last executing test programs: 9.572816151s ago: executing program 1 (id=6166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000380), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2005, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000340)=""/44, 0x2c}], 0x2}}], 0x1, 0x40010003, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000240)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r2, 0x3ff, 0xfffffffffffffffd, 0x4}) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @none, 0xe}, 0xa) 9.327632759s ago: executing program 1 (id=6168): socket$nl_generic(0x10, 0x3, 0x10) 9.268872736s ago: executing program 1 (id=6169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xc7c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004) r1 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(r1, &(0x7f0000000100)="0bfb6027f7cf69f4148499207a06e859438804f1ff9bbfc4ed3ddaa0700b459836a648316060de23f8f12835a0d297fc997c390c15927a82cb8e5b0fa4c26b2351c475e68e6517dec1f1ae0782cb5faaf00e58194bf59b37d94302e1f0765287ff460b6ab602f2677b62ca479eb33ba00074a1632feb3784898b295f379dac50e897f907ee7b77224a66b96a5ba502a36b31c9966f93153d3dd8b73b011ab04bb3c98c1880b8a97f09d925537aba115411fc60fc2fec173adbaeeeef32f3532530f01a9b74", 0xc5, 0x3) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) recvfrom$rose(r2, &(0x7f0000000280)=""/160, 0xa0, 0x2000, &(0x7f0000000340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x4, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x40) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x10900, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={r4, 0xccca}, &(0x7f0000000480)=0x8) r5 = socket$l2tp6(0xa, 0x2, 0x73) accept$netrom(r2, &(0x7f00000004c0)={{0x3, @rose}, [@null, @rose, @remote, @remote, @bcast, @netrom, @rose, @bcast]}, &(0x7f0000000540)=0x48) ioctl(r0, 0x2, &(0x7f0000000580)="2231a66d6761539f5a6358e98469782e6c0271e8e43107a611acff07f9d966d3c6c980743b0c388fed0b4649ce5990d751e7e3050a291fe8722efe64884dc77700574cc7d0fecbe37f6f8792ad8b3c26957db84dc89cce899b1101b51058427f6a14ffd8f28ce4a5ed525d") setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000600)={0x0, {{0x2, 0x4e21, @multicast2}}}, 0x88) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, &(0x7f00000006c0)={0x0, 0x100}) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000800)={0x3, 0xf, 0xd7, &(0x7f0000000700)=""/215}) write(r2, &(0x7f0000000840)="11de87a220d2923f78c94083", 0xc) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}}, 0x4000080) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000009c0)={0x2f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 'ovf\x00', 0x0, 0x3, 0x70}, 0x2c) write$tun(r2, &(0x7f0000000a00)={@val={0x0, 0x8863}, @void, @ipv4=@gre={{0x2c, 0x4, 0x0, 0x6, 0x3a8, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x24, 0x43, 0x0, 0x3, [0x0, 0xf, 0xd7, 0x8000, 0xf, 0xffff88b1, 0x0, 0x101]}, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0x37, 0x3, [{0x1, 0x12, "8655455883a2a8afb78888aa46d9a37a"}, {0x0, 0x10, "67804998629cb9ace4f1cf89399c"}, {0x2, 0xf, "1120c470c585d65dca49bebe09"}]}, @ssrr={0x89, 0x7, 0x13, [@empty]}, @lsrr={0x83, 0x7, 0xd6, [@multicast2]}, @lsrr={0x83, 0x2b, 0xcf, [@rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x53, 0x2, [0x7], "af35b591edabc21aebe21fa29e04e3d0d3796490ba682c94dcefc62e77f961e0d2ce3ee46db6e5957c1d6269af653d6a876f61374a8d2d2f5384768be8f20cdc674a5a099af63336ec03ffc0beee2ed7314f7b"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x715, 0xde7, 0x5], "dc2c38353aa2caab174c06229f20bc8c92d5db8ab6b6693d50a47eb340970204fd9f9d4e5fcafd95cb9bd9a5ef706a4b65a0ce182fae2dae4805bb9e2aa24721827b6936da63b9c14ed785085d0732aaf239e877bda77bf6ecca127ee4fb73693bb4ee7d1487007cc02438abf1e5d3aada2ea2a546dcfe4a1e9c4077606d3493ed3d55821b5442e5c2b8f7b9506ffe5bb3c965325628f7e35e1fd6400b23edfd84fee591aeb16516b39b349f5b1af98128b835cb43fd3e48a3ccac0f9488bcf11d3ce949a47b59ddf94353b6f8407afd7f436b2f69b2a3ecf1bbfd5b513d04a7befe9965a2"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x6, 0x200], "5483b0976e363fe72a11e8cef54687b8df0f81e8e161a7d871accf0404106eab32c4837a539da1caf6f4283851e07bb77ec4595f2ed4cfd376c6afa3e94376c8e737b5598edf5f192f3f7f5eb0cbaf9e5aad5124eb9032ed4fd6bbe38f68e3edede741edfeebd7eea98149c706fead3c1eae57a3d515ed8939ac4f7230af32282b973653fc79bda46de540543c0d088d2f83146b4313cee7d3bdc684dfddefd4abd82cb54fe1329ac25c1eada8066f7a5f72c4a313b491c6307380590617a381e139f620d043f91aea594f688ffe4d15e96059e0822c69fcca278b71fc84858319e8597dde67bf753c1f234a5d037d3576382e"}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x2, 0x2, 0x1, 0x2, 0x3}, 0x1, {0xa351}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0xfc, 0x1, 0x0, 0x1, 0x3, 0x5}, 0x2, {0xfffffff9, 0x6, 0x2, 0x17, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "7a045ef38412f04149dfe056dae03b0e9ba45feb8f68bbbd73e76c46f1d2ebf04b70d61a7eb0006c579a9750a1c4f7c8cdc52d0d2c98d39b251bf77adc33e8dcbea5769adb4daffcac5e7f802c58936147a4674e7e478dbd111aa258cf2311d83c7dd8fb25da54d72edaae7bfc4779541e72e3633aa4222feeb22e9a8c"}}}}, 0x3ac) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r2, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)=r2}, 0x20) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x200, 0x70bd29, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040005}, 0x800) write$cgroup_pid(r2, &(0x7f0000000f80)=0xffffffffffffffff, 0x12) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000fc0)={'batadv0\x00'}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000001100)={&(0x7f0000001000), 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0xbd85fe8ef090928b}, 0x4001) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000001140)={0x16, 0x80, 0x8001, 0xf, 0x1000}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x1, &(0x7f0000001180)=0x10000, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000011c0), r2) 9.117265236s ago: executing program 1 (id=6170): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000802) r0 = socket(0x1, 0x80801, 0x1) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xe9, 0x8f, &(0x7f00000000c0)="7c2e15f6f14c42d24abdc714ceb1aaea5621ffd129e33d78acba99e89d5d53178161f7e27a9228a13d9ab54d2d994620e1ba94892ef617365d931f3dc11c3a992ef4700068c8c6c8de64ce00811af9916a687cc978321ffbcb5567dbcab01239659bf55d67a8b248386b534d7298859a15a0e74f33bad27585904c8634d605b3764b773d1f91c25e1cc899780f698eb5a7b86bac2c16014b11cd64efb7e89308290d037ec4d8bb6f6a256d14e4a3bcb2db41109c577a0f87ab55723bb9987baa36d63cd847b98dddc18666dbda46ed6fa37cff5acc65cdf3728d6cd96d8b992119d0764bb330b71f4a", &(0x7f00000001c0)=""/143, 0x7ff, 0x0, 0x1000, 0x74, &(0x7f0000000b80)="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", &(0x7f0000000300)="c19f83a19a190635175ac5595835d255a92b2d074518c6b9eeb4a95021d885b8be9eea61eea6ce2cff23b7344bdb8bc20d3deb27e35f2b0cc1585e321e4181822c354bdb20cb7cd8d93a2e475fdeb1bdfd77884046df8bb81a6f8cdd0e2c6763226093243e735bdf2c769762f4116902d286d242", 0x3, 0x0, 0x831}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001b80)="b3d8033fd31538ded1ad9a28bef2686e6ed197776e8001e5fe20206f5a7c30887fb2d643d2d51874649d9463ac856605400b2bf2d5504e60aa5b0eb5aea35a66399664e746ffad3aaf8511f4c7a47f68cc521096f02471cc1deebe4145912b61c0d240b2cccb8c344b73700af1a79d8c7800a71d7f05a6c009562dfcbb7cd7be6cdd0f317bb53b8cfd1041af9ad0f7dd630147f37e7a29284deef1b55dcce2a3930816bdfd4a28a4941eac6a97deb89164a1191fddd2b5f4fcd5fd7c8d61872c242b01df58e3a252243e", 0xca) sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x101}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 4.449602295s ago: executing program 2 (id=6205): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket(0x2a, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20001) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x8}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="0500350010000400080034"], 0x2c}, 0x1, 0x0, 0x0, 0x24020000}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980600000000001800128008000100677265000c000280080004000400000047ffb635b2ade02df60787061927b520a3d5e4b64d58"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000003c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @local}, 0x14) 4.309948057s ago: executing program 2 (id=6206): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001200)={{0xffffffffffffffff, &(0x7f0000000000)='[\x00', 0x20000, &(0x7f0000000200)={@_ha_fsid={[0x2, 0xf0c]}, {0x92, 0x9, 0xa1d9, 0x7fff}}, 0x2, &(0x7f0000000100), &(0x7f0000000140)}, 0x0, &(0x7f00000011c0)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x6e) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000804) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="38120000", @ANYRES16=r2, @ANYBLOB="000229bd3db6968045000300000000000000f69765fff5d1f3fe819f45b8fe6318b6de9cb0ed849e89748e4d4e1d0c9e79", @ANYRES32=r8, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYBLOB="b5edcfbed8f1b3090df1add97298a5796c3c232c3160bd0f2c97be8ab5aec8e06810f925e99fd70f7dc0c157db85ab84d4d4f4823b5c2ca4f91cb611f7718093740bffd141c0e9ff231b9c903eb07c6bf4b737327ea1a8f020b0c94e77658846238b437d6cf96f1bacd121864fd1e76a33c24da9ee31c1bea19aba54c2b07cba8a5e18f0e597639f305c306f3571c043535b1c07ecf0ae8341b949241d5d313e26a387340969b0a1eff66004ab8cb7b91b0a59296e2e37958b9e1abb5345", @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.368900447s ago: executing program 2 (id=6215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000b000000000091c2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000a5a4df27838c00"/22], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, r1}, 0xfffffffffffffc96) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x6, 0xfffffffc) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) (async) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) r12 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) 3.236100386s ago: executing program 2 (id=6216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x4, 0x4, 0x3c8, 0xffffffff, 0x1a0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REJECT={0x0, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@private0, @local, [0xff, 0xff000000, 0xff000000, 0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x3a, 0xe6, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xe9a5, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xff2b) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x2, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x12, 0xc7e1, 0xd, 0x9, 0x2, 0xda, 0x7, 0x8f, 0x2, 0x4, 0x0, 0x1, 0x6, 0x9, 0x0, 0xffffff02, [0x8]}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x325) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x1}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x44, 0x3}]}, {0x0, [0x61, 0x61, 0x30, 0x5f]}}, &(0x7f00000001c0)=""/135, 0x3a, 0x87, 0x0, 0xa2e}, 0x28) (async) connect$x25(r5, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 3.166952467s ago: executing program 2 (id=6218): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000140)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0x400, 0x70bd2d, 0x24dfdbfb}, 0xfffffffffffffff9}, 0x1, 0x0, 0x0, 0x240000d0}, 0x8040) 3.097588889s ago: executing program 4 (id=6220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3, 0x0, 0x0, 0x700}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}}, 0x32) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 2.918653903s ago: executing program 4 (id=6224): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000f500711050000000000095000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000001e3800001800128008000100736974000c00028008000300e000002108000a00c533e49930b8e7e2f119aca2d8e9b262d3abe1bf90bfbaa5910d214cf32182fea886a22c75511e7a7e5b4eb8ee57b0a2bd577d478902db1f8016d271decc3811039346fecbd73809a585fadde5fcd3475ab596b5c5fcd756574756fc124dd5fc108797d70f", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40440b0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0xfffc, @local}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000240)={'virt_wifi0\x00'}) 2.809263559s ago: executing program 0 (id=6225): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="190000000000000000", @ANYRES32=0x0, @ANYBLOB="000000fd"], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="190000000000000000", @ANYRES32=0x0, @ANYBLOB="000000fd"], 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) 2.621932183s ago: executing program 0 (id=6226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x5}) (async) r1 = socket(0x40000000015, 0x5, 0x2) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}, 0x108) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080600000000000000000000003d6163ec166dee8a6b7673b1800ed66cb7dfe72830b9efd89fc4422de42c1457894b9e682c19d8e8a534a323eeeb7299dac4442ead898e1aa3dc2b4cfd2e16d8470d9baa78f30b4f55a71f760631930cdd13eaab6ad70e808edcd1c98f4d828628588aee01cdadc9aa607a002b5fd59ab2fc446d5b209ccf4b568ce85ccfca6f2c4823de4bac88321d8042cbc44d936b594be83f6748c29ff529ccdca09e6a68798a62e97d9e01ae896c58a7cebcf824b67fd71026a512c53a176699f63a4fbf2b443174b7d8c3229f0d6b8d208b40bbeb6169442b3ac3c17d163f09483478cc40f80a1f", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) close(0x3) (async) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) (async) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f00000002c0)="3d3bd12d1f529cc31b29491839061983f1a692623c7023528fe397c73b95aba65955b20b9d40592069c2d83137aa86c1ea1478fac524106a567a7f35b6a47cc458a405fd2589ea84a0aa92d81782f644d5de773e4887a0c718b105f3f861caba9bbf4eb4b85058259859880f6088ac5ee27d2f451a64134dd8c6cb78064d286f5102b77de4b3aa99b85efd813a212bfa360022a3b4d7f6693ba2a7e1e23e7ee66623ff35b054c6809c89d6edf23982fde6ca93597038acfa8d3721ebfe8b27ca424c92304b8faf8971a616b2e0777ca50a68506798f0aca8f70eb74dd2facce20b090eae0a9259c7", 0xe8}], 0x1, 0x0) (async) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b70700000000deff62116d000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 2.320794528s ago: executing program 4 (id=6228): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) setsockopt(r0, 0x7, 0x8, &(0x7f00000000c0)="43c92a01273c2912ec62d6a07742788ed0954a2748f17d6621a98b2301fa0eb79dc7dc07667cb05e6ba3c6817551d5bf5f34a54481d28bc066cf5a0a5cda833d12436a967ad50973cc931664658f6db52cfc56791f9ac01539df3ac5f079484f2a471c6f40f79ad4b6037c5fb5168e9eadb17489e2770bd7f58c9bcd922101cbb87fc31076f9cc9f9717ad071cfa1a26bc9cf5f6d387dfb78b1720903686e069c15d8e20950b6b4d469549df4a21a8338689bd9bfebec084428cf60f4b571b72cb2ebee566c37b850478c5386ab8d3abf4b003566989ddbf43", 0xd9) recvmmsg$unix(r0, &(0x7f0000001cc0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000001800)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/199, 0xc7}, {&(0x7f0000001440)=""/215, 0xd7}, {&(0x7f0000001540)=""/173, 0xad}, {&(0x7f0000001600)=""/210, 0xd2}, {&(0x7f0000001700)=""/223, 0xdf}], 0x7, &(0x7f0000001880)}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/81, 0x51}, {&(0x7f00000019c0)=""/207, 0xcf}, {&(0x7f0000001ac0)=""/151, 0x97}, {&(0x7f0000001b80)=""/221, 0xdd}], 0x4}}], 0x2, 0x1, &(0x7f0000001d40)={0x77359400}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}}, 0x4, 0x80}, &(0x7f0000001e40)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001e80)={0x736a, 0x400, 0x2, 0x8000, 0x9, 0x59, 0x6, 0x100, r2}, &(0x7f0000001ec0)=0x20) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001f00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff, 0x0, 0x0, 0xf, 0x4a, 0x9}, 0x20) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000001f40), &(0x7f0000001f80)=0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002040)={'gretap0\x00', &(0x7f0000001fc0)={'syztnl2\x00', 0x0, 0x10, 0x20, 0x3, 0x6, {{0x13, 0x4, 0x3, 0xd, 0x4c, 0x65, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8e, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@empty, 0x5}, {@multicast1, 0x900000}]}, @timestamp_addr={0x44, 0x14, 0xfd, 0x1, 0xb, [{@rand_addr=0x64010102, 0x20000000}, {@remote, 0x81}]}, @generic={0x83, 0x4, "fbb8"}, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000002080)={0x0, 0x0, 0x81, r6, 0xc}, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000020c0)) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000002100), 0x4) sendto$inet(r4, &(0x7f0000002140)="5230517eadb61a317b221a6b2e336e10f1ef7d70a4c91fd09e6a7eafd6981858e82d7eb6e7657dbca845222ff3ef1c393ea3acb9e6", 0x35, 0x80, &(0x7f0000002180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = socket(0xb, 0x2, 0x6697) sendmsg$inet6(r5, &(0x7f0000002600)={&(0x7f00000021c0)={0xa, 0x4e21, 0x0, @private2, 0xfffffaf0}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000002200)="aaa4deec6a4d0ee7fa06624683539642e1fe5bc71cdc19204d05f53fa1", 0x1d}, {&(0x7f0000002240)="86b8e2cd756191c48367aef8818b03ce308621615ad23ee2b8bcdbcb2443597d5de804", 0x23}, {&(0x7f0000002280)="ac0bcc39160034585a70475f22f6ec37fae21d9352a57ca5e71226dc6932e5e15691969cfa56a94fe57ecc928b197903ac709faf7efc0b6abd75312d276429f612e4f2d1193c851cb592ab9b0f6bf2653f0a0c831766029b0c7942b8cacd128c8feb91d460fc86228d72616a5bac8a8992af37f3f518393725f6e6ba66de38ef03afce5a5524b74ca12d78d5f0608cfc570cdcf61d4cdc10e3a78f03c9229a26ca5dfdcf0b0539554e80f64ab3729661a8665fa4e0d6a78a2179d591e5c18efd635a511e6d60d52bbe0e932b11b54904bcc12b953b7032fbf837b4ae9cd020eda9f7584d", 0xe4}, {&(0x7f0000002380)="fb85e4c39481", 0x6}, {&(0x7f00000023c0)="d1b6dc9a96d7cb3ccb734fdef880e6815308576e3f18126d2bedc612ddb72a22f1ba7440e1d41489c3db6ea8d4efb0312cf606fbc68a4dc947d91428236b8bf3232f8dffdcd5b98d1b22899a4444af9090090f1f98915f06eeb92d4a795e6e6e1425b12e87c7752caae469bbcf13d280ffaa82e337586e572b385af099de173bd15071130899d1f677e8657f8de7343ae41e0b4a4c2a043e6c77273839139452217fd1e8c68357255c921cf546942aaccdf5765ba6f4e5f469ccd40dbab08718e272a21ffefff4568e8d23a2049a", 0xce}], 0x5, &(0x7f0000002540)=[@flowinfo={{0x14, 0x29, 0xb, 0x9d49}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x33, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0xf}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x88}, 0x4) connect$inet(r1, &(0x7f0000002640)={0x2, 0x4e24, @local}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000026c0), r8) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000002880)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002840)={&(0x7f0000002700)={0x114, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_IE={0xd5, 0x2a, [@random_vendor={0xdd, 0x71, "b9834ca131ae57431b79e05ec72ebc1fcf9df1448bb1bc4acd631c3ed488b4fd566a5214c3227ec06dcd67ec6c69b1e9b675437bf19906ebe0ab84cd8a475794c2b49ea54e9c620aa7361350eb254ba00cb8082d2c6138fa6ab6d9798ec1a98ff16eab849edbcd3d17037347031c842182"}, @ibss={0x6, 0x2, 0xfff8}, @tim={0x5, 0x39, {0x6, 0x86, 0x0, "88c72938ca5d94484ae6be098535097184517618815b2f4956e1b2c20e8b50852c773f71133fb7ce9e34bf531bc1b77c1719642d387e"}}, @ht={0x2d, 0x1a, {0x400, 0x0, 0x0, 0x0, {0x1, 0x1cee, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x54, 0x7}}, @dsss={0x3, 0x1, 0x9d}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x48811}, 0x4000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000028c0)) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000002900)=0x202003) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000002940)=0x80) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000002980)={0x1, 0x2, "ef08e7", 0x81, 0x8}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000029c0), &(0x7f0000002a00)=0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x1c, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x8000) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000002b40), &(0x7f0000002b80)=0x10) sendmsg$802154_dgram(r8, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000002c80)={&(0x7f0000002c00)="b008b6d639ef5ec8ed11852096c4a8a5c3ef118885d5090a472c3ff0bf66536c5b496912c1766fd0fccb2b8a34965f26a3e09a5181a8da5e4b370bc3b1a58f22f261e1cf1d139776f0264afe2bb07195d36a153c", 0x54}, 0x1, 0x0, 0x0, 0xc810}, 0x180) 2.272094868s ago: executing program 0 (id=6229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom(r0, 0x0, 0x0, 0x22, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000240)={0x5, 0x7, 0x9, @random="07c0e7e57d29", 'ipvlan0\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000001880)='syzkaller\x00', 0x3, 0x40, &(0x7f00000018c0)=""/64, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendfile(r3, r2, 0x0, 0x3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x400}) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000000)="4112fb7c087ee5", 0x7) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x9, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4008800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0xffffffffffffff10, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], 0x30}, 0x1, 0x0, 0x0, 0xc840}, 0x4006000) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000100)=0xd, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000001c0)={r4, &(0x7f0000000080)='][\x00', 0x10641, &(0x7f0000000100)={@align=0x6, {0x802, 0x3, 0x5, 0x2}}, 0x2, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}) connect$bt_sco(r9, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 2.253021368s ago: executing program 3 (id=6230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket(0x1e, 0x800, 0xa) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x3, 0x3, 0x5, 0x2, 0x3}, {0x8, 0x2, 0x8, 0x8, 0x805, 0xc}, 0xfffff800, 0x8, 0x121e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3ace9b85e05b5271}, @TCA_TBF_RATE64={0xc, 0x4, 0x688f2aa9cd6a07e}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000240)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r10, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x48000) 1.73352981s ago: executing program 3 (id=6231): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f00000005c0)=""/240, 0x3e, 0xf0, 0x1}, 0x20) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x8, {[@md5sig={0x1d, 