last executing test programs: 5m9.46450357s ago: executing program 3 (id=329): r0 = socket(0x2b, 0x6, 0x400001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000cf97d597f835eab4c12a010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt(r3, 0x1, 0x4, &(0x7f0000000880)=""/243, &(0x7f00000002c0)=0xf3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c01000013000100000000000000000000000000000000000000000000000001ffffffff0000000000000000000000000000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000080fdffffffffffff010000000000000000000000000000000000000000000000feffffff000000000000000000000000840005000a010100000000000000000000000000000000002b00000002000000ac1414aa0000000000000000000000000000000001000000040000007f00000000000000ac1e0101000000000000000000000000000000002b0000000200000000000000000000000000ffffac1414bb0000000002"], 0x13c}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'wlan1\x00', 0x1000}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="000000001800000024001280110001006272696467655f736c617665000000000c00058006001f0002000000140003006272696467655f736c6176655f3000"], 0x58}, 0x1, 0x0, 0x0, 0x20048010}, 0x4040) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r9}, 0x20) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r11, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) 5m8.711365599s ago: executing program 3 (id=337): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a1400000011000100"], 0x70}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3170, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3170, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) 5m8.56417805s ago: executing program 3 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0_macvtap\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000400000006000000aa0b000010000000", @ANYRES32, @ANYBLOB="c2d4070c02a240a87de500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7c2b}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20009050}, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'netpci0\x00', @multicast}) 5m7.991007964s ago: executing program 3 (id=347): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x7, 0x7, "90261cf17d"}]}]}}}], 0x20}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) r7 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r2, 0xf7bffffe, 0x8b, &(0x7f0000000180)="000066219c7c7fc73553583ff8f5ae02ab1f60dd897447b51953197f1b0d4b5f293c58c37de048fc477acfbc65707a8777b70cdf3069917287cb9eedef852ad1f60b036c6fb403fda74c6f6db14e70dba90078de94d6084014c9fe406aafb295", 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="24d8453525aa5cae0000000500000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x20008880}}], 0x2, 0x4c054) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000180029020000000000000000020000000c00098008000000", @ANYRES32=0x0, @ANYBLOB="7ca64950"], 0x20}}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r8, 0x40085875) 5m7.822034218s ago: executing program 3 (id=351): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x14004001}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x810) (async) close(r0) 5m7.539420265s ago: executing program 3 (id=353): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3839, 0x3, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x123202, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r2, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4$tipc(r0, 0x0, &(0x7f0000000040), 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendto$inet6(r11, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 4m52.486407612s ago: executing program 32 (id=353): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3839, 0x3, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x123202, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r2, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4$tipc(r0, 0x0, &(0x7f0000000040), 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendto$inet6(r11, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 2m31.431190412s ago: executing program 5 (id=1524): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000003a000b0026747000ffdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=r0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYBLOB="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", @ANYBLOB="0800ad9c03e9d4033c898d96ecaa9c18ca2da13985d83339ceda39b7fa53764112c9607da3f05c98dc0fbbff67439c045c77c6b1"], 0x78}}, 0x0) 2m31.113005562s ago: executing program 5 (id=1527): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) close(r0) 2m30.86043947s ago: executing program 5 (id=1531): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e000000100000000000000000000000000000000000000000000000000000000000401464e2400020000000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00\x00'], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x40) 2m30.607640957s ago: executing program 5 (id=1534): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{{0x3, 0x1, 0x1, 0x1}, {0x4}}, {{0x1}, {0x0, 0x1}}, {{0x1, 0x1}, {0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1}, {0x2, 0x1, 0x1}}], 