last executing test programs: 1.991470965s ago: executing program 2 (id=4182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 1.788277081s ago: executing program 1 (id=4185): r0 = socket(0xa, 0x3, 0xff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2b, 0x1, @empty, @local, {[@hopopts={0xff}]}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r8) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000855}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24004050) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000300000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feff00"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x1d145aa8ea516c49}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) 1.564032275s ago: executing program 1 (id=4188): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34, 0x3a, 0x0, 0x9}, 0x28) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d5ae120bb0f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7105400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @remote, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xe, 0xffe0}, {0xfff2, 0x7}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xc}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000380)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x54}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r2, 0x40}], 0x1, 0x3) 1.48042853s ago: executing program 4 (id=4189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2c, r4, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef679d6a98e3943f6892078bb952854743fe4dddd2e7c0ce7100ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000102000000000000000005000000061c0000030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$int_out(r6, 0x5460, &(0x7f0000000040)) 1.312536603s ago: executing program 3 (id=4192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000100)='wlan0\x00', 0x20b01, &(0x7f0000000200)={@align=0x401, {0x1153, 0x4, 0xc, 0xfffffffffffffffb}}, 0x7957, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1ff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r3, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.312174859s ago: executing program 4 (id=4193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x240488c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000046f5ffffffffffff0000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000fffffffc3c0000"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x3b}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@mcast1, @in=@loopback, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xd1}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.221893406s ago: executing program 3 (id=4195): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x2, 0x10}, &(0x7f0000000100)=0xc) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000300)='GPL\x00', 0x82000, &(0x7f0000000340)={@align=0xff, {0x7, 0x2, 0x6e93, 0xffffffffffffffff}}, 0x3, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x7}, {[0x35ec, 0x8, 0xc95b, 0x7fff]}, 0x8, 0xa4, &(0x7f0000000400)=""/164}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x48010) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000940)={r3, 0x9, 0xa, [0x6, 0x771, 0x7, 0x3, 0x2, 0x80, 0x0, 0x8, 0x5, 0x5]}, &(0x7f0000000980)=0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000009c0)={r9, 0x10, 0x92, "2d3da0eedf7693dd38f6a89a5075b6493856a68e773a3fea12880bc19efc1752b633215e1b851540e2cd8e478fcfcc8f063cb745ace77c615467060700312b09ac1fef2a0fb4b35650afa7970c2292de3519c9edf3fa4db1be9788ee7670652d4e12b214aaae0b02acf3adc6abaca397ab4e141959be1de006f7654181cd9bb832c70f7ef6423db77147de7201f41193fd8a"}, 0x9a) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x20, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0x8, 0x0, 0x0, 0x1, [@generic="976b6408"]}]}, 0x20}], 0x1}, 0x84) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={&(0x7f0000000540), 0xc, &(0x7f00000008c0)={&(0x7f0000000580)=@allocspi={0x320, 0x16, 0x100, 0x70bd2d, 0x25dfdbfe, {{{@in=@multicast1, @in=@local, 0x4e20, 0x1400, 0x4e23, 0x80, 0x2, 0x20, 0x80, 0x62, r6, r10}, {@in=@remote, 0x4d3, 0xe7}, @in6=@remote, {0x9, 0x7, 0xd31, 0x8000000000000001, 0x1, 0xd015, 0x8, 0x9}, {0x2, 0x781, 0x1, 0x4}, {0x401, 0xf755, 0x9}, 0x70bd2c, 0x0, 0x2, 0x2, 0x6, 0x8}, 0xe, 0x8}, [@algo_crypt={0xab, 0x2, {{'ecb-blowfish-asm\x00'}, 0x318, "44a4ea8a98341b40b2b6e8bef659f66c271f9ffcbc1a25832252f75552d1f385c61e8c3ac8f9fee009038df55f7058cd45921567afa7666075d774f71ca2ddf1eef92da842505ca11a6704f062333f019524f5b6fbeef030ebe4107c245f83f42c106c"}}, @srcaddr={0x14, 0xd, @in=@empty}, @encap={0x1c, 0x4, {0x3, 0x4e23, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, @policy_type={0xa}, @proto={0x5, 0x19, 0x2b}, @sec_ctx={0xe9, 0x8, {0xe5, 0x8, 0x1, 0x6, 0xdd, "8cf12fab38cdc2a0b01999ec8b8548276337fcf26e9562e01c5811e5507caa69801e4c4ca4f03a40be8b2564585c4021a404eadd5f0e7c767c6304f913aa9a9a841d2edf98ce0c369d93c45c2b0ee68cc9cb03fdeccbdc01adbd7bc5672a3d81f5625960c9cc037da798eabed520aea8a31aec0caf627e17dad7088f532c60a177b4b9f0ff432c17c259e37af98ff37982c8aebd57b05c5703cc0f150619d19a2271bdfdf004a8c8c507346492da9873a399c7e8a0b32b25b71579cd30d9d5ca8f6c9f339ba47cdf663085774cb1b02af9a965b8663a54d6521939ad69"}}, @algo_aead={0x4c, 0x12, {{'rfc7539(adiantum(ctr(serpent),anubis-generic,blake2s-256-x86),sh'}, 0x0, 0x60}}]}, 0x320}, 0x1, 0x0, 0x0, 0x4004014}, 0x400c806) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r3}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.135899951s ago: executing program 4 (id=4196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000009000100626f6e64000000001400028005000e200000000005000d0010"], 0x44}}, 0x40408c4) 1.129128921s ago: executing program 4 (id=4197): syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb5500450000a1000400000073737800000000e00000014e20ffff008d9078b4e1fa95765798262e83e352be08f88858937290daa680842f452c30d6040000000000000038848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426b17000fedbdf2502142000050000081400000008000200ffffffff08000d0400000008000200c00000020c000c4000ffff00000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x6, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc11}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) syz_extract_tcp_res(&(0x7f0000000140), 0x138a763c, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x2000000000009}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000100)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) 1.036553518s ago: executing program 2 (id=4199): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002840)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r0], 0x50}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 1.035779755s ago: executing program 1 (id=4200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0, @ANYBLOB="25fa1a317140fc38b8065ed718f1f5471a0c7aa92a724b84318551dba3b32c8be11768288ea9afd5bf75c37b2d2e05ffc23e77e79b2c9d30b34dbe30ee0449670fcacf4ac986f29ba4c25e2232e846e3501383175b27db6fba72abcb45f721f3820edf0d1d7db793853983bd7b5ca3f151410b0bfe6d04bdba5f049feb7c03fbdb8c17001364a3995f2ec0d9d927855d62561940b172f324577176de3baca14e0192e95301d82bafecb62bf15cda9c3baa490208cb661cc1d3ca0fb582635133e490984b4747af", @ANYRES8=r0, @ANYRESDEC, @ANYBLOB="4af4ba2149b6894fdcac2946b8851196d425a1fd4f4262ce8d54553a428afb207113357e56bd9b6de286ed68b16738ba44c647e8125a61d60ff24e13b33b5dbbf736403b1487a9b5146cad1fe7c133fbba9beb3e7d2d5542b7c267d99ca0361a191abf752470c3f97f5d365bd93bf641c62630d18149", @ANYRES32=0x0, @ANYBLOB="068cb66deb36e0b76fbab1ee78a7953a1b8a3b0a5e355187542f11d742648e5e87566bbb89a98f2d57f0403cc079aacfd7dac4d336ee7d51a98e84d8e941a0911c84a20c45445a1fe362bcf799fd569204d2c6009e692ed0ad4eb49dff5241c4c9aa5679a8289db02acc9dd1020cce6153b3365d8b6c495a7f31c4ffa611281b11ef8236ab428936c6bc4ce71d41313d104d383c4bea0cb028247c868b3fe6fd47c96534e308672530600116c5005e02", @ANYBLOB="78d7afa7ec7b65a6fd187dcaf2a2bfe5e90bc8a3f17795cab52b189853c1364e9c4491a676880412b60c34f2805daedecea5831d593eb467ac4728b309f174978e72873b75852f96385207f5aacfe60a183bf2e84f2e8bc0e75fe37093aa21bd28aee76e99bece91c9e06eefb0469534657da9ba830da60bb48b6ef06f75f07ffa64397f4fa31b6c6d6bc5796d0d4ec15fffd41e309e68be73dc33a9b05bebcf6b9337e0ffe14285eedfe0e0a6a588ea222879d9e8425819fa952046c4d3a9b774f65fbc22eaad8a182ea5fe20a25ebe34cb902a03ba84d0af7baa0d04a828ef969a4edce8658796260ea39e94942a8ee9", @ANYRESOCT=r0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x40000800) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}, 0x1, 0xfa000000000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000240), &(0x7f00000000c0)=0x8) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x14) r5 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x2f1, 0xfff}, {0x10007, 0xfffffffb}]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1c, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r7, 0x4}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r6, &(0x7f00000003c0)="bb899935a5dd236046c819c90c2b09bd8e4830c664b13bfcc5b9041732d380cbf4c58027cc09bce689b3af2a6387cd0dc9", &(0x7f0000000400)=""/227, 0x4}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 968.781095ms ago: executing program 3 (id=4201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x12a0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x6, 0x4, 0x8000000}, 0x9}, [{0x40, 0x9, 0x5, 0x1, 0x0, 0x2}, {0xffffff5c, 0x7, 0x0, 0x8, 0x9, 0x8}, {0x100, 0x100, 0x80, 0xbbd3, 0x0, 0x6}, {0x3, 0x7, 0x252, 0x5, 0x1ff}, {0x9, 0x7, 0xfff, 0x2, 0xd, 0xfffffffe}, {0x9, 0x9, 0x9, 0x9, 0x1, 0x3}, {0xd2, 0x0, 0x5, 0x10000, 0x7, 0x6}, {0xfffffff8, 0x2, 0x100, 0x3, 0x8, 0x1}, {0xffffff98, 0x40, 0x8, 0x5, 0x40, 0x4}, {0x9, 0xe, 0x7f, 0x2, 0x7b, 0x4}, {0xeb9d, 0x31d, 0x2, 0x31, 0x85a5, 0x9}, {0x0, 0x5, 0x31547498, 0x6, 0x2, 0x9}, {0x400, 0xfffff4ad, 0x9, 0x52, 0x419d, 0x3}, {0x5, 0xac8, 0x9, 0x116, 0x80000000, 0x2}, {0x4, 0x2, 0x4, 0x400, 0x101, 0x68571a57}, {0xffffffbb, 0x4, 0x401, 0x642d495a, 0x5, 0x4}, {0x0, 0x6, 0x5, 0x40, 0x7, 0x6}, {0x1, 0xfff, 0x2, 0x6, 0x2, 0xffffffff}, {0x0, 0x3, 0x10000, 0x6d}, {0xf, 0xd, 0x6, 0x7, 0x40, 0x381}, {0x80000001, 0x800, 0x6, 0x40d, 0x8, 0x2}, {0x944, 0x7, 0xfffffffc, 0x401, 0x6, 0x3}, {0x1, 0x0, 0x918, 0xfffffffd, 0x80, 0x200}, {0x9, 0x40, 0xb40, 0x800, 0x4, 0xf}, {0x784, 0x0, 0x42, 0x14d, 0x8c}, {0x8001, 0x6, 0xfffffff3, 0xfffffe00, 0x3, 0x1}, {0x1000, 0x4, 0xffff, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5d5b, 0x40, 0x4, 0xb765}, {0x7, 0x40000003, 0x4, 0x4, 0x100, 0xfffffffd}, {0x1, 0x5dc, 0x800, 0x1b0, 0xfffffff8, 0x3d2d}, {0x2, 0x8, 0x5, 0x2, 0xb, 0xa8}, {0xc0, 0x22f63e74, 0x9, 0x4, 0xf, 0x6e}, {0x2c89, 0x2, 0x101, 0x5, 0x30, 0x7}, {0x0, 0x0, 0x80, 0x2, 0x61e9, 0x2}, {0x8, 0xffff, 0x8, 0x5, 0x7, 0x4}, {0x7, 0x9, 0x71, 0x3, 0x2, 0x7}, {0x800, 0x8, 0x6, 0x3, 0x1, 0x4}, {0xcf9, 0x4, 0xaad, 0xb0, 0x1, 0xedfb}, {0x7, 0x8, 0x5, 0x7f, 0x6, 0x4}, {0xe, 0x3, 0xf, 0x6061faa0, 0x8, 0x3fe0000}, {0x80000000, 0xdbf3, 0x80000001, 0x1000, 0x2, 0x9}, {0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x8}, {0x4, 0x7fff, 0x8, 0x101, 0x3, 0x6}, {0x0, 0x7f800000, 0x75, 0x2, 0x3e9, 0x3}, {0x9, 0x1, 0x7, 0x6, 0x5, 0x190b}, {0xe, 0x1000, 0x2, 0x6, 0x3, 0xd5}, {0x8, 0x75, 0x7ff, 0x7398, 0x6, 0x10001}, {0xfffffff7, 0x4, 0xfffffff9, 0x4997, 0x7fffffff, 0x200}, {0x4, 0x101, 0x7f, 0x401, 0x9, 0x7f}, {0x1, 0xf, 0xe, 0x2, 0x8, 0xe410}, {0x7, 0xe, 0x101, 0x400, 0x8907, 0xa04}, {0x2, 0x1, 0xc, 0xc, 0x3, 0x9}, {0x5, 0x0, 0x4, 0x1, 0x80000001, 0x3}, {0xa98f, 0x4, 0x9, 0x800, 0xd3, 0x3}, {0x9, 0x0, 0x6, 0x9, 0xd9, 0x7af7}, {0x5, 0x6, 0x2d8, 0x2, 0xefc, 0x80000001}, {0x10c, 0x3, 0x2978, 0x8, 0x8, 0x4}, {0x8, 0x8, 0x3, 0x3, 0xffff7fff, 0x1}, {0x0, 0x80, 0x5, 0x0, 0x4, 0x8}, {0xfffffffc, 0xfff, 0x6, 0xe, 0x7fff, 0xb11}, {0x7d7, 0x5, 0x7, 0x6, 0xb, 0xfffffffb}, {0x9, 0x800000, 0xfffffffd, 0x6, 0x5, 0x6}, {0x9, 0x0, 0x7, 0x7fff, 0x40, 0x5eb}, {0x10001, 0x1ff, 0x0, 0x4, 0x6, 0xafe5}, {0x7ff, 0xffffffff, 0x7fffffff, 0x3, 0xfffffffc, 0x4}, {0xfff, 0x100, 0x81, 0x8001, 0xa066, 0x1ff}, {0x3ff, 0x236, 0x5, 0x7fffffff, 0x4, 0x7ff}, {0x3, 0xc57d, 0x33400000, 0x1, 0x2, 0xfffffffa}, {0x8, 0xffff, 0x10, 0x101, 0x844, 0x28}, {0x0, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x200000, 0x1, 0x6, 0xbc, 0xa4e, 0x7}, {0x1, 0x10, 0xa, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x7ff, 0x5, 0x82bf, 0x1}, {0xe75, 0xfffffff8, 0x5, 0x0, 0x8, 0x9}, {0x0, 0x2, 0x5, 0xf522, 0x1a23, 0x29}, {0x6, 0xd9b4, 0x1, 0x3, 0x5, 0x10001}, {0x80, 0xc1b0, 0x80000001, 0x2, 0xffffffff, 0x80000000}, {0x10001, 0x5, 0x5fc, 0x1176a235, 0x6, 0x2fd9}, {0xbd, 0xff, 0x101, 0x0, 0x6, 0x37f}, {0x4, 0x3fb, 0x60d31cf6, 0x7, 0x7ff, 0x38000000}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x8, 0x5f2d, 0x4000000, 0x6, 0xd, 0x1}, {0xf6, 0x1, 0x5, 0x200, 0x4, 0x4}, {0x0, 0x3fffc0, 0x6, 0xc, 0x5fcd, 0xef3}, {0x0, 0x9, 0x0, 0x54, 0x12, 0x94}, {0x0, 0x0, 0x5, 0x80000000, 0x9, 0xf545}, {0x0, 0x80000000, 0x1000, 0x0, 0x6}, {0x40007f, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x3, 0x5, 0x4, 0x0, 0xd}, {0x685, 0x787, 0xd, 0x4, 0x4, 0x3}, {0xd33b, 0x0, 0x7, 0x1, 0x4, 0xc0}, {0x1, 0x8000, 0xfffffff1, 0x7ff, 0xbab, 0xb9}, {0xb, 0x4, 0x7e2d03df, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x5, 0x176, 0x6, 0x7}, {0x4, 0x2879f55c, 0x7, 0x3, 0x3, 0x739}, {0x800, 0x79a, 0x3, 0xffff7fff, 0x8, 0x5}, {0x5, 0x6, 0x1, 0x80000001, 0xfff}, {0xb000, 0x0, 0x1ff, 0x4, 0x3, 0x9}, {0x4, 0x1aca, 0x2, 0xb1, 0x5, 0x5}, {0x1bb, 0x40, 0x8, 0x9, 0x80000001, 0x800}, {0x5, 0x81, 0x3a5, 0xe6, 0x2, 0xbd9}, {0x27d, 0x87, 0x6, 0x3, 0x1, 0x42}, {0x7f, 0x4, 0xffff, 0x8000, 0x0, 0x1}, {0x0, 0xc, 0x8, 0x4, 0x7, 0x466}, {0x7, 0x176, 0x40, 0x2, 0x76, 0x9}, {0x9, 0xb204099, 0x800, 0x8000, 0x9, 0x6}, {0xb, 0x40, 0x101, 0x1, 0x4, 0x3}, {0xa, 0x1, 0x7, 0x0, 0xfffffdaa, 0x1}, {0x5, 0x5, 0x6, 0xffffffff, 0xd5b, 0x3}, {0x0, 0x80, 0x7ff, 0xd, 0x5, 0x2}, {0xfffffff0, 0x2, 0x7, 0x3, 0x2, 0x7fffffff}, {0x2003, 0x400, 0x3, 0x8, 0xfffffffb, 0x6}, {0x58c2, 0x4, 0x26, 0xffffffff, 0x9, 0x7}, {0x2, 0x7, 0x436, 0x8, 0x7, 0x6}, {0x800, 0xff07, 0xffffffb4, 0x5, 0x963, 0x2}, {0x2, 0x6, 0x8, 0xc, 0x80000001, 0x4}, {0x3, 0x2, 0xfffffffb, 0x8, 0x2, 0x140}, {0x2, 0x5, 0x10001, 0x8, 0x2, 0x2}, {0x6, 0x5239, 0x6, 0x974f, 0x4, 0x2}, {0xff, 0x9, 0x10, 0x800, 0x2, 0x8000}, {0x7, 0x8, 0x0, 0x7fff, 0x7f5f, 0x4}, {0x1000, 0x6, 0xfffffffc, 0x5, 0x3, 0x81}, {0x0, 0xe196, 0x4, 0x800, 0x1, 0x94}, {0x80000001, 0x217021e6, 0x2702ff34, 0x9b40, 0x3}, {0x57cf8ce0, 0x2, 0x76, 0x80000000, 0xe, 0x7}, {0x4, 0xfffffff6, 0x2, 0x1000, 0x1ff, 0x2}, {0x8, 0x9, 0x6, 0x4316, 0x6, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x1, 0x8}], [{0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {}, {0xf9923793e02d7db6}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x5, 0xe1835468be4c3e98}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x9a9242c1bef3e2b4}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) 847.695906ms ago: executing program 4 (id=4202): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 653.542996ms ago: executing program 1 (id=4203): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pread64(r2, 0x0, 0x0, 0xcd32) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x20008840) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 652.758283ms ago: executing program 0 (id=4204): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c43b38c4d557951dab95269ab90b920e96b236776d7b59f5e1c0e93280a0264ffe4767bcd"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000002c0)={0x8, 'team_slave_1\x00', {'caif0\x00'}, 0x100}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000800000000e3310187a63d389cee92dc93a3ef2adcfa78c40ed0aad394898d7e2280ee51f472921b49dc50c2e5f2e401e90d23aede97eba3476810a2d170fa4d97d0df67200edf70558fabcc0820514562e65c03d6ac86f3d047cb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r6], 0x268}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0xec, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x7, 0x5, 0x100, 0x1, 0x3, 0x8, 0x4}}, {0xc, 0x2, [0x3ff, 0x3, 0x6a6, 0x9a31]}}, {{0x1c, 0x1, {0xf, 0x0, 0x81, 0xff7fff21, 0x2, 0x4, 0xefd, 0x2}}, {0x8, 0x2, [0x4800, 0x5]}}, {{0x1c, 0x1, {0x9, 0x10, 0x7, 0x6c, 0x2, 0x1000, 0xffffffff, 0x2}}, {0x8, 0x2, [0x5, 0x1]}}, {{0x1c, 0x1, {0xfa, 0x22, 0x8, 0xc4, 0x1, 0x6, 0x46b4, 0x8}}, {0x14, 0x2, [0x41, 0x5, 0x7f, 0x3, 0x0, 0x1, 0x7172, 0x7f]}}, {{0x1c, 0x1, {0xff, 0x31, 0x2, 0x0, 0x1, 0xfffffffe, 0x4, 0x2}}, {0x0, 0x2, [0x5, 0xc]}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendto$packet(r1, &(0x7f00000005c0)="44c33b69ebd3e0d5d98ee4042177513c179d534fd58cba36264e14216a121d80e30acd7cabad475b5f0ac022855ae11b77df0855cfc8c3b91c8937be0000000000000000", 0x44, 0x830, &(0x7f0000000440)={0x11, 0xd, r8, 0x1, 0x1, 0x6, @broadcast}, 0x14) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r3, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0xa, 0x0, 0x5, @mcast1, 0x4}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000007f00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r9}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r10, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 652.295489ms ago: executing program 4 (id=4205): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x80) pipe(&(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000400)={r2}) 652.004668ms ago: executing program 3 (id=4206): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a534871a76d2608fff74588a80a38882f15e0", 0x0, 0xf11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 651.711423ms ago: executing program 2 (id=4207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1111], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) 592.435053ms ago: executing program 0 (id=4208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0103000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380"], 0xd8}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r4, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @empty, 0x8fc7}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000090) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x10}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB]) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, 0x0, 0x32600) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x4}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fddbdf250500000030000180140002007665746831000000000000000000000008000300000000000800030006a6964a08000100", @ANYRES32=0x0, @ANYBLOB="3dd76347a2000000"], 