0x12, "400053e0c9d32076c99dd6cea46c5d7b"}, @md5sig={0x13, 0x12, "be58b864b222bf56e5de595fbe659615"}]}}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff2, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) 1.650967892s ago: executing program 3 (id=6232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000e00)={{r3}, r6, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r7}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000006c0)={{r1}, r6, 0x8, @unused=[0x0, 0x8, 0x0, 0x49c], @name="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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x50}}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r12, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e69a61e41cc79969c00000007000000140019801000f38004002880080031800454fa487db723004080"], 0x28}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="0a000000010001", 0x7) 1.433470356s ago: executing program 4 (id=6233): sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x80088a02, 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) 1.357020678s ago: executing program 2 (id=6234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) socketpair(0x17, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000380)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) unshare(0x6a040000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r8], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r9, 0xffffffffffffffff, 0x37, 0x2000, 0x0, @value=r12, @void, @void, @void, r11}, 0x20) r13 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r13, r7, 0x5, 0x2000, 0x0, @value, @void, @void, @void, r11}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x80, 0xf810, 0xb, 0x10, {{0x2d, 0x4, 0x0, 0x3e, 0xb4, 0x66, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, {[@ssrr={0x89, 0x2b, 0xad, [@remote, @local, @private=0xa010100, @multicast1, @loopback, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @ra={0x94, 0x4}, @cipso={0x86, 0x12, 0x2, [{0x1, 0xc, "a463b1e7860efc9d98ec"}]}, @noop, @timestamp_addr={0x44, 0x14, 0xf5, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0x2c, 0x83, 0x1, 0x7, [{@multicast1, 0x8}, {@multicast2, 0x200}, {@remote, 0x861}, {@multicast2, 0x3}, {@local, 0x2d8}]}, @timestamp_addr={0x44, 0x1c, 0xc5, 0x1, 0x1, [{@broadcast}, {@remote, 0x1}, {@broadcast}]}]}}}}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex=r14, r5, 0x15, 0x10, r5, @void, @value=r5, @void, @void, r11}, 0x20) r15 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r15, 0x1, 0x1c, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRESOCT=r15], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f0000001080)=""/152, 0x41000, 0xa}, 0x94) 1.284306549s ago: executing program 0 (id=6235): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendto$x25(r0, &(0x7f00000000c0)="34481a4eea56b8a5d2437e4744e91d60a20f054f851367fcb9c4cd9b9969bb87301cd7", 0x23, 0x0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.283796268s ago: executing program 4 (id=6236): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001d00)={'tunl0\x00', &(0x7f0000001c80)={'erspan0\x00', 0x0, 0x7, 0x7, 0xfcb6, 0x1f09, {{0x6, 0x4, 0x1, 0xf, 0x18, 0x65, 0x0, 0xa0, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x3c, r5, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x3c}}, 0x20) 1.208782935s ago: executing program 0 (id=6237): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) unshare(0x2c060000) unshare(0x2c020400) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x30, 0x9, 0x6, 0xfffff02c}]}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xfffffffffffffde3) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014000780080012400020000005001500ff0000000500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x6, 0x1, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0xf8, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd699eebf900c206fffe800000000000000000000000000038fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a1108b6b90780ffd080a0000000900000004050a0000000300000001bb2136350f22e8ad6bb7eca8b120d625219bb277f2b5bc989ba761990337a0b00c0fdd3124a96a531d7841c68d96c2c045dcb8d5c5dc45a0baff54a67fcc7991e8f2d155e3bb30d7072d411423956b89c75a8892e54782e53ba8b51add03eba500ea13c1b7190b6cba6efdf48357c810237059cb3054a7bb941ddc9e07be8f80b61a211d3f9fc380f3f9374cf652fe7bdedcf00d98e94dc652c4"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(0x3) 1.069492103s ago: executing program 4 (id=6238): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'ip6gretap0\x00', 0x4000}) 1.017298881s ago: executing program 1 (id=6172): socket$isdn(0x22, 0x2, 0x26) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6", @ANYRES32=r5, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.006263788s ago: executing program 3 (id=6239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "0b8f63"}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000000000daffffff00002b1a395a43675bda8c8ee36c8f0a1fb52e6b649920fd1f7ba163c84a4822d8dee81f93e925a63fa1d315c73b3060f0477b8b87d1a9f3c6f3665847bd44fa0ed5000000008e55a56b4cf353f2ffbf161cec20c9d4caca19592dcd6334fc72a1825db46edf74cbf7d9d715e5a239d8232ec10182920166466f14c353d76473fab1e5e71fd8900f0bebcb9c2ca0ac57e8729279fb84d99f3b846e1baddcc9429d95f3b39e3d7e6b024a29202136e651b4e9207183875ef1312c82c624595c65edea076c939d6ef4c46d19ba1004c71992bbd53047b27ed58ea25c35cbb3b29710ab8ae2f5a28b830494", @ANYRES32, @ANYBLOB="7eb0fa1cc01f8b718df7a01b87b21a603330e1f74d38", @ANYRESOCT=r1], 0x20) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000004c0)={0x6, "98ae79"}, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000003600)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0, 0x0, &(0x7f0000000880)=""/15, 0xf}, 0x81}], 0x1, 0x12023, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0xcc, 0x24, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x8, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x64, '\x00', 0x9, 0xfffffffe, 0x80000000, 0x80000}}}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x8, 0x5c57, 0x0, 0x5, 0x5, 0x8}}, {0x14, 0x2, [0x0, 0x5, 0x9, 0x0, 0xfff8, 0x7f, 0x1, 0x920]}}]}, @TCA_RATE={0x6, 0x5, {0xa8, 0x1b}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3b, 0x7f, 0x6, 0x1, 0x9, 0x4, 0x7}}, {0x12, 0x2, [0x8, 0x9, 0x80, 0x9, 0x53, 0xc, 0x1ff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000500)) 789.11457ms ago: executing program 3 (id=6240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe8c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080007400000000008000840000000e40900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x84, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x50}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f00000003c0)=0xb2, 0x4) sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @empty}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) ioctl$XFS_IOC_GETBMAPA(r7, 0xc020582c, &(0x7f0000000580)={0x6, 0x26, 0x1800000000000, 0x3, 0xfffffffe}) sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) r9 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000240)) sendmsg$kcm(r9, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/178, 0xb2}, 0x9}], 0x1, 0x40012123, 0x0) 598.075025ms ago: executing program 1 (id=6242): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x8, @private1, 0x8000}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x1010, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580), 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100), 0x0, 0x4020000) sendto$inet6(r4, &(0x7f00000018c0)="4b96dfe3", 0x4, 0x840, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000d40)={0x0, @in6={{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x548bb5a3}}, 0x8, 0x7, 0x1, 0x9, 0x4}, &(0x7f0000000e00)=0x98) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x9, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'macsec0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$pppoe(0x18, 0x1, 0x0) 1.204765ms ago: executing program 0 (id=6243): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x1411, 0x1, 0x70bd2d, 0x25d7dbfc}, 0x10}, 0x1, 0x0, 0x0, 0x2400c8e5}, 0x8054) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x7, @none, 0x0, 0x2}, 0xe) connect$packet(r2, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001640)={@val={0xa, 0x201}, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @dccp={{0x15, 0x4, 0x1, 0x9, 0x1064, 0x67, 0x0, 0xef, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@lsrr={0x83, 0x1b, 0xb, [@remote, @remote, @remote, @dev={0xac, 0x14, 0x14, 0xd}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x17, 0xb5, [@empty, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0xb, 0xde, [@broadcast, @rand_addr=0x64010100]}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x9, 0x5, "278b2c", 0x0, "b627e9"}, "f973676a084208326a76bd530f34f0e187bc0dffa11f5e614a78470594513543f8463119b0ef48e0e7ba2cc79414b23123aafa840bee30b3fb316709cd629206a50e0e4dad8b2a8128381fe6f32083ac3b204aea7758a5261f8a71098c058cd0ee77c83ce6025567ea5019f1227b59879b5f1e91bdb873e8d684a340289d817fddfd6f699bfbbff05b83b5eef6200be2d8d7fdcb24677077de0f2ec391039c61aae04d8b3ad15693c3f32425f9fbaff7dcbaef16e19206d2e52dbf08c66483bfe542b8806489ee1bfc5a429c9e7fb70e23f7c988ff122e842beff5a32e65fdfc2b5aa706a3bbbb2aed500c003d6ea12cf461c671f3d3fe76646f595db39fdb19b5cef45a89a8085eee6514432cce65c536940a4279f6fafb63f5c8282d221496cbff546201592c1d6bf055037068a865dd4ac8139980cdde43dc7a32061ec7c6c48b112f21d76fbe1f974efffc9cd5cfe3be6804ac96dcbff809246e3d4ebc35f80999091cb4b4beca98e034b376cb39ab03f24b8c3d9af3c395bdf7594d35da10cdd0fc81f8446a378a459a7f522fc590f265a09cdc89baad99e012be0d73acbc533305889f60392ec524d042107ed6a3d16cbf31adbdbefe591637e5965e071f3d73a601b6468d01070eabb320fa4cbfc46688d12315635b5447d8f27d4e89a045b5ce6638b24921b662d1dc84fea2d995c3dcb4bc87b10a7428e68d5a7b90881c955fc99dcd507d3d24f5f82321b7890e211e2e935a9c965233f3a3f8b208ac2bf2f1b82dd820af1af8ccbe1c82fb857dfd37c4eee2c3707e164de25951dba5f889bde2c5e49df411eb90134a14dfed4fb7b1a6b94ca9635c4d75e834bbce434b287147b4c84635b55c34a32d2f43f206093a297b16fe36129e7486e9bac37fdd1ca33bd51d82aeef5d520c0b7f58840b52dbebb2ab3f9b9f9412fd1158d5d49e40132cc75db1f3cc7fd43241b9aecc073dab5d2dc67fc39fcfb1d6cee06d4d6b0e52c18614a70e184a38b33f1efa673ece305f749f1c12a547364934a0d8492e2e0183911470e611433ef8fe5f27619e10da36d7af90595079f4d478e6a9832720fdad0a504aa42f9a21e23c51574a773277f2cf6fb37e3d46eb597ce206fa418e86a81dae57f7d8eed1725a06d60076b4f203e7b2040fa4be2631bc18ae552c84a1f28018d0147c7f54bc8386463c6c6a7d91e13b490c4e6e9e2fef63caade2a94159ae183b0e77a07a444ef9f2624e8ea26841b02c3cfede8a56b8c3fa4246680b93559881ee8c150fdd2f4e970e47f0b62308b3615e29216471d4d143e4963a74b25a70cbd6ea9e91afd2e13c933ca2eca9088756bb173bbc22ee77b2b865105a6012eb9017a3d48228a2078c7040b79a8f5b7ad83ccb10a385e8192ec7373a5028a3dfd6a75740c68878fa31caafcfcbdd0d4cc109c723014b6caa1c7a95a3997a9611dd567d20bc04534f8a7befe652aa6ac84fa3bb677fb841447195bd1e342d385c71bb8ce8f90c54c8a1cb60c95faabd800aab3eb0e04ec0e4a71bb5441b2ab631d3ba72759aab305ef2431809385e793123443c630caf37140e62d2cb331b5f31b987304367c250a6ecd8cf00d8d5b44aae8d416a4372f656a61e553f47cf40615f4734cb9ca6d9b34877407e2df97619080005daf7682e0af3909805d37b07a5a87249b935ae85b3bf939c47e02eff04d428236087c56ba12488bcaeeaa0724fbc0b174cdfea513269b8c1a039d5761122a3b5185b6be36587698de3f270acdd29c7991e1dae05419d3a1a122502d4e27b763b6a3dd8e14ececf0bc2fc923bbe3f8e899b5543051a7723b84001c64015d57d252ff78ae5c09cf68941a7d9bf11d767eef31abfd63babb063ee7da9cc556e1602c2322dac2c12d0f9614df1be2d671bee7ca9deaee845452c907bf2da468a2334664a1392d9e1196416b742aec3d653df5e4648008f5f869549be038a13aff6cd1c9ce3a557a12d6656a9f5830b42867b13dd9d78cd571cd347432f81447103055afc58bf880875fce170ad12472d857f5a967bee75465ffa1596b4b650b1f6e1e8e824125061a13ddda18f463a124bc89ea4d5bf5e0472165e172b519e8bbbe9a2a397ad4c75b021cc348f6ef800afb8c4f58aba7b74ce5a4306fb230d3c52e9fd8ff180482533748ec580739fb86515cc1910ba1ee10b72f76b0419917957c945bd44bab7d3dd3412a113b2d12d7952a85799927231dcad24d00354984ea378927902d80502e2eab4172188a3fcc556c94baa27def6c1a0c43f5a3d80372e3ef0c71589cb63dae8c60a1104b79d0844f06a9d631c54d1ffb7c1220bfd6791ba5f17878c72241da4c977f65ffcce3bdfc628f0ac462201f7c60066768db780375c619e8120e80d61ee72f96055ffe379a0062db6b1cc217e343fe9df368c6ae98b09cd8ffcd7182b2e30f5e66fd7e23948aa39cbfe2830a215b255daf4c854b60b109b2c657c5ab25e2e578db0e5bf8686487d4bf6c4b52e4ec6aba976f80689b02d2494ad0b0cd32ebf0da0cb80850b1eab14a540dcc17b55bcc58447c8dcc59c9285b2dea69eba5c98de54d69d91a3a9300f76246f947e6ee81724d574e392ad143aff19dbbebfa0947de07d5fe7c195417e44763f1df410b7eb03041a382f94a22df9f6ae02839c567a187c0ec0ca9333cc3000ef1b1ae98d4a27d935c3383b7b505dff12de12a7918133e2655685d51eeec23722880b2272444bce12d0fe11f4d51cbe171b6344b8be94dda8a6fce03b0f86c765159ddce04c40eb793449c3b4980698cb30373576eeadb5896bc92fd40a5cee826c62e931bb089666a5ffd62c4f906c2c8f864b0b36611c7b436793a98968838250a1f58db09cfeb4eb1a83de0705546bc0979ffbd8f2d7fc78601f2b1b99db0d06226ae2755e52c2616df442bd6506e2199f1ce403ff9793907a6a7251e3b651bdfdd188e97ce09186334740dd5becd59161b2fe561024852da78838cfb573e83602c69bb78b1ccf48e55086c2c769aab4abba912b8bbc692f0549a45c4bdb0120faefa1700c92d4d80688d8ee8404dd232ebbfc3f1b5452886c8fd50ec28fdcc002e3aae5198285dee8fed8f7f3c51a0d3c2343fbe74794699a49bc1cb3137fb7e0a29ef53fcb0ce796c4f6c4dbe9a14edba7eee504ddf4bd25b46117b45b6acae8f95782ec154744cae0b6617d800b2736d9df91b7d6d2466b27c7d896b26d235686b181c3189cb2a0c9322ba95190e43e14efee059be22d8b21b095b9d175eaf4d789db0f7e41e5036aecbb1871f33935525fc9e53635fcaa182d0dbc8e36842f5271bef8c8ec499c8b069fb76010041b2b28159a62a0180c7bc48cd41fa203df275da7cc082b0eddd5accc7dc180bc64c1d33c830ca2db6691652b02a32b2509687f167253992fcc97ce563bf279bb7d92cdf547a923788136974f13f4985b9216d321159038e53680cad4289e4d9c6196618b62786a46732a7d1c6d33e20f1df40f47ff0280c4fd3c76b51261150353361db7724d8bd67bca9127c4ca05bc3769f216be3aa12cf9a005bf16c7397c71797a8b64526ccd1ae9ce79999f08174aa91d2b60caa7d0575ffde397adced0680e45455f6cbf9993dbd9b9f20f672ec11f602fda7ecf2cf13fb9b72e8402ad1f6bc5379198ea0a14d77549aa9bdd5622670e685f4bdb34d2d767be7ae91ebdd03a88d2da730c54dd46146f233ab0b2faa9dbc4144e4eba9beb83c9e040e039a2db00507ec9808b2e09f046a78ac8a3264737328e456d10cfa94fca32e4bdca42ed6c7fad06e4139a3ee9b10d8daf768d067c4ad5d83057bfc214f33be885f90e906ce4469bbde06d6e4f804811d45062fd4eeca832c14f96faec458518e78ec9af1f9b036931850ea299c291148210f2f4a72a4a4625925e53b9152ba2ed347834a80e6b11c20dbcceafc74ef3883b601c5e930dea3054cbf2e0c23eb3ac453a8da40573f4344119147bb1f71765ae73070485116c54565d899fb4a2935e43d6b004640dce3cf4e152566e12984feaa677edb24cd9ddb5ebcb38f2c9b6c2143002f8c53f3192475c99b0fd71e70c744482bc4ceb7725ac1d0f71bec0b41feec6e997e060f67bd9dc4c803c9a562ad4112cb60fcfc0ae84f61ac408b79bc3fef586101c69c4411828fdb60b586869ec1cb4ac64479a50809ea0dea0121d91cba1b51b16ad75f13dd3834ee812ddeb64216c3839ec71a99bb5193acd42c8cd39113639d1f84a0d27e0fc26eee9b03df0f749c591ee9c98fd1cdcf8d4b40ad000a2bfeaeed36ebfa7c8f6a2cc09c4fe7f4a4c56be9ea3f6f88e87a3d7659c8fe9d2c1a7c10b7730a47e490e4df521c2ca394ad5a407f3b9317e90ca8e120d1ab9e590bf76d29c43cf20eeb1647ea84f95acc8c6c29eaffb3595e6116d354c15c16420025204b8a6f79eba44d192d2cd0dbd4d2e5890e602e9a7597d47ab3fb875838ac81bb9aa10b887f6c863ce28e2e00d2619715e2f236c189503afc19c034940d66348a8b9cbc35c6c646ea395f1e66503ee706845f814f08fbb30f476263927a58686d853ee2dc6b30f01dbc2cf8b747d7a3064fb308d28564d2e28f3178e4021bcb7026dfdd7a4a560e2570b6cf4804969c817665addd12fc658d3a67b80de63c87398d3b0323c058e066163805d061f0abfc704c57e69dce9deb48fbe0c10b7309d595c836367de07ebe83aecf2e620ae4ff3cdc7c79e6a8e9466ddaf8b7958e5d80d3978c7d317525ba2951d0cae8cba09bdf82fa222da04dd066cdcc8ca55d631d461bcb70444ad6061bd8875ddc2b3103c340d71e97e7c83853e18089b6253a14cc4281bfe230a745e11ee2b7c870fd9870d006e4227aa6bf72c6bb890118b27409a2404be6f0315471087aac12e88af21856eb78e955e2d2466aa21e95dc92da2fa8c54ada08d2d1801eb6abce3f172fefe000b3d3871d0b6fab196740c5dda26e0d40cd9a993e88453c728baf7318c77b1f2f4f269ae187e1b09617a9165d28c597f83da883b1fc13d9398348ac70f0de8544ed31ba6a023f32f22122236b735b8419802b8c5fcbca0f4df7948f11d0e03f7387da1ab49b4b673fe2820f2a79a01f4a7c4c5597745a3cea6d43eead475a63695a3ccec06657295c0cc987b8e777ca0f798c5a60ea105eb2714211475d4cb594a3fa81c13fcf1a75a378484bf886dd98cbbf8cc72a54709525270075b9406f6a6acc8b11d8178cad3bc3bfee176cbdc215df48b291447c2188156d42ad63bd0baead0dd39625cd1ebcac3818d68c77d0c71d367f000f273676f17b55914a4e433ad2be7386cd1766ef484ffab1c0eb68702069c3ff898dabebd8e7ebc0a494ceda1dc585485889c08ff1d3fd94543744e6056d852ad70026e656902ce17846e6f1296b93096e777ba3dbb11a063fc151b02e31c8163f37ea39f8d529ab266456aee4fe7eeefd42e340136fff48a0cdb9cdedd84035420aaf44792e80a0df4dec6d78a1d2d1dc024ac0a9db282a725d9739a32d24d6ae6d09cdfd65842923cfb09d482a45b9d6012fcdf44be6ed2582fc1284693054de8e38e7ae5d4788c4f3577f7498c324f54d282aa384815950dcdc9befe2354b29f8579607744bbdaa56dfffb61d19295f10f8d6d5888a98b92f3d5ff98303ef6ead2aeae7ed4bdc27639668bed57ec2f18fb0ecac3b8021e3cc0e256b89f46495afdf3f6045d87b81d7df9afac72936c64516bd048b5be572f4e0b5da5f2a0640c325e3688cd605fb3fa03e3bf84fdb85792"}}}}}}, 0x107e) socket(0x9, 0x5, 0xd) 0s ago: executing program 3 (id=6244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40600000000000071114e0000000000851000000200000085000000070000009500000000000000950000000000000059a30f4936e44feb8adb9474dd7d10406d8bb1f72366e95281c2c0be09e6af23f926d804488628cda2ad6fe64f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a40000000100000003157a452a25ac81d8ed595c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025cccade003c0db798262f3d40fad9", 0xfffffffffffffe4a}], 0x1}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x4e21, 0x9, 0x2}, {0xfffffffffffffffe, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000001, 0x4, 0x200000003, 0x9}, {0xa5f}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@loopback, 0x4d3, 0x33}, 0x2, @in6=@empty, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x40) getsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f00000004c0), &(0x7f0000000500)=0x10) r9 = socket(0x10, 0x803, 0x0) write(r9, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) setsockopt$RDS_RECVERR(r9, 0x114, 0x3f, &(0x7f0000000000)=0x3, 0x4) kernel console output (not intermixed with test programs): 7][T24340] lo speed is unknown, defaulting to 1000 [ 551.638659][T24340] wg1 speed is unknown, defaulting to 1000 [ 551.929004][T24358] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4883'. [ 551.965178][T24365] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4885'. [ 551.985649][T24340] lo speed is unknown, defaulting to 1000 [ 552.015373][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4883'. [ 552.104896][T24365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4885'. [ 552.124067][T24365] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4885'. [ 552.154554][T24365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4885'. [ 552.173760][T24365] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4885'. [ 552.381729][T24380] netlink: 'syz.0.4890': attribute type 1 has an invalid length. [ 552.606846][T24393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.896843][T24401] ip6erspan1: entered allmulticast mode [ 553.106507][T24417] delete_channel: no stack [ 553.285637][T24429] lo speed is unknown, defaulting to 1000 [ 553.326749][T24429] wg1 speed is unknown, defaulting to 1000 [ 553.395659][T24445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.411062][T24442] netlink: 'syz.4.4907': attribute type 3 has an invalid length. [ 553.475224][T24447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.853450][T24459] syzkaller0: entered promiscuous mode [ 553.860144][T24459] syzkaller0: entered allmulticast mode [ 553.868545][T24429] lo speed is unknown, defaulting to 1000 [ 555.114407][T24468] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 555.921198][T24484] syzkaller1: left promiscuous mode [ 555.926907][T24484] syzkaller1: left allmulticast mode [ 555.983578][T24480] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 556.038738][T24480] bond7 (unregistering): Released all slaves [ 556.161094][T24492] bond5: entered promiscuous mode [ 556.185366][T24492] 8021q: adding VLAN 0 to HW filter on device bond5 [ 556.365547][T24507] __nla_validate_parse: 13 callbacks suppressed [ 556.365565][T24507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4921'. [ 556.508865][T24507] nbd: socks must be embedded in a SOCK_ITEM attr [ 556.509275][T24519] syzkaller0: entered promiscuous mode [ 556.521094][T24519] syzkaller0: entered allmulticast mode [ 556.526093][T24517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4921'. [ 556.537847][T24517] nbd: device at index 64 is going down [ 556.545186][T24520] netlink: 'syz.3.4924': attribute type 2 has an invalid length. [ 556.598000][T24520] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 556.774940][T24433] udevd[24433]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 556.810321][T24432] udevd[24432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 556.899198][ T5939] hid (null): unknown global tag 0x90 [ 556.907310][ T5939] hid (null): unknown global tag 0xc [ 556.912689][ T5939] hid (null): unknown global tag 0xc [ 556.919181][ T5939] hid (null): unknown global tag 0xd [ 556.929986][T24535] nft_compat: unsupported protocol 5 [ 556.983637][ T5939] hid (null): unknown global tag 0xc [ 557.058154][ T5939] hid-generic 0005:0002:03FF.0001: unexpected long global item [ 557.077496][ T5939] hid-generic 0005:0002:03FF.0001: probe with driver hid-generic failed with error -22 [ 557.181592][T24554] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4933'. [ 557.213299][T24553] delete_channel: no stack [ 557.255429][T24562] netlink: 'syz.4.4936': attribute type 2 has an invalid length. [ 557.271017][T24562] : entered promiscuous mode [ 557.312909][T24564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4935'. [ 