0x28) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) (async) syz_emit_ethernet(0x189, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket(0xa, 0x3, 0x3b) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r4], 0x14}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe1f) (async) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) (async, rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) r10 = accept$alg(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) 2m30.418212042s ago: executing program 5 (id=1538): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00'}, 0x90) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 2m30.282961136s ago: executing program 5 (id=1541): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000010900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xf, 0x6, 0x8, 0x56}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xc0) 2m15.205170154s ago: executing program 33 (id=1541): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000010900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xf, 0x6, 0x8, 0x56}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xc0) 13.651585566s ago: executing program 4 (id=2609): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20022e2e, 0x10040, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpu.stat\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000580)=@req={0x8000, 0x0, 0x259549f7, 0x34}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 13.4309456s ago: executing program 4 (id=2614): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x5, 0x18, {0x4e21, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000950872eb7e529b8b0000000000000000000000000200010000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00002000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r4}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a40)={0x334, r6, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x291, 0x2a, [@perr={0x84, 0x11b, {0x1, 0x11, [{{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x3}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x2}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x1}, {{0x0, 0x1}, @device_a, 0xfffff001, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x1c}, {{}, @device_a, 0x11, @void, 0x32}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x2}, {{0x0, 0x1}, @device_b, 0x8, @value=@broadcast, 0x33}, {{}, @broadcast, 0x1, @void, 0x3f}, {{}, @broadcast, 0x9, @void, 0x10}, {{0x0, 0x1}, @device_b, 0xffff, @value, 0x2d}, {{}, @broadcast, 0x4, @void, 0x22}, {{}, @device_b, 0x0, @void, 0x3}, {{}, @device_a, 0x6, @void, 0x27}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0xe}, {{0x0, 0x1}, @broadcast, 0x4000000, @value, 0x36}, {{}, @broadcast, 0x0, @void, 0x18}]}}, @cf={0x4, 0x6, {0x0, 0x4, 0x3, 0x5}}, @ibss={0x6, 0x2, 0xb}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x5, 0x0, {0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x8, 0x5}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @measure_req={0x26, 0xcd, {0x6, 0xe, 0x9, "d80101674bfcb7e14b40bef6c9c81cd1e5ef4d6b72cf74f883ef962caf786312196c2c9dd50552fbc3b86efe76de08fe3251f4a33be118d430ac14cf9cc22fad119349eaeee5af20d04cb8a9c0ef124e59c7841474d42fc597165236876ae88aea1e93321f926b2418f720fd29fa654761f9d32fd96ab7a686010db9a521aa976d8d3f4581a0c71718951029fc8c0069c71f8fb444e5d6ccadbe67baf57a4ec662d2ccde4f2adecb08ac9d8af6e83d886db3c4e7644028fa6b5045cd973aad205816d64a9572621c1034"}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x0, 0x18e3, 0x0, 0x2}, 0xf0a, 0x10, 0x81}}, @preq={0x82, 0x4c, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x5, 0x7, 0x400, @device_a, 0x3ff, @value=@broadcast, 0xfffffffa, 0x6, 0x4, [{{0x1}, @device_b, 0x81}, {{}, @device_b, 0x8}, {{0x1}, @device_b}, {{}, @broadcast}]}}, @tim={0x5, 0xa, {0xff, 0xc1, 0x5, "ede8881915c8dd"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x5a, 0x2a, [@random_vendor={0xdd, 0x54, "cd40fc8f1c9695ea3257672eaceb25e9891e4e75c9717c5907f2b7a723a934f3618d76318d3c3e319a67f39b16453e4f6840b5dbfbebcf7b2f17ea290962f7260c0021f797a91797188a4d5175b1c064e0dd3a1a"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}]}, 0x334}, 0x1, 0x0, 0x0, 0x40002801}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x68, &(0x7f0000000200)}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f00000004c0)="c316560c5c188d7296ff179245910ded292d0f0f95cf30f99c53cf6313773385be7bb0ef548c3a929280f78fbb65a3282aea8ed911c408310e9a567663dbc876fd5d20e2599774e4b27962ff4af8e14f6d48cde0a9549386ac49afd90c39949cf77f16d47ccc2e570518b4998af5e2ac35025a52ea8c6a4176e16bf136912fa0f7e25a53ee2e14c2308973dfb3b9c6a8e3b47070ba7c1aced37af883e30501aa0247063cb3f3f47254a04c54c02c7f2eb8ebab467fdc09cd691a224e7a614965975d2145a70d", &(0x7f0000000000)=@udp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.116050338s ago: executing program 2 (id=2689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000000480)=""/62, 0x3e}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netpci0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 5.912120707s ago: executing program 2 (id=2692): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a45b207f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23a2c6f868bca8b557e", 0xc4}, {&(0x7f0000000e40)="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", 0x13b}, {&(0x7f0000001d00)="e2e275e6df03f874026f99cb71504ba6a2d384a24bc787a5ec33677d1035199bada6710b39408937eaba5eb41341922ec892c294b642ccfeb15285298b4e3cfd4f89aa3b5d5dc3895369762b67a83e5baa5a7415979873d89ca48506d4eb53318e12a74d5e2376cf0e0592cd2e9d8530d86827bc7bb7c946c3f56fed143524f6c6f0bea47f7570df98c8d5387e1c17b3d5de4b0b643104ee77e352539908c48e1e69f3930c4ff647569cab9f143a83ddd01a9b9e253db2de43a2ede43b492e97913d8c8eeabccc2ba594368b632eeb1d97db1190627d995d4119616350dcdea3801eaeb508f23cc69d0be0a025aa48bc8d0f35e140e058a06caf480587860276e63b69eecdb5c95324d73e17865d8dccec9a8de62602a3dfd3e2f4fb17f6cc373de94d42d7c50c39ace02ff0736206e1dc44d33e6666f3a44e5e57581be22f131953a5ad3003e42f8637a7ac0324d47eddef3e4956d0352f5c8e95e6b1f373c9b0287fbe0c97bb55c97bd23e0b80f98a68d894962c78fefbe8e493a62036fe41976fc8162af176686f75829c4ff6f9b9f6656aa422a69fe0e4074536053e0ccd53ac8756c70aa1596d5f89e1520ef9c5cdc22281e3c2acd27658784f179d3779a52848d7d32c6491ce536e40c2c46d8d54835f5af9775d974642828cd009f944bbe93f2606d05918cbe44ba6df5815a95a1d7a7b7a2b97af60022d6b21259befef699936528355a888c4fcd2bd138a8b956b873e790f48cbee90db3517292068cdcb5b49c488a3e0b1dfc1e72c6708396fe33a006f1138850caa594448dca7975b6cab77670c897110a283ebf159be3580a97ba2f371346390bd30fda426aeb76052d51d4d4e45379ef5590637fc9a169c34cbcb85943ca88931f8e274241ba631dae3ced6b6afe9b64799a6e8b265c7d359037f59f7ef28baf49e0dea8bf44843a1a1c702e530f2495b32adde439ab627c7c11eee3ae33dfdf3665dcca53f88d7740f81a55992bbd70926a7ed9cce10e2cce4c38f9c7328873e418276e6bb337e1327decf6956f6601b7b01a8e8bcce2206f5a3580abed1fb1d38e4afa3e734134db187ca7173ed4c0ba142a6a4036c098b07bf740562984a76a8381cebaa1bc821fa71fa453bee5f241b3f640346b743df5bbec75ee6e5f9134211c40a0b89571e9843f3abd7d590ec4b7fee919835a7904eec58c0acf52158a80a71f3cfa570ea974857bdc5593aced5b75a31f29b51ee38fc1ff12e191992f171fd0334d7ffea77a29191cee888b9226c457b06f8eb04184a34ca5afe470da0b48917c67e1a790734", 0x3a4}], 0x4}, 0x0) (async) r1 = socket(0x8, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r1, &(0x7f0000001680)={0x10, 0x0, 0x25dfdbff, 0xa0}, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0xe) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x58, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffe, 0x63}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x24f}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x58}, 0x1, 0x0, 0x0, 0x48814}, 0x40000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) bind$inet6(r8, &(0x7f0000000100), 0x1c) (async) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r9, 0xd000941e, &(0x7f0000000580)={r10, "636689e5a5fbe746368cafd59b7cb429"}) 5.817960031s ago: executing program 0 (id=2693): r0 = epoll_create(0x7fff) writev(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r2}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'batadv_slave_0\x00', {0x2, 0x4e24, @local}}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000024d541283fce182a116e640000000014000280050001000200000005001b0000000000"], 0x44}}, 0x0) socket$alg(0x26, 0x5, 0x0) 5.814286862s ago: executing program 2 (id=2694): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000002000010000000000ffffffff0a144000000000070000000014000200fc02000000000000000000000000000014000105180000000000f3ffffffffffffff0001080017004e214e22"], 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000001400000492e17000fbdbdf250a1040fd", @ANYRES32=r3, @ANYBLOB="08000a000300000014000100fc02000000000000000000000000000108000a000000000014000100fe80000000000000000000000000003314000200fc010000000000000000000000000001140006000800000006000000060000000100000008000900ff01000008000a000200000014000100ff010000000000000000000000000001"], 0x9c}}, 0x0) sendmsg$netlink(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000006c00)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x37, 0x0, 0x0, @binary="1b"}]}, 0x28}], 0x1}, 0x0) 5.748306249s ago: executing program 1 (id=2695): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5.579427039s ago: executing program 2 (id=2697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 5.372116709s ago: executing program 0 (id=2699): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x24, 0xff, 0x76}, 0x2c) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}], 0x1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xb}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x2, 0xc0}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) (async) r6 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000340)="9b14c4490ebf365be99652a3a56f4dcaeaba3e539022d7c64daaa4fdea69465b70e2387919828190b99ede2e1802679132ab4f57519d0313b2f39893ee0d83a6f949b59e40d32d7a56da", &(0x7f00000004c0)=""/101, &(0x7f0000000080)="a7276faa2dcee39192d8ac83d4ef4128767f4b31bad9ea8f32c9d3d1e2a3d741e391de102b19a7d4f3afeed4e18452fb783613fbaae42de5a4737c", &(0x7f0000000540)="b79a05375c652378ce0e4925bcc05dbe628e78025f5acb48d490e77a05378f7f88f8a58298b0ccf1b606a0fdd009043b968dfa0049508225bb8579899aef00ddcb6185b87f7b6602d46d5390683fd2f624e74bef601db99c4e16707e211997af5a559663ffb8f18fd780c36f1d708d941a7a76ba37aead511c48d3e514042d718c7095eac57970dc65cc721fe9f482ff6dde3afc1075ff29e94bfbd00dc2b5ba7079f2da75608b961b5aa1dfbb7e9c18c6c14f169ebefede9444f9b03282cc4e8a33", 