last executing test programs: 5m15.069009193s ago: executing program 0 (id=29628): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f00000000c0)={0xa, 0x0, @multicast1}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000206112940000000000950000000000000046a981ff1d3e8aa2230e507f3b75ea8d25ad22e31d71a4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000740)={r7}) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x3, 0xffe0}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000080)={@empty, @rand_addr, @broadcast}, &(0x7f00000000c0)=0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004ea", 0xe) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@void, @void, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @window={0x3, 0x3, 0x3}]}}}}}}, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000680)={0x41, 0x4, 0x2}, 0x10) sendmsg$inet(r10, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x8000) close(r9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) 5m14.925236394s ago: executing program 0 (id=29633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4a22, @private=0x8010102}, 0x5a) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x5b9, 0x2004c040) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000003080108000000000095c811d18e8ae100000005ef00e1c5dc3818e8592c0480430a5c559bf127f63483a8b6faa3d4c45dbe28ffac6b"], 0x20}, 0x1, 0x0, 0x0, 0x40008000}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) recvmsg(r0, &(0x7f0000001300)={&(0x7f0000001340)=@nfc, 0x80, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4088, 0xff8}], 0x1, &(0x7f00000012c0)=""/38, 0x26}, 0x40012022) 5m14.827835749s ago: executing program 0 (id=29634): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180", 0x28}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005000100010000000600"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (fail_nth: 5) 5m14.41363518s ago: executing program 0 (id=29636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000880)={0x0, 0xf576}, &(0x7f00000008c0)=0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) pipe(&(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 5m13.560542887s ago: executing program 0 (id=29649): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 5m13.4565235s ago: executing program 0 (id=29652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1, 0x8, 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x3a, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 4m58.343727502s ago: executing program 32 (id=29652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1, 0x8, 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x3a, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m27.781327391s ago: executing program 5 (id=32041): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000500), &(0x7f00000005c0)=r0}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c80)={{0xffffffffffffffff, &(0x7f0000000940)='rose0\x00', 0x240000, &(0x7f0000000980)={@align=0x2, {0x81, 0x401, 0x0, 0x7}}, 0x1, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0x2}, 0x2, &(0x7f0000000c40)=[{0x1, 0x5, &(0x7f0000000a40)='\x00', &(0x7f0000000a80)="853542e5232295a79f85c59e0da1bf21264812b41210f9d7c19751199203de4125ea65a385649e55ab606362715916e5419b21fe8f5f4e39d9f7f09e72e2014942dd262f6d54ec", 0x47, 0x18}, {0x1, 0x9, &(0x7f0000000b00)='/dev/net/tun\x00', &(0x7f0000000b40)="34941bd93c327d4b293903b1804b2f4eda9afbb95bef8e3f157043424959b4e023abeffd250f30641a0b7b50873a5d16f957bd4e342574bde6cdbd6a14010b7b403cc219d046ca0c84d654cab8bf3dc5153a47b237c0db69cfb3b67f5c08eabc2fd65ee7d4affcc4aa13f87ba2f36f232221c05332ca9bb96367f9bcde235e57fff8d2208e1f27c2c007d4b4aa64d3f08b131098e99164ef769208bb2b923c220e53feee02edca876fbcbb37dd0f9382e5f3ada8b4a86c81dc3fdefe66a7e913771345b4f855d0cd1685deaedceb16e4d11ed84921", 0xd5, 0x2a}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xe, 0x1b, &(0x7f0000001980)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x10000, 0x71, 0x10, 0xa9, 0x6}, [@cb_func={0x18, 0x13, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x30}, @ldst={0x0, 0x3, 0x0, 0x0, 0x8, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x4, 0x1, 0x3, 0x6, 0xa, 0x40, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={0x0, 0xb, 0x6, 0x1ecb, 0xe, 0x200}, &(0x7f0000000640)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000400)={r6, 0x3}, &(0x7f0000000440)=0x8) r8 = accept(r4, &(0x7f0000000840)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f00000008c0)=0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001880)={r6, @in6={{0xa, 0x4e23, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x29b6, 0x3, 0x7, 0xb4, 0x2, 0x400, 0x5}, &(0x7f0000001940)=0x9c) sendmmsg$inet_sctp(r8, &(0x7f0000000740)=[{&(0x7f0000000140)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="bec18410be948a8c1695196772b1993c8dffd838517936554961af2f1923d672dd9bf73635a32a838ff358064c0cb96fd1d0fb52c784f0dd28", 0x39}, {&(0x7f00000002c0)="23289d67b03176cbece8a758c15f37a75649b5d56212525ff5379555f411a4761577b1d3c9bb7efc93b20fe937313a2c042861559a700a5b5e4ef7adba791f71734884db477b980762a8587ce2448da39d99a0d74c6f8e4b74bfcae9fd4e5245da4933d78b9f9b06879ecc601c91c8ed12fd868d5a8af1117164afa11e38e0213aa3aac17cbd0a20dd8b0759597b32a359e9a0cfd9a7fe84c5884af5da8bc6eceb7d63dee16f3dc576edb68305ca01800000af63af34b9aadab920f50d25b63253134dc92bed9e9360a68344", 0xcc}], 0x2, &(0x7f0000000680)=[@init={0x18, 0x84, 0x0, {0xff9f, 0x7, 0xe0d, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0xfffe, 0x8005, 0x6, 0x2, r6}}, @init={0x18, 0x84, 0x0, {0x5, 0x2, 0x2, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0xfffc, 0x200, 0x9, 0x0, r7}}, @init={0x18, 0x84, 0x0, {0x4, 0x9, 0xfffa, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xdb, 0x8, 0x400, 0x6, 0x1a, 0x1ff, 0x8001, r6}}], 0xb8, 0x15}], 0x1, 0x0) close(r1) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r5, 0x25, 0x10, @void}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000240)) 2m27.342949989s ago: executing program 5 (id=32048): socket(0x10, 0x803, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a0709070000002bbd7000fddbdf2505001a00ac1414bb000000000080000000000000000000000000000c260014cad7687ba2"], 0x38}}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x200, 0x0, 0x25dffbfd, {0x0, 0x0, 0x0, 0x0, 0x88ac79b4}}, 0x20}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x400c000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'bridge0\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000039000100faff0700ffdadf2501000000a092efdbdcca6b3df0bf1c5a2b4046a7b1f1cf08894ddb523dd68cf66dd17968cc1c807da468a2fbddd45e417c46760e09307f13a5756b15309b9eb1aded429047d34e42cc4c5d0fa29e6595bf9e41f689efcbc0ab4f55fa8327b154db8aea4d5d5944af24a6b74a0958fc45831bf869fc94622681521652f6d98c971d6e1351ac77ff5a297d08c13fc89fc294bac7c3a3cade3e4a"], 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x0) write$tun(r1, &(0x7f0000000440)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x17, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0x18, 0x8a, 0x0, 0x7, [0x3, 0x101, 0x80000000, 0x400, 0x8]}, @timestamp_addr={0x44, 0x14, 0x88, 0x1, 0x5, [{@private=0xa010100, 0x89}, {@multicast2, 0x4ae4}]}, @cipso={0x86, 0x1c, 0x1, [{0x1, 0x8, "0af949c9dd0e"}, {0x1, 0xe, "f0865c7d53d9c5cf1a0ed93b"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x96) 2m26.904402387s ago: executing program 5 (id=32054): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x40}}, 0x0) 2m26.487811452s ago: executing program 5 (id=32056): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000d40)={{0x2, 0xfffe, @empty}, {0x1, @remote}, 0xc, {0x440, 0x4e20, @multicast1}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000800)=""/21, 0x15}], 0x2}}], 0x2, 0x0, 0x0) 2m26.438533959s ago: executing program 5 (id=32058): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4000003}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020600) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r5, 0x0, 0x0, 0x40000100, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="65cf00000000010000000800000014000180060001000e0000ec070005"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x38, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x8080) 2m26.179281752s ago: executing program 5 (id=32061): r0 = socket(0x23, 0x80805, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70b526, 0x1000, {0x3}}, 0x14}}, 0x4008010) 2m11.126667851s ago: executing program 33 (id=32061): r0 = socket(0x23, 0x80805, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70b526, 0x1000, {0x3}}, 0x14}}, 0x4008010) 6.608374229s ago: executing program 4 (id=35168): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xb0}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000004240)=""/4128, 0x1020}, {0x0}, {&(0x7f00000002c0)=""/77, 0x4d}], 0x4}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x4, 0x2030, 0x0) 5.712682758s ago: executing program 4 (id=35181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd601996460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500001000000"], 0x0) 5.376277108s ago: executing program 4 (id=35184): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r0, @ANYBLOB="810902000000000000000300000008000100000000001c000780180001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) 5.311598715s ago: executing program 4 (id=35185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000008002500000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 4.233555175s ago: executing program 1 (id=35205): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 3.311760134s ago: executing program 1 (id=35223): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xfe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r3, 0x2, {0x0, 0x1, 0x4}, 0x2}, 0x18, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4044) 3.27820977s ago: executing program 1 (id=35224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f00000000c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.666981001s ago: executing program 6 (id=35230): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001"], 0x108}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f73"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.636127643s ago: executing program 6 (id=35232): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 1.931595456s ago: executing program 2 (id=35236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x2, 0xfff3}, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40001) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.93139636s ago: executing program 2 (id=35237): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004020}, 0x80) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.898293794s ago: executing program 2 (id=35238): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xb0}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000004240)=""/4128, 0x1020}, {0x0}, {&(0x7f00000002c0)=""/77, 0x4d}], 0x4}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x4, 0x2030, 0x0) 1.764649186s ago: executing program 6 (id=35239): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.555491161s ago: executing program 6 (id=35242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000008002500000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1.327697992s ago: executing program 6 (id=35245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x1508}, 0x1, 0x0, 0x0, 0x20008010}, 0xc000) 1.32361621s ago: executing program 6 (id=35246): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/111, 0x6f}], 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x9c, 0x4) 1.012338528s ago: executing program 2 (id=35248): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 905.81534ms ago: executing program 4 (id=35188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x84, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9b5000f37b726975be516100"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "464065f9344b8ac387a1d225bc"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "32e82c573fa43343c84ee1b1ee"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x78e87d83c70ab613}, 0x4004800) 868.219433ms ago: executing program 4 (id=35249): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000300)=""/131, 0x83}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x4}, 0x5fb5}], 0x1, 0x100, 0x0) 790.971536ms ago: executing program 1 (id=35251): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0xfe33) 730.549736ms ago: executing program 1 (id=35253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettfilter={0x34, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x2, 0x1}, {0xfff1, 0x1}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x101}]}, 0x34}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 675.59744ms ago: executing program 3 (id=35255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x1508}, 0x1, 0x0, 0x0, 0x20008010}, 0xc000) 622.518759ms ago: executing program 3 (id=35256): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12aaf1e75c40000004000000020000000051c1c92ad10d3ceb1f"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 608.037352ms ago: executing program 1 (id=35257): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xb0}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000004240)=""/4128, 0x1020}, {0x0}, {&(0x7f00000002c0)=""/77, 0x4d}], 0x4}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x4, 0x2030, 0x0) 585.421755ms ago: executing program 3 (id=35258): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004020}, 0x80) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 531.980774ms ago: executing program 3 (id=35259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x84, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9b5000f37b726975be516100"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "464065f9344b8ac387a1d225bc"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "32e82c573fa43343c84ee1b1ee"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x78e87d83c70ab613}, 0x4004800) 499.937693ms ago: executing program 3 (id=35260): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x4a002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x7, 0x0, '\x00', 0x1, &(0x7f00000000c0)}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x4c, r2, 0xc4fc9e906872338b, 0x0, 0x25dfdc01, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x3}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}]}]}, 0x4c}}, 0x44000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'caif0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, 0x0) 466.93708ms ago: executing program 3 (id=35261): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r1}, 0x10, 0x0}, 0x4000040) 101.546194ms ago: executing program 2 (id=35263): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0xc840) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}}}}}}, 0x0) 0s ago: executing program 2 (id=35264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x2, 0xfff3}, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40001) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) kernel console output (not intermixed with test programs): entered promiscuous mode [ 1897.256915][T32509] veth0_macvtap: entered promiscuous mode [ 1897.270926][T32509] veth1_macvtap: entered promiscuous mode [ 1897.312440][T32509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1897.355966][T32509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1897.398792][T17958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.421785][T17958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.446571][T17958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.470982][T17958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.520270][ T306] __nla_validate_parse: 80 callbacks suppressed [ 1897.520287][ T306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32083'. [ 1897.602670][T17958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1897.624207][T17958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1897.686106][T17971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1897.694557][T17971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1897.820980][T15001] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1897.829174][ T319] netlink: 68 bytes leftover after parsing attributes in process `syz.1.32087'. [ 1897.887119][ T321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32001'. [ 1898.066909][ T4937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1898.074823][ T4937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1898.084767][ T4937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1898.092734][ T4937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1898.100318][ T4937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1898.135912][ T4937] Bluetooth: hci0: command tx timeout [ 1898.520187][ T329] lo speed is unknown, defaulting to 1000 [ 1898.695519][ T329] lo speed is unknown, defaulting to 1000 [ 1898.899360][T15412] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1898.934157][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1898.981377][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1899.248702][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.266546][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.279066][ T329] bridge_slave_0: entered allmulticast mode [ 1899.286034][ T329] bridge_slave_0: entered promiscuous mode [ 1899.293612][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.300871][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.308615][ T329] bridge_slave_1: entered allmulticast mode [ 1899.316494][ T329] bridge_slave_1: entered promiscuous mode [ 1899.357233][ T329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1899.377654][ T329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1899.418191][ T389] validate_nla: 63 callbacks suppressed [ 1899.418216][ T389] netlink: 'syz.2.32103': attribute type 1 has an invalid length. [ 1899.437261][ T389] nbd: couldn't find device at index -427270060 [ 1899.495989][ T329] team0: Port device team_slave_0 added [ 1899.507140][ T329] team0: Port device team_slave_1 added [ 1899.538745][ T329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1899.547610][ T329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.576592][ T329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1899.591911][ T329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1899.633478][ T329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.693312][ T329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1899.734171][ T399] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 1899.754468][ T399] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 1899.782147][ T409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32111'. [ 1899.793016][ T409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32111'. [ 1899.805978][ T329] hsr_slave_0: entered promiscuous mode [ 1899.812377][ T329] hsr_slave_1: entered promiscuous mode [ 1899.819578][ T329] debugfs: 'hsr0' already exists in 'hsr' [ 1899.825569][ T329] Cannot create hsr debugfs directory [ 1899.838664][T17953] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.846006][ T409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32111'. [ 1899.863185][ T409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32111'. [ 1899.882672][T17953] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.906673][T17953] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.915388][T17953] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.975651][T18080] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1900.136184][ T4937] Bluetooth: hci1: command tx timeout [ 1900.215062][ T4937] Bluetooth: hci0: command tx timeout [ 1900.656205][ T440] netlink: 'syz.1.32121': attribute type 5 has an invalid length. [ 1900.938826][ T440] syzkaller1: entered promiscuous mode [ 1900.951910][ T440] syzkaller1: entered allmulticast mode [ 1901.016857][T26047] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1901.070101][ T329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1901.084146][ T329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1901.105148][ T329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1901.127705][ T457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32126'. [ 1901.189500][ T329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1901.213964][ T329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1901.237400][ T329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1901.256948][ T329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1901.265831][ T466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32129'. [ 1901.271614][ T329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1901.301663][ T466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32129'. [ 1901.312494][T17956] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1901.321524][T17956] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1901.374137][T17956] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1901.382355][T17956] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1901.518003][ T329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1901.551562][ T489] netlink: 'syz.1.32135': attribute type 5 has an invalid length. [ 1901.552882][ T329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1901.566857][ T489] syzkaller1: entered promiscuous mode [ 1901.572340][ T489] syzkaller1: entered allmulticast mode [ 1901.583189][T17971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.590349][T17971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1901.602218][T17953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.609519][T17953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1901.991334][ T329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1902.057923][T15001] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1902.065464][ T329] veth0_vlan: entered promiscuous mode [ 1902.086043][ T329] veth1_vlan: entered promiscuous mode [ 1902.129490][ T329] veth0_macvtap: entered promiscuous mode [ 1902.152549][ T329] veth1_macvtap: entered promiscuous mode [ 1902.169879][ T329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1902.183323][ T329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1902.196676][T17970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.213915][T17970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.235652][T17953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.244388][T17953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.255835][ T4937] Bluetooth: hci1: command tx timeout [ 1902.403312][T17970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1902.426473][T17970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.482551][T17953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1902.509525][T17953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.546210][ T528] FAULT_INJECTION: forcing a failure. [ 1902.546210][ T528] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.579361][ T528] CPU: 1 UID: 0 PID: 528 Comm: syz.2.32144 Not tainted syzkaller #0 PREEMPT(full) [ 1902.579385][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1902.579397][ T528] Call Trace: [ 1902.579404][ T528] [ 1902.579412][ T528] dump_stack_lvl+0xe8/0x150 [ 1902.579436][ T528] should_fail_ex+0x40c/0x560 [ 1902.579458][ T528] should_failslab+0xa8/0x100 [ 1902.579485][ T528] __kmalloc_noprof+0xe8/0x750 [ 1902.579508][ T528] ? rcu_is_watching+0x15/0xb0 [ 1902.579526][ T528] ? sk_prot_alloc+0xe7/0x210 [ 1902.579550][ T528] ? lock_release+0x4b/0x3c0 [ 1902.579577][ T528] sk_prot_alloc+0xe7/0x210 [ 1902.579600][ T528] ? sk_alloc+0x27/0x390 [ 1902.579625][ T528] sk_alloc+0x3a/0x390 [ 1902.579649][ T528] bpf_prog_test_run_skb+0x3a6/0x2230 [ 1902.579675][ T528] ? __fget_files+0x2a/0x420 [ 1902.579705][ T528] ? __might_fault+0xaf/0x130 [ 1902.579725][ T528] ? rcu_is_watching+0x15/0xb0 [ 1902.579745][ T528] ? __fget_files+0x3a2/0x420 [ 1902.579764][ T528] ? __fget_files+0x2a/0x420 [ 1902.579806][ T528] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1902.579837][ T528] bpf_prog_test_run+0x2c5/0x340 [ 1902.579870][ T528] __sys_bpf+0x643/0x950 [ 1902.579899][ T528] ? __pfx___sys_bpf+0x10/0x10 [ 1902.579935][ T528] ? ksys_write+0x242/0x270 [ 1902.579964][ T528] ? __pfx_ksys_write+0x10/0x10 [ 1902.580007][ T528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.580030][ T528] __x64_sys_bpf+0x7c/0x90 [ 1902.580055][ T528] do_syscall_64+0x174/0x580 [ 1902.580083][ T528] ? trace_irq_disable+0x3b/0x140 [ 1902.580110][ T528] ? clear_bhb_loop+0x40/0x90 [ 1902.580134][ T528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.580156][ T528] RIP: 0033:0x7fcf51b9ce59 [ 1902.580175][ T528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1902.580193][ T528] RSP: 002b:00007fcf52abe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1902.580216][ T528] RAX: ffffffffffffffda RBX: 00007fcf51e15fa0 RCX: 00007fcf51b9ce59 [ 1902.580231][ T528] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1902.580253][ T528] RBP: 00007fcf52abe090 R08: 0000000000000000 R09: 0000000000000000 [ 1902.580265][ T528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.580279][ T528] R13: 00007fcf51e16038 R14: 00007fcf51e15fa0 R15: 00007ffcf726f738 [ 1902.580305][ T528] [ 1903.004191][ T538] netlink: 'syz.2.32146': attribute type 5 has an invalid length. [ 1903.035874][ T538] syzkaller1: entered promiscuous mode [ 1903.045006][ T538] syzkaller1: entered allmulticast mode [ 1903.096166][T14077] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1903.535388][T25742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1903.543623][T25742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1903.551447][T25742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1903.567038][T25742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1903.578595][T25742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1903.602876][ T558] netlink: set zone limit has 4 unknown bytes [ 1903.809399][ T571] sctp: [Deprecated]: syz.1.32154 (pid 571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1903.809399][ T571] Use struct sctp_sack_info instead [ 1903.851348][ T5625] syz_tun (unregistering): left allmulticast mode [ 1903.873620][ T574] __nla_validate_parse: 1 callbacks suppressed [ 1903.873637][ T574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32155'. [ 1904.077023][ T561] lo speed is unknown, defaulting to 1000 [ 1904.242166][ T561] lo speed is unknown, defaulting to 1000 [ 1904.248621][ T584] netlink: 'syz.3.32159': attribute type 5 has an invalid length. [ 1904.269290][ T584] syzkaller1: entered promiscuous mode [ 1904.285114][ T584] syzkaller1: entered allmulticast mode [ 1904.295479][T25742] Bluetooth: hci1: command tx timeout [ 1904.584079][ T561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.591976][ T561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.599790][ T561] bridge_slave_0: entered allmulticast mode [ 1904.606907][ T561] bridge_slave_0: entered promiscuous mode [ 1904.614623][ T561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.622184][ T561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.629498][ T561] bridge_slave_1: entered allmulticast mode [ 1904.636449][ T561] bridge_slave_1: entered promiscuous mode [ 1904.650660][ T593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1904.673507][ T593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1904.709608][ T561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1904.721251][ T561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1904.746362][ T561] team0: Port device team_slave_0 added [ 1904.755135][ T561] team0: Port device team_slave_1 added [ 1904.776700][ T561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1904.783705][ T561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1904.809785][ T561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1904.821840][ T561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1904.828843][ T561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1904.854946][ T561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1904.893801][ T561] hsr_slave_0: entered promiscuous mode [ 1904.900388][ T561] hsr_slave_1: entered promiscuous mode [ 1904.906576][ T561] debugfs: 'hsr0' already exists in 'hsr' [ 1904.912323][ T561] Cannot create hsr debugfs directory [ 1904.944463][ T606] sctp: [Deprecated]: syz.2.32164 (pid 606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1904.944463][ T606] Use struct sctp_sack_info instead [ 1905.023222][ T608] bond1: option ad_select: invalid value (34) [ 1905.032070][ T608] bond1 (unregistering): Released all slaves [ 1905.055469][ T561] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1905.065429][ T561] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.074550][ T610] netlink: 'syz.2.32165': attribute type 3 has an invalid length. [ 1905.083356][ T610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.32165'. [ 1905.286310][ T561] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1905.301335][ T561] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.359882][ T561] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1905.370707][ T561] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.445648][ T561] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1905.461144][ T561] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.523781][ T561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1905.533861][ T561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1905.545104][ T561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1905.554570][ T561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1905.562657][ T561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1905.572391][ T561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1905.580606][ T561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1905.591235][ T561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1905.653502][ T561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1905.661464][T25742] Bluetooth: hci2: command tx timeout [ 1905.680634][ T561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1905.692793][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.699910][T17956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1905.711676][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.718818][T17956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1905.749694][ T561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1905.760087][ T561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1905.890096][ T634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32169'. [ 1905.910828][ T634] Bluetooth: MGMT ver 1.23 [ 1906.105458][ T561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1906.163095][ T656] sctp: [Deprecated]: syz.2.32174 (pid 656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1906.163095][ T656] Use struct sctp_sack_info instead [ 1906.241346][ T652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1906.313653][ T652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1906.374921][T25742] Bluetooth: hci1: command tx timeout [ 1906.488027][ T561] veth0_vlan: entered promiscuous mode [ 1906.512286][ T561] veth1_vlan: entered promiscuous mode [ 1906.544693][ T561] veth0_macvtap: entered promiscuous mode [ 1906.556731][ T561] veth1_macvtap: entered promiscuous mode [ 1906.580651][ T561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1906.602880][ T561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1906.623396][T17958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.632162][T17958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.641739][T17958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.684885][T17958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.773440][T17970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1906.795003][T17970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1906.820398][T17970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1906.828274][T17970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1906.850723][ T680] netlink: 'syz.2.32181': attribute type 5 has an invalid length. [ 1906.859073][ T680] syzkaller1: entered promiscuous mode [ 1906.878425][ T680] syzkaller1: entered allmulticast mode [ 1907.102245][ T693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32185'. [ 1907.308813][ T711] team0 (unregistering): Port device team_slave_0 removed [ 1907.324152][ T711] team0 (unregistering): Port device team_slave_1 removed [ 1907.340058][ T710] tipc: Started in network mode [ 1907.351091][ T710] tipc: Node identity aaa007b63626, cluster identity 4711 [ 1907.376821][ T710] tipc: Enabled bearer , priority 0 [ 1907.416077][ T710] syzkaller0: entered promiscuous mode [ 1907.426383][ T710] syzkaller0: entered allmulticast mode [ 1907.523015][ T723] netlink: 'syz.1.32193': attribute type 5 has an invalid length. [ 1907.543155][ T723] syzkaller1: entered promiscuous mode [ 1907.551051][ T723] syzkaller1: entered allmulticast mode [ 1907.571739][ T725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32194'. [ 1907.590855][ T725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32194'. [ 1907.606984][T17957] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1907.617799][ T725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32194'. [ 1907.627173][T17957] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1907.636999][ T725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32194'. [ 1907.658151][T17957] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1907.667803][T17957] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1907.735566][T25742] Bluetooth: hci2: command tx timeout [ 1907.864640][ T745] macvlan1: entered allmulticast mode [ 1907.883975][ T745] veth1_vlan: entered allmulticast mode [ 1907.951796][ T753] netlink: 'syz.1.32205': attribute type 29 has an invalid length. [ 1907.959965][ T753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32205'. [ 1907.970187][ T753] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1908.494873][T18080] tipc: Node number set to 2626029494 [ 1908.801377][ T813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32230'. [ 1908.953722][ T825] bond0: (slave bond_slave_0): Releasing backup interface [ 1908.980487][ T828] dummy0: entered allmulticast mode [ 1908.996896][ T826] dummy0: left allmulticast mode [ 1909.093196][ T840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.32244'. [ 1909.127780][ T843] syzkaller0: entered promiscuous mode [ 1909.139664][ T843] syzkaller0: entered allmulticast mode [ 1909.551166][ T867] can: request_module (can-proto-0) failed. [ 1909.590721][ T867] batman_adv: batadv0: Adding interface: dummy0 [ 1909.641254][ T867] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.719193][ T867] batman_adv: batadv0: Interface activated: dummy0 [ 1909.773051][ T873] batadv0: mtu less than device minimum [ 1909.779227][ T873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1909.790259][ T873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1909.801263][ T873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1909.812204][ T873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1909.823222][ T873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1909.839295][ T873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1909.839849][T25742] Bluetooth: hci2: command tx timeout [ 1909.852794][ T873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1909.866058][ T873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1909.877009][ T873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1909.916632][ T872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32259'. [ 1910.205928][ T894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32266'. [ 1910.409713][ T905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32272'. [ 1910.647523][ T914] syz_tun: entered allmulticast mode [ 1910.663636][ T912] syz_tun: left allmulticast mode [ 1910.737730][ T916] netlink: 52 bytes leftover after parsing attributes in process `syz.2.32277'. [ 1910.754399][ T916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.761645][ T916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.809697][ T919] netlink: 76 bytes leftover after parsing attributes in process `syz.2.32277'. [ 1910.818997][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.826131][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1910.833514][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.840624][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1910.916801][ T924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32281'. [ 1910.951187][ T919] netlink: 52 bytes leftover after parsing attributes in process `syz.2.32277'. [ 1910.971211][ T919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.978370][ T919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.098690][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1911.113433][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1911.122122][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1911.129789][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1911.138264][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1911.790948][ T976] netlink: 36 bytes leftover after parsing attributes in process `syz.3.32295'. [ 1911.895860][ T4937] Bluetooth: hci2: command tx timeout [ 1912.192061][ T927] lo speed is unknown, defaulting to 1000 [ 1912.483206][ T927] lo speed is unknown, defaulting to 1000 [ 1912.519491][ T1002] bridge_slave_1: left allmulticast mode [ 1912.546466][ T1002] bridge_slave_1: left promiscuous mode [ 1912.555209][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.574158][ T1002] bridge_slave_0: left allmulticast mode [ 1912.586398][ T1002] bridge_slave_0: left promiscuous mode [ 1912.599793][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.622358][ T1008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32310'. [ 1912.717545][ T4937] block nbd3: Receive control failed (result -1) [ 1913.255373][ T4937] Bluetooth: hci4: command tx timeout [ 1913.277449][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1913.298506][ T927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.319131][ T927] bridge_slave_0: entered allmulticast mode [ 1913.348227][ T927] bridge_slave_0: entered promiscuous mode [ 1913.370493][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.389918][ T927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.418846][ T927] bridge_slave_1: entered allmulticast mode [ 1913.436334][ T927] bridge_slave_1: entered promiscuous mode [ 1913.853373][ T927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1913.898699][ T927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1913.957875][ T1080] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 1913.977380][ T927] team0: Port device team_slave_0 added [ 1914.006124][ T927] team0: Port device team_slave_1 added [ 1914.070717][ T927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1914.097051][ T927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1914.129874][ T927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1914.162508][ T927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1914.177172][ T927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1914.234899][ T927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1914.327044][ T927] hsr_slave_0: entered promiscuous mode [ 1914.334361][ T927] hsr_slave_1: entered promiscuous mode [ 1914.352460][ T927] debugfs: 'hsr0' already exists in 'hsr' [ 1914.369326][ T927] Cannot create hsr debugfs directory [ 1914.790469][ T927] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1914.827372][ T927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1914.855386][ T927] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1914.868960][ T927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1914.891033][ T927] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1914.954993][ T927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1914.957769][ T1148] net_ratelimit: 13 callbacks suppressed [ 1914.957863][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1914.963857][ T927] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1914.969106][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1914.994224][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1915.003758][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1915.013321][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1915.022962][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1915.032541][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1915.042064][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1915.051531][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1915.061136][ T1148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1915.187047][ T927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1915.335186][ T4937] Bluetooth: hci4: command tx timeout [ 1915.364280][ T927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1915.447234][ T927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1915.460309][T17970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.467928][T17970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1915.484689][ T1161] syzkaller0: create flow: hash 8171892 index 2 [ 1915.493488][T17970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.501127][T17970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1915.528127][ T1161] syzkaller0: delete flow: hash 8171892 index 2 [ 1915.548690][ T1171] can: request_module (can-proto-0) failed. [ 1915.606419][T17971] syzkaller0: tun_net_xmit 76 [ 1915.621645][T17971] syzkaller0: tun_net_xmit 48 [ 1915.635974][T26047] syzkaller0: tun_net_xmit 76 [ 1916.016634][ T1200] tipc: Started in network mode [ 1916.029823][ T1200] tipc: Node identity 569d2a1dcedc, cluster identity 4711 [ 1916.046889][ T1200] tipc: Enabled bearer , priority 0 [ 1916.067805][ T1200] syzkaller0: entered promiscuous mode [ 1916.073311][ T1200] syzkaller0: entered allmulticast mode [ 1916.114739][ T1200] tipc: Resetting bearer [ 1916.144232][ T1199] tipc: Resetting bearer [ 1916.174746][ T1199] tipc: Disabling bearer [ 1916.293958][ T927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1916.661765][ T927] veth0_vlan: entered promiscuous mode [ 1916.679564][ T927] veth1_vlan: entered promiscuous mode [ 1916.737596][ T927] veth0_macvtap: entered promiscuous mode [ 1916.761878][ T927] veth1_macvtap: entered promiscuous mode [ 1916.817585][ T927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1916.841803][ T927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1917.074308][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1917.250408][T17970] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1917.299654][T17970] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.333407][T17970] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1917.345833][T17970] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.354751][T17970] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1917.369916][T17970] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.416232][ T4937] Bluetooth: hci4: command tx timeout [ 1917.423483][T17970] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1917.466569][T17970] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.492256][T17970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.523785][T17970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.569620][T17970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.590339][T17970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.742730][T17970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.766524][T17970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.868322][T17958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.884946][T17958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1918.024022][T17970] syzkaller0: tun_net_xmit 76 [ 1918.042159][T17970] syzkaller0: tun_net_xmit 48 [ 1918.048025][T18080] syzkaller0: tun_net_xmit 76 [ 1918.062361][ T1303] syzkaller0: create flow: hash 8171892 index 2 [ 1918.138165][ T1301] syzkaller0: delete flow: hash 8171892 index 2 [ 1918.155584][T14079] syzkaller0: tun_net_xmit 76 [ 1918.332677][ T1328] tipc: Enabled bearer , priority 0 [ 1918.340650][ T1328] syzkaller0: entered promiscuous mode [ 1918.359786][ T1328] syzkaller0: entered allmulticast mode [ 1918.385006][ T1328] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1918.418556][ T1328] tipc: Resetting bearer [ 1918.440184][ T1324] tipc: Resetting bearer [ 1918.469182][ T1324] tipc: Disabling bearer [ 1918.499595][ T1342] __nla_validate_parse: 1 callbacks suppressed [ 1918.499611][ T1342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32446'. [ 1918.568320][ T4937] block nbd16: Receive control failed (result -1) [ 1919.027372][ T1384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.32463'. [ 1919.065931][ T4937] block nbd17: Receive control failed (result -1) [ 1919.092878][ T1394] netlink: 'syz.1.32468': attribute type 1 has an invalid length. [ 1919.127462][ T1394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1919.148202][ T1394] vlan2: entered allmulticast mode [ 1919.153385][ T1394] bond1: entered allmulticast mode [ 1919.178525][ T1394] bond1: (slave geneve2): making interface the new active one [ 1919.186014][ T1394] geneve2: entered allmulticast mode [ 1919.192586][ T1394] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1919.495481][ T4937] Bluetooth: hci4: command tx timeout [ 1919.641562][ T1437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32489'. [ 1919.697556][ T1432] syzkaller0: create flow: hash 8171892 index 2 [ 1919.704944][T26047] syzkaller0: tun_net_xmit 76 [ 1919.716203][ T4937] block nbd18: Receive control failed (result -1) [ 1919.737592][ T1431] syzkaller0: delete flow: hash 8171892 index 2 [ 1920.128242][ T1467] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.226980][ T1467] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.326333][ T1467] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.422151][ T1467] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.530156][T17957] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.578474][T17970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.610187][ T1504] netlink: 'syz.6.32517': attribute type 1 has an invalid length. [ 1920.629875][T17970] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.655338][T17970] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.797138][ T1521] syzkaller0: left promiscuous mode [ 1920.802567][ T1521] syzkaller0: left allmulticast mode [ 1920.878722][ T1528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32525'. [ 1920.899438][ T1528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1920.906873][ T1528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1921.299128][ T1546] can: request_module (can-proto-0) failed. [ 1921.528927][ T1555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.32532'. [ 1921.849999][ T1567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.857425][ T1567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.931384][ T1567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1921.943398][ T1567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1922.277175][T17958] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.310633][T17958] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.409715][T17970] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.434356][T17970] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.459633][T17957] syzkaller0: tun_net_xmit 76 [ 1922.464527][T17957] syzkaller0: tun_net_xmit 48 [ 1922.613166][ T1589] can: request_module (can-proto-0) failed. [ 1922.631129][ T1589] batman_adv: batadv0: Interface deactivated: dummy0 [ 1922.661807][ T1589] batman_adv: batadv0: Removing interface: dummy0 [ 1922.874277][ T1603] netlink: 152 bytes leftover after parsing attributes in process `syz.4.32547'. [ 1923.363358][ T1631] netlink: 152 bytes leftover after parsing attributes in process `syz.4.32561'. [ 1923.466132][ T1629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1923.474125][ T1629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1923.629778][ T1629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1923.685874][ T1629] veth1_vlan: left allmulticast mode [ 1923.758114][T17958] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1923.776722][T17958] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.795751][T17958] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1923.820460][T17958] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.838965][T17958] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1923.848598][T17958] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.862348][T17958] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1923.896521][T17958] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.922113][ T1536] net_ratelimit: 3319 callbacks suppressed [ 1923.922139][ T1536] Set syz1 is full, maxelem 65536 reached [ 1923.956674][ T1641] can: request_module (can-proto-0) failed. [ 1924.263245][ T1663] netlink: 100 bytes leftover after parsing attributes in process `syz.4.32576'. [ 1924.357710][ T1668] can: request_module (can-proto-0) failed. [ 1924.552840][ T1681] netlink: 84 bytes leftover after parsing attributes in process `syz.4.32583'. [ 1924.562462][ T1681] netlink: 'syz.4.32583': attribute type 1 has an invalid length. [ 1924.666456][ T1690] netlink: 100 bytes leftover after parsing attributes in process `syz.4.32587'. [ 1924.828354][ T1700] batman_adv: batadv0: Adding interface: dummy0 [ 1924.843280][ T1696] can: request_module (can-proto-0) failed. [ 1924.849617][ T1700] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1924.849649][ T1700] batman_adv: batadv0: Interface activated: dummy0 [ 1924.861626][ T1700] batadv0: mtu less than device minimum [ 1924.893048][ T1700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1924.904000][ T1700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1924.914925][ T1700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1924.925874][ T1700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1924.936804][ T1700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1924.947734][ T1700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1924.958654][ T1700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1924.969573][ T1700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1925.171867][ T1717] netlink: 100 bytes leftover after parsing attributes in process `syz.3.32599'. [ 1925.349507][ T1728] can: request_module (can-proto-0) failed. [ 1925.790770][ T1744] netlink: 100 bytes leftover after parsing attributes in process `syz.6.32610'. [ 1926.162746][ T1769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32622'. [ 1926.630675][ T1805] netlink: 'syz.6.32639': attribute type 1 has an invalid length. [ 1926.680608][ T1808] netlink: 72 bytes leftover after parsing attributes in process `syz.3.32640'. [ 1926.694295][ T1805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1926.729360][ T1813] bond1: (slave geneve2): making interface the new active one [ 1926.744275][ T1813] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1926.765364][T17957] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.774099][T17957] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.783527][T17957] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.797793][T17957] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.817362][ T1816] netlink: 48 bytes leftover after parsing attributes in process `syz.1.32643'. [ 1927.210691][ T1844] netlink: 48 bytes leftover after parsing attributes in process `syz.4.32656'. [ 1927.503625][ T1866] netlink: 