0x4c}, 0x1, 0x0, 0x0, 0x44404}, 0x4800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01f628c57000040000379c00ebb94fdc0300ddae3aed5705bdf008f5eb6f7b9d8c7a4595505c71342234727c9cbe5c78ed420bd60e19d1b7fc58a1487201fcdc7c93816f9e112566e9c99a5ae5cfcc787efa1a4012acae33ec24e217027303425d100ba83d0c1b548b8cd9ddeeca34c0bc251f301ea828ad5779b66b224c762aeee5aaae33699e3f78050043ba3a31b80e87ccac938a383653751e7e477b2c4970daba797c88ba4871507927e130d31338c6a5e4f5efe2f0bb5c57b683346e92b2db63dba2b0c46105a83814d726a15151f586e954e0031214ae7e492237a955ce21c225705fca77c6cb2d5e9f4889e67e", @ANYRES32=r5, @ANYBLOB="18001d801400008006000500ca00000005000b0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) 591.937618ms ago: executing program 1 (id=4209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x716, 0x70bd27, 0x25dfdbfc, {0x0, 0x8, 0x2, 0x0, 0x0, 0x7aa6, 0x4, 0x8, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000200)={0xa4, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33a505b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x308f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x686a33b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37aeebcb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a826148}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3976}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4362}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd53f52a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8000}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6219d611}]}]}]}, 0xa4}}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x767, 0xe9}, &(0x7f00000001c0)=0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xffffffffffffff5f, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 485.978287ms ago: executing program 0 (id=4210): r0 = socket(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001800)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x6, &(0x7f00000015c0)=[@cswp={0x58, 0x114, 0x7, {{0x101, 0x8}, &(0x7f0000000280)=0xfffffffffffffffe, &(0x7f00000002c0), 0x4, 0x100, 0x6, 0xe, 0x4, 0x8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x83c, 0x762}, &(0x7f0000000300)=0x1, &(0x7f0000000340)=0x8, 0x644dc6f3, 0x8, 0x5, 0x9, 0x9, 0x3ff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x20b911fe, 0x1}, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x2, 0xa1b, 0x1ff, 0xc0, 0x1, 0x10, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0xffff}, &(0x7f0000000400)=0x5, &(0x7f0000000440)=0x9, 0x1, 0xfff, 0x10000, 0x8, 0x20}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x80000001}, &(0x7f0000000480)=0x4, &(0x7f00000004c0)=0x9, 0x200, 0x83c, 0x5, 0x1, 0x0, 0x9de}}, @mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000500)=0x8, &(0x7f0000000540)=0x80000001, 0x100000000, 0xffff, 0x5, 0x8001, 0x20, 0x2}}], 0x228, 0x40}, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x10) 478.404363ms ago: executing program 2 (id=4211): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080), 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000025bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001000"/28], 0x48) close(0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x33c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x326, 0x11, 0x0, 0x1, [@nested={0x4, 0xcf}, @generic="30e5d451f52e8a193d58b2451a00936c7d610902ba701e0fa47971d05082c2cbe52c52", @nested={0x2f3, 0x63, 0x0, 0x1, [@typed={0x84, 0xa, 0x0, 0x0, @binary="fe1924bf613c9d46930e29d0cd89c531032de5b0ec5ae819d80d3133d131cb03e25681f21b03ec8b76ebde439154e1520f088a81b8d0e5661e1771d1271c6acc997a828b0cd8eba7615ff8b1d24b16fef15d9b71f3cb01fe4159ede18f3ea29cea9b032153a78c0ef67ff1d00b558a0a06ab1cd5a95a543dcd45b5a51707a730"}, @nested={0x8, 0x136, 0x0, 0x1, [@typed={0x4, 0x14c}]}, @generic="43e368debd5f1bda0631be6420326e59c38922ce215302ca21a840b552b568e7ba92b810422a9a49feec1891125097556bd5e5b6f5ec5ec39a15ed320e43f661ffe6442cf946cc56cdd0950533f9043c8fd979b265c0b92ca6bb79857bdedfaa528325739d2027c6ccc41dc20b303209599ab99eb2dd796d4d6e13135eb474", @typed={0x8, 0x136, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x122, 0x0, 0x0, @u32=0x100}, @nested={0xb0, 0x6c, 0x0, 0x1, [@generic="a189b16c03fb429386e5257d789b3e2e2dddd3a17f208b5161e6307b4d433cb04158cd44a4fe51a8d2a9dac8f33569d04285", @nested={0x4, 0x3b}, @generic="260ee80c6201dba29422181ee8430efb0631b2b9a23a6caf1eda5f9d259dcc6919893e2732531a675b79488e960e0a273233cba14e6dbe7831134d947721a107d568e437b2759544dc289340f316c60aa492b71a8786620803c8f01f74f5f4", @generic="a9654ffae03e5b73f7d572041fd8e4", @typed={0x8, 0xb8, 0x0, 0x0, @fd=r0}]}, @nested={0x11c, 0xd7, 0x0, 0x1, [@generic="0dbf1a32597dbce921189853febd9143f932056a3b0504aea3361a4c53b0ba5583bac78c4cd5c1fd63f9a95aaa6e8a8b2df13e215b476a51ef0a91d65bde3bf9a44393ec01146752e722c2c40ca968fffa6699d3824e70024d41199525516de4138999488755d39aeeadc6546a214714d3d9ef66208dd0b21a7cae7e460e6242874379b5a5dd8367ae6c0dbf80473cbfce5147b0aaffd5dda2e9db5ede7e8badf9582bdb11ce573bbb020556841500db3288bdd6a7f98994228b678a61bcd6471fdc1015428eee7dd3dd956ecc", @typed={0x4, 0x66}, @nested={0x4, 0x34}, @generic="d5c8006f9586234df85be568236cc7686b30a5634350ce8bfecae14bd8d76e7ff0d71ea51485083e34b1d67fdb3269ebf0a086ef9405517f31fef4708ce81ce8b6ed4f"]}, @typed={0x5, 0x7, 0x0, 0x0, @str='\x00'}]}, @generic="7217d15d9a78a1"]}]}, 0x33c}], 0x1, 0x0, 0x0, 0x84}, 0x300) 398.340981ms ago: executing program 3 (id=4212): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=0x1, 0x4, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xbc3e, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r10, r0, 0x2e, 0x2038, 0x0, @void, @void, @value=r11, @void, r1}, 0x20) 397.786922ms ago: executing program 1 (id=4213): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f00000004c0)={0xfffffffffffffffc}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={r3, &(0x7f00000002c0)='}#\x00', 0x400, &(0x7f0000000300)={@align=0x3, {0x0, 0x7, 0xe, 0x10001}}, 0x6, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x5}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x0, @none, 0x1}, 0xe) bind$rose(r3, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="b886ecbc8cc1e70fb571f83b1c6eb6a65f941f991c0d05374b62fba7715c6990d39b48da2b9bdf085ef1ba2ab04d3d8bacf2829d9bac", 0x36, 0x24008040, &(0x7f0000000480)={0xa, 0x4e22, 0x4, @loopback, 0xbe}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 357.986424ms ago: executing program 2 (id=4214): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000047, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0x54c1]}, 0x6) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x70bd26, 0x0, {}, [{0x8}]}, 0x20}}, 0x801) 347.56138ms ago: executing program 0 (id=4215): socket(0x2a, 0x3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007b108a000000000004000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 196.075124ms ago: executing program 0 (id=4216): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x5, 0x4) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='p', 0x1}], 0x1}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x17}]}}}]}, 0x44}}, 0x0) 84.843873ms ago: executing program 3 (id=4217): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="fce112a7baa2f72324524242fe6f37aad56601294deac8ee4ced9e3f4af9e8460b96dca783fb2fd9edeb65b8a6a4dcafc1a170ed31463e585e8eecd817acec16aa0afba0235feb0bd1d1e11e45ed0c4fe24ad058e260ca2fc23c10cde1bc92bc1adc67445d250b2d8bcfbe5d19bf211e732086059ab4c62f8e6072d2effa3491c8fdd75808f987a3976aaaf5413dcc624c87a0ea31ac45ac74011423ee7f35e9e5c73695455535b40badd2a22e440a654f1a7d9951cd7423154f972258fc07aa4615a3f4a277fa3a1ad3b24cc39a8fefa0422d6d94a2caab2772cf43", @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB], 0x0, 0x37}, 0x28) (async) socket$tipc(0x1e, 0x2, 0x0) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 76.387743ms ago: executing program 2 (id=4218): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="18030000000000", 0x7) (async) write(r4, &(0x7f0000000140)="18030000000000", 0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 0s ago: executing program 0 (id=4219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0xfffffffc, &(0x7f00000000c0)={[0x100000001]}, 0x8) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b04000000000000000002000000340004803000018008000100636d70002400028008000140000000080800024000000031c7caf9b02597b01de12c0110000380090001003f25378bca0000000900010073797a30000000000900020073797a3200000000140000001100010000"], 0x88}}, 0x0) kernel console output (not intermixed with test programs): enabling it in 0 ms [ 427.012444][ T7383] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 427.124671][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.132442][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 427.244842][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.252603][ T7383] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 427.364758][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.372543][ T1137] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.024785][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 428.032809][ C0] lec:lec_tx_timeout: lec0 [ 428.037788][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 431.905129][ T48] net_ratelimit: 80 callbacks suppressed [ 431.905150][ T48] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.918877][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 432.044817][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.052583][ T7383] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 432.164698][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.172500][ T7383] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 432.284797][ T48] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.292565][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 432.415032][ T1038] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.422950][ T1038] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.044989][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 433.053006][ C0] lec:lec_tx_timeout: lec0 [ 433.057648][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 436.752999][T15873] netlink: 'syz.4.2798': attribute type 12 has an invalid length. [ 436.761585][T15873] netlink: 'syz.4.2798': attribute type 29 has an invalid length. [ 436.769627][T15873] __nla_validate_parse: 84 callbacks suppressed [ 436.769647][T15873] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2798'. [ 436.798033][T15873] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2798'. [ 436.813492][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2797'. [ 436.823948][T15881] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 436.885010][T15881] team1: entered promiscuous mode [ 436.893382][T15881] team1: entered allmulticast mode [ 436.914679][ T48] net_ratelimit: 81 callbacks suppressed [ 436.914697][ T48] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 436.936403][T15888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2796'. [ 436.962523][T15888] tipc: Invalid UDP bearer configuration [ 436.962577][T15888] tipc: Enabling of bearer rejected, failed to enable media [ 437.004716][ T48] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.037158][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.064727][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.085125][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.115320][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.134678][ T48] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.154621][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.175179][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.194650][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.488170][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2796'. [ 437.888622][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2814'. [ 437.988544][T15947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.096263][T15966] netlink: 'syz.2.2818': attribute type 11 has an invalid length. [ 438.120473][T15966] netlink: 'syz.2.2818': attribute type 4 has an invalid length. [ 438.141001][T15966] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.2818'. [ 438.710461][T15994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.805546][T15998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2828'. [ 438.836512][T15998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2828'. [ 438.866696][T15998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2828'. [ 439.303067][T16021] bond13: Removing last arp target with arp_interval on [ 439.319568][T16021] ip6tnl0: Caught tx_queue_len zero misconfig [ 439.354632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6300 ms [ 439.362724][ C0] lec:lec_tx_timeout: lec0 [ 439.368004][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 439.560417][T16037] netlink: 'syz.3.2842': attribute type 4 has an invalid length. [ 439.588149][T16037] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 439.640469][T16046] netlink: 'syz.1.2846': attribute type 1 has an invalid length. [ 439.702594][T16050] syzkaller0: entered promiscuous mode [ 439.725269][T16050] syzkaller0: entered allmulticast mode [ 439.756378][T16050] tipc: Started in network mode [ 439.761332][T16050] tipc: Node identity ee74bbf83018, cluster identity 4711 [ 439.777743][T16050] tipc: Enabled bearer , priority 0 [ 439.823099][T16054] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 439.956697][T16056] : renamed from hsr0 [ 440.012419][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.019344][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.134866][T16049] tipc: Resetting bearer [ 440.178043][T16049] tipc: Disabling bearer [ 440.239685][T16058] bond7: entered promiscuous mode [ 440.245025][T16058] bond7: entered allmulticast mode [ 440.250651][T16058] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.949032][T16105] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 440.959762][T16107] netlink: 'syz.3.2863': attribute type 9 has an invalid length. [ 440.970754][T16107] netlink: 'syz.3.2863': attribute type 6 has an invalid length. [ 441.583659][T16154] netlink: 'syz.2.2876': attribute type 1 has an invalid length. [ 441.695956][T16160] x_tables: duplicate underflow at hook 2 [ 441.783988][T16161] SET target dimension over the limit! [ 441.799230][T16161] SET target dimension over the limit! [ 441.851007][T16161] SET target dimension over the limit! [ 441.862555][T16161] SET target dimension over the limit! [ 441.887615][T16161] SET target dimension over the limit! [ 441.914033][T16161] SET target dimension over the limit! [ 441.939368][T16161] SET target dimension over the limit! [ 441.950172][T16161] SET target dimension over the limit! [ 441.995053][ T7383] net_ratelimit: 106 callbacks suppressed [ 441.995081][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.022371][T16161] SET target dimension over the limit! [ 442.035163][ T7383] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 442.056354][T16161] SET target dimension over the limit! [ 442.144656][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.183697][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.224673][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.264668][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.272457][ T7383] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 442.308805][T16194] netlink: 'syz.3.2885': attribute type 1 has an invalid length. [ 442.368257][T16198] __nla_validate_parse: 8 callbacks suppressed [ 442.368292][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2886'. [ 442.425747][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.433578][ T7383] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 442.442343][T16194] x_tables: duplicate underflow at hook 1 [ 442.484394][T16203] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 442.604819][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.691537][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2890'. [ 442.725293][T16215] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2890'. [ 442.744170][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2890'. [ 442.856172][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2896'. [ 443.093780][T16248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2901'. [ 443.111203][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'. [ 443.139557][T16248] netlink: 'syz.2.2901': attribute type 1 has an invalid length. [ 443.149883][T16248] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2901'. [ 443.179356][T16248] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2901'. [ 443.239859][T16248] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2901'. [ 443.479290][ T5147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.490071][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.503754][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.513677][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.522192][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.580583][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.592878][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.603092][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.613196][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.622309][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.729794][T16271] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.915199][T16288] syz.0.2913: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 443.934240][T16288] CPU: 0 UID: 0 PID: 16288 Comm: syz.0.2913 Not tainted syzkaller #0 PREEMPT(full) [ 443.934269][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.934288][T16288] Call Trace: [ 443.934297][T16288] [ 443.934306][T16288] dump_stack_lvl+0xe8/0x150 [ 443.934340][T16288] warn_alloc+0x249/0x340 [ 443.934363][T16288] ? stack_trace_save+0xa9/0x100 [ 443.934388][T16288] ? __pfx_warn_alloc+0x10/0x10 [ 443.934416][T16288] ? kasan_save_track+0x4f/0x80 [ 443.934433][T16288] ? kasan_save_track+0x3e/0x80 [ 443.934451][T16288] ? __kasan_kmalloc+0x93/0xb0 [ 443.934470][T16288] ? __kmalloc_cache_noprof+0x31c/0x660 [ 443.934489][T16288] ? xskq_create+0x56/0x170 [ 443.934517][T16288] ? xsk_setsockopt+0x54c/0x990 [ 443.934535][T16288] ? do_sock_setsockopt+0x17c/0x1b0 [ 443.934557][T16288] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 443.934580][T16288] ? do_syscall_64+0x14d/0xf80 [ 