 4 has an invalid length. [ 2473.641687][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8192'. [ 2475.712707][ T6009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2476.088042][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8198'. [ 2476.774770][T28322] net_ratelimit: 37 callbacks suppressed [ 2476.774793][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2476.894905][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2477.005321][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2477.031566][ T6025] netlink: 'syz.1.8199': attribute type 4 has an invalid length. [ 2477.175318][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2477.285152][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2477.415509][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2477.555317][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2477.688125][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2477.815986][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2477.869865][ T6032] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2477.899717][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8201'. [ 2477.924653][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2477.965606][ T6037] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 2478.472369][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8204'. [ 2479.651111][ T6060] netlink: 'syz.2.8205': attribute type 4 has an invalid length. [ 2479.891494][ T6063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2480.004356][ T6071] netlink: 'syz.0.8208': attribute type 4 has an invalid length. [ 2480.064038][ T6070] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2481.785195][T28322] net_ratelimit: 36 callbacks suppressed [ 2481.785216][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2481.915427][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2481.961819][ T6089] netlink: 'syz.2.8210': attribute type 4 has an invalid length. [ 2482.041067][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2482.084649][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2482.111973][ T6093] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2482.172483][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2482.271911][ T6104] netlink: 'syz.4.8214': attribute type 4 has an invalid length. [ 2482.297109][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2482.444186][ T6103] debugfs: '1^!l1*$pOcɔ' already exists in 'ieee80211' [ 2483.126084][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2483.875020][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2483.994994][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2484.106665][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2484.164484][ T6117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2484.275202][ T3407] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 2484.427670][ T3407] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2484.436247][ T3407] usb 3-1: config 0 has no interface number 0 [ 2484.450181][ T3407] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2484.486614][ T3407] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2484.550963][ T3407] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2484.568874][ T3407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2484.598664][ T3407] usb 3-1: Product: syz [ 2484.611995][ T3407] usb 3-1: Manufacturer: syz [ 2484.625210][ T3407] usb 3-1: SerialNumber: syz [ 2484.690397][ T3407] usb 3-1: config 0 descriptor?? [ 2484.871085][ T6112] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2485.171642][ T3407] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 2486.856727][ T10] usb 3-1: USB disconnect, device number 86 [ 2486.870797][ T10] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 2486.885457][ T498] net_ratelimit: 27 callbacks suppressed [ 2486.885476][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2487.082423][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8219'. [ 2487.154260][ T6147] netlink: 'syz.2.8221': attribute type 4 has an invalid length. [ 2487.174033][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2487.285619][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2487.296251][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2487.330232][ T6148] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2487.454726][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2487.584695][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2487.725072][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2487.750701][ T6143] netlink: 'syz.3.8220': attribute type 20 has an invalid length. [ 2487.855276][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2487.985246][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2488.125090][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2488.801485][ T6163] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2489.357336][ T6161] netlink: 'syz.0.8223': attribute type 20 has an invalid length. [ 2489.511865][ T6177] netlink: 'syz.2.8225': attribute type 20 has an invalid length. [ 2489.535310][ T6177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2490.874981][ T3407] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 2491.080544][ T3407] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2491.099826][ T6195] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2491.118125][ T3407] usb 3-1: config 0 has no interface number 0 [ 2491.173128][ T3407] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2491.206299][ T3407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.245657][ T3407] usb 3-1: Product: syz [ 2491.249902][ T3407] usb 3-1: Manufacturer: syz [ 2491.269325][ T3407] usb 3-1: SerialNumber: syz [ 2491.327278][ T3407] usb 3-1: config 0 descriptor?? [ 2491.905866][T10386] net_ratelimit: 34 callbacks suppressed [ 2491.905890][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2492.069474][ T3407] yurex 3-1:0.50: Could not find endpoints [ 2492.114394][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2492.285987][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2492.410143][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2492.484650][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2492.545604][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2492.609012][ T6202] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔ' [ 2492.896707][ T6202] CPU: 0 UID: 0 PID: 6202 Comm: syz.0.8231 Tainted: G L syzkaller #0 PREEMPT(full) [ 2492.896739][ T6202] Tainted: [L]=SOFTLOCKUP [ 2492.896747][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2492.896758][ T6202] Call Trace: [ 2492.896767][ T6202] [ 2492.896776][ T6202] dump_stack_lvl+0xe8/0x150 [ 2492.896809][ T6202] sysfs_warn_dup+0x8e/0xa0 [ 2492.896837][ T6202] sysfs_do_create_link_sd+0xc0/0x110 [ 2492.896867][ T6202] device_add_class_symlinks+0x1cf/0x240 [ 2492.896891][ T6202] device_add+0x475/0xb70 [ 2492.896925][ T6202] wiphy_register+0x1d6c/0x2d50 [ 2492.896964][ T6202] ? __pfx_wiphy_register+0x10/0x10 [ 2492.896985][ T6202] ? __pfx_netdev_run_todo+0x10/0x10 [ 2492.897013][ T6202] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2492.897043][ T6202] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2492.897072][ T6202] ieee80211_register_hw+0x34d2/0x4150 [ 2492.897099][ T6202] ? __lock_acquire+0x6b5/0x2cf0 [ 2492.897137][ T6202] ? ieee80211_register_hw+0x13c1/0x4150 [ 2492.897173][ T6202] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2492.897215][ T6202] ? __hrtimer_setup+0x181/0x200 [ 2492.897235][ T6202] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2492.897265][ T6202] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 2492.897326][ T6202] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2492.897350][ T6202] ? kstrndup+0xbf/0x160 [ 2492.897383][ T6202] hwsim_new_radio_nl+0xf85/0x1c30 [ 2492.897414][ T6202] ? __pfx___nla_validate_parse+0x10/0x10 [ 2492.897455][ T6202] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2492.897486][ T6202] ? rcu_is_watching+0x15/0xb0 [ 2492.897510][ T6202] ? __nla_parse+0x40/0x60 [ 2492.897539][ T6202] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2492.897574][ T6202] genl_family_rcv_msg_doit+0x22a/0x330 [ 2492.897607][ T6202] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2492.897646][ T6202] ? bpf_lsm_capable+0x9/0x20 [ 2492.897670][ T6202] ? security_capable+0x7e/0x2c0 [ 2492.897700][ T6202] genl_rcv_msg+0x61c/0x7a0 [ 2492.897731][ T6202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2492.897753][ T6202] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2492.897788][ T6202] netlink_rcv_skb+0x232/0x4b0 [ 2492.897809][ T6202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2492.897836][ T6202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2492.897853][ T6202] ? genl_rcv+0x19/0x40 [ 2492.897893][ T6202] ? down_read+0x272/0x2e0 [ 2492.897914][ T6202] ? genl_rcv+0xd/0x40 [ 2492.897940][ T6202] genl_rcv+0x28/0x40 [ 2492.897961][ T6202] netlink_unicast+0x80f/0x9b0 [ 2492.897998][ T6202] ? __pfx_netlink_unicast+0x10/0x10 [ 2492.898024][ T6202] ? __alloc_skb+0x193/0x390 [ 2492.898048][ T6202] ? netlink_sendmsg+0x650/0xb40 [ 2492.898066][ T6202] ? skb_put+0x11b/0x210 [ 2492.898093][ T6202] netlink_sendmsg+0x813/0xb40 [ 2492.898124][ T6202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2492.898148][ T6202] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2492.898173][ T6202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2492.898196][ T6202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2492.898215][ T6202] ____sys_sendmsg+0xa68/0xad0 [ 2492.898250][ T6202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2492.898298][ T6202] ___sys_sendmsg+0x2a5/0x360 [ 2492.898322][ T6202] ? __lock_acquire+0x6b5/0x2cf0 [ 2492.898353][ T6202] ? __pfx____sys_sendmsg+0x10/0x10 [ 2492.898385][ T6202] ? futex_wait+0x29a/0x380 [ 2492.898433][ T6202] ? __fget_files+0x2a/0x420 [ 2492.898453][ T6202] ? __fget_files+0x3a0/0x420 [ 2492.898485][ T6202] __sys_sendmsg+0x183/0x260 [ 2492.898513][ T6202] ? __pfx___sys_sendmsg+0x10/0x10 [ 2492.898549][ T6202] ? rcu_is_watching+0x15/0xb0 [ 2492.898580][ T6202] __do_fast_syscall_32+0x1d2/0x540 [ 2492.898601][ T6202] ? lockdep_hardirqs_on+0x7a/0x110 [ 2492.898619][ T6202] ? do_fast_syscall_32+0x33/0x70 [ 2492.898639][ T6202] ? asm_int80_emulation+0x1a/0x20 [ 2492.898657][ T6202] ? do_int80_emulation+0x20e/0x400 [ 2492.898682][ T6202] do_fast_syscall_32+0x33/0x70 [ 2492.898704][ T6202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2492.898726][ T6202] RIP: 0023:0xf745d539 [ 2492.898744][ T6202] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2492.898762][ T6202] RSP: 002b:00000000f544450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2492.898784][ T6202] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 2492.898799][ T6202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2492.898811][ T6202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2492.898823][ T6202] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2492.898836][ T6202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2492.898863][ T6202] [ 2493.376919][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2493.486681][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2493.524882][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2493.609889][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2493.720482][ T6213] netlink: 'syz.3.8232': attribute type 20 has an invalid length. [ 2494.597630][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8236'. [ 2494.764288][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8234'. [ 2494.876016][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8235'. [ 2496.675185][ T6245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8238'. [ 2496.743832][ T10] usb 3-1: USB disconnect, device number 87 [ 2497.322594][ T6251] netlink: 'syz.2.8239': attribute type 20 has an invalid length. [ 2497.337451][ T6251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2497.354777][ T60] net_ratelimit: 22 callbacks suppressed [ 2497.354796][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2497.485478][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2497.595516][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2497.686751][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2497.708148][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2497.715900][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8240'. [ 2497.734840][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8240'. [ 2497.845145][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2497.977332][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2498.144736][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2498.198375][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8241'. [ 2498.295282][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2498.425239][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2500.324813][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8244'. [ 2500.453571][ T6287] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 2500.464420][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.3.8245 Tainted: G L syzkaller #0 PREEMPT(full) [ 2500.464452][ T6287] Tainted: [L]=SOFTLOCKUP [ 2500.464460][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2500.464473][ T6287] Call Trace: [ 2500.464481][ T6287] [ 2500.464490][ T6287] dump_stack_lvl+0xe8/0x150 [ 2500.464519][ T6287] sysfs_warn_dup+0x8e/0xa0 [ 2500.464546][ T6287] sysfs_do_create_link_sd+0xc0/0x110 [ 2500.464575][ T6287] device_add_class_symlinks+0x1cf/0x240 [ 2500.464597][ T6287] device_add+0x475/0xb70 [ 2500.464639][ T6287] wiphy_register+0x1d6c/0x2d50 [ 2500.464679][ T6287] ? __pfx_wiphy_register+0x10/0x10 [ 2500.464700][ T6287] ? __pfx_netdev_run_todo+0x10/0x10 [ 2500.464728][ T6287] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2500.464770][ T6287] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2500.464802][ T6287] ieee80211_register_hw+0x34d2/0x4150 [ 2500.464845][ T6287] ? ieee80211_register_hw+0x13c1/0x4150 [ 2500.464882][ T6287] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2500.464927][ T6287] ? __hrtimer_setup+0x181/0x200 [ 2500.464946][ T6287] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2500.464977][ T6287] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 2500.465033][ T6287] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2500.465056][ T6287] ? kstrndup+0xbf/0x160 [ 2500.465086][ T6287] hwsim_new_radio_nl+0xf85/0x1c30 [ 2500.465114][ T6287] ? __pfx___nla_validate_parse+0x10/0x10 [ 2500.465154][ T6287] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2500.465185][ T6287] ? rcu_is_watching+0x15/0xb0 [ 2500.465209][ T6287] ? __nla_parse+0x40/0x60 [ 2500.465238][ T6287] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2500.465273][ T6287] genl_family_rcv_msg_doit+0x22a/0x330 [ 2500.465306][ T6287] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2500.465345][ T6287] ? bpf_lsm_capable+0x9/0x20 [ 2500.465369][ T6287] ? security_capable+0x7e/0x2c0 [ 2500.465397][ T6287] genl_rcv_msg+0x61c/0x7a0 [ 2500.465428][ T6287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2500.465450][ T6287] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2500.465485][ T6287] netlink_rcv_skb+0x232/0x4b0 [ 2500.465505][ T6287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2500.465529][ T6287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2500.465545][ T6287] ? genl_rcv+0x19/0x40 [ 2500.465583][ T6287] ? down_read+0x272/0x2e0 [ 2500.465604][ T6287] ? genl_rcv+0xd/0x40 [ 2500.465639][ T6287] genl_rcv+0x28/0x40 [ 2500.465662][ T6287] netlink_unicast+0x80f/0x9b0 [ 2500.465702][ T6287] ? __pfx_netlink_unicast+0x10/0x10 [ 2500.465730][ T6287] ? __alloc_skb+0x193/0x390 [ 2500.465754][ T6287] ? netlink_sendmsg+0x650/0xb40 [ 2500.465773][ T6287] ? skb_put+0x11b/0x210 [ 2500.465800][ T6287] netlink_sendmsg+0x813/0xb40 [ 2500.465832][ T6287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2500.465857][ T6287] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2500.465882][ T6287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2500.465905][ T6287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2500.465926][ T6287] ____sys_sendmsg+0xa68/0xad0 [ 2500.465961][ T6287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2500.466004][ T6287] ___sys_sendmsg+0x2a5/0x360 [ 2500.466028][ T6287] ? __lock_acquire+0x6b5/0x2cf0 [ 2500.466058][ T6287] ? __pfx____sys_sendmsg+0x10/0x10 [ 2500.466090][ T6287] ? futex_wait+0x29a/0x380 [ 2500.466137][ T6287] ? __fget_files+0x2a/0x420 [ 2500.466157][ T6287] ? __fget_files+0x3a0/0x420 [ 2500.466190][ T6287] __sys_sendmsg+0x183/0x260 [ 2500.466218][ T6287] ? __pfx___sys_sendmsg+0x10/0x10 [ 2500.466253][ T6287] ? rcu_is_watching+0x15/0xb0 [ 2500.466286][ T6287] __do_fast_syscall_32+0x1d2/0x540 [ 2500.466307][ T6287] ? lockdep_hardirqs_on+0x7a/0x110 [ 2500.466326][ T6287] ? do_fast_syscall_32+0x33/0x70 [ 2500.466346][ T6287] ? asm_int80_emulation+0x1a/0x20 [ 2500.466384][ T6287] ? do_int80_emulation+0x20e/0x400 [ 2500.466410][ T6287] do_fast_syscall_32+0x33/0x70 [ 2500.466432][ T6287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2500.466456][ T6287] RIP: 0023:0xf7f77539 [ 2500.466475][ T6287] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2500.466493][ T6287] RSP: 002b:00000000f53f450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2500.466515][ T6287] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 2500.466529][ T6287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2500.466541][ T6287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2500.466551][ T6287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2500.466562][ T6287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2500.466589][ T6287] [ 2502.465941][T10388] net_ratelimit: 33 callbacks suppressed [ 2502.465957][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2502.570363][ T6317] netlink: 'syz.1.8251': attribute type 4 has an invalid length. [ 2502.605001][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2502.726225][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2502.865295][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2502.964684][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2502.986004][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2503.117537][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2503.275573][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2503.414262][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2503.422710][ T6249] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 2503.566661][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2503.723721][ T6249] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2503.755643][ T6249] usb 5-1: config 0 has no interface number 0 [ 2503.784971][ T6249] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2503.811760][ T6249] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2503.877000][ T6249] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2503.904855][ T6249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2503.949856][ T6249] usb 5-1: Product: syz [ 2503.978639][ T6249] usb 5-1: Manufacturer: syz [ 2503.988009][ T6249] usb 5-1: SerialNumber: syz [ 2504.038007][ T6249] usb 5-1: config 0 descriptor?? [ 2504.217755][ T6322] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2504.493890][ T6249] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2506.095924][ T6353] netlink: 'syz.2.8258': attribute type 20 has an invalid length. [ 2506.105312][ T6353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2506.843453][ T6249] usb 5-1: USB disconnect, device number 83 [ 2506.856040][ T6249] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2506.934001][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8260'. [ 2507.637610][ T6384] netlink: 'syz.3.8263': attribute type 4 has an invalid length. [ 2507.896665][T28322] net_ratelimit: 31 callbacks suppressed [ 2507.896686][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2508.014937][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2508.036636][ T6391] netlink: 'syz.4.8264': attribute type 4 has an invalid length. [ 2508.125012][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2508.165094][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2508.254905][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2508.408220][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2508.537489][ T6368] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 2509.104425][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.0.8261 Tainted: G L syzkaller #0 PREEMPT(full) [ 2509.104462][ T6368] Tainted: [L]=SOFTLOCKUP [ 2509.104470][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2509.104483][ T6368] Call Trace: [ 2509.104492][ T6368] [ 2509.104503][ T6368] dump_stack_lvl+0xe8/0x150 [ 2509.104536][ T6368] sysfs_warn_dup+0x8e/0xa0 [ 2509.104566][ T6368] sysfs_do_create_link_sd+0xc0/0x110 [ 2509.104593][ T6368] device_add_class_symlinks+0x1cf/0x240 [ 2509.104620][ T6368] device_add+0x475/0xb70 [ 2509.104655][ T6368] wiphy_register+0x1d6c/0x2d50 [ 2509.104693][ T6368] ? __pfx_wiphy_register+0x10/0x10 [ 2509.104714][ T6368] ? __pfx_netdev_run_todo+0x10/0x10 [ 2509.104743][ T6368] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2509.104777][ T6368] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2509.104807][ T6368] ieee80211_register_hw+0x34d2/0x4150 [ 2509.104834][ T6368] ? __lock_acquire+0x6b5/0x2cf0 [ 2509.104873][ T6368] ? ieee80211_register_hw+0x13c1/0x4150 [ 2509.104909][ T6368] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2509.104953][ T6368] ? __hrtimer_setup+0x181/0x200 [ 2509.104972][ T6368] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2509.105003][ T6368] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 2509.105066][ T6368] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2509.105088][ T6368] ? kstrndup+0xbf/0x160 [ 2509.105117][ T6368] hwsim_new_radio_nl+0xf85/0x1c30 [ 2509.105144][ T6368] ? __pfx___nla_validate_parse+0x10/0x10 [ 2509.105182][ T6368] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2509.105207][ T6368] ? rcu_is_watching+0x15/0xb0 [ 2509.105228][ T6368] ? __nla_parse+0x40/0x60 [ 2509.105253][ T6368] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2509.105286][ T6368] genl_family_rcv_msg_doit+0x22a/0x330 [ 2509.105317][ T6368] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2509.105358][ T6368] ? bpf_lsm_capable+0x9/0x20 [ 2509.105383][ T6368] ? security_capable+0x7e/0x2c0 [ 2509.105412][ T6368] genl_rcv_msg+0x61c/0x7a0 [ 2509.105445][ T6368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2509.105469][ T6368] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2509.105509][ T6368] netlink_rcv_skb+0x232/0x4b0 [ 2509.105531][ T6368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2509.105555][ T6368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2509.105592][ T6368] ? down_read+0x272/0x2e0 [ 2509.105610][ T6368] ? genl_rcv+0xd/0x40 [ 2509.105636][ T6368] genl_rcv+0x28/0x40 [ 2509.105658][ T6368] netlink_unicast+0x80f/0x9b0 [ 2509.105698][ T6368] ? __pfx_netlink_unicast+0x10/0x10 [ 2509.105745][ T6368] ? __alloc_skb+0x193/0x390 [ 2509.105769][ T6368] ? netlink_sendmsg+0x650/0xb40 [ 2509.105788][ T6368] ? skb_put+0x11b/0x210 [ 2509.105816][ T6368] netlink_sendmsg+0x813/0xb40 [ 2509.105837][ T6368] ? lockdep_hardirqs_on+0x7a/0x110 [ 2509.105868][ T6368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2509.105894][ T6368] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2509.105919][ T6368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2509.105942][ T6368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2509.105961][ T6368] ____sys_sendmsg+0xa68/0xad0 [ 2509.105996][ T6368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2509.106034][ T6368] ? __perf_event_task_sched_in+0xf2/0x1800 [ 2509.106067][ T6368] ___sys_sendmsg+0x2a5/0x360 [ 2509.106092][ T6368] ? __lock_acquire+0x6b5/0x2cf0 [ 2509.106122][ T6368] ? __pfx____sys_sendmsg+0x10/0x10 [ 2509.106145][ T6368] ? finish_task_switch+0x161/0x920 [ 2509.106167][ T6368] ? lock_acquire+0x106/0x330 [ 2509.106227][ T6368] ? __fget_files+0x2a/0x420 [ 2509.106248][ T6368] ? __fget_files+0x3a0/0x420 [ 2509.106281][ T6368] __sys_sendmsg+0x183/0x260 [ 2509.106309][ T6368] ? __pfx___sys_sendmsg+0x10/0x10 [ 2509.106347][ T6368] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 2509.106388][ T6368] __do_fast_syscall_32+0x1d2/0x540 [ 2509.106410][ T6368] ? do_fast_syscall_32+0x33/0x70 [ 2509.106430][ T6368] ? irqentry_exit+0x10e/0x620 [ 2509.106449][ T6368] ? rcu_is_watching+0x15/0xb0 [ 2509.106472][ T6368] do_fast_syscall_32+0x33/0x70 [ 2509.106494][ T6368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2509.106518][ T6368] RIP: 0023:0xf745d539 [ 2509.106536][ T6368] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2509.106554][ T6368] RSP: 002b:00000000f544450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2509.106575][ T6368] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 2509.106590][ T6368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2509.106602][ T6368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2509.106614][ T6368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2509.106627][ T6368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2509.106656][ T6368] [ 2509.581851][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2509.724869][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2509.847215][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2509.940616][ T6402] netlink: 'syz.2.8266': attribute type 4 has an invalid length. [ 2509.955051][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2511.155000][ T3407] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 2511.370649][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8269'. [ 2511.698341][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8270'. [ 2512.545356][ T3407] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2512.563340][ T3407] usb 5-1: config 0 has no interface number 0 [ 2512.658689][ T3407] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2512.730037][ T3407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2512.794267][ T3407] usb 5-1: Product: syz [ 2512.823004][ T3407] usb 5-1: Manufacturer: syz [ 2512.848754][ T3407] usb 5-1: SerialNumber: syz [ 2512.863995][ T3407] usb 5-1: config 0 descriptor?? [ 2512.890195][ T3407] yurex 5-1:0.50: Could not find endpoints [ 2512.964738][T10380] net_ratelimit: 27 callbacks suppressed [ 2512.964760][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2513.028507][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8271'. [ 2513.154838][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2513.304961][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2513.435206][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2513.574728][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2513.706404][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2513.774684][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2513.865184][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2513.977045][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2514.094995][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2514.621468][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'. [ 2514.655171][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8275'. [ 2514.919366][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8276'. [ 2516.794469][ T6485] netlink: 'syz.3.8281': attribute type 16 has an invalid length. [ 2516.897494][ T6474] netlink: 'syz.1.8279': attribute type 20 has an invalid length. [ 2516.909463][ T6474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2518.178773][T10388] net_ratelimit: 37 callbacks suppressed [ 2518.178794][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2518.324059][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8283'. [ 2518.388299][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2518.525083][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2518.635391][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2518.765235][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2518.875172][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2518.964917][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2518.984903][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2519.105256][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2519.225074][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2519.454727][ T10] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 2519.653616][ T6249] usb 5-1: USB disconnect, device number 84 [ 2519.668589][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2519.677999][ T10] usb 3-1: config 0 has no interface number 0 [ 2519.694679][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2519.714631][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2519.792748][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2519.813158][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2519.852150][ T10] usb 3-1: Product: syz [ 2519.867385][ T10] usb 3-1: Manufacturer: syz [ 2519.888675][ T10] usb 3-1: SerialNumber: syz [ 2519.912612][ T10] usb 3-1: config 0 descriptor?? [ 2520.813967][ T6501] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2520.850018][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 2521.109778][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8288'. [ 2521.344799][ T10] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 2521.562522][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8290'. [ 2521.631437][ T10] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 2521.650371][ T6528] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 2521.663302][ T10] usb 1-1: config 0 has no interface number 0 [ 2521.680160][ T10] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2521.714960][ T10] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2522.033037][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2522.095703][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2522.128336][ T10] usb 1-1: Product: syz [ 2522.157465][ T10] usb 1-1: Manufacturer: syz [ 2522.195225][ T10] usb 1-1: SerialNumber: syz [ 2522.222564][ T10] usb 1-1: config 0 descriptor?? [ 2522.281547][ T6522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2522.351523][ T3407] usb 3-1: USB disconnect, device number 88 [ 2522.408732][ T10] yurex 1-1:0.50: USB YUREX device now attached to Yurex #1 [ 2522.408878][ T3407] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 2522.923031][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8293'. [ 2523.148050][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8292'. [ 2523.415689][T10380] net_ratelimit: 36 callbacks suppressed [ 2523.415709][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2523.664798][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2523.803657][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8294'. [ 2523.906261][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2524.024792][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2524.164706][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2524.172559][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2524.325375][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2524.456385][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2524.576649][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2524.755499][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2524.907681][ T3407] usb 1-1: USB disconnect, device number 51 [ 2524.916101][ T3407] yurex 1-1:0.50: USB YUREX #1 now disconnected [ 2525.224163][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8297'. [ 2525.313623][ T6573] netlink: 'syz.3.8298': attribute type 4 has an invalid length. [ 2525.514074][ T6577] netlink: 'syz.4.8299': attribute type 4 has an invalid length. [ 2527.272451][ T6595] netlink: 'syz.4.8302': attribute type 4 has an invalid length. [ 2527.310402][ T6594] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2528.426079][T10388] net_ratelimit: 35 callbacks suppressed [ 2528.426095][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2528.581734][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2528.724997][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2528.845219][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2528.889468][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.896107][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.976688][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2529.116761][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2529.265195][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2529.364965][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2529.395318][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2529.528172][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2530.883288][ T6624] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2531.046680][ T6633] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2531.230956][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8309'. [ 2533.022123][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8315'. [ 2533.173334][ T6655] netlink: 'syz.0.8314': attribute type 20 has an invalid length. [ 2533.527534][ C0] net_ratelimit: 29 callbacks suppressed [ 2533.527553][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2533.564834][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8316'. [ 2534.374350][ T6679] netlink: 'syz.4.8318': attribute type 4 has an invalid length. [ 2534.567674][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2534.910051][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8319'. [ 2535.607285][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2535.875040][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2535.985213][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2536.644643][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2537.694894][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2537.841176][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2537.985042][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2538.105117][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2538.287645][ T6720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2538.566522][ T498] net_ratelimit: 3 callbacks suppressed [ 2538.566542][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2538.712447][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2538.724753][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2538.792695][ T6733] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2538.865659][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2539.005206][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2539.127306][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2539.345262][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2539.504879][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2539.630074][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2539.767008][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2539.818613][ T6741] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2540.754940][ T6249] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 2541.056369][ T6249] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2541.091865][ T6249] usb 3-1: config 0 has no interface number 0 [ 2541.145115][ T6249] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2541.192699][ T6249] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 