557.337244][T24564] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4935'. [ 557.570458][T24566] lo speed is unknown, defaulting to 1000 [ 557.578892][T24566] wg1 speed is unknown, defaulting to 1000 [ 557.599373][T24571] lo speed is unknown, defaulting to 1000 [ 557.645527][T24576] netlink: 'syz.1.4939': attribute type 4 has an invalid length. [ 557.685141][T24576] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4939'. [ 557.881892][T24584] syzkaller0: entered promiscuous mode [ 557.888476][T24584] syzkaller0: entered allmulticast mode [ 557.936398][T24571] wg1 speed is unknown, defaulting to 1000 [ 557.944757][T24566] lo speed is unknown, defaulting to 1000 [ 558.062995][T24591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4942'. [ 558.378519][T24600] lo speed is unknown, defaulting to 1000 [ 558.387777][T24600] wg1 speed is unknown, defaulting to 1000 [ 558.468225][T24571] lo speed is unknown, defaulting to 1000 [ 558.478436][T24606] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4947'. [ 558.515758][T24605] delete_channel: no stack [ 558.610784][T24608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.618096][T24608] IPv6: NLM_F_CREATE should be set when creating new route [ 558.625376][T24608] IPv6: NLM_F_CREATE should be set when creating new route [ 558.826997][T24600] lo speed is unknown, defaulting to 1000 [ 559.118822][T24618] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4951'. [ 559.129196][T24618] Cannot find del_set index 4 as target [ 559.697541][T24635] tipc: Enabled bearer , priority 0 [ 559.741485][T24635] syzkaller0: entered promiscuous mode [ 559.758806][T24635] syzkaller0: entered allmulticast mode [ 559.848030][T24641] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4956'. [ 559.856178][T24643] delete_channel: no stack [ 559.900015][T24633] tipc: Resetting bearer [ 559.939281][T24633] tipc: Disabling bearer [ 559.964386][T24640] lo speed is unknown, defaulting to 1000 [ 559.972057][T24640] wg1 speed is unknown, defaulting to 1000 [ 560.037588][T24651] 8021q: adding VLAN 0 to HW filter on device bond6 [ 560.239285][T24640] lo speed is unknown, defaulting to 1000 [ 560.322752][T24668] xfrm1: entered allmulticast mode [ 560.417853][T24655] macvlan4: entered promiscuous mode [ 560.423248][T24655] macvlan4: entered allmulticast mode [ 560.429088][T24655] bond6: entered allmulticast mode [ 560.434270][T24655] bond6: entered promiscuous mode [ 560.440094][T24655] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 560.451067][T24655] team0: Port device macvlan4 added [ 560.683217][T24677] lo speed is unknown, defaulting to 1000 [ 560.699280][T24685] netlink: 'syz.1.4966': attribute type 2 has an invalid length. [ 560.749685][T24677] wg1 speed is unknown, defaulting to 1000 [ 560.965809][T24698] netlink: 'syz.1.4970': attribute type 4 has an invalid length. [ 561.401574][T24714] openvswitch: netlink: Key type 177 is out of range max 32 [ 561.410281][T24712] xt_ecn: cannot match TCP bits for non-tcp packets [ 561.456883][T24715] __nla_validate_parse: 4 callbacks suppressed [ 561.456902][T24715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4976'. [ 561.523784][T24719] syzkaller0: entered promiscuous mode [ 561.525715][T24715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.535833][T24719] syzkaller0: entered allmulticast mode [ 561.550120][T24677] lo speed is unknown, defaulting to 1000 [ 561.559503][T24719] 0: reclassify loop, rule prio 0, protocol 800 [ 561.783942][T24729] sctp: [Deprecated]: syz.1.4980 (pid 24729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.783942][T24729] Use struct sctp_sack_info instead [ 561.863446][T24734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4983'. [ 562.029979][T24744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4984'. [ 562.096215][T24744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4984'. [ 562.199516][T24732] lo speed is unknown, defaulting to 1000 [ 562.220225][T24732] wg1 speed is unknown, defaulting to 1000 [ 562.305689][T24753] delete_channel: no stack [ 562.406729][T24752] netlink: 'syz.0.4987': attribute type 1 has an invalid length. [ 562.445511][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4987'. [ 562.744719][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 562.755040][T24768] netlink: 'syz.3.4991': attribute type 1 has an invalid length. [ 562.762794][T24768] netlink: 'syz.3.4991': attribute type 2 has an invalid length. [ 563.363777][T24732] lo speed is unknown, defaulting to 1000 [ 563.494623][T24799] netlink: 'syz.4.4997': attribute type 21 has an invalid length. [ 563.517118][T24794] tipc: Enabled bearer , priority 0 [ 563.553515][T24800] syzkaller0: entered promiscuous mode [ 563.575672][T24800] syzkaller0: entered allmulticast mode [ 563.642383][T24794] tipc: Resetting bearer [ 563.709986][T24809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4999'. [ 563.752876][T24808] delete_channel: no stack [ 563.775276][T24793] tipc: Resetting bearer [ 563.800206][T24817] netlink: 'syz.4.5000': attribute type 8 has an invalid length. [ 563.801942][T24793] tipc: Disabling bearer [ 563.811368][T24817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5000'. [ 563.951313][T24816] lo speed is unknown, defaulting to 1000 [ 564.041778][T24811] delete_channel: no stack [ 564.140748][T24816] wg1 speed is unknown, defaulting to 1000 [ 564.143215][T24833] tipc: New replicast peer: 255.255.255.255 [ 564.153472][T24833] tipc: Enabled bearer , priority 10 [ 564.191704][T24833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5004'. [ 564.311608][T24837] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 564.341152][T24838] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 564.389740][T24840] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5007'. [ 564.414050][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5008'. [ 564.717404][T24858] netlink: 'syz.4.5009': attribute type 1 has an invalid length. [ 564.749096][T24816] lo speed is unknown, defaulting to 1000 [ 564.834953][T24863] netlink: 'syz.1.5012': attribute type 4 has an invalid length. [ 564.972733][T24869] xt_bpf: check failed: parse error [ 565.264583][ T5885] tipc: Node number set to 4294499437 [ 565.306093][T24894] delete_channel: no stack [ 565.311268][T24895] delete_channel: no stack [ 565.328234][T24891] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 565.358090][T24870] siw: device registration error -23 [ 565.839277][T24919] vlan0: entered promiscuous mode [ 565.845472][T24919] gretap0: entered promiscuous mode [ 566.102926][T24932] bond10: option fail_over_mac: invalid value (127) [ 566.112168][T24932] bond10 (unregistering): Released all slaves [ 566.584374][T24965] __nla_validate_parse: 4 callbacks suppressed [ 566.584392][T24965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5039'. [ 566.607459][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5038'. [ 566.622698][T24967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5038'. [ 566.783748][T24981] vlan0: entered promiscuous mode [ 566.789060][T24981] erspan0: entered promiscuous mode [ 566.991877][T25000] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5048'. [ 567.355566][T25018] delete_channel: no stack [ 567.593714][T25031] lo speed is unknown, defaulting to 1000 [ 567.603733][T25031] wg1 speed is unknown, defaulting to 1000 [ 567.754464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.762495][ C0] lec:lec_tx_timeout: lec0 [ 567.805912][T25051] geneve1: entered promiscuous mode [ 568.063469][T25031] lo speed is unknown, defaulting to 1000 [ 568.156676][T25063] delete_channel: no stack [ 568.169100][T25062] lo speed is unknown, defaulting to 1000 [ 568.189066][T25062] wg1 speed is unknown, defaulting to 1000 [ 568.427625][T25070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5072'. [ 568.442041][T25070] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 568.865422][T25087] netlink: 'syz.1.5077': attribute type 10 has an invalid length. [ 568.896648][T25062] lo speed is unknown, defaulting to 1000 [ 568.908422][T25087] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5077'. [ 569.246657][T25117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5083'. [ 569.523896][T25121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5084'. [ 569.628717][T25121] ip6gre2: entered promiscuous mode [ 569.633961][T25121] ip6gre2: entered allmulticast mode [ 570.205498][T25140] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5081'. [ 570.246707][T25148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5089'. [ 570.257168][T25148] netlink: 'syz.4.5089': attribute type 2 has an invalid length. [ 570.300953][T16305] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.313128][T16305] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.322664][T25141] netlink: 'syz.4.5089': attribute type 2 has an invalid length. [ 570.337172][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.350089][T25148] !9: entered promiscuous mode [ 570.365919][T25141] !9: left promiscuous mode [ 570.372223][T25109] delete_channel: no stack [ 570.385103][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.540610][T25149] geneve3: left promiscuous mode [ 570.554761][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.576242][T25149] geneve4: left promiscuous mode [ 570.595404][T25149] bond9: left promiscuous mode [ 570.611039][T25149] xfrm1: left allmulticast mode [ 570.634875][T25149] ip6gre2: left promiscuous mode [ 570.642903][T25149] ip6gre2: left allmulticast mode [ 570.656853][T11475] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.669580][T11475] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.698639][T11475] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.713492][T11475] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.738358][T25160] delete_channel: no stack [ 571.258423][T25193] syzkaller0: entered promiscuous mode [ 571.280507][T25193] syzkaller0: entered allmulticast mode [ 571.362951][T25191] syzkaller0: entered promiscuous mode [ 571.510190][T25206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.526504][T25207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.071864][T25229] lo speed is unknown, defaulting to 1000 [ 572.080052][T25229] wg1 speed is unknown, defaulting to 1000 [ 572.107984][T25238] __nla_validate_parse: 9 callbacks suppressed [ 572.108004][T25238] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5106'. [ 572.191245][T25231] delete_channel: no stack [ 572.336053][ T30] audit: type=1804 audit(1773668039.259:9): pid=25240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5108" name="/newroot/384/memory.events" dev="tmpfs" ino=1975 res=1 errno=0 [ 572.418037][ T30] audit: type=1800 audit(1773668039.259:10): pid=25240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5108" name="memory.events" dev="tmpfs" ino=1975 res=0 errno=0 [ 572.469862][ T30] audit: type=1804 audit(1773668039.259:11): pid=25240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5108" name="/newroot/384/memory.events" dev="tmpfs" ino=1975 res=1 errno=0 [ 572.636116][T25258] netlink: 364 bytes leftover after parsing attributes in process `syz.1.5112'. [ 572.679316][T25255] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.712092][T25255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.750838][T25229] lo speed is unknown, defaulting to 1000 [ 572.778276][T25262] syzkaller0: entered promiscuous mode [ 572.791169][T25262] syzkaller0: entered allmulticast mode [ 572.974957][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 573.087667][T25276] openvswitch: netlink: Flow actions attr not present in new flow. [ 573.185621][T25284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5119'. [ 573.387950][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5123'. [ 573.432929][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5123'. [ 573.477720][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5123'. [ 573.494309][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5123'. [ 573.523937][T25294] delete_channel: no stack [ 573.671876][T25302] netlink: 'syz.2.5125': attribute type 5 has an invalid length. [ 573.739060][T25304] syzkaller0: entered promiscuous mode [ 573.750065][T25304] syzkaller0: entered allmulticast mode [ 573.886370][T25306] syzkaller0: entered promiscuous mode [ 573.891868][T25306] syzkaller0: entered allmulticast mode [ 574.051869][T25314] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5130'. [ 574.233913][T25325] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5131'. [ 574.266613][T25326] openvswitch: netlink: Message has 1 unknown bytes. [ 574.274212][T25326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.379686][T25332] lo speed is unknown, defaulting to 1000 [ 574.446745][T25332] wg1 speed is unknown, defaulting to 1000 [ 574.526173][T25328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5132'. [ 574.667672][T25342] netlink: 'syz.3.5136': attribute type 11 has an invalid length. [ 574.954349][T25332] lo speed is unknown, defaulting to 1000 [ 575.136912][T25350] lo speed is unknown, defaulting to 1000 [ 575.144335][T25350] wg1 speed is unknown, defaulting to 1000 [ 575.511180][T25350] lo speed is unknown, defaulting to 1000 [ 576.737608][T25392] nbd: must specify at least one socket [ 577.067612][T25408] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 577.087404][T25408] team0 (unregistering): Port device team_slave_0 removed [ 577.096830][T25408] team0 (unregistering): Failed to send options change via netlink (err -105) [ 577.107287][T25408] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 577.119700][T25408] team0 (unregistering): Port device team_slave_1 removed [ 577.142451][T25417] netlink: 'syz.4.5149': attribute type 1 has an invalid length. [ 577.151509][T25408] team0 (unregistering): Failed to send options change via netlink (err -105) [ 577.163808][T25417] __nla_validate_parse: 2 callbacks suppressed [ 577.163828][T25417] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5149'. [ 577.176856][T25408] team0 (unregistering): Failed to send port change of device syz_tun via netlink (err -105) [ 577.220439][T25408] team0 (unregistering): Port device syz_tun removed [ 577.238720][T25408] bond6: left allmulticast mode [ 577.243620][T25408] bond6: left promiscuous mode [ 577.251916][T25408] team0 (unregistering): Failed to send options change via netlink (err -105) [ 577.261355][T25408] team0 (unregistering): Failed to send port change of device macvlan4 via netlink (err -105) [ 577.277607][T25408] team0 (unregistering): Port device macvlan4 removed [ 577.292251][T25417] ip6tnl0: Caught tx_queue_len zero misconfig [ 577.483959][T25430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5152'. [ 577.503479][T25430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5152'. [ 577.557037][T25428] delete_channel: no stack [ 577.629646][T25438] lo speed is unknown, defaulting to 1000 [ 577.638215][T25438] wg1 speed is unknown, defaulting to 1000 [ 577.694763][T25444] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 577.963214][T25438] lo speed is unknown, defaulting to 1000 [ 578.585258][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5161'. [ 579.073287][T25492] lo speed is unknown, defaulting to 1000 [ 579.082690][T25492] wg1 speed is unknown, defaulting to 1000 [ 579.337536][T25492] lo speed is unknown, defaulting to 1000 [ 579.338114][T25504] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5166'. [ 579.685850][T25501] delete_channel: no stack [ 579.757266][T25507] gretap0: entered promiscuous mode [ 579.763781][T25507] erspan0: entered promiscuous mode [ 579.778928][T25507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.787273][T25507] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.796442][T25507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 580.235443][T25513] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5168'. [ 580.661521][T25516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.420788][T25458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.748159][T25534] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 581.770261][T25538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5176'. [ 581.782933][T25534] x9: renamed from bridge_slave_0 [ 581.838229][T25538] vlan1: entered promiscuous mode [ 581.853653][T25538] bridge0: entered promiscuous mode [ 582.055995][T25565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.070082][T25555] lo speed is unknown, defaulting to 1000 [ 582.078110][T25555] wg1 speed is unknown, defaulting to 1000 [ 582.338989][T25574] lo speed is unknown, defaulting to 1000 [ 582.613554][T25555] lo speed is unknown, defaulting to 1000 [ 582.619692][T25574] wg1 speed is unknown, defaulting to 1000 [ 582.996383][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5191'. [ 583.051449][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5191'. [ 583.064527][T25599] netlink: 'syz.4.5191': attribute type 14 has an invalid length. [ 583.072520][T25599] netlink: 'syz.4.5191': attribute type 11 has an invalid length. [ 583.286185][T25574] lo speed is unknown, defaulting to 1000 [ 583.629576][T25618] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5195'. [ 583.651970][T25618] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5195'. [ 583.871376][T25623] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5196'. [ 584.137393][T25631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5198'. [ 584.167345][T25631] SET target dimension over the limit! [ 584.167667][T25633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5199'. [ 584.695300][T25655] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 584.899806][T25661] bond10: invalid ARP target 0.0.0.0 specified for addition [ 584.910817][T25661] bond10: option arp_ip_target: invalid value (0) [ 584.925245][T25661] bond10 (unregistering): Released all slaves [ 585.045872][T25666] IPVS: length: 132 != 8 [ 585.045870][T25667] IPVS: length: 132 != 8 [ 585.099953][T25670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.322558][T25679] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 585.335423][T25679] bridge4: entered allmulticast mode [ 585.397097][T25682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5214'. [ 585.517253][T25689] 8021q: adding VLAN 0 to HW filter on device bond5 [ 585.833876][T25707] lo speed is unknown, defaulting to 1000 [ 585.889643][T25707] wg1 speed is unknown, defaulting to 1000 [ 585.907805][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5225'. [ 586.099751][T25707] lo speed is unknown, defaulting to 1000 [ 586.103451][T25723] syzkaller0: entered promiscuous mode [ 586.113890][T25723] syzkaller0: entered allmulticast mode [ 586.544052][T25749] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 586.774149][T25764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5232'. [ 587.008023][T25777] netlink: 'syz.2.5234': attribute type 3 has an invalid length. [ 587.031053][T25777] netlink: 'syz.2.5234': attribute type 1 has an invalid length. [ 587.081651][T25779] tipc: Enabled bearer , priority 0 [ 587.121539][T25779] syzkaller0: entered promiscuous mode [ 587.153445][T25779] syzkaller0: entered allmulticast mode [ 587.277894][T25789] tipc: Resetting bearer [ 587.390890][T25778] tipc: Resetting bearer [ 587.492968][T25778] tipc: Disabling bearer [ 588.528782][T25841] tipc: Enabled bearer , priority 0 [ 588.537185][T25841] syzkaller0: entered promiscuous mode [ 588.542753][T25841] syzkaller0: entered allmulticast mode [ 588.586031][T25841] tipc: Resetting bearer [ 588.603354][T25839] tipc: Resetting bearer [ 588.613552][T25848] xt_TPROXY: Can be used only with -p tcp or -p udp [ 588.641359][T25839] tipc: Disabling bearer [ 588.678863][T25853] __nla_validate_parse: 2 callbacks suppressed [ 588.678884][T25853] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5257'. [ 588.750673][T25853] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5257'. [ 588.808887][T25853] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5257'. [ 588.935151][T25873] netlink: 'syz.0.5260': attribute type 2 has an invalid length. [ 589.102783][T25883] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5262'. [ 589.117578][T25880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5263'. [ 589.145090][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5262'. [ 589.165276][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5262'. [ 589.198153][T25883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5262'. [ 589.268515][T25896] netlink: 'syz.0.5266': attribute type 1 has an invalid length. [ 589.306881][T25896] bond7: entered promiscuous mode [ 589.312314][T25896] 8021q: adding VLAN 0 to HW filter on device bond7 [ 589.374121][T25896] vxcan7: entered allmulticast mode [ 589.586316][T25915] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5270'. [ 589.618481][T25915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5270'. [ 590.367218][T25954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.738027][T25978] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 590.817536][T12510] lec:lec_start_xmit: lec0:No lecd attached [ 590.873207][T25988] netlink: 'syz.2.5294': attribute type 1 has an invalid length. [ 591.365576][T26017] netlink: 'syz.0.5303': attribute type 1 has an invalid length. [ 591.430975][T26017] bond8: (slave vxcan9): The slave device specified does not support setting the MAC address [ 591.465554][T26017] bond8: (slave vxcan9): Error -95 calling set_mac_address [ 591.511269][T26023] bond8: (slave bridge5): Enslaving as an active interface with a down link [ 591.539952][T26022] tipc: Enabled bearer , priority 0 [ 591.551389][T26017] macvlan0: entered promiscuous mode [ 591.556955][T26017] macvlan0: entered allmulticast mode [ 591.562958][T26017] bond8: entered promiscuous