443.934612][T16288] __vmalloc_node_range_noprof+0x132/0x1730 [ 443.934663][T16288] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 443.934687][T16288] ? __kasan_kmalloc+0x93/0xb0 [ 443.934712][T16288] vmalloc_user_noprof+0xad/0xe0 [ 443.934732][T16288] ? xskq_create+0xbf/0x170 [ 443.934758][T16288] xskq_create+0xbf/0x170 [ 443.934787][T16288] xsk_init_queue+0x8a/0xe0 [ 443.934815][T16288] xsk_setsockopt+0x54c/0x990 [ 443.934839][T16288] ? __pfx_xsk_setsockopt+0x10/0x10 [ 443.934860][T16288] ? __pfx_aa_sk_perm+0x10/0x10 [ 443.934883][T16288] ? aa_sock_opt_perm+0xff/0x1a0 [ 443.934908][T16288] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 443.934928][T16288] ? __pfx_xsk_setsockopt+0x10/0x10 [ 443.934963][T16288] do_sock_setsockopt+0x17c/0x1b0 [ 443.934995][T16288] __x64_sys_setsockopt+0x13d/0x1b0 [ 443.935024][T16288] do_syscall_64+0x14d/0xf80 [ 443.935052][T16288] ? trace_irq_disable+0x3b/0x150 [ 443.935076][T16288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.935094][T16288] ? clear_bhb_loop+0x40/0x90 [ 443.935113][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.935137][T16288] RIP: 0033:0x7f2d7979c629 [ 443.935154][T16288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.935169][T16288] RSP: 002b:00007f2d7a6e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 443.935189][T16288] RAX: ffffffffffffffda RBX: 00007f2d79a15fa0 RCX: 00007f2d7979c629 [ 443.935203][T16288] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 443.935214][T16288] RBP: 00007f2d79832b39 R08: 0000000000000004 R09: 0000000000000000 [ 443.935224][T16288] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.935234][T16288] R13: 00007f2d79a16038 R14: 00007f2d79a15fa0 R15: 00007ffee2d95838 [ 443.935265][T16288] [ 444.234825][T16288] Mem-Info: [ 444.239333][T16288] active_anon:5857 inactive_anon:8 isolated_anon:0 [ 444.239333][T16288] active_file:2633 inactive_file:40213 isolated_file:0 [ 444.239333][T16288] unevictable:768 dirty:89 writeback:0 [ 444.239333][T16288] slab_reclaimable:12665 slab_unreclaimable:104629 [ 444.239333][T16288] mapped:29239 shmem:1363 pagetables:1224 [ 444.239333][T16288] sec_pagetables:0 bounce:0 [ 444.239333][T16288] kernel_misc_reclaimable:0 [ 444.239333][T16288] free:1313831 free_pcp:12720 free_cma:0 [ 444.332520][ T5833] syz_tun (unregistering): left allmulticast mode [ 444.344206][T16288] Node 0 active_anon:23628kB inactive_anon:32kB active_file:10532kB inactive_file:160648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117056kB dirty:356kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13792kB pagetables:4844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 444.377017][T16288] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 444.409530][T16288] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.440154][T16288] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 444.445978][T16288] Node 0 DMA32 free:1296364kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23828kB inactive_anon:32kB active_file:10532kB inactive_file:160648kB unevictable:1536kB writepending:356kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:49764kB local_pcp:27192kB free_cma:0kB [ 444.484252][T16288] lowmem_reserve[]: 0 0 0 0 0 [ 444.489485][T16288] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 444.519646][T16288] lowmem_reserve[]: 0 0 0 0 0 [ 444.524484][T16288] Node 1 Normal free:3943600kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.615409][T16288] lowmem_reserve[]: 0 0 0 0 0 [ 444.620322][T16288] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 444.660435][T16288] Node 0 DMA32: 3333*4kB (UME) 3005*8kB (UM) 1488*16kB (UME) 600*32kB (UM) 188*64kB (UME) 119*128kB (UM) 92*256kB (UME) 63*512kB (UM) 54*1024kB (UM) 32*2048kB (UE) 247*4096kB (UM) = 1295996kB [ 444.689883][T16288] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 444.701976][T16288] Node 1 Normal: 4*4kB (UE) 8*8kB (UME) 16*16kB (UME) 13*32kB (UME) 11*64kB (UME) 10*128kB (UME) 6*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 959*4096kB (M) = 3943600kB [ 444.758825][T16288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.774959][T16288] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.784292][T16288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.797127][T16288] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.809792][T16288] 44205 total pagecache pages [ 444.814847][T16288] 0 pages in swap cache [ 444.819018][T16288] Free swap = 124996kB [ 444.828533][T16288] Total swap = 124996kB [ 444.832740][T16288] 2097051 pages RAM [ 444.836932][T16288] 0 pages HighMem/MovableOnly [ 444.841616][T16288] 427002 pages reserved [ 444.845899][T16288] 0 pages cma reserved [ 444.925755][T16322] netlink: 'syz.0.2924': attribute type 1 has an invalid length. [ 445.053840][T16271] chnl_net:caif_netlink_parms(): no params data found [ 445.114571][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 445.122661][ C0] lec:lec_tx_timeout: lec0 [ 445.128019][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.183211][T16271] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.191223][T16271] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.198922][T16271] bridge_slave_0: entered allmulticast mode [ 445.206952][T16271] bridge_slave_0: entered promiscuous mode [ 445.216952][T16271] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.224172][T16271] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.232326][T16271] bridge_slave_1: entered allmulticast mode [ 445.240572][T16271] bridge_slave_1: entered promiscuous mode [ 445.247793][T16349] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 445.277407][T16271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.290200][T16271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.334184][T16271] team0: Port device team_slave_0 added [ 445.352736][T16271] team0: Port device team_slave_1 added [ 445.393309][T16271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.404033][T16271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.431037][T16271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.443907][T16271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.451597][T16271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.478970][T16271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.544895][T16271] hsr_slave_0: entered promiscuous mode [ 445.551309][T16271] hsr_slave_1: entered promiscuous mode [ 445.559654][T16271] debugfs: 'hsr0' already exists in 'hsr' [ 445.565882][T16271] Cannot create hsr debugfs directory [ 445.676557][ T5842] Bluetooth: hci5: command tx timeout [ 445.726449][T16271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.745209][T16271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37978 - 0 [ 445.782145][ T2268] block nbd0: Possible stuck request ffff8880352d0000: control (read@0,1024B). Runtime 270 seconds [ 445.797393][ T2268] block nbd0: Possible stuck request ffff8880352d0200: control (read@1024,1024B). Runtime 270 seconds [ 445.809786][ T2268] block nbd0: Possible stuck request ffff8880352d0400: control (read@2048,1024B). Runtime 270 seconds [ 445.822452][ T2268] block nbd0: Possible stuck request ffff8880352d0600: control (read@3072,1024B). Runtime 270 seconds [ 445.843476][T16369] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 445.852803][T16369] team0: Port device batadv1 added [ 445.895659][T16271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.914489][T16374] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 445.915420][T16271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37978 - 0 [ 446.031086][T16379] atomic_op ffff8880481c2198 conn xmit_atomic 0000000000000000 [ 446.077731][T16271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.092652][T16271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37978 - 0 [ 446.130689][T16382] bond_slave_0: Caught tx_queue_len zero misconfig [ 446.265616][T16271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.294607][T16271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37978 - 0 [ 446.343915][ T29] audit: type=1800 audit(1771881216.881:3): pid=16403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2947" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3054 res=0 errno=0 [ 446.755710][T16424] C: renamed from lo (while UP) [ 446.775748][T16271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 446.789883][T16271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 446.828705][T16271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 446.853223][T16271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 446.879706][T16437] tipc: Started in network mode [ 446.901180][T16437] tipc: Node identity ac14140f, cluster identity 4711 [ 446.921616][T16437] tipc: New replicast peer: 255.255.255.255 [ 446.953747][T16437] tipc: Enabled bearer , priority 10 [ 447.015211][ T1137] net_ratelimit: 106 callbacks suppressed [ 447.015230][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.069107][ T1137] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 447.120087][T16461] SET target dimension over the limit! [ 447.196234][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.225040][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.255014][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.306559][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.323332][T16471] syzkaller1: entered promiscuous mode [ 447.338396][T16471] syzkaller1: entered allmulticast mode [ 447.355472][ T1038] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.374311][T16271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.385887][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.405854][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.426765][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.427882][T16479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.461130][T16484] netlink: 'syz.2.2964': attribute type 1 has an invalid length. [ 447.480724][T16271] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.515151][T16484] bond11: entered promiscuous mode [ 447.520994][T16484] 8021q: adding VLAN 0 to HW filter on device bond11 [ 447.543623][T16487] bond11: (slave bridge9): making interface the new active one [ 447.554904][T16487] bridge9: entered promiscuous mode [ 447.561242][T16487] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 447.584421][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.591714][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.641726][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.649019][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.757057][ T5842] Bluetooth: hci5: command tx timeout [ 447.782006][T16497] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 447.910018][T16502] netlink: 'syz.2.2966': attribute type 10 has an invalid length. [ 447.956409][T16505] __nla_validate_parse: 13 callbacks suppressed [ 447.956427][T16505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2967'. [ 447.983732][T16502] team0 (unregistering): Port device team_slave_0 removed [ 448.019152][T16502] team0 (unregistering): Port device team_slave_1 removed [ 448.048310][T16505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2967'. [ 448.055438][T16271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.059362][T16505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2967'. [ 448.076390][ T5907] tipc: Node number set to 2886997007 [ 448.240823][T16271] veth0_vlan: entered promiscuous mode [ 448.257615][T16271] veth1_vlan: entered promiscuous mode [ 448.316473][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 448.330473][T16271] veth0_macvtap: entered promiscuous mode [ 448.346318][T16516] netlink: 'syz.4.2970': attribute type 1 has an invalid length. [ 448.352774][T16271] veth1_macvtap: entered promiscuous mode [ 448.358239][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 448.378930][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 448.391547][T16516] netlink: 'syz.4.2970': attribute type 1 has an invalid length. [ 448.408690][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 448.429892][T16516] netlink: 'syz.4.2970': attribute type 10 has an invalid length. [ 448.437314][T16271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.463728][T16271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.494226][ T7383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.519122][ T7383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.539408][ T7383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.587704][ T7383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.722880][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.746714][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.792276][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.803469][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.911604][T16546] netlink: 'syz.3.2977': attribute type 11 has an invalid length. [ 448.925139][T16546] netlink: 'syz.3.2977': attribute type 11 has an invalid length. [ 448.944217][T16546] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2977'. [ 449.267795][T16565] netlink: 'syz.1.2982': attribute type 1 has an invalid length. [ 449.328473][T16565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2982'. [ 449.347210][T16565] ip_vti0: entered promiscuous mode [ 449.369172][T16565] ip_vti0: entered allmulticast mode [ 449.392803][T16574] netlink: 'syz.1.2982': attribute type 9 has an invalid length. [ 449.421152][T16568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2983'. [ 449.470123][T16574] netlink: 'syz.1.2982': attribute type 11 has an invalid length. [ 449.496549][T16574] netlink: 'syz.1.2982': attribute type 12 has an invalid length. [ 449.561679][T16568] netlink: 'syz.4.2983': attribute type 1 has an invalid length. [ 449.611005][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 449.626742][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 449.635250][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 449.645945][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 449.653678][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 449.803188][T16583] ip6_vti0 speed is unknown, defaulting to 1000 [ 449.841828][ T5147] Bluetooth: hci5: command tx timeout [ 450.874598][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 450.882768][ C0] lec:lec_tx_timeout: lec0 [ 450.889160][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 450.930098][T16660] Cannot find add_set index 0 as target [ 451.763040][ T5147] Bluetooth: hci4: command tx timeout [ 451.900652][ T7383] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 451.915685][ T5147] Bluetooth: hci5: command tx timeout [ 452.024915][ T1137] net_ratelimit: 151 callbacks suppressed [ 452.024936][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.054935][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.074718][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.094684][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.109771][ T7383] bond6 (unregistering): (slave bridge5): Releasing active interface [ 452.114900][ T1038] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.118143][ T7383] bridge5 (unregistering): left promiscuous mode [ 452.132419][ T7383] bridge5 (unregistering): left allmulticast mode [ 452.155513][ T1038] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.174667][ T1038] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.190946][ T7383] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 452.199775][ T1038] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.209523][ T7383] bond0 (unregistering): Released all slaves [ 452.220080][ T7383] bond1 (unregistering): Released all slaves [ 452.224971][ T1038] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.238501][ T7383] bond2 (unregistering): Released all slaves [ 452.245111][ T1038] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.254052][ T7383] bond3 (unregistering): Released all slaves [ 452.272844][ T7383] bond4 (unregistering): Released all slaves [ 452.285864][ T7383] bond5 (unregistering): Released all slaves [ 452.301984][ T7383] bond6 (unregistering): Released all slaves [ 452.320636][ T7383] bond7 (unregistering): Released all slaves [ 452.340855][ T7383] bond8 (unregistering): Released all slaves [ 452.363669][T16698] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 452.523768][T16583] chnl_net:caif_netlink_parms(): no params data found [ 452.602907][ T7383] tipc: Disabling bearer [ 452.618162][ T7383] tipc: Left network mode [ 452.688568][ T7383] IPVS: stopping master sync thread 10870 ... [ 452.824146][T16732] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001 [ 452.962467][T16583] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.985710][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.992966][T16583] bridge_slave_0: entered allmulticast mode [ 453.016204][T16583] bridge_slave_0: entered promiscuous mode [ 453.091384][T16583] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.115030][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.122341][T16583] bridge_slave_1: entered allmulticast mode [ 453.157871][T16583] bridge_slave_1: entered promiscuous mode [ 453.200648][T16755] sctp: [Deprecated]: syz.2.3028 (pid 16755) Use of int in maxseg socket option. [ 453.200648][T16755] Use struct sctp_assoc_value instead [ 453.362439][T16583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.381017][T16583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.510871][T16583] team0: Port device team_slave_0 added [ 453.562785][T16583] team0: Port device team_slave_1 added [ 453.691228][T16583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.717133][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.756512][T16786] validate_nla: 2 callbacks suppressed [ 453.756533][T16786] netlink: 'syz.2.3034': attribute type 1 has an invalid length. [ 453.771638][T16583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.800834][T16788] __nla_validate_parse: 8 callbacks suppressed [ 453.800851][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'. [ 453.839128][ T5147] Bluetooth: hci4: command tx timeout [ 453.869094][T16583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.882013][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.908658][T16583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.946774][T16791] bond12: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 