last executing test programs: 12.744091146s ago: executing program 0 (id=6152): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1111], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000000)={0x4, "b24a21"}, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, 0x20, 0x0, 0x0, 0x0, [@sadb_key={0x1e, 0x8, 0x728, 0x0, "636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152ae5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369f"}]}, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r2, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r6 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r6, &(0x7f0000000080)=""/67, 0x43, 0x400121a0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 11.771291645s ago: executing program 0 (id=6164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x100, 0x0, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x70bd2c, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 11.610193147s ago: executing program 0 (id=6166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg$alg(r2, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet(0x2, 0x80000, 0x7) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000280)=0x34d, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0x4) r6 = accept4$tipc(r2, &(0x7f00000005c0)=@id, &(0x7f0000000640)=0x10, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000740)={'pimreg\x00', &(0x7f0000000680)=@ethtool_dump={0x40, 0x0, 0x0, 0x8b, "2807178bb104eaa57303bf85b95459a79e1023414d6cbf04f857b546314d4c614d4379334c4882e0b4973f9cba4dc1139e2425731e1556ef24fd6e835943054d6de68164ac9900280f5e3f9fa5bee2065a5f0fd8b4f723e23516df316c9cefa6190ed0f3b8d885201f1c968769c6d8bb466c65fc4be9f0dd96a9174d649c67621dda706dc871c3df2fc45d"}}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x156}], 0x1, 0x3, 0x1) 9.094047523s ago: executing program 0 (id=6173): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) close(0x3) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async, rerun: 64) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x21, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @empty, 0x0, 0x0, 'team0\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d747a3b2be34f8c0809a2d0e0c3e83db33055f35201078241f18c41298e8d27fae15db83081df04c2233cf6aeee560a70da700912dad2f5d5111750464582601"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) (async) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000002c0)={r6, 0x7}, 0x8) (async) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e23, 0x3, 'nq\x00', 0x8, 0x1b0e, 0x9}, 0x2c) (async) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xe68, 0x30, 0xb, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0x1000}], 0x1) 3.509049829s ago: executing program 1 (id=6249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r0, 0x58, &(0x7f00000014c0)}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x16, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r2, r0, 0x1, 0x8, 0x0, @void, @value=r0, @void, @void, r1}, 0x20) 3.360555301s ago: executing program 1 (id=6251): ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x4e20, @private=0xa010102}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8000, 0x20, 0xc, 0x10000, {{0x3c, 0x4, 0x2, 0x35, 0xf0, 0x65, 0x0, 0x1f, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x34, 0xad, 0x3, 0xb, [{@multicast2, 0x2}, {@empty, 0x9}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @cipso={0x86, 0x34, 0x3, [{0x5, 0xc, "c265b1da5a94a62b787a"}, {0x2, 0x4, "879a"}, {0x7, 0x4, "cbab"}, {0x5, 0x8, "633bb5ae84c4"}, {0x1, 0x12, "1fa28917b6a214c308550887a4223065"}]}, @timestamp={0x44, 0x14, 0xcf, 0x0, 0x6, [0x1, 0x0, 0x8, 0x5]}, @timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x6, [{@multicast2, 0x9b76}, {@remote, 0x1}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xce, 0x3, 0x4, [{@multicast1, 0x5}, {@local, 0x4cb}, {@broadcast, 0x2}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ssrr={0x89, 0x17, 0xa4, [@remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x40, 0x20, 0x1, 0x2, {{0x31, 0x4, 0x0, 0x4, 0xc4, 0x66, 0x0, 0x7, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0x3, [{@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x5}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x1, 0x9, "a73285ffbbe640"}, {0x2, 0x8, "cc08e92e25f1"}, {0x7, 0x8, "a0a2cd1c39ba"}]}, @generic={0x86, 0x7, "21e83d2c00"}, @rr={0x7, 0x17, 0xd9, [@private=0xa010102, @loopback, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x29}]}, @ssrr={0x89, 0xf, 0x84, [@broadcast, @loopback, @rand_addr=0x64010101]}, @cipso={0x86, 0x31, 0xc5d1a17bd55dfaf8, [{0x1, 0x10, "d322a65cd94e40876f9bee0de225"}, {0x2, 0x9, "cd25df109edc6c"}, {0x7, 0xd, "2d0a746e46576d97951955"}, {0x5, 0x5, "9cb1f6"}]}, @generic={0x86, 0x2}, @timestamp={0x44, 0x14, 0x16, 0x0, 0x0, [0x5, 0x9, 0x4, 0x3]}, @end]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000400)={0x458, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r3}, {0x24c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdeb6}}, {0x8, 0x6, r4}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x7, 0x4, 0x9, 0xff}, {0xffff, 0x40, 0x40, 0x5}, {0x8, 0x4, 0x5, 0x80000001}, {0x0, 0x9, 0x4, 0x4}, {0x9, 0x0, 0x5, 0x80}, {0x6, 0x5, 0xff, 0x8}, {0x2, 0xff, 0x1, 0x6}, {0x40, 0x20, 0x8, 0xffffffff}, {0x3, 0x85, 0x6, 0x8}, {0xb, 0x4, 0x4, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x4040841}, 0x40) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={r0, 0x6, 0xf8, 0x5}) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000940)={0x0, 0x3, 0x6, [0x1, 0xfffb, 0x1, 0x2, 0x8, 0x2]}, &(0x7f0000000980)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000009c0)={r7, 0x1358318, 0x3, 0x80}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'veth0_virt_wifi\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r6, 0x58, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001680)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f0000000b80)={0xa94, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb77}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5e8}}}]}}, {{0x8, 0x1, r9}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xff20, 0x89, 0x6, 0x6}, {0x7fff, 0x2, 0x1, 0x7}, {0xa, 0x9, 0x5, 0x1ff}]}}}]}}, {{0x8, 0x1, r5}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x72f}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x273, 0x7f, 0xc5, 0x9}, {0xc, 0xb3, 0x6, 0x8}, {0x8, 0x2, 0x0, 0x14a8}, {0x2, 0x29, 0x10}, {0xe7c, 0xd, 0x81, 0x9}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xa94}, 0x1, 0x0, 0x0, 0x44000}, 0x8884) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000016c0)={0x5, 0x8, 0x8000, 0xd, 0x3, 0xf29, 0x7f, 0x891, r7}, 0x20) (async) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000001700), &(0x7f0000001740)=0x4) (async) r11 = socket$inet6(0xa, 0x2, 0x10001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000001800)={r7, 0x7c, &(0x7f0000001780)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x3, @remote, 0x8}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000001840)=0x10) (async) pwrite64(r11, &(0x7f0000001880)="de8308c4ecb0a534f242ce84b674d3e31da4cfe707f033d9c56d572746251314365591af104450918464187c18237d4dcb48f904840cd91bd97499f190e6893b5ed43bfb03ee0eaea0f50f14c2d26387a44258f41812fde9f5e31b1dc4a10ada5c16ea2794e27676f56e2ed5793129c6e0df9d3a9fbd7431b838612679cc9b6bd8196e9ce37dbca0348359c4b08c00a473de9123756abf4739148f", 0x9b, 0x6) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000001980), r0) (async) getsockname$packet(r6, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a00)=0x14) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x34, r13, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40880}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000001b00)={0x7, 'bond0\x00', {0x3}, 0x828}) sendmmsg(r11, &(0x7f0000002300)=[{{&(0x7f0000001b40)=@can={0x1d, r5}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001bc0)="bed614630298b14f79a9bf4bd99616e9d4e15dbe72ac10d2e70f7b2b84dec7fa5fb8009db5bb34dc0042b6953a94f4a7a5870cf2d9c7567f0e010e2a7579be882bed657763627713a0b086b8a3d9e360449a10d5c68cd57535d3c4f8dc157a3d6ea2e66dee65f0b68127889729183da4f00978345f187721854b4f3692e8903bfaaa8919459e10db3a3fe871e34894", 0x8f}, {&(0x7f0000001c80)="e5a218b4973a49327836cad573a3360b8799f2a891deb5ece8ef5f33df420ff5472521039080c86cd9f4f654aa0d5a264598315df126facc1e2a9568325d25b6893066d7cb2121f31a04d4a41be5b404a504d1b4459e86a4a7abd339d98b8842803879e86ba98f9dbcf934bfe439565ece5fca8152f84c4fe6fe2a186137c3989c81ba29ded6638ee014dd89a75a3a6665c1d6eec5335035dac3248963d3d37a927437a64c1b653ba18ad03698e3b653270101ed8928e396a651826992d18514e248928127181e7a0c9ca2cb6ec6d7bb8f", 0xd1}, {&(0x7f0000001d80)="05069efbb3a49617b437b19f5a1fce14debc52ecffa205c5fbba60903dfb8d23c904222abe2dc8b55efbfa42e49da981325443404214d28e3b61fc2a6556d2903853d2bed42013b33a24b01719c0573402c58fa7c30cd62013d2b620a21fd91516b6d7b60608135eedf81460a465ec28eeaaee60f41fb236278d3ffe117c052b565532b3131d03d19910de4b646f6b02e198a80a421960528c9f03", 0x9b}, {&(0x7f0000001e40)="d385597d7f88e9028d2740921096aa3e1e3b9b9fda3ecdf5fbe96bcb2bfabeb0c4b24ef733f021439a180e9be623f5fd78fd0872bc413ebaf4ddac53ca500dde9a9bd54ef9db669c8359e7c1bfd34f249d8666f5f23df1d7aac9f951a79a78e5e044d0a1c2ddc6e633b8b443a7347a022b136eec161a2738835d1113f0b23c10da03f0deff08823a36fa6da0426c8316c3e4a2d805315434a7873e8ae860b947002094d305c9f9e6eeb6ef7ffb0dff2be2a7056d2697b6b1358ef0a9c79784072548eb83ec173eec2513c403db2e55023750379c0226ed99f1a49ae7a39d7ae904fd0329ead7d1d76747f8", 0xeb}, {&(0x7f0000001f40)="a029309d669f88abe9def27775d01b65e55718fde1968591faa24d40949c944a5df4ef63", 0x24}, {&(0x7f0000001f80)="597ddf5637349bb9552edc9b1062956cf868635d2d469182b42a248890d370ea4ef5f6e8b5fdc29f8b27c7b1bd9c8e1663ed11f3ce6935964a8987c7064464ecb5d49b5c67923d208d3219a6ef7eb245d93c1bf00c00bce9431b320fbf1a342fa2f1a36fda13efa90df650f1f046be22f1dd4bc1e630e58e822674b7271f561aa0925270cedd23f46a6e85044d0c866eab82d79d3958c49fcba94cc82839b24d12669bb15d7dc63a8b8b02c7e8aea469da3c4dc8eac6a24922b7531b03043d70ebb944b220ce2594192ae225015459c6c153b54f509f952a873b236b3651466a2deba465a2a8f4d1c5", 0xe9}], 0x6, &(0x7f0000002100)=[{0xf8, 0x103, 0xb, "35253d8b1ac2713d489ed0c260134bbd376a360a051adcd8ef61903e443049fc5dba1b058aba50f660171b9a85bb858f93303050dee50623fe6bf8c882c5db0e04fb93ca93564599597d4e64806e6c6c69365c0d2083c4ecd5b762c29cf9a2d4cbcb5055418e59f012ce37055cd82bb6a8f4dfe55db64e2451e68cbb7d75f9129f0a6e4ef963020060abd2296e3afb369c61c10f8c751831813d15ab58909cf6448f0b0b6a42ffc35f832da0968a005e17b08a9099c9fb9014f8995466a025fbb48db71535d5c4be9012c0abdafeb654863292570ce20445f225f03e20c110911730eec6c8d959"}, {0xf8, 0x118, 0x7, "cf3c44ff0957106313da5b5422a301d0f05d1abfd616d0140e018b83d663be6c3c4b85779dae897c35c3e38764ef791239a28641a21d03c5895334d92cd4e67647be1808b4a527c7387f62922c1baa30bd61cdb67e6eb20ddc5e6f3d52e141f35b1391ab2adcd693fcca8ef81c03b7c95d25bf13426d1d6ab50d99f637b2f703a76760b7d6fb5159762c654bed5ae0e1cc7c70b8cea19c1947ce41b84015843a66bc2beb887a66ed719fa193a3d046bf2428c853f161cd061c997d3d96b12a295d35fb8a1c88d8007b7339a0537443794abf49abcdf89e81b7687467554a32f2057ea8"}], 0x1f0}}], 0x1, 0x4018001) syz_genetlink_get_family_id$devlink(&(0x7f0000002340), r0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000002380)="647db2576976fec437d91b5d2e8dd2b745c9643ff10d62d6ec5125208575c0584e8ab40e9a43c0e7e3b2acf808a4f45fa3da9b68de577bd8a3d46e565b229ab2f56a4f1ed2136c9d220b87fde025a377cabeefdbcb7e0a6f8b0b643a176731e72d531d68257464bf2ba244d93b2100682bd9ef1b5c7ffaf352ca3f3310b21eacf21b08cc5b697410b121d17dee10121d5b55bff2a00812", 0x97) (async) syz_genetlink_get_family_id$team(&(0x7f0000002440), r0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000002480)={r12, 0x8, 0x8, 0xded, 0x5, 0x3, 0xfffe, 0x617, {r12, @in={{0x2, 0x4e24, @empty}}, 0x69452632, 0x8, 0x1, 0x79, 0x9}}, &(0x7f0000002540)=0xb0) getsockopt$sock_int(r11, 0x1, 0x22, &(0x7f0000002580), &(0x7f00000025c0)=0x4) 3.147444543s ago: executing program 1 (id=6253): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r5, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e0000180002800400120005001600010000000800150000000076"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', r5, @fallback=0x36, r2, 0x8, &(0x7f0000000100)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xa, 0x80000001, 0x8000}, 0x10, 0x0, r1, 0x5, &(0x7f0000000240)=[r1], &(0x7f0000000280)=[{0x4, 0x1, 0x7, 0xa}, {0x3, 0x4, 0xb, 0xc}, {0x5, 0x1, 0x2, 0x6}, {0x2, 0x3, 0x9, 0x7}, {0x4, 0x4, 0x3}], 0x10, 0xa}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 2.815050437s ago: executing program 2 (id=6257): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x6020400) setsockopt(r1, 0x200000, 0xffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 2.532921039s ago: executing program 2 (id=6259): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x14, r1, 0xcc071acbf25dbf8f}, 0x14}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x10}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x600c804}, 0x4008000) 2.381561052s ago: executing program 2 (id=6262): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001b960000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYRES8=0x0], 0x20}}, 0x8015) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) 2.237864207s ago: executing program 4 (id=6263): r0 = socket$inet6(0x10, 0x3, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x3, 0x1, {0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x3a) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xe, [0xf8e, 0x0, 0x8, 0xf, 0x15ad, 0x7, 0x100, 0x9, 0x8, 0x5, 0x1, 0x1, 0x35e66491, 0x5, 0x3, 0x3, 0x2, 0x4, 0x8000, 0xe47f, 0x8, 0x7507, 0xfffff2ad, 0x8, 0x9, 0xb7, 0x400, 0x88a, 0x7, 0x3, 0x4, 0xffffff67, 0x8001, 0xd472, 0x10000, 0xedb, 0x1000, 0x0, 0x4, 0x7f2, 0x81, 0x80000000, 0xa272, 0x0, 0x1, 0x5, 0x3, 0x7, 0x100, 0x5, 0x1003, 0x74f, 0xfffffff7, 0x8, 0x7, 0xc, 0x4, 0x9, 0x0, 0x8, 0x3, 0x2, 0x2, 0x10, 0x0, 0x4, 0x3, 0x3, 0x6, 0x3, 0x8001, 0x5, 0x3, 0x7, 0x1, 0x8, 0x7, 0x5, 0x60, 0x8000, 0x0, 0x2, 0x5, 0x9, 0x9, 0x200, 0xfffffff8, 0x7, 0x0, 0xfffffffb, 0x81, 0xff, 0x0, 0x38fc, 0x7ff, 0x4, 0x7, 0x5, 0x8001, 0x0, 0x6c01, 0x10001, 0x4, 0x6, 0xc1, 0x0, 0x8, 0x4, 0x80000001, 0x29, 0x7, 0x3, 0x5, 0x4980, 0x6cd, 0x1, 0x594, 0x9, 0x6, 0xfffff801, 0x2e, 0x10, 0xfffe0, 0x101, 0x10001, 0x4, 0xfffffffc, 0x6], "99b7584dc07d20141eb68bef58548763b71a27cf3a3a383d200f5b1d852d9c562d5ca8285a0cc0d05ccc3edf55e56afe8fac6111d4ffbbd857e2028f960ca5a23d5d9202213429dca6ee8fa086f2e01b09526f67a4abcabe37260979bfd4e1a403eefa588b875069a02ad58eac03a9ad9eb8658e52cc97c99ec17cf9fe8939f6e0118bcd08ba4453c99b252fc0e1816693fa6aad99620389a03f2dd88bedaefcaa0b9d0cb103eda0b990828ce642844e40f0880afa7ef7c4535dc0eceae2a3d2142e4165e0e9a87277fe5b0fee0c2adb6e5c346d"}}) sendto$inet6(r0, &(0x7f0000000380)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37abcda1a297e0099c5ac0020c5b068030046d323456536016466fcb78dcaaf6c3efed495a46215be0000760636c035b1000000000000ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fb6e9aa241731ae9e0b39072", 0x91, 0x8000, 0x0, 0x0) 2.018413403s ago: executing program 1 (id=6265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x4, 0x8000}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000002c0)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/149, 0x95}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) 1.69280685s ago: executing program 1 (id=6267): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r0, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xdb, &(0x7f0000000200)=[{}, {}, {}], 0x2e, 0x0, 0xfffffffffffffffc, &(0x7f0000000280), 0x8, 0xeb, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800d4ec0e12010200000000000001000000000309e5010073797a31000000000500010007000020d70000000a0000000c000780080008400000002711000300686173683a69702c6d61726b000000000500040000000000"], 0x58}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001500)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xb, 0x2, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x48, '\x00', r1, @fallback=0xc, r4, 0x8, &(0x7f0000001540)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x2, 0xf, 0x80000001, 0x7ff}, 0x10, r8, r0, 0x3, 0x0, &(0x7f00000015c0)=[{0x5, 0x2, 0x9, 0x2}, {0x1, 0x3, 0x9, 0x6}, {0x4, 0x1, 0xc, 0x9}], 0x10, 0x2}, 0x94) setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000001740)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r10, 0x0, 0x0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4020) ioctl$SIOCSIFHWADDR(r11, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) recvfrom(r4, &(0x7f0000001f40)=""/4096, 0x1000, 0x40000160, &(0x7f00000016c0)=@nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x80) 1.691496375s ago: executing program 4 (id=6268): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000140)) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5, @ANYBLOB="7ea15d169c3a835e39829cb3368ae137a9d0eb79f1d7456c09efdc86755085225ea061f1109bb79108301ea5cbc6b65ef12fa90921a2"], 0x20}}, 0x0) socket(0x8, 0x1, 0x7) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delqdisc={0x78, 0x25, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0xfff2}, {0xa, 0xfff3}, {0x9, 0x1}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000444}, 0x8040) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000390426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100627201c6a55ff4000400028008002500ffffffff01000000000000c7addb6b1f07736473796400bf2205e0bba0434339d0d267f7a42ccd3dfbd3743143f4a6ec5b339f6d6aec4946a34bf5e92351a9964dadb1ee4004dcf1b3ce9e03545c1efc26f3486c6c4f9a0bc3af4fb8f27fefce0afe32a4602be49201452028fd43c7"], 0x9a}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d0fa600000000080000120000fe8e75bcf8020000000600150004000100000000"], 0x38}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x201cae0a102fce47}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8010) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000040)) 1.591169013s ago: executing program 3 (id=6269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xd489, 0x8, 0x10000, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 1.537674988s ago: executing program 1 (id=6270): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712828bdda0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000f02000000020000000000000e030000000000000000005f"], 0x0, 0x54}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)) getgid() 1.328912658s ago: executing program 4 (id=6271): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x200, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r1, 0x7ff}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x52, &(0x7f00000014c0)}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r6, &(0x7f0000000300)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0xa}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000580)="0087fd9d7106b31b30fb4b62a79a1b5bde", 0x11}], 0xffffffffffffeac}, 0x0) recvmmsg(r6, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@private2, @in6}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@private2, @in=@multicast1}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) socket$inet_icmp(0x2, 0x2, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) 1.321300429s ago: executing program 2 (id=6272): r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000002110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x68}, 0x1, 0x0, 0x0, 0x1006c814}, 0x0) 1.174004686s ago: executing program 4 (id=6273): socketpair(0x21, 0x3, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)={0x7, 'netpci0\x00', {0x1ff}, 0x34d}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000180)={0x1, 0x2000, 0x7, 0x4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, @can={0x1d, r3}, 0x401, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2c, 0x6, 0xa25}) (async) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, @can={0x1d, r3}, 0x401, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2c, 0x6, 0xa25}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x13c, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x47}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ad}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x41}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x33b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffd}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x10b}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x33a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xf6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0xffffffff, 0x3]}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x52}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8d4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x244a, 0x2, 0x4, 0xf]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1103]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x4, 0x92cd, 0x7, 0xd6, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x17a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x13c, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x47}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ad}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x41}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x33b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffd}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x10b}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x33a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xf6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0xffffffff, 