mode [ 591.569337][T26017] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 591.580533][T26017] bond8: left promiscuous mode [ 591.669276][T26022] syzkaller0: entered promiscuous mode [ 591.677518][T26022] syzkaller0: entered allmulticast mode [ 591.751420][T26029] netlink: 'syz.0.5306': attribute type 3 has an invalid length. [ 592.171953][T26047] openvswitch: netlink: Key type 8729 is out of range max 32 [ 592.191391][T26048] netlink: 'syz.4.5310': attribute type 7 has an invalid length. [ 593.328404][T26022] tipc: Resetting bearer [ 593.393566][T26034] tipc: Resetting bearer [ 593.460535][T26034] tipc: Disabling bearer [ 594.436445][T26102] tunl0: Caught tx_queue_len zero misconfig [ 594.443976][T26102] __nla_validate_parse: 14 callbacks suppressed [ 594.443995][T26102] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5327'. [ 594.577193][T26113] syzkaller0: entered promiscuous mode [ 594.582753][T26113] syzkaller0: entered allmulticast mode [ 594.725180][T26126] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 594.750785][T26126] netlink: 'syz.3.5333': attribute type 1 has an invalid length. [ 594.764614][T26126] netlink: 476 bytes leftover after parsing attributes in process `syz.3.5333'. [ 594.786176][T26126] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.5333'. [ 594.856949][T26133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5337'. [ 594.918294][T26135] netlink: 'syz.3.5338': attribute type 2 has an invalid length. [ 594.928986][T26135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.945473][ T5940] lo speed is unknown, defaulting to 1000 [ 594.951289][ T5940] sqz0: Port: 1 Link ACTIVE [ 594.957546][ T5885] lo speed is unknown, defaulting to 1000 [ 595.001818][T26146] netlink: 'syz.3.5342': attribute type 21 has an invalid length. [ 595.009970][T26146] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5342'. [ 595.019209][T26146] netlink: 'syz.3.5342': attribute type 4 has an invalid length. [ 595.027195][T26146] netlink: 'syz.3.5342': attribute type 3 has an invalid length. [ 595.035800][T26146] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5342'. [ 595.106492][T26153] netlink: 'syz.3.5343': attribute type 10 has an invalid length. [ 595.119142][T26153] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 595.129300][T26153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5343'. [ 595.138725][T26153] bridge_slave_1: left allmulticast mode [ 595.145207][T26153] bridge_slave_1: left promiscuous mode [ 595.151838][T26153] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.163011][T26153] x9: left allmulticast mode [ 595.168737][T26153] x9: left promiscuous mode [ 595.173787][T26153] bridge0: port 1(1x9) entered disabled state [ 595.184263][T26156] netlink: 'syz.3.5343': attribute type 10 has an invalid length. [ 595.203617][T26153] bond0: (slave bridge0): Releasing backup interface [ 595.269730][T26162] syzkaller0: entered promiscuous mode [ 595.275998][T26162] syzkaller0: entered allmulticast mode [ 595.354830][T26167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.395496][T26169] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5347'. [ 595.416200][T26169] FAULT_INJECTION: forcing a failure. [ 595.416200][T26169] name failslab, interval 1, probability 0, space 0, times 0 [ 595.424720][T26171] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5348'. [ 595.429640][T26169] CPU: 1 UID: 0 PID: 26169 Comm: syz.1.5347 Not tainted syzkaller #0 PREEMPT(full) [ 595.429664][T26169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.429674][T26169] Call Trace: [ 595.429682][T26169] [ 595.429690][T26169] dump_stack_lvl+0xe8/0x150 [ 595.429719][T26169] should_fail_ex+0x412/0x560 [ 595.429747][T26169] should_failslab+0xa8/0x100 [ 595.429770][T26169] __kmalloc_cache_noprof+0x88/0x660 [ 595.429791][T26169] ? rtnl_newlink+0x136/0x1be0 [ 595.429935][T26169] rtnl_newlink+0x136/0x1be0 [ 595.429958][T26169] ? unwind_next_frame+0xa5/0x23c0 [ 595.430003][T26169] ? __pfx_rtnl_newlink+0x10/0x10 [ 595.430034][T26169] ? __lock_acquire+0x6b5/0x2cf0 [ 595.430063][T26169] ? __lock_acquire+0x6b5/0x2cf0 [ 595.430085][T26169] ? __lock_acquire+0x6b5/0x2cf0 [ 595.430116][T26169] ? unwind_next_frame+0xa5/0x23c0 [ 595.430163][T26169] ? __lock_acquire+0x6b5/0x2cf0 [ 595.430187][T26169] ? is_bpf_text_address+0x26/0x2b0 [ 595.430208][T26169] ? kernel_text_address+0xa5/0xe0 [ 595.430260][T26169] ? __pfx_rtnl_newlink+0x10/0x10 [ 595.430282][T26169] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 595.430309][T26169] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 595.430331][T26169] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 595.430356][T26169] ? __lock_acquire+0x6b5/0x2cf0 [ 595.430386][T26169] netlink_rcv_skb+0x232/0x4b0 [ 595.430411][T26169] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 595.430435][T26169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.430467][T26169] ? netlink_deliver_tap+0x2e/0x1b0 [ 595.430497][T26169] netlink_unicast+0x80f/0x9b0 [ 595.430526][T26169] ? __pfx_netlink_unicast+0x10/0x10 [ 595.430549][T26169] ? netlink_sendmsg+0x650/0xb40 [ 595.430576][T26169] ? skb_put+0x11b/0x210 [ 595.430604][T26169] netlink_sendmsg+0x813/0xb40 [ 595.430635][T26169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.430661][T26169] ? aa_sock_msg_perm+0xf1/0x1b0 [ 595.430687][T26169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.430711][T26169] ____sys_sendmsg+0x972/0x9f0 [ 595.430736][T26169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.430761][T26169] ? import_iovec+0x73/0xa0 [ 595.430790][T26169] ___sys_sendmsg+0x2a5/0x360 [ 595.430812][T26169] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.430861][T26169] ? __fget_files+0x2a/0x420 [ 595.430884][T26169] ? __fget_files+0x3a0/0x420 [ 595.430917][T26169] __x64_sys_sendmsg+0x1bd/0x2a0 [ 595.430937][T26169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.430964][T26169] ? __pfx_ksys_write+0x10/0x10 [ 595.430993][T26169] do_syscall_64+0x14d/0xf80 [ 595.431017][T26169] ? trace_irq_disable+0x3b/0x150 [ 595.431039][T26169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.431057][T26169] ? clear_bhb_loop+0x40/0x90 [ 595.431077][T26169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.431095][T26169] RIP: 0033:0x7f9d0679c799 [ 595.431112][T26169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.431127][T26169] RSP: 002b:00007f9d049f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.431145][T26169] RAX: ffffffffffffffda RBX: 00007f9d06a15fa0 RCX: 00007f9d0679c799 [ 595.431157][T26169] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 595.431169][T26169] RBP: 00007f9d049f6090 R08: 0000000000000000 R09: 0000000000000000 [ 595.431180][T26169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.431191][T26169] R13: 00007f9d06a16038 R14: 00007f9d06a15fa0 R15: 00007ffed135d0c8 [ 595.431219][T26169] [ 595.431392][T26169] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5347'. [ 595.651090][T26179] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 595.834463][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 595.842535][ C0] lec:lec_tx_timeout: lec0 [ 595.884112][T26187] netlink: 'syz.3.5354': attribute type 1 has an invalid length. [ 595.899239][T26187] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 596.067732][T26203] lo speed is unknown, defaulting to 1000 [ 596.083935][T26203] wg1 speed is unknown, defaulting to 1000 [ 596.277587][T26203] lo speed is unknown, defaulting to 1000 [ 596.395591][T26215] FAULT_INJECTION: forcing a failure. [ 596.395591][T26215] name failslab, interval 1, probability 0, space 0, times 0 [ 596.437851][T26215] CPU: 0 UID: 0 PID: 26215 Comm: syz.2.5362 Not tainted syzkaller #0 PREEMPT(full) [ 596.437878][T26215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.437889][T26215] Call Trace: [ 596.437897][T26215] [ 596.437905][T26215] dump_stack_lvl+0xe8/0x150 [ 596.437938][T26215] should_fail_ex+0x412/0x560 [ 596.437966][T26215] should_failslab+0xa8/0x100 [ 596.437988][T26215] ? skb_clone+0x212/0x3a0 [ 596.438095][T26215] kmem_cache_alloc_noprof+0x87/0x650 [ 596.438113][T26215] ? __netlink_lookup+0xc6/0x8b0 [ 596.438145][T26215] skb_clone+0x212/0x3a0 [ 596.438167][T26215] __netlink_deliver_tap+0x404/0x850 [ 596.438202][T26215] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.438224][T26215] netlink_deliver_tap+0x19c/0x1b0 [ 596.438247][T26215] netlink_unicast+0x7e3/0x9b0 [ 596.438275][T26215] ? __pfx_netlink_unicast+0x10/0x10 [ 596.438296][T26215] ? netlink_sendmsg+0x650/0xb40 [ 596.438317][T26215] ? skb_put+0x11b/0x210 [ 596.438343][T26215] netlink_sendmsg+0x813/0xb40 [ 596.438372][T26215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.438398][T26215] ? aa_sock_msg_perm+0xf1/0x1b0 [ 596.438420][T26215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 596.438442][T26215] ____sys_sendmsg+0x972/0x9f0 [ 596.438464][T26215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.438488][T26215] ? import_iovec+0x73/0xa0 [ 596.438516][T26215] ___sys_sendmsg+0x2a5/0x360 [ 596.438537][T26215] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.438590][T26215] ? __fget_files+0x2a/0x420 [ 596.438614][T26215] ? __fget_files+0x3a0/0x420 [ 596.438649][T26215] __x64_sys_sendmsg+0x1bd/0x2a0 [ 596.438670][T26215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.438695][T26215] ? __pfx_ksys_write+0x10/0x10 [ 596.438725][T26215] do_syscall_64+0x14d/0xf80 [ 596.438748][T26215] ? trace_irq_disable+0x3b/0x150 [ 596.438771][T26215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.438789][T26215] ? clear_bhb_loop+0x40/0x90 [ 596.438810][T26215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.438827][T26215] RIP: 0033:0x7f308d39c799 [ 596.438845][T26215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.438860][T26215] RSP: 002b:00007f308b5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.438879][T26215] RAX: ffffffffffffffda RBX: 00007f308d615fa0 RCX: 00007f308d39c799 [ 596.438891][T26215] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 596.438902][T26215] RBP: 00007f308b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 596.438913][T26215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.438924][T26215] R13: 00007f308d616038 R14: 00007f308d615fa0 R15: 00007ffe260719f8 [ 596.438953][T26215] [ 596.567964][T26217] 0X: left allmulticast mode [ 596.639263][T26217] macvtap0: left promiscuous mode [ 596.722736][T26217] geneve1: left promiscuous mode [ 596.736585][T26217] bond4: left allmulticast mode [ 596.741756][T26217] geneve2: left promiscuous mode [ 596.747462][T26217] macsec1: left allmulticast mode [ 596.767236][T26217] vlan2: left allmulticast mode [ 596.773692][T26217] bridge4: left allmulticast mode [ 596.801071][T26217] veth5: left promiscuous mode [ 596.826516][T26217] bond7: left promiscuous mode [ 596.835402][T26217] vxcan7: left allmulticast mode [ 596.864226][T26220] 8021q: VLANs not supported on nr0 [ 596.875896][T26220] netlink: 'syz.3.5364': attribute type 10 has an invalid length. [ 596.883925][T26220] bond0: entered promiscuous mode [ 596.895603][T26220] bond_slave_0: entered promiscuous mode [ 596.901469][T26220] @0: entered promiscuous mode [ 596.917248][T26220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.203969][T26245] netlink: 'syz.0.5371': attribute type 14 has an invalid length. [ 597.840163][T26267] 8021q: VLANs not supported on syzkaller1 [ 598.014103][T26275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.160340][T26287] openvswitch: netlink: Missing key (keys=40, expected=80) [ 598.458473][T26309] tunl0: Caught tx_queue_len zero misconfig [ 598.601180][T26324] tipc: Enabled bearer , priority 10 [ 598.649370][T26325] netlink: 'syz.2.5400': attribute type 11 has an invalid length. [ 598.720320][T26330] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 598.758641][T26333] tunl0: Caught tx_queue_len zero misconfig [ 598.801471][T26333] syzkaller0: entered promiscuous mode [ 598.807908][T26333] syzkaller0: entered allmulticast mode [ 599.237521][T26359] lo speed is unknown, defaulting to 1000 [ 599.266772][T26359] wg1 speed is unknown, defaulting to 1000 [ 599.323494][T26362] FAULT_INJECTION: forcing a failure. [ 599.323494][T26362] name failslab, interval 1, probability 0, space 0, times 0 [ 599.354517][T26362] CPU: 0 UID: 0 PID: 26362 Comm: syz.3.5415 Not tainted syzkaller #0 PREEMPT(full) [ 599.354543][T26362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 599.354554][T26362] Call Trace: [ 599.354563][T26362] [ 599.354570][T26362] dump_stack_lvl+0xe8/0x150 [ 599.354600][T26362] should_fail_ex+0x412/0x560 [ 599.354627][T26362] should_failslab+0xa8/0x100 [ 599.354651][T26362] __kmalloc_cache_noprof+0x88/0x660 [ 599.354673][T26362] ? rtnl_newlink+0x136/0x1be0 [ 599.354703][T26362] rtnl_newlink+0x136/0x1be0 [ 599.354725][T26362] ? is_bpf_text_address+0x26/0x2b0 [ 599.354749][T26362] ? is_bpf_text_address+0x26/0x2b0 [ 599.354770][T26362] ? __pfx_rtnl_newlink+0x10/0x10 [ 599.354789][T26362] ? __kernel_text_address+0xd/0x30 [ 599.354841][T26362] ? unwind_get_return_address+0x4d/0x90 [ 599.354866][T26362] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 599.354885][T26362] ? arch_stack_walk+0xfb/0x150 [ 599.354927][T26362] ? stack_trace_save+0xa9/0x100 [ 599.354945][T26362] ? __pfx_stack_trace_save+0x10/0x10 [ 599.354964][T26362] ? stack_depot_save_flags+0x33/0x810 [ 599.354993][T26362] ? __lock_acquire+0x6b5/0x2cf0 [ 599.355017][T26362] ? netlink_unicast+0x80f/0x9b0 [ 599.355037][T26362] ? netlink_sendmsg+0x813/0xb40 [ 599.355059][T26362] ? look_up_lock_class+0x57/0x110 [ 599.355085][T26362] ? register_lock_class+0x31/0x2e0 [ 599.355113][T26362] ? __lock_acquire+0x6b5/0x2cf0 [ 599.355139][T26362] ? __lock_acquire+0x6b5/0x2cf0 [ 599.355169][T26362] ? do_raw_spin_lock+0x12b/0x2f0 [ 599.355211][T26362] ? __pfx_rtnl_newlink+0x10/0x10 [ 599.355238][T26362] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 599.355265][T26362] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 599.355295][T26362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.355322][T26362] ? __pfx_netlink_unicast+0x10/0x10 [ 599.355352][T26362] netlink_rcv_skb+0x232/0x4b0 [ 599.355377][T26362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.355401][T26362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.355433][T26362] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.355463][T26362] netlink_unicast+0x80f/0x9b0 [ 599.355492][T26362] ? __pfx_netlink_unicast+0x10/0x10 [ 599.355513][T26362] ? netlink_sendmsg+0x650/0xb40 [ 599.355535][T26362] ? skb_put+0x11b/0x210 [ 599.355563][T26362] netlink_sendmsg+0x813/0xb40 [ 599.355594][T26362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.355619][T26362] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.355643][T26362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.355665][T26362] ____sys_sendmsg+0x972/0x9f0 [ 599.355692][T26362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.355718][T26362] ? import_iovec+0x73/0xa0 [ 599.355747][T26362] ___sys_sendmsg+0x2a5/0x360 [ 599.355769][T26362] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.355816][T26362] ? __fget_files+0x2a/0x420 [ 599.355839][T26362] ? __fget_files+0x3a0/0x420 [ 599.355870][T26362] __x64_sys_sendmsg+0x1bd/0x2a0 [ 599.355889][T26362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.355914][T26362] ? __pfx_ksys_write+0x10/0x10 [ 599.355943][T26362] do_syscall_64+0x14d/0xf80 [ 599.355966][T26362] ? trace_irq_disable+0x3b/0x150 [ 599.355987][T26362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.356004][T26362] ? clear_bhb_loop+0x40/0x90 [ 599.356025][T26362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.356040][T26362] RIP: 0033:0x7f09c9b9c799 [ 599.356057][T26362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.356072][T26362] RSP: 002b:00007f09ca9e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.356091][T26362] RAX: ffffffffffffffda RBX: 00007f09c9e15fa0 RCX: 00007f09c9b9c799 [ 599.356104][T26362] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 599.356116][T26362] RBP: 00007f09ca9e5090 R08: 0000000000000000 R09: 0000000000000000 [ 599.356127][T26362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.356138][T26362] R13: 00007f09c9e16038 R14: 00007f09c9e15fa0 R15: 00007fff873769e8 [ 599.356168][T26362] [ 599.855383][T26359] lo speed is unknown, defaulting to 1000 [ 600.023728][T26376] vlan2: entered allmulticast mode [ 600.045466][T26376] bond0: entered allmulticast mode [ 600.058234][T26376] __nla_validate_parse: 34 callbacks suppressed [ 600.058253][T26376] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5417'. [ 600.123030][T26376] team0: Port device bond0 removed [ 600.187306][T26388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5420'. [ 600.198467][T26376] bond0 (unregistering): Released all slaves [ 600.361617][T26398] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5425'. [ 600.410212][T26398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5425'. [ 600.480469][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5427'. [ 600.515773][T16286] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 601.020359][T26428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5433'. [ 603.693617][T26439] lo speed is unknown, defaulting to 1000 [ 603.725566][T26439] wg1 speed is unknown, defaulting to 1000 [ 603.759379][T26455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5439'. [ 603.806284][T26456] veth1: entered promiscuous mode [ 603.811347][T26456] veth1: entered allmulticast mode [ 603.907192][T26439] lo speed is unknown, defaulting to 1000 [ 604.762644][T26473] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5443'. [ 604.790472][T26473] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5443'. [ 605.013048][T26490] pim6reg1: entered promiscuous mode [ 605.018838][T26490] pim6reg1: entered allmulticast mode [ 605.042934][T26490] Cannot find set identified by id 65534 to match [ 605.399767][T26494] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5446'. [ 606.545311][T26434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 606.657699][T26497] syzkaller0: entered promiscuous mode [ 606.663209][T26497] syzkaller0: entered allmulticast mode [ 606.679809][T26499] x_tables: duplicate underflow at hook 1 [ 606.736208][T26499] Bluetooth: MGMT ver 1.23 [ 606.768093][T26505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5449'. [ 606.795520][T26505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5449'. [ 606.912411][T26511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.991408][T26520] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5455'. [ 607.129495][ T30] audit: type=1800 audit(1773668074.139:12): pid=26521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5452" name="memory.events" dev="tmpfs" ino=2430 res=0 errno=0 [ 607.296276][T26538] validate_nla: 44 callbacks suppressed [ 607.296295][T26538] netlink: 'syz.4.5462': attribute type 33 has an invalid length. [ 607.321577][T26538] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5462'. [ 607.446426][T26542] netlink: 'syz.4.5462': attribute type 33 has an invalid length. [ 607.457151][T26542] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5462'. [ 607.461756][T26544] syzkaller0: entered promiscuous mode [ 607.472826][T26538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5462'. [ 607.483617][T26544] syzkaller0: entered allmulticast mode [ 607.518822][T26538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 607.771877][T26559] @0: renamed from bond_slave_1 [ 607.800190][T26557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5468'. [ 607.971866][T26563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5470'. [ 608.104838][T26579] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5475'. [ 608.232395][T26587] xt_limit: Overflow, try lower: 268435456/134217728 [ 608.244899][T26586] bond0: left promiscuous mode [ 608.255804][T26586] bond_slave_0: left promiscuous mode [ 608.265922][T26586] @0: left promiscuous mode [ 608.293997][ T5940] lo speed is unknown, defaulting to 1000 [ 608.328283][ T5940] sqz0: Port: 1 Link DOWN [ 608.354161][ T5885] lo speed is unknown, defaulting to 1000 [ 608.358842][T26596] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 608.652894][T26610] netlink: 'syz.0.5484': attribute type 1 has an invalid length. [ 608.691065][T26615] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 609.156391][T26641] FAULT_INJECTION: forcing a failure. [ 609.156391][T26641] name failslab, interval 1, probability 0, space 0, times 0 [ 609.200080][T26641] CPU: 0 UID: 0 PID: 26641 Comm: syz.2.5494 Not tainted syzkaller #0 PREEMPT(full) [ 609.200107][T26641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.200118][T26641] Call Trace: [ 609.200126][T26641] [ 609.200134][T26641] dump_stack_lvl+0xe8/0x150 [ 609.200165][T26641] should_fail_ex+0x412/0x560 [ 609.200194][T26641] should_failslab+0xa8/0x100 [ 609.200218][T26641] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 609.200236][T26641] ? __alloc_skb+0x1d0/0x7d0 [ 609.200268][T26641] ? __local_bh_enable_ip+0xd0/0x130 [ 609.200293][T26641] __alloc_skb+0x1d0/0x7d0 [ 609.200321][T26641] inet_ifmcaddr_notify+0x7e/0x150 [ 609.200450][T26641] ____ip_mc_inc_group+0x9a8/0xdd0 [ 609.200479][T26641] ip_mc_up+0x115/0x2e0 [ 609.200499][T26641] inetdev_event+0xff6/0x1610 [ 609.200554][T26641] ? __pfx_inetdev_event+0x10/0x10 [ 609.200574][T26641] ? preempt_schedule_notrace+0x57/0x90 [ 609.200609][T26641] notifier_call_chain+0x1be/0x400 [ 609.200644][T26641] __dev_notify_flags+0x1a9/0x310 [ 609.200703][T26641] ? __pfx___dev_notify_flags+0x10/0x10 [ 609.200727][T26641] ? __dev_change_flags+0x4c6/0x690 [ 609.200754][T26641] ? __pfx___dev_change_flags+0x10/0x10 [ 609.200779][T26641] ? is_bpf_text_address+0x26/0x2b0 [ 609.200801][T26641] netif_change_flags+0xe8/0x1a0 [ 609.200832][T26641] do_setlink+0xf82/0x4590 [ 609.200861][T26641] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 609.200887][T26641] ? __pfx_do_setlink+0x10/0x10 [ 609.200910][T26641] ? __lock_acquire+0x6b5/0x2cf0 [ 609.200943][T26641] ? rcu_is_watching+0x15/0xb0 [ 609.200968][T26641] ? __mutex_trylock_common+0x158/0x260 [ 609.200995][T26641] ? __pfx___mutex_trylock_common+0x10/0x10 [ 609.201023][T26641] ? rcu_is_watching+0x15/0xb0 [ 609.201045][T26641] ? trace_contention_end+0x3d/0x150 [ 609.201069][T26641] ? __mutex_lock+0x319/0x1300 [ 609.201095][T26641] ? __pfx___nla_validate_parse+0x10/0x10 [ 609.201126][T26641] ? rtnl_newlink+0x8a1/0x1be0 [ 609.201150][T26641] ? __pfx___mutex_lock+0x10/0x10 [ 609.201183][T26641] ? ns_capable+0x89/0xe0 [ 609.201211][T26641] rtnl_newlink+0x15a9/0x1be0 [ 609.201253][T26641] ? __pfx_rtnl_newlink+0x10/0x10 [ 609.201276][T26641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.201328][T26641] ? kasan_quarantine_put+0xbb/0x1f0 [ 609.201348][T26641] ? lockdep_hardirqs_on+0x7a/0x110 [ 609.201375][T26641] ? kmem_cache_free+0x187/0x630 [ 609.201393][T26641] ? nlmon_xmit+0xb0/0x100 [ 609.201527][T26641] ? __lock_acquire+0x6b5/0x2cf0 [ 609.201553][T26641] ? __local_bh_enable_ip+0xd0/0x130 [ 609.201575][T26641] ? lockdep_hardirqs_on+0x7a/0x110 [ 609.201598][T26641] ? __dev_queue_xmit+0x28b/0x3870 [ 609.201616][T26641] ? __local_bh_enable_ip+0xd0/0x130 [ 609.201635][T26641] ? __dev_queue_xmit+0x28b/0x3870 [ 609.201678][T26641] ? __pfx_rtnl_newlink+0x10/0x10 [ 609.201702][T26641] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 609.201730][T26641] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 609.201752][T26641] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 609.201772][T26641] ? ref_tracker_free+0x693/0x840 [ 609.201794][T26641] ? __copy_skb_header+0xa3/0x4a0 [ 609.201812][T26641] ? __pfx_ref_tracker_free+0x10/0x10 [ 609.201842][T26641] netlink_rcv_skb+0x232/0x4b0 [ 609.201866][T26641] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 609.201891][T26641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.201921][T26641] ? netlink_deliver_tap+0x2e/0x1b0 [ 609.201949][T26641] netlink_unicast+0x80f/0x9b0 [ 609.201975][T26641] ? __pfx_netlink_unicast+0x10/0x10 [ 609.201996][T26641] ? netlink_sendmsg+0x650/0xb40 [ 609.202016][T26641] ? skb_put+0x11b/0x210 [ 609.202042][T26641] netlink_sendmsg+0x813/0xb40 [ 609.202075][T26641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.202099][T26641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 609.202122][T26641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.202144][T26641] ____sys_sendmsg+0x972/0x9f0 [ 609.202169][T26641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.202193][T26641] ? import_iovec+0x73/0xa0 [ 609.202237][T26641] ___sys_sendmsg+0x2a5/0x360 [ 609.202268][T26641] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.202320][T26641] ? __fget_files+0x2a/0x420 [ 609.202343][T26641] ? __fget_files+0x3a0/0x420 [ 609.202374][T26641] __x64_sys_sendmsg+0x1bd/0x2a0 [ 609.202393][T26641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 609.202418][T26641] ? __pfx_ksys_write+0x10/0x10 [ 609.202448][T26641] do_syscall_64+0x14d/0xf80 [ 609.202471][T26641] ? trace_irq_disable+0x3b/0x150 [ 609.202493][T26641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.202511][T26641] ? clear_bhb_loop+0x40/0x90 [ 609.202532][T26641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.202550][T26641] RIP: 0033:0x7f308d39c799 [ 609.202568][T26641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.202582][T26641] RSP: 002b:00007f308b5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.202601][T26641] RAX: ffffffffffffffda RBX: 00007f308d615fa0 RCX: 00007f308d39c799 [ 609.202614][T26641] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 609.202626][T26641] RBP: 00007f308b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 609.202637][T26641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.202648][T26641] R13: 00007f308d616038 R14: 00007f308d615fa0 R15: 00007ffe260719f8 [ 609.202678][T26641] [ 610.283543][T26688] netlink: 'syz.3.5507': attribute type 1 has an invalid length. [ 610.408350][T26688] 8021q: adding VLAN 0 to HW filter on device bond10 [ 610.438581][T26697] __nla_validate_parse: 10 callbacks suppressed [ 610.438602][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5507'. [ 610.476695][T26704] vlan2: entered promiscuous mode [ 610.481889][T26704] bond10: entered promiscuous mode [ 610.491046][T26704] vlan2: entered allmulticast mode [ 610.497012][T26704] bond10: entered allmulticast mode [ 610.573847][T26688] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5507'. [ 610.680380][T26688] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 610.738300][T26688] bond10: (slave batadv1): making interface the new active one [ 610.753954][T26688] batadv1: entered promiscuous mode [ 610.778362][T26688] batadv1: entered allmulticast mode [ 610.797407][T26688] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 610.821759][T26723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5510'. [ 611.278149][T26757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5521'. [ 611.416331][T26766] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5525'. [ 611.566874][T26786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5523'. [ 611.602514][T26785] syzkaller1: entered promiscuous mode [ 611.618809][T26786] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5523'. [ 611.622144][T26785] syzkaller1: entered allmulticast mode [ 611.669820][T26786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5523'. [ 611.993141][T26809] lo speed is unknown, defaulting to 1000 [ 612.007846][T26809] wg1 speed is unknown, defaulting to 1000 [ 612.015901][T26803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5530'. [ 612.091258][T26803] bond1: entered promiscuous mode [ 612.126100][T26803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.377404][T26822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.417608][T26822] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 612.443697][T26822] bond1: (slave sit1): Error -95 calling set_mac_address [ 612.582398][T26809] lo speed is unknown, defaulting to 1000 [ 612.645699][T26847] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5539'. [ 612.715235][T26824] lo speed is unknown, defaulting to 1000 [ 612.726915][T26824] wg1 speed is unknown, defaulting to 1000 [ 612.841364][T26850] bridge0: port 1(veth0_to_bridge) entered blocking state [ 612.861471][T26850] bridge0: port 1(veth0_to_bridge) entered disabled state [ 612.888687][T26850] veth0_to_bridge: entered allmulticast mode [ 612.917003][T26850] veth0_to_bridge: entered promiscuous mode [ 613.404909][T26824] lo speed is unknown, defaulting to 1000 [ 613.687081][ T5490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.096225][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 614.735156][T26943] netlink: 'syz.3.5555': attribute type 12 has an invalid length. [ 614.772163][T26943] netlink: 'syz.3.5555': attribute type 11 has an invalid length. [ 615.404921][T26970] x_tables: duplicate underflow at hook 2 [ 615.516653][T26978] __nla_validate_parse: 11 callbacks suppressed [ 615.516671][T26978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5563'. [ 615.522256][T26975] lo speed is unknown, defaulting to 1000 [ 615.522946][T26978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5563'. [ 615.636438][T26975] wg1 speed is unknown, defaulting to 1000 [ 615.710979][T26987] 8021q: VLANs not supported on tunl0 [ 615.871891][T26994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5570'. [ 615.899992][T26994] FAULT_INJECTION: forcing a failure. [ 615.899992][T26994] name failslab, interval 1, probability 0, space 0, times 0 [ 615.919946][T26994] CPU: 0 UID: 0 PID: 26994 Comm: syz.4.5570 Not tainted syzkaller #0 PREEMPT(full) [ 615.919971][T26994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.919982][T26994] Call Trace: [ 615.919990][T26994] [ 615.919997][T26994] dump_stack_lvl+0xe8/0x150 [ 615.920027][T26994] should_fail_ex+0x412/0x560 [ 615.920054][T26994] should_failslab+0xa8/0x100 [ 615.920078][T26994] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 615.920098][T26994] ? __alloc_skb+0x186/0x7d0 [ 615.920121][T26994] ? __alloc_skb+0x1d0/0x7d0 [ 615.920142][T26994] ? __local_bh_enable_ip+0xd0/0x130 [ 615.920167][T26994] __alloc_skb+0x1d0/0x7d0 [ 615.920205][T26994] netlink_sendmsg+0x5d4/0xb40 [ 615.920239][T26994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.920264][T26994] ? aa_sock_msg_perm+0xf1/0x1b0 [ 615.920290][T26994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.920313][T26994] ____sys_sendmsg+0x972/0x9f0 [ 615.920339][T26994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.920366][T26994] ? import_iovec+0x73/0xa0 [ 615.920396][T26994] ___sys_sendmsg+0x2a5/0x360 [ 615.920420][T26994] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.920469][T26994] ? __fget_files+0x2a/0x420 [ 615.920494][T26994] ? __fget_files+0x3a0/0x420 [ 615.920527][T26994] __x64_sys_sendmsg+0x1bd/0x2a0 [ 615.920548][T26994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.920576][T26994] ? __pfx_ksys_write+0x10/0x10 [ 615.920605][T26994] do_syscall_64+0x14d/0xf80 [ 615.920629][T26994] ? trace_irq_disable+0x3b/0x150 [ 615.920653][T26994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.920671][T26994] ? clear_bhb_loop+0x40/0x90 [ 615.920693][T26994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.920711][T26994] RIP: 0033:0x7f7c85b9c799 [ 615.920728][T26994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.920744][T26994] RSP: 002b:00007f7c869f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.920762][T26994] RAX: ffffffffffffffda RBX: 00007f7c85e15fa0 RCX: 00007f7c85b9c799 [ 615.920774][T26994] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 615.920785][T26994] RBP: 00007f7c869f3090 R08: 0000000000000000 R09: 0000000000000000 [ 615.920795][T26994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.920805][T26994] R13: 00007f7c85e16038 R14: 00007f7c85e15fa0 R15: 00007ffeaf6355e8 [ 615.920854][T26994] [ 616.162092][T26997] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5571'. [ 616.292694][T26975] lo speed is unknown, defaulting to 1000 [ 616.391977][T27011] netlink: 'syz.0.5574': attribute type 10 has an invalid length. [ 616.462325][T27011] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 616.473692][T27013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5575'. [ 616.476843][T27010] can: request_module (can-proto-0) failed. [ 616.546755][T27011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5574'. [ 616.577252][T27011] bridge_slave_1: left allmulticast mode [ 616.583022][T27011] bridge_slave_1: left promiscuous mode [ 616.617354][T27011] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.647017][T27011] bridge_slave_0: left allmulticast mode [ 616.652716][T27011] bridge_slave_0: left promiscuous mode [ 616.660332][T27011] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.678379][T27027] netlink: 'syz.1.5578': attribute type 10 has an invalid length. [ 616.691649][T27027] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5578'. [ 616.698057][T27028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5577'. [ 616.720473][T27011] bond0: (slave bridge0): Releasing backup interface [ 616.781333][T27027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 616.792526][T27027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.021248][T27048] lo speed is unknown, defaulting to 1000 [ 617.036797][T27048] wg1 speed is unknown, defaulting to 1000 [ 617.064552][T27045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5584'. [ 617.073793][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5585'. [ 617.087513][T27052] netlink: 'syz.2.5585': attribute type 1 has an invalid length. [ 617.095890][T27052] block nbd3: Unsupported socket: should be TCP or UNIX. [ 617.344820][T27066] netlink: 'syz.2.5586': attribute type 6 has an invalid length. [ 617.840817][T27048] lo speed is unknown, defaulting to 1000 [ 618.002344][T27082] dummy0: entered promiscuous mode [ 618.008819][T27082] vlan2: entered promiscuous mode [ 618.081539][T27099] netlink: 'syz.0.5595': attribute type 1 has an invalid length. [ 618.210900][T27102] netlink: 'syz.0.5596': attribute type 10 has an invalid length. [ 618.221495][T27102] dummy0: entered promiscuous mode [ 618.228675][T27102] bond0: (slave dummy0): Releasing backup interface [ 618.247702][T27102] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 619.188451][T27125] netlink: 'syz.4.5602': attribute type 14 has an invalid length. [ 619.197339][T27122] lo speed is unknown, defaulting to 1000 [ 619.219176][T27125] netlink: 'syz.4.5602': attribute type 12 has an invalid length. [ 619.231902][T27122] wg1 speed is unknown, defaulting to 1000 [ 619.282502][T27129] Cannot find del_set index 3 as target [ 619.615267][T27148] batadv_slave_0: Caught tx_queue_len zero misconfig [ 619.635588][T27148] syzkaller0: entered promiscuous mode [ 619.643352][T27148] syzkaller0: entered allmulticast mode [ 620.040735][T27122] lo speed is unknown, defaulting to 1000 [ 620.185056][T27178] lo speed is unknown, defaulting to 1000 [ 620.215363][T27178] wg1 speed is unknown, defaulting to 1000 [ 620.612121][T27178] lo speed is unknown, defaulting to 1000 [ 620.917769][T27210] __nla_validate_parse: 10 callbacks suppressed [ 620.917791][T27210] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5625'. [ 620.967841][T27214] batadv_slave_0: Caught tx_queue_len zero misconfig [ 620.985650][T27209] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5625'. [ 620.999867][T27210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5625'. [ 621.130222][T27225] validate_nla: 1 callbacks suppressed [ 621.130239][T27225] netlink: 'syz.2.5630': attribute type 3 has an invalid length. [ 621.306098][T27236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5633'. [ 621.777532][T27255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5634'. [ 622.090224][T27270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5639'. [ 622.304068][T27276] netlink: 'syz.2.5641': attribute type 1 has an invalid length. [ 622.334763][T27276] netlink: 'syz.2.5641': attribute type 2 has an invalid length. [ 622.352799][T27276] netlink: 'syz.2.5641': attribute type 3 has an invalid length. [ 622.676683][T27288] tipc: Enabling of bearer rejected, failed to enable media [ 622.769654][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5646'. [ 622.783208][T27293] netlink: 'syz.2.5646': attribute type 3 has an invalid length. [ 622.875554][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5649'. [ 622.887775][T27291] netlink: 'syz.0.5647': attribute type 4 has an invalid length. [ 622.979476][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5647'. [ 623.018449][T27309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5651'. [ 623.839901][T27357] netlink: 'syz.1.5660': attribute type 2 has an invalid length. [ 623.868209][T27357] netlink: 'syz.1.5660': attribute type 9 has an invalid length. [ 624.100692][T27369] lo speed is unknown, defaulting to 1000 [ 624.123030][T27377] netlink: 'syz.1.5667': attribute type 1 has an invalid length. [ 624.126224][T27369] wg1 speed is unknown, defaulting to 1000 [ 624.193160][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 624.206603][T27385] openvswitch: netlink: Key 20 has unexpected len 13 expected 4 [ 624.402599][T27397] netlink: 'syz.4.5673': attribute type 83 has an invalid length. [ 624.653653][T27369] lo speed is unknown, defaulting to 1000 [ 624.708390][T27410] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 624.790584][T27418] lo speed is unknown, defaulting to 1000 [ 624.822645][T27418] wg1 speed is unknown, defaulting to 1000 [ 625.289485][T27418] lo speed is unknown, defaulting to 1000 [ 626.519602][T27462] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 626.530811][T27466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.550497][T27466] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 626.561612][T27466] bond0 (unregistering): Released all slaves [ 626.610169][T16289] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.620353][T16289] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.630467][T16289] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.653354][T16289] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.728171][T27477] __nla_validate_parse: 52 callbacks suppressed [ 626.728191][T27477] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5695'. [ 626.746464][T27477] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 626.784225][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5697'. [ 626.808558][T27476] ipt_REJECT: TCP_RESET invalid for non-tcp [ 626.825612][T27474] ipt_REJECT: TCP_RESET invalid for non-tcp [ 627.158097][T27504] tipc: Enabling of bearer rejected, failed to enable media [ 627.459180][T27515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5706'. [ 627.507790][T27512] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.545155][T27512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.586468][ T5885] lo speed is unknown, defaulting to 1000 [ 627.606026][ T5885] sqz0: Port: 1 Link ACTIVE [ 627.666908][ T5885] lo speed is unknown, defaulting to 1000 [ 627.736162][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5708'. [ 627.859857][T27528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5709'. [ 627.925693][T27533] validate_nla: 33 callbacks suppressed [ 627.925711][T27533] netlink: 'syz.2.5711': attribute type 1 has an invalid length. [ 628.224149][T27544] syzkaller1: left promiscuous mode [ 628.235725][T27544] syzkaller1: left allmulticast mode [ 628.452853][T27567] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20000 [ 628.521767][T27577] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5722'. [ 628.583218][T27581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5722'. [ 628.640446][T27585] veth0_to_bridge: entered promiscuous mode [ 628.652889][T27584] veth0_to_bridge: left promiscuous mode [ 628.689973][T27577] lo speed is unknown, defaulting to 1000 [ 628.697788][T27577] wg1 speed is unknown, defaulting to 1000 [ 628.779848][T27591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5725'. [ 629.001194][T27577] lo speed is unknown, defaulting to 1000 [ 629.110950][T27601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5730'. [ 629.223424][T27607] netlink: 'syz.3.5732': attribute type 15 has an invalid length. [ 629.329576][T27613] netlink: 'syz.0.5734': attribute type 1 has an invalid length. [ 629.351309][T27613] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 629.557400][T27620] team0: Port device syz_tun removed [ 629.626197][T27620] team0: Port device team_slave_0 removed [ 629.648756][T27620] team0: Port device team_slave_1 removed [ 629.656445][T27620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.678058][T27620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.695679][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 629.703755][ C0] lec:lec_tx_timeout: lec0 [ 629.717980][T27620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 629.758632][T27627] team0: Mode changed to "loadbalance" [ 629.799980][T27623] lo speed is unknown, defaulting to 1000 [ 629.835217][T27623] wg1 speed is unknown, defaulting to 1000 [ 629.865192][T27635] x9: renamed from bridge_slave_0 [ 630.357643][T27649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5744'. [ 630.698674][T27623] lo speed is unknown, defaulting to 1000 [ 631.050630][T27683] bridge0: entered promiscuous mode [ 631.068944][T27683] bridge0: entered allmulticast mode [ 631.093543][T27683] team0: Port device bridge0 added [ 631.128455][T27683] bridge6: entered promiscuous mode [ 631.134930][T27683] bridge6: entered allmulticast mode [ 631.146508][T27683] team0: Port device bridge6 added [ 631.160840][T27683] bridge7: entered promiscuous mode [ 631.167983][T27683] bridge7: entered allmulticast mode [ 631.179734][T27683] team0: Port device bridge7 added [ 631.217120][T27683] bridge8: entered promiscuous mode [ 631.222423][T27683] bridge8: entered allmulticast mode [ 631.231429][T27683] team0: Port device bridge8 added [ 631.253731][T27683] bridge9: entered promiscuous mode [ 631.259798][T27683] bridge9: entered allmulticast mode [ 631.270253][T27683] team0: Port device bridge9 added [ 631.276416][T27686] syzkaller0: entered promiscuous mode [ 631.282169][T27686] syzkaller0: entered allmulticast mode [ 631.306068][T27683] bridge10: entered promiscuous mode [ 631.312531][T27683] bridge10: entered allmulticast mode [ 631.324286][T27683] team0: Port device bridge10 added [ 631.342088][T27683] bridge11: entered promiscuous mode [ 631.348266][T27683] bridge11: entered allmulticast mode [ 631.361175][T27683] team0: Port device bridge11 added [ 631.466513][T27683] bridge12: entered promiscuous mode [ 631.471886][T27683] bridge12: entered allmulticast mode [ 631.481136][T27683] team0: Port device bridge12 added [ 631.494712][T27683] bridge13: entered promiscuous mode [ 631.500077][T27683] bridge13: entered allmulticast mode [ 631.510007][T27683] team0: Port device bridge13 added [ 631.551044][T27683] bridge14: entered promiscuous mode [ 631.555432][T27694] netlink: 'syz.2.5757': attribute type 1 has an invalid length. [ 631.560394][T27683] bridge14: entered allmulticast mode [ 631.573249][T27683] team0: Port device bridge14 added [ 631.592855][T27683] bridge15: entered promiscuous mode [ 631.600527][T27683] bridge15: entered allmulticast mode [ 631.615540][T27683] team0: Port device bridge15 added [ 631.630801][T27683] bridge16: entered promiscuous mode [ 631.638096][T27683] bridge16: entered allmulticast mode [ 631.649201][T27683] team0: Port