453.967118][T16791] bond12: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 453.979489][T16791] bond12: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 454.017939][T16786] bond12: (slave vcan1): The slave device specified does not support setting the MAC address [ 454.033422][T16786] bond12: (slave vcan1): making interface the new active one [ 454.042820][T16786] bond12: (slave vcan1): Enslaving as an active interface with an up link [ 454.093671][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 454.149881][T16797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.197730][T16797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.286686][T16813] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3041'. [ 454.426044][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 454.487140][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3045'. [ 454.507802][T16821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3043'. [ 454.850907][ T7383] smc: removing net device team0 with user defined pnetid SYZ2 [ 454.934111][T16583] hsr_slave_0: entered promiscuous mode [ 454.957434][T16583] hsr_slave_1: entered promiscuous mode [ 454.963961][T16583] debugfs: 'hsr0' already exists in 'hsr' [ 454.971132][T16583] Cannot create hsr debugfs directory [ 454.977325][T16795] syzkaller0: entered allmulticast mode [ 455.060739][T16829] syzkaller0: entered promiscuous mode [ 455.067313][T16829] syzkaller0: entered allmulticast mode [ 455.083136][T16838] bridge0: port 1(ipvlan2) entered blocking state [ 455.115167][T16838] bridge0: port 1(ipvlan2) entered disabled state [ 455.121860][T16838] ipvlan2: entered allmulticast mode [ 455.127316][T16838] bridge0: entered allmulticast mode [ 455.149070][T16838] ipvlan2: left allmulticast mode [ 455.154163][T16838] bridge0: left allmulticast mode [ 455.828083][T16886] netlink: 'syz.0.3057': attribute type 1 has an invalid length. [ 455.841686][ T7383] IPVS: stop unused estimator thread 0... [ 455.855215][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3056'. [ 455.904562][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 455.912643][ C0] lec:lec_tx_timeout: lec0 [ 455.917662][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 455.924117][ T5147] Bluetooth: hci4: command tx timeout [ 455.976461][T16886] 8021q: adding VLAN 0 to HW filter on device bond11 [ 456.031499][T16894] vlan3: entered promiscuous mode [ 456.078338][T16894] bond11: entered promiscuous mode [ 456.085562][T16894] vlan3: entered allmulticast mode [ 456.092428][T16886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3057'. [ 456.102972][T16894] bond11: entered allmulticast mode [ 456.108167][T16886] netlink: 'syz.0.3057': attribute type 7 has an invalid length. [ 456.129154][T16886] netlink: 'syz.0.3057': attribute type 8 has an invalid length. [ 456.137983][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'. [ 456.177991][T16897] bond11: (slave bridge3): making interface the new active one [ 456.192646][T16897] bridge3: entered promiscuous mode [ 456.211558][T16897] bridge3: entered allmulticast mode [ 456.219057][T16897] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 456.280928][T16909] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3062'. [ 456.457526][T16920] ip6gre1: entered allmulticast mode [ 456.557036][T16919] syzkaller0: entered promiscuous mode [ 456.562566][T16919] syzkaller0: entered allmulticast mode [ 456.684899][T16932] netlink: 'syz.2.3069': attribute type 12 has an invalid length. [ 456.693038][T16932] netlink: 'syz.2.3069': attribute type 29 has an invalid length. [ 456.820128][T16948] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 456.842959][T16949] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 457.053252][ T35] net_ratelimit: 182 callbacks suppressed [ 457.053271][ T35] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.115340][ T35] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.155010][ T35] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.187308][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.219450][ T35] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.254678][ T35] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.286766][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.332544][ T1038] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.371778][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.394761][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.998520][ T5147] Bluetooth: hci4: command tx timeout [ 458.874276][T16993] __nla_validate_parse: 3 callbacks suppressed [ 458.874293][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3077'. [ 458.876812][T16583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.884283][T16997] netlink: 'syz.1.3078': attribute type 4 has an invalid length. [ 458.891479][T16994] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3080'. [ 458.907277][T16997] netlink: 'syz.1.3078': attribute type 4 has an invalid length. [ 458.923205][T16997] netlink: 'syz.1.3078': attribute type 4 has an invalid length. [ 458.932496][T16997] netlink: 'syz.1.3078': attribute type 4 has an invalid length. [ 458.942222][T16997] netlink: 'syz.1.3078': attribute type 4 has an invalid length. [ 458.945041][T16583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 459.002113][T16993] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3077'. [ 459.022992][T16583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 459.047820][T16583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 459.057893][T17005] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3082'. [ 459.077338][T17008] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3084'. [ 459.197549][T17027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3086'. [ 459.246267][T17027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3086'. [ 459.359968][T16583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.390398][T16583] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.403776][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.411010][T17022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.449178][T17029] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.456384][T17029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.475235][T17059] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 459.714148][T17071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3096'. [ 459.728286][T17071] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.735988][T17071] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.779080][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3097'. [ 459.847854][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 459.995888][T16583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.077209][T17092] syzkaller0: entered promiscuous mode [ 460.082805][T17092] syzkaller0: entered allmulticast mode [ 460.123022][T16583] veth0_vlan: entered promiscuous mode [ 460.247620][T16583] veth1_vlan: entered promiscuous mode [ 460.333639][T16583] veth0_macvtap: entered promiscuous mode [ 460.358573][T16583] veth1_macvtap: entered promiscuous mode [ 460.483369][T17116] team0 (unregistering): Port device team_slave_0 removed [ 460.501729][T17116] team0 (unregistering): Port device team_slave_1 removed [ 460.516905][T17116] team0 (unregistering): Port device batadv0 removed [ 460.535502][T17116] team0 (unregistering): Port device batadv1 removed [ 460.552040][T16583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.564111][T17114] bond0 (unregistering): Released all slaves [ 460.607580][T16583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.675181][T17023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.733871][T17023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.747013][T17023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.763760][T17023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.924810][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 460.932896][ C0] lec:lec_tx_timeout: lec0 [ 460.937612][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 460.961469][T17037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.001242][T17037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.070880][T17023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.095544][T17023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.376347][T17155] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.673193][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.684896][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.694376][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.730076][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.738266][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.877397][T17191] netlink: 'syz.2.3130': attribute type 1 has an invalid length. [ 461.903957][T17179] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.948646][T17191] netlink: 'syz.2.3130': attribute type 3 has an invalid length. [ 462.064896][T17029] net_ratelimit: 163 callbacks suppressed [ 462.064916][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.086003][T17200] openvswitch: netlink: Message has 8 unknown bytes. [ 462.121234][T17200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.124903][T17033] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.177147][T17033] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.205115][T17033] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.236039][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.264706][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.294675][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.334917][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.613675][T17223] can: request_module (can-proto-0) failed. [ 462.757480][T17234] bridge2: entered promiscuous mode [ 462.774440][T17234] bridge2: entered allmulticast mode [ 462.804337][T17239] netlink: 'syz.3.3141': attribute type 1 has an invalid length. [ 462.812318][T17239] netlink: 'syz.3.3141': attribute type 1 has an invalid length. [ 462.823769][T17239] netlink: 'syz.3.3141': attribute type 1 has an invalid length. [ 463.108227][T17179] chnl_net:caif_netlink_parms(): no params data found [ 463.291429][T17179] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.299022][T17179] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.307569][T17179] bridge_slave_0: entered allmulticast mode [ 463.319645][T17179] bridge_slave_0: entered promiscuous mode [ 463.330231][T17179] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.337720][T17179] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.345336][T17179] bridge_slave_1: entered allmulticast mode [ 463.353185][T17179] bridge_slave_1: entered promiscuous mode [ 463.447452][T17179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.460889][T17179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.522555][T17179] team0: Port device team_slave_0 added [ 463.541365][T17179] team0: Port device team_slave_1 added [ 463.588602][T17179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.596650][T17179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.644708][T17179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.666985][T17179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.675297][T17179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.735017][T17179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.795322][T17179] hsr_slave_0: entered promiscuous mode [ 463.802017][T17179] hsr_slave_1: entered promiscuous mode [ 463.809050][T17179] debugfs: 'hsr0' already exists in 'hsr' [ 463.816998][T17179] Cannot create hsr debugfs directory [ 463.837044][ T5842] Bluetooth: hci1: command tx timeout [ 463.929641][T17297] __nla_validate_parse: 23 callbacks suppressed [ 463.929659][T17297] netlink: 401 bytes leftover after parsing attributes in process `syz.2.3154'. [ 463.963588][T17179] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.974946][T17179] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.985820][T17179] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.052366][T17179] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.062276][T17179] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.072236][T17179] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.129084][T17179] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.139214][T17179] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.149931][T17179] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.199840][T17179] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.209800][T17179] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.220679][T17179] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 465.914745][ T5842] Bluetooth: hci1: command tx timeout [ 465.944706][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 465.952774][ C0] lec:lec_tx_timeout: lec0 [ 465.957786][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 466.399710][T17275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.420914][T17179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.480478][T17179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.540308][T17179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 466.586304][T17179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 466.726086][T17332] syzkaller0: entered promiscuous mode [ 466.732281][T17332] syzkaller0: entered allmulticast mode [ 466.871607][T17179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.927504][T17179] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.969567][T17037] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.976780][T17037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.085111][T17029] net_ratelimit: 123 callbacks suppressed [ 467.085128][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.100373][T17023] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.107571][T17023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.154776][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.214780][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.228720][T17358] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 467.245238][T17035] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.265124][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.284647][T17033] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.302904][T17033] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 467.455216][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.463480][T17029] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 467.494902][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 467.541820][T17383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3177'. [ 467.566859][T17179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.712421][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3182'. [ 467.871704][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 467.994929][ T5842] Bluetooth: hci1: command tx timeout [ 468.298127][T17427] syzkaller0: entered promiscuous mode [ 468.303702][T17427] syzkaller0: entered allmulticast mode [ 468.422606][T17179] veth0_vlan: entered promiscuous mode [ 470.051243][T17179] veth1_vlan: entered promiscuous mode [ 470.076210][ T5147] Bluetooth: hci1: command tx timeout [ 470.090309][T17466] validate_nla: 1 callbacks suppressed [ 470.090328][T17466] netlink: 'syz.0.3195': attribute type 2 has an invalid length. [ 470.132204][T17469] netem: change failed [ 470.231773][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 470.248954][T17463] bridge_slave_1: left allmulticast mode [ 470.271691][T17463] bridge_slave_1: left promiscuous mode [ 470.282048][T17463] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.302783][T17463] bridge_slave_0: left allmulticast mode [ 470.318216][T17463] bridge_slave_0: left promiscuous mode [ 470.324176][T17463] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.408354][T17179] veth0_macvtap: entered promiscuous mode [ 470.431585][T17179] veth1_macvtap: entered promiscuous mode [ 470.496410][T17179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.550611][T17496] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.3201'. [ 470.672334][T17179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.680108][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 470.738889][T17022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.749406][T17022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.759238][T17022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.779176][T17022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.927770][T17022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.942601][T10333] IPVS: starting estimator thread 0... [ 470.946579][T17022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.964568][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 470.972639][ C0] lec:lec_tx_timeout: lec0 [ 470.977261][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 471.046985][T17525] IPVS: using max 38 ests per chain, 91200 per kthread [ 471.054445][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.069980][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.130790][T17538] tipc: Started in network mode [ 471.136090][T17538] tipc: Node identity ac14140f, cluster identity 4711 [ 471.143112][T17538] tipc: New replicast peer: 255.255.255.255 [ 471.153419][T17538] tipc: Enabled bearer , priority 10 [ 471.172406][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3211'. [ 471.219103][T17542] veth0_to_bond: entered allmulticast mode [ 471.696026][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.707260][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.716631][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.726839][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.734458][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.788762][T17565] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.085337][T17578] bond1 (unregistering): Released all slaves [ 472.097399][ T13] net_ratelimit: 165 callbacks suppressed [ 472.097418][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.144901][T17033] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.182211][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.237296][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.272631][ T5907] tipc: Node number set to 2886997007 [ 472.284898][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.299048][T17022] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 