0x3]}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x52}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8d4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x244a, 0x2, 0x4, 0xf]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1103]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x4, 0x92cd, 0x7, 0xd6, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x17a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1e8, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x24004001) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000007c0)={r2, 0x832}, &(0x7f0000000800)=0x8) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001840)={&(0x7f0000000840)=""/4096, 0x1000, 0x1, 0x4}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000018c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001940)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001980)={0xcc, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b}}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004}, 0x10004) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000001b00)={r6, 0x7}, &(0x7f0000001b40)=0x8) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000001b00)={r6, 0x7}, &(0x7f0000001b40)=0x8) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001d80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x14c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4c, 0x5b, "4719d21f57b2acf80f2b1c860ba6797e9ed02b50c29b45479eb0ffeaf163d1849df50cb21e2cc7d2e3c9fdc0777ebbf7291b2c19da9ee9f6df3c5f04cb76b7a3272f84cbb4ca7041"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xc9, 0x5b, "7e1b60185fb4d9f8a50e44f11f0857cb245162b750fa6f26c4ab9ef6efc76f2a6dcbf333c50c9b86373b5fbc12d25c06a35af9dbf1cba5095b9c184ae867d422063d5c130c2905c3a7dda72186083c630b26ab011159f6f9285bf2d19a45f4a6030364209776db83660d2e13657d311bbe6a00225e4f695dfd6cde1fe3b63d8a3e5af0edc52e983ea4826372f8779807d0537ca7c704a7ccd96048f5757f416d6cdcca2fe11a8b8b8214fe93579dff98f14d13826fd27efcb3beaad5406f78479c266826ea"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001dc0)={{0x87, @private=0xa010100, 0x4e23, 0x3, 'rr\x00', 0x9, 0x3, 0x38}, {@loopback, 0x4e20, 0x4, 0x9c9, 0x3, 0xffffffff}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001dc0)={{0x87, @private=0xa010100, 0x4e23, 0x3, 'rr\x00', 0x9, 0x3, 0x38}, {@loopback, 0x4e20, 0x4, 0x9c9, 0x3, 0xffffffff}}, 0x44) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000002f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000001e80)={0x1020, r4, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x1020}, 0x1, 0x0, 0x0, 0x8004}, 0x24008004) listen(r1, 0xb408) (async) listen(r1, 0xb408) sendmsg$sock(r0, &(0x7f0000003140)={&(0x7f0000002f40)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002fc0)="8fdf1c4589970303ef021f101b7b23f73fd6e3cd7af469b3afac6ccd73fb45383ebe05c06455ad28659af1543d1e1e30f1aa1edefff8092162b2b64325851a1930ff563fe77f429f2c02650a3e7d0d0a1b49f3c73072709e393b4a3dc80fae33f9", 0x61}], 0x1, &(0x7f0000003080)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0xc0}, 0x4008044) (async) sendmsg$sock(r0, &(0x7f0000003140)={&(0x7f0000002f40)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002fc0)="8fdf1c4589970303ef021f101b7b23f73fd6e3cd7af469b3afac6ccd73fb45383ebe05c06455ad28659af1543d1e1e30f1aa1edefff8092162b2b64325851a1930ff563fe77f429f2c02650a3e7d0d0a1b49f3c73072709e393b4a3dc80fae33f9", 0x61}], 0x1, &(0x7f0000003080)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0xc0}, 0x4008044) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000003240)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000003240)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000032c0), r1) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x1c, r12, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x20004005) (async) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x1c, r12, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x20004005) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x34, r4, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x810) 1.024839938s ago: executing program 4 (id=6274): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmmsg$inet(r0, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="b3", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r3, 0x29, 0x4e, &(0x7f0000000400), 0xfffffffffffffe07) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000000020104000000000000000002000000defb8c23b85d993e9b0340381ee049397564e924664328d539812bc4f49b2c14da2380639518dd775abcacfa195ef03c625939068f0d94fe5c3268b2f914772437c7634bed749f902c8daa80408a3c3a5327ec6ced8ba6fbbd2a88d74ab5853325ec318b1d513d9e126f7530afc6bd1e07946c9f71a9df1b7343194acbf5c568119dd88d"], 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 1.023500737s ago: executing program 3 (id=6275): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ifreq(r0, 0x8933, &(0x7f0000000080)={'lo\x00', @ifru_hwaddr=@local}) 1.00710438s ago: executing program 2 (id=6276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xcf3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRES8=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r3, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x11, 0x70bd28, 0x400, {{}, {@val={0x8, 0x1, 0x65}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24009880}, 0x20000020) recvfrom$inet(r5, &(0x7f00000000c0)=""/82, 0x52, 0x8000, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 879.188217ms ago: executing program 3 (id=6277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 756.541179ms ago: executing program 4 (id=6278): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0x8, 0x8}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0xfffffffe, 0x25dfdc01, {0x2, 0x0, 0x0, 0x36, r2}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000002c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r0}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x4ca31, 0xffffffffffffffff, 0x42910000) 639.841128ms ago: executing program 3 (id=6279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x44, r2, 0x805, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev}]}, 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095", @ANYRES8=r0, @ANYBLOB="5c0a480d06d0d859c1d9d03137311b71bb736a6e07ac60fd62f153279311209b98feb62d84db4b707688b00549c9b48ca7e716b20fac3206981805aafbae06f017262f753e251235561d8333471088c6969d71a2e05967a05657619554e6dce09670b5c382a46da06513211ce8477d537587ce41af3ac84730701fcfd725d66dac580980f20fd058ae800c588dde15dcafd8393c7c5fc64229e6cb069491855a71f4db9be1445a6a0e033da3fc3a842e1bf02e170dbebd29b200416a826e4b4d9f", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/5, 0x5, 0x0, &(0x7f0000000380)=""/183, 0xb7}}, 0x10) (rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffe}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x44, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x101}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x52}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x80}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x3ff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000110001002abd7000fedbdf2500000080000000000000000000000000000004d502003c0014000d00"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40008c4) (async, rerun: 32) bind$bt_l2cap(r5, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) (async, rerun: 32) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x9, 0xfffd, 0x4}, 0xc) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000080)="a3ef7d7079a39a6a23730f3d4f622dadef45fc23bcdab31061a5fa98514635b167b31af91fc597afb40b457f53e6f32de6c5f01a3cdabd383ee56059cad84ac7c48109e8650ada97e24b", &(0x7f0000000000)=""/23, &(0x7f0000000100)="a3864e7e555b5b9f7969727f2a94cb5f141f212ffde4e2f7e1eb5481cf7f7490d0ec922635caea3ae1fef8fd61dfdcc4e4d04e87c5c8a405d6d9d6f7bf117365b8ded4358f919badb89eeabd54b4317f861f168e62ffde59be125427ef41a6c16f14c878705cfd73fafd20ee3b290364f21eed86bef838878f59e5ef61de9fef561257dc665d3e29b627a52f555506da5c7807e3f55ae54b667b07f8a7e643fa91b14020b4", &(0x7f00000001c0)="2e935c37adbeea", 0x81, 0xffffffffffffffff, 0x4}, 0x38) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) 352.038769ms ago: executing program 3 (id=6280): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) shutdown(r0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x3b) close(r0) 203.080155ms ago: executing program 0 (id=6178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x2, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 65.957554ms ago: executing program 3 (id=6282): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x6e4, 0x33, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x6c0, 0x2, 0x0, 0x1, [@nested={0x6ba, 0x126, 0x0, 0x1, [@nested={0x1c3, 0x12, 0x0, 0x1, [@generic="ee11dc9edf1b9ddd0b7f715169a7368caab3203851bb50e7104e267e24693423edd1ed29fc097b54053bb4bfac9adf3a4d5388d2c90c2d3924ddb96101e715c462c01e257acbc22341dcc9b7f859469dbe6217cfc53e27519f560afcec65401ebddb17dd8f42bda1c5083dde3971e5c1353a98adfb50271a41c26dbdff781deb5a6d8ac104b134379c055b7213a0d094c74e2da81a496107c53c0e051019129a144c8388dcad78c98eef89fd185c0dc86f9818e23cd6d1385861dc3297ecb5258446a17b95c2fb251403676c19ce865c74690319bd33ef0a43563960eac1eceeb9e0f0df502b2875bd", @typed={0x8, 0xf2, 0x0, 0x0, @fd=r2}, @nested={0x0, 0x14c}, @typed={0x4, 0xf2}, @typed={0x4, 0x132}, @generic="e206de87332a2a8dcae3df805cb5def6e87264d5467dfa2a65b352454908d0e34b393116350c47ad72ee95e6c35c6cc237480d20fd22f9eb687f1975fbe6cc6d824a0fbd96cb3dbc8723b2150f9125917dee274ea82eb3f0165f576a272b36621ae07eb189c3cb9619473c86177a3ca3d47073de20f5b09d64d4fd258a59edd82954d5331baae5b6575dc71a5e642123c7b27aeee71a711ff899712061f2e4023e0c0b7e53409408f10ba2eb4c7f1c061d01", @typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0xfffffbff}]}, @generic="7c1c37d992d15a4e9efd4d99d03eb64757136a6583dab936939f64eee54406b64418f695a24447ce03f8ccfe2a95885f1ba0456c9f0083fea329ff69ff348f202c8785e75f139c289126bb8a8d62af76ab13e3ac51888a3775efb7656002c9d1f636bf4f8c7402603a7842a89a76c833afa39f88b86a314cceddbba9c93326caee2b8d744cae1e8be62acc32add3e8886800439f31217755655b40d3417f999e872e57376db752d99d7e7f9e286b3866926e007ca4c263b2aa8d2e3350c1985bc8a2916f3b575c1c05e72c0490b460cddba75991476c71880c26c4acca0bf6702cef757bcda79c80b7b80b7974cb8982", @typed={0xde, 0x7e, 0x0, 0x0, @binary="bd6dff28eeca88ffd6c43f8e9be2fc44607391b9ecb54fbbcea72c87f65e29cb672b6c6cdc590be0189db45ba8a2cb5bfe138c13b981f9ae607736d9464e065f1557754ed481364cf02cac7360acb8e9c87d7f3865ade93cf30634ebf45e8b2db345f7a5cd8707db4690b17b3119cb75a4cfe7c4f6afadcc16dd389c1b1cf2dc60e25041ff0eba0da6d937ffb0e39930fc5d5158b80e6df5a964fd81ce9c3107f350e2b2ceb496e47a294838b09471ea778be14cfa1cec1e3013bf9cd4c78cbf258d3251fbee19f1a0a9301f2cd73df0e68dd61850c544854be9"}, @nested={0xe1, 0xe5, 0x0, 0x1, [@typed={0x13, 0x66, 0x0, 0x0, @str='}\\$\x8c${!}*--\\-/\x00'}, @nested={0x4, 0x22}, @generic="0369a81fa8c0755de7fcf72c98b9bb78a95bb40dde52f3ba841f4f1c25929d841bfb5a4ca331f3534c7b4d13b6389ee7a8f5cf6db8fa9c703e3fbb9641a431398e2ecae4fa9d0b0f320ae1957c2351e020fe0f7c5b14ffba8c51f114e5e0316919478865c0fef1866baeba91a47c61ff19e3cec01c8ad9dda06e8092d1f6233c592993b66afbf6967b061e6fb29f37f016f574b34981170c4aa86020914d37de7d620387593cd6f084a78322ec770ddad6a07117b17b01a6c511f2a3d6cfab7ab583273bc1"]}, @nested={0xfffffffffffffdea, 0xe3, 0x0, 0x1, [@typed={0xa8, 0x53, 0x0, 0x0, @binary="6954bebf58a32a51eb90fb54a820557e745db0bc1ad629853b855131f447f087eaff7a40ce905ade114bfa568c0a42cc93e2a6ceb2f472ce749f8fd5afebd9b5a394ad4f72c7f11e263e8f5357a78ff8d8eeecf273413ef5b9c74bcc20bedb4b52125244d481e3ec5642fe71e652bffa0e63c2c89b8f625a96f5516779651b12227e4ad7ccf4ab7bfd23096ecd80b43ab1684abe277f6f785ddfda0ed372bdb79fe73d18"}, @generic="4055ef86c7dc6186c6bdea81c886ddd8ae0fc97d9d564cae212ed150bb8b99439a0d78c6b916be3d592e6854d159c2e5d79b3ce5ab924d5d5aec27f174069dce6909341013baba57a0579e", @typed={0x6, 0x138, 0x0, 0x0, @str=')\x00'}]}, @typed={0xc, 0x92, 0x0, 0x0, @u64=0x2}, @nested={0x12d, 0x6f, 0x0, 0x1, [@generic="cfe9f1141a6cc85b6a82ba8b75d2d38128c4a4e3ad17f460b84892bb3e3b2b8a91f5b937d0214361961be69ddb9ac46dd1db9c4649b3e878b02c315989f6ea7b95e7a9ba2beb221a014c6c507eaa8df9b69a21decf18d127af236b793018d0eff28d9ff90b793fb6c6c56161123fbb38054f764f5f88db75fc2852a00457d7fae843427bcac50110ce611fed0aca", @nested={0x4, 0x80}, @generic="72a22bf7f679b0926bd875b91efb877fecc8d2720ef24fcb08f45799c80418aa2aa31e8a97829b59be82e3c922a7936523f1dabbeb40d543c7ba5842e7d47e944c8c4dc394f7723f73e173140b95d0b6e5649af3edc48d119909cfef4a9bb4aabd66ca4a3a11823271d1b5983dd43ebd690b949baabf9285311e445c1047cb7e18a8a2", @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@loopback}]}, @generic="f9c7"]}]}]}, 0x6e4}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 4.157412ms ago: executing program 0 (id=6283): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=""/96, &(0x7f0000000080)=0x60) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x35a, 0x10, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0]}) (async) recvmsg(r0, &(0x7f0000001340)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/5, 0x5}, {&(0x7f0000001200)=""/120, 0x78}, {&(0x7f0000001280)=""/103, 0x67}], 0x4}, 0x10000) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000013c0)=@generic={&(0x7f0000001380)='./file0\x00', 0x0, 0x18}, 0x18) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001400)='syz0\x00', 0x200002, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001440)={r1, r2, 0x1, 0x0, @val=@netfilter={0x0, 0x1, 0xb1e}}, 0x20) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000001480)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000014c0)={r0, 0x3, 0xb2, 0xd}) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000001500)=""/243, &(0x7f0000001600)=0xf3) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000016c0)={r4, 0x58, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001700)={@dev={0xfe, 0x80, '\x00', 0x3b}, 0x70, r5}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001740)={'vcan0\x00'}) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000001780), 0x4) (async) bind$tipc(r4, 0x0, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000018c0)={&(0x7f00000017c0), 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x70, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff8000, 0x3}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x11}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x401, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004804}, 0x8010) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000001900)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001940)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001a80)={0x0, 0x9c, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0xfffffffa, @loopback, 0xfffffff7}, @in6={0xa, 0x4e22, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in6={0xa, 0x4e20, 0xb14, @loopback, 0x4}, @in6={0xa, 0x4e20, 0xe5, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc7}]}, &(0x7f0000001ac0)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001b00)={r8, 0x5}, 0x8) (async) ioctl$FITHAW(r7, 0xc0045878) (async) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001b40)=0x0) (async) r10 = socket(0x2a, 0x1, 0xbe) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f0000001b80)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) (async) syz_open_procfs$namespace(r9, &(0x7f0000001c00)='ns/time\x00') (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c80)=@generic={&(0x7f0000001c40)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001e80)={'team0\x00', 0x0}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001ec0)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x1, 0x1f, &(0x7f0000001cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0x7, 0x713e3594836809a4, 0x5, 0xffffffffffffffd4, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}]}, &(0x7f0000001dc0)='syzkaller\x00', 0x3, 0x46, &(0x7f0000001e00)=""/70, 0x40f00, 0x45, '\x00', r12, @fallback=0x22, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r1, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 0s ago: executing program 2 (id=6284): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 06452][T23757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4787'. [ 499.359315][T23764] netlink: 'syz.0.4787': attribute type 10 has an invalid length. [ 499.371475][T23754] team0: Port device team_slave_0 removed [ 499.427803][T23766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4790'. [ 499.567497][ T25] block nbd4: Possible stuck request ffff888025c70000: control (read@0,1024B). Runtime 210 seconds [ 499.579487][ T25] block nbd4: Possible stuck request ffff888025c70200: control (read@1024,1024B). Runtime 210 seconds [ 499.590638][ T25] block nbd4: Possible stuck request ffff888025c70400: control (read@2048,1024B). Runtime 210 seconds [ 499.601995][ T25] block nbd4: Possible stuck request ffff888025c70600: control (read@3072,1024B). Runtime 210 seconds [ 499.616575][T23770] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:19489 [ 499.651480][T23776] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4794'. [ 499.881295][T23789] x_tables: ip_tables: udp match: only valid for protocol 17 [ 499.903926][T23789] syzkaller0: entered promiscuous mode [ 499.910601][T23789] syzkaller0: entered allmulticast mode [ 500.190734][T23805] netlink: 'syz.4.4804': attribute type 6 has an invalid length. [ 500.246748][T23807] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 500.258889][T23807] bond0 (unregistering): Released all slaves [ 500.443750][T23821] xt_ecn: cannot match TCP bits for non-tcp packets [ 500.700550][T23840] blkio.reset_stats is deprecated [ 500.836131][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 500.844643][ C1] lec:lec_tx_timeout: lec0 [ 500.851568][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 500.902563][T23859] netlink: 'syz.2.4818': attribute type 11 has an invalid length. [ 501.039422][T23866] gtp0: entered promiscuous mode [ 501.262308][T23880] ksmbd: Unknown IPC event: 3, ignore. [ 501.278138][T23882] ksmbd: Unknown IPC event: 3, ignore. [ 501.317067][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 501.484258][T23890] netlink: 'syz.0.4827': attribute type 21 has an invalid length. [ 501.846366][T23919] bond0: entered promiscuous mode [ 501.852085][T23919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.110001][T23939] netlink: 'syz.2.4841': attribute type 1 has an invalid length. [ 502.210464][T23941] bond5: (slave geneve2): making interface the new active one [ 502.240469][T23941] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 502.256279][ T65] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 502.264947][ T65] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 502.279579][T23934] netlink: 'syz.2.4841': attribute type 1 has an invalid length. [ 502.288958][ T65] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 502.300788][ T65] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 502.383593][T23945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.398121][T23950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.507233][T23957] __nla_validate_parse: 20 callbacks suppressed [ 502.507254][T23957] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4846'. [ 502.702332][T23964] netlink: 'syz.4.4849': attribute type 1 has an invalid length. [ 502.772239][T23969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4850'. [ 502.842548][T23980] netlink: 'syz.3.4851': attribute type 1 has an invalid length. [ 503.040033][T23970] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 503.056993][ T6396] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 503.075513][T23977] 8021q: adding VLAN 0 to HW filter on device bond4 [ 503.176492][ T3423] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 503.200319][T23982] veth5: entered promiscuous mode [ 503.243711][T23982] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 503.510178][T24005] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 503.525724][T24005] bond5 (unregistering): Released all slaves [ 503.602836][T24011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4859'. [ 503.613530][T24011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4859'. [ 503.680293][T24019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4863'. [ 504.010370][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4870'. [ 504.031042][T24030] netlink: 'syz.4.4865': attribute type 12 has an invalid length. [ 504.039249][T24030] netlink: 'syz.4.4865': attribute type 29 has an invalid length. [ 504.048046][T24030] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4865'. [ 504.059010][T24030] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4865'. [ 504.069676][T24045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4870'. [ 504.142405][T24038] team0: Port device team_slave_0 removed [ 504.163615][T24043] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 504.176006][T24049] netlink: 'syz.1.4874': attribute type 12 has an invalid length. [ 504.417662][T24062] delete_channel: no stack [ 504.635136][T24077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4882'. [ 504.646692][T24076] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 504.755218][T24077] bond5: Invalid ad_actor_system MAC address. [ 504.763477][T24077] bond5: option ad_actor_system: invalid value (1) [ 504.798002][T24077] bond5 (unregistering): Released