device bridge16 added [ 631.747190][T27683] bridge17: entered promiscuous mode [ 631.778207][T27683] bridge17: entered allmulticast mode [ 631.810224][T27683] team0: Port device bridge17 added [ 631.828054][T27683] __nla_validate_parse: 16 callbacks suppressed [ 631.828073][T27683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5755'. [ 631.912654][T27683] bridge18: entered promiscuous mode [ 631.928497][T27683] bridge18: entered allmulticast mode [ 631.995983][T27683] team0: Port device bridge18 added [ 632.046351][T27715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5760'. [ 632.235159][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5764'. [ 632.386017][T27731] netlink: 'syz.0.5767': attribute type 2 has an invalid length. [ 632.472238][T27743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5770'. [ 632.481993][T27743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5770'. [ 632.513852][T27745] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5771'. [ 632.540179][T27745] netlink: 245 bytes leftover after parsing attributes in process `syz.0.5771'. [ 632.611990][T27750] SET target dimension over the limit! [ 632.899773][T27777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5778'. [ 632.905312][T27769] lo speed is unknown, defaulting to 1000 [ 632.926733][T27769] wg1 speed is unknown, defaulting to 1000 [ 632.968869][T27767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5778'. [ 633.171636][T27789] gretap0: entered promiscuous mode [ 633.188981][T27789] vlan2: entered promiscuous mode [ 633.257852][T27769] lo speed is unknown, defaulting to 1000 [ 633.316522][T27800] macvlan1: entered promiscuous mode [ 633.841432][T27827] xt_bpf: check failed: parse error [ 633.998494][T27830] netlink: 'syz.4.5798': attribute type 13 has an invalid length. [ 634.042478][T27830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.090130][T27839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5800'. [ 634.105644][T27830] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 634.780159][T16295] dvmrp1: left allmulticast mode [ 634.975367][T16295] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 634.987066][T16295] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 635.148844][T16295] batman_adv: batadv0: Removing interface: gretap1 [ 635.351327][T16295] bond4 (unregistering): (slave bridge4): Releasing active interface [ 635.359807][T16295] bridge4 (unregistering): left promiscuous mode [ 635.366606][T16295] bridge4 (unregistering): left allmulticast mode [ 635.528309][T16295] bond1 (unregistering): Released all slaves [ 635.541058][T16295] bond2 (unregistering): Released all slaves [ 635.553747][T16295] bond0 (unregistering): Released all slaves [ 635.568190][T16295] bond3 (unregistering): Released all slaves [ 635.585251][T16295] bond4 (unregistering): Released all slaves [ 635.608046][T16295] bond5 (unregistering): Released all slaves [ 635.623065][T16295] bond6 (unregistering): Released all slaves [ 635.635815][T16295] bond7 (unregistering): Released all slaves [ 635.649727][T16295] bond8 (unregistering): Released all slaves [ 635.670842][T16295] bond9 (unregistering): Released all slaves [ 635.683291][T16295] bond10 (unregistering): Released all slaves [ 635.697170][T16295] bond11 (unregistering): Released all slaves [ 635.710739][T16295] bond12 (unregistering): Released all slaves [ 635.723010][T16295] bond13 (unregistering): Released all slaves [ 635.982411][T16295] hmac(sha224: left promiscuous mode [ 636.098594][T16295] M: left promiscuous mode [ 636.101547][T27926] netlink: 'syz.3.5824': attribute type 83 has an invalid length. [ 636.183283][T27933] lo speed is unknown, defaulting to 1000 [ 636.207400][T27929] lo speed is unknown, defaulting to 1000 [ 636.216165][T27933] wg1 speed is unknown, defaulting to 1000 [ 636.225009][T27938] lo: Caught tx_queue_len zero misconfig [ 636.230681][T27938] netlink: 'syz.1.5827': attribute type 9 has an invalid length. [ 636.438359][T16295] tipc: Disabling bearer [ 636.453679][T16295] tipc: Left network mode [ 636.548571][T27929] wg1 speed is unknown, defaulting to 1000 [ 636.555985][T27933] lo speed is unknown, defaulting to 1000 [ 637.247992][T27980] __nla_validate_parse: 5 callbacks suppressed [ 637.248020][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5839'. [ 637.389028][T27929] lo speed is unknown, defaulting to 1000 [ 638.101491][T28009] syzkaller0: entered promiscuous mode [ 638.112818][T28009] syzkaller0: entered allmulticast mode [ 638.337392][T28014] bond0: Caught tx_queue_len zero misconfig [ 639.036885][T16295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.049941][T16295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.074944][T16295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.084842][T16295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.106344][T16295] veth1_macvtap: left promiscuous mode [ 639.112201][T16295] veth0_macvtap: left promiscuous mode [ 639.492384][T16295] team_slave_1 (unregistering): left promiscuous mode [ 639.499627][T16295] team_slave_1 (unregistering): left allmulticast mode [ 639.509328][T16295] team0 (unregistering): Port device team_slave_1 removed [ 639.538662][T16295] team_slave_0 (unregistering): left promiscuous mode [ 639.545926][T16295] team_slave_0 (unregistering): left allmulticast mode [ 639.556031][T16295] team0 (unregistering): Port device team_slave_0 removed [ 639.669507][T28029] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5853'. [ 639.672345][T16295] dummy0 (unregistering): left promiscuous mode [ 639.687239][T16295] team0 (unregistering): Port device dummy0 removed [ 639.694037][T16295] dummy0 (unregistering): left allmulticast mode [ 639.733323][T28030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5853'. [ 639.794200][T28033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5853'. [ 639.805393][T28030] netlink: 67 bytes leftover after parsing attributes in process `syz.4.5853'. [ 639.825532][T28030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5853'. [ 639.994042][T16295] IPVS: stop unused estimator thread 0... [ 640.182621][T27982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.366695][T28044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5857'. [ 640.785252][T28082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5865'. [ 640.794227][T28082] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 641.062097][T28102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5870'. [ 641.190377][T28106] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3917940981/3917940982 [ 641.200428][T28106] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3917940981/3917940982 [ 641.854951][T28144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5878'. [ 642.133244][T28155] ip6tnl4: entered allmulticast mode [ 642.341017][T28178] __nla_validate_parse: 2 callbacks suppressed [ 642.341037][T28178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5889'. [ 642.392972][T28178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5889'. [ 642.492933][T28186] tipc: Enabled bearer , priority 0 [ 642.502628][T28186] syzkaller0: entered promiscuous mode [ 642.509095][T28186] syzkaller0: entered allmulticast mode [ 642.529861][T28186] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5891'. [ 642.589011][T28186] tipc: Resetting bearer [ 642.630889][T28185] tipc: Resetting bearer [ 642.678780][T28185] tipc: Disabling bearer [ 642.709896][T28193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5894'. [ 642.734958][T28193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5894'. [ 642.960870][T28209] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 642.988125][T28209] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 643.203239][T28221] lo speed is unknown, defaulting to 1000 [ 643.257874][T28221] wg1 speed is unknown, defaulting to 1000 [ 643.349513][T28236] FAULT_INJECTION: forcing a failure. [ 643.349513][T28236] name failslab, interval 1, probability 0, space 0, times 0 [ 643.382692][T28236] CPU: 0 UID: 0 PID: 28236 Comm: syz.3.5907 Not tainted syzkaller #0 PREEMPT(full) [ 643.382718][T28236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.382729][T28236] Call Trace: [ 643.382737][T28236] [ 643.382746][T28236] dump_stack_lvl+0xe8/0x150 [ 643.382776][T28236] should_fail_ex+0x412/0x560 [ 643.382804][T28236] should_failslab+0xa8/0x100 [ 643.382827][T28236] ? skb_clone+0x212/0x3a0 [ 643.382848][T28236] kmem_cache_alloc_noprof+0x87/0x650 [ 643.382866][T28236] ? __netlink_lookup+0xc6/0x8b0 [ 643.382899][T28236] skb_clone+0x212/0x3a0 [ 643.382921][T28236] __netlink_deliver_tap+0x404/0x850 [ 643.382956][T28236] ? netlink_deliver_tap+0x2e/0x1b0 [ 643.382979][T28236] netlink_deliver_tap+0x19c/0x1b0 [ 643.383004][T28236] netlink_unicast+0x7e3/0x9b0 [ 643.383034][T28236] ? __pfx_netlink_unicast+0x10/0x10 [ 643.383058][T28236] ? netlink_sendmsg+0x650/0xb40 [ 643.383079][T28236] ? skb_put+0x11b/0x210 [ 643.383108][T28236] netlink_sendmsg+0x813/0xb40 [ 643.383141][T28236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.383168][T28236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 643.383193][T28236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 643.383217][T28236] ____sys_sendmsg+0x972/0x9f0 [ 643.383244][T28236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.383272][T28236] ? import_iovec+0x73/0xa0 [ 643.383302][T28236] ___sys_sendmsg+0x2a5/0x360 [ 643.383325][T28236] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.383377][T28236] ? __fget_files+0x2a/0x420 [ 643.383401][T28236] ? __fget_files+0x3a0/0x420 [ 643.383435][T28236] __x64_sys_sendmsg+0x1bd/0x2a0 [ 643.383457][T28236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 643.383493][T28236] ? __pfx_ksys_write+0x10/0x10 [ 643.383524][T28236] do_syscall_64+0x14d/0xf80 [ 643.383551][T28236] ? trace_irq_disable+0x3b/0x150 [ 643.383574][T28236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.383593][T28236] ? clear_bhb_loop+0x40/0x90 [ 643.383614][T28236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.383632][T28236] RIP: 0033:0x7f09c9b9c799 [ 643.383651][T28236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.383666][T28236] RSP: 002b:00007f09ca9e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.383686][T28236] RAX: ffffffffffffffda RBX: 00007f09c9e15fa0 RCX: 00007f09c9b9c799 [ 643.383700][T28236] RDX: 0000000020000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 643.383712][T28236] RBP: 00007f09ca9e5090 R08: 0000000000000000 R09: 0000000000000000 [ 643.383723][T28236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.383734][T28236] R13: 00007f09c9e16038 R14: 00007f09c9e15fa0 R15: 00007fff873769e8 [ 643.383765][T28236] [ 643.683382][T28241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5909'. [ 643.773907][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5911'. [ 643.881194][T28221] lo speed is unknown, defaulting to 1000 [ 644.062440][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.073659][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.090056][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.098148][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.106573][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 644.152382][T28251] lo speed is unknown, defaulting to 1000 [ 644.202654][T28251] wg1 speed is unknown, defaulting to 1000 [ 644.554487][T28251] lo speed is unknown, defaulting to 1000 [ 645.069443][T28270] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5918'. [ 645.278527][T28281] lo speed is unknown, defaulting to 1000 [ 645.340659][T28281] wg1 speed is unknown, defaulting to 1000 [ 645.682918][T28281] lo speed is unknown, defaulting to 1000 [ 645.816559][T28251] chnl_net:caif_netlink_parms(): no params data found [ 645.866593][T28306] rdma_op ffff8880617fb9f0 conn xmit_rdma 0000000000000000 [ 645.923302][T28306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5930'. [ 646.068069][T28251] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.075843][T28251] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.083228][T28251] bridge_slave_0: entered allmulticast mode [ 646.092377][T28251] bridge_slave_0: entered promiscuous mode [ 646.115899][T28251] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.123295][T28251] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.131472][T28251] bridge_slave_1: entered allmulticast mode [ 646.139757][T28251] bridge_slave_1: entered promiscuous mode [ 646.171237][T28323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5931'. [ 646.174599][T18070] Bluetooth: hci1: command tx timeout [ 646.190832][T28323] netlink: 'syz.2.5931': attribute type 5 has an invalid length. [ 646.223976][T28323] netlink: 'syz.2.5931': attribute type 5 has an invalid length. [ 646.227140][T28251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.248745][T28251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.440067][T28251] team0: Port device team_slave_0 added [ 646.451360][T28251] team0: Port device team_slave_1 added [ 646.689946][T28251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.703551][T28251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.764470][T28251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.837759][T28251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.851198][T28251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.910944][T28251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.134083][T28251] hsr_slave_0: entered promiscuous mode [ 647.175701][T28251] hsr_slave_1: entered promiscuous mode [ 647.195535][T28251] debugfs: 'hsr0' already exists in 'hsr' [ 647.201300][T28251] Cannot create hsr debugfs directory [ 647.366618][T28371] lo speed is unknown, defaulting to 1000 [ 647.399361][T28378] __nla_validate_parse: 3 callbacks suppressed [ 647.399380][T28378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5943'. [ 647.456253][T28371] wg1 speed is unknown, defaulting to 1000 [ 647.522772][T28372] lo speed is unknown, defaulting to 1000 [ 647.730297][T28391] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 647.774080][T28391] bond6 (unregistering): Released all slaves [ 647.814306][T28371] lo speed is unknown, defaulting to 1000 [ 647.822684][T28372] wg1 speed is unknown, defaulting to 1000 [ 647.881752][T28251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.041138][T28251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.146198][T28251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.254813][T18070] Bluetooth: hci1: command tx timeout [ 648.285454][T28251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.334265][T28372] lo speed is unknown, defaulting to 1000 [ 648.480622][T28411] 8021q: VLANs not supported on syzkaller1 [ 648.499453][T28410] tunl0: entered allmulticast mode [ 648.657816][T28251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 648.672519][T28251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 648.688582][T28251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 648.709357][T28407] lo speed is unknown, defaulting to 1000 [ 648.709944][T28251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 648.749393][T28407] wg1 speed is unknown, defaulting to 1000 [ 648.966342][T28251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.096958][T28251] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.119395][T16295] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.126589][T16295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.178139][T16295] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.185306][T16295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.361090][T28407] lo speed is unknown, defaulting to 1000 [ 649.473584][T28251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.558229][T28251] veth0_vlan: entered promiscuous mode [ 649.586714][T28251] veth1_vlan: entered promiscuous mode [ 649.634195][T28251] veth0_macvtap: entered promiscuous mode [ 649.647689][T28251] veth1_macvtap: entered promiscuous mode [ 649.672485][T28251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.702034][T28251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.718307][T16295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.742914][T16295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.828494][T16295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.859346][T16295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.879065][T16295] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.009048][T16295] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.020270][ T1044] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.104266][ T1044] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.215052][T16289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.223410][T16289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.334070][T16295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.339120][T18070] Bluetooth: hci1: command tx timeout [ 650.362531][T16295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.425964][T28448] netlink: 'syz.1.5959': attribute type 8 has an invalid length. [ 650.477399][T28450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5912'. [ 650.628689][T16289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.644605][T16289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.741916][T28454] lo speed is unknown, defaulting to 1000 [ 650.754838][T28456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5962'. [ 650.802025][T28456] team0: Port device team_slave_0 removed [ 650.821124][T28454] wg1 speed is unknown, defaulting to 1000 [ 650.966330][T28462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5964'. [ 651.048385][T28467] wg1: entered allmulticast mode [ 651.124375][T28469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5966'. [ 651.173417][T28454] lo speed is unknown, defaulting to 1000 [ 651.273003][T28476] veth1_to_bond: Caught tx_queue_len zero misconfig [ 651.279050][T28477] netlink: 'syz.0.5969': attribute type 1 has an invalid length. [ 651.373800][T28481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5971'. [ 651.404279][T28481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5971'. [ 651.502233][T28489] lo speed is unknown, defaulting to 1000 [ 651.521502][T28484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5972'. [ 651.627592][T28484] bond2: entered promiscuous mode [ 651.670687][T28484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.713887][T28489] wg1 speed is unknown, defaulting to 1000 [ 651.817553][T28505] lo speed is unknown, defaulting to 1000 [ 652.009724][T28515] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5977'. [ 652.206664][T28505] wg1 speed is unknown, defaulting to 1000 [ 652.415416][ T51] Bluetooth: hci1: command tx timeout [ 652.646942][T28489] lo speed is unknown, defaulting to 1000 [ 652.742089][T28534] Bluetooth: MGMT ver 1.23 [ 652.909234][T28537] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 653.101009][T28547] lo speed is unknown, defaulting to 1000 [ 653.113252][T28547] wg1 speed is unknown, defaulting to 1000 [ 653.291463][T28505] lo speed is unknown, defaulting to 1000 [ 653.724952][T28547] lo speed is unknown, defaulting to 1000 [ 654.189549][T28573] macvtap0: entered promiscuous mode [ 654.204663][T28573] macvtap0: entered allmulticast mode [ 654.217208][T28573] veth0_macvtap: entered allmulticast mode [ 654.451979][T12510] lec:lec_start_xmit: lec0:No lecd attached [ 654.892787][T28578] lo speed is unknown, defaulting to 1000 [ 654.903541][T28578] wg1 speed is unknown, defaulting to 1000 [ 655.159369][T28609] : renamed from bond_slave_0 [ 655.233227][T28613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5997'. [ 655.259158][T28578] lo speed is unknown, defaulting to 1000 [ 655.430136][T28625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6000'. [ 655.512728][T28625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6000'. [ 655.560117][T28629] tipc: Enabling of bearer rejected, failed to enable media [ 656.206642][T28655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6010'. [ 656.396021][T28663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6012'. [ 656.510899][T28665] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.6013'. [ 656.757797][T28672] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 656.790350][T28679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6018'. [ 656.808013][T28672] bond7 (unregistering): Released all slaves [ 656.940736][T28681] tipc: Enabled bearer , priority 0 [ 656.976946][T28684] vlan1: entered allmulticast mode [ 656.982183][T28684] bond0: entered allmulticast mode [ 656.997295][T28684] bond_slave_0: entered allmulticast mode [ 656.997703][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6022'. [ 657.012624][T28689] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6020'. [ 657.023030][T28690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6019'. [ 657.025179][T28684] bond_slave_1: entered allmulticast mode [ 657.183653][T28689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.194221][T28689] bond_slave_0: left allmulticast mode [ 657.201370][T28689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.211994][T28689] bond_slave_1: left allmulticast mode [ 657.218520][T28689] bond0 (unregistering): Released all slaves [ 657.252665][T28681] syzkaller0: entered promiscuous mode [ 657.258409][T28681] syzkaller0: entered allmulticast mode [ 657.264636][T28681] tipc: Resetting bearer [ 657.347126][T16298] tipc: Resetting bearer [ 657.367513][T28701] nft_compat: unsupported protocol 5 [ 657.373207][T28697] 8021q: VLANs not supported on syzkaller1 [ 657.381833][T28680] tipc: Resetting bearer [ 658.958050][T28680] tipc: Disabling bearer [ 659.063854][T28722] batman_adv: batadv0: Adding interface: ipvlan3 [ 