472.306251][T17598] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.3229'. [ 472.326306][T17598] netlink: 'syz.3.3229': attribute type 1 has an invalid length. [ 472.336644][T17598] netlink: 'syz.3.3229': attribute type 1 has an invalid length. [ 472.370236][T17602] netlink: 'syz.0.3230': attribute type 30 has an invalid length. [ 472.414660][T17033] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.446932][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.483471][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.515290][T17033] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.738442][T17623] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3237'. [ 472.743600][T17565] chnl_net:caif_netlink_parms(): no params data found [ 472.817790][T17623] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 472.937870][T17628] syzkaller0: entered promiscuous mode [ 472.943983][T17628] syzkaller0: entered allmulticast mode [ 473.129713][T17646] sock: sock_timestamping_bind_phc: sock not bind to device [ 473.848825][ T5147] Bluetooth: hci0: command tx timeout [ 474.434782][T17641] lo: entered promiscuous mode [ 474.535362][T17565] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.546420][T17565] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.553842][T17565] bridge_slave_0: entered allmulticast mode [ 474.569394][T17565] bridge_slave_0: entered promiscuous mode [ 474.578489][T17565] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.586764][T17565] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.596986][T17565] bridge_slave_1: entered allmulticast mode [ 474.605175][T17565] bridge_slave_1: entered promiscuous mode [ 474.654108][T17565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.709385][T17565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.769245][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3246'. [ 474.791782][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3246'. [ 474.808546][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3246'. [ 474.818143][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3246'. [ 474.893324][T17565] team0: Port device team_slave_0 added [ 474.919769][T17565] team0: Port device team_slave_1 added [ 474.998855][T17674] netlink: 'syz.0.3251': attribute type 1 has an invalid length. [ 475.107220][T17674] 8021q: adding VLAN 0 to HW filter on device bond14 [ 475.126860][T17565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.133817][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.166632][T17565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.212870][T17674] bond14: (slave ip6gretap0): making interface the new active one [ 475.221568][T17685] netlink: 'syz.3.3254': attribute type 7 has an invalid length. [ 475.230948][T17674] bond14: (slave ip6gretap0): Enslaving as an active interface with an up link [ 475.232755][T17682] netlink: 'syz.3.3254': attribute type 7 has an invalid length. [ 475.253243][T17674] __nla_validate_parse: 5 callbacks suppressed [ 475.253260][T17674] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3251'. [ 475.254033][T17565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.264170][T17685] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3254'. [ 475.269284][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.320039][T17682] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3254'. [ 475.329492][T17565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.341179][T17684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.371203][T17684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.571552][T17565] hsr_slave_0: entered promiscuous mode [ 475.579706][T17565] hsr_slave_1: entered promiscuous mode [ 475.587240][T17565] debugfs: 'hsr0' already exists in 'hsr' [ 475.593086][T17565] Cannot create hsr debugfs directory [ 475.647739][T17698] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 475.839050][ T2268] block nbd0: Possible stuck request ffff8880352d0000: control (read@0,1024B). Runtime 300 seconds [ 475.851217][ T2268] block nbd0: Possible stuck request ffff8880352d0200: control (read@1024,1024B). Runtime 300 seconds [ 475.865238][ T2268] block nbd0: Possible stuck request ffff8880352d0400: control (read@2048,1024B). Runtime 300 seconds [ 475.876336][ T2268] block nbd0: Possible stuck request ffff8880352d0600: control (read@3072,1024B). Runtime 300 seconds [ 475.901005][T17714] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3263'. [ 475.915209][ T5147] Bluetooth: hci0: command tx timeout [ 475.928867][T17717] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 475.945354][T17717] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 475.955723][T17717] gretap1: entered promiscuous mode [ 475.962101][T17717] gretap1: entered allmulticast mode [ 475.984926][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 475.992952][ C0] lec:lec_tx_timeout: lec0 [ 475.998553][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 476.094886][T17723] bond1: (slave gretap0): Device is not bonding slave [ 476.101709][T17723] bond1: option active_slave: invalid value (gretap0) [ 476.117098][T17723] bond1 (unregistering): Released all slaves [ 476.195871][T17732] netlink: 'syz.3.3270': attribute type 1 has an invalid length. [ 476.213298][T17565] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.215630][T17733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.224474][T17732] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3270'. [ 476.230591][T17733] IPv6: NLM_F_CREATE should be set when creating new route [ 476.250985][T17565] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.261958][T17732] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3270'. [ 476.298593][T17732] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3270'. [ 476.360475][T17565] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.383273][T17565] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.472468][T17565] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.533023][T17565] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.653618][T17565] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.666785][T17761] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3279'. [ 476.688527][T17565] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.710302][T17761] sctp: [Deprecated]: syz.1.3279 (pid 17761) Use of int in maxseg socket option. [ 476.710302][T17761] Use struct sctp_assoc_value instead [ 476.759692][T17761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3279'. [ 476.789174][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3279'. [ 477.017109][T17565] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.018337][T17780] netlink: 'syz.4.3283': attribute type 10 has an invalid length. [ 477.038971][T17565] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.067192][T17565] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.093334][T17565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.114047][T17029] net_ratelimit: 179 callbacks suppressed [ 477.114067][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.159882][T17786] netlink: zone id is out of range [ 477.165994][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.173838][T17029] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 477.183632][T17786] netlink: zone id is out of range [ 477.189897][T17786] netlink: zone id is out of range [ 477.197638][T17786] netlink: zone id is out of range [ 477.202777][T17786] netlink: zone id is out of range [ 477.208597][T17786] netlink: zone id is out of range [ 477.213732][T17786] netlink: zone id is out of range [ 477.359859][T17565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.391548][T17565] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.407760][T17033] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.414937][T17033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.435062][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.442254][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.632283][T17818] xt_SECMARK: invalid mode: 9 [ 477.892586][T17565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.995481][ T5147] Bluetooth: hci0: command tx timeout [ 478.072722][T17835] syzkaller0: entered promiscuous mode [ 478.079860][T17835] syzkaller0: entered allmulticast mode [ 478.094061][T17565] veth0_vlan: entered promiscuous mode [ 478.249758][T17855] RDS: rds_bind could not find a transport for fe80::1, load rds_tcp or rds_rdma? [ 479.365376][T17866] sctp: [Deprecated]: syz.0.3305 (pid 17866) Use of int in maxseg socket option. [ 479.365376][T17866] Use struct sctp_assoc_value instead [ 479.705177][T17852] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 479.732640][T17863] syzkaller0: entered promiscuous mode [ 479.749900][T17863] syzkaller0: entered allmulticast mode [ 479.865450][T17565] veth1_vlan: entered promiscuous mode [ 479.962885][T17884] ip6gretap0: entered promiscuous mode [ 479.989570][T17881] ip6gretap0: left promiscuous mode [ 480.029931][T17565] veth0_macvtap: entered promiscuous mode [ 480.075441][ T5147] Bluetooth: hci0: command tx timeout [ 480.075902][T17565] veth1_macvtap: entered promiscuous mode [ 480.153207][T17897] netlink: 'syz.4.3313': attribute type 1 has an invalid length. [ 480.191007][T17565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.282813][T17565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.332997][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.372136][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.410106][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.426750][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.446722][T17916] : renamed from team_slave_1 (while UP) [ 480.508506][T17914] syzkaller0: entered promiscuous mode [ 480.514013][T17914] syzkaller0: entered allmulticast mode [ 480.571854][T17924] x_tables: duplicate underflow at hook 1 [ 480.592429][T17922] __nla_validate_parse: 18 callbacks suppressed [ 480.592446][T17922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3322'. [ 480.608725][T17023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.626240][T17023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.758605][T17023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.790936][T17023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.832195][T17936] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3326'. [ 480.841628][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3326'. [ 480.926521][T17938] block nbd3: Unsupported socket: should be TCP or UNIX. [ 480.975719][T17938] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3327'. [ 481.007824][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 481.015904][ C0] lec:lec_tx_timeout: lec0 [ 481.020661][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 481.651402][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.662403][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.673259][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.681962][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.692221][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.730661][T17972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3335'. [ 481.818620][T17973] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.877736][T17984] netlink: 'syz.2.3339': attribute type 1 has an invalid length. [ 481.902602][T17972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3335'. [ 481.907036][T17984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3339'. [ 481.932262][T17986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3340'. [ 482.009794][ T5822] syz_tun (unregistering): left allmulticast mode [ 482.132911][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 482.185692][ T12] net_ratelimit: 186 callbacks suppressed [ 482.185713][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.222002][T17997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3345'. [ 482.237155][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.276750][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.314933][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.337007][T18001] 0: reclassify loop, rule prio 0, protocol 700 [ 482.345634][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.355941][T17022] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 482.481720][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.505212][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 482.612823][T17973] chnl_net:caif_netlink_parms(): no params data found [ 482.663377][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.228166][T17973] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.250262][T18027] netlink: 'syz.3.3352': attribute type 11 has an invalid length. [ 483.255504][T17973] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.270263][T17973] bridge_slave_0: entered allmulticast mode [ 483.280574][T17973] bridge_slave_0: entered promiscuous mode [ 483.289466][T17973] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.298166][T17973] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.346762][T17973] bridge_slave_1: entered allmulticast mode [ 483.368734][T17973] bridge_slave_1: entered promiscuous mode [ 483.438106][T17973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.471233][T17973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.552924][T17973] team0: Port device team_slave_0 added [ 483.561700][T17973] team0: Port device team_slave_1 added [ 483.682857][T18049] netlink: 'syz.4.3360': attribute type 21 has an invalid length. [ 483.692180][T18046] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 483.710573][T17973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.730155][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.767534][ T5842] Bluetooth: hci3: command tx timeout [ 483.776269][T17973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.790432][T17973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.798861][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.847075][T17973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.920376][T17973] hsr_slave_0: entered promiscuous mode [ 483.931250][T17973] hsr_slave_1: entered promiscuous mode [ 483.959472][T17973] debugfs: 'hsr0' already exists in 'hsr' [ 483.966064][T17973] Cannot create hsr debugfs directory [ 484.142711][T18071] netlink: 'syz.1.3366': attribute type 1 has an invalid length. [ 484.152817][T18071] netlink: 'syz.1.3366': attribute type 1 has an invalid length. [ 484.200733][T17973] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.306021][T18080] Cannot find add_set index 0 as target [ 484.327706][T17973] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.402599][T17973] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.478841][T17973] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.682206][T17973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 484.714186][T17973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 484.740967][T17973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 484.759074][T17973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.958312][T17973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.992741][T17973] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.015605][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.022766][T17022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.073665][T17022] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.080901][T17022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.268697][T18123] sit0: entered promiscuous mode [ 485.291304][T18123] netlink: 'syz.4.3384': attribute type 1 has an invalid length. [ 485.509143][T18140] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 485.558916][T17973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.688404][T17973] veth0_vlan: entered promiscuous mode [ 485.727177][T17973] veth1_vlan: entered promiscuous mode [ 485.761496][T17973] veth0_macvtap: entered promiscuous mode [ 485.797259][T17973] veth1_macvtap: entered promiscuous mode [ 485.835573][ T5147] Bluetooth: hci3: command tx timeout [ 485.840862][T18158] syzkaller0: entered promiscuous mode [ 485.850590][T18158] syzkaller0: entered allmulticast mode [ 485.891566][T17973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.934402][T17973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.954427][T17033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.973276][T17033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.034561][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 486.042606][ C0] lec:lec_tx_timeout: lec0 [ 486.048063][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 486.054237][T17033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.063386][T17033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.242788][T17035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.274932][T17035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.322139][T17037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.333268][T17037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.346152][T18179] __nla_validate_parse: 16 callbacks suppressed [ 486.346172][T18179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3399'. [ 486.456284][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3399'. [ 486.535954][T18189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3402'. [ 486.692886][T18198] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3404'. [ 486.939651][T18213] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 486.942092][T18218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3411'. [ 486.998141][T18213] bond1 (unregistering): Released all slaves [ 487.031608][T18225] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3414'. [ 487.049628][T18222] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 487.060635][T18227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 487.194896][T17029] net_ratelimit: 137 callbacks suppressed [ 487.194915][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.225714][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.264215][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.297350][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.308907][T18235] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 