all slaves [ 505.164678][T24102] netlink: 'syz.1.4892': attribute type 10 has an invalid length. [ 505.227473][T24102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.261122][T24102] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 505.297164][T24109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.304760][T24109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.352600][T24109] bond0: (slave batadv0): Releasing backup interface [ 505.377618][T24107] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 505.461616][T24124] netlink: 'syz.4.4898': attribute type 11 has an invalid length. [ 505.502628][T24119] netlink: 'syz.0.4897': attribute type 10 has an invalid length. [ 505.513322][T24119] batman_adv: batadv0: Adding interface: netdevsim0 [ 505.520357][T24119] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.584041][T24119] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 505.659752][T24119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.694105][T24131] syzkaller0: entered promiscuous mode [ 505.721610][T24131] syzkaller0: entered allmulticast mode [ 505.878598][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 505.886841][ C1] lec:lec_tx_timeout: lec0 [ 505.893770][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 506.112127][T24149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.315612][T24165] veth0_to_bridge: entered promiscuous mode [ 506.327288][T24164] veth0_to_bridge: left promiscuous mode [ 506.963534][T24202] bond6 (unregistering): Released all slaves [ 506.984174][T24210] netlink: 'syz.3.4922': attribute type 1 has an invalid length. [ 507.045098][T24217] x_tables: duplicate underflow at hook 1 [ 507.149016][T24211] bond7: (slave xfrm2): The slave device specified does not support setting the MAC address [ 507.180325][T24224] netlink: 'syz.1.4926': attribute type 1 has an invalid length. [ 507.187421][T24211] bond7: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 507.221539][T24211] bond7: (slave xfrm2): making interface the new active one [ 507.240178][T24211] bond7: (slave xfrm2): Enslaving as an active interface with an up link [ 507.254316][T24222] tipc: Enabling of bearer rejected, failed to enable media [ 507.284003][T24231] netlink: 'syz.1.4928': attribute type 21 has an invalid length. [ 507.519783][T24244] macvtap1: entered promiscuous mode [ 507.532874][T24244] macvtap1: entered allmulticast mode [ 507.547770][T24244] veth1_vlan: entered allmulticast mode [ 507.575442][T24243] macvtap2: entered promiscuous mode [ 507.584010][T24243] macvtap2: entered allmulticast mode [ 507.598224][T24242] __nla_validate_parse: 15 callbacks suppressed [ 507.598250][T24242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4931'. [ 507.729138][T24251] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4934'. [ 507.741717][T24252] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4934'. [ 507.792356][T20750] IPVS: starting estimator thread 0... [ 507.829401][T24260] IPVS: lc: FWM 3 0x00000003 - no destination available [ 507.854397][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 507.886160][T24258] IPVS: using max 26 ests per chain, 62400 per kthread [ 508.116488][ T65] bond4: (slave ip6gretap1): link status up again after 0 ms [ 508.124392][ T65] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 508.260702][ T3824] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 508.377130][ T65] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 508.707654][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 508.746851][T24293] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4945'. [ 508.748461][T24294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.808554][T24287] tipc: Enabling of bearer rejected, failed to enable media [ 508.858540][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 508.976655][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 509.052051][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4951'. [ 509.073921][T24309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4952'. [ 509.106371][ T65] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 509.256944][ T65] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 509.287645][T24329] team0: No ports can be present during mode change [ 509.468061][T24335] netlink: 'syz.3.4957': attribute type 29 has an invalid length. [ 509.576171][T24342] tipc: Failed to remove unknown binding: 66,0,0/1:4218058650/4218058651 [ 509.616681][T24342] tipc: Failed to remove unknown binding: 66,0,0/1:4218058650/4218058651 [ 509.767544][T24357] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 509.815189][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4963'. [ 509.988897][T24374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4968'. [ 510.021118][T24374] gretap0: entered promiscuous mode [ 510.029344][T24374] hsr1: entered promiscuous mode [ 510.181301][T24386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4966'. [ 510.243331][T24377] syzkaller0: entered promiscuous mode [ 510.251955][T24377] syzkaller0: entered allmulticast mode [ 510.403018][T24396] netlink: 516 bytes leftover after parsing attributes in process `syz.3.4972'. [ 510.910612][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 510.918733][ C1] lec:lec_tx_timeout: lec0 [ 510.923990][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 512.088489][T24407] netlink: 'syz.3.4975': attribute type 2 has an invalid length. [ 512.101918][T24410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 512.307878][T24424] netlink: 'syz.3.4980': attribute type 39 has an invalid length. [ 512.512905][T24438] x_tables: duplicate entry at hook 2 [ 512.564903][T24440] bond0: (slave syz_tun): Releasing backup interface [ 512.633364][T24440] bridge_slave_0: left allmulticast mode [ 512.642206][T24440] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.664623][T24440] bridge_slave_1: left allmulticast mode [ 512.674850][T24440] bridge_slave_1: left promiscuous mode [ 512.684704][T24440] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.703016][T24440] bond0: (slave bond_slave_0): Releasing backup interface [ 512.719609][T24440] bond0: (slave bond_slave_1): Releasing backup interface [ 512.736392][T24440] team0: Port device team_slave_0 removed [ 512.747950][T24440] team0: Port device team_slave_1 removed [ 512.754569][T24440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.764669][T24440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.775758][T24440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.783683][T24440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.794640][T24454] netlink: 'syz.2.4988': attribute type 1 has an invalid length. [ 512.818152][T24454] __nla_validate_parse: 1 callbacks suppressed [ 512.818170][T24454] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4988'. [ 513.017302][T24473] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4993'. [ 513.044633][T24476] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4993'. [ 513.186190][ T6396] net_ratelimit: 15 callbacks suppressed [ 513.186212][ T6396] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 513.227843][T24488] netlink: 'syz.1.4995': attribute type 2 has an invalid length. [ 513.276008][T24488] netlink: 'syz.1.4995': attribute type 9 has an invalid length. [ 513.401727][T24488] Bluetooth: MGMT ver 1.23 [ 513.403574][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 513.513296][T24500] xt_hashlimit: max too large, truncated to 1048576 [ 513.526602][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 513.549435][T24501] tipc: Enabled bearer , priority 11 [ 513.592671][T24501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4998'. [ 513.620971][T24501] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 513.630542][T24501] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 513.644997][T24501] team0: Failed to send options change via netlink (err -105) [ 513.653223][T24501] team0: Port device batadv1 added [ 513.667135][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 513.786240][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 513.843054][T24516] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5001'. [ 513.853263][T24516] 0{X: renamed from gretap0 [ 513.890839][T24516] 0{X: entered allmulticast mode [ 513.908161][T24516] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 513.957241][ T65] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.080760][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.163166][T24533] syz_tun: left promiscuous mode [ 514.178140][T24533] 8021q: adding VLAN 0 to HW filter on device ` [ 514.193623][T24533] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.212031][T24533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.265012][T24541] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 514.275374][T24533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.298385][T24533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.309573][T24533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.326629][T24533] veth1_vlan: left promiscuous mode [ 514.332907][T24533] veth0_vlan: left promiscuous mode [ 514.339606][T24533] veth0_vlan: entered promiscuous mode [ 514.348734][T24533] veth1_vlan: entered promiscuous mode [ 514.359811][T24533] veth1_macvtap: left promiscuous mode [ 514.368848][T24533] veth0_macvtap: left promiscuous mode [ 514.375413][T24533] veth0_macvtap: entered promiscuous mode [ 514.398877][T24533] veth1_macvtap: entered promiscuous mode [ 514.424711][T24533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.433216][T24533] : entered promiscuous mode [ 514.438482][T24533] bond_slave_1: entered promiscuous mode [ 514.452549][T24533] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 514.460945][T24533] syz_tun: entered promiscuous mode [ 514.468733][T24533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.485814][T24533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.500047][T24533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.533608][T24533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.581689][T24533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.630120][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.632459][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5009'. [ 514.637645][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.657909][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.665087][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.683392][T24552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5009'. [ 514.768117][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 514.787326][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 514.861369][T24585] sctp: [Deprecated]: syz.1.5012 (pid 24585) Use of int in maxseg socket option. [ 514.861369][T24585] Use struct sctp_assoc_value instead [ 514.933166][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 514.949883][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 515.044686][T24592] IPv6: sit2: Disabled Multicast RS [ 515.122898][T24594] bond3: entered promiscuous mode [ 515.154729][T24594] bond3: entered allmulticast mode [ 515.172367][T24594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.256350][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.279182][ T6382] bond0: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 515.478595][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 515.484825][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 515.519161][T24629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5021'. [ 515.529269][T24629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5021'. [ 515.538993][T24629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5021'. [ 515.936991][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 515.945110][ C1] lec:lec_tx_timeout: lec0 [ 515.950927][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 516.330186][T24677] IPVS: Unknown mcast interface: vcan0 [ 516.544570][T24692] erspan0: entered promiscuous mode [ 516.581799][T24692] erspan0: entered allmulticast mode [ 516.710538][T24699] sctp: [Deprecated]: syz.4.5040 (pid 24699) Use of int in maxseg socket option. [ 516.710538][T24699] Use struct sctp_assoc_value instead [ 516.860434][T24708] netlink: 'syz.2.5043': attribute type 1 has an invalid length. [ 516.892565][T24708] netlink: 'syz.2.5043': attribute type 2 has an invalid length. [ 517.225085][T24726] syzkaller0: entered promiscuous mode [ 517.246598][T24726] syzkaller0: entered allmulticast mode [ 517.394247][T24726] team0 (unregistering): Port device team_slave_1 removed [ 517.413732][T24726] team0 (unregistering): Port device batadv1 removed [ 517.431223][T24734] syzkaller0: entered promiscuous mode [ 517.456489][T24734] syzkaller0: entered allmulticast mode [ 517.671406][T24751] SET target dimension over the limit! [ 517.970204][T24771] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 518.003533][T24771] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 518.240878][T24783] bond0: (slave rose0): Enslaving as an active interface with an up link [ 518.376244][T20980] net_ratelimit: 22 callbacks suppressed [ 518.376266][T20980] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 518.526219][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 518.559190][T24804] __nla_validate_parse: 40 callbacks suppressed [ 518.559211][T24804] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.5068'. [ 518.598083][T24804] netlink: Conntrack attr has 4 unknown bytes [ 518.638553][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 518.758761][ T3824] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 518.786398][T24813] openvswitch: netlink: Flow actions attr not present in new flow. [ 518.897925][ T3824] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 518.989779][T24817] syzkaller0: entered promiscuous mode [ 518.995441][T24817] syzkaller0: entered allmulticast mode [ 519.065922][T24831] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5078'. [ 519.106766][T24837] syzkaller0: entered promiscuous mode [ 519.124380][T24837] syzkaller0: entered allmulticast mode [ 519.159715][T24836] tipc: Enabled bearer , priority 0 [ 519.176241][T20980] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 519.201208][T24836] tipc: Resetting bearer [ 519.271810][T24836] tipc: Disabling bearer [ 519.306531][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 519.327602][T24850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5082'. [ 519.389231][T24852] wireguard0: entered promiscuous mode [ 519.403559][T24852] wireguard0: entered allmulticast mode [ 519.435606][T24852] team0: Port device wireguard0 added [ 519.538216][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5085'. [ 519.557424][T24857] bond8: option all_slaves_active: invalid value (222) [ 519.579920][T24857] bond8 (unregistering): Released all slaves [ 519.653509][T24870] : renamed from bond0 (while UP) [ 519.726287][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 519.745174][T24870] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5087'. [ 519.774161][T24874] tipc: Failed to remove unknown binding: 66,1,1/0:4023215232/4023215234 [ 519.847747][T24882] netlink: 'syz.2.5090': attribute type 29 has an invalid length. [ 519.875488][T24884] netlink: 'syz.2.5090': attribute type 29 has an invalid length. [ 520.357794][T24921] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 520.725448][T24937] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 520.731750][T24937] syzkaller1: Refused to change device type [ 520.781210][T24948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5108'. [ 520.881746][T24948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.912030][T24959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5110'. [ 520.966139][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 520.974187][ C1] lec:lec_tx_timeout: lec0 [ 520.979986][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 521.099134][T24965] netlink: 'syz.0.5114': attribute type 1 has an invalid length. [ 521.273398][T24965] bond5: entered promiscuous mode [ 521.284538][T24979] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5116'. [ 521.309411][T24965] 8021q: adding VLAN 0 to HW filter on device bond5 [ 521.376401][T24965] netlink: 'syz.0.5114': attribute type 1 has an invalid length. [ 521.415264][T24965] netlink: 'syz.0.5114': attribute type 1 has an invalid length. [ 521.435887][T24965] netlink: 'syz.0.5114': attribute type 1 has an invalid length. [ 521.451263][T24965] netlink: 'syz.0.5114': attribute type 1 has an invalid length. [ 521.459735][T24965] netlink: 'syz.0.5114': attribute type 1 has an invalid length. [ 521.664897][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5121'. [ 521.866842][ T30] audit: type=1804 audit(1769533986.040:8): pid=25018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5126" name="/newroot/392/memory.events" dev="tmpfs" ino=2014 res=1 errno=0 [ 521.926318][T25022] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5128'. [ 521.943014][ T30] audit: type=1800 audit(1769533986.040:9): pid=25018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5126" name="memory.events" dev="tmpfs" ino=2014 res=0 errno=0 [ 521.964510][T25022] validate_nla: 27 callbacks suppressed [ 521.964529][T25022] netlink: 'syz.3.5128': attribute type 6 has an invalid length. [ 521.964559][T25022] netlink: 'syz.3.5128': attribute type 5 has an invalid length. [ 521.996668][T25023] gre1: entered promiscuous mode [ 522.001697][T25023] gre1: entered allmulticast mode [ 522.059669][T25026] syz.1.5129: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 522.096407][T25026] CPU: 1 UID: 0 PID: 25026 Comm: syz.1.5129 Not tainted syzkaller #0 PREEMPT(full) [ 522.096439][T25026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 522.096453][T25026] Call Trace: [ 522.096462][T25026] [ 522.096471][T25026] dump_stack_lvl+0xe8/0x150 [ 522.096505][T25026] warn_alloc+0x249/0x340 [ 522.096529][T25026] ? stack_trace_save+0xa9/0x100 [ 522.096562][T25026] ? __pfx_warn_alloc+0x10/0x10 [ 522.096593][T25026] ? kasan_save_track+0x4f/0x80 [ 522.096612][T25026] ? kasan_save_track+0x3e/0x80 [ 522.096630][T25026] ? __kasan_kmalloc+0x93/0xb0 [ 522.096650][T25026] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 522.096670][T25026] ? xskq_create+0x56/0x170 [ 522.096702][T25026] ? xsk_setsockopt+0x54c/0x990 [ 522.096730][T25026] ? do_sock_setsockopt+0x17c/0x1b0 [ 522.096786][T25026] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 522.096812][T25026] ? do_syscall_64+0xe2/0xf80 [ 522.096838][T25026] __vmalloc_node_range_noprof+0x132/0x1730 [ 522.096897][T25026] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 522.096927][T25026] ? __kasan_kmalloc+0x93/0xb0 [ 522.096956][T25026] vmalloc_user_noprof+0xad/0xe0 [ 522.096978][T25026] ? xskq_create+0xbf/0x170 [ 522.097012][T25026] xskq_create+0xbf/0x170 [ 522.097049][T25026] xsk_init_queue+0xad/0x110 [ 522.097084][T25026] xsk_setsockopt+0x54c/0x990 [ 522.097119][T25026] ? __pfx_xsk_setsockopt+0x10/0x10 [ 522.097151][T25026] ? __pfx_aa_sk_perm+0x10/0x10 [ 522.097192][T25026] ? aa_sock_opt_perm+0xff/0x1a0 [ 522.097223][T25026] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 522.097245][T25026] ? __pfx_xsk_setsockopt+0x10/0x10 [ 522.097279][T25026] do_sock_setsockopt+0x17c/0x1b0 [ 522.097311][T25026] __x64_sys_setsockopt+0x13d/0x1b0 [ 522.097345][T25026] do_syscall_64+0xe2/0xf80 [ 522.097366][T25026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.097387][T25026] ? trace_irq_disable+0x37/0x100 [ 522.097412][T25026] ? clear_bhb_loop+0x60/0xb0 [ 522.097438][T25026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.097460][T25026] RIP: 0033:0x7f85f1d9aeb9 [ 522.097481][T25026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.097499][T25026] RSP: 002b:00007f85f2d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 522.097522][T25026] RAX: ffffffffffffffda RBX: 00007f85f2015fa0 RCX: 00007f85f1d9aeb9 [ 522.097539][T25026] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 522.097552][T25026] RBP: 00007f85f1e08c1f R08: 0000000000000004 R09: 0000000000000000 [ 522.097566][T25026] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.097580][T25026] R13: 00007f85f2016038 R14: 00007f85f2015fa0 R15: 00007ffe5d379b68 [ 522.097616][T25026] [ 522.097741][T25026] Mem-Info: [ 522.386218][T25026] active_anon:8973 inactive_anon:0 isolated_anon:0 [ 522.386218][T25026] active_file:3081 inactive_file:40102 isolated_file:0 [ 522.386218][T25026] unevictable:768 dirty:98 writeback:0 [ 522.386218][T25026] slab_reclaimable:12296 slab_unreclaimable:120386 [ 522.386218][T25026] mapped:31972 shmem:4029 pagetables:1572 [ 522.386218][T25026] sec_pagetables:0 bounce:0 [ 522.386218][T25026] kernel_misc_reclaimable:0 [ 522.386218][T25026] free:1297332 free_pcp:12578 free_cma:0 [ 522.450516][T25026] Node 0 active_anon:35892kB inactive_anon:0kB active_file:12324kB inactive_file:160208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128088kB dirty:388kB writeback:0kB shmem:14780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15956kB pagetables:6132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 522.483845][T25026] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 522.515114][T25026] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.615463][T25026] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 522.635225][T25026] Node 0 