659.085684][T28722] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.115125][T28722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.125981][T28722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.136553][T28722] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 659.147526][T28733] netlink: 'syz.4.6031': attribute type 4 has an invalid length. [ 659.398274][T28752] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 659.419153][T28752] bond6: (slave lo): Enslaving as an active interface with an up link [ 659.431606][T28752] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 659.694454][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 659.702496][ C0] lec:lec_tx_timeout: lec0 [ 659.794015][T28768] lo speed is unknown, defaulting to 1000 [ 659.806513][T28768] wg1 speed is unknown, defaulting to 1000 [ 659.942763][T28789] lo speed is unknown, defaulting to 1000 [ 660.257463][T28789] wg1 speed is unknown, defaulting to 1000 [ 660.278798][T28768] lo speed is unknown, defaulting to 1000 [ 660.339303][T28815] veth0: entered promiscuous mode [ 660.557279][T28821] __nla_validate_parse: 10 callbacks suppressed [ 660.557300][T28821] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6060'. [ 660.598992][T28821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6060'. [ 660.757622][T28789] lo speed is unknown, defaulting to 1000 [ 661.012368][T28837] netlink: 'syz.4.6064': attribute type 21 has an invalid length. [ 661.037141][T28837] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6064'. [ 661.064960][T28837] netlink: 'syz.4.6064': attribute type 4 has an invalid length. [ 661.078292][T28837] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6064'. [ 661.093230][T28841] netlink: 'syz.4.6064': attribute type 1 has an invalid length. [ 661.103263][T28841] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6064'. [ 661.716971][T28865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6071'. [ 662.248472][T28893] lo speed is unknown, defaulting to 1000 [ 662.272500][T28893] wg1 speed is unknown, defaulting to 1000 [ 662.571775][T28893] lo speed is unknown, defaulting to 1000 [ 663.084996][T28927] 8021q: VLANs not supported on tunl0 [ 663.091335][T28927] 8021q: VLANs not supported on tunl0 [ 663.107075][T28927] 8021q: VLANs not supported on tunl0 [ 663.124725][T28927] 8021q: VLANs not supported on tunl0 [ 663.163733][T28927] 8021q: VLANs not supported on tunl0 [ 663.174550][T28930] tap0: tun_chr_ioctl cmd 2147767521 [ 663.254701][T28927] 8021q: VLANs not supported on tunl0 [ 663.260201][T28927] 8021q: VLANs not supported on tunl0 [ 663.273407][T28927] 8021q: VLANs not supported on tunl0 [ 663.314782][T28927] 8021q: VLANs not supported on tunl0 [ 663.320284][T28927] 8021q: VLANs not supported on tunl0 [ 663.355931][T28927] 8021q: VLANs not supported on tunl0 [ 663.361427][T28927] 8021q: VLANs not supported on tunl0 [ 663.404902][T28927] 8021q: VLANs not supported on tunl0 [ 663.424610][T28927] 8021q: VLANs not supported on tunl0 [ 663.430109][T28927] 8021q: VLANs not supported on tunl0 [ 663.444629][T28927] 8021q: VLANs not supported on tunl0 [ 663.483670][T28927] 8021q: VLANs not supported on tunl0 [ 663.507133][T28927] 8021q: VLANs not supported on tunl0 [ 663.532965][T28927] 8021q: VLANs not supported on tunl0 [ 663.570316][T28927] 8021q: VLANs not supported on tunl0 [ 663.601620][T28927] 8021q: VLANs not supported on tunl0 [ 663.629008][T28927] 8021q: VLANs not supported on tunl0 [ 663.657611][T28927] 8021q: VLANs not supported on tunl0 [ 663.690118][T18070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 663.699765][T28927] 8021q: VLANs not supported on tunl0 [ 663.700530][T18070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 663.714789][T18070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 663.725024][T18070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 663.731399][T28927] 8021q: VLANs not supported on tunl0 [ 663.738656][T18070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 663.774815][T28927] 8021q: VLANs not supported on tunl0 [ 664.000655][T28941] lo speed is unknown, defaulting to 1000 [ 664.040514][T28941] wg1 speed is unknown, defaulting to 1000 [ 664.255375][T28960] sctp: [Deprecated]: syz.1.6097 (pid 28960) Use of int in max_burst socket option deprecated. [ 664.255375][T28960] Use struct sctp_assoc_value instead [ 664.295555][T28955] netlink: 'syz.1.6097': attribute type 6 has an invalid length. [ 664.641634][T28971] lo speed is unknown, defaulting to 1000 [ 664.696047][ T421] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.728943][ T421] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.762846][T28985] ip6gre3: entered promiscuous mode [ 664.765494][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6104'. [ 664.792570][T28985] ip6gre3: entered allmulticast mode [ 664.821671][T28993] netlink: 'syz.4.6107': attribute type 1 has an invalid length. [ 664.830583][T28941] lo speed is unknown, defaulting to 1000 [ 664.830610][T28971] wg1 speed is unknown, defaulting to 1000 [ 665.125485][T28993] 8021q: adding VLAN 0 to HW filter on device bond5 [ 665.132954][ T421] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.193720][T29005] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6110'. [ 665.311432][T16289] bond3 (unregistering): (slave vti1): Releasing backup interface [ 665.319592][T29011] sctp: [Deprecated]: syz.4.6111 (pid 29011) Use of int in max_burst socket option deprecated. [ 665.319592][T29011] Use struct sctp_assoc_value instead [ 665.361418][T29012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6112'. [ 665.412209][T16289] batman_adv: batadv0: Removing interface: gretap1 [ 665.608790][T16289] bond8 (unregistering): (slave bridge5): Releasing active interface [ 665.748106][T16289] bond1 (unregistering): Released all slaves [ 665.761621][T16289] bond2 (unregistering): Released all slaves [ 665.774218][T16289] bond3 (unregistering): Released all slaves [ 665.788855][T16289] bond4 (unregistering): Released all slaves [ 665.809234][T16289] bond5 (unregistering): Released all slaves [ 665.821677][T16289] bond6 (unregistering): Released all slaves [ 665.834172][T16289] bond7 (unregistering): Released all slaves [ 665.850841][T16289] bond8 (unregistering): Released all slaves [ 665.857244][ T51] Bluetooth: hci0: command tx timeout [ 665.878083][T16289] bond9 (unregistering): Released all slaves [ 665.896933][T28971] lo speed is unknown, defaulting to 1000 [ 665.902858][ T421] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.924136][T29008] netlink: 'syz.4.6111': attribute type 6 has an invalid length. [ 665.979213][T16289] hmac(sha224: left promiscuous mode [ 666.124503][T29019] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6114'. [ 666.166892][T29019] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6114'. [ 666.200118][T29019] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6114'. [ 666.237311][T16289] tipc: Left network mode [ 666.727616][T28941] chnl_net:caif_netlink_parms(): no params data found [ 666.742208][T29053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6123'. [ 666.957711][T29061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6123'. [ 667.111271][T29068] syzkaller1: entered promiscuous mode [ 667.127640][T29068] syzkaller1: entered allmulticast mode [ 667.140239][T29072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6126'. [ 667.157960][T29072] FAULT_INJECTION: forcing a failure. [ 667.157960][T29072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.179357][T29072] CPU: 1 UID: 0 PID: 29072 Comm: syz.4.6126 Not tainted syzkaller #0 PREEMPT(full) [ 667.179383][T29072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 667.179395][T29072] Call Trace: [ 667.179403][T29072] [ 667.179413][T29072] dump_stack_lvl+0xe8/0x150 [ 667.179447][T29072] should_fail_ex+0x412/0x560 [ 667.179477][T29072] _copy_from_user+0x2d/0xb0 [ 667.179505][T29072] kstrtouint_from_user+0xd6/0x180 [ 667.179660][T29072] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 667.179699][T29072] proc_fail_nth_write+0x8e/0x210 [ 667.179727][T29072] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 667.179757][T29072] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 667.179782][T29072] vfs_write+0x29a/0xb90 [ 667.179812][T29072] ? __pfx_vfs_write+0x10/0x10 [ 667.179833][T29072] ? __fget_files+0x2a/0x420 [ 667.179863][T29072] ? __fget_files+0x3a0/0x420 [ 667.179886][T29072] ? __fget_files+0x2a/0x420 [ 667.179919][T29072] ksys_write+0x150/0x270 [ 667.179941][T29072] ? __pfx_ksys_write+0x10/0x10 [ 667.179971][T29072] do_syscall_64+0x14d/0xf80 [ 667.179996][T29072] ? trace_irq_disable+0x3b/0x150 [ 667.180021][T29072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.180040][T29072] ? clear_bhb_loop+0x40/0x90 [ 667.180062][T29072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.180079][T29072] RIP: 0033:0x7f7c85b5cfce [ 667.180097][T29072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 667.180111][T29072] RSP: 002b:00007f7c869f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 667.180130][T29072] RAX: ffffffffffffffda RBX: 00007f7c869f36c0 RCX: 00007f7c85b5cfce [ 667.180144][T29072] RDX: 0000000000000001 RSI: 00007f7c869f30a0 RDI: 0000000000000004 [ 667.180155][T29072] RBP: 00007f7c869f3090 R08: 0000000000000000 R09: 0000000000000000 [ 667.180167][T29072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.180177][T29072] R13: 00007f7c85e16038 R14: 00007f7c85e15fa0 R15: 00007ffeaf6355e8 [ 667.180208][T29072] [ 667.611760][T29085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6129'. [ 667.646601][T28941] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.653837][T28941] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.661384][T28941] bridge_slave_0: entered allmulticast mode [ 667.669349][T28941] bridge_slave_0: entered promiscuous mode [ 667.727946][T29093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6130'. [ 667.757686][T28941] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.765023][T28941] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.772288][T28941] bridge_slave_1: entered allmulticast mode [ 667.820778][T28941] bridge_slave_1: entered promiscuous mode [ 667.859443][T29102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6132'. [ 667.935821][ T51] Bluetooth: hci0: command tx timeout [ 668.003763][T29103] lo speed is unknown, defaulting to 1000 [ 668.023918][T29102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6132'. [ 668.041866][T29105] ip6gre0: Caught tx_queue_len zero misconfig [ 668.109745][T28941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.135070][T29103] wg1 speed is unknown, defaulting to 1000 [ 668.143256][T28941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.283534][T28941] team0: Port device team_slave_0 added [ 668.313186][T28941] team0: Port device team_slave_1 added [ 668.355395][T29126] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.362614][T29126] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.486874][T29124] delete_channel: no stack [ 668.555052][T28941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.562034][T28941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.611772][T28941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.679199][T28941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.714257][T28941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.801765][T28941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.839926][T29103] lo speed is unknown, defaulting to 1000 [ 669.043651][T28941] hsr_slave_0: entered promiscuous mode [ 669.063061][T28941] hsr_slave_1: entered promiscuous mode [ 669.101049][T28941] debugfs: 'hsr0' already exists in 'hsr' [ 669.119421][T28941] Cannot create hsr debugfs directory [ 669.157353][T29161] tipc: Enabling of bearer rejected, failed to enable media [ 669.348328][T29165] netlink: 'syz.1.6145': attribute type 9 has an invalid length. [ 669.527889][T29157] lo speed is unknown, defaulting to 1000 [ 669.587496][T28941] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.650401][T29157] wg1 speed is unknown, defaulting to 1000 [ 669.738135][T28941] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.931112][T28941] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.016399][ T51] Bluetooth: hci0: command tx timeout [ 670.126406][T29181] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 670.171322][T29181] bond7 (unregistering): Released all slaves [ 670.338961][T28941] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.387624][T16289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.407172][T16289] veth0_macvtap: left allmulticast mode [ 670.765476][T16289] team0 (unregistering): Port device team_slave_1 removed [ 670.868212][T29190] delete_channel: no stack [ 670.873092][T29157] lo speed is unknown, defaulting to 1000 [ 671.121679][T28941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 671.156867][T28941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 671.173042][T28941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 671.204960][T28941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 671.358027][ T421] smc: removing ib device syz0 [ 671.391075][T29199] lo speed is unknown, defaulting to 1000 [ 671.478922][T29199] lo speed is unknown, defaulting to 1000 [ 671.949626][T28941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.011444][T28941] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.040917][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.048149][ T8508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.094650][ T51] Bluetooth: hci0: command tx timeout [ 672.117701][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.124886][ T8508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.496012][T29256] netlink: 'syz.1.6160': attribute type 2 has an invalid length. [ 672.540574][T29256] : entered promiscuous mode [ 672.938156][T29270] __nla_validate_parse: 16 callbacks suppressed [ 672.938177][T29270] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6162'. [ 672.989330][T29272] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6162'. [ 673.068215][T28941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.095088][T29272] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6162'. [ 673.131008][T29269] delete_channel: no stack [ 673.170304][T28941] veth0_vlan: entered promiscuous mode [ 673.192496][T28941] veth1_vlan: entered promiscuous mode [ 673.278224][T28941] veth0_macvtap: entered promiscuous mode [ 673.312747][T28941] veth1_macvtap: entered promiscuous mode [ 673.382914][T28941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.414888][T28941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.447772][ T8508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.459072][ T8508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.497792][ T8508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.512484][ T8508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.845344][T16298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.871565][T16298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.009612][T11459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.032806][T11459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.115482][T29303] xt_hashlimit: size too large, truncated to 1048576 [ 674.189520][T29305] x9: renamed from bridge_slave_0 [ 674.218832][T29308] netlink: 'syz.0.6090': attribute type 2 has an invalid length. [ 674.243178][T29308] netlink: 'syz.0.6090': attribute type 11 has an invalid length. [ 674.271152][T29308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6090'. [ 674.845345][T18070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 674.857185][T18070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 674.867470][T18070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 674.877652][T18070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 674.886308][T18070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 674.970784][T29321] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6174'. [ 675.080215][T29317] lo speed is unknown, defaulting to 1000 [ 675.088729][T29317] lo speed is unknown, defaulting to 1000 [ 675.289943][T16289] IPVS: stop unused estimator thread 0... [ 675.747828][T29333] bond7: option downdelay: invalid value (18446744073709551615) [ 675.761291][T29333] bond7: option downdelay: allowed values 0 - 2147483647 [ 675.771549][T29340] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6179'. [ 675.788702][T29333] bond7 (unregistering): Released all slaves [ 675.862171][T29331] macsec1: entered promiscuous mode [ 675.884613][T29331] macvlan0: entered promiscuous mode [ 675.919546][T29331] macvlan0: left promiscuous mode [ 675.948273][T29347] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6181'. [ 676.180646][T29350] lo speed is unknown, defaulting to 1000 [ 676.257076][T29350] lo speed is unknown, defaulting to 1000 [ 676.266922][T29353] lo speed is unknown, defaulting to 1000 [ 676.413732][T29317] chnl_net:caif_netlink_parms(): no params data found [ 676.457137][T29373] netlink: 'syz.2.6187': attribute type 10 has an invalid length. [ 676.467243][T29374] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6185'. [ 676.487267][T29373] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6187'. [ 676.490505][T29377] netlink: 'syz.2.6187': attribute type 10 has an invalid length. [ 676.544534][T29377] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6187'. [ 676.691987][T29378] lo speed is unknown, defaulting to 1000 [ 676.740553][T29353] lo speed is unknown, defaulting to 1000 [ 676.742403][T29387] 8021q: VLANs not supported on sit0 [ 676.799709][T29317] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.836569][T29317] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.855518][T29317] bridge_slave_0: entered allmulticast mode [ 676.863170][T29317] bridge_slave_0: entered promiscuous mode [ 676.906190][T29317] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.921428][T29317] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.944691][T29317] bridge_slave_1: entered allmulticast mode [ 676.977781][T18070] Bluetooth: hci5: command tx timeout [ 676.986084][T29317] bridge_slave_1: entered promiscuous mode [ 677.178777][T29317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.220359][T29317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.311377][T29378] lo speed is unknown, defaulting to 1000 [ 677.333475][T29317] team0: Port device team_slave_0 added [ 677.368571][T29317] team0: Port device team_slave_1 added [ 677.456879][T29317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.463859][T29317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.509213][T29317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.566501][T29412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.603425][T29317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.611728][T29317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.640028][T29317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.031256][T29317] hsr_slave_0: entered promiscuous mode [ 678.045949][T29317] hsr_slave_1: entered promiscuous mode [ 678.052486][T29317] debugfs: 'hsr0' already exists in 'hsr' [ 678.071857][T29317] Cannot create hsr debugfs directory [ 678.143237][T29429] lo speed is unknown, defaulting to 1000 [ 678.168147][T29429] lo speed is unknown, defaulting to 1000 [ 678.582115][T29440] lo speed is unknown, defaulting to 1000 [ 678.644551][T29440] lo speed is unknown, defaulting to 1000 [ 679.051061][T29450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.064923][T18070] Bluetooth: hci5: command tx timeout [ 679.093868][T29317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 679.118220][T29317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.173919][T29453] __nla_validate_parse: 3 callbacks suppressed [ 679.173936][T29453] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6208'. [ 679.207714][T29457] Bluetooth: MGMT ver 1.23 [ 679.231849][T29317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 679.246325][T29453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6208'. [ 679.373571][T29317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 679.626210][T29317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.660007][T29476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6212'. [ 679.680352][T29317] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.756614][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.763861][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.787043][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.794263][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.957723][T29491] macsec1: entered promiscuous mode [ 679.962973][T29491] macsec1: entered allmulticast mode [ 680.115441][T29502] sctp: [Deprecated]: syz.2.6218 (pid 29502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.115441][T29502] Use struct sctp_sack_info instead [ 680.172936][T29502] sctp: [Deprecated]: syz.2.6218 (pid 29502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.172936][T29502] Use struct sctp_sack_info instead [ 680.222193][T29506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6220'. [ 680.339059][T29513] lo speed is unknown, defaulting to 1000 [ 680.346529][T29513] lo speed is unknown, defaulting to 1000 [ 680.477619][T29523] bridge0: entered promiscuous mode [ 680.478199][T29516] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.6223'. [ 680.482996][T29523] vlan2: entered promiscuous mode [ 680.501545][T29519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6224'. [ 680.562453][T29519] bond3: entered promiscuous mode [ 680.623896][T29519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 680.641456][T29534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6226'. [ 