2541.258001][ T6249] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2541.270069][ T6249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2541.278699][ T6249] usb 3-1: Product: syz [ 2541.282868][ T6249] usb 3-1: Manufacturer: syz [ 2541.296898][ T6249] usb 3-1: SerialNumber: syz [ 2541.380517][ T6249] usb 3-1: config 0 descriptor?? [ 2541.444503][ T6748] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2541.454040][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8330'. [ 2541.470073][ T6249] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 2543.003833][ T6770] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2543.059574][ T6774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2543.690938][T28322] net_ratelimit: 34 callbacks suppressed [ 2543.690959][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2543.905923][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2543.924916][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2544.065781][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2544.195226][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2544.325272][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2544.466205][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2544.604889][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2544.734836][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2544.855160][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2546.753822][ T6249] usb 3-1: USB disconnect, device number 89 [ 2546.763228][ T6249] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 2546.910049][ T6804] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:' [ 2546.920829][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.1.8340 Tainted: G L syzkaller #0 PREEMPT(full) [ 2546.920861][ T6804] Tainted: [L]=SOFTLOCKUP [ 2546.920870][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2546.920883][ T6804] Call Trace: [ 2546.920892][ T6804] [ 2546.920901][ T6804] dump_stack_lvl+0xe8/0x150 [ 2546.920941][ T6804] sysfs_warn_dup+0x8e/0xa0 [ 2546.920970][ T6804] sysfs_do_create_link_sd+0xc0/0x110 [ 2546.920999][ T6804] device_add_class_symlinks+0x1cf/0x240 [ 2546.921023][ T6804] device_add+0x475/0xb70 [ 2546.921053][ T6804] wiphy_register+0x1d6c/0x2d50 [ 2546.921090][ T6804] ? __pfx_wiphy_register+0x10/0x10 [ 2546.921108][ T6804] ? __pfx_netdev_run_todo+0x10/0x10 [ 2546.921134][ T6804] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2546.921167][ T6804] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2546.921197][ T6804] ieee80211_register_hw+0x34d2/0x4150 [ 2546.921239][ T6804] ? ieee80211_register_hw+0x13c1/0x4150 [ 2546.921276][ T6804] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2546.921319][ T6804] ? __hrtimer_setup+0x181/0x200 [ 2546.921338][ T6804] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2546.921368][ T6804] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 2546.921423][ T6804] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2546.921446][ T6804] ? kstrndup+0xbf/0x160 [ 2546.921479][ T6804] hwsim_new_radio_nl+0xf85/0x1c30 [ 2546.921509][ T6804] ? __pfx___nla_validate_parse+0x10/0x10 [ 2546.921550][ T6804] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2546.921581][ T6804] ? rcu_is_watching+0x15/0xb0 [ 2546.921604][ T6804] ? __nla_parse+0x40/0x60 [ 2546.921633][ T6804] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2546.921664][ T6804] genl_family_rcv_msg_doit+0x22a/0x330 [ 2546.921697][ T6804] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2546.921736][ T6804] ? bpf_lsm_capable+0x9/0x20 [ 2546.921758][ T6804] ? security_capable+0x7e/0x2c0 [ 2546.921787][ T6804] genl_rcv_msg+0x61c/0x7a0 [ 2546.921817][ T6804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2546.921841][ T6804] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2546.921881][ T6804] netlink_rcv_skb+0x232/0x4b0 [ 2546.921902][ T6804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2546.921936][ T6804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2546.921953][ T6804] ? genl_rcv+0x19/0x40 [ 2546.921995][ T6804] ? down_read+0x272/0x2e0 [ 2546.922016][ T6804] ? genl_rcv+0xd/0x40 [ 2546.922042][ T6804] genl_rcv+0x28/0x40 [ 2546.922066][ T6804] netlink_unicast+0x80f/0x9b0 [ 2546.922104][ T6804] ? __pfx_netlink_unicast+0x10/0x10 [ 2546.922131][ T6804] ? __alloc_skb+0x193/0x390 [ 2546.922154][ T6804] ? netlink_sendmsg+0x650/0xb40 [ 2546.922172][ T6804] ? skb_put+0x11b/0x210 [ 2546.922200][ T6804] netlink_sendmsg+0x813/0xb40 [ 2546.922234][ T6804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2546.922259][ T6804] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2546.922284][ T6804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2546.922306][ T6804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2546.922324][ T6804] ____sys_sendmsg+0xa68/0xad0 [ 2546.922357][ T6804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2546.922387][ T6804] ? preempt_schedule_common+0x82/0xd0 [ 2546.922412][ T6804] ___sys_sendmsg+0x2a5/0x360 [ 2546.922436][ T6804] ? __lock_acquire+0x6b5/0x2cf0 [ 2546.922468][ T6804] ? __pfx____sys_sendmsg+0x10/0x10 [ 2546.922496][ T6804] ? futex_private_hash_put+0x13b/0x170 [ 2546.922523][ T6804] ? futex_wake+0x4ac/0x580 [ 2546.922570][ T6804] ? __fget_files+0x2a/0x420 [ 2546.922590][ T6804] ? __fget_files+0x3a0/0x420 [ 2546.922623][ T6804] __sys_sendmsg+0x183/0x260 [ 2546.922650][ T6804] ? __pfx___sys_sendmsg+0x10/0x10 [ 2546.922686][ T6804] ? rcu_is_watching+0x15/0xb0 [ 2546.922718][ T6804] __do_fast_syscall_32+0x1d2/0x540 [ 2546.922739][ T6804] ? lockdep_hardirqs_on+0x7a/0x110 [ 2546.922757][ T6804] ? do_fast_syscall_32+0x33/0x70 [ 2546.922778][ T6804] ? asm_int80_emulation+0x1a/0x20 [ 2546.922796][ T6804] ? do_int80_emulation+0x20e/0x400 [ 2546.922848][ T6804] do_fast_syscall_32+0x33/0x70 [ 2546.922870][ T6804] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2546.922893][ T6804] RIP: 0023:0xf7f76539 [ 2546.922910][ T6804] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2546.922932][ T6804] RSP: 002b:00000000f53f450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2546.922955][ T6804] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 2546.922969][ T6804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2546.922982][ T6804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2546.922994][ T6804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2546.923007][ T6804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2546.923039][ T6804] [ 2548.012316][ T6820] netlink: 'syz.2.8342': attribute type 4 has an invalid length. [ 2548.711833][ T6819] netlink: 'syz.4.8343': attribute type 20 has an invalid length. [ 2548.726457][T10388] net_ratelimit: 34 callbacks suppressed [ 2548.726476][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2548.925509][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2549.044815][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2549.155290][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2549.275914][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2549.406897][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2549.444760][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2549.526651][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2549.567855][ T6838] netlink: 'syz.2.8346': attribute type 4 has an invalid length. [ 2549.660848][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2549.787453][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2550.259210][ T6849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8347'. [ 2552.342297][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8352'. [ 2552.961835][ T6885] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:' [ 2553.053944][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.3.8355 Tainted: G L syzkaller #0 PREEMPT(full) [ 2553.053979][ T6885] Tainted: [L]=SOFTLOCKUP [ 2553.053986][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2553.053998][ T6885] Call Trace: [ 2553.054006][ T6885] [ 2553.054016][ T6885] dump_stack_lvl+0xe8/0x150 [ 2553.054044][ T6885] sysfs_warn_dup+0x8e/0xa0 [ 2553.054069][ T6885] sysfs_do_create_link_sd+0xc0/0x110 [ 2553.054099][ T6885] device_add_class_symlinks+0x1cf/0x240 [ 2553.054124][ T6885] device_add+0x475/0xb70 [ 2553.054159][ T6885] wiphy_register+0x1d6c/0x2d50 [ 2553.054198][ T6885] ? __pfx_wiphy_register+0x10/0x10 [ 2553.054219][ T6885] ? __pfx_netdev_run_todo+0x10/0x10 [ 2553.054248][ T6885] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2553.054282][ T6885] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2553.054313][ T6885] ieee80211_register_hw+0x34d2/0x4150 [ 2553.054340][ T6885] ? __lock_acquire+0x6b5/0x2cf0 [ 2553.054388][ T6885] ? ieee80211_register_hw+0x13c1/0x4150 [ 2553.054425][ T6885] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2553.054469][ T6885] ? __hrtimer_setup+0x181/0x200 [ 2553.054489][ T6885] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2553.054520][ T6885] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 2553.054573][ T6885] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2553.054607][ T6885] hwsim_new_radio_nl+0xf85/0x1c30 [ 2553.054638][ T6885] ? __pfx___nla_validate_parse+0x10/0x10 [ 2553.054680][ T6885] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2553.054711][ T6885] ? rcu_is_watching+0x15/0xb0 [ 2553.054735][ T6885] ? __nla_parse+0x40/0x60 [ 2553.054765][ T6885] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2553.054801][ T6885] genl_family_rcv_msg_doit+0x22a/0x330 [ 2553.054836][ T6885] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2553.054876][ T6885] ? bpf_lsm_capable+0x9/0x20 [ 2553.054900][ T6885] ? security_capable+0x7e/0x2c0 [ 2553.054931][ T6885] genl_rcv_msg+0x61c/0x7a0 [ 2553.054964][ T6885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2553.054988][ T6885] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2553.055028][ T6885] netlink_rcv_skb+0x232/0x4b0 [ 2553.055051][ T6885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2553.055078][ T6885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2553.055094][ T6885] ? genl_rcv+0x19/0x40 [ 2553.055129][ T6885] ? down_read+0x272/0x2e0 [ 2553.055147][ T6885] ? genl_rcv+0xd/0x40 [ 2553.055170][ T6885] genl_rcv+0x28/0x40 [ 2553.055193][ T6885] netlink_unicast+0x80f/0x9b0 [ 2553.055224][ T6885] ? __pfx_netlink_unicast+0x10/0x10 [ 2553.055247][ T6885] ? __alloc_skb+0x193/0x390 [ 2553.055268][ T6885] ? netlink_sendmsg+0x650/0xb40 [ 2553.055284][ T6885] ? skb_put+0x11b/0x210 [ 2553.055313][ T6885] netlink_sendmsg+0x813/0xb40 [ 2553.055342][ T6885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2553.055366][ T6885] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2553.055396][ T6885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2553.055414][ T6885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2553.055429][ T6885] ____sys_sendmsg+0xa68/0xad0 [ 2553.055456][ T6885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2553.055487][ T6885] ___sys_sendmsg+0x2a5/0x360 [ 2553.055506][ T6885] ? __lock_acquire+0x6b5/0x2cf0 [ 2553.055528][ T6885] ? __pfx____sys_sendmsg+0x10/0x10 [ 2553.055552][ T6885] ? futex_wait+0x29a/0x380 [ 2553.055588][ T6885] ? __fget_files+0x2a/0x420 [ 2553.055603][ T6885] ? __fget_files+0x3a0/0x420 [ 2553.055628][ T6885] __sys_sendmsg+0x183/0x260 [ 2553.055650][ T6885] ? __pfx___sys_sendmsg+0x10/0x10 [ 2553.055677][ T6885] ? rcu_is_watching+0x15/0xb0 [ 2553.055702][ T6885] __do_fast_syscall_32+0x1d2/0x540 [ 2553.055719][ T6885] ? lockdep_hardirqs_on+0x7a/0x110 [ 2553.055733][ T6885] ? do_fast_syscall_32+0x33/0x70 [ 2553.055748][ T6885] ? asm_int80_emulation+0x1a/0x20 [ 2553.055762][ T6885] ? do_int80_emulation+0x20e/0x400 [ 2553.055780][ T6885] do_fast_syscall_32+0x33/0x70 [ 2553.055797][ T6885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2553.055815][ T6885] RIP: 0023:0xf7f77539 [ 2553.055829][ T6885] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2553.055843][ T6885] RSP: 002b:00000000f53f450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2553.055861][ T6885] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 2553.055872][ T6885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2553.055881][ T6885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2553.055890][ T6885] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2553.055899][ T6885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2553.055923][ T6885] [ 2553.764244][ T498] net_ratelimit: 21 callbacks suppressed [ 2553.764258][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2553.928518][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2554.084942][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2554.195153][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2554.305166][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2554.414945][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2554.507659][ T6894] netlink: 'syz.2.8356': attribute type 4 has an invalid length. [ 2554.529558][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2554.554856][ T6893] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2554.644991][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2554.645663][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2554.785024][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2554.809931][ T6902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2555.339871][ T6917] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2556.432089][ T6923] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2556.826818][ T6944] netlink: 'syz.0.8365': attribute type 16 has an invalid length. [ 2556.956993][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8364'. [ 2558.272757][ T6957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2558.774771][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8368'. [ 2558.805673][ C0] net_ratelimit: 30 callbacks suppressed [ 2558.805696][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2558.841259][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2558.887579][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8369'. [ 2559.844732][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2559.852387][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 2560.691281][ T6990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2560.895211][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2560.895321][ T6994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2561.924645][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2562.335055][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2562.500445][ T7020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8376'. [ 2562.544323][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8378'. [ 2562.663402][ T7024] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2562.715397][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2562.835290][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2562.965015][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2563.915584][ T498] net_ratelimit: 8 callbacks suppressed [ 2563.915606][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2564.004654][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2564.065275][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2564.175065][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2564.285070][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2564.394954][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2564.534790][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2564.655827][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2564.765210][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2564.907163][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2565.235616][ T7048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8383'. [ 2567.744098][ T7080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8389'. [ 2568.975009][T28322] net_ratelimit: 32 callbacks suppressed [ 2568.975025][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2569.116248][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2569.130000][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8392'. [ 2569.205932][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2569.235139][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2569.345343][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2569.508187][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2569.635019][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2569.745951][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2569.855264][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2569.977157][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2571.943780][ T7136] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2572.647524][ T7137] IPv6: NLM_F_CREATE should be specified when creating new route [ 2572.697839][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2572.705119][ T7137] IPv6: NLM_F_CREATE should be set when creating new route [ 2573.535252][ T7151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8403'. [ 2573.730222][ T7157] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 2573.747806][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.2.8404 Tainted: G L syzkaller #0 PREEMPT(full) [ 2573.747836][ T7157] Tainted: [L]=SOFTLOCKUP [ 2573.747844][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2573.747856][ T7157] Call Trace: [ 2573.747864][ T7157] [ 2573.747872][ T7157] dump_stack_lvl+0xe8/0x150 [ 2573.747900][ T7157] sysfs_warn_dup+0x8e/0xa0 [ 2573.747928][ T7157] sysfs_do_create_link_sd+0xc0/0x110 [ 2573.747958][ T7157] device_add_class_symlinks+0x1cf/0x240 [ 2573.747982][ T7157] device_add+0x475/0xb70 [ 2573.748016][ T7157] wiphy_register+0x1d6c/0x2d50 [ 2573.748059][ T7157] ? __pfx_wiphy_register+0x10/0x10 [ 2573.748080][ T7157] ? __pfx_netdev_run_todo+0x10/0x10 [ 2573.748107][ T7157] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2573.748142][ T7157] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2573.748173][ T7157] ieee80211_register_hw+0x34d2/0x4150 [ 2573.748214][ T7157] ? ieee80211_register_hw+0x13c1/0x4150 [ 2573.748250][ T7157] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2573.748293][ T7157] ? __hrtimer_setup+0x181/0x200 [ 2573.748312][ T7157] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2573.748343][ T7157] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 2573.748398][ T7157] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2573.748420][ T7157] ? kstrndup+0xbf/0x160 [ 2573.748453][ T7157] hwsim_new_radio_nl+0xf85/0x1c30 [ 2573.748485][ T7157] ? __pfx___nla_validate_parse+0x10/0x10 [ 2573.748526][ T7157] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2573.748555][ T7157] ? rcu_is_watching+0x15/0xb0 [ 2573.748578][ T7157] ? __nla_parse+0x40/0x60 [ 2573.748608][ T7157] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2573.748644][ T7157] genl_family_rcv_msg_doit+0x22a/0x330 [ 2573.748676][ T7157] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2573.748715][ T7157] ? bpf_lsm_capable+0x9/0x20 [ 2573.748739][ T7157] ? security_capable+0x7e/0x2c0 [ 2573.748769][ T7157] genl_rcv_msg+0x61c/0x7a0 [ 2573.748801][ T7157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2573.748824][ T7157] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2573.748853][ T7157] ? __pfx_ref_tracker_free+0x10/0x10 [ 2573.748885][ T7157] netlink_rcv_skb+0x232/0x4b0 [ 2573.748907][ T7157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2573.748934][ T7157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2573.748952][ T7157] ? genl_rcv+0x19/0x40 [ 2573.748994][ T7157] ? down_read+0x272/0x2e0 [ 2573.749014][ T7157] ? genl_rcv+0xd/0x40 [ 2573.749040][ T7157] genl_rcv+0x28/0x40 [ 2573.749069][ T7157] netlink_unicast+0x80f/0x9b0 [ 2573.749106][ T7157] ? __pfx_netlink_unicast+0x10/0x10 [ 2573.749134][ T7157] ? __alloc_skb+0x193/0x390 [ 2573.749158][ T7157] ? netlink_sendmsg+0x650/0xb40 [ 2573.749177][ T7157] ? skb_put+0x11b/0x210 [ 2573.749204][ T7157] netlink_sendmsg+0x813/0xb40 [ 2573.749235][ T7157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2573.749260][ T7157] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2573.749286][ T7157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2573.749309][ T7157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2573.749329][ T7157] ____sys_sendmsg+0xa68/0xad0 [ 2573.749364][ T7157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2573.749407][ T7157] ___sys_sendmsg+0x2a5/0x360 [ 2573.749431][ T7157] ? __lock_acquire+0x6b5/0x2cf0 [ 2573.749463][ T7157] ? __pfx____sys_sendmsg+0x10/0x10 [ 2573.749496][ T7157] ? futex_wait+0x29a/0x380 [ 2573.749545][ T7157] ? __fget_files+0x2a/0x420 [ 2573.749565][ T7157] ? __fget_files+0x3a0/0x420 [ 2573.749597][ T7157] __sys_sendmsg+0x183/0x260 [ 2573.749625][ T7157] ? __pfx___sys_sendmsg+0x10/0x10 [ 2573.749660][ T7157] ? rcu_is_watching+0x15/0xb0 [ 2573.749693][ T7157] __do_fast_syscall_32+0x1d2/0x540 [ 2573.749715][ T7157] ? lockdep_hardirqs_on+0x7a/0x110 [ 2573.749733][ T7157] ? do_fast_syscall_32+0x33/0x70 [ 2573.749753][ T7157] ? asm_int80_emulation+0x1a/0x20 [ 2573.749772][ T7157] ? do_int80_emulation+0x20e/0x400 [ 2573.749798][ T7157] do_fast_syscall_32+0x33/0x70 [ 2573.749818][ T7157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2573.749842][ T7157] RIP: 0023:0xf7f55539 [ 2573.749859][ T7157] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2573.749876][ T7157] RSP: 002b:00000000f53d450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2573.749897][ T7157] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 2573.749912][ T7157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2573.749924][ T7157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2573.749936][ T7157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2573.749948][ T7157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2573.749979][ T7157] [ 2574.395152][T19961] net_ratelimit: 36 callbacks suppressed [ 2574.395168][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2574.408114][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2574.595768][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2574.965895][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2575.105399][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2575.217543][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2575.354986][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2575.457454][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2575.525519][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2575.569782][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8406'. [ 2575.636817][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2576.719334][ T7179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8408'. [ 2577.993866][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8411'. [ 2579.170001][ T7210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8413'. [ 2579.606180][ C0] net_ratelimit: 25 callbacks suppressed [ 2579.606194][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2580.165619][ T7219] netlink: 'syz.1.8416': attribute type 4 has an invalid length. [ 2580.565234][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2580.583168][ T7228] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2580.605141][ T7230] netlink: 'syz.3.8418': attribute type 4 has an invalid length. [ 2580.646126][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2580.739100][ T7215] IPv6: NLM_F_CREATE should be specified when creating new route [ 2581.684909][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2582.086752][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2582.288487][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2582.348570][ T7241] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2582.428435][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2582.511635][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8419'. [ 2582.565732][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2582.696084][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2582.724760][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2584.459667][ T7254] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2584.646155][ T7005] net_ratelimit: 17 callbacks suppressed [ 2584.646170][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2584.794764][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2584.805113][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2584.842883][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8423'. [ 2584.906246][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2585.035109][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2585.155572][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2585.285239][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2585.316909][ T7267] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2585.404721][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2585.521941][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2585.664733][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2586.615976][ T7278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2588.974191][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8431'. [ 2589.725621][T28322] net_ratelimit: 39 callbacks suppressed [ 2589.725636][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2589.755865][ T7309] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2589.905349][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2590.004990][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2590.045154][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2590.174940][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2590.294765][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2590.337458][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.348034][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.467559][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8433'. [ 2590.506717][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2590.585377][ T7323] IPv6: NLM_F_CREATE should be specified when creating new route [ 2590.603708][ T7323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2590.610980][ T7323] IPv6: NLM_F_CREATE should be set when creating new route [ 2590.665132][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2590.845524][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2590.975361][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2591.462568][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8436'. [ 2591.986415][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8438'. [ 2592.553351][ T7356] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2593.876286][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8442'. [ 2595.025443][T28322] net_ratelimit: 24 callbacks suppressed [ 2595.025461][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2595.175152][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2595.188721][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8446'. [ 2595.204654][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2595.296878][ T7391] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2595.314442][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2595.446409][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2595.588878][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2595.700808][ T7403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8447'. [ 2595.727437][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2595.865208][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2595.994691][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2596.134861][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2598.029180][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8451'. [ 2598.052773][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8450'. [ 2598.504290][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8453'. [ 2598.643051][ T7434] netlink: 'syz.2.8454': attribute type 4 has an invalid length. [ 2600.115257][T10380] net_ratelimit: 36 callbacks suppressed [ 2600.115278][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2600.295087][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2600.404968][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2600.468899][ T7456] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2600.487449][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2600.663326][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2600.875202][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2600.939161][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8459'. [ 2601.016360][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2601.166639][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2601.314822][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2601.444829][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2601.970607][ T7483] netlink: 'syz.2.8462': attribute type 4 has an invalid length. [ 2602.629218][ T7491] netlink: 'syz.3.8464': attribute type 4 has an invalid length. [ 2602.738166][ T7494] netlink: 'syz.0.8465': attribute type 4 has an invalid length. [ 2602.779594][ T7484] netlink: 'syz.4.8463': attribute type 20 has an invalid length. [ 2602.811742][ T7484] IPv6: NLM_F_CREATE should be specified when creating new route [ 2604.475164][ T7500] netlink: 'syz.1.8466': attribute type 20 has an invalid length. [ 2604.675366][ T7517] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2605.195159][ T498] net_ratelimit: 35 callbacks suppressed [ 2605.195181][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2605.325180][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2605.474992][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2605.604642][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2605.605601][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2605.757489][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2605.885208][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2606.068784][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2606.194677][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2606.326827][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2606.543675][ T7536] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2608.436044][ T7559] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2609.840311][ T7577] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2610.121754][ T7575] netlink: 'syz.2.8481': attribute type 20 has an invalid length. [ 2610.305230][T10380] net_ratelimit: 38 callbacks suppressed [ 2610.305250][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2610.454965][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2610.574971][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2610.694673][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2610.805505][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2610.875024][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2610.977754][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8483'. [ 2611.034856][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2611.154993][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2611.612177][ T7602] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2611.739204][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8484'. [ 2611.835150][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2611.844649][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2612.133782][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8486'. [ 2615.936209][ T7005] net_ratelimit: 3 callbacks suppressed [ 2615.936224][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2616.005436][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2616.065381][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2616.175316][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2616.305457][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2616.435261][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2616.572981][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2616.705171][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2616.711825][ T7654] netlink: 'syz.1.8494': attribute type 20 has an invalid length. [ 2616.869755][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2616.996027][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2617.743058][ T7673] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2617.856269][ T7680] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2618.425397][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8500'. [ 2619.837025][ T7696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2619.859903][ T7698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2620.027562][ T7706] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2620.965525][T10386] net_ratelimit: 36 callbacks suppressed [ 2620.965542][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2621.118692][ T7712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2621.175393][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2621.204945][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2621.385278][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2621.529347][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2621.734982][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2621.866495][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2622.005078][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2622.135241][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2622.244637][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2622.537234][ T7742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8508'. [ 2623.436924][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8511'. [ 2624.210625][ T7763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2624.924373][ T7765] netlink: 'syz.3.8514': attribute type 20 has an invalid length. [ 2624.998462][ T7773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8516'. [ 2626.035787][T10386] net_ratelimit: 29 callbacks suppressed [ 2626.035804][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2626.212646][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2626.224856][ T7789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2626.345199][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2626.404663][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2626.456558][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2626.615463][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2626.725436][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2626.865666][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2626.995455][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2627.115221][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2627.262275][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8520'. [ 2628.831057][ T7823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2628.981254][ T7827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2630.278281][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8527'. [ 2630.856688][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8530'. [ 2631.010794][ T7855] netlink: 'syz.1.8528': attribute type 20 has an invalid length. [ 2631.086123][ T498] net_ratelimit: 36 callbacks suppressed [ 2631.086144][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2631.225691][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2631.374788][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2631.515209][T10386] bond2: (slave macvlan2): failed to get link