DMA32 free:1273136kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32492kB inactive_anon:0kB active_file:12324kB inactive_file:160208kB unevictable:1536kB writepending:388kB zspages:0kB present:3129332kB managed:2554132kB mlocked:0kB bounce:0kB free_pcp:39960kB local_pcp:17780kB free_cma:0kB [ 522.721286][T25026] lowmem_reserve[]: 0 0 1 1 1 [ 522.746256][T25026] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.809421][T25026] lowmem_reserve[]: 0 0 0 0 0 [ 522.822982][T25026] Node 1 Normal free:3900064kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13588kB local_pcp:11424kB free_cma:0kB [ 522.915774][T25048] xt_l2tp: v2 doesn't support IP mode [ 522.930090][T25026] lowmem_reserve[]: 0 0 0 0 0 [ 522.934894][T25026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 522.969166][T25026] Node 0 DMA32: 5548*4kB (UME) 5082*8kB (UME) 2789*16kB (UME) 151*32kB (UME) 50*64kB (UME) 556*128kB (UME) 600*256kB (UM) 402*512kB (UME) 188*1024kB (UME) 35*2048kB (UM) 114*4096kB (UM) = 1277232kB [ 522.989231][T25026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 523.002170][T25026] Node 1 Normal: 178*4kB (UM) 41*8kB (UME) 47*16kB (UME) 169*32kB (UME) 52*64kB (UME) 11*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3900064kB [ 523.033413][T25026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.064084][T25026] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.083322][T25026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.102641][T25026] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.130294][T25026] 44543 total pagecache pages [ 523.140791][T25026] 0 pages in swap cache [ 523.153718][T25026] Free swap = 124996kB [ 523.168924][T25026] Total swap = 124996kB [ 523.178078][T25026] 2097051 pages RAM [ 523.184215][T25026] 0 pages HighMem/MovableOnly [ 523.189608][T25026] 426620 pages reserved [ 523.193925][T25026] 0 pages cma reserved [ 523.296925][T25061] netlink: 'syz.1.5142': attribute type 33 has an invalid length. [ 523.423820][T25070] syzkaller0: entered promiscuous mode [ 523.430923][T25070] syzkaller0: entered allmulticast mode [ 523.486565][ T36] net_ratelimit: 82 callbacks suppressed [ 523.486585][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 523.527980][T25070] : renamed from pim6reg (while UP) [ 523.636496][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 523.756545][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 523.764519][T25094] netlink: 'syz.4.5150': attribute type 10 has an invalid length. [ 523.796299][T25097] __nla_validate_parse: 11 callbacks suppressed [ 523.796317][T25097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5151'. [ 523.815258][T25097] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.823727][T25097] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.849539][T25098] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5151'. [ 523.866940][ T65] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 523.877478][T25097] netlink: 'syz.2.5151': attribute type 1 has an invalid length. [ 523.957464][T25100] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5152'. [ 524.002596][T25100] bond0: (slave ip_vti0): Device is not bonding slave [ 524.013741][T25100] bond0: option active_slave: invalid value (ip_vti0) [ 524.023911][T25100] bond0 (unregistering): Released all slaves [ 524.086392][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 524.206953][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 524.237770][T25114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5156'. [ 524.268044][T25114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5156'. [ 524.290537][T25114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5156'. [ 524.356346][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 524.507007][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 524.626175][ T3730] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 524.768221][T25101] lo speed is unknown, defaulting to 1000 [ 524.852482][T25142] netlink: 'syz.3.5164': attribute type 1 has an invalid length. [ 525.010468][T25154] FAULT_INJECTION: forcing a failure. [ 525.010468][T25154] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 525.038536][T25154] CPU: 0 UID: 0 PID: 25154 Comm: syz.3.5168 Not tainted syzkaller #0 PREEMPT(full) [ 525.038564][T25154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 525.038577][T25154] Call Trace: [ 525.038586][T25154] [ 525.038594][T25154] dump_stack_lvl+0xe8/0x150 [ 525.038626][T25154] should_fail_ex+0x412/0x560 [ 525.038657][T25154] _copy_from_iter+0x1d3/0x1670 [ 525.038693][T25154] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 525.038729][T25154] ? __pfx__copy_from_iter+0x10/0x10 [ 525.038759][T25154] ? __build_skb_around+0x22d/0x3c0 [ 525.038786][T25154] ? __alloc_skb+0x193/0x390 [ 525.038823][T25154] ? netlink_sendmsg+0x650/0xb40 [ 525.038844][T25154] ? skb_put+0x11b/0x210 [ 525.038873][T25154] netlink_sendmsg+0x6c0/0xb40 [ 525.038905][T25154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.038931][T25154] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.038959][T25154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.038984][T25154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.039004][T25154] ____sys_sendmsg+0xa68/0xad0 [ 525.039032][T25154] ? __might_fault+0xaf/0x130 [ 525.039069][T25154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.039106][T25154] ? import_iovec+0x73/0xa0 [ 525.039142][T25154] ___sys_sendmsg+0x2a5/0x360 [ 525.039168][T25154] ? __lock_acquire+0x6b5/0x2cf0 [ 525.039203][T25154] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.039270][T25154] ? __fget_files+0x2a/0x420 [ 525.039292][T25154] ? __fget_files+0x3a0/0x420 [ 525.039327][T25154] __x64_sys_sendmsg+0x1bd/0x2a0 [ 525.039358][T25154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.039396][T25154] ? __pfx_ksys_write+0x10/0x10 [ 525.039440][T25154] do_syscall_64+0xe2/0xf80 [ 525.039461][T25154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.039481][T25154] ? trace_irq_disable+0x37/0x100 [ 525.039501][T25154] ? clear_bhb_loop+0x60/0xb0 [ 525.039526][T25154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.039547][T25154] RIP: 0033:0x7f59d259aeb9 [ 525.039565][T25154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.039584][T25154] RSP: 002b:00007f59d353f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.039606][T25154] RAX: ffffffffffffffda RBX: 00007f59d2815fa0 RCX: 00007f59d259aeb9 [ 525.039622][T25154] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000043 [ 525.039636][T25154] RBP: 00007f59d353f090 R08: 0000000000000000 R09: 0000000000000000 [ 525.039649][T25154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.039661][T25154] R13: 00007f59d2816038 R14: 00007f59d2815fa0 R15: 00007ffd7d3c12a8 [ 525.039696][T25154] [ 525.336143][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 525.368940][T25165] tipc: Enabling of bearer rejected, failed to enable media [ 525.547373][T25174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'. [ 525.986388][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 525.994488][ C1] lec:lec_tx_timeout: lec0 [ 526.000278][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 526.012946][T25191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5175'. [ 526.040162][T25191] block nbd7: Unsupported socket: should be TCP or UNIX. [ 526.169026][T25198] netlink: 'syz.3.5179': attribute type 10 has an invalid length. [ 526.198333][T25199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5179'. [ 526.238646][T25198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.259361][T25198] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 526.273756][T25199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.281918][T25199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.282013][T25205] FAULT_INJECTION: forcing a failure. [ 526.282013][T25205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.308216][T25199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.315974][T25205] CPU: 0 UID: 0 PID: 25205 Comm: syz.1.5180 Not tainted syzkaller #0 PREEMPT(full) [ 526.315994][T25205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 526.316004][T25205] Call Trace: [ 526.316010][T25205] [ 526.316017][T25205] dump_stack_lvl+0xe8/0x150 [ 526.316071][T25205] should_fail_ex+0x412/0x560 [ 526.316102][T25205] _copy_from_iter+0x1d3/0x1670 [ 526.316137][T25205] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 526.316173][T25205] ? __pfx__copy_from_iter+0x10/0x10 [ 526.316202][T25205] ? __build_skb_around+0x22d/0x3c0 [ 526.316229][T25205] ? __alloc_skb+0x193/0x390 [ 526.316252][T25205] ? netlink_sendmsg+0x650/0xb40 [ 526.316272][T25205] ? skb_put+0x11b/0x210 [ 526.316301][T25205] netlink_sendmsg+0x6c0/0xb40 [ 526.316332][T25205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.316358][T25205] ? aa_sock_msg_perm+0xf1/0x1b0 [ 526.316386][T25205] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.316418][T25205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.316438][T25205] ____sys_sendmsg+0xa68/0xad0 [ 526.316465][T25205] ? __might_fault+0xaf/0x130 [ 526.316501][T25205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.316538][T25205] ? import_iovec+0x73/0xa0 [ 526.316573][T25205] ___sys_sendmsg+0x2a5/0x360 [ 526.316600][T25205] ? __lock_acquire+0x6b5/0x2cf0 [ 526.316635][T25205] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.316701][T25205] ? __fget_files+0x2a/0x420 [ 526.316723][T25205] ? __fget_files+0x3a0/0x420 [ 526.316757][T25205] __x64_sys_sendmsg+0x1bd/0x2a0 [ 526.316789][T25205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.316827][T25205] ? __pfx_ksys_write+0x10/0x10 [ 526.316867][T25205] do_syscall_64+0xe2/0xf80 [ 526.316888][T25205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.316907][T25205] ? trace_irq_disable+0x37/0x100 [ 526.316926][T25205] ? clear_bhb_loop+0x60/0xb0 [ 526.316951][T25205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.316971][T25205] RIP: 0033:0x7f85f1d9aeb9 [ 526.316989][T25205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.317006][T25205] RSP: 002b:00007f85f2d11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.317028][T25205] RAX: ffffffffffffffda RBX: 00007f85f2015fa0 RCX: 00007f85f1d9aeb9 [ 526.317044][T25205] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000043 [ 526.317058][T25205] RBP: 00007f85f2d11090 R08: 0000000000000000 R09: 0000000000000000 [ 526.317071][T25205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.317083][T25205] R13: 00007f85f2016038 R14: 00007f85f2015fa0 R15: 00007ffe5d379b68 [ 526.317118][T25205] [ 526.575495][T25199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.644230][T25199] bond0: (slave batadv0): Releasing backup interface [ 526.872651][T25221] : renamed from bond0 (while UP) [ 527.216161][T25233] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5188'. [ 527.329973][T25245] syzkaller0: entered promiscuous mode [ 527.335511][T25245] syzkaller0: entered allmulticast mode [ 527.453841][T25247] delete_channel: no stack [ 527.803377][T25279] netlink: 'syz.3.5201': attribute type 3 has an invalid length. [ 528.175561][T25289] netlink: 'syz.2.5204': attribute type 1 has an invalid length. [ 528.237661][T25289] 8021q: adding VLAN 0 to HW filter on device bond6 [ 528.274998][T25266] lo speed is unknown, defaulting to 1000 [ 528.303947][T25289] veth11: entered promiscuous mode [ 528.314109][T25289] bond6: (slave veth11): Enslaving as an active interface with a down link [ 528.376815][ T25] block nbd3: Possible stuck request ffff888025c40000: control (read@0,1024B). Runtime 240 seconds [ 528.390126][ T25] block nbd3: Possible stuck request ffff888025c40200: control (read@1024,1024B). Runtime 240 seconds [ 528.402095][ T25] block nbd3: Possible stuck request ffff888025c40400: control (read@2048,1024B). Runtime 240 seconds [ 528.413309][ T25] block nbd3: Possible stuck request ffff888025c40600: control (read@3072,1024B). Runtime 240 seconds [ 528.596279][T20978] net_ratelimit: 18 callbacks suppressed [ 528.596302][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 528.746210][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 528.876362][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 528.983303][T25317] __nla_validate_parse: 6 callbacks suppressed [ 528.983324][T25317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5210'. [ 529.006577][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 529.092765][T25319] sctp: [Deprecated]: syz.2.5211 (pid 25319) Use of int in max_burst socket option. [ 529.092765][T25319] Use struct sctp_assoc_value instead [ 529.117141][ T6392] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 529.226157][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 529.377512][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 529.436451][T25330] netlink: 'syz.0.5212': attribute type 1 has an invalid length. [ 529.444247][T25330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5212'. [ 529.543464][T25335] tipc: Enabled bearer , priority 0 [ 529.558685][T25335] syzkaller0: entered promiscuous mode [ 529.566399][T25335] syzkaller0: entered allmulticast mode [ 529.582331][T25335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5215'. [ 529.673427][ T25] block nbd4: Possible stuck request ffff888025c70000: control (read@0,1024B). Runtime 240 seconds [ 529.674791][T25335] tipc: Resetting bearer [ 529.684853][ T25] block nbd4: Possible stuck request ffff888025c70200: control (read@1024,1024B). Runtime 240 seconds [ 529.705481][ T25] block nbd4: Possible stuck request ffff888025c70400: control (read@2048,1024B). Runtime 240 seconds [ 529.723032][ T25] block nbd4: Possible stuck request ffff888025c70600: control (read@3072,1024B). Runtime 240 seconds [ 529.757776][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 529.796428][T25334] tipc: Resetting bearer [ 529.867287][T25334] tipc: Disabling bearer [ 529.938490][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 530.056304][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 530.335114][T25376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5222'. [ 530.412819][T25382] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5227'. [ 530.436235][T25382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5227'. [ 530.453113][T25384] netlink: 'syz.4.5226': attribute type 1 has an invalid length. [ 530.458459][T25382] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5227'. [ 530.483638][T25382] netlink: 'syz.2.5227': attribute type 3 has an invalid length. [ 530.494780][T25382] netlink: 'syz.2.5227': attribute type 2 has an invalid length. [ 530.503180][T25382] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5227'. [ 530.615655][T25389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5228'. [ 530.625435][T25389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5228'. [ 530.644184][T25389] gretap0: entered promiscuous mode [ 530.685213][T25389] gretap0: left promiscuous mode [ 530.993518][T25412] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 531.017018][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 531.025125][ C1] lec:lec_tx_timeout: lec0 [ 531.029799][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 531.031922][T25412] syzkaller0: entered promiscuous mode [ 531.073300][T25412] syzkaller0: entered allmulticast mode [ 531.361727][T25434] netlink: 'syz.0.5241': attribute type 83 has an invalid length. [ 531.450408][T25440] ip6tnl2: entered allmulticast mode [ 531.560537][T25447] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 532.117438][T25474] netlink: 'syz.2.5253': attribute type 10 has an invalid length. [ 532.149107][T25474] netlink: 'syz.2.5253': attribute type 6 has an invalid length. [ 532.301273][T25480] erspan0: left allmulticast mode [ 532.389599][T25486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.249929][T25532] hsr_slave_1 (unregistering): left promiscuous mode [ 533.278176][T25543] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 533.628196][T25563] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.637513][T25563] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.650049][T25522] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 533.665185][T25522] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 533.679578][ T3824] net_ratelimit: 24 callbacks suppressed [ 533.679600][ T3824] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 533.952994][T25522] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 533.967240][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 533.969581][T25522] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 534.056215][T25583] netlink: 'syz.2.5282': attribute type 5 has an invalid length. [ 534.147054][T25522] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.153075][T25522] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 534.168164][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 534.316151][T25522] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 534.322130][T25522] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 534.337363][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 534.527113][T25522] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.548552][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 534.576433][T25522] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 534.629618][T25617] __nla_validate_parse: 11 callbacks suppressed [ 534.629640][T25617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5287'. [ 534.689728][ T6392] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 534.699307][T25617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5287'. [ 534.908716][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 535.076302][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 535.117730][T25631] netlink: 'syz.2.5291': attribute type 1 has an invalid length. [ 535.196587][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 535.294125][T25643] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5294'. [ 535.348089][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 535.884369][T25678] x_tables: duplicate entry at hook 1 [ 535.964896][T25682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5303'. [ 536.036249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 536.044342][ C1] lec:lec_tx_timeout: lec0 [ 536.050096][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 536.381153][T25704] geneve3: entered promiscuous mode [ 536.893804][T25750] netlink: 'syz.2.5325': attribute type 2 has an invalid length. [ 536.902794][T25745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5324'. [ 536.913039][T25751] netlink: 'syz.2.5325': attribute type 2 has an invalid length. [ 537.040572][T25754] syzkaller0: entered promiscuous mode [ 537.048967][T25754] syzkaller0: entered allmulticast mode [ 537.151175][T25760] netlink: 'syz.0.5328': attribute type 5 has an invalid length. [ 537.163038][T25758] netlink: 'syz.3.5329': attribute type 13 has an invalid length. [ 537.179822][T25760] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5328'. [ 537.207335][T25762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 537.283338][T25762] IPv6: sit3: Disabled Multicast RS [ 537.305916][T25762] sit3: entered allmulticast mode [ 537.423092][T25776] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5333'. [ 537.637757][T25789] netlink: 'syz.2.5336': attribute type 1 has an invalid length. [ 537.655922][T25789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.663226][T25789] IPv6: NLM_F_CREATE should be set when creating new route [ 537.805757][T25799] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 537.835865][T25805] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5342'. [ 537.851924][T25808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5341'. [ 537.909118][T25805] netlink: 'syz.2.5342': attribute type 9 has an invalid length. [ 538.011110][T25816] netlink: 'syz.4.5344': attribute type 9 has an invalid length. [ 538.260615][T25832] ipt_ECN: cannot use operation on non-tcp rule [ 538.288994][T25836] netlink: 'syz.2.5350': attribute type 3 has an invalid length. [ 538.448828][T25843] bridge_slave_1: left allmulticast mode [ 538.454621][T25843] bridge_slave_1: left promiscuous mode [ 538.461018][T25843] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.509255][T25843] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 538.767465][ T3730] net_ratelimit: 24 callbacks suppressed [ 538.767486][ T3730] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 538.906137][ T3730] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 539.026158][ T3730] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 539.093124][T25880] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 539.105636][T25880] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 539.116999][T25880] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 539.144797][T25884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.166316][ T3730] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 539.276227][ T6383] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 539.313948][T25889] syz_tun: entered allmulticast mode [ 539.386924][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 539.496186][ T3730] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 539.606270][ T3730] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 539.673455][T25895] __nla_validate_parse: 6 callbacks suppressed [ 