680.785031][T29317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.851794][T29537] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 680.892593][T29317] veth0_vlan: entered promiscuous mode [ 680.920309][T29540] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 680.945909][T29317] veth1_vlan: entered promiscuous mode [ 681.102345][T29550] sctp: [Deprecated]: syz.4.6228 (pid 29550) Use of int in max_burst socket option. [ 681.102345][T29550] Use struct sctp_assoc_value instead [ 681.120400][T29547] tipc: Started in network mode [ 681.141695][ T51] Bluetooth: hci5: command tx timeout [ 681.144853][T29547] tipc: Node identity def07ef466f2, cluster identity 4711 [ 681.167047][T29547] tipc: Enabled bearer , priority 0 [ 681.187741][T29317] veth0_macvtap: entered promiscuous mode [ 681.250886][T29547] tipc: Resetting bearer [ 681.261388][T29317] veth1_macvtap: entered promiscuous mode [ 681.296725][T18070] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 681.304831][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 681.318680][T29546] tipc: Disabling bearer [ 681.394141][T29317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.443638][T29317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.496555][T16295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.518859][T16295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.543315][ T421] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.578383][ T421] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.778861][ T421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.787831][ T421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.913126][T11459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.936762][T11459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.238041][T29572] lo speed is unknown, defaulting to 1000 [ 682.278174][T29595] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6172'. [ 682.286208][T29572] lo speed is unknown, defaulting to 1000 [ 682.338553][T29600] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6172'. [ 682.357260][T29595] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.364698][T29595] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.495602][T29600] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6172'. [ 682.537014][T29593] delete_channel: no stack [ 682.828313][T18070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 682.843408][T18070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 682.855107][T18070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 682.864260][T18070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 682.885953][T18070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 683.064958][T29587] siw: device registration error -23 [ 683.100511][T29615] lo speed is unknown, defaulting to 1000 [ 683.116882][T29615] lo speed is unknown, defaulting to 1000 [ 683.215752][ T51] Bluetooth: hci5: command tx timeout [ 683.332148][T29631] [ 683.334509][T29631] ====================================================== [ 683.341542][T29631] WARNING: possible circular locking dependency detected [ 683.348646][T29631] syzkaller #0 Not tainted [ 683.353052][T29631] ------------------------------------------------------ [ 683.360068][T29631] syz.3.6244/29631 is trying to acquire lock: [ 683.366140][T29631] ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 683.375483][T29631] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 683.375483][T29631] but task is already holding lock: [ 683.382962][T29631] ffff88802a8cae70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 683.392224][T29631] [ 683.392224][T29631] which lock already depends on the new lock. [ 683.392224][T29631] [ 683.402638][T29631] [ 683.402638][T29631] the existing dependency chain (in reverse order) is: [ 683.411662][T29631] [ 683.411662][T29631] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 683.419777][T29631] _raw_spin_lock_bh+0x36/0x50 [ 683.425088][T29631] nr_rt_ioctl+0x215/0xf90 [ 683.430033][T29631] sock_do_ioctl+0x101/0x320 [ 683.435138][T29631] sock_ioctl+0x5c6/0x7f0 [ 683.439983][T29631] __se_sys_ioctl+0xfc/0x170 [ 683.445087][T29631] do_syscall_64+0x14d/0xf80 [ 683.450194][T29631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.456601][T29631] [ 683.456601][T29631] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 683.464419][T29631] _raw_spin_lock_bh+0x36/0x50 [ 683.469707][T29631] nr_rt_device_down+0xbe/0x860 [ 683.475072][T29631] nr_device_event+0x137/0x150 [ 683.480356][T29631] notifier_call_chain+0x1be/0x400 [ 683.485986][T29631] __dev_notify_flags+0x16d/0x310 [ 683.491531][T29631] netif_change_flags+0xe8/0x1a0 [ 683.496993][T29631] dev_change_flags+0x130/0x260 [ 683.502361][T29631] dev_ioctl+0x7b4/0x1150 [ 683.507299][T29631] sock_do_ioctl+0x23e/0x320 [ 683.512401][T29631] sock_ioctl+0x5c6/0x7f0 [ 683.517240][T29631] __se_sys_ioctl+0xfc/0x170 [ 683.522340][T29631] do_syscall_64+0x14d/0xf80 [ 683.527446][T29631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.533849][T29631] [ 683.533849][T29631] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 683.541749][T29631] __lock_acquire+0x15a5/0x2cf0 [ 683.547120][T29631] lock_acquire+0xf0/0x2e0 [ 683.552049][T29631] _raw_spin_lock_bh+0x36/0x50 [ 683.557327][T29631] nr_rt_ioctl+0x40c/0xf90 [ 683.562258][T29631] sock_do_ioctl+0x101/0x320 [ 683.567361][T29631] sock_ioctl+0x5c6/0x7f0 [ 683.572203][T29631] __se_sys_ioctl+0xfc/0x170 [ 683.577303][T29631] do_syscall_64+0x14d/0xf80 [ 683.582408][T29631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.588815][T29631] [ 683.588815][T29631] other info that might help us debug this: [ 683.588815][T29631] [ 683.599035][T29631] Chain exists of: [ 683.599035][T29631] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 683.599035][T29631] [ 683.612854][T29631] Possible unsafe locking scenario: [ 683.612854][T29631] [ 683.620316][T29631] CPU0 CPU1 [ 683.625668][T29631] ---- ---- [ 683.631072][T29631] lock(&nr_node->node_lock); [ 683.635830][T29631] lock(nr_node_list_lock); [ 683.642932][T29631] lock(&nr_node->node_lock); [ 683.650207][T29631] lock(nr_neigh_list_lock); [ 683.654877][T29631] [ 683.654877][T29631] *** DEADLOCK *** [ 683.654877][T29631] [ 683.663019][T29631] 2 locks held by syz.3.6244/29631: [ 683.668222][T29631] #0: ffffffff8fd42798 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 683.677713][T29631] #1: ffff88802a8cae70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 683.687369][T29631] [ 683.687369][T29631] stack backtrace: [ 683.693248][T29631] CPU: 0 UID: 0 PID: 29631 Comm: syz.3.6244 Not tainted syzkaller #0 PREEMPT(full) [ 683.693266][T29631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.693277][T29631] Call Trace: [ 683.693284][T29631] [ 683.693291][T29631] dump_stack_lvl+0xe8/0x150 [ 683.693317][T29631] print_circular_bug+0x2e1/0x300 [ 683.693343][T29631] check_noncircular+0x12e/0x150 [ 683.693368][T29631] __lock_acquire+0x15a5/0x2cf0 [ 683.693389][T29631] ? kasan_save_track+0x4f/0x80 [ 683.693414][T29631] lock_acquire+0xf0/0x2e0 [ 683.693432][T29631] ? nr_rt_ioctl+0x40c/0xf90 [ 683.693456][T29631] ? nr_rt_ioctl+0x40c/0xf90 [ 683.693475][T29631] _raw_spin_lock_bh+0x36/0x50 [ 683.693496][T29631] ? nr_rt_ioctl+0x40c/0xf90 [ 683.693515][T29631] nr_rt_ioctl+0x40c/0xf90 [ 683.693540][T29631] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 683.693564][T29631] ? apparmor_capable+0x126/0x170 [ 683.693653][T29631] ? capable+0x88/0xe0 [ 683.693674][T29631] ? nr_ioctl+0x1b1/0x3b0 [ 683.693692][T29631] sock_do_ioctl+0x101/0x320 [ 683.693713][T29631] ? __pfx_sock_do_ioctl+0x10/0x10 [ 683.693730][T29631] ? do_futex+0x395/0x420 [ 683.693755][T29631] sock_ioctl+0x5c6/0x7f0 [ 683.693772][T29631] ? __pfx_sock_ioctl+0x10/0x10 [ 683.693789][T29631] ? __fget_files+0x2a/0x420 [ 683.693812][T29631] ? __fget_files+0x3a0/0x420 [ 683.693834][T29631] ? __fget_files+0x2a/0x420 [ 683.693856][T29631] ? bpf_lsm_file_ioctl+0x9/0x20 [ 683.693877][T29631] ? __pfx_sock_ioctl+0x10/0x10 [ 683.693894][T29631] __se_sys_ioctl+0xfc/0x170 [ 683.693912][T29631] do_syscall_64+0x14d/0xf80 [ 683.693935][T29631] ? trace_irq_disable+0x3b/0x150 [ 683.693957][T29631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.693972][T29631] ? clear_bhb_loop+0x40/0x90 [ 683.693990][T29631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.694006][T29631] RIP: 0033:0x7f009719c799 [ 683.694021][T29631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.694040][T29631] RSP: 002b:00007f009812a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.694057][T29631] RAX: ffffffffffffffda RBX: 00007f0097415fa0 RCX: 00007f009719c799 [ 683.694070][T29631] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008 [ 683.694080][T29631] RBP: 00007f0097232c99 R08: 0000000000000000 R09: 0000000000000000 [ 683.694091][T29631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.694101][T29631] R13: 00007f0097416038 R14: 00007f0097415fa0 R15: 00007ffcc63de058 [ 683.694120][T29631] [ 684.347598][ T8508] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.436250][ T8508] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.522295][ T8508] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.657361][ T8508] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.796267][T29572] team0: Port device syz_tun removed [ 684.820664][T16295] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.843655][T16295] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.854317][T16295] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.877042][T16289] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.227685][ T8508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.237429][ T8508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.247423][ T8508] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 685.256258][ T8508] bond0 (unregistering): Released all slaves [ 685.264626][ T8508] bond1 (unregistering): (slave veth5): Releasing backup interface [ 685.273595][ T8508] bond1 (unregistering): (slave veth7): Releasing backup interface [ 685.282748][ T8508] bond1 (unregistering): (slave veth9): Releasing backup interface [ 685.292055][ T8508] bond1 (unregistering): (slave veth11): Releasing backup interface [ 685.301925][ T8508] bond1 (unregistering): (slave veth13): Releasing backup interface [ 685.310884][ T8508] bond1 (unregistering): Released all slaves [ 685.319784][ T8508] bond2 (unregistering): Released all slaves [ 685.328560][ T8508] bond3 (unregistering): Released all slaves [ 685.337456][ T8508] bond4 (unregistering): Released all slaves [ 685.347612][ T8508] bond5 (unregistering): Released all slaves [ 685.387668][ T8508] : left promiscuous mode [ 685.438533][ T8508] tipc: Disabling bearer [ 685.443938][ T8508] tipc: Disabling bearer [ 685.461239][ T8508] tipc: Left network mode [ 685.622956][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 685.813283][ T8508] hsr_slave_0: left promiscuous mode [ 685.830854][ T8508] hsr_slave_1: left promiscuous mode [ 685.989119][ T8508] team0 (unregistering): Port device team_slave_1 removed [ 686.029201][ T8508] team0 (unregistering): Port device dummy0 removed [ 686.265326][ T8508] IPVS: stop unused estimator thread 0... [ 686.310261][ T8508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.366368][ T8508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.419772][ T8508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.463497][ T8508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.511530][T11459] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.534696][T16289] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.550354][ T8508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.562841][T16289] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.571368][T16289] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.590996][ T8508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.639769][ T8508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.687681][ T8508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.755709][T16295] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.763933][T16295] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.801085][T16295] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.816166][ T8508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.828625][T16295] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.872351][ T8508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.920626][ T8508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.970821][ T8508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.046197][T16289] netdevsim netdevsim1 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.069089][T16289] netdevsim netdevsim1 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.090577][T16289] netdevsim netdevsim1 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.100190][T16289] netdevsim netdevsim1 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.108956][ T8508] bridge_slave_1: left allmulticast mode [ 687.114761][ T8508] bridge_slave_1: left promiscuous mode [ 687.120458][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.129072][ T8508] bridge_slave_0: left allmulticast mode [ 687.135019][ T8508] bridge_slave_0: left promiscuous mode [ 687.140717][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.155264][ T8508] erspan0: left allmulticast mode [ 687.160289][ T8508] erspan0: left promiscuous mode [ 687.166217][ T8508] bridge4: port 1(erspan0) entered disabled state [ 687.180827][ T8508] bridge_slave_1: left allmulticast mode [ 687.186590][ T8508] bridge_slave_1: left promiscuous mode [ 687.192214][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.200537][ T8508] bridge_slave_0: left allmulticast mode [ 687.206572][ T8508] bridge_slave_0: left promiscuous mode [ 687.212206][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.222197][ T8508] bridge_slave_1: left allmulticast mode [ 687.227940][ T8508] bridge_slave_1: left promiscuous mode [ 687.233555][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.242144][ T8508] bridge_slave_0: left allmulticast mode [ 687.248362][ T8508] bridge_slave_0: left promiscuous mode [ 687.254012][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.262611][ T8508] bridge_slave_1: left allmulticast mode [ 687.268330][ T8508] bridge_slave_1: left promiscuous mode [ 687.274054][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.282978][ T8508] bridge_slave_0: left allmulticast mode [ 687.288699][ T8508] bridge_slave_0: left promiscuous mode [ 687.294347][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.399193][ T8508] tipc: Disabling bearer [ 687.485756][ T8508] bond6 (unregistering): (slave gretap1): Releasing active interface [ 687.503079][ T8508] batman_adv: batadv0: Removing interface: gretap2 [ 687.897146][ T8508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.906717][ T8508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.916313][ T8508] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 687.925468][ T8508] bond0 (unregistering): Released all slaves [ 687.932910][ T8508] bond1 (unregistering): Released all slaves [ 687.947656][ T8508] bond2 (unregistering): Released all slaves [ 687.956947][ T8508] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 687.966284][ T8508] bond3 (unregistering): (slave wireguard2): Releasing backup interface [ 687.975587][ T8508] bond3 (unregistering): Released all slaves [ 687.984593][ T8508] bond4 (unregistering): (slave bond5): Releasing backup interface [ 687.993028][ T8508] bond4 (unregistering): Released all slaves [ 688.001789][ T8508] bond5 (unregistering): Released all slaves [ 688.010536][ T8508] bond6 (unregistering): Released all slaves [ 688.019746][ T8508] bond7 (unregistering): Released all slaves [ 688.031793][ T8508] bond8 (unregistering): Released all slaves [ 688.040361][ T8508] bond9 (unregistering): Released all slaves [ 688.049117][ T8508] bond10 (unregistering): Released all slaves [ 688.057898][ T8508] bond11 (unregistering): Released all slaves [ 688.068550][ T8508] bond12 (unregistering): Released all slaves [ 688.079532][ T8508] bond13 (unregistering): Released all slaves [ 688.088314][ T8508] bond14 (unregistering): Released all slaves [ 688.099075][ T8508] bond15 (unregistering): Released all slaves [ 688.111076][ T8508] bond16 (unregistering): Released all slaves [ 688.121322][ T8508] bond17 (unregistering): (slave veth7): Releasing active interface [ 688.130419][ T8508] bond17 (unregistering): (slave veth9): Releasing active interface [ 688.139472][ T8508] bond17 (unregistering): Released all slaves [ 688.183468][ T8508] bond5 (unregistering): (slave vti0): Releasing backup interface [ 688.191467][ T8508] vti0 (unregistering): left promiscuous mode [ 688.247241][ T8508] bond11 (unregistering): (slave gretap2): Releasing active interface [ 688.262387][ T8508] bond0 (unregistering): (slave geneve4): Releasing active interface [ 688.281997][ T8508] team0: Port device bridge1 removed [ 688.331311][ T8508] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 688.339528][ T8508] bridge2 (unregistering): left promiscuous mode [ 688.706664][ T8508] bond1 (unregistering): Released all slaves [ 688.715521][ T8508] bond2 (unregistering): Released all slaves [ 688.724071][ T8508] bond3 (unregistering): Released all slaves [ 688.732698][ T8508] bond4 (unregistering): Released all slaves [ 688.741945][ T8508] bond5 (unregistering): Released all slaves [ 688.756868][ T8508] bond6 (unregistering): Released all slaves [ 688.766248][ T8508] bond7 (unregistering): Released all slaves [ 688.775382][ T8508] bond8 (unregistering): Released all slaves [ 688.784225][ T8508] bond9 (unregistering): Released all slaves [ 688.793415][ T8508] bond10 (unregistering): Released all slaves [ 688.803234][ T8508] bond11 (unregistering): Released all slaves [ 688.812372][ T8508] bond12 (unregistering): Released all slaves [ 688.822394][ T8508] bond0 (unregistering): Released all slaves [ 688.838051][ T8508] bond13 (unregistering): Released all slaves [ 688.847960][ T8508] bond14 (unregistering): Released all slaves [ 688.906053][ T8508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.916057][ T8508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.926169][ T8508] bond0 (unregistering): Released all slaves [ 689.015110][ T8508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.025157][ T8508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.035098][ T8508] bond0 (unregistering): Released all slaves [ 689.104144][ T8508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.114262][ T8508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.124505][ T8508] bond0 (unregistering): Released all slaves [ 689.294155][ T8508] !9: left promiscuous mode [ 689.329420][ T8508] tipc: Left network mode [ 689.344203][ T8508] tipc: Disabling bearer [ 689.349971][ T8508] tipc: Left network mode [ 689.362926][ T8508] tipc: Left network mode [ 690.735008][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 690.743030][ C0] lec:lec_tx_timeout: lec0 [ 691.215923][ T8508] hsr_slave_0: left promiscuous mode [ 691.221604][ T8508] hsr_slave_1: left promiscuous mode [ 691.230137][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.238085][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.249719][ T8508] hsr_slave_0: left promiscuous mode [ 691.257646][ T8508] hsr_slave_1: left promiscuous mode [ 691.263466][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.272144][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.283160][ T8508] hsr_slave_0: left promiscuous mode [ 691.289568][ T8508] hsr_slave_1: left promiscuous mode [ 691.301510][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.310559][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.318632][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.327606][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.338683][ T8508] hsr_slave_0: left promiscuous mode [ 691.344903][ T8508] hsr_slave_1: left promiscuous mode [ 691.350799][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.359479][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.367993][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.378316][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.397474][ T8508] hsr_slave_0: left promiscuous mode [ 691.403978][ T8508] hsr_slave_1: left promiscuous mode [ 691.417756][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.425269][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.433010][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.440575][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.461955][ T8508] veth1_macvtap: left promiscuous mode [ 691.470497][ T8508] veth0_macvtap: left promiscuous mode [ 691.477829][ T8508] veth1_vlan: left promiscuous mode [ 691.484509][ T8508] veth0_vlan: left promiscuous mode [ 691.490428][ T8508] veth1_macvtap: left promiscuous mode [ 691.496290][ T8508] veth0_macvtap: left promiscuous mode [ 691.501770][ T8508] veth1_vlan: left promiscuous mode [ 691.507283][ T8508] veth0_vlan: left promiscuous mode [ 691.513056][ T8508] veth1_macvtap: left promiscuous mode [ 691.519512][ T8508] veth0_macvtap: left promiscuous mode [ 691.526165][ T8508] veth1_vlan: left promiscuous mode [ 691.531384][ T8508] veth0_vlan: left promiscuous mode [ 691.841647][ T8508] team0 (unregistering): Port device team_slave_1 removed [ 691.937785][ T8508] team0 (unregistering): Port device team_slave_1 removed [ 691.956109][ T8508] team0 (unregistering): Port device team_slave_0 removed [ 692.035771][ T8508] team0 (unregistering): Port device team_slave_1 removed [ 692.046946][ T8508] team0 (unregistering): Port device team_slave_0 removed [ 692.129549][ T8508] team0 (unregistering): Port device team_slave_1 removed [ 692.139770][ T8508] team0 (unregistering): Port device team_slave_0 removed [ 693.254167][ T8508] IPVS: stop unused estimator thread 0...