speed/duplex [ 2631.606388][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2631.664717][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2631.695890][ T7859] netlink: 'syz.4.8532': attribute type 4 has an invalid length. [ 2631.825500][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2631.955042][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2632.095282][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2632.225198][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2632.502018][ T7864] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2632.821610][ T7876] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2633.435572][ T7872] netlink: 'syz.1.8533': attribute type 20 has an invalid length. [ 2635.476725][ T7907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8540'. [ 2636.804641][ C0] net_ratelimit: 29 callbacks suppressed [ 2636.804663][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2636.836622][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2636.928731][ T7916] netlink: 'syz.2.8543': attribute type 20 has an invalid length. [ 2636.954993][ T7916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2637.844953][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2638.227843][ T7931] netlink: 'syz.4.8546': attribute type 4 has an invalid length. [ 2638.526264][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2638.655318][ T7937] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2638.674906][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2638.784669][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2638.884644][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2638.904941][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2639.001731][ T7949] netlink: 'syz.0.8549': attribute type 4 has an invalid length. [ 2639.024964][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2639.135249][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2639.391938][ T7950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8548'. [ 2640.299721][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8551'. [ 2640.483993][ T7961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8550'. [ 2641.859389][ T498] net_ratelimit: 22 callbacks suppressed [ 2641.859411][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2641.996444][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2642.004913][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2642.052595][ T7987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2642.135079][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2642.255143][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2642.380848][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2642.474470][ T7981] netlink: 'syz.4.8554': attribute type 20 has an invalid length. [ 2642.535614][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2642.645246][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2642.831309][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2642.976060][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2644.319901][ T8013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8560'. [ 2644.985709][ T8017] netlink: 'syz.1.8561': attribute type 20 has an invalid length. [ 2645.180579][ T8031] netlink: 'syz.0.8564': attribute type 4 has an invalid length. [ 2645.252812][ T8033] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2646.935740][T10388] net_ratelimit: 38 callbacks suppressed [ 2646.935756][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2647.074965][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2647.195205][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2647.204638][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2647.389744][ T8058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8568'. [ 2648.244907][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2648.506059][ T8075] netlink: 'syz.0.8573': attribute type 4 has an invalid length. [ 2648.531156][ T8064] 8021q: adding VLAN 0 to HW filter on device batadv52 [ 2648.559541][ T8064] batadv52: entered promiscuous mode [ 2648.560647][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8571'. [ 2648.568948][ T8064] team0: Port device batadv52 added [ 2648.614909][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2648.766742][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2648.909873][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2649.070451][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2649.253520][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2650.255555][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8576'. [ 2650.343438][ T8096] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2650.377274][ T8099] 8021q: adding VLAN 0 to HW filter on device batadv49 [ 2650.398313][ T8099] team0: Port device batadv49 added [ 2651.768828][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.775942][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.913470][ T8114] netlink: 'syz.1.8580': attribute type 4 has an invalid length. [ 2651.972609][T10388] net_ratelimit: 26 callbacks suppressed [ 2651.972625][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2652.185853][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2652.315828][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2652.415439][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2652.425692][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2652.567113][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2652.719147][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2652.855469][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2652.987114][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2653.145274][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2654.230504][ T8134] netlink: 'syz.1.8584': attribute type 20 has an invalid length. [ 2654.243722][ T8134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2654.536044][ T8142] netlink: 'syz.2.8586': attribute type 4 has an invalid length. [ 2655.394043][ T8151] netlink: 'syz.1.8588': attribute type 20 has an invalid length. [ 2655.402657][ T8151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2655.538642][ T8152] netlink: 'syz.0.8587': attribute type 20 has an invalid length. [ 2655.827221][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8589'. [ 2656.289194][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8590'. [ 2656.414030][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8591'. [ 2656.968088][ T8185] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2657.354694][T10388] net_ratelimit: 30 callbacks suppressed [ 2657.354716][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2657.514782][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2657.614779][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2658.645189][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2658.664751][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2658.774775][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2658.884797][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2659.005184][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2659.135376][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2659.245240][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2660.019990][ T8221] netlink: 'syz.4.8601': attribute type 4 has an invalid length. [ 2660.056954][ T8219] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2661.878947][ T8242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8603'. [ 2661.888722][ T8243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8602'. [ 2662.026971][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv67 [ 2662.077239][ T8241] team0: Port device batadv67 added [ 2662.316939][ T8250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8605'. [ 2662.425055][ T7005] net_ratelimit: 27 callbacks suppressed [ 2662.425076][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2662.584698][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2662.705265][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2662.804944][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2662.929015][ T8256] netlink: 'syz.3.8606': attribute type 20 has an invalid length. [ 2663.155417][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2663.274692][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2663.346395][ T8259] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2663.434690][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2663.556917][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2663.706236][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2663.832330][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2665.427721][ T8288] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2665.692951][ T8301] netlink: 'syz.1.8615': attribute type 4 has an invalid length. [ 2667.473452][ T8316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8618'. [ 2667.482798][T28322] net_ratelimit: 34 callbacks suppressed [ 2667.482811][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2667.507000][ T8312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8617'. [ 2667.557025][ T8309] netlink: 'syz.3.8616': attribute type 20 has an invalid length. [ 2667.615343][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2667.793408][ T8326] 8021q: adding VLAN 0 to HW filter on device batadv68 [ 2667.833305][ T8326] team0: Port device batadv68 added [ 2667.845708][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2668.004763][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2668.012719][ T7005] bond2: (slave macvlan2): failed to get link speed/duplex [ 2668.136527][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2668.265064][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2668.625558][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2668.775145][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2668.888756][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2669.032508][ T8340] 8021q: adding VLAN 0 to HW filter on device batadv50 [ 2669.057190][ T8340] team0: Port device batadv50 added [ 2670.777204][ T8361] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2671.253846][ T8370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2671.516746][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8631'. [ 2672.542193][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8632'. [ 2672.825021][ T498] net_ratelimit: 34 callbacks suppressed [ 2672.825038][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2672.966405][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2673.109405][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv69 [ 2673.135294][ T8406] team0: Port device batadv69 added [ 2673.155472][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2673.204998][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2673.277586][ T8409] 8021q: adding VLAN 0 to HW filter on device batadv51 [ 2673.327503][ T8409] team0: Port device batadv51 added [ 2673.383455][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv68 [ 2673.430423][ T8411] team0: Port device batadv68 added [ 2673.555312][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2673.664830][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2673.805314][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2673.935349][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2674.054773][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2674.172695][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2674.742321][ T8427] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2676.239780][ T8445] netlink: 'syz.2.8642': attribute type 4 has an invalid length. [ 2676.252668][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8643'. [ 2677.602590][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8656'. [ 2677.885159][ T498] net_ratelimit: 36 callbacks suppressed [ 