539.673475][T25895] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5369'. [ 539.717081][ T6396] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 539.826286][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 539.984096][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5371'. [ 540.179975][T25888] syz_tun: left allmulticast mode [ 540.473271][T25935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5378'. [ 540.483498][T25934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5379'. [ 540.497446][T25936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5378'. [ 540.508595][T25934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5379'. [ 540.633959][T25946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5381'. [ 540.851046][T25957] tipc: Enabled bearer , priority 2 [ 540.876295][T25957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5386'. [ 540.935224][T25964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5388'. [ 541.030013][T23755] udevd[23755]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 541.254488][T25985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5392'. [ 541.300405][T25985] validate_nla: 5 callbacks suppressed [ 541.300424][T25985] netlink: 'syz.3.5392': attribute type 4 has an invalid length. [ 541.450512][T25996] ip6tnl0: Caught tx_queue_len zero misconfig [ 541.730245][T26006] veth7: entered allmulticast mode [ 541.876351][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 541.884448][ C1] lec:lec_tx_timeout: lec0 [ 541.890502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 541.922587][T26026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.941140][T26026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.959441][T26027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.977333][T20750] tipc: Node number set to 2757439430 [ 542.019806][T26029] netlink: 'syz.0.5403': attribute type 6 has an invalid length. [ 542.190890][T26042] netlink: 'syz.1.5409': attribute type 1 has an invalid length. [ 542.204955][T26048] netlink: 'syz.2.5405': attribute type 4 has an invalid length. [ 542.218810][T26042] tipc: New replicast peer: 255.255.255.255 [ 542.227296][T26042] tipc: Enabled bearer , priority 10 [ 542.533980][T26073] netlink: 'syz.0.5416': attribute type 12 has an invalid length. [ 542.543388][T26073] netlink: 'syz.0.5416': attribute type 29 has an invalid length. [ 542.690915][T26083] netlink: 'syz.0.5420': attribute type 2 has an invalid length. [ 542.708004][T26083] netlink: 'syz.0.5420': attribute type 2 has an invalid length. [ 543.251243][T26118] erspan0: entered allmulticast mode [ 543.332965][T26127] Unsupported ieee802154 address type: 0 [ 543.550893][T26145] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 543.569071][T26145] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 543.579733][T26145] gretap1: entered promiscuous mode [ 543.585123][T26145] gretap1: entered allmulticast mode [ 543.604418][T26139] bridge6: port 1(veth0_to_bond) entered blocking state [ 543.618251][T26139] bridge6: port 1(veth0_to_bond) entered disabled state [ 543.630239][T26139] veth0_to_bond: entered allmulticast mode [ 543.658149][T26139] veth0_to_bond: entered promiscuous mode [ 543.713666][T26150] syzkaller0: entered promiscuous mode [ 543.722256][T26150] syzkaller0: entered allmulticast mode [ 543.797803][ T6383] net_ratelimit: 31 callbacks suppressed [ 543.797824][ T6383] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 544.107098][T20980] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 544.130363][T26170] netlink: 'syz.1.5448': attribute type 6 has an invalid length. [ 544.146218][T26170] netlink: 'syz.1.5448': attribute type 5 has an invalid length. [ 544.197527][T26170] NCSI netlink: No device for ifindex 813332851 [ 544.246439][T20980] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 544.366259][T26183] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 544.409373][T26184] erspan0: left allmulticast mode [ 544.446784][T20980] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 544.457234][T26196] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 544.556417][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 544.611561][T26207] ipt_ECN: cannot use operation on non-tcp rule [ 544.667754][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 544.777530][T26220] __nla_validate_parse: 18 callbacks suppressed [ 544.777551][T26220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5462'. [ 544.796184][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 544.921091][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.096312][T20980] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.250988][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.410299][T26246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5471'. [ 545.514031][T26246] bond2: option coupled_control: invalid value (52) [ 545.531994][T26246] bond2 (unregistering): Released all slaves [ 545.633891][T26268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5477'. [ 545.668241][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5477'. [ 545.681719][T26268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5477'. [ 545.747795][T26273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5479'. [ 545.961634][T26292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5483'. [ 545.985974][T26296] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 546.059448][T26294] bridge6: port 1(veth0_to_bond) entered blocking state [ 546.068944][T26294] bridge6: port 1(veth0_to_bond) entered disabled state [ 546.100100][T26294] veth0_to_bond: entered allmulticast mode [ 546.135098][T26294] veth0_to_bond: entered promiscuous mode [ 546.194433][T26303] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 546.564739][T26327] tipc: Started in network mode [ 546.569863][T26327] tipc: Node identity ac1414aa, cluster identity 4711 [ 546.597963][T26327] tipc: Enabled bearer , priority 10 [ 546.816009][T26341] netlink: 'syz.0.5493': attribute type 11 has an invalid length. [ 546.831234][T26341] validate_nla: 4 callbacks suppressed [ 546.831253][T26341] netlink: 'syz.0.5493': attribute type 4 has an invalid length. [ 546.856465][T26341] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.5493'. [ 546.906074][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 546.914160][ C1] lec:lec_tx_timeout: lec0 [ 546.920540][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 546.939529][T26351] xt_l2tp: v2 sid > 0xffff: 1114112 [ 546.981525][T26354] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5496'. [ 547.008349][T26355] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5496'. [ 547.117656][T26362] dvmrp6: entered allmulticast mode [ 547.374005][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803279e800: rx timeout, send abort [ 547.383130][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803279e800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 547.716620][T24580] tipc: Node number set to 2886997162 [ 548.924624][ T6382] net_ratelimit: 25 callbacks suppressed [ 548.924648][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 549.056151][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 549.166852][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 549.276737][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 549.466928][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 549.597907][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 549.839065][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 549.956182][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 550.086424][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 550.127535][T26553] __nla_validate_parse: 74 callbacks suppressed [ 550.127555][T26553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5554'. [ 550.223072][T26561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5558'. [ 550.253267][T26561] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5558'. [ 550.284497][T26553] syzkaller0: entered promiscuous mode [ 550.293193][T26553] syzkaller0: entered allmulticast mode [ 550.320625][T26561] veth11: entered promiscuous mode [ 550.442212][T26577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5561'. [ 550.476147][T20979] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 550.744424][T26582] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20002 [ 551.938350][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 551.946500][ C1] lec:lec_tx_timeout: lec0 [ 551.951218][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 552.222827][T26579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5562'. [ 552.234438][T26579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5562'. [ 552.253532][T26579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5562'. [ 552.257336][ T65] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.272621][T26579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5562'. [ 552.292841][ T65] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.313101][ T65] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.332652][ T65] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.458647][T26595] netlink: 'syz.3.5565': attribute type 21 has an invalid length. [ 552.482263][T26595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5565'. [ 552.715549][T26611] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 552.757411][T26612] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 552.797238][T26611] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 552.839426][T26619] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5573'. [ 552.862143][T26567] lo speed is unknown, defaulting to 1000 [ 552.950075][T26628] netlink: 'syz.0.5576': attribute type 1 has an invalid length. [ 553.004736][T26628] 8021q: adding VLAN 0 to HW filter on device bond7 [ 553.055919][T26628] netlink: 'syz.0.5576': attribute type 1 has an invalid length. [ 553.055940][T26625] syzkaller1: entered promiscuous mode [ 553.070795][T26625] syzkaller1: entered allmulticast mode [ 553.119921][T26625] lo: Caught tx_queue_len zero misconfig [ 553.141357][T26636] netlink: 'syz.1.5578': attribute type 2 has an invalid length. [ 553.985504][T26666] bridge_slave_0 (unregistering): left allmulticast mode [ 553.993293][T26666] bridge_slave_0 (unregistering): left promiscuous mode [ 554.004601][T26666] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.037406][ T13] net_ratelimit: 13 callbacks suppressed [ 554.037426][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.227161][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.365946][T26698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.373296][T26698] IPv6: NLM_F_CREATE should be set when creating new route [ 554.380606][T26698] IPv6: NLM_F_CREATE should be set when creating new route [ 554.393436][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.407429][T26698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.525440][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.666250][T20979] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.786202][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.982548][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.096846][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.197761][T26749] __nla_validate_parse: 5 callbacks suppressed [ 555.197781][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5610'. [ 555.202970][T26751] netlink: 'syz.4.5609': attribute type 8 has an invalid length. [ 555.221842][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.256704][T26751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5609'. [ 555.288956][T26753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5609'. [ 555.294553][T26741] veth0: entered promiscuous mode [ 555.329171][T26757] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 555.457757][ T3824] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.602464][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5613'. [ 555.634905][T26770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5613'. [ 555.673549][T26770] geneve2: entered promiscuous mode [ 555.692360][T26770] geneve2: entered allmulticast mode [ 555.715550][ T3505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.739696][ T3505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.764614][ T3505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.936647][T26740] veth0: left promiscuous mode [ 555.945639][T26783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5617'. [ 556.516273][T26808] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 556.525184][T26808] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 556.537691][T26810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5625'. [ 556.716533][T26795] netlink: 'syz.4.5618': attribute type 2 has an invalid length. [ 556.724593][T26795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5618'. [ 556.936699][T26781] lo speed is unknown, defaulting to 1000 [ 556.966776][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 556.974940][ C1] lec:lec_tx_timeout: lec0 [ 556.979709][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 557.545716][T26847] netlink: 'syz.3.5631': attribute type 20 has an invalid length. [ 557.554549][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5631'. [ 557.632940][T26849] syzkaller0: entered promiscuous mode [ 557.641199][T26847] netlink: 'syz.3.5631': attribute type 20 has an invalid length. [ 557.650151][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5631'. [ 557.660509][T26849] syzkaller0: entered allmulticast mode [ 557.727974][T26852] mac80211_hwsim hwsim46 wlan0: left promiscuous mode [ 557.737940][T26852] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 557.759293][T26852] ipvlan0: left allmulticast mode [ 557.764398][T26852] batadv_slave_1: left allmulticast mode [ 557.870590][T26852] hsr1: left promiscuous mode [ 557.879867][T26852] bond3: left promiscuous mode [ 557.890993][T26852] bond3: left allmulticast mode [ 557.910222][T26852] bond5: left promiscuous mode [ 558.136976][T26852] geneve2: left promiscuous mode [ 558.146379][T26852] geneve2: left allmulticast mode [ 558.164820][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.202888][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.223060][T26791] lo speed is unknown, defaulting to 1000 [ 558.251324][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.281854][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.388378][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.407576][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.446620][ T25] block nbd3: Possible stuck request ffff888025c40000: control (read@0,1024B). Runtime 270 seconds [ 558.458546][ T25] block nbd3: Possible stuck request ffff888025c40200: control (read@1024,1024B). Runtime 270 seconds [ 558.470310][ T25] block nbd3: Possible stuck request ffff888025c40400: control (read@2048,1024B). Runtime 270 seconds [ 558.481613][ T25] block nbd3: Possible stuck request ffff888025c40600: control (read@3072,1024B). Runtime 270 seconds [ 559.056286][T26900] netlink: 'syz.0.5645': attribute type 21 has an invalid length. [ 559.130185][T26895] syzkaller0: entered promiscuous mode [ 559.135746][T26895] syzkaller0: entered allmulticast mode [ 559.166562][T20978] net_ratelimit: 23 callbacks suppressed [ 559.166583][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.306819][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.399610][T26915] tipc: Bearer : already 2 bearers with priority 10 [ 559.410524][T26915] tipc: Bearer : trying with adjusted priority [ 559.427242][T26915] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 559.456121][T20979] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.577000][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.696166][T20979] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.732209][ T25] block nbd4: Possible stuck request ffff888025c70000: control (read@0,1024B). Runtime 270 seconds [ 559.744612][ T25] block nbd4: Possible stuck request ffff888025c70200: control (read@1024,1024B). Runtime 270 seconds [ 559.755934][ T25] block nbd4: Possible stuck request ffff888025c70400: control (read@2048,1024B). Runtime 270 seconds [ 559.786226][ T25] block nbd4: Possible stuck request ffff888025c70600: control (read@3072,1024B). Runtime 270 seconds [ 559.817200][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.936440][T20979] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.067114][ T3824] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.095030][T26944] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20002 [ 560.187365][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.268947][T26960] netlink: 'syz.0.5663': attribute type 1 has an invalid length. [ 560.300358][T26960] netlink: 'syz.0.5663': attribute type 1 has an invalid length. [ 560.309054][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.333522][T26960] netlink: 'syz.0.5663': attribute type 1 has an invalid length. [ 560.382748][T26960] netlink: 'syz.0.5663': attribute type 2 has an invalid length. [ 560.408088][T26960] __nla_validate_parse: 10 callbacks suppressed [ 560.408109][T26960] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5663'. [ 560.479944][T26967] syzkaller0: entered promiscuous mode [ 560.497181][T26967] syzkaller0: left promiscuous mode [ 560.567863][T26975] netlink: 'syz.1.5666': attribute type 1 has an invalid length. [ 560.585073][T26975] netlink: 'syz.1.5666': attribute type 7 has an invalid length. [ 560.595062][T26975] netlink: 'syz.1.5666': attribute type 8 has an invalid length. [ 560.620479][T26974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5667'. [ 560.629944][T26975] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5666'. [ 560.656130][T26975] NCSI netlink: No device for ifindex 65584 [ 560.767555][T26985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5668'. [ 561.519733][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5683'. [ 561.570118][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5683'. [ 561.603149][T27039] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5685'. [ 561.986767][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 561.994919][ C1] lec:lec_tx_timeout: lec0 [ 561.999785][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 562.098675][T27065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5694'. [ 562.123841][T27064] bond2: entered promiscuous mode [ 562.129271][T27064] bond2: entered allmulticast mode [ 562.134993][T27064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.258230][T27069] xt_cgroup: xt_cgroup: no path or classid specified [ 562.406920][T27065] bond0 (unregistering): left promiscuous mode [ 562.413948][T27065] bond0 (unregistering): Released all slaves [ 562.435088][T27086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5698'. [ 562.470679][T27086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5698'. [ 562.772465][T27104] validate_nla: 1 callbacks suppressed [ 562.772484][T27104] netlink: 'syz.1.5702': attribute type 4 has an invalid length. [ 562.808332][T27104] netlink: 'syz.1.5702': attribute type 4 has an invalid length. [ 563.148416][T27124] netlink: 'syz.4.5711': attribute type 1 has an invalid length. [ 563.355986][T27137] netlink: 'syz.3.5715': attribute type 29 has an invalid length. [ 563.364988][T27137] netlink: 'syz.3.5715': attribute type 29 has an invalid length. [ 563.724349][T27153] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.731712][T27153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.739374][T27153] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.746608][T27153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.239912][T27194] syzkaller0: entered promiscuous mode [ 564.257135][T27194] syzkaller0: entered allmulticast mode [ 564.433601][T27210] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 564.444155][T27212] net_ratelimit: 29 callbacks suppressed [ 564.444177][T27212] openvswitch: netlink: Missing key (keys=40, expected=80) [ 564.459441][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.468238][T27210] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 564.487248][T27210] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 564.501595][T27216] veth0: entered promiscuous mode [ 564.579003][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.613805][T27216] veth0: left promiscuous mode [ 564.696544][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.763155][T24580] IPVS: starting estimator thread 0... [ 564.837209][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.866722][T27231] IPVS: using max 27 ests per chain, 64800 per kthread [ 564.956439][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.067724][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.196463][ T6384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.320422][T27260] syzkaller0: entered promiscuous mode [ 565.326062][T27260] syzkaller0: entered allmulticast mode [ 565.351627][T27265] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 565.360710][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.638089][T27274] __nla_validate_parse: 16 callbacks suppressed [ 565.638109][T27274] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5754'. [ 565.754083][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5755'. [ 565.771320][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5755'. [ 565.878186][T27277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5755'. [ 