487.324809][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.356382][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.376014][T18245] geneve2: entered promiscuous mode [ 487.388189][T18231] syzkaller0: entered promiscuous mode [ 487.393713][T18231] syzkaller0: entered allmulticast mode [ 487.396449][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.422399][T18231] TC_ACT_REPEAT abuse ? [ 487.428990][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.446870][T17029] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 57734 - 0 [ 487.458432][T17037] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.466499][T17029] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 57734 - 0 [ 487.557228][T18245] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.622424][T17029] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 57734 - 0 [ 487.624474][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3425'. [ 487.733900][T18263] GUP no longer grows the stack in syz.0.3427 (18263): 200000003000-20000000a000 (200000001000) [ 487.756784][T18263] CPU: 1 UID: 0 PID: 18263 Comm: syz.0.3427 Not tainted syzkaller #0 PREEMPT(full) [ 487.756812][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.756824][T18263] Call Trace: [ 487.756832][T18263] [ 487.756840][T18263] dump_stack_lvl+0xe8/0x150 [ 487.756871][T18263] __get_user_pages+0x2453/0x29d0 [ 487.756910][T18263] ? __lock_acquire+0x6b5/0x2cf0 [ 487.756952][T18263] ? __gup_longterm_locked+0xc4e/0x1630 [ 487.756980][T18263] ? down_read_killable+0x1bb/0x340 [ 487.757007][T18263] __gup_longterm_locked+0xdcf/0x1630 [ 487.757062][T18263] gup_fast_fallback+0x1d82/0x22e0 [ 487.757127][T18263] ? __pfx_gup_fast_fallback+0x10/0x10 [ 487.757157][T18263] ? is_valid_gup_args+0x11f/0x200 [ 487.757187][T18263] ? get_user_pages_fast+0x4d/0xb0 [ 487.757217][T18263] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 487.757253][T18263] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 487.757288][T18263] iov_iter_get_pages2+0x5e/0xa0 [ 487.757318][T18263] __se_sys_vmsplice+0x7b3/0x1490 [ 487.757372][T18263] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 487.757404][T18263] ? __pfx_futex_wake+0x10/0x10 [ 487.757440][T18263] ? lockdep_hardirqs_on+0x7a/0x110 [ 487.757529][T18263] do_syscall_64+0x14d/0xf80 [ 487.757557][T18263] ? trace_irq_disable+0x3b/0x150 [ 487.757584][T18263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.757603][T18263] ? clear_bhb_loop+0x40/0x90 [ 487.757628][T18263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.757646][T18263] RIP: 0033:0x7f497899c629 [ 487.757666][T18263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.757683][T18263] RSP: 002b:00007f49797fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 487.757703][T18263] RAX: ffffffffffffffda RBX: 00007f4978c15fa0 RCX: 00007f497899c629 [ 487.757718][T18263] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 487.757731][T18263] RBP: 00007f4978a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 487.757743][T18263] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 487.757755][T18263] R13: 00007f4978c16038 R14: 00007f4978c15fa0 R15: 00007ffcf0f852a8 [ 487.757789][T18263] [ 487.988138][ T5147] Bluetooth: hci3: command 0x040f tx timeout [ 488.028037][T18270] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3429'. [ 488.422378][T18294] xt_HMARK: proto mask must be zero with L3 mode [ 488.610880][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 488.745766][T18320] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.753384][T18320] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.900603][T18332] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20000 [ 488.972367][T18245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.985760][T18245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57734 - 0 [ 489.016747][T18338] syzkaller0: entered promiscuous mode [ 489.023572][T18338] syzkaller0: entered allmulticast mode [ 489.048387][T18245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.059032][T18245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57734 - 0 [ 489.139465][T18335] syzkaller0: entered promiscuous mode [ 489.145166][T18335] syzkaller0: entered allmulticast mode [ 489.192494][T18245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.208213][T18245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57734 - 0 [ 489.402852][T18351] netlink: 'syz.2.3453': attribute type 8 has an invalid length. [ 489.449572][T17029] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 57734 - 0 [ 489.458336][T17029] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 489.498309][T17035] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 57734 - 0 [ 489.507361][T17035] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 489.587613][T17029] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 57734 - 0 [ 489.604662][T17029] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 489.623552][T17029] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 57734 - 0 [ 489.651858][T17029] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 489.909529][T10337] IPVS: starting estimator thread 0... [ 490.035984][T18390] IPVS: using max 31 ests per chain, 74400 per kthread [ 490.093794][ T5842] Bluetooth: hci3: command 0x040f tx timeout [ 491.638233][T18394] netem: change failed [ 491.642630][T18397] netlink: 'syz.3.3465': attribute type 11 has an invalid length. [ 491.655524][T18400] 8021q: VLANs not supported on syzkaller0 [ 491.665824][T18401] tipc: Started in network mode [ 491.670714][T18401] tipc: Node identity ac14140f, cluster identity 4711 [ 491.679595][T18401] tipc: New replicast peer: 255.255.255.255 [ 491.688608][T18401] tipc: Enabled bearer , priority 10 [ 491.695725][T18404] syzkaller0: left promiscuous mode [ 491.700957][T18404] syzkaller0: left allmulticast mode [ 491.744099][T18419] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 491.836560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 491.844641][ C0] lec:lec_tx_timeout: lec0 [ 491.851200][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 492.060475][T18443] syzkaller0: entered promiscuous mode [ 492.095243][T18443] syzkaller0: entered allmulticast mode [ 492.103552][T18449] __nla_validate_parse: 11 callbacks suppressed [ 492.103572][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'. [ 492.133975][T18449] bridge: RTM_NEWNEIGH with invalid ether address [ 492.160133][ T5842] Bluetooth: hci3: command 0x040f tx timeout [ 492.219590][T17022] net_ratelimit: 170 callbacks suppressed [ 492.219612][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.264185][T18457] pim6reg527: entered allmulticast mode [ 492.269922][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.310335][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3482'. [ 492.321404][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.334883][T18459] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 492.345190][T17022] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 492.356588][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'. [ 492.405389][T18466] IPv6: sit1: Disabled Multicast RS [ 492.416106][T18466] sit1: entered allmulticast mode [ 492.457128][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.494938][T17029] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 492.609431][T18490] : renamed from bond0 (while UP) [ 492.614864][T17035] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.635963][T17035] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.667246][T17035] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 492.693687][T18495] veth1_to_bond: entered allmulticast mode [ 492.719022][T18495] veth1_to_bond: left allmulticast mode [ 492.806772][T10333] tipc: Node number set to 2886997007 [ 493.313831][T18529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3500'. [ 493.325519][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 493.334427][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 493.506778][T18541] lo: entered promiscuous mode [ 493.529860][T18541] tunl0: entered promiscuous mode [ 493.549841][T18541] gre0: entered promiscuous mode [ 493.583659][T18541] gretap0: entered promiscuous mode [ 493.602421][T18541] erspan0: entered promiscuous mode [ 493.620601][T18541] ip_vti0: entered promiscuous mode [ 493.632360][T18550] netlink: 'syz.2.3509': attribute type 1 has an invalid length. [ 493.863663][T18556] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3512'. [ 494.384886][T18606] : renamed from bond0 (while UP) [ 494.492144][T18612] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3529'. [ 495.121311][T18664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3545'. [ 495.181885][T18664] syzkaller0: entered promiscuous mode [ 495.189454][T18664] syzkaller0: entered allmulticast mode [ 496.875391][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 496.883956][ C0] lec:lec_tx_timeout: lec0 [ 496.889705][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 497.223703][T18711] netlink: 401 bytes leftover after parsing attributes in process `syz.4.3556'. [ 497.303603][T18716] netlink: 'syz.3.3559': attribute type 4 has an invalid length. [ 497.312733][T17023] net_ratelimit: 135 callbacks suppressed [ 497.312755][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.347125][T17023] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 497.362576][T18716] netlink: 'syz.3.3559': attribute type 4 has an invalid length. [ 497.373983][T18722] netlink: 'syz.4.3560': attribute type 61 has an invalid length. [ 497.379564][ T29] audit: type=1107 audit(1771881267.921:4): pid=18718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='"d^@;ȫ~4Lf+a0˾h#!1. bV;=?!>k^%,ItCG7B}hԍ6xs!IFXJ=jRLNB4*Qٲl@o 5Yp̎,6K}A)%rQCxxcd^?cXzm--沅u " [ 497.379564][ T29] ` [ 497.379564][ T29] @\>]CG]' [ 497.382291][T18722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3560'. [ 497.421512][T18725] tipc: Trying to set illegal importance in message [ 497.447192][T18732] x_tables: duplicate underflow at hook 1 [ 497.486406][T17033] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.492060][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 497.508463][T17033] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 497.517463][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3563'. [ 497.531168][T18725] can: request_module (can-proto-3) failed. [ 497.647627][T17033] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.659939][T17033] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 497.710683][T18745] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3565'. [ 497.795551][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.836454][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.901158][T18748] bond1: entered promiscuous mode [ 497.910468][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.941539][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3564'. [ 497.958610][T18748] bond1: entered allmulticast mode [ 497.964916][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.995355][T18748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.349924][T18789] TCP: TCP_TX_DELAY enabled [ 498.375805][T18789] netlink: 'syz.0.3574': attribute type 1 has an invalid length. [ 498.464649][T18789] netlink: 'syz.0.3574': attribute type 2 has an invalid length. [ 498.547393][T18807] netlink: 'syz.4.3577': attribute type 1 has an invalid length. [ 498.668725][T18815] netlink: 'syz.0.3582': attribute type 1 has an invalid length. [ 498.686223][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3583'. [ 498.703504][T18815] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 498.727655][T18821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.777595][T18821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.787233][T18821] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 498.800855][T18821] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 498.812490][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3583'. [ 499.096015][T18853] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3592'. [ 499.160361][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3595'. [ 499.161001][T18857] netlink: 'syz.0.3594': attribute type 1 has an invalid length. [ 499.180841][T18858] netlink: 'syz.2.3593': attribute type 1 has an invalid length. [ 499.279525][T18863] netlink: 'syz.4.3597': attribute type 61 has an invalid length. [ 499.683703][T18886] bond0: (slave gretap1): making interface the new active one [ 499.696420][T18886] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 500.018916][T18914] syz_tun: entered allmulticast mode [ 500.984549][T18992] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.998203][T18992] bridge_slave_1: left allmulticast mode [ 501.003895][T18992] bridge_slave_1: left promiscuous mode [ 501.012147][T18992] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.028036][T18992] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 501.205629][T19008] syzkaller0: entered promiscuous mode [ 501.211174][T19008] syzkaller0: entered allmulticast mode [ 501.438141][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.786994][T19024] sctp: [Deprecated]: syz.0.3647 (pid 19024) Use of int in max_burst socket option. [ 501.786994][T19024] Use struct sctp_assoc_value instead [ 501.905857][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 501.914008][ C0] lec:lec_tx_timeout: lec0 [ 501.919353][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 502.319480][T10333] net_ratelimit: 141 callbacks suppressed [ 502.319500][T10333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.341724][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.367428][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.395912][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.416659][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.448768][T17029] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.474897][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.497679][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.534725][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.570392][T17022] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.729379][ T5842] Bluetooth: hci3: command 0x040f tx timeout [ 503.070019][T19026] validate_nla: 7 callbacks suppressed [ 503.070037][T19026] netlink: 'syz.3.3648': attribute type 1 has an invalid length. [ 503.307874][T19052] __nla_validate_parse: 12 callbacks suppressed [ 503.307892][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3657'. [ 503.309287][T19048] Bluetooth: MGMT ver 1.23 [ 503.347554][T19052] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3657'. [ 503.377473][T19052] netlink: 'syz.3.3657': attribute type 2 has an invalid length. [ 503.410842][T19055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3658'. [ 503.856428][T19092] bond1: (slave bond_slave_1): Device is not our slave [ 503.863441][T19092] bond1: option active_slave: invalid value (bond_slave_1) [ 503.872878][T19092] bond1 (unregistering): Released all slaves [ 504.120470][T19117] bond1: (slave bond_slave_1): Device is not our slave [ 504.127583][T19117] bond1: option active_slave: invalid value (bond_slave_1) [ 504.139384][T19117] bond1 (unregistering): Released all slaves [ 504.567250][T19148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3684'. [ 504.576991][T19150] tc_dump_action: action bad kind [ 504.651431][T19148] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3684'. [ 504.691811][T19148] bridge0: port 1(ipvlan2) entered blocking state [ 504.698663][T19148] bridge0: port 1(ipvlan2) entered disabled state [ 504.705572][T19148] ipvlan2: entered allmulticast mode [ 504.719314][T19148] bridge0: entered allmulticast mode [ 504.757639][T19148] ipvlan2: left allmulticast mode [ 504.762695][T19148] bridge0: left allmulticast mode [ 504.822045][T19160] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3688'. [ 504.833539][T19160] netlink: 'syz.0.3688': attribute type 9 has an invalid length. [ 505.264009][T19198] x_tables: duplicate underflow at hook 1 [ 505.521906][T19219] xt_ecn: cannot match TCP bits for non-tcp packets [ 505.607863][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3707'. [ 505.922029][ T2268] block nbd0: Possible stuck request ffff8880352d0000: control (read@0,1024B). Runtime 330 seconds [ 505.939078][T19251] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3715'. [ 505.944823][ T2268] block nbd0: Possible stuck request ffff8880352d0200: control (read@1024,1024B). Runtime 330 seconds [ 505.959484][ T2268] block nbd0: Possible stuck request ffff8880352d0400: control (read@2048,1024B). Runtime 330 seconds [ 505.971375][ T2268] block nbd0: Possible stuck request ffff8880352d0600: control (read@3072,1024B). Runtime 330 seconds [ 506.165759][T19273] netlink: 'syz.4.3721': attribute type 5 has an invalid length. [ 506.179311][T19274] Bluetooth: MGMT ver 1.23 [ 506.315942][T19281] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.377841][T19288] tipc: Enabled bearer , priority 10 [ 506.411528][T19290] syzkaller0: entered promiscuous mode [ 506.418691][T19290] syzkaller0: entered allmulticast mode [ 506.534029][T19300] tipc: Enabling of bearer rejected, already enabled [ 506.551409][ T29] audit: type=1800 audit(1771881277.091:5): pid=19300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3728" name="memory.events" dev="tmpfs" ino=806 res=0 errno=0 [ 506.580401][T19300] netlink: 'syz.1.3728': attribute type 2 has an invalid length. [ 506.582166][ T29] audit: type=1804 audit(1771881277.121:6): pid=19300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3728" name="/newroot/155/memory.events" dev="tmpfs" ino=806 res=1 errno=0 [ 506.613464][ T13] bridge_slave_1: left allmulticast mode [ 506.619252][ T13] bridge_slave_1: left promiscuous mode [ 506.635069][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.659012][ T13] bridge_slave_0: left allmulticast mode [ 506.668959][ T13] bridge_slave_0: left promiscuous mode [ 506.674883][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.690749][ T13] veth3: left allmulticast mode [ 506.696207][ T13] veth3: left promiscuous mode [ 506.701308][ T13] bridge1: port 1(veth3) entered disabled state [ 506.727244][ T13] veth0_to_bond: left allmulticast mode [ 506.732943][ T13] veth0_to_bond: left promiscuous mode [ 506.739145][ T13] bridge2: port 1(veth0_to_bond) entered disabled state [ 506.799257][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3731'. [ 