2677.885181][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2678.086172][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2678.098660][ T8469] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2678.209576][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2678.329728][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2678.404644][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2678.555171][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2678.676514][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2678.796029][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2678.915455][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2679.046325][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2679.483692][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8650'. [ 2680.920557][ T8506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8657'. [ 2682.621695][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8661'. [ 2682.906348][T28322] net_ratelimit: 35 callbacks suppressed [ 2682.906363][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2683.055167][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2683.179230][T28322] bond2: (slave macvlan2): failed to get link speed/duplex [ 2683.315273][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2683.465239][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2683.605249][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2683.660263][ T8537] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2683.677786][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2683.849410][T19961] bond2: (slave macvlan2): failed to get link speed/duplex [ 2683.975231][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2684.092239][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2684.853194][ T8551] netlink: 'syz.0.8664': attribute type 4 has an invalid length. [ 2685.268652][ T8559] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2687.910331][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8670'. [ 2687.945340][T10388] net_ratelimit: 37 callbacks suppressed [ 2687.945375][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2688.075820][T10380] bond2: (slave macvlan2): failed to get link speed/duplex [ 2688.184999][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2688.295300][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2688.326721][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8672'. [ 2688.433959][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2688.600832][T10388] bond2: (slave macvlan2): failed to get link speed/duplex [ 2688.749412][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2688.804676][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2688.865217][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2688.975389][ T8592] netlink: 'syz.1.8674': attribute type 20 has an invalid length. [ 2688.995347][ T8592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2689.004700][ T498] bond2: (slave macvlan2): failed to get link speed/duplex [ 2689.419035][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8675'. [ 2690.148708][ T8615] 8021q: adding VLAN 0 to HW filter on device batadv69 [ 2690.210088][ T8615] team0: Port device batadv69 added [ 2690.593605][ T8605] netlink: 'syz.3.8676': attribute type 20 has an invalid length. [ 2690.807616][ T31] INFO: task kworker/1:3:5899 blocked for more than 143 seconds. [ 2690.844075][ T31] Tainted: G L syzkaller #0 [ 2690.904664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2690.945193][ T31] task:kworker/1:3 state:D stack:20312 pid:5899 tgid:5899 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2691.061959][ T31] Workqueue: usb_hub_wq hub_event [ 2691.077427][ T31] Call Trace: [ 2691.095376][ T31] [ 2691.098602][ T31] __schedule+0x14ea/0x5050 [ 2691.151932][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2691.177404][ T31] ? __pfx___schedule+0x10/0x10 [ 2691.204400][ T31] ? schedule+0x90/0x360 [ 2691.215828][ T31] schedule+0x164/0x360 [ 2691.233558][ T31] usb_kill_urb+0x1cf/0x2f0 [ 2691.247094][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2691.262405][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2691.275540][ T31] usb_start_wait_urb+0x1a3/0x510 [ 2691.289430][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2691.303085][ T31] usb_control_msg+0x232/0x3e0 [ 2691.314602][ T31] hub_port_init+0xb1e/0x28d0 [ 2691.326229][ T31] hub_event+0x2593/0x4f30 [ 2691.334822][ T31] ? __perf_event_task_sched_in+0xf2/0x1800 [ 2691.352156][ T31] ? __pfx_hub_event+0x10/0x10 [ 2691.357338][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2691.373536][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2691.381682][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2691.405005][ T31] process_scheduled_works+0xaec/0x17a0 [ 2691.423717][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2691.437680][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2691.455914][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2691.468103][ T31] ? schedule+0x90/0x360 [ 2691.478439][ T31] worker_thread+0xda6/0x1360 [ 2691.488705][ T31] kthread+0x726/0x8b0 [ 2691.518546][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2691.547427][ T31] ? __pfx_kthread+0x10/0x10 [ 2691.572167][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2691.645691][ T31] ? __pfx_kthread+0x10/0x10 [ 2691.701034][ T31] ret_from_fork+0x51b/0xa40 [ 2691.737043][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2691.773282][ T31] ? __switch_to+0xc82/0x1410 [ 2691.785046][ T31] ? __pfx_kthread+0x10/0x10 [ 2691.793124][ T31] ret_from_fork_asm+0x1a/0x30 [ 2691.803088][ T31] [ 2691.812341][ T31] [ 2691.812341][ T31] Showing all locks held in the system: [ 2691.834611][ T31] 1 lock held by khungtaskd/31: [ 2691.839667][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2691.873146][ T31] 2 locks held by getty/5585: [ 2691.881381][ T31] #0: ffff888034ed90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2691.902389][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 2691.934724][ T31] 5 locks held by kworker/1:3/5899: [ 2691.942978][ T31] #0: ffff88801da8f148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2691.975615][ T31] #1: ffffc90004d37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2691.988629][ T31] #2: ffff888029468198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2691.997688][ T31] #3: ffff888029430518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2692.017979][ T31] #4: ffff88802933b968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2692.028286][ T31] [ 2692.030635][ T31] ============================================= [ 2692.030635][ T31] [ 2692.046213][ T31] NMI backtrace for cpu 0 [ 2692.046228][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2692.046243][ T31] Tainted: [L]=SOFTLOCKUP [ 2692.046246][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2692.046253][ T31] Call Trace: [ 2692.046257][ T31] [ 2692.046262][ T31] dump_stack_lvl+0xe8/0x150 [ 2692.046280][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2692.046295][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2692.046312][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2692.046327][ T31] sys_info+0x135/0x170 [ 2692.046338][ T31] watchdog+0xf90/0xfe0 [ 2692.046352][ T31] ? watchdog+0x209/0xfe0 [ 2692.046365][ T31] kthread+0x726/0x8b0 [ 2692.046378][ T31] ? __pfx_watchdog+0x10/0x10 [ 2692.046388][ T31] ? __pfx_kthread+0x10/0x10 [ 2692.046400][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2692.046415][ T31] ? __pfx_kthread+0x10/0x10 [ 2692.046426][ T31] ret_from_fork+0x51b/0xa40 [ 2692.046442][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2692.046456][ T31] ? __switch_to+0xc82/0x1410 [ 2692.046471][ T31] ? __pfx_kthread+0x10/0x10 [ 2692.046482][ T31] ret_from_fork_asm+0x1a/0x30 [ 2692.046502][ T31] [ 2692.046506][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2692.176015][ C1] NMI backtrace for cpu 1 [ 2692.176034][ C1] CPU: 1 UID: 0 PID: 498 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 2692.176054][ C1] Tainted: [L]=SOFTLOCKUP [ 2692.176060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2692.176071][ C1] Workqueue: bat_events batadv_tt_purge [ 2692.176097][ C1] RIP: 0010:lock_release+0x26d/0x3a0 [ 2692.176117][ C1] Code: e8 08 2f 00 00 48 8b 5c 24 08 48 c7 c7 58 42 f3 8d e8 57 9a f6 09 b8 ff ff ff ff 65 0f c1 05 aa 75 52 11 83 f8 01 75 2e 9c 58 00 02 00 00 75 42 f7 c3 00 02 00 00 75 47 65 48 8b 05 fc 2f 52 [ 2692.176130][ C1] RSP: 0018:ffffc9000bbf78e8 EFLAGS: 00000046 [ 2692.176143][ C1] RAX: 0000000000000046 RBX: 0000000000000206 RCX: 0000000080000201 [ 2692.176154][ C1] RDX: 0000000000000002 RSI: ffffffff8df34258 RDI: ffffffff8c073980 [ 2692.176165][ C1] RBP: ffff88805520aa00 R08: 0000000000000003 R09: 0000000000000004 [ 2692.176175][ C1] R10: dffffc0000000000 R11: fffff5200177ef1c R12: 0000000000000002 [ 2692.176185][ C1] R13: 0000000000000002 R14: ffff888085ee3cd8 R15: ffff888055209e80 [ 2692.176197][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 2692.176210][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2692.176220][ C1] CR2: 00000000f73df068 CR3: 000000007f0e6000 CR4: 00000000003526f0 [ 2692.176235][ C1] Call Trace: [ 2692.176241][ C1] [ 2692.176250][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 2692.176270][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 2692.176288][ C1] _raw_spin_unlock_bh+0x1b/0x40 [ 2692.176308][ C1] batadv_tt_local_purge+0x2a7/0x340 [ 2692.176332][ C1] batadv_tt_purge+0x35/0x9e0 [ 2692.176352][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 2692.176371][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 2692.176389][ C1] process_scheduled_works+0xaec/0x17a0 [ 2692.176419][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2692.176436][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2692.176453][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2692.176468][ C1] ? schedule+0x90/0x360 [ 2692.176485][ C1] worker_thread+0xda6/0x1360 [ 2692.176510][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 2692.176526][ C1] kthread+0x726/0x8b0 [ 2692.176543][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2692.176561][ C1] ? __pfx_kthread+0x10/0x10 [ 2692.176577][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2692.176595][ C1] ? __pfx_kthread+0x10/0x10 [ 2692.176610][ C1] ret_from_fork+0x51b/0xa40 [ 2692.176631][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2692.176653][ C1] ? __switch_to+0xc82/0x1410 [ 2692.176672][ C1] ? __pfx_kthread+0x10/0x10 [ 2692.176687][ C1] ret_from_fork_asm+0x1a/0x30 [ 2692.176711][ C1] [ 2692.436376][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2692.443223][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2692.453881][ T31] Tainted: [L]=SOFTLOCKUP [ 2692.458185][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2692.468221][ T31] Call Trace: [ 2692.471481][ T31] [ 2692.474393][ T31] vpanic+0x1e0/0x670 [ 2692.478360][ T31] panic+0xc5/0xd0 [ 2692.482068][ T31] ? __pfx_panic+0x10/0x10 [ 2692.486466][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2692.491835][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2692.497981][ T31] watchdog+0xfda/0xfe0 [ 2692.502120][ T31] ? watchdog+0x209/0xfe0 [ 2692.506431][ T31] kthread+0x726/0x8b0 [ 2692.510482][ T31] ? __pfx_watchdog+0x10/0x10 [ 2692.515145][ T31] ? __pfx_kthread+0x10/0x10 [ 2692.519735][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2692.524926][ T31] ? __pfx_kthread+0x10/0x10 [ 2692.529514][ T31] ret_from_fork+0x51b/0xa40 [ 2692.534093][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2692.539189][ T31] ? __switch_to+0xc82/0x1410 [ 2692.543856][ T31] ? __pfx_kthread+0x10/0x10 [ 2692.548433][ T31] ret_from_fork_asm+0x1a/0x30 [ 2692.553194][ T31] [ 2692.556546][ T31] Kernel Offset: disabled [ 2692.560853][ T31] Rebooting in 86400 seconds..