565.940754][T27277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5755'. [ 566.005068][T27294] netlink: 'syz.4.5760': attribute type 11 has an invalid length. [ 566.033836][T27294] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5760'. [ 566.131768][T27296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5761'. [ 566.186415][T27299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5761'. [ 566.283760][T27307] : entered promiscuous mode [ 566.492889][T27320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5770'. [ 566.510380][T27320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5770'. [ 566.520370][T27321] netlink: 'syz.0.5771': attribute type 21 has an invalid length. [ 566.567200][T27323] xfrm2: entered promiscuous mode [ 566.572312][T27323] xfrm2: entered allmulticast mode [ 566.695226][T27339] netlink: 'syz.2.5772': attribute type 8 has an invalid length. [ 567.006146][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.014263][ C1] lec:lec_tx_timeout: lec0 [ 567.019650][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 567.273971][T27377] netlink: 'syz.1.5785': attribute type 13 has an invalid length. [ 567.285972][T27377] netlink: 'syz.1.5785': attribute type 58 has an invalid length. [ 567.748236][T27403] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 568.442630][T27447] bond7: Unable to set up delay as MII monitoring is disabled [ 568.459001][T27447] bond7 (unregistering): Released all slaves [ 568.484268][T27455] netlink: 'syz.0.5806': attribute type 1 has an invalid length. [ 568.553185][T27455] bond0: entered promiscuous mode [ 568.585646][T27455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.641624][T27463] bond0: (slave bridge7): making interface the new active one [ 568.649491][T27463] bridge7: entered promiscuous mode [ 568.656777][T27463] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 569.015659][T27488] netlink: 'syz.3.5814': attribute type 11 has an invalid length. [ 569.038880][T27488] netlink: 'syz.3.5814': attribute type 11 has an invalid length. [ 569.402821][T27503] netlink: 'syz.0.5819': attribute type 1 has an invalid length. [ 569.529969][ T36] net_ratelimit: 36 callbacks suppressed [ 569.529991][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.661558][T27520] netlink: 'syz.4.5824': attribute type 13 has an invalid length. [ 569.669727][ T65] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.695396][T27526] netlink: ct family unspecified [ 569.844139][T27520] bridge0: left allmulticast mode [ 569.865438][T27533] netlink: 'syz.0.5827': attribute type 1 has an invalid length. [ 569.901571][T27520] bridge_slave_0: left promiscuous mode [ 570.011365][T27542] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 570.061885][T27520] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 570.189713][T27520] veth5: left promiscuous mode [ 570.198000][ T36] bond4: (slave ip6gretap1): link status up again after 0 ms [ 570.208615][T27520] wireguard0: left promiscuous mode [ 570.215978][T27520] wireguard0: left allmulticast mode [ 570.226298][ T36] bond4: (slave ip6gretap1): link status up again after 0 ms [ 570.237998][T27520] veth7: left allmulticast mode [ 570.247405][ T3505] bond4: (slave ip6gretap1): link status up again after 0 ms [ 570.274219][T27546] netlink: 'syz.1.5829': attribute type 3 has an invalid length. [ 570.292148][T20978] bond4: (slave ip6gretap1): link status up again after 0 ms [ 570.326190][T20978] bond4: (slave ip6gretap1): link status up again after 0 ms [ 570.357112][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 570.437559][T27558] SET target dimension over the limit! [ 570.524248][T27562] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 570.797140][T27578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.804455][T27578] IPv6: NLM_F_CREATE should be set when creating new route [ 570.811821][T27578] IPv6: NLM_F_CREATE should be set when creating new route [ 570.819266][T27578] IPv6: NLM_F_CREATE should be set when creating new route [ 570.861336][T27573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.928907][T27578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.945258][T27584] __nla_validate_parse: 23 callbacks suppressed [ 570.945277][T27584] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5842'. [ 571.058475][T27573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.072680][T27578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.084327][T27588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.229096][T27573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.274317][T27596] netlink: 'syz.4.5846': attribute type 3 has an invalid length. [ 571.434644][T27573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.534286][T27614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5851'. [ 571.666464][ T3423] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.688921][ T3423] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.733536][ T3423] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.751154][T27618] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5852'. [ 571.812138][ T3824] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.026645][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 572.034834][ C1] lec:lec_tx_timeout: lec0 [ 572.039709][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 572.136949][T27633] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5857'. [ 572.181696][T27633] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5857'. [ 572.581773][T27665] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5865'. [ 572.839054][T27677] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5869'. [ 573.161594][T27699] netlink: 'syz.2.5876': attribute type 10 has an invalid length. [ 573.198290][T27704] netlink: 'syz.3.5877': attribute type 1 has an invalid length. [ 573.294022][T27710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5880'. [ 573.351657][T27709] delete_channel: no stack [ 573.380755][T27707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.598575][T27716] x_tables: unsorted underflow at hook 1 [ 574.198299][T27731] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5886'. [ 574.406910][T27744] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5890'. [ 574.439127][T27744] netlink: 'syz.1.5890': attribute type 4 has an invalid length. [ 574.629527][T27751] syzkaller0: entered promiscuous mode [ 574.635131][T27751] syzkaller0: entered allmulticast mode [ 574.655669][ T6382] net_ratelimit: 32 callbacks suppressed [ 574.655699][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 574.735023][T27762] x_tables: duplicate underflow at hook 4 [ 574.846208][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 574.885185][T27764] syzkaller0: entered promiscuous mode [ 574.892664][T27764] syzkaller0: entered allmulticast mode [ 574.966783][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 574.974848][T27776] netlink: 'syz.4.5902': attribute type 3 has an invalid length. [ 575.097692][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 575.237793][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 575.378440][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 575.443766][T27807] syzkaller0: entered promiscuous mode [ 575.473256][T27807] syzkaller0: entered allmulticast mode [ 575.506230][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 575.574379][T27815] ip6gre3: entered allmulticast mode [ 575.639731][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 575.660457][T27827] netlink: 'syz.0.5915': attribute type 29 has an invalid length. [ 575.808442][T27833] sctp: [Deprecated]: syz.2.5916 (pid 27833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.808442][T27833] Use struct sctp_sack_info instead [ 575.922474][T27832] syzkaller0: entered promiscuous mode [ 575.928777][T27832] syzkaller0: entered allmulticast mode [ 575.939828][T27839] tipc: Enabled bearer , priority 10 [ 576.067332][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.271340][T27866] netlink: 'syz.2.5923': attribute type 1 has an invalid length. [ 576.329381][T27869] __nla_validate_parse: 4 callbacks suppressed [ 576.329400][T27869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5923'. [ 576.788280][T27879] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5925'. [ 577.047292][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 577.055351][ C1] lec:lec_tx_timeout: lec0 [ 577.060046][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 577.983443][T27866] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 577.984056][T27873] veth0_to_bond: left allmulticast mode [ 577.999389][T27873] veth0_to_bond: left promiscuous mode [ 578.005134][T27873] bridge6: port 1(veth0_to_bond) entered disabled state [ 578.036658][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 578.494609][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 578.513962][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 578.522508][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 578.531851][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 578.540562][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.570277][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 578.586502][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 578.600913][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 578.614695][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 578.622579][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.794934][T27901] netlink: 'syz.1.5933': attribute type 11 has an invalid length. [ 578.814535][T27901] netlink: 'syz.1.5933': attribute type 11 has an invalid length. [ 578.861608][T27901] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5933'. [ 579.298611][T27916] netlink: 'syz.1.5938': attribute type 1 has an invalid length. [ 579.698202][T27920] syzkaller0: entered promiscuous mode [ 579.705982][T27936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5939'. [ 579.729092][T27920] syzkaller0: entered allmulticast mode [ 579.747868][T27936] netlink: 'syz.4.5939': attribute type 30 has an invalid length. [ 580.040217][ T6384] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.097858][ T6384] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 580.134486][ T6384] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 580.223237][T27946] : renamed from veth1_vlan (while UP) [ 580.279758][ T6382] net_ratelimit: 10 callbacks suppressed [ 580.279779][ T6382] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 580.434748][ T6384] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.461361][ T6384] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 580.491015][ T6384] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 580.578503][T27893] lo speed is unknown, defaulting to 1000 [ 580.586663][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 580.677810][ T52] Bluetooth: hci0: command tx timeout [ 580.769381][ T6384] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.787296][ T6384] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 580.798118][ T6384] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 580.860763][T27995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5949'. [ 580.922044][T27998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5950'. [ 580.981162][T28002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5951'. [ 580.997454][T28003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5949'. [ 581.006976][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.127549][ T6384] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.142702][T28009] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5952'. [ 581.154947][ T6384] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 581.176596][ T6384] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 581.197564][T28011] netlink: 'syz.4.5953': attribute type 1 has an invalid length. [ 581.215669][T28003] netlink: 'syz.0.5949': attribute type 1 has an invalid length. [ 581.223701][T28003] netlink: 'syz.0.5949': attribute type 2 has an invalid length. [ 581.231811][T28013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5954'. [ 581.450356][ T3423] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.480196][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.586537][ T3505] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.597552][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.632563][ T36] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.705243][ T6384] bridge_slave_1: left allmulticast mode [ 581.715076][ T6384] bridge_slave_1: left promiscuous mode [ 581.724202][T28034] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 581.743175][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.792742][ T6384] bridge_slave_0: left allmulticast mode [ 581.827371][ T6384] bridge_slave_0: left promiscuous mode [ 581.837465][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.907716][ T6384] tipc: Resetting bearer [ 581.991115][ T6384] : left promiscuous mode [ 582.004441][ T6384] bond_slave_1: left promiscuous mode [ 582.378983][ T6384] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 582.403891][ T6384] bond0 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ba:d3:6a:26:cc:ff - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 582.423299][ T6384] ip6gretap1 (unregistering): left allmulticast mode [ 582.430718][ T6384] bond0 (unregistering): (slave veth5): making interface the new active one [ 582.453408][ T6384] veth5: entered allmulticast mode [ 582.720047][ T6384] tipc: Disabling bearer [ 582.757301][ T52] Bluetooth: hci0: command tx timeout [ 582.838797][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 582.847251][ C1] lec:lec_tx_timeout: lec0 [ 582.852446][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 582.925832][ T6384] bond5 (unregistering): (slave geneve2): Releasing active interface [ 583.431915][ T6384] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 583.444939][ T6384] ` (unregistering): (slave 32): Releasing backup interface [ 583.457917][ T6384] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.469061][ T6384] ` (unregistering): Released all slaves [ 583.575068][ T6384] bond1 (unregistering): Released all slaves [ 583.684483][ T6384] bond2 (unregistering): Released all slaves [ 583.801737][ T6384] bond0 (unregistering): (slave veth5): Releasing active interface [ 583.809931][ T6384] veth5: left allmulticast mode [ 583.817786][ T6384] bond0 (unregistering): Released all slaves [ 583.927751][ T6384] bond3 (unregistering): Released all slaves [ 584.034390][ T6384] bond4 (unregistering): Released all slaves [ 584.145427][ T6384] bond5 (unregistering): Released all slaves [ 584.253132][ T6384] bond6 (unregistering): (slave veth11): Releasing active interface [ 584.263108][ T6384] bond6 (unregistering): Released all slaves [ 584.279354][ T6384] bond7 (unregistering): Released all slaves [ 584.292906][T27893] chnl_net:caif_netlink_parms(): no params data found [ 584.442842][T28069] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 584.508633][ T6384] tipc: Disabling bearer [ 584.525637][ T6384] tipc: Disabling bearer [ 584.531255][ T6384] tipc: Left network mode [ 584.746881][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 584.837189][ T52] Bluetooth: hci0: command tx timeout [ 584.887244][T27893] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.930258][T27893] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.948297][T27893] bridge_slave_0: entered allmulticast mode [ 584.964940][T27893] bridge_slave_0: entered promiscuous mode [ 584.981089][T28114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5974'. [ 585.006376][T27893] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.019516][T27893] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.039322][T27893] bridge_slave_1: entered allmulticast mode [ 585.058175][T27893] bridge_slave_1: entered promiscuous mode [ 585.159025][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 585.204053][T28122] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5976'. [ 585.231583][T27893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.258652][T28122] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5976'. [ 585.303714][T27893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.321972][T28127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5978'. [ 585.372942][T28127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5978'. [ 585.513587][T27893] team0: Port device team_slave_0 added [ 585.547934][T27893] team0: Port device team_slave_1 added [ 585.563444][T28139] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5980'. [ 585.641104][T28141] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5979'. [ 585.806708][T27893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.824085][T27893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.895876][T28116] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 585.932394][T27893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.981851][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.023041][T27893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.057190][T27893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.157343][T27893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.306667][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.870583][T28186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5989'. [ 586.889981][ T6384] hsr_slave_0: left promiscuous mode [ 586.897350][ T6384] hsr_slave_1: left promiscuous mode [ 586.920464][ T52] Bluetooth: hci0: command tx timeout [ 586.926932][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.934405][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.954001][T28187] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5989'. [ 586.993513][ T6384] veth1_macvtap: left promiscuous mode [ 587.006310][T28187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5989'. [ 587.026397][ T6384] veth0_macvtap: left promiscuous mode [ 587.032464][ T6384] veth1_vlan: left promiscuous mode [ 587.040274][ T6384] veth0_vlan: left promiscuous mode [ 587.126606][T28195] netlink: 'syz.4.5991': attribute type 1 has an invalid length. [ 587.879291][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 587.887481][ C1] lec:lec_tx_timeout: lec0 [ 587.892738][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 588.386897][T28195] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 588.413632][T27893] hsr_slave_0: entered promiscuous mode [ 588.435116][T27893] hsr_slave_1: entered promiscuous mode [ 588.442225][T27893] debugfs: 'hsr0' already exists in 'hsr' [ 588.448990][T27893] Cannot create hsr debugfs directory [ 588.523619][ T25] block nbd3: Possible stuck request ffff888025c40000: control (read@0,1024B). Runtime 300 seconds [ 588.537223][ T25] block nbd3: Possible stuck request ffff888025c40200: control (read@1024,1024B). Runtime 300 seconds [ 588.549448][ T25] block nbd3: Possible stuck request ffff888025c40400: control (read@2048,1024B). Runtime 300 seconds [ 588.560927][ T25] block nbd3: Possible stuck request ffff888025c40600: control (read@3072,1024B). Runtime 300 seconds [ 588.893824][T28222] netlink: 'syz.3.6000': attribute type 11 has an invalid length. [ 589.010136][T27893] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.348552][T27893] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.375195][ T6384] IPVS: stop unused estimator thread 0... [ 589.387711][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 589.492085][T27893] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.597435][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 589.685303][T27893] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.707049][T28267] netlink: 'syz.4.6009': attribute type 83 has an invalid length. [ 589.726547][ T6384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 589.809913][ T25] block nbd4: Possible stuck request ffff888025c70000: control (read@0,1024B). Runtime 300 seconds [ 589.827049][ T25] block nbd4: Possible stuck request ffff888025c70200: control (read@1024,1024B). Runtime 300 seconds [ 589.839336][ T25] block nbd4: Possible stuck request ffff888025c70400: control (read@2048,1024B). Runtime 300 seconds [ 589.850592][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 589.850939][ T25] block nbd4: Possible stuck request ffff888025c70600: control (read@3072,1024B). Runtime 300 seconds [ 589.991720][T28280] __nla_validate_parse: 3 callbacks suppressed [ 589.991741][T28280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6013'. [ 590.011598][T27893] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 590.023180][T28283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6011'. [ 590.050447][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 590.070813][T27893] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 590.099399][T27893] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 590.145539][T27893] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 590.243641][T28294] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 590.316859][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 590.409060][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6015'. [ 590.438080][T27893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.499911][T27893] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.529925][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.537280][ T6388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.570074][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 590.591085][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.598366][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.731281][T28315] bond0: (slave gre0): Error: Device type is different from other slaves [ 590.794383][T28315] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 591.069674][ T6384] net_ratelimit: 2 callbacks suppressed [ 591.069694][ T6384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.203804][ T6384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.283754][T28336] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 591.321615][T27893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.347262][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.453064][T27893] veth0_vlan: entered promiscuous mode [ 591.478734][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.514216][T27893] veth1_vlan: entered promiscuous mode [ 591.521195][T28343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6024'. [ 591.558128][T28343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6024'. [ 591.639735][T28343] bond0: entered promiscuous mode [ 591.644837][T28343] bond0: entered allmulticast mode [ 591.651231][T28343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.665133][T27893] veth0_macvtap: entered promiscuous mode [ 591.711287][T28343] macvlan4: entered promiscuous mode [ 591.724630][T28343] macvlan4: entered allmulticast mode [ 591.760240][T28343] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 591.769211][T28351] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 591.919276][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.947430][T27893] veth1_macvtap: entered promiscuous mode [ 592.181962][T28374] pim6reg1: entered promiscuous mode [ 592.209713][T28374] pim6reg1: entered allmulticast mode [ 592.410281][T28385] netlink: 'syz.4.6030': attribute type 1 has an invalid length. [ 592.460708][T28385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 592.565002][T28383] bond5: (slave geneve3): making interface the new active one [ 592.609171][T28383] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 592.731190][T27893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.742900][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6034'. [ 592.786335][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.840882][T27893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.875357][ T6385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.905910][ T6385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.906361][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 592.922795][ C1] lec:lec_tx_timeout: lec0 [ 592.928588][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 592.967814][ T6384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.997680][ T6385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.039756][ T6385] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.097073][T28418] netlink: 'syz.4.6035': attribute type 18 has an invalid length. [ 593.148470][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 593.283363][T28428] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6036'. [ 593.340423][T28418] gtp0: entered promiscuous mode [ 593.345439][T28418] gtp0: entered allmulticast mode [ 593.484450][T28435] netlink: 'syz.1.6039': attribute type 21 has an invalid length. [ 593.494391][ T3423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.520131][ T3423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.581044][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 593.601485][T28434] netlink: 'syz.0.6038': attribute type 6 has an invalid length. [ 593.658276][ T3423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.708575][ T3423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.743092][ T6384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 593.851769][T28451] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002 [ 593.930596][T28460] netlink: 'syz.2.5929': attribute type 1 has an invalid length. [ 594.031075][T28469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5929'. [ 594.091558][T28469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5929'. [ 594.303711][T28460] veth3: entered promiscuous mode [ 594.342794][ T3423] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.351957][T28476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6045'. [ 594.387237][ T3423] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.416741][ T3423] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.448082][ T3423] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.819673][T28497] Bluetooth: MGMT ver 1.23 [ 594.863372][T28497] tipc: Started in network mode [ 594.880567][T28497] tipc: Node identity 1, cluster identity 4711 [ 594.908297][T28497] tipc: Node number set to 1 [ 595.420706][T28537] __nla_validate_parse: 6 callbacks suppressed [ 595.420727][T28537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6059'. [ 595.453308][T28541] netlink: 'syz.1.6060': attribute type 4 has an invalid length. [ 595.731116][T28565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6063'. [ 595.992010][T28578] syzkaller0: entered promiscuous mode [ 596.008313][T28578] syzkaller0: entered allmulticast mode [ 596.044523][T28578] pimreg3: entered allmulticast mode [ 596.176258][ T6388] net_ratelimit: 18 callbacks suppressed [ 596.176280][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.354680][T28594] openvswitch: netlink: Missing key (keys=40, expected=100) [ 596.426842][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.557479][ T6399] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.614036][T28610] netlink: 'syz.3.6075': attribute type 1 has an invalid length. [ 596.642105][T28610] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6075'. [ 596.678098][ T6384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.711958][T28615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.721641][T28618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.798664][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.908850][T28628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6077'. [ 596.929528][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.945306][T28628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6077'. [ 596.963434][T28628] vxcan2: entered allmulticast mode [ 597.056461][T28630] netlink: 'syz.3.6078': attribute type 12 has an invalid length. [ 597.064354][T28630] netlink: 'syz.3.6078': attribute type 29 has an invalid length. [ 597.083814][T28630] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6078'. [ 597.131461][T28630] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6078'. [ 597.219222][T28652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6082'. [ 597.257870][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.298356][T28656] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6083'. [ 597.345631][T28656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6083'. [ 597.437541][T28650] syzkaller0: entered promiscuous mode [ 597.459771][T28650] syzkaller0: entered allmulticast mode [ 597.936633][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 597.944745][ C1] lec:lec_tx_timeout: lec0 [ 597.950609][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 598.571399][T28733] sctp: [Deprecated]: syz.4.6104 (pid 28733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.571399][T28733] Use struct sctp_sack_info instead [ 598.670782][T28743] netlink: 'syz.3.6107': attribute type 2 has an invalid length. [ 598.702698][T28743] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 599.544461][T28781] bond8: (slave veth13): Enslaving as an active interface with a down link [ 599.650470][T28785] bond8: (slave veth15): Enslaving as an active interface with a down link [ 599.753232][T28810] netlink: 'syz.2.6121': attribute type 1 has an invalid length. [ 599.857106][T28813] siw: device registration error -23 [ 600.257398][T28847] netlink: 'syz.0.6127': attribute type 1 has an invalid length. [ 600.285556][T28847] netlink: 'syz.0.6127': attribute type 7 has an invalid length. [ 600.318087][T28847] netlink: 'syz.0.6127': attribute type 8 has an invalid length. [ 600.337638][T28847] NCSI netlink: No device for ifindex 65584 [ 600.457332][T28856] netlink: 'syz.4.6130': attribute type 3 has an invalid length. [ 600.465391][T28856] __nla_validate_parse: 13 callbacks suppressed [ 600.465408][T28856] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6130'. [ 600.700237][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6132'. [ 600.768270][T28868] batadv1: entered allmulticast mode [ 601.083938][T28884] geneve3: entered promiscuous mode [ 601.094373][T28884] geneve3: entered allmulticast mode [ 601.113789][ T6388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.137998][ T6388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.166263][ T6388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.216291][ T6388] net_ratelimit: 39 callbacks suppressed [ 601.216312][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.294770][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6139'. [ 601.356434][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.467039][T20978] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.631870][ T6399] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.687744][T28903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6144'. [ 601.776833][ T6399] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.812945][T28903] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 601.901054][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.086543][ T6384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.196896][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.246835][T28933] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6150'. [ 602.269037][T28931] block nbd7: server does not support multiple connections per device. [ 602.287121][T28934] bond6: option min_links: invalid value (18446744073709551614) [ 602.295357][T28931] block nbd7: shutting down sockets [ 602.305642][T28934] bond6: option min_links: allowed values 0 - 2147483647 [ 602.347760][T28934] bond6 (unregistering): Released all slaves [ 602.422345][T28931] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 602.432360][T28855] lo speed is unknown, defaulting to 1000 [ 602.438502][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.678502][ T6388] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.967073][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 602.975162][ C1] lec:lec_tx_timeout: lec0 [ 602.980666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 603.193159][T28967] team_slave_1: entered promiscuous mode [ 603.199127][T28967] dummy0: entered promiscuous mode [ 603.208639][T28967] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 603.235738][T28968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6158'. [ 603.257798][T28966] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 603.270326][T28859] lo speed is unknown, defaulting to 1000 [ 603.298930][T28966] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6158'. [ 603.322543][T28967] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6158'. [ 603.379862][T28972] atomic_op ffff888077ccc198 conn xmit_atomic 0000000000000000 [ 603.487663][T28974] syzkaller0: entered promiscuous mode [ 603.493356][T28974] syzkaller0: entered allmulticast mode [ 603.909936][T28982] tipc: Enabled bearer , priority 0 [ 603.999776][T28993] xt_hashlimit: size too large, truncated to 1048576 [ 604.031309][T28988] syzkaller0: entered promiscuous mode [ 604.037093][T28988] syzkaller0: entered allmulticast mode [ 604.044075][T28988] tipc: Resetting bearer [ 604.062267][T28980] tipc: Resetting bearer [ 604.684845][T29014] netlink: 'syz.1.6170': attribute type 1 has an invalid length. [ 604.694050][T29014] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6170'. [ 604.703948][T29014] netlink: 'syz.1.6170': attribute type 1 has an invalid length. [ 605.437565][ T5201] udevd[5201]: worker [15548] /devices/virtual/block/nbd5 timeout; kill it [ 605.452745][ T5201] udevd[5201]: seq 24320 '/devices/virtual/block/nbd5' killed [ 606.140391][T28980] tipc: Disabling bearer [ 606.185536][ T5826] tipc: Node number set to 3766978815 [ 606.236124][ T6399] net_ratelimit: 6 callbacks suppressed [ 606.236147][ T6399] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.317756][T29024] dvmrp0: entered allmulticast mode [ 606.367209][ T6399] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.476919][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.586221][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.846982][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.966830][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.048032][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.058277][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.066823][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.078728][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.091794][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.100509][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.180265][T29070] netlink: 'syz.1.6182': attribute type 1 has an invalid length. [ 607.215937][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.260377][T29073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6185'. [ 607.277322][T29070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6182'. [ 607.329795][T29075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6185'. [ 607.356580][ T6399] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.369974][T29075] block nbd7: Unsupported socket: should be TCP or UNIX. [ 607.417727][T29080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6185'. [ 607.468541][T29075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6185'. [ 607.488088][ T3423] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.903739][T29098] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6191'. [ 607.996174][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 608.004288][ C1] lec:lec_tx_timeout: lec0 [ 608.008996][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 608.313673][T29122] netlink: 'syz.2.6197': attribute type 1 has an invalid length. [ 608.330595][T29122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6197'. [ 608.353428][T29122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6197'. [ 608.376735][T29122] netlink: 'syz.2.6197': attribute type 2 has an invalid length. [ 608.395460][T29122] netlink: 'syz.2.6197': attribute type 2 has an invalid length. [ 608.427351][T29122] netlink: 'syz.2.6197': attribute type 2 has an invalid length. [ 608.511662][T29060] lo speed is unknown, defaulting to 1000 [ 608.551362][T29123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.610882][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6201'. [ 609.013151][T29060] chnl_net:caif_netlink_parms(): no params data found [ 609.095722][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6210'. [ 609.144302][T29172] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 609.157026][ T5837] Bluetooth: hci5: command tx timeout [ 609.174784][T29172] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 609.199002][T29172] gretap1: entered promiscuous mode [ 609.211107][T29172] gretap1: entered allmulticast mode [ 609.384868][T29060] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.392896][T29060] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.402582][T29060] bridge_slave_0: entered allmulticast mode [ 609.411355][T29060] bridge_slave_0: entered promiscuous mode [ 609.462673][T29060] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.470676][T29060] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.478176][T29060] bridge_slave_1: entered allmulticast mode [ 609.486892][T29060] bridge_slave_1: entered promiscuous mode [ 609.535550][T29060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.574267][T29060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.641894][T29060] team0: Port device team_slave_0 added [ 609.652191][T29060] team0: Port device team_slave_1 added [ 609.731063][T29060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.738493][T29195] netlink: 'syz.2.6217': attribute type 5 has an invalid length. [ 609.753394][T29060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.781485][T29060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.797065][T29060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.804452][T29060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.832275][T29060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.965617][T29195] tipc: Enabled bearer , priority 0 [ 609.975054][T29195] syzkaller0: entered promiscuous mode [ 609.981672][T29195] syzkaller0: entered allmulticast mode [ 610.013566][T29060] hsr_slave_0: entered promiscuous mode [ 610.033337][T29060] hsr_slave_1: entered promiscuous mode [ 610.042515][T29060] debugfs: 'hsr0' already exists in 'hsr' [ 610.054136][T29060] Cannot create hsr debugfs directory [ 610.210340][T29211] sctp: [Deprecated]: syz.3.6222 (pid 29211) Use of int in max_burst socket option. [ 610.210340][T29211] Use struct sctp_assoc_value instead [ 610.325834][T29194] tipc: Resetting bearer [ 610.379061][T29194] tipc: Disabling bearer [ 610.493991][T29217] x_tables: ip_tables: ECN target: only valid in mangle table, not [ 610.655323][T29226] : entered promiscuous mode [ 610.879144][T29060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.965017][T29060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.054988][T29060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.170836][T29060] batman_adv: batadv0: Removing interface: netdevsim0 [ 611.236465][ T5837] Bluetooth: hci5: command tx timeout [ 611.337111][ T6384] net_ratelimit: 16 callbacks suppressed [ 611.337132][ T6384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 611.645537][T29060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 611.700979][T29060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 611.759062][T29060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 611.811020][T29060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 611.927527][T29291] tipc: Failed to remove unknown binding: 66,0,0/1946771807:3482704792/3482704794 [ 611.937069][T29291] tipc: Failed to remove unknown binding: 66,0,0/1946771807:3482704792/3482704793 [ 611.967905][T29291] tipc: Failed to remove unknown binding: 66,0,0/1946771807:3482704792/3482704794 [ 612.006448][T29291] tipc: Failed to remove unknown binding: 66,0,0/1946771807:3482704792/3482704793 [ 612.065405][T29305] openvswitch: netlink: IPv4 tun info is not correct [ 612.073978][T29291] syzkaller0: entered promiscuous mode [ 612.079675][T29291] syzkaller0: entered allmulticast mode [ 612.156246][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.301031][T29317] __nla_validate_parse: 8 callbacks suppressed [ 612.301049][T29317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6252'. [ 612.340754][T29060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.449834][T29060] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.476385][ T6395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.528065][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.535380][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.586999][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.594206][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.927077][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.990761][T29352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6260'. [ 613.016550][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 613.024802][ C1] lec:lec_tx_timeout: lec0 [ 613.030133][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 613.040944][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.166499][ T3505] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.276953][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.316290][ T5837] Bluetooth: hci5: command tx timeout [ 613.396475][ T6385] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.485314][T29375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6266'. [ 613.515679][T29375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6266'. [ 613.560193][T29060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.728157][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.755963][T29060] veth0_vlan: entered promiscuous mode [ 613.839930][T29384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6268'. [ 613.850170][T29060] veth1_vlan: entered promiscuous mode [ 613.948282][T29387] netlink: 'syz.3.6269': attribute type 1 has an invalid length. [ 614.033813][T29060] veth0_macvtap: entered promiscuous mode [ 614.132637][T29060] veth1_macvtap: entered promiscuous mode [ 614.261418][T29060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.315388][T29060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.362243][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.384792][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.416103][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.449584][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.825882][ T6388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.857157][ T6388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.992989][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.030230][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.112817][T29395] netlink: 'syz.1.6270': attribute type 6 has an invalid length. [ 615.397144][ T5837] Bluetooth: hci5: command tx timeout [ 615.405007][ T31] INFO: task udevd:15530 blocked for more than 143 seconds. [ 615.434660][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 615.446461][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.470157][T29442] netlink: 'syz.3.6282': attribute type 1 has an invalid length. [ 615.482881][ T31] task:udevd state:D stack:20128 pid:15530 tgid:15530 ppid:5201 task_flags:0x400040 flags:0x00080002 [ 615.549202][ T31] Call Trace: [ 615.552558][ T31] [ 615.555529][ T31] __schedule+0x14ea/0x5050 [ 615.558095][T29442] netlink: 'syz.3.6282': attribute type 2 has an invalid length. [ 615.602262][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 615.666223][ T31] ? __pfx___schedule+0x10/0x10 [ 615.671188][ T31] ? schedule+0x90/0x360 [ 615.675518][ T31] schedule+0x164/0x360 [ 615.726352][ T31] io_schedule+0x7f/0xd0 [ 615.731313][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 615.756140][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 615.762129][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 615.806050][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 615.811920][ T31] do_read_cache_folio+0x1ad/0x590 [ 615.836127][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 615.847210][ T31] read_part_sector+0xb6/0x2b0 [ 615.852045][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 615.870534][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 615.896242][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 615.902362][ T31] bdev_disk_changed+0x765/0x14c0 [ 615.916112][ T31] ? bdev_open+0xe0/0xd30 [ 615.921655][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 615.936133][ T31] blkdev_get_whole+0x380/0x510 [ 615.941117][ T31] bdev_open+0x31e/0xd30 [ 615.945690][ T31] blkdev_open+0x470/0x610 [ 615.986082][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 615.991132][ T31] do_dentry_open+0x7ce/0x1420 [ 615.995956][ T31] vfs_open+0x3b/0x340 [ 616.015873][ T31] ? path_openat+0x346e/0x3e20 [ 616.026105][ T31] path_openat+0x3486/0x3e20 [ 616.030813][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 616.066058][ T31] ? getname_flags+0xb7/0x540 [ 616.070925][ T31] ? __pfx_path_openat+0x10/0x10 [ 616.075925][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 616.106303][ T31] do_filp_open+0x22d/0x490 [ 616.110915][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 616.130718][ T31] ? _raw_spin_unlock+0x28/0x50 [ 616.135656][ T31] ? alloc_fd+0x64b/0x6c0 [ 616.143476][ T31] do_sys_openat2+0x12f/0x220 [ 616.148602][ T31] ? __pfx___up_read+0x10/0x10 [ 616.153422][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 616.159838][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 616.165279][ T31] __x64_sys_openat+0x138/0x170 [ 616.170313][ T31] do_syscall_64+0xe2/0xf80 [ 616.174870][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.186117][ T31] ? trace_irq_disable+0x37/0x100 [ 616.192778][ T31] ? clear_bhb_loop+0x60/0xb0 [ 616.198662][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.206085][ T31] RIP: 0033:0x7fc32cea7407 [ 616.210547][ T31] RSP: 002b:00007ffdaaa20150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 616.221590][ T31] RAX: ffffffffffffffda RBX: 00007fc32d693880 RCX: 00007fc32cea7407 [ 616.230699][ T31] RDX: 00000000000a0800 RSI: 00005617c96e4ff0 RDI: ffffffffffffff9c [ 616.238864][ T31] RBP: 00005617c96d7910 R08: 0000000000000000 R09: 0000000000000000 [ 616.246938][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005617c96eae20 [ 616.255033][ T31] R13: 00005617c96e5190 R14: 00007ffdaaa20218 R15: 00005617c96eae20 [ 616.263443][ T31] [ 616.266626][ T31] INFO: task udevd:15539 blocked for more than 144 seconds. [ 616.273937][ T31] Not tainted syzkaller #0 [ 616.281807][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.290642][ T31] task:udevd state:D stack:22424 pid:15539 tgid:15539 ppid:5201 task_flags:0x400040 flags:0x00080002 [ 616.302683][ T31] Call Trace: [ 616.306057][ T31] [ 616.309033][ T31] __schedule+0x14ea/0x5050 [ 616.313607][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 616.318789][ T31] ? __pfx___schedule+0x10/0x10 [ 616.323694][ T31] ? schedule+0x90/0x360 [ 616.328083][ T31] schedule+0x164/0x360 [ 616.333186][ T31] io_schedule+0x7f/0xd0 [ 616.337638][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 616.342986][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 616.349014][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 616.354617][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 616.360560][ T31] do_read_cache_folio+0x1ad/0x590 [ 616.365711][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 616.371525][ T31] read_part_sector+0xb6/0x2b0 [ 616.377013][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 616.382427][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 616.388272][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 616.394304][ T31] bdev_disk_changed+0x765/0x14c0 [ 616.400116][ T31] ? bdev_open+0xe0/0xd30 [ 616.404486][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 616.410124][ T31] blkdev_get_whole+0x380/0x510 [ 616.415015][ T31] bdev_open+0x31e/0xd30 [ 616.419396][ T31] blkdev_open+0x470/0x610 [ 616.423852][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 616.429078][ T31] do_dentry_open+0x7ce/0x1420 [ 616.434675][ T31] vfs_open+0x3b/0x340 [ 616.439403][ T31] ? path_openat+0x346e/0x3e20 [ 616.444197][ T31] path_openat+0x3486/0x3e20 [ 616.449095][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 616.454773][ T31] ? getname_flags+0xb7/0x540 [ 616.460010][ T31] ? __pfx_path_openat+0x10/0x10 [ 616.464975][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 616.470040][ T31] do_filp_open+0x22d/0x490 [ 616.474596][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 616.480066][ T31] ? _raw_spin_unlock+0x28/0x50 [ 616.484941][ T31] ? alloc_fd+0x64b/0x6c0 [ 616.489451][ T31] do_sys_openat2+0x12f/0x220 [ 616.494174][ T31] ? __pfx___up_read+0x10/0x10 [ 616.499035][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 616.504276][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 616.509663][ T31] __x64_sys_openat+0x138/0x170 [ 616.514557][ T31] do_syscall_64+0xe2/0xf80 [ 616.519433][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.525576][ T31] ? trace_irq_disable+0x37/0x100 [ 616.531131][ T31] ? clear_bhb_loop+0x60/0xb0 [ 616.537067][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.543015][ T31] RIP: 0033:0x7fc32cea7407 [ 616.547621][ T31] RSP: 002b:00007ffdaaa20150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 616.556188][ T31] RAX: ffffffffffffffda RBX: 00007fc32d693880 RCX: 00007fc32cea7407 [ 616.564197][ T31] RDX: 00000000000a0800 RSI: 00005617c96d8360 RDI: ffffffffffffff9c [ 616.572400][ T31] RBP: 00005617c96d7910 R08: 0000000000000000 R09: 0000000000000000 [ 616.580562][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005617c96efe00 [ 616.588937][ T31] R13: 00005617c96e5190 R14: 00007ffdaaa20218 R15: 00005617c96efe00 [ 616.597374][ T31] [ 616.600516][ T31] INFO: task udevd:15545 blocked for more than 144 seconds. [ 616.609619][ T31] Not tainted syzkaller #0 [ 616.626077][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.634805][ T31] task:udevd state:D stack:22424 pid:15545 tgid:15545 ppid:5201 task_flags:0x400040 flags:0x00080002 [ 616.662370][ T31] Call Trace: [ 616.665718][ T31] [ 616.684259][ T31] __schedule+0x14ea/0x5050 [ 616.721685][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 616.727060][ T31] ? __pfx___schedule+0x10/0x10 [ 616.731981][ T31] ? schedule+0x90/0x360 [ 616.736430][ T31] schedule+0x164/0x360 [ 616.742354][ T31] io_schedule+0x7f/0xd0 [ 616.746731][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 616.752220][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 616.758510][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 616.764126][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 616.770002][ T31] do_read_cache_folio+0x1ad/0x590 [ 616.775337][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 616.782846][ T31] read_part_sector+0xb6/0x2b0 [ 616.788958][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 616.794380][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 616.800314][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 616.806570][ T31] bdev_disk_changed+0x765/0x14c0 [ 616.811758][ T31] ? bdev_open+0xe0/0xd30 [ 616.818759][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 616.824290][ T31] blkdev_get_whole+0x380/0x510 [ 616.830322][ T31] bdev_open+0x31e/0xd30 [ 616.835222][ T31] blkdev_open+0x470/0x610 [ 616.840290][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 616.846762][ T31] do_dentry_open+0x7ce/0x1420 [ 616.851605][ T31] vfs_open+0x3b/0x340 [ 616.855706][ T31] ? path_openat+0x346e/0x3e20 [ 616.860873][ T31] path_openat+0x3486/0x3e20 [ 616.865563][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 616.871317][ T31] ? getname_flags+0xb7/0x540 [ 616.876446][ T31] ? __pfx_path_openat+0x10/0x10 [ 616.881440][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 616.887522][ T31] do_filp_open+0x22d/0x490 [ 616.892176][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 616.898543][ T31] ? _raw_spin_unlock+0x28/0x50 [ 616.903549][ T31] ? alloc_fd+0x64b/0x6c0 [ 616.908014][ T31] do_sys_openat2+0x12f/0x220 [ 616.912890][ T31] ? __pfx___up_read+0x10/0x10 [ 616.918117][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 616.923472][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 616.931289][ T31] __x64_sys_openat+0x138/0x170 [ 616.936511][ T31] do_syscall_64+0xe2/0xf80 [ 616.941067][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.949161][ T31] ? trace_irq_disable+0x37/0x100 [ 616.954352][ T31] ? clear_bhb_loop+0x60/0xb0 [ 616.959467][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.965421][ T31] RIP: 0033:0x7fc32cea7407 [ 616.976433][ T31] RSP: 002b:00007ffdaaa20150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 616.984933][ T31] RAX: ffffffffffffffda RBX: 00007fc32d693880 RCX: 00007fc32cea7407 [ 616.993704][ T31] RDX: 00000000000a0800 RSI: 00005617c96fd060 RDI: ffffffffffffff9c [ 617.002725][ T31] RBP: 00005617c96d7910 R08: 0000000000000000 R09: 0000000000000000 [ 617.012097][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005617c96ebba0 [ 617.021440][ T31] R13: 00005617c96e5190 R14: 00007ffdaaa20218 R15: 00005617c96ebba0 [ 617.029867][ T31] [ 617.033110][ T31] [ 617.033110][ T31] Showing all locks held in the system: [ 617.067516][ T31] 1 lock held by khungtaskd/31: [ 617.072433][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 617.106492][ T31] 3 locks held by kworker/u8:2/36: [ 617.111668][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 617.136398][ T31] #1: ffffc90000ac7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 617.149579][ T31] #2: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 617.168597][ T31] 1 lock held by dhcpcd/5496: [ 617.173357][ T31] #0: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 617.182992][ T31] 2 locks held by getty/5597: [ 617.188806][ T31] #0: ffff88814d5890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 617.199295][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 617.209878][ T31] 3 locks held by kworker/u8:22/6384: [ 617.215282][ T31] #0: ffff88814c921948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 617.228301][ T31] #1: ffffc9000c01fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 617.244515][ T31] #2: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 617.255345][ T31] 3 locks held by kworker/u8:31/6395: [ 617.262270][ T31] #0: ffff8881432b4148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 617.278720][ T31] #1: ffffc9000c147bc0 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 617.294022][ T31] #2: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd6/0x660 [ 617.305402][ T31] 1 lock held by udevd/15530: [ 617.310626][ T31] #0: ffff888141f0e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 617.321833][ T31] 1 lock held by udevd/15539: [ 617.332906][ T31] #0: ffff888025abf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 617.345271][ T31] 1 lock held by udevd/15545: [ 617.353824][ T31] #0: ffff888025b89358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 617.363899][ T31] 1 lock held by udevd/15548: [ 617.369234][ T31] #0: ffff888025be5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 617.379529][ T31] 1 lock held by syz-executor/17469: [ 617.385290][ T31] #0: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 617.395061][ T31] 3 locks held by kworker/0:31/24579: [ 617.402061][ T31] 5 locks held by syz-executor/29060: [ 617.408528][ T31] #0: ffff888056b40ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 617.418929][ T31] #1: ffff888056b400c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 617.429080][ T31] #2: ffffffff8fb37328 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 617.440186][ T31] #3: ffff88807f6fdb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 617.450037][ T31] #4: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 617.463476][ T31] 5 locks held by syz.1.6270/29392: [ 617.469940][ T31] #0: ffffffff8f99c250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 617.480651][ T31] #1: ffffffff8f7056f0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 617.490865][ T31] #2: ffffffff8f7058b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 617.502904][ T31] #3: ffff888031c28f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 617.515547][ T31] #4: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 617.525331][ T31] 1 lock held by syz.3.6282/29440: [ 617.531560][ T31] 3 locks held by syz.2.6284/29450: [ 617.537178][ T31] #0: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 617.546770][ T31] #1: ffff88805d940788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_stop+0x126/0x240 [ 617.557894][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 617.571487][ T31] [ 617.573915][ T31] ============================================= [ 617.573915][ T31] [ 617.589080][T29450] mac80211_hwsim hwsim66 wlan0: entered promiscuous mode [ 617.597929][ T31] NMI backtrace for cpu 1 [ 617.597948][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 617.597970][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 617.597983][ T31] Call Trace: [ 617.597991][ T31] [ 617.597999][ T31] dump_stack_lvl+0xe8/0x150 [ 617.598031][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 617.598060][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 617.598095][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 617.598126][ T31] sys_info+0x135/0x170 [ 617.598150][ T31] watchdog+0xf90/0xfe0 [ 617.598178][ T31] ? watchdog+0x209/0xfe0 [ 617.598218][ T31] kthread+0x726/0x8b0 [ 617.598245][ T31] ? __pfx_watchdog+0x10/0x10 [ 617.598265][ T31] ? __pfx_kthread+0x10/0x10 [ 617.598293][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.598323][ T31] ? __pfx_kthread+0x10/0x10 [ 617.598347][ T31] ret_from_fork+0x51b/0xa40 [ 617.598382][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 617.598413][ T31] ? __switch_to+0xc82/0x1410 [ 617.598445][ T31] ? __pfx_kthread+0x10/0x10 [ 617.598470][ T31] ret_from_fork_asm+0x1a/0x30 [ 617.598515][ T31] [ 617.598524][ T31] Sending NMI from CPU 1 to CPUs 0: [ 617.686527][T29392] lo speed is unknown, defaulting to 1000 [ 617.690680][ C0] NMI backtrace for cpu 0 [ 617.690696][ C0] CPU: 0 UID: 0 PID: 29392 Comm: syz.1.6270 Not tainted syzkaller #0 PREEMPT(full) [ 617.690718][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 617.690730][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 617.690758][ C0] Code: e8 8e c5 92 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 10 fb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 617.690775][ C0] RSP: 0018:ffffc9000472f0b0 EFLAGS: 00000002 [ 617.690791][ C0] RAX: 1ffffffff3466600 RBX: 00000000000003fd RCX: 0000000000000000 [ 617.690804][ C0] RDX: 00000000000003fd RSI: 000000000007ffff RDI: 0000000000080000 [ 617.690816][ C0] RBP: ffffffff9a333530 R08: ffff8881482b8237 R09: 1ffff11029057046 [ 617.690830][ C0] R10: dffffc0000000000 R11: ffffffff8531b120 R12: dffffc0000000000 [ 617.690844][ C0] R13: 0000000000000000 R14: ffffffff9a3332a0 R15: 0000000000000000 [ 617.690856][ C0] FS: 00007f85f2d116c0(0000) GS:ffff8881256f8000(0000) knlGS:0000000000000000 [ 617.690872][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.690884][ C0] CR2: 00007f51e5f0d286 CR3: 00000000a5ac0000 CR4: 00000000003526f0 [ 617.690901][ C0] Call Trace: [ 617.690908][ C0] [ 617.690917][ C0] wait_for_lsr+0x1a1/0x2f0 [ 617.690949][ C0] serial8250_console_write+0x1348/0x1ba0 [ 617.690989][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 617.691013][ C0] ? console_flush_all+0x123/0xb20 [ 617.691038][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 617.691061][ C0] ? console_flush_all+0x123/0xb20 [ 617.691081][ C0] console_flush_all+0x718/0xb20 [ 617.691103][ C0] ? console_flush_all+0x123/0xb20 [ 617.691127][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 617.691150][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 617.691175][ C0] console_unlock+0xd1/0x1c0 [ 617.691193][ C0] ? vprintk_emit+0x2cf/0x560 [ 617.691210][ C0] ? __pfx_console_unlock+0x10/0x10 [ 617.691232][ C0] ? vprintk_emit+0x2cf/0x560 [ 617.691248][ C0] ? vprintk_emit+0x2cf/0x560 [ 617.691267][ C0] vprintk_emit+0x485/0x560 [ 617.691286][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 617.691311][ C0] _printk+0xdd/0x130 [ 617.691341][ C0] ? __pfx__printk+0x10/0x10 [ 617.691370][ C0] ? mutex_is_locked+0x17/0x50 [ 617.691387][ C0] ? rtnl_is_locked+0x15/0x20 [ 617.691412][ C0] ? __ethtool_get_link_ksettings+0xd7/0x170 [ 617.691437][ C0] ib_get_eth_speed+0x468/0x7f0 [ 617.691463][ C0] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 617.691495][ C0] ? ib_query_port+0x384/0x830 [ 617.691523][ C0] siw_query_port+0x3c/0x4a0 [ 617.691543][ C0] ib_setup_port_attrs+0x26e/0x2140 [ 617.691564][ C0] ? rcu_is_watching+0x15/0xb0 [ 617.691583][ C0] ? trace_contention_end+0x39/0x100 [ 617.691612][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 617.691631][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 617.691652][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.691683][ C0] ? device_add+0x70b/0xb70 [ 617.691714][ C0] add_one_compat_dev+0x448/0x650 [ 617.691741][ C0] ? down_read+0x272/0x2e0 [ 617.691763][ C0] rdma_dev_init_net+0x243/0x2f0 [ 617.691790][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 617.691817][ C0] ? trace_kmalloc+0x1f/0xb0 [ 617.691833][ C0] ? __kmalloc_noprof+0x42d/0x7e0 [ 617.691854][ C0] ops_init+0x35c/0x5c0 [ 617.691881][ C0] setup_net+0x118/0x340 [ 617.691901][ C0] ? __pfx_setup_net+0x10/0x10 [ 617.691922][ C0] ? preinit_net+0x47d/0x780 [ 617.691942][ C0] copy_net_ns+0x50e/0x730 [ 617.691970][ C0] create_new_namespaces+0x3e7/0x6a0 [ 617.692000][ C0] ? security_capable+0x7e/0x2c0 [ 617.692026][ C0] unshare_nsproxy_namespaces+0x11a/0x160 [ 617.692055][ C0] ksys_unshare+0x4f4/0x900 [ 617.692082][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 617.692103][ C0] ? rcu_is_watching+0x15/0xb0 [ 617.692126][ C0] __x64_sys_unshare+0x38/0x50 [ 617.692146][ C0] do_syscall_64+0xe2/0xf80 [ 617.692165][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.692182][ C0] ? trace_irq_disable+0x37/0x100 [ 617.692200][ C0] ? clear_bhb_loop+0x60/0xb0 [ 617.692222][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.692240][ C0] RIP: 0033:0x7f85f1d9aeb9 [ 617.692256][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.692271][ C0] RSP: 002b:00007f85f2d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 617.692290][ C0] RAX: ffffffffffffffda RBX: 00007f85f2015fa0 RCX: 00007f85f1d9aeb9 [ 617.692303][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 617.692315][ C0] RBP: 00007f85f1e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 617.692326][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.692337][ C0] R13: 00007f85f2016038 R14: 00007f85f2015fa0 R15: 00007ffe5d379b68 [ 617.692361][ C0] [ 617.729395][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 617.729418][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 617.729443][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 617.729457][ T31] Call Trace: [ 617.729466][ T31] [ 617.729475][ T31] vpanic+0x1e0/0x670 [ 617.729510][ T31] panic+0xc5/0xd0 [ 617.729536][ T31] ? __pfx_panic+0x10/0x10 [ 617.729564][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 618.257979][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 618.264153][ T31] watchdog+0xfda/0xfe0 [ 618.268346][ T31] ? watchdog+0x209/0xfe0 [ 618.272685][ T31] kthread+0x726/0x8b0 [ 618.276770][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.281483][ T31] ? __pfx_kthread+0x10/0x10 [ 618.286121][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.291331][ T31] ? __pfx_kthread+0x10/0x10 [ 618.295929][ T31] ret_from_fork+0x51b/0xa40 [ 618.300534][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 618.305651][ T31] ? __switch_to+0xc82/0x1410 [ 618.310337][ T31] ? __pfx_kthread+0x10/0x10 [ 618.314933][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.319718][ T31] [ 618.323350][ T31] Kernel Offset: disabled [ 618.327679][ T31] Rebooting in 86400 seconds..