506.934590][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 506.942684][ C0] lec:lec_tx_timeout: lec0 [ 506.948015][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.956685][ T13] bond6 (unregistering): (slave vti0): Releasing backup interface [ 506.973415][ T13] vti0 (unregistering): left promiscuous mode [ 507.060339][T19327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3737'. [ 507.085360][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 507.296679][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.306293][ T13] bond_slave_0: left allmulticast mode [ 507.312876][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.323325][ T13] bond_slave_1: left allmulticast mode [ 507.324802][T17023] net_ratelimit: 142 callbacks suppressed [ 507.324816][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.332168][ T13] bond0 (unregistering): Released all slaves [ 507.353343][ T13] bond1 (unregistering): Released all slaves [ 507.354647][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.369948][ T13] bond2 (unregistering): (slave bond3): Releasing backup interface [ 507.379078][ T13] bond2 (unregistering): Released all slaves [ 507.384874][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.399025][ T13] bond3 (unregistering): Released all slaves [ 507.405552][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.428533][ T13] bond4 (unregistering): Released all slaves [ 507.436186][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.452791][ T13] bond5 (unregistering): Released all slaves [ 507.458892][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.473757][ T13] bond6 (unregistering): Released all slaves [ 507.479875][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.516814][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.517871][T10333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.544845][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.625430][ T13] tipc: Disabling bearer [ 507.631002][ T13] tipc: Left network mode [ 507.812374][T19346] syz.0.3743 uses old SIOCAX25GETINFO [ 508.341633][T19391] netlink: 'syz.4.3754': attribute type 1 has an invalid length. [ 508.377039][T19396] __nla_validate_parse: 1 callbacks suppressed [ 508.377056][T19396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3756'. [ 508.497169][T19403] ieee802154 phy0 wpan0: encryption failed: -90 [ 508.527986][T19403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3759'. [ 508.559873][T19403] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 508.592991][T19403] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 508.811897][T19420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3764'. [ 508.832897][T19421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3764'. [ 508.975988][T19426] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3765'. [ 509.044934][ T13] hsr_slave_0: left promiscuous mode [ 509.063572][ T13] hsr_slave_1: left promiscuous mode [ 509.488012][T19441] netlink: 'syz.0.3768': attribute type 11 has an invalid length. [ 509.496290][T19441] netlink: 'syz.0.3768': attribute type 4 has an invalid length. [ 509.504045][T19441] netlink: 'syz.0.3768': attribute type 5 has an invalid length. [ 509.532485][T19441] netlink: 'syz.0.3768': attribute type 6 has an invalid length. [ 509.576350][T19441] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.3768'. [ 509.830028][T19454] netlink: 'syz.1.3772': attribute type 1 has an invalid length. [ 510.467073][ T13] IPVS: stop unused estimator thread 0... [ 510.692962][T19529] vcan0: entered allmulticast mode [ 510.846101][T19537] syzkaller0: entered promiscuous mode [ 510.851846][T19537] syzkaller0: entered allmulticast mode [ 510.938384][T19545] netlink: 'syz.4.3801': attribute type 4 has an invalid length. [ 511.133974][T19562] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3805'. [ 511.250743][T19570] syzkaller0: entered promiscuous mode [ 511.258118][T19570] syzkaller0: entered allmulticast mode [ 511.420266][T19591] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 511.446946][T19583] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 511.469033][T19583] bond1: (slave lo): Enslaving as an active interface with an up link [ 511.495677][T19596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3814'. [ 511.525592][T19596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3814'. [ 511.576801][T19603] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3817'. [ 511.954578][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 511.962664][ C0] lec:lec_tx_timeout: lec0 [ 511.968375][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 512.339689][T19434] net_ratelimit: 147 callbacks suppressed [ 512.339708][T19434] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.360078][T19434] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 512.421079][T19654] netlink: 'syz.1.3833': attribute type 21 has an invalid length. [ 512.494684][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.502475][ T7383] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 512.556748][T19663] IPVS: ip_vs_add_dest(): server weight less than zero [ 512.568459][T10333] IPVS: starting estimator thread 0... [ 512.625736][T19434] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.636768][T19434] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 512.668197][T19666] IPVS: using max 32 ests per chain, 76800 per kthread [ 512.715743][T10333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.774695][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.789164][ T7383] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 512.916111][ T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.103278][T19703] netlink: 'syz.2.3845': attribute type 5 has an invalid length. [ 513.310590][T19706] vlan2: entered allmulticast mode [ 513.345358][T19706] bridge4: entered allmulticast mode [ 513.367310][T19724] IPVS: set_ctl: invalid protocol: 59 172.30.0.5:20002 [ 513.493191][T19727] Bluetooth: MGMT ver 1.23 [ 513.985435][T19758] __nla_validate_parse: 8 callbacks suppressed [ 513.985454][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3860'. [ 514.036459][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'. [ 514.196198][T19773] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3866'. [ 514.216112][T19776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3865'. [ 514.285156][T19784] netlink: 'syz.4.3869': attribute type 1 has an invalid length. [ 514.351923][T19785] netlink: 'syz.1.3868': attribute type 1 has an invalid length. [ 514.373654][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3868'. [ 514.423074][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3872'. [ 514.434974][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3868'. [ 514.446262][T19790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3871'. [ 514.498644][T19790] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 514.680602][T19814] netlink: 'syz.0.3877': attribute type 5 has an invalid length. [ 514.712039][T19815] gtp0: entered promiscuous mode [ 514.746318][T19815] gtp0: entered allmulticast mode [ 514.752067][T19821] nftables ruleset with unbound chain [ 514.783449][T19821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3879'. [ 515.454714][ T1137] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.463666][ T1137] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.528905][ T1137] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.557413][ T1137] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.829337][T19878] netlink: 'syz.0.3898': attribute type 1 has an invalid length. [ 515.831079][T19877] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3897'. [ 516.068791][T19892] bond1: (slave bond_slave_1): Device is not our slave [ 516.082070][T19892] bond1: option active_slave: invalid value (bond_slave_1) [ 516.098522][T19892] bond1 (unregistering): Released all slaves [ 516.245063][T19860] lec:lec_atm_close: lec0: Shut down! [ 516.259684][ T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 517.062124][T19951] x_tables: duplicate underflow at hook 1 [ 517.099455][T19953] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 517.112942][T19953] bond2 (unregistering): Released all slaves [ 517.327214][T19968] bond2: option mode: invalid value (133) [ 517.345265][T19968] bond2 (unregistering): Released all slaves [ 517.371880][T19972] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 517.417182][ T13] net_ratelimit: 257 callbacks suppressed [ 517.417204][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.436953][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 517.473328][T19974] netlink: 'syz.4.3926': attribute type 1 has an invalid length. [ 517.482953][T19974] netlink: 'syz.4.3926': attribute type 1 has an invalid length. [ 517.550321][T19979] netlink: 'syz.4.3928': attribute type 1 has an invalid length. [ 517.558266][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.558296][T17023] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 517.582540][T19979] netlink: 'syz.4.3928': attribute type 1 has an invalid length. [ 517.603735][T19983] netlink: 'syz.4.3928': attribute type 1 has an invalid length. [ 517.619384][T19983] netlink: 'syz.4.3928': attribute type 1 has an invalid length. [ 517.668381][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.684923][T17023] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 517.718898][T19991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.732811][T19991] sock: sock_timestamping_bind_phc: sock not bind to device [ 517.743784][T19992] sock: sock_timestamping_bind_phc: sock not bind to device [ 517.805020][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.813030][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 517.924859][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.061293][T20026] xt_l2tp: v2 doesn't support IP mode [ 519.014097][T20084] : (slave wlan1): Enslaving as an active interface with an up link [ 519.425980][T20097] syzkaller0: entered promiscuous mode [ 519.431512][T20097] syzkaller0: entered allmulticast mode [ 519.483630][T20105] Cannot find map_set index 65533 as target [ 519.544067][T20097] delete_channel: no stack [ 519.787254][T20122] syzkaller0: entered promiscuous mode [ 519.792793][T20122] syzkaller0: entered allmulticast mode [ 519.823694][T20122] __nla_validate_parse: 14 callbacks suppressed [ 519.823715][T20122] netlink: 294 bytes leftover after parsing attributes in process `syz.1.3966'. [ 520.013915][T20143] xt_hashlimit: max too large, truncated to 1048576 [ 520.200794][T20154] tipc: Started in network mode [ 520.205841][T20154] tipc: Node identity 72bfdcbfcdb8, cluster identity 4711 [ 520.215900][T20154] tipc: Enabled bearer , priority 0 [ 520.225472][T20152] tipc: Disabling bearer [ 520.558658][T20184] geneve3: entered promiscuous mode [ 520.573102][T20187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3985'. [ 520.593322][T20189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3987'. [ 520.607235][T20187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3985'. [ 520.622684][T20187] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3985'. [ 520.746907][T20189] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3987'. [ 520.928646][T20216] x_tables: duplicate underflow at hook 2 [ 521.016879][T20211] bond1: entered allmulticast mode [ 521.138275][T20231] ip6t_srh: unknown srh invflags 4000 [ 521.146280][T20232] validate_nla: 2 callbacks suppressed [ 521.146295][T20232] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 521.216083][T20238] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3999'. [ 521.717944][T20271] netlink: 'syz.2.4014': attribute type 10 has an invalid length. [ 521.780789][T20271] veth0_macvtap: left promiscuous mode [ 521.835948][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 521.844031][ C0] lec:lec_tx_timeout: lec0 [ 521.849886][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 521.882765][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4016'. [ 521.953848][T20292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4016'. [ 522.131890][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4027'. [ 522.230678][T20321] x_tables: duplicate underflow at hook 1 [ 522.257634][T20317] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 522.287145][T20317] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 522.321272][T20317] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 522.525590][ T65] net_ratelimit: 121 callbacks suppressed [ 522.525610][ T65] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.542648][ T65] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 522.558078][T10333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.594488][T20340] netlink: 'syz.0.4032': attribute type 10 has an invalid length. [ 522.696131][T17023] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.703930][T17023] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 522.835337][T19436] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.843250][T19436] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 522.916385][T20353] net veth1_virt_wifi : renamed from virt_wifi0 [ 522.974614][ T65] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.991458][ T65] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 523.111593][T20368] xt_socket: unknown flags 0x50 [ 523.118441][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.281835][T20375] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.289071][T20375] bridge0: port 2(bridge_slave_1) entered listening state [ 523.296856][T20375] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.304028][T20375] bridge0: port 1(bridge_slave_0) entered listening state [ 523.604134][T20392] tipc: Started in network mode [ 523.614127][T20392] tipc: Node identity ac14140f, cluster identity 4711 [ 523.631152][T20392] tipc: Enabling of bearer rejected, failed to enable media [ 524.213554][T20419] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 524.255274][T20420] netlink: 'syz.1.4050': attribute type 16 has an invalid length. [ 524.274975][T20420] netlink: 'syz.1.4050': attribute type 17 has an invalid length. [ 524.303961][T20420] ip_vti0: left promiscuous mode [ 524.324308][T20420] ip_vti0: left allmulticast mode [ 524.339726][T20420] syz_tun: left allmulticast mode [ 524.367496][T20420] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.374724][T20420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.383176][T20420] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.390470][T20420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.417808][T20422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.449812][T20422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.588838][T20430] pim6reg1: entered promiscuous mode [ 524.594444][T20430] pim6reg1: entered allmulticast mode [ 524.718434][T20441] xt_nat: multiple ranges no longer supported [ 524.895165][T20449] ip6t_srh: unknown srh invflags 4000 [ 524.975140][T20456] netlink: 'syz.2.4063': attribute type 9 has an invalid length. [ 525.155749][T20468] __nla_validate_parse: 11 callbacks suppressed [ 525.155771][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4066'. [ 525.196087][T20468] netlink: 'syz.0.4066': attribute type 3 has an invalid length. [ 525.391635][T20474] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 525.403400][T20474] bond2 (unregistering): Released all slaves [ 525.468275][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4071'. [ 525.483663][T20481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4071'. [ 525.529034][T20483] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4072'. [ 525.646273][T20483] bond2 (unregistering): Released all slaves [ 526.000939][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4077'. [ 526.010309][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4077'. [ 526.254176][T20526] ip6gre2: entered promiscuous mode [ 526.533813][T20548] xt_hashlimit: size too large, truncated to 1048576 [ 526.547746][T20552] Unsupported ieee802154 address type: 0 [ 526.557363][T20552] Unsupported ieee802154 address type: 0 [ 526.563139][T20552] Unsupported ieee802154 address type: 0 [ 526.569581][T20552] Unsupported ieee802154 address type: 0 [ 526.583776][T20552] Unsupported ieee802154 address type: 0 [ 526.612273][T20552] Unsupported ieee802154 address type: 0 [ 526.642109][T20552] Unsupported ieee802154 address type: 0 [ 526.673344][T20552] Unsupported ieee802154 address type: 0 [ 526.697675][T20552] Unsupported ieee802154 address type: 0 [ 526.765717][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4092'. [ 526.792088][T20552] Unsupported ieee802154 address type: 0 [ 526.806173][T20552] Unsupported ieee802154 address type: 0 [ 526.813224][T20552] Unsupported ieee802154 address type: 0 [ 526.821190][T20552] Unsupported ieee802154 address type: 0 [ 526.827442][T20552] Unsupported ieee802154 address type: 0 [ 526.851036][T20552] Unsupported ieee802154 address type: 0 [ 526.859161][T20552] Unsupported ieee802154 address type: 0 [ 526.865424][T20552] Unsupported ieee802154 address type: 0 [ 526.871210][T20552] Unsupported ieee802154 address type: 0 [ 526.874686][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 526.878378][T20552] Unsupported ieee802154 address type: 0 [ 526.884962][ C0] lec:lec_tx_timeout: lec0 [ 526.885801][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 526.890913][T20552] Unsupported ieee802154 address type: 0 [ 526.930685][T20552] Unsupported ieee802154 address type: 0 [ 526.940042][T20564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4093'. [ 526.949844][T20552] Unsupported ieee802154 address type: 0 [ 526.957023][T20552] Unsupported ieee802154 address type: 0 [ 526.973034][T20552] Unsupported ieee802154 address type: 0 [ 526.978916][T20552] Unsupported ieee802154 address type: 0 [ 526.996132][T20552] Unsupported ieee802154 address type: 0 [ 527.004429][T20552] Unsupported ieee802154 address type: 0 [ 527.014014][T20552] Unsupported ieee802154 address type: 0 [ 527.039506][T20552] Unsupported ieee802154 address type: 0 [ 527.049626][T20552] Unsupported ieee802154 address type: 0 [ 527.059742][T20552] Unsupported ieee802154 address type: 0 [ 527.067177][T20552] Unsupported ieee802154 address type: 0 [ 527.085671][T20552] Unsupported ieee802154 address type: 0 [ 