148 bytes leftover after parsing attributes in process `syz.1.32666'. [ 1928.306344][ T1915] can: request_module (can-proto-0) failed. [ 1929.151710][ T1977] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.237895][ T1977] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.309025][ T1977] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.377109][ T1996] __nla_validate_parse: 7 callbacks suppressed [ 1929.377125][ T1996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32723'. [ 1929.469563][ T1977] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.570307][ T2003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.577763][ T2003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.694110][ T2003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1929.711602][ T2003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1929.797789][ T2000] net_ratelimit: 11 callbacks suppressed [ 1929.797804][ T2000] Set syz1 is full, maxelem 65536 reached [ 1929.866568][T17971] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.886140][T17971] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.909467][T17971] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.928074][T17971] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.028440][T17958] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.053647][T17958] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.061849][T17958] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.081211][T17958] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.187523][ T2027] tipc: Enabling of bearer rejected, already enabled [ 1930.196286][ T2027] syzkaller0: entered promiscuous mode [ 1930.201806][ T2027] syzkaller0: entered allmulticast mode [ 1930.210981][ T2027] tipc: Resetting bearer [ 1930.432165][ T2045] can: request_module (can-proto-0) failed. [ 1930.441916][ T2049] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1930.544460][ T2055] netlink: 'syz.6.32748': attribute type 1 has an invalid length. [ 1930.587714][ T2055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1930.616446][ T2060] syz.1.32750: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1930.632840][ T2060] CPU: 0 UID: 0 PID: 2060 Comm: syz.1.32750 Not tainted syzkaller #0 PREEMPT(full) [ 1930.632868][ T2060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1930.632880][ T2060] Call Trace: [ 1930.632888][ T2060] [ 1930.632896][ T2060] dump_stack_lvl+0xe8/0x150 [ 1930.632923][ T2060] warn_alloc+0x249/0x340 [ 1930.632949][ T2060] ? __pfx_stack_trace_save+0x10/0x10 [ 1930.632977][ T2060] ? __pfx_warn_alloc+0x10/0x10 [ 1930.633002][ T2060] ? __kasan_kmalloc+0x93/0xb0 [ 1930.633026][ T2060] ? __kmalloc_cache_noprof+0x318/0x660 [ 1930.633049][ T2060] ? xskq_create+0x56/0x170 [ 1930.633070][ T2060] ? xsk_init_queue+0x8a/0xe0 [ 1930.633088][ T2060] ? xsk_setsockopt+0x5e0/0x960 [ 1930.633106][ T2060] ? do_sock_setsockopt+0x17c/0x1b0 [ 1930.633130][ T2060] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1930.633154][ T2060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.633176][ T2060] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1930.633214][ T2060] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1930.633241][ T2060] ? __kasan_kmalloc+0x93/0xb0 [ 1930.633269][ T2060] vmalloc_user_noprof+0xad/0xe0 [ 1930.633292][ T2060] ? xskq_create+0xbf/0x170 [ 1930.633313][ T2060] xskq_create+0xbf/0x170 [ 1930.633335][ T2060] xsk_init_queue+0x8a/0xe0 [ 1930.633356][ T2060] xsk_setsockopt+0x5e0/0x960 [ 1930.633376][ T2060] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1930.633394][ T2060] ? __pfx_aa_sk_perm+0x10/0x10 [ 1930.633433][ T2060] ? lock_release+0x4b/0x3c0 [ 1930.633461][ T2060] ? do_raw_spin_unlock+0xf5/0x210 [ 1930.633483][ T2060] ? aa_sock_opt_perm+0xff/0x1a0 [ 1930.633502][ T2060] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1930.633527][ T2060] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1930.633548][ T2060] do_sock_setsockopt+0x17c/0x1b0 [ 1930.633575][ T2060] __x64_sys_setsockopt+0x13d/0x1b0 [ 1930.633602][ T2060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.633621][ T2060] do_syscall_64+0x174/0x580 [ 1930.633646][ T2060] ? clear_bhb_loop+0x40/0x90 [ 1930.633665][ T2060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.633683][ T2060] RIP: 0033:0x7f4987d9ce59 [ 1930.633699][ T2060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1930.633716][ T2060] RSP: 002b:00007f4988c40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1930.633736][ T2060] RAX: ffffffffffffffda RBX: 00007f4988015fa0 RCX: 00007f4987d9ce59 [ 1930.633750][ T2060] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1930.633762][ T2060] RBP: 00007f4987e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1930.633775][ T2060] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1930.633786][ T2060] R13: 00007f4988016038 R14: 00007f4988015fa0 R15: 00007ffe636f6a08 [ 1930.633808][ T2060] [ 1930.633887][ T2060] Mem-Info: [ 1930.927622][ T2060] active_anon:15752 inactive_anon:0 isolated_anon:0 [ 1930.927622][ T2060] active_file:3441 inactive_file:41423 isolated_file:0 [ 1930.927622][ T2060] unevictable:768 dirty:170 writeback:0 [ 1930.927622][ T2060] slab_reclaimable:17401 slab_unreclaimable:225475 [ 1930.927622][ T2060] mapped:40413 shmem:1442 pagetables:1605 [ 1930.927622][ T2060] sec_pagetables:0 bounce:0 [ 1930.927622][ T2060] kernel_misc_reclaimable:0 [ 1930.927622][ T2060] free:1128027 free_pcp:24713 free_cma:0 [ 1930.979263][ T2060] Node 0 active_anon:63008kB inactive_anon:0kB active_file:13764kB inactive_file:165496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:55156kB dirty:676kB writeback:0kB shmem:4232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:22276kB pagetables:6304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1931.014477][ T2060] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106496kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1931.071708][ T2060] Node 0 DMA free:10424kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:64kB free_cma:0kB [ 1931.188140][ T2060] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1931.205938][ T2060] Node 0 DMA32 free:993532kB boost:4096kB min:38280kB low:46824kB high:55368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62808kB inactive_anon:0kB active_file:13764kB inactive_file:165496kB unevictable:1536kB writepending:676kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:40760kB local_pcp:19884kB free_cma:0kB [ 1931.284869][ T2060] lowmem_reserve[]: 0 0 0 0 0 [ 1931.291832][ T2060] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1931.371738][ T2060] lowmem_reserve[]: 0 0 0 0 0 [ 1931.384939][ T2060] Node 1 Normal free:3507468kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58736kB local_pcp:27204kB free_cma:0kB [ 1931.438714][ T2060] lowmem_reserve[]: 0 0 0 0 0 [ 1931.449690][ T2060] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 1*32kB (E) 0*64kB 1*128kB (E) 0*256kB 0*512kB 2*1024kB (UE) 2*2048kB (UM) 1*4096kB (U) = 10424kB [ 1931.485278][ T2060] Node 0 DMA32: 5275*4kB (UM) 10789*8kB (UME) 7549*16kB (UME) 505*32kB (UM) 214*64kB (UM) 73*128kB (UM) 582*256kB (UME) 489*512kB (UM) 301*1024kB (UME) 9*2048kB (U) 0*4096kB = 993412kB [ 1931.522681][ T2060] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1931.543231][ T2060] Node 1 Normal: 17*4kB (UM) 23*8kB (UM) 13*16kB (UM) 20*32kB (UME) 25*64kB (UME) 27*128kB (UME) 21*256kB (UME) 26*512kB (UME) 23*1024kB (UME) 7*2048kB (UME) 841*4096kB (UM) = 3507468kB [ 1931.563341][ T2060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.573789][ T2060] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1931.586288][ T2060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.597555][ T2060] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1931.607867][ T2060] 46302 total pagecache pages [ 1931.612859][ T2060] 0 pages in swap cache [ 1931.617867][ T2060] Free swap = 124996kB [ 1931.622291][ T2060] Total swap = 124996kB [ 1931.627385][ T2060] 2097051 pages RAM [ 1931.631562][ T2060] 0 pages HighMem/MovableOnly [ 1931.637163][ T2060] 427122 pages reserved [ 1931.641694][ T2060] 0 pages cma reserved [ 1932.451432][ T2125] syzkaller0: create flow: hash 8171892 index 1 [ 1932.463570][ T2124] syzkaller0: delete flow: hash 8171892 index 1 [ 1932.992142][ T2179] syzkaller0: create flow: hash 8171892 index 1 [ 1933.036358][T14079] syzkaller0: tun_net_xmit 76 [ 1933.078531][ T2189] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1933.086617][ T2179] syzkaller0: delete flow: hash 8171892 index 1 [ 1933.700831][ T2240] can: request_module (can-proto-0) failed. [ 1933.944608][ T2255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32843'. [ 1933.955526][ T2255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32843'. [ 1934.083292][ T2263] syzkaller0: entered promiscuous mode [ 1934.091940][ T2263] syzkaller0: entered allmulticast mode [ 1934.110077][ T2263] tipc: Started in network mode [ 1934.115082][ T2263] tipc: Node identity 328b92ba5c6c, cluster identity 4711 [ 1934.125765][ T2263] tipc: Enabled bearer , priority 0 [ 1934.146600][ T2262] tipc: Resetting bearer [ 1934.160165][ T2266] can: request_module (can-proto-0) failed. [ 1934.170436][ T2262] tipc: Disabling bearer [ 1934.504300][ T2291] tipc: Enabled bearer , priority 0 [ 1934.531481][ T2291] syzkaller0: entered promiscuous mode [ 1934.557026][ T2292] can: request_module (can-proto-0) failed. [ 1934.563735][ T2291] syzkaller0: entered allmulticast mode [ 1934.569659][ T2300] netlink: 28 bytes leftover after parsing attributes in process `syz.6.32863'. [ 1934.596995][ T2291] tipc: Resetting bearer [ 1934.611799][ T2289] tipc: Resetting bearer [ 1934.631922][ T2289] tipc: Disabling bearer [ 1934.645602][ T2305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32866'. [ 1935.637398][ T2387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.32904'. [ 1936.262999][T17958] syzkaller0: tun_net_xmit 76 [ 1936.268300][T17958] syzkaller0: tun_net_xmit 48 [ 1936.284970][T26047] syzkaller0: tun_net_xmit 76 [ 1937.435379][ T2488] can: request_module (can-proto-0) failed. [ 1937.807904][ T2517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.32954'. [ 1938.119221][ T2527] can: request_module (can-proto-0) failed. [ 1938.222756][ T2544] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 1938.344637][ T2555] syzkaller0: create flow: hash 8171892 index 1 [ 1938.365623][ T2554] syzkaller0: delete flow: hash 8171892 index 1 [ 1938.898287][ T2580] can: request_module (can-proto-0) failed. [ 1939.459904][ T2628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.32994'. [ 1939.647611][ T2640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1939.808416][ T2653] netlink: 48 bytes leftover after parsing attributes in process `syz.3.33007'. [ 1940.151148][ T2444] Set syz1 is full, maxelem 65536 reached [ 1940.227207][ T2695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33019'. [ 1940.617478][ T2703] syzkaller0: Caught tx_queue_len zero misconfig [ 1942.959116][ T2667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1943.452997][ T2741] syzkaller0: entered promiscuous mode [ 1943.491394][ T2741] syzkaller0: entered allmulticast mode [ 1943.540214][ T2747] syzkaller0: entered promiscuous mode [ 1943.567574][ T2747] syzkaller0: entered allmulticast mode [ 1943.798618][ T2774] netlink: 68 bytes leftover after parsing attributes in process `syz.3.33041'. [ 1944.142044][ T2802] netlink: 68 bytes leftover after parsing attributes in process `syz.1.33053'. [ 1945.048735][ T2848] netlink: 68 bytes leftover after parsing attributes in process `syz.4.33068'. [ 1945.229377][ T2860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.33072'. [ 1945.443955][T17956] syzkaller0: tun_net_xmit 76 [ 1945.455580][T17956] syzkaller0: tun_net_xmit 48 [ 1945.465492][T18080] syzkaller0: tun_net_xmit 76 [ 1945.478955][ T2871] syzkaller0: create flow: hash 8171892 index 1 [ 1945.500850][ T2869] syzkaller0: delete flow: hash 8171892 index 1 [ 1945.599375][ T2888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.33080'. [ 1945.612430][ T2886] syzkaller0: entered promiscuous mode [ 1945.623771][ T2886] syzkaller0: entered allmulticast mode [ 1945.829378][ T2901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33085'. [ 1946.339823][ T2939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33104'. [ 1946.350703][ T2937] syzkaller0: left promiscuous mode [ 1946.366535][ T2937] syzkaller0: left allmulticast mode [ 1946.560290][ T2901] Set syz1 is full, maxelem 65536 reached [ 1946.635241][ T2955] syzkaller0: entered promiscuous mode [ 1946.648231][ T2955] syzkaller0: entered allmulticast mode [ 1946.692411][ T2955] tipc: Enabled bearer , priority 0 [ 1946.746036][ T2952] tipc: Resetting bearer [ 1946.780525][ T2952] tipc: Disabling bearer [ 1946.878767][ T2967] syzkaller0: create flow: hash 8171892 index 1 [ 1946.888039][T14077] syzkaller0: tun_net_xmit 76 [ 1946.933862][ T2966] syzkaller0: delete flow: hash 8171892 index 1 [ 1947.199711][ T3004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.33133'. [ 1947.246434][ T3008] sctp: [Deprecated]: syz.4.33135 (pid 3008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1947.246434][ T3008] Use struct sctp_sack_info instead [ 1947.607817][ T3039] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.33151'. [ 1947.620361][T17971] syzkaller0: tun_net_xmit 76 [ 1947.632540][ T3028] syzkaller0: create flow: hash 8171892 index 1 [ 1947.639076][T17971] syzkaller0: tun_net_xmit 48 [ 1947.668666][ T3025] syzkaller0: delete flow: hash 8171892 index 1 [ 1947.705739][ T3046] netlink: 'syz.1.33154': attribute type 15 has an invalid length. [ 1948.198975][ T3084] syzkaller0: entered promiscuous mode [ 1948.211458][ T3084] syzkaller0: entered allmulticast mode [ 1948.438848][T17956] syzkaller0: tun_net_xmit 76 [ 1948.446779][T17956] syzkaller0: tun_net_xmit 48 [ 1948.460802][ T3085] syzkaller0: delete flow: hash 8171892 index 1 [ 1948.740424][ T3122] syzkaller0: entered promiscuous mode [ 1948.762533][ T3122] syzkaller0: entered allmulticast mode [ 1948.894613][ T3139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.33195'. [ 1948.991398][ T3148] bond0: (slave bridge_slave_1): Error: Device can not be enslaved while up [ 1949.861443][ T3206] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 1950.106955][ T3235] netlink: 164 bytes leftover after parsing attributes in process `syz.6.33234'. [ 1950.329284][ T3241] syzkaller0: create flow: hash 8171892 index 1 [ 1950.351174][ T3240] syzkaller0: delete flow: hash 8171892 index 1 [ 1950.549003][ T3258] can: request_module (can-proto-0) failed. [ 1950.583502][ T3258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.33245'. [ 1951.028952][ T3290] can: request_module (can-proto-0) failed. [ 1951.108799][ T3294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33260'. [ 1951.202971][ T3293] syzkaller0: create flow: hash 8171892 index 1 [ 1951.378977][ T3292] syzkaller0: delete flow: hash 8171892 index 1 [ 1951.992878][ T3362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33293'. [ 1952.040542][ T3357] syzkaller0: create flow: hash 8171892 index 1 [ 1952.053228][ T3356] syzkaller0: delete flow: hash 8171892 index 1 [ 1952.318752][ T3385] syzkaller0: left promiscuous mode [ 1952.329844][ T3385] syzkaller0: left allmulticast mode [ 1952.403870][ T3387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33303'. [ 1952.430899][ T3389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33304'. [ 1952.473309][ T3393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33306'. [ 1952.610159][ T3383] infiniband uyz0: set down [ 1952.620808][ T3383] infiniband uyz0: added bridge_slave_1 [ 1952.654274][ T3383] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1952.670429][ T3383] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1952.688301][ T3383] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1952.709977][ T3383] RDS/IB: uyz0: added [ 1952.714049][ T3383] smc: adding ib device uyz0 with port count 1 [ 1952.720456][ T3383] smc: ib device uyz0 port 1 has no pnetid [ 1953.360645][ T3444] netlink: 60 bytes leftover after parsing attributes in process `syz.4.33328'. [ 1954.437996][ T3501] tipc: Enabling of bearer rejected, already enabled [ 1954.465205][ T3501] syzkaller0: entered promiscuous mode [ 1954.471681][ T3501] syzkaller0: entered allmulticast mode [ 1954.660067][ T3514] netlink: 60 bytes leftover after parsing attributes in process `syz.4.33361'. [ 1955.451951][ T3556] netlink: 48 bytes leftover after parsing attributes in process `syz.3.33378'. [ 1955.473813][ T3559] tipc: Enabling of bearer rejected, failed to enable media [ 1956.314887][ T3611] tipc: Enabling of bearer rejected, failed to enable media [ 1956.773420][ T3644] netlink: 'syz.6.33407': attribute type 2 has an invalid length. [ 1957.038999][ T3667] tipc: Started in network mode [ 1957.048183][ T3667] tipc: Node identity 1251e852a79, cluster identity 4711 [ 1957.057783][ T3667] tipc: Enabled bearer , priority 0 [ 1957.077320][ T3667] syzkaller0: entered promiscuous mode [ 1957.082911][ T3667] syzkaller0: entered allmulticast mode [ 1957.113064][ T3667] tipc: Resetting bearer [ 1957.132259][ T3666] tipc: Resetting bearer [ 1957.143768][ T3666] tipc: Disabling bearer [ 1957.507980][T17957] syzkaller0: tun_net_xmit 76 [ 1957.517715][T17957] syzkaller0: tun_net_xmit 48 [ 1957.779561][ T3719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33440'. [ 1957.963633][ T3730] can: request_module (can-proto-0) failed. [ 1958.015288][T26047] syzkaller0: tun_net_xmit 76 [ 1958.162192][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33455'. [ 1958.172058][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33455'. [ 1958.216510][ T3758] syzkaller0: left promiscuous mode [ 1958.222334][ T3758] syzkaller0: left allmulticast mode [ 1958.227974][ T3760] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.33458'. [ 1958.621745][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33462'. [ 1959.472209][ T3834] can: request_module (can-proto-0) failed. [ 1961.043767][T17958] syzkaller0: tun_net_xmit 76 [ 1961.051199][T17958] syzkaller0: tun_net_xmit 48 [ 1961.065153][T18080] syzkaller0: tun_net_xmit 76 [ 1962.042771][ T3997] netlink: 40 bytes leftover after parsing attributes in process `syz.6.33559'. [ 1962.813548][ T4040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.33578'. [ 1963.131570][ T4063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.33590'. [ 1963.168511][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33592'. [ 1963.751320][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aba9c00: rx timeout, send abort [ 1964.246675][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806abab800: rx timeout, send abort [ 1964.259872][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aba9c00: abort rx timeout. Force session deactivation [ 1964.755531][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806abab800: abort rx timeout. Force session deactivation [ 1964.877706][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33636'. [ 1964.888179][ T4174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.33636'. [ 1964.906483][ T4174] geneve2: entered promiscuous mode [ 1964.912542][ T4174] geneve2: entered allmulticast mode [ 1964.920797][T17971] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1964.933583][T17971] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1964.950752][T17971] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1964.968609][T17971] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1966.394337][ T4278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33677'. [ 1966.397932][ T4277] netlink: 16 bytes leftover after parsing attributes in process `syz.6.33676'. [ 1967.583343][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.33717'. [ 1970.960225][ T4395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1971.240731][ T4489] syzkaller0: entered promiscuous mode [ 1971.247764][ T4489] syzkaller0: entered allmulticast mode [ 1971.571198][ T4513] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 1971.661078][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33777'. [ 1972.038000][ T4539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33788'. [ 1972.442677][ T4569] syzkaller0: entered promiscuous mode [ 1972.471852][ T4569] syzkaller0: entered allmulticast mode [ 1972.491447][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33800'. [ 1972.937525][ T4605] syzkaller0: entered promiscuous mode [ 1972.968599][ T4605] syzkaller0: entered allmulticast mode [ 1973.097114][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33818'. [ 1973.301917][ T4634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.33825'. [ 1973.437671][ T4645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 1973.623219][T17956] syzkaller0: tun_net_xmit 76 [ 1973.642651][T17956] syzkaller0: tun_net_xmit 48 [ 1973.648511][T18080] syzkaller0: tun_net_xmit 76 [ 1973.872699][ T4671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.33842'. [ 1974.010038][ T4682] netlink: 'syz.4.33847': attribute type 10 has an invalid length. [ 1974.038796][ T4682] veth0_vlan: left promiscuous mode [ 1974.063799][ T4682] veth0_vlan: entered promiscuous mode [ 1974.070619][ T4684] netlink: 'syz.1.33848': attribute type 1 has an invalid length. [ 1974.083369][ T4684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33848'. [ 1974.098365][ T4682] team0: Device veth0_vlan failed to register rx_handler [ 1974.488100][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33857'. [ 1974.512956][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33857'. [ 1974.985619][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33870'. [ 1975.004712][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33870'. [ 1975.080221][T17958] syzkaller0: tun_net_xmit 76 [ 1975.099228][T17958] syzkaller0: tun_net_xmit 48 [ 1975.106401][T26047] syzkaller0: tun_net_xmit 76 [ 1975.427125][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33877'. [ 1975.632110][ T4787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33882'. [ 1975.825358][ T4802] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1976.726729][ T4848] netlink: 'syz.1.33908': attribute type 10 has an invalid length. [ 1976.753409][ T4848] veth0_vlan: left promiscuous mode [ 1976.761756][ T4848] veth0_vlan: entered promiscuous mode [ 1976.773701][ T4848] team0: Device veth0_vlan failed to register rx_handler [ 1976.854199][T17953] syzkaller0: tun_net_xmit 76 [ 1976.860082][T17953] syzkaller0: tun_net_xmit 48 [ 1978.964660][ T4817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1979.179159][ T4941] __nla_validate_parse: 1 callbacks suppressed [ 1979.179177][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33929'. [ 1979.217204][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.33936'. [ 1979.328943][ T4962] netlink: 'syz.2.33941': attribute type 10 has an invalid length. [ 1982.302274][ T4957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1982.610484][ T5036] bridge0: port 3(syz_tun) entered blocking state [ 1982.633649][ T5036] bridge0: port 3(syz_tun) entered disabled state [ 1982.657299][ T5036] syz_tun: entered allmulticast mode [ 1982.676169][ T5036] syz_tun: entered promiscuous mode [ 1982.761123][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.33971'. [ 1982.804180][ T5047] tipc: Enabled bearer , priority 5 [ 1982.815222][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33970'. [ 1982.851295][ T5051] syzkaller0: entered promiscuous mode [ 1982.862932][ T5051] syzkaller0: entered allmulticast mode [ 1983.121693][ T5071] tipc: Cannot configure node identity twice [ 1983.269757][ T5083] syzkaller1: entered promiscuous mode [ 1983.284935][ T5083] syzkaller1: entered allmulticast mode [ 1983.322382][ T4937] Bluetooth: hci4: link tx timeout [ 1983.327952][ T4937] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1983.533451][ T5101] tipc: Cannot configure node identity twice [ 1983.714161][ T5115] syzkaller1: entered promiscuous mode [ 1983.726857][ T5115] syzkaller1: entered allmulticast mode [ 1983.915779][T15412] tipc: Node number set to 2554407453 [ 1984.045896][ T5135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34006'. [ 1984.164422][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34009'. [ 1984.188476][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34009'. [ 1984.272651][ T5149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34014'. [ 1984.282082][ T5149] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1984.384068][ T5156] tipc: Enabling of bearer rejected, failed to enable media [ 1984.394266][ T5156] syzkaller0: entered promiscuous mode [ 1984.400866][ T5156] syzkaller0: entered allmulticast mode [ 1984.428022][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34018'. [ 1984.531758][ T5174] netlink: 'syz.4.34025': attribute type 10 has an invalid length. [ 1984.540208][ T5174] veth0_vlan: left promiscuous mode [ 1984.546304][ T5174] veth0_vlan: entered promiscuous mode [ 1984.553623][ T5174] team0: Device veth0_vlan failed to register rx_handler [ 1984.937439][ T5204] netlink: 'syz.3.34039': attribute type 10 has an invalid length. [ 1984.973418][ T5204] veth0_vlan: left promiscuous mode [ 1984.981738][ T5204] veth0_vlan: entered promiscuous mode [ 1984.991795][ T5204] team0: Device veth0_vlan failed to register rx_handler [ 1985.399593][ T5245] netlink: 'syz.2.34058': attribute type 10 has an invalid length. [ 1985.415407][ T4937] Bluetooth: hci4: command 0x0405 tx timeout [ 1985.587911][ T5258] syzkaller1: entered promiscuous mode [ 1985.608019][ T5258] syzkaller1: entered allmulticast mode [ 1985.734630][ T5269] bridge0: port 3(syz_tun) entered blocking state [ 1985.744165][ T5269] bridge0: port 3(syz_tun) entered disabled state [ 1985.753813][ T5269] syz_tun: entered allmulticast mode [ 1985.762168][ T5269] syz_tun: entered promiscuous mode [ 1985.986804][ T5287] tipc: Enabling of bearer rejected, failed to enable media [ 1986.252116][ T5296] syzkaller1: entered promiscuous mode [ 1986.278148][ T5296] syzkaller1: entered allmulticast mode [ 1986.360461][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.34079'. [ 1986.389297][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.34079'. [ 1986.513491][ T5307] netlink: 128 bytes leftover after parsing attributes in process `syz.4.34081'. [ 1986.560065][ T5307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1986.596521][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34083'. [ 1987.449627][ T5381] netlink: 160 bytes leftover after parsing attributes in process `syz.6.34116'. [ 1987.458791][ T5381] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1989.160463][ T5479] bridge0: port 3(syz_tun) entered blocking state [ 1989.183285][ T5479] bridge0: port 3(syz_tun) entered disabled state [ 1989.191769][ T5479] syz_tun: entered allmulticast mode [ 1989.199719][ T5479] syz_tun: entered promiscuous mode [ 1989.239675][ T5483] syzkaller1: entered promiscuous mode [ 1989.247930][ T5483] syzkaller1: entered allmulticast mode [ 1989.717014][ T5522] syzkaller1: entered promiscuous mode [ 1989.730633][ T5522] syzkaller1: entered allmulticast mode [ 1989.774433][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34176'. [ 1990.094887][ T5550] netlink: 'syz.1.34188': attribute type 10 has an invalid length. [ 1990.398288][ T5575] ip6erspan0: entered promiscuous mode [ 1991.082311][ T5642] vlan0: entered promiscuous mode [ 1991.097868][ T5641] vlan0: left promiscuous mode [ 1991.657256][ T5693] xt_hashlimit: size too large, truncated to 1048576 [ 1992.392438][ T5768] Set syz1 is full, maxelem 65536 reached [ 1993.184395][ T5840] netlink: 'syz.6.34307': attribute type 3 has an invalid length. [ 1993.747468][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.34331'. [ 1993.760994][ T5890] netlink: 7 bytes leftover after parsing attributes in process `syz.6.34331'. [ 1994.070943][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34342'. [ 1994.244609][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34347'. [ 1994.254516][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34347'. [ 1994.625781][ T5956] syzkaller0: entered promiscuous mode [ 1994.638927][ T5956] syzkaller0: entered allmulticast mode [ 1994.777267][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34365'. [ 1994.837266][ T5973] syzkaller0: entered promiscuous mode [ 1994.843199][ T5973] syzkaller0: entered allmulticast mode [ 1995.257932][ T6007] Set syz1 is full, maxelem 65536 reached [ 1995.332496][ T6010] syzkaller0: entered promiscuous mode [ 1995.339841][ T6010] syzkaller0: entered allmulticast mode [ 1995.761296][ T6042] ipip1: entered promiscuous mode [ 1995.768859][ T6042] ipip1: entered allmulticast mode [ 1996.063201][ T6077] Set syz1 is full, maxelem 65536 reached [ 1996.414442][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34427'. [ 1996.688828][ T6136] syzkaller0: entered promiscuous mode [ 1996.702085][ T6136] syzkaller0: entered allmulticast mode [ 1997.255653][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34453'. [ 1997.393476][ T6188] xt_hashlimit: size too large, truncated to 1048576 [ 1997.538124][ T6192] netlink: 184 bytes leftover after parsing attributes in process `syz.2.34455'. [ 1997.982259][ T6216] netlink: 184 bytes leftover after parsing attributes in process `syz.1.34467'. [ 1998.005023][ T6216] team0: entered allmulticast mode [ 1998.014519][ T6216] team_slave_0: entered allmulticast mode [ 1998.038168][ T6216] team_slave_1: entered allmulticast mode [ 1998.074363][ T6220] syzkaller0: entered promiscuous mode [ 1998.091850][ T6220] syzkaller0: entered allmulticast mode [ 1998.161682][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34471'. [ 1998.182747][ T6228] erspan0: entered promiscuous mode [ 1998.189796][ T6228] macvtap1: entered promiscuous mode [ 1998.196004][ T6228] macvtap1: entered allmulticast mode [ 1998.201864][ T6228] erspan0: entered allmulticast mode [ 1998.216216][ T6228] : renamed from macvtap1 (while UP) [ 1998.483542][ T6228] : left promiscuous mode [ 1998.496838][ T6228] : left allmulticast mode [ 1998.511455][ T6228] erspan0: left allmulticast mode [ 1998.535081][ T4937] Bluetooth: hci6: command 0x0406 tx timeout [ 1999.007057][ T6274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.34492'. [ 1999.063064][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34494'. [ 1999.122866][ T6281] syzkaller0: entered promiscuous mode [ 1999.134464][ T6281] syzkaller0: entered allmulticast mode [ 1999.267173][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.34500'. [ 1999.393015][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.34505'. [ 1999.552173][ T6324] syzkaller0: entered promiscuous mode [ 1999.557727][ T6324] syzkaller0: entered allmulticast mode [ 1999.824285][ T6341] __nla_validate_parse: 2 callbacks suppressed [ 1999.824314][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.34520'. [ 1999.845154][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34522'. [ 1999.927880][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34525'. [ 2000.595988][ T6388] syzkaller0: entered promiscuous mode [ 2000.601636][ T6388] syzkaller0: entered allmulticast mode [ 2000.968115][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34546'. [ 2001.600784][ T6426] syzkaller0: entered promiscuous mode [ 2001.606875][ T6426] syzkaller0: entered allmulticast mode [ 2002.509267][ T6315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2002.940190][ T6461] nbd: illegal input index 2958377 [ 2002.952439][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.34566'. [ 2003.116424][ T6463] siw: device registration error -23 [ 2003.431249][ T6477] tipc: Started in network mode [ 2003.436181][ T6477] tipc: Node identity c63677a57428, cluster identity 4711 [ 2003.443393][ T6477] tipc: Enabled bearer , priority 0 [ 2003.514230][ T6478] tipc: Resetting bearer [ 2003.539395][ T6476] tipc: Disabling bearer [ 2003.747091][ T6500] netlink: 'syz.1.34581': attribute type 1 has an invalid length. [ 2003.773744][ T6500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2003.905889][ T6506] netlink: 'syz.1.34581': attribute type 10 has an invalid length. [ 2003.914408][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.34581'. [ 2004.072742][ T6500] bond2: (slave veth3): Enslaving as an active interface with a down link [ 2004.135964][ T6504] bond2: (slave dummy0): making interface the new active one [ 2004.189443][ T6504] dummy0: entered promiscuous mode [ 2004.218424][ T6504] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 2004.274251][ T6506] bond2: (slave dummy0): Releasing active interface [ 2004.354893][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34587'. [ 2004.822462][T14077] IPVS: starting estimator thread 0... [ 2004.944964][ T6537] IPVS: using max 44 ests per chain, 105600 per kthread [ 2005.091222][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34600'. [ 2005.296873][ T6564] syzkaller1: entered promiscuous mode [ 2005.325080][ T6564] syzkaller1: entered allmulticast mode [ 2005.344437][ T6565] syzkaller0: entered promiscuous mode [ 2005.358886][ T6565] syzkaller0: entered allmulticast mode [ 2005.492398][ T6576] netlink: 'syz.3.34611': attribute type 12 has an invalid length. [ 2005.522403][ T6576] netlink: 'syz.3.34611': attribute type 29 has an invalid length. [ 2005.542790][ T6576] netlink: 148 bytes leftover after parsing attributes in process `syz.3.34611'. [ 2005.561397][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34614'. [ 2005.570633][ T6576] netlink: 'syz.3.34611': attribute type 1 has an invalid length. [ 2005.579080][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34615'. [ 2005.594980][ T6576] netlink: 47 bytes leftover after parsing attributes in process `syz.3.34611'. [ 2005.633172][ T6582] netlink: 'syz.3.34611': attribute type 12 has an invalid length. [ 2005.647622][ T6582] netlink: 'syz.3.34611': attribute type 29 has an invalid length. [ 2005.655538][ T6582] netlink: 148 bytes leftover after parsing attributes in process `syz.3.34611'. [ 2005.664709][ T6582] netlink: 'syz.3.34611': attribute type 1 has an invalid length. [ 2005.672529][ T6582] netlink: 47 bytes leftover after parsing attributes in process `syz.3.34611'. [ 2005.709303][ T6587] bridge: RTM_NEWNEIGH with invalid ether address [ 2005.820574][ T6598] syzkaller1: entered promiscuous mode [ 2005.832943][ T6598] syzkaller1: entered allmulticast mode [ 2006.022448][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34626'. [ 2006.240828][ T6639] syzkaller1: entered promiscuous mode [ 2006.258201][ T6639] syzkaller1: entered allmulticast mode [ 2006.300261][ T6645] syzkaller0: entered promiscuous mode [ 2006.305768][ T6645] syzkaller0: entered allmulticast mode [ 2006.450783][ T6652] syzkaller1: entered promiscuous mode [ 2006.463999][ T6652] syzkaller1: entered allmulticast mode [ 2006.686216][ T6670] syzkaller1: entered promiscuous mode [ 2006.691914][ T6670] syzkaller1: entered allmulticast mode [ 2006.934107][ T6688] syzkaller1: entered promiscuous mode [ 2006.941817][ T6688] syzkaller1: entered allmulticast mode [ 2007.267916][ T6707] syzkaller1: entered promiscuous mode [ 2007.275195][ T6707] syzkaller1: entered allmulticast mode [ 2007.312072][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34669'. [ 2007.501548][ T6723] syzkaller1: entered promiscuous mode [ 2007.510391][ T6723] syzkaller1: entered allmulticast mode [ 2007.676396][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.34681'. [ 2009.132807][ T6841] netlink: 'syz.4.34724': attribute type 12 has an invalid length. [ 2009.164946][ T6841] netlink: 'syz.4.34724': attribute type 29 has an invalid length. [ 2009.314132][ T6852] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 2009.422893][ T6862] syzkaller0: entered promiscuous mode [ 2009.428543][ T6862] syzkaller0: entered allmulticast mode [ 2009.553043][ T6876] syzkaller1: entered promiscuous mode [ 2009.563601][ T6876] syzkaller1: entered allmulticast mode [ 2009.612617][T18080] IPVS: starting estimator thread 0... [ 2009.715887][ T6881] IPVS: using max 48 ests per chain, 115200 per kthread [ 2009.891140][ T6905] netlink: 'syz.4.34751': attribute type 12 has an invalid length. [ 2009.924243][ T6905] netlink: 'syz.4.34751': attribute type 29 has an invalid length. [ 2010.105574][ T6922] syzkaller1: entered promiscuous mode [ 2010.121688][ T6922] syzkaller1: entered allmulticast mode [ 2010.630259][ T6957] syzkaller1: entered promiscuous mode [ 2010.636001][ T6957] syzkaller1: entered allmulticast mode [ 2011.193286][ T6992] syzkaller0: entered promiscuous mode [ 2011.200200][ T6992] syzkaller0: entered allmulticast mode [ 2011.212920][ T6992] 0: reclassify loop, rule prio 0, protocol 800 [ 2011.323043][ T7001] __nla_validate_parse: 8 callbacks suppressed [ 2011.323058][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.34793'. [ 2011.733420][ T7034] syzkaller0: entered promiscuous mode [ 2011.740563][ T7034] syzkaller0: entered allmulticast mode [ 2012.532303][ T7040] Set syz1 is full, maxelem 65536 reached [ 2014.601942][ T7022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2014.742014][ T7075] syzkaller0: entered promiscuous mode [ 2014.747883][ T7075] syzkaller0: entered allmulticast mode [ 2014.754315][ T7081] netlink: 'syz.6.34827': attribute type 12 has an invalid length. [ 2014.765434][ T7075] 0: reclassify loop, rule prio 0, protocol 800 [ 2014.771797][ T7081] netlink: 'syz.6.34827': attribute type 29 has an invalid length. [ 2014.785802][ T7081] netlink: 148 bytes leftover after parsing attributes in process `syz.6.34827'. [ 2014.795672][ T7081] netlink: 59 bytes leftover after parsing attributes in process `syz.6.34827'. [ 2014.859749][ T7080] syzkaller0: entered promiscuous mode [ 2014.890917][ T7080] syzkaller0: entered allmulticast mode [ 2014.962694][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34832'. [ 2015.054553][ T7095] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.158530][ T7095] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.245548][ T7095] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.379808][ T7095] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.569322][T17953] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.604122][T17958] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.624334][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34844'. [ 2015.637658][T17958] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.653507][T17958] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.740365][ T7129] syzkaller0: entered promiscuous mode [ 2015.745935][ T7129] syzkaller0: entered allmulticast mode [ 2016.269018][ T7174] syzkaller0: entered promiscuous mode [ 2016.274705][ T7174] syzkaller0: entered allmulticast mode [ 2016.526837][ T4937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2016.537194][ T4937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2016.545777][ T4937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2016.555345][ T4937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2016.563432][ T4937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2017.382334][ T7189] lo speed is unknown, defaulting to 1000 [ 2017.517212][ T7233] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 2017.563174][ T7189] lo speed is unknown, defaulting to 1000 [ 2017.773684][ T7242] syzkaller0: entered promiscuous mode [ 2017.801902][ T7242] syzkaller0: entered allmulticast mode [ 2018.188024][ T7271] netlink: 'syz.2.34902': attribute type 12 has an invalid length. [ 2018.248063][ T7271] netlink: 'syz.2.34902': attribute type 29 has an invalid length. [ 2018.257979][ T7271] netlink: 148 bytes leftover after parsing attributes in process `syz.2.34902'. [ 2018.268537][ T7271] netlink: 59 bytes leftover after parsing attributes in process `syz.2.34902'. [ 2018.616844][ T4937] Bluetooth: hci7: command tx timeout [ 2018.676320][ T7308] netlink: 'syz.2.34917': attribute type 12 has an invalid length. [ 2018.685521][ T7308] netlink: 'syz.2.34917': attribute type 29 has an invalid length. [ 2018.693977][ T7308] netlink: 148 bytes leftover after parsing attributes in process `syz.2.34917'. [ 2018.704296][ T7308] netlink: 59 bytes leftover after parsing attributes in process `syz.2.34917'. [ 2018.744869][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.752759][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.760656][ T7189] bridge_slave_0: entered allmulticast mode [ 2018.768695][ T7189] bridge_slave_0: entered promiscuous mode [ 2018.778689][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.791984][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.800251][ T7189] bridge_slave_1: entered allmulticast mode [ 2018.808173][ T7189] bridge_slave_1: entered promiscuous mode [ 2018.851917][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2018.867424][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2018.919222][ T7189] team0: Port device team_slave_0 added [ 2018.930277][ T7189] team0: Port device team_slave_1 added [ 2018.973294][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2018.983305][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.011543][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2019.023531][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2019.030490][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.056645][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.131356][ T7189] hsr_slave_0: entered promiscuous mode [ 2019.138100][ T7189] hsr_slave_1: entered promiscuous mode [ 2019.144354][ T7189] debugfs: 'hsr0' already exists in 'hsr' [ 2019.150822][ T7189] Cannot create hsr debugfs directory [ 2019.155309][ T4937] Bluetooth: hci0: command 0x0406 tx timeout [ 2019.352636][ T7189] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2019.426649][ T7189] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2019.457652][ T7333] netlink: 'syz.3.34927': attribute type 12 has an invalid length. [ 2019.474883][ T7333] netlink: 'syz.3.34927': attribute type 29 has an invalid length. [ 2019.491689][ T7333] netlink: 148 bytes leftover after parsing attributes in process `syz.3.34927'. [ 2019.505193][ T7333] netlink: 59 bytes leftover after parsing attributes in process `syz.3.34927'. [ 2019.518013][ T7189] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2019.591156][ T7189] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2019.806713][ T7189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2019.827105][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2019.846283][ T7189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2019.866880][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2019.881233][ T7189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2019.900952][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2019.909889][ T7189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2019.922768][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2019.931155][ T7366] syz_tun: left allmulticast mode [ 2019.938440][ T7366] syz_tun: left promiscuous mode [ 2019.944452][ T7366] bridge0: port 3(syz_tun) entered disabled state [ 2019.954661][ T7366] bridge_slave_0: left allmulticast mode [ 2019.960995][ T7366] bridge_slave_0: left promiscuous mode [ 2019.967507][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2019.978203][ T7366] bridge_slave_1: left allmulticast mode [ 2019.984228][ T7366] bridge_slave_1: left promiscuous mode [ 2019.991657][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2020.002971][ T7366] bond0: (slave bond_slave_0): Releasing backup interface [ 2020.015917][ T7366] bond0: (slave bond_slave_1): Releasing backup interface [ 2020.029126][ T7366] team0: Port device team_slave_0 removed [ 2020.038547][ T7366] team0: Port device team_slave_1 removed [ 2020.046282][ T7366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2020.055625][ T7366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2020.158206][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2020.186394][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 2020.210297][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.217932][T17956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2020.244341][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.251876][T17956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2020.514166][ T7396] syzkaller0: entered promiscuous mode [ 2020.527758][ T7396] syzkaller0: entered allmulticast mode [ 2020.694919][T25742] Bluetooth: hci7: command tx timeout [ 2020.857694][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2020.967227][ T7189] veth0_vlan: entered promiscuous mode [ 2021.000074][ T7189] veth1_vlan: entered promiscuous mode [ 2021.109619][ T7189] veth0_macvtap: entered promiscuous mode [ 2021.133390][ T7189] veth1_macvtap: entered promiscuous mode [ 2021.167241][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2021.186769][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2021.207187][ T7440] syz_tun: left allmulticast mode [ 2021.212892][ T7440] syz_tun: left promiscuous mode [ 2021.223817][ T7440] bridge0: port 3(syz_tun) entered disabled state [ 2021.242329][ T7440] bridge_slave_0: left allmulticast mode [ 2021.249930][ T7440] bridge_slave_0: left promiscuous mode [ 2021.260078][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.282432][ T7440] bridge_slave_1: left allmulticast mode [ 2021.291214][ T7440] bridge_slave_1: left promiscuous mode [ 2021.298363][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.312734][ T7440] bond0: (slave bond_slave_0): Releasing backup interface [ 2021.329463][ T7440] bond0: (slave bond_slave_1): Releasing backup interface [ 2021.347446][ T7440] team0: Port device team_slave_0 removed [ 2021.359023][ T7440] team0: Port device team_slave_1 removed [ 2021.372122][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2021.395911][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2021.413211][ T7440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2021.446518][T17956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.477778][T17956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.508405][T17956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.528455][T17956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.696607][T17970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.725468][T17970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2021.802821][T17955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.823622][T17955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2021.991658][ T7480] syzkaller0: entered promiscuous mode [ 2022.001347][ T7480] syzkaller0: entered allmulticast mode [ 2022.185097][ T7496] tipc: Enabled bearer , priority 0 [ 2022.193089][ T7496] syzkaller0: entered promiscuous mode [ 2022.199207][ T7496] syzkaller0: entered allmulticast mode [ 2022.216290][ T7496] tipc: Resetting bearer [ 2022.235885][ T7495] tipc: Resetting bearer [ 2022.257379][ T7495] tipc: Disabling bearer [ 2022.364026][ T7507] netlink: 'syz.6.34990': attribute type 12 has an invalid length. [ 2022.380761][ T7507] netlink: 'syz.6.34990': attribute type 29 has an invalid length. [ 2022.394000][ T7507] netlink: 148 bytes leftover after parsing attributes in process `syz.6.34990'. [ 2022.408147][ T7507] netlink: 'syz.6.34990': attribute type 1 has an invalid length. [ 2022.421088][ T7507] netlink: 'syz.6.34990': attribute type 2 has an invalid length. [ 2022.441044][ T7507] netlink: 11 bytes leftover after parsing attributes in process `syz.6.34990'. [ 2022.466141][ T7511] netlink: 'syz.6.34990': attribute type 12 has an invalid length. [ 2022.482824][ T7511] netlink: 'syz.6.34990': attribute type 29 has an invalid length. [ 2022.504719][ T7511] netlink: 148 bytes leftover after parsing attributes in process `syz.6.34990'. [ 2022.534391][ T7511] netlink: 'syz.6.34990': attribute type 1 has an invalid length. [ 2022.559712][ T7511] netlink: 'syz.6.34990': attribute type 2 has an invalid length. [ 2022.577348][ T7511] netlink: 11 bytes leftover after parsing attributes in process `syz.6.34990'. [ 2022.728770][ T7523] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2022.737029][ T7523] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2022.745504][ T7523] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2022.753146][ T7523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2022.760965][ T7523] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2022.775284][ T7523] Bluetooth: hci7: command tx timeout [ 2022.879228][ T7529] syzkaller0: entered promiscuous mode [ 2022.887095][ T7529] syzkaller0: entered allmulticast mode [ 2023.673214][ T7577] syzkaller0: entered promiscuous mode [ 2023.679323][ T7577] syzkaller0: entered allmulticast mode [ 2023.854441][ T7520] lo speed is unknown, defaulting to 1000 [ 2024.006426][ T7595] syzkaller0: entered promiscuous mode [ 2024.028188][ T7595] syzkaller0: entered allmulticast mode [ 2024.056144][ T7520] lo speed is unknown, defaulting to 1000 [ 2024.363074][ T7618] netlink: 'syz.2.35031': attribute type 12 has an invalid length. [ 2024.380971][ T7618] netlink: 'syz.2.35031': attribute type 29 has an invalid length. [ 2024.389785][ T7618] netlink: 148 bytes leftover after parsing attributes in process `syz.2.35031'. [ 2024.400300][ T7618] netlink: 59 bytes leftover after parsing attributes in process `syz.2.35031'. [ 2024.489798][ T7619] syzkaller0: entered promiscuous mode [ 2024.495835][ T7619] syzkaller0: entered allmulticast mode [ 2024.775079][T25742] Bluetooth: hci6: command tx timeout [ 2024.855122][T25742] Bluetooth: hci7: command tx timeout [ 2025.033005][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 2025.040351][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.048147][ T7520] bridge_slave_0: entered allmulticast mode [ 2025.056327][ T7520] bridge_slave_0: entered promiscuous mode [ 2025.072254][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.086561][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.105858][ T7520] bridge_slave_1: entered allmulticast mode [ 2025.114445][ T7520] bridge_slave_1: entered promiscuous mode [ 2025.152499][ T7520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2025.164239][ T7670] netlink: 2980 bytes leftover after parsing attributes in process `syz.2.35046'. [ 2025.179428][ T7520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2025.238375][ T7520] team0: Port device team_slave_0 added [ 2025.255537][ T7520] team0: Port device team_slave_1 added [ 2025.330708][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2025.357018][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2025.408895][ T7520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2025.421856][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2025.429381][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2025.455271][ T7520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2025.493887][ T7520] hsr_slave_0: entered promiscuous mode [ 2025.500373][ T7520] hsr_slave_1: entered promiscuous mode [ 2025.506486][ T7520] debugfs: 'hsr0' already exists in 'hsr' [ 2025.512232][ T7520] Cannot create hsr debugfs directory [ 2025.789073][ T7697] syzkaller0: entered promiscuous mode [ 2025.802564][ T7697] syzkaller0: entered allmulticast mode [ 2026.178564][ T7727] netlink: 148 bytes leftover after parsing attributes in process `syz.1.35069'. [ 2026.187997][ T7727] netlink: 47 bytes leftover after parsing attributes in process `syz.1.35069'. [ 2026.236736][ T7520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2026.257501][ T7520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2026.273412][ T7520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2026.283128][ T7520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2026.309112][ T7520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2026.321771][ T7520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2026.339740][ T7733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.353413][ T7520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2026.362360][ T7520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2026.430460][ T7520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2026.447216][ T7520] 8021q: adding VLAN 0 to HW filter on device team0 [ 2026.476125][T17953] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.483262][T17953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2026.493034][T17953] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.500161][T17953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2026.531400][ T7520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2026.560228][ T7733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.612612][ T7733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.680268][ T7733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.807251][T17970] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.833007][T17953] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.852692][ T7759] netlink: 148 bytes leftover after parsing attributes in process `syz.6.35079'. [ 2026.865902][T25742] Bluetooth: hci6: command tx timeout [ 2026.882745][ T7759] netlink: 47 bytes leftover after parsing attributes in process `syz.6.35079'. [ 2026.913032][T17953] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.935214][T17953] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.985513][ T7763] syzkaller0: entered promiscuous mode [ 2027.005856][ T7763] syzkaller0: entered allmulticast mode [ 2027.278565][ T7782] syzkaller0: entered promiscuous mode [ 2027.284284][ T7782] syzkaller0: entered allmulticast mode [ 2027.301134][ T7520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2027.362583][ T7520] veth0_vlan: entered promiscuous mode [ 2027.376473][ T7520] veth1_vlan: entered promiscuous mode [ 2027.408011][ T7520] veth0_macvtap: entered promiscuous mode [ 2027.419678][ T7520] veth1_macvtap: entered promiscuous mode [ 2027.439441][ T7520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2027.464509][ T7520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2027.476727][T17970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.682639][T17970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.713175][T17970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.786194][T17970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.900109][T17970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2027.923503][T17970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2028.045873][ T7805] vcan0: tx address claim with dlc 0 [ 2028.063585][ T7804] validate_nla: 4 callbacks suppressed [ 2028.063614][ T7804] netlink: 'syz.6.35098': attribute type 12 has an invalid length. [ 2028.080517][ T7804] netlink: 'syz.6.35098': attribute type 29 has an invalid length. [ 2028.089084][ T7804] netlink: 148 bytes leftover after parsing attributes in process `syz.6.35098'. [ 2028.101666][ T7804] netlink: 59 bytes leftover after parsing attributes in process `syz.6.35098'. [ 2028.112912][T17952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2028.141821][T17952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2028.364460][ T7821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.440564][ T7821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.536462][ T7821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.632206][ T4937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2028.645269][ T4937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2028.653158][ T4937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2028.687135][ T4937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2028.707840][ T4937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2028.800440][ T7837] netlink: 'syz.6.35111': attribute type 12 has an invalid length. [ 2028.808585][ T7837] netlink: 'syz.6.35111': attribute type 29 has an invalid length. [ 2028.816491][ T7837] netlink: 148 bytes leftover after parsing attributes in process `syz.6.35111'. [ 2028.975208][ T4937] Bluetooth: hci6: command tx timeout [ 2028.998245][ T7821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.237546][T17970] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2029.256433][ T4937] Bluetooth: hci2: command 0x0406 tx timeout [ 2029.269201][T17955] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2029.314698][T17958] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2029.356337][ T7856] syzkaller0: entered promiscuous mode [ 2029.362037][ T7856] syzkaller0: entered allmulticast mode [ 2029.368874][T17958] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2029.456925][ T7864] netlink: 'syz.6.35121': attribute type 12 has an invalid length. [ 2029.477612][ T7864] netlink: 'syz.6.35121': attribute type 29 has an invalid length. [ 2029.494228][ T7864] __nla_validate_parse: 1 callbacks suppressed [ 2029.494242][ T7864] netlink: 148 bytes leftover after parsing attributes in process `syz.6.35121'. [ 2029.530762][ T7864] netlink: 59 bytes leftover after parsing attributes in process `syz.6.35121'. [ 2029.628144][ T7828] lo speed is unknown, defaulting to 1000 [ 2029.740070][ T7874] syzkaller0: entered promiscuous mode [ 2029.751573][ T7874] syzkaller0: entered allmulticast mode [ 2029.831626][ T7828] lo speed is unknown, defaulting to 1000 [ 2030.336740][ T7887] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.402050][ T7887] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.483286][ T7887] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.518758][ T7897] netlink: 'syz.1.35134': attribute type 12 has an invalid length. [ 2030.528848][ T7897] netlink: 'syz.1.35134': attribute type 29 has an invalid length. [ 2030.537572][ T7897] netlink: 148 bytes leftover after parsing attributes in process `syz.1.35134'. [ 2030.550458][ T7897] netlink: 'syz.1.35134': attribute type 1 has an invalid length. [ 2030.558973][ T7897] netlink: 'syz.1.35134': attribute type 2 has an invalid length. [ 2030.567527][ T7897] netlink: 11 bytes leftover after parsing attributes in process `syz.1.35134'. [ 2030.616579][ T7828] bridge0: port 1(bridge_slave_0) entered blocking state [ 2030.624310][ T7828] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.632179][ T7828] bridge_slave_0: entered allmulticast mode [ 2030.640830][ T7828] bridge_slave_0: entered promiscuous mode [ 2030.787559][T25742] Bluetooth: hci1: command tx timeout [ 2030.848713][ T7887] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.866730][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 2030.874568][ T7828] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.896601][ T7828] bridge_slave_1: entered allmulticast mode [ 2030.915026][ T7828] bridge_slave_1: entered promiscuous mode [ 2030.991621][ T7828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2031.015188][T25742] Bluetooth: hci6: command tx timeout [ 2031.026528][ T7908] syzkaller0: entered promiscuous mode [ 2031.031993][ T7908] syzkaller0: entered allmulticast mode [ 2031.040469][ T7828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2031.054688][T17970] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.067927][T17970] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.107746][ T7828] team0: Port device team_slave_0 added [ 2031.113330][T17955] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.123809][ T7828] team0: Port device team_slave_1 added [ 2031.142271][T17955] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.172051][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2031.192292][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2031.221434][ T7828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2031.241578][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2031.260924][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2031.291572][ T7828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2031.328376][ T7919] syzkaller0: entered promiscuous mode [ 2031.333887][ T7919] syzkaller0: entered allmulticast mode [ 2031.343420][ T7828] hsr_slave_0: entered promiscuous mode [ 2031.349589][ T7828] hsr_slave_1: entered promiscuous mode [ 2031.355563][ T7828] debugfs: 'hsr0' already exists in 'hsr' [ 2031.361275][ T7828] Cannot create hsr debugfs directory [ 2031.371531][ T7921] tipc: Enabled bearer , priority 0 [ 2031.383464][ T7921] syzkaller0: entered promiscuous mode [ 2031.388937][ T7921] syzkaller0: entered allmulticast mode [ 2031.428947][ T7921] tipc: Resetting bearer [ 2031.441053][ T7920] tipc: Resetting bearer [ 2031.449471][ T7920] tipc: Disabling bearer [ 2031.999692][T14079] IPVS: starting estimator thread 0... [ 2032.095154][ T7943] IPVS: using max 45 ests per chain, 108000 per kthread [ 2032.211861][ T7828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2032.241859][ T7828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2032.256611][ T7828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2032.282146][ T7828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2032.304685][ T7828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2032.315605][ T7828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2032.323409][ T7828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2032.333278][ T7828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2032.855156][T25742] Bluetooth: hci1: command tx timeout [ 2033.304631][ T7981] IPVS: sed: FWM 3 0x00000003 - no destination available [ 2033.344598][ T7983] netlink: 'syz.1.35165': attribute type 12 has an invalid length. [ 2033.353083][ T7983] netlink: 'syz.1.35165': attribute type 29 has an invalid length. [ 2033.361371][ T7983] netlink: 148 bytes leftover after parsing attributes in process `syz.1.35165'. [ 2033.371513][ T7983] netlink: 'syz.1.35165': attribute type 1 has an invalid length. [ 2033.380253][ T7983] netlink: 'syz.1.35165': attribute type 2 has an invalid length. [ 2033.388209][ T7983] netlink: 11 bytes leftover after parsing attributes in process `syz.1.35165'. [ 2034.934936][T25742] Bluetooth: hci1: command tx timeout [ 2035.268897][ T7958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2035.380881][ T7828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2035.400903][ T7828] 8021q: adding VLAN 0 to HW filter on device team0 [ 2035.412283][T17958] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.419412][T17958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2035.445404][T17958] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.452527][T17958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.510195][ T8004] syzkaller0: entered promiscuous mode [ 2035.525084][ T8004] syzkaller0: entered allmulticast mode [ 2036.020036][ T8029] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.099824][ T8029] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.122833][ T8037] netlink: 'syz.3.35176': attribute type 12 has an invalid length. [ 2036.141975][ T8037] netlink: 'syz.3.35176': attribute type 29 has an invalid length. [ 2036.156092][ T8037] netlink: 148 bytes leftover after parsing attributes in process `syz.3.35176'. [ 2036.174328][ T8037] netlink: 'syz.3.35176': attribute type 1 has an invalid length. [ 2036.195320][ T8037] netlink: 'syz.3.35176': attribute type 2 has an invalid length. [ 2036.203922][ T8037] netlink: 11 bytes leftover after parsing attributes in process `syz.3.35176'. [ 2036.222122][ T8029] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.255935][ T8043] xt_hashlimit: size too large, truncated to 1048576 [ 2036.291010][ T7828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2036.359242][ T7828] veth0_vlan: entered promiscuous mode [ 2036.370058][ T7828] veth1_vlan: entered promiscuous mode [ 2036.400774][ T7828] veth0_macvtap: entered promiscuous mode [ 2036.409618][ T7828] veth1_macvtap: entered promiscuous mode [ 2036.424964][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2036.435907][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2036.447178][T17970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2036.456204][T17970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2036.466009][T17970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2036.474734][T17970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2036.519936][ T8029] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.572109][T17956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2036.592620][T17956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2036.629804][T17970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2036.630670][ T8054] syzkaller0: entered promiscuous mode [ 2036.637751][T17970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2036.650755][ T8054] syzkaller0: entered allmulticast mode [ 2036.856881][T17956] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2036.894479][T17970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2036.952345][ T8060] syzkaller0: entered promiscuous mode [ 2036.973802][ T8060] syzkaller0: entered allmulticast mode [ 2036.992358][T17970] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.015566][T25742] Bluetooth: hci1: command tx timeout [ 2037.085332][T17955] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.104976][ T8068] netlink: 'syz.2.35191': attribute type 12 has an invalid length. [ 2037.116128][ T8068] netlink: 'syz.2.35191': attribute type 29 has an invalid length. [ 2037.151060][ T8068] netlink: 148 bytes leftover after parsing attributes in process `syz.2.35191'. [ 2037.163678][ T4937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2037.175147][ T8068] netlink: 11 bytes leftover after parsing attributes in process `syz.2.35191'. [ 2037.178660][ T4937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2037.194222][ T4937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2037.202482][ T4937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2037.211370][ T4937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2037.491143][ T8094] syzkaller0: entered promiscuous mode [ 2037.514580][ T8094] syzkaller0: entered allmulticast mode [ 2037.542675][ T8098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.633341][ T8105] syzkaller0: entered promiscuous mode [ 2037.639376][ T8105] syzkaller0: entered allmulticast mode [ 2037.761058][ T8110] netlink: 148 bytes leftover after parsing attributes in process `syz.3.35206'. [ 2037.771016][ T8110] netlink: 11 bytes leftover after parsing attributes in process `syz.3.35206'. [ 2037.781305][ T8110] netlink: 148 bytes leftover after parsing attributes in process `syz.3.35206'. [ 2037.793982][ T8110] netlink: 11 bytes leftover after parsing attributes in process `syz.3.35206'. [ 2037.837777][ T8069] lo speed is unknown, defaulting to 1000 [ 2037.965784][ T8118] syzkaller0: entered promiscuous mode [ 2037.994912][ T8118] syzkaller0: entered allmulticast mode [ 2038.062979][ T8069] lo speed is unknown, defaulting to 1000 [ 2038.179540][ T8131] netlink: 148 bytes leftover after parsing attributes in process `syz.6.35216'. [ 2038.189552][ T8131] netlink: 11 bytes leftover after parsing attributes in process `syz.6.35216'. [ 2038.274572][ T8133] syzkaller0: entered promiscuous mode [ 2038.281453][ T8133] syzkaller0: entered allmulticast mode [ 2038.639589][ T8098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.691807][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.702416][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.710555][ T8069] bridge_slave_0: entered allmulticast mode [ 2038.717805][ T8069] bridge_slave_0: entered promiscuous mode [ 2038.732294][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.740309][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.747665][ T8069] bridge_slave_1: entered allmulticast mode [ 2038.755064][ T8069] bridge_slave_1: entered promiscuous mode [ 2038.782882][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2038.792505][ T8157] syzkaller0: entered promiscuous mode [ 2038.810011][ T8157] syzkaller0: entered allmulticast mode [ 2038.822295][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2038.855854][ T8069] team0: Port device team_slave_0 added [ 2038.876418][ T8069] team0: Port device team_slave_1 added [ 2038.901928][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2038.910770][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2038.937311][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2038.949324][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2038.956655][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2038.982960][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2039.039745][ T8069] hsr_slave_0: entered promiscuous mode [ 2039.046835][ T8069] hsr_slave_1: entered promiscuous mode [ 2039.053034][ T8069] debugfs: 'hsr0' already exists in 'hsr' [ 2039.059692][ T8069] Cannot create hsr debugfs directory [ 2039.111582][ T8166] syzkaller0: entered promiscuous mode [ 2039.118951][ T8166] syzkaller0: entered allmulticast mode [ 2039.194231][ T8069] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.235299][ T8170] validate_nla: 18 callbacks suppressed [ 2039.235314][ T8170] netlink: 'syz.6.35230': attribute type 12 has an invalid length. [ 2039.250268][ T8170] netlink: 'syz.6.35230': attribute type 29 has an invalid length. [ 2039.260403][ T4937] Bluetooth: hci0: command tx timeout [ 2039.282505][ T8069] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.380186][ T8069] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.447672][ T8069] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.531062][ T8098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.586200][ T8098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.599447][ T8069] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2039.609146][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2039.617251][ T8069] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2039.627875][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2039.635541][ T8069] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2039.644106][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2039.651807][ T8069] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2039.660212][ T8069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2039.706500][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2039.733423][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 2039.744673][T17955] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.752220][T17955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2039.764880][T17955] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.771968][T17955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2039.798560][T17955] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2039.814102][T17958] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2039.830044][T17952] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2039.847213][T17958] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.178077][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2040.201872][ T8205] syzkaller0: entered promiscuous mode [ 2040.207560][ T8205] syzkaller0: entered allmulticast mode [ 2040.328832][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.336272][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.433379][ T8216] syzkaller0: entered promiscuous mode [ 2040.440859][ T8216] syzkaller0: entered allmulticast mode [ 2040.463163][ T8219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.516445][ T8219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.549354][ T8069] veth0_vlan: entered promiscuous mode [ 2040.565935][ T8219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.588811][ T8069] veth1_vlan: entered promiscuous mode [ 2040.622010][ T8219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.654452][ T8069] veth0_macvtap: entered promiscuous mode [ 2040.667063][ T8069] veth1_macvtap: entered promiscuous mode [ 2040.682765][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2040.696138][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2040.708218][T17958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.717150][T17958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.731698][T17958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.742865][T17958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.751636][T17958] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.764279][T17952] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.789377][T17952] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.809415][T17958] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.858338][T17952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2040.869785][T17952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2040.930271][ T8229] syzkaller0: entered promiscuous mode [ 2040.937372][ T8229] syzkaller0: entered allmulticast mode [ 2040.947706][T17956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2040.955882][T17956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2040.974949][ T8229] tipc: Started in network mode [ 2040.980331][ T8229] tipc: Node identity b2eb74577d88, cluster identity 4711 [ 2040.989073][ T8229] tipc: Enabled bearer , priority 0 [ 2040.998677][ T8228] tipc: Resetting bearer [ 2041.011335][ T8228] tipc: Disabling bearer [ 2041.116530][ T8239] netlink: 'syz.1.35251': attribute type 12 has an invalid length. [ 2041.125103][ T8239] netlink: 'syz.1.35251': attribute type 29 has an invalid length. [ 2041.134169][ T8239] netlink: 'syz.1.35251': attribute type 12 has an invalid length. [ 2041.144150][ T8239] netlink: 'syz.1.35251': attribute type 29 has an invalid length. [ 2041.260159][ T8247] __nla_validate_parse: 8 callbacks suppressed [ 2041.260178][ T8247] netlink: 3576 bytes leftover after parsing attributes in process `syz.3.35255'. [ 2041.335164][ T4937] Bluetooth: hci0: command tx timeout [ 2041.350834][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35257'. [ 2041.602490][T25742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2041.610028][T25742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2041.618581][T25742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2041.626307][T25742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2041.633682][T25742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2041.824503][ T927] syz_tun (unregistering): left allmulticast mode [ 2041.839574][ T927] syz_tun (unregistering): left promiscuous mode [ 2041.848254][ T927] bridge0: port 3(syz_tun) entered disabled state [ 2041.898413][ T30] INFO: task syz.5.32061:32697 blocked for more than 143 seconds. [ 2041.917494][ T30] Not tainted syzkaller #0 [ 2041.926489][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2041.948166][ T30] task:syz.5.32061 state:D stack:27568 pid:32697 tgid:32696 ppid:25740 task_flags:0x400140 flags:0x00080002 [ 2041.987182][ T30] Call Trace: [ 2041.997958][ T30] [ 2042.007122][ T30] __schedule+0x17d9/0x56c0 [ 2042.021073][ T30] ? trace_irq_enable+0x3b/0x140 [ 2042.036416][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 2042.055379][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 2042.067084][ T30] ? genl_rcv+0x28/0x40 [ 2042.074980][ T30] ? __pfx___schedule+0x10/0x10 [ 2042.091537][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.096595][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.106626][ T30] ? lock_release+0x4b/0x3c0 [ 2042.117929][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.133739][ T30] schedule+0x164/0x360 [ 2042.141046][ T30] schedule_preempt_disabled+0x13/0x30 [ 2042.154855][ T30] __mutex_lock+0x7bf/0x1550 [ 2042.164775][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2042.174826][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 2042.189776][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2042.204665][ T30] ? __nlmsg_put+0xef/0x1b0 [ 2042.229019][ T30] ? genlmsg_put+0x137/0x2e0 [ 2042.254118][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 2042.286199][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 2042.313206][ T30] ? __nla_parse+0x40/0x60 [ 2042.341358][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2042.364758][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2042.377577][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 2042.391568][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2042.398172][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 2042.414768][ T30] genl_rcv_msg+0x614/0x7a0 [ 2042.419340][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2042.424400][ T30] ? ref_tracker_free+0x689/0x830 [ 2042.455718][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 2042.482743][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 2042.503579][ T30] netlink_rcv_skb+0x226/0x4a0 [ 2042.520741][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2042.534767][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2042.545697][ T30] ? down_read+0x2be/0x330 [ 2042.554890][ T30] genl_rcv+0x28/0x40 [ 2042.565253][ T30] netlink_unicast+0x7bb/0x940 [ 2042.574754][ T30] netlink_sendmsg+0x813/0xb40 [ 2042.585341][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2042.594943][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2042.606884][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2042.624830][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2042.634821][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 2042.644892][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2042.654931][ T30] ? lock_release+0x4b/0x3c0 [ 2042.665016][ T30] ? import_iovec+0x73/0xa0 [ 2042.674959][ T30] ___sys_sendmsg+0x2a5/0x360 [ 2042.684968][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 2042.695198][ T30] ? futex_wake+0x51b/0x5f0 [ 2042.706446][ T30] ? __fget_files+0x2a/0x420 [ 2042.716337][ T30] ? __fget_files+0x3a2/0x420 [ 2042.721362][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 2042.726693][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2042.732206][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.737257][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.743365][ T30] do_syscall_64+0x174/0x580 [ 2042.748914][ T30] ? trace_irq_disable+0x3b/0x140 [ 2042.753989][ T30] ? clear_bhb_loop+0x40/0x90 [ 2042.758942][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.765017][ T30] RIP: 0033:0x7f7ddb99ce59 [ 2042.769463][ T30] RSP: 002b:00007f7ddc7e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2042.778133][ T30] RAX: ffffffffffffffda RBX: 00007f7ddbc15fa0 RCX: 00007f7ddb99ce59 [ 2042.786287][ T30] RDX: 0000000004008010 RSI: 0000200000000140 RDI: 0000000000000004 [ 2042.794301][ T30] RBP: 00007f7ddba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2042.803038][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2042.811459][ T30] R13: 00007f7ddbc16038 R14: 00007f7ddbc15fa0 R15: 00007ffdfa1c5aa8 [ 2042.819498][ T30] [ 2042.822688][ T30] INFO: lockdep is turned off. [ 2042.827664][ T30] NMI backtrace for cpu 0 [ 2042.827687][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2042.827706][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2042.827717][ T30] Call Trace: [ 2042.827723][ T30] [ 2042.827730][ T30] dump_stack_lvl+0xe8/0x150 [ 2042.827753][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 2042.827772][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2042.827814][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2042.827834][ T30] sys_info+0x135/0x170 [ 2042.827850][ T30] watchdog+0xfd7/0x1030 [ 2042.827876][ T30] ? watchdog+0x1c7/0x1030 [ 2042.827902][ T30] kthread+0x388/0x470 [ 2042.827919][ T30] ? __pfx_watchdog+0x10/0x10 [ 2042.827940][ T30] ? __pfx_kthread+0x10/0x10 [ 2042.827956][ T30] ret_from_fork+0x514/0xb70 [ 2042.827975][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2042.827991][ T30] ? __switch_to+0xc89/0x1420 [ 2042.828016][ T30] ? __pfx_kthread+0x10/0x10 [ 2042.828032][ T30] ret_from_fork_asm+0x1a/0x30 [ 2042.828059][ T30] [ 2042.828066][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2042.963431][ C1] NMI backtrace for cpu 1 [ 2042.963448][ C1] CPU: 1 UID: 0 PID: 4975 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 2042.963468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2042.963479][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 2042.963504][ C1] Code: e8 2f 1a 44 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 40 56 8f 11 e8 fb f7 fc 09 89 c3 83 f8 08 73 65 [ 2042.963520][ C1] RSP: 0018:ffffc90000a088e8 EFLAGS: 00000297 [ 2042.963536][ C1] RAX: 0000000000000001 RBX: ffffc90000a08a18 RCX: ffffc90000a08da8 [ 2042.963549][ C1] RDX: ffffffff90d3b201 RSI: ffffffff8176a21f RDI: ffffffff8e959a20 [ 2042.963563][ C1] RBP: 1ffffffff21a7601 R08: ffffc90000a08da0 R09: 0000000000000000 [ 2042.963575][ C1] R10: ffffc90000a08a58 R11: fffff5200014114d R12: ffffc90000a01000 [ 2042.963588][ C1] R13: ffffffff8176a21f R14: ffffffff8e959a20 R15: ffffc90000a08da0 [ 2042.963603][ C1] FS: 00007f0f15255c80(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 2042.963619][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2042.963632][ C1] CR2: 00007f8181517e9c CR3: 0000000033644000 CR4: 00000000003526f0 [ 2042.963648][ C1] Call Trace: [ 2042.963655][ C1] [ 2042.963662][ C1] lock_release+0x4b/0x3c0 [ 2042.963688][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 2042.963711][ C1] ? unwind_next_frame+0x8f/0x2550 [ 2042.963731][ C1] unwind_next_frame+0x1baa/0x2550 [ 2042.963754][ C1] ? kasan_save_free_info+0x40/0x50 [ 2042.963774][ C1] ? unwind_next_frame+0x8f/0x2550 [ 2042.963794][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2042.963819][ C1] arch_stack_walk+0x11b/0x150 [ 2042.963843][ C1] ? __kasan_slab_free+0x5c/0x80 [ 2042.963870][ C1] stack_trace_save+0xa9/0x100 [ 2042.963893][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2042.963917][ C1] ? kasan_save_track+0x4f/0x80 [ 2042.963939][ C1] ? kasan_save_track+0x3e/0x80 [ 2042.963960][ C1] ? kasan_save_free_info+0x40/0x50 [ 2042.963976][ C1] ? __kasan_slab_free+0x5c/0x80 [ 2042.963998][ C1] ? kfree+0x1c5/0x640 [ 2042.964014][ C1] ? slab_free_after_rcu_debug+0x62/0x220 [ 2042.964032][ C1] ? handle_softirqs+0x225/0x840 [ 2042.964053][ C1] ? do_softirq+0x76/0xd0 [ 2042.964074][ C1] kasan_save_track+0x3e/0x80 [ 2042.964096][ C1] ? kasan_save_track+0x3e/0x80 [ 2042.964117][ C1] ? kasan_save_free_info+0x40/0x50 [ 2042.964165][ C1] kasan_save_free_info+0x40/0x50 [ 2042.964184][ C1] __kasan_slab_free+0x5c/0x80 [ 2042.964207][ C1] slab_free_after_rcu_debug+0x12a/0x220 [ 2042.964225][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 2042.964242][ C1] ? rcu_core+0x70d/0x10a0 [ 2042.964258][ C1] rcu_core+0x78b/0x10a0 [ 2042.964279][ C1] ? __pfx_rcu_core+0x10/0x10 [ 2042.964295][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2042.964322][ C1] handle_softirqs+0x225/0x840 [ 2042.964346][ C1] ? do_softirq+0x76/0xd0 [ 2042.964369][ C1] ? __alloc_skb+0x189/0x7a0 [ 2042.964391][ C1] ? __alloc_skb+0x189/0x7a0 [ 2042.964413][ C1] do_softirq+0x76/0xd0 [ 2042.964433][ C1] [ 2042.964439][ C1] [ 2042.964446][ C1] __local_bh_enable_ip+0xf8/0x130 [ 2042.964468][ C1] __alloc_skb+0x1ad/0x7a0 [ 2042.964492][ C1] alloc_skb_with_frags+0xc6/0x760 [ 2042.964522][ C1] sock_alloc_send_pskb+0x878/0x990 [ 2042.964547][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2042.964565][ C1] ? lock_release+0x4b/0x3c0 [ 2042.964588][ C1] ? rcu_is_watching+0x15/0xb0 [ 2042.964610][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2042.964635][ C1] unix_dgram_sendmsg+0x4da/0x17b0 [ 2042.964719][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2042.964747][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 2042.964766][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2042.964788][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2042.964815][ C1] __sys_sendto+0x626/0x6c0 [ 2042.964837][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 2042.964865][ C1] ? lock_release+0x4b/0x3c0 [ 2042.964897][ C1] ? rcu_is_watching+0x15/0xb0 [ 2042.964917][ C1] __x64_sys_sendto+0xde/0x100 [ 2042.964940][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.964959][ C1] do_syscall_64+0x174/0x580 [ 2042.964983][ C1] ? clear_bhb_loop+0x40/0x90 [ 2042.965003][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.965020][ C1] RIP: 0033:0x7f0f153a5407 [ 2042.965035][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2042.965049][ C1] RSP: 002b:00007ffedbe674a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2042.965067][ C1] RAX: ffffffffffffffda RBX: 00007f0f15255c80 RCX: 00007f0f153a5407 [ 2042.965080][ C1] RDX: 0000000000000050 RSI: 00007ffedbe675e0 RDI: 0000000000000003 [ 2042.965092][ C1] RBP: 00007ffedbe67a10 R08: 0000000000000000 R09: 0000000000000000 [ 2042.965103][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffedbe67a28 [ 2042.965115][ C1] R13: 00007ffedbe675e0 R14: 0000000000000035 R15: 00007ffedbe675e0 [ 2042.965136][ C1] [ 2043.549147][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2043.556046][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2043.565170][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2043.575237][ T30] Call Trace: [ 2043.578533][ T30] [ 2043.581479][ T30] vpanic+0x56c/0xa60 [ 2043.585500][ T30] ? __pfx___schedule+0x10/0x10 [ 2043.590373][ T30] ? __pfx_vpanic+0x10/0x10 [ 2043.594900][ T30] ? __down_trylock_console_sem+0xad/0x110 [ 2043.600735][ T30] panic+0xc5/0xd0 [ 2043.604479][ T30] ? __pfx_panic+0x10/0x10 [ 2043.608905][ T30] ? preempt_schedule_common+0x82/0xd0 [ 2043.614392][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 2043.619782][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2043.625988][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2043.632156][ T30] watchdog+0x1030/0x1030 [ 2043.636515][ T30] ? watchdog+0x1c7/0x1030 [ 2043.640971][ T30] kthread+0x388/0x470 [ 2043.645067][ T30] ? __pfx_watchdog+0x10/0x10 [ 2043.649756][ T30] ? __pfx_kthread+0x10/0x10 [ 2043.654369][ T30] ret_from_fork+0x514/0xb70 [ 2043.658975][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2043.664099][ T30] ? __switch_to+0xc89/0x1420 [ 2043.668790][ T30] ? __pfx_kthread+0x10/0x10 [ 2043.673391][ T30] ret_from_fork_asm+0x1a/0x30 [ 2043.678175][ T30] [ 2043.681801][ T30] Kernel Offset: disabled [ 2043.686129][ T30] Rebooting in 86400 seconds..