527.098357][T20552] Unsupported ieee802154 address type: 0 [ 527.105361][T20552] Unsupported ieee802154 address type: 0 [ 527.111135][T20552] Unsupported ieee802154 address type: 0 [ 527.123210][T20552] Unsupported ieee802154 address type: 0 [ 527.132622][T20552] Unsupported ieee802154 address type: 0 [ 527.138937][T20552] Unsupported ieee802154 address type: 0 [ 527.146528][T20552] Unsupported ieee802154 address type: 0 [ 527.153109][T20552] Unsupported ieee802154 address type: 0 [ 527.166010][T20552] Unsupported ieee802154 address type: 0 [ 527.171692][T20552] Unsupported ieee802154 address type: 0 [ 527.179671][T20552] Unsupported ieee802154 address type: 0 [ 527.204731][T20552] Unsupported ieee802154 address type: 0 [ 527.216866][T20552] Unsupported ieee802154 address type: 0 [ 527.225659][T20583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4099'. [ 527.229441][T20552] Unsupported ieee802154 address type: 0 [ 527.242193][T20583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4099'. [ 527.244232][T20552] Unsupported ieee802154 address type: 0 [ 527.255734][T20583] netlink: 'syz.2.4099': attribute type 2 has an invalid length. [ 527.284915][T20552] Unsupported ieee802154 address type: 0 [ 527.291088][T20552] Unsupported ieee802154 address type: 0 [ 527.297297][T20552] Unsupported ieee802154 address type: 0 [ 527.306378][T20552] Unsupported ieee802154 address type: 0 [ 527.322821][T20552] Unsupported ieee802154 address type: 0 [ 527.329335][T20552] Unsupported ieee802154 address type: 0 [ 527.335870][T20552] Unsupported ieee802154 address type: 0 [ 527.353539][T20552] Unsupported ieee802154 address type: 0 [ 527.482213][T20607] syzkaller0: left promiscuous mode [ 527.488191][T20607] syzkaller0: left allmulticast mode [ 527.556479][T17032] net_ratelimit: 116 callbacks suppressed [ 527.556493][T17032] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.580354][T17032] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 527.639621][T10337] IPVS: starting estimator thread 0... [ 527.707838][ T65] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.736052][ T65] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 527.755578][T20624] IPVS: using max 35 ests per chain, 84000 per kthread [ 527.846786][T17032] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.854844][T17032] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 527.900237][T20640] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 527.940844][T20642] netlink: 'syz.2.4114': attribute type 10 has an invalid length. [ 527.965219][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.984787][T17035] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.992885][T17035] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 528.112791][T20653] bond1: option mode: unable to set because the bond device has slaves [ 528.283144][T20662] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 528.322246][T20665] netlink: 'syz.1.4123': attribute type 33 has an invalid length. [ 528.506528][T20679] tc_dump_action: action bad kind [ 528.657100][T20693] netlink: 'syz.0.4128': attribute type 13 has an invalid length. [ 529.655741][T20745] netlink: 'syz.1.4142': attribute type 1 has an invalid length. [ 529.673104][T20745] netlink: 'syz.1.4142': attribute type 11 has an invalid length. [ 529.894850][T20759] IPVS: length: 100 != 24 [ 530.406259][ T5842] Bluetooth: hci0: command tx timeout [ 530.562064][T20784] __nla_validate_parse: 21 callbacks suppressed [ 530.562084][T20784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4154'. [ 530.723511][T20801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4156'. [ 530.737240][T20801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4156'. [ 531.002802][T20814] bridge5: entered promiscuous mode [ 531.008769][T20814] bridge5: entered allmulticast mode [ 531.018111][T20814] team0: Port device bridge5 added [ 531.029737][T20814] bridge0: port 1(team0) entered blocking state [ 531.037026][T20814] bridge0: port 1(team0) entered disabled state [ 531.043545][T20814] team0: entered allmulticast mode [ 531.048888][T20814] team_slave_0: entered allmulticast mode [ 531.056067][T20814] team_slave_1: entered allmulticast mode [ 531.066610][T20814] team0: entered promiscuous mode [ 531.073006][T20814] team_slave_0: entered promiscuous mode [ 531.079096][T20814] team_slave_1: entered promiscuous mode [ 531.092568][T20814] netlink: 'syz.3.4163': attribute type 3 has an invalid length. [ 531.101384][T20814] netlink: 'syz.3.4163': attribute type 3 has an invalid length. [ 531.204203][T20820] netlink: 'syz.0.4165': attribute type 16 has an invalid length. [ 531.213443][T20820] netlink: 'syz.0.4165': attribute type 17 has an invalid length. [ 531.230040][T20820] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.238694][T20820] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.298298][T20820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4165'. [ 531.604020][T20841] xt_l2tp: wrong L2TP version: 0 [ 531.681132][T20843] syzkaller0: entered promiscuous mode [ 531.687037][T20843] syzkaller0: entered allmulticast mode [ 531.702852][T20843] ip6t_srh: unknown srh invflags 4000 [ 531.809160][T20850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4172'. [ 531.904664][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 531.912731][ C0] lec:lec_tx_timeout: lec0 [ 531.917485][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 532.215897][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 532.267123][T20854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4174'. [ 532.373794][T20864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4175'. [ 532.564767][T17035] net_ratelimit: 133 callbacks suppressed [ 532.564788][T17035] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.594815][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.617366][ T7383] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.650331][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.676330][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.698654][T17035] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.725105][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.748782][T17035] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.777231][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.817388][ T1137] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 533.613949][T20853] : entered promiscuous mode [ 533.641433][T20864] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.719859][T20864] bridge_slave_0 (unregistering): left allmulticast mode [ 533.733189][T20864] bridge_slave_0 (unregistering): left promiscuous mode [ 533.744779][T20864] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.886478][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 533.897950][T20885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4180'. [ 533.928478][T20881] syzkaller0: entered promiscuous mode [ 533.934096][T20881] syzkaller0: entered allmulticast mode [ 534.426839][T20908] block nbd0: reconnected socket [ 534.427173][ T5842] block nbd0: Receive control failed (result -107) [ 534.615613][T20916] validate_nla: 1 callbacks suppressed [ 534.615626][T20916] netlink: 'syz.1.4188': attribute type 1 has an invalid length. [ 534.650633][T20918] veth5: entered allmulticast mode [ 534.710878][T20921] pim6reg1: entered promiscuous mode [ 534.717425][T20921] pim6reg1: entered allmulticast mode [ 534.890472][T20931] team0: Device gtp0 is up. Set it down before adding it as a team port [ 535.021225][T20942] netlink: 'syz.2.4199': attribute type 10 has an invalid length. [ 535.030841][T20944] IPv6: NLM_F_CREATE should be specified when creating new route [ 535.109052][T20942] team0 (unregistering): Port device team_slave_0 removed [ 535.148591][T20942] team0 (unregistering): Port device team_slave_1 removed [ 535.305810][T20959] tipc: Enabling of bearer rejected, failed to enable media [ 535.318864][T20959] netlink: 'syz.1.4203': attribute type 4 has an invalid length. [ 535.620157][T20974] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 535.739314][T20982] bridge0: port 3(ipvlan2) entered blocking state [ 535.747503][T20982] bridge0: port 3(ipvlan2) entered disabled state [ 535.783009][T20982] ipvlan2: entered allmulticast mode [ 535.807544][T20982] bridge0: entered allmulticast mode [ 535.818644][T20982] ipvlan2: left allmulticast mode [ 535.823878][T20982] bridge0: left allmulticast mode [ 535.932049][T20990] bridge5: entered promiscuous mode [ 535.938028][T20990] bridge5: entered allmulticast mode [ 535.996294][ T30] INFO: task udevd:5828 blocked for more than 143 seconds. [ 536.003762][ T2268] block nbd0: Possible stuck request ffff8880352d0000: control (read@0,1024B). Runtime 360 seconds [ 536.017662][ T2268] block nbd0: Possible stuck request ffff8880352d0200: control (read@1024,1024B). Runtime 360 seconds [ 536.029875][ T2268] block nbd0: Possible stuck request ffff8880352d0400: control (read@2048,1024B). Runtime 360 seconds [ 536.041697][ T2268] block nbd0: Possible stuck request ffff8880352d0600: control (read@3072,1024B). Runtime 360 seconds [ 536.054312][ T2268] block nbd0: Dead connection, failed to find a fallback [ 536.066503][ T2268] block nbd0: shutting down sockets [ 536.073757][ T2268] blk_print_req_error: 138 callbacks suppressed [ 536.073775][ T2268] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.092481][ T2268] buffer_io_error: 138 callbacks suppressed [ 536.092503][ T2268] Buffer I/O error on dev nbd0, logical block 3, async page read [ 536.107230][ T2268] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.110984][T21002] netlink: 'syz.2.4218': attribute type 1 has an invalid length. [ 536.116921][ T2268] Buffer I/O error on dev nbd0, logical block 2, async page read [ 536.135161][ T2268] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.144896][ T2268] Buffer I/O error on dev nbd0, logical block 1, async page read [ 536.152662][ T2268] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.158999][ T30] Not tainted syzkaller #0 [ 536.162830][ T2268] Buffer I/O error on dev nbd0, logical block 0, async page read [ 536.177306][T21004] __nla_validate_parse: 10 callbacks suppressed [ 536.177322][T21004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4219'. [ 536.178200][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.197643][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.202916][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 536.218879][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.229670][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read [ 536.238186][ T5828] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.247774][ T5828] Buffer I/O error on dev nbd0, logical block 2, async page read [ 536.256281][ T5828] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.262036][ T30] task:udevd state:R [ 536.265813][ T5828] Buffer I/O error on dev nbd0, logical block 3, async page read [ 536.265904][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.265926][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 536.265960][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 536.265980][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read [ 536.282119][ T30] running task [ 536.290840][ T5828] ldm_validate_partition_table(): Disk read failed. [ 536.327728][ T5828] Dev nbd0: unable to read RDB block 0 [ 536.333780][ T5828] nbd0: unable to read partition table [ 536.349978][ T5195] udevd[5195]: worker [5828] terminated by signal 9 (Killed) [ 536.358265][ T5195] udevd[5195]: worker [5828] failed while handling '/devices/virtual/block/nbd0' [ 536.359227][ T30] stack:22528 pid:5828 tgid:5828 ppid:0 task_flags:0x40854c flags:0x00080003 [ 536.380719][ T30] Call Trace: [ 536.384193][ T30] [ 536.387724][ T30] __schedule+0x1585/0x5340 [ 536.392687][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 536.401202][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.407344][ T30] ? __pfx___schedule+0x10/0x10 [ 536.412425][ T30] ? do_task_dead+0x39/0xe0 [ 536.417902][ T30] ? do_task_dead+0x39/0xe0 [ 536.422603][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 536.429691][ T30] ? do_task_dead+0x39/0xe0 [ 536.434383][ T30] ? do_task_dead+0x39/0xe0 [ 536.443216][ T30] do_task_dead+0xc6/0xe0 [ 536.448263][ T30] do_exit+0x1ab3/0x2320 [ 536.452762][ T30] ? __kasan_slab_free+0x5c/0x80 [ 536.458609][ T30] ? kmem_cache_free+0x187/0x630 [ 536.463748][ T30] ? __pfx_do_exit+0x10/0x10 [ 536.468757][ T30] do_group_exit+0x21b/0x2d0 [ 536.488416][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.493708][ T30] get_signal+0x1284/0x1330 [ 536.498645][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 536.504306][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 536.510725][ T30] ? do_sys_openat2+0x14c/0x200 [ 536.516058][ T30] exit_to_user_mode_loop+0x86/0x480 [ 536.521552][ T30] ? rcu_is_watching+0x15/0xb0 [ 536.526618][ T30] do_syscall_64+0x32d/0xf80 [ 536.531325][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.537655][ T30] ? clear_bhb_loop+0x40/0x90 [ 536.542372][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.550118][ T30] RIP: 0033:0x7fafdd8a7407 [ 536.554771][ T30] RSP: 002b:00007ffdbe255620 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 536.564459][ T30] RAX: 0000000000000008 RBX: 00007fafddf76880 RCX: 00007fafdd8a7407 [ 536.572553][ T30] RDX: 00000000000a0800 RSI: 00005639819fe480 RDI: ffffffffffffff9c [ 536.582035][ T30] RBP: 00005639819fd910 R08: 0000000000000000 R09: 0000000000000000 [ 536.590164][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563981aef540 [ 536.598340][ T30] R13: 0000563981a0b190 R14: 0000000000000000 R15: 0000563981aef540 [ 536.606833][ T30] [ 536.611242][T20996] netlink: 'syz.3.4217': attribute type 29 has an invalid length. [ 536.611370][ T30] [ 536.611370][ T30] Showing all locks held in the system: [ 536.620514][ T30] 1 lock held by khungtaskd/30: [ 536.632578][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 536.680026][ T30] 2 locks held by getty/5580: [ 536.685640][ T30] #0: ffff8880367db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 536.695936][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 536.706184][ T30] 2 locks held by syz.3.4217/20996: [ 536.711426][ T30] #0: ffff88805a96c708 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 536.722464][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 536.735910][ T30] [ 536.738270][ T30] ============================================= [ 536.738270][ T30] [ 536.760090][ T30] NMI backtrace for cpu 0 [ 536.760111][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 536.760130][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.760141][ T30] Call Trace: [ 536.760147][ T30] [ 536.760155][ T30] dump_stack_lvl+0xe8/0x150 [ 536.760184][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 536.760205][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 536.760226][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 536.760250][ T30] sys_info+0x135/0x170 [ 536.760268][ T30] watchdog+0xfd9/0x1030 [ 536.760297][ T30] ? watchdog+0x21a/0x1030 [ 536.760327][ T30] kthread+0x388/0x470 [ 536.760344][ T30] ? __pfx_watchdog+0x10/0x10 [ 536.760366][ T30] ? __pfx_kthread+0x10/0x10 [ 536.760384][ T30] ret_from_fork+0x51e/0xb90 [ 536.760413][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 536.760431][ T30] ? __switch_to+0xc7d/0x1450 [ 536.760453][ T30] ? __pfx_kthread+0x10/0x10 [ 536.760475][ T30] ret_from_fork_asm+0x1a/0x30 [ 536.760511][ T30] [ 536.760518][ T30] Sending NMI from CPU 0 to CPUs 1: [ 536.877924][ C1] NMI backtrace for cpu 1 [ 536.877943][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 536.877960][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.877970][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 536.877996][ C1] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 536.878008][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 536.878021][ C1] RAX: 000000000018612b RBX: ffffffff819a80dd RCX: 0000000080000001 [ 536.878032][ C1] RDX: 0000000000000001 RSI: ffffffff8def1a4d RDI: ffffffff8c27a480 [ 536.878042][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 536.878052][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901172b0 [ 536.878067][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 536.878077][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 536.878089][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.878098][ C1] CR2: 00007f1dde5e82f8 CR3: 000000007b3ae000 CR4: 00000000003526f0 [ 536.878112][ C1] Call Trace: [ 536.878118][ C1] [ 536.878123][ C1] default_idle+0x9/0x20 [ 536.878138][ C1] default_idle_call+0x72/0xb0 [ 536.878158][ C1] do_idle+0x1bd/0x500 [ 536.878183][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.878212][ C1] ? __pfx_do_idle+0x10/0x10 [ 536.878235][ C1] cpu_startup_entry+0x43/0x60 [ 536.878253][ C1] start_secondary+0x101/0x110 [ 536.878270][ C1] common_startup_64+0x13e/0x147 [ 536.878292][ C1] [ 536.931142][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 536.931164][ C0] lec:lec_tx_timeout: lec0 [ 536.937356][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 537.069973][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 537.076852][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 537.085961][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.096008][ T30] Call Trace: [ 537.099291][ T30] [ 537.102217][ T30] vpanic+0x56c/0xa60 [ 537.106202][ T30] ? __pfx___schedule+0x10/0x10 [ 537.111048][ T30] ? __pfx_vpanic+0x10/0x10 [ 537.115540][ T30] ? __pfx_console_unlock+0x10/0x10 [ 537.120737][ T30] panic+0xc5/0xd0 [ 537.124449][ T30] ? __pfx_panic+0x10/0x10 [ 537.128872][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 537.134245][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 537.140396][ T30] watchdog+0x1023/0x1030 [ 537.144725][ T30] ? watchdog+0x21a/0x1030 [ 537.149140][ T30] kthread+0x388/0x470 [ 537.153199][ T30] ? __pfx_watchdog+0x10/0x10 [ 537.157876][ T30] ? __pfx_kthread+0x10/0x10 [ 537.162450][ T30] ret_from_fork+0x51e/0xb90 [ 537.167034][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 537.172138][ T30] ? __switch_to+0xc7d/0x1450 [ 537.176812][ T30] ? __pfx_kthread+0x10/0x10 [ 537.181396][ T30] ret_from_fork_asm+0x1a/0x30 [ 537.186179][ T30] [ 537.189591][ T30] Kernel Offset: disabled [ 537.193900][ T30] Rebooting in 86400 seconds..