0x800}, 0x38) (async) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f00000002c0)='pimreg\x00') (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xd4, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd7e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 5.288455543s ago: executing program 1 (id=2700): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x800, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000180)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000100)={0x1, '\x00', 0x1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001000010027bd700403dcdf2500000000", @ANYRES32=r5, @ANYBLOB="20ed940a481fa3ddfd0a0001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 5.241660432s ago: executing program 2 (id=2701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x11, 0x1, [0x25a]}}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) socket(0x840000000002, 0x3, 0xff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) mkdirat$cgroup(r8, &(0x7f0000000140)='syz1\x00', 0x1ff) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}]}}]}, 0x4c}}, 0x4004002) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x50}}]}, 0x2c}}, 0x0) 5.165677052s ago: executing program 6 (id=2702): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r4, &(0x7f0000001200)=ANY=[], 0xfe33) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x7, 0x2, 0x21, 0xf8}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408c1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e000000100000000000000000000000000000000000000000000000000000000000401464e2400020000000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x40) 5.024673848s ago: executing program 1 (id=2703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x4, 0xfffffc01, 0x10001}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) 4.964540409s ago: executing program 0 (id=2704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb702000000000000000400000000000085000000c300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getstats={0x1c, 0x5e, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1004}, 0x4004) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.775188763s ago: executing program 0 (id=2705): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x92}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) listen(r2, 0x0) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000001140)) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x9, 0xfffb, 0x80000000, 0x3ff}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000280)={0x947, 0x3f92, 0x2, 0x5, 0x8, 0x3, 0x7, 0x401, r9}, &(0x7f0000000380)=0x20) (async) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d99", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) (async) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) 4.656136244s ago: executing program 0 (id=2706): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000)=0x1e2600, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x29) r3 = socket(0x1d, 0x3, 0x1) getpeername$packet(r3, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x3, 0x5, {{0x24, 0x4, 0x1, 0x1, 0x90, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xb1, [@remote]}, @timestamp={0x44, 0x8, 0xc2, 0x0, 0xf, [0x3]}, @cipso={0x86, 0x58, 0x1, [{0xa92769f522f2d270, 0x8, "f54697411717"}, {0x7, 0x12, "0d5e2e3a2f697ca7dc697251c09bc044"}, {0x2, 0x12, "dd51e6258f7a2176d6fcfdeaf628df1b"}, {0x7, 0x12, "87c6051300b1ba999a61e009c4553fc9"}, {0x7, 0xe, "033d12036d226cdefc405994"}, {0x5, 0x6, "07480e9d"}]}, @cipso={0x86, 0x11, 0x0, [{0x1, 0x7, "77e8363ace"}, {0x6, 0x4, "7f78"}]}]}}}}}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x120, 0x120, 0x6, [@restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @enum64={0x5, 0x6, 0x0, 0x13, 0x0, 0xa, [{0xe, 0x8000, 0x3}, {0x5, 0xffffff29, 0x2}, {0x7, 0x8, 0x4}, {0xa, 0x1, 0x80}, {0xe, 0x3, 0x6}, {0xc, 0x2, 0x2}]}, @struct={0x10, 0x5, 0x0, 0x4, 0x1, 0x3, [{0x9, 0x2, 0x3}, {0xb, 0x3, 0xf}, {0x5, 0x2, 0x9}, {0x9, 0x1}, {0xf, 0x4, 0x17e0}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @ptr={0x7, 0x0, 0x0, 0x2, 0x5}, @struct={0xf, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x9, 0x2, 0x100}, {0x4, 0x3, 0x86}]}, @union={0xc, 0x4, 0x0, 0x5, 0x1, 0x9, [{0x2, 0x1, 0x200}, {0x4, 0x4, 0x2}, {0x6, 0x5, 0xfff}, {0xd, 0x3, 0x8}]}]}, {0x0, [0x5f, 0x30, 0x0, 0xe63703083c0007ec]}}, &(0x7f00000005c0)=""/63, 0x13e, 0x3f, 0x1, 0x3e6, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', r10, r11, 0x4, 0x3, 0x5}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3001000013006f9569b985e05f866433c3c252ec9a9bbbf9211100ffdb9f25ac1e01e5ffffffffffffff000000800000000080000000000300"/66, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="07000000000000009159bb4100000000faffffffffffffff01800000000000000b00000000000000ff7f0000000000000100000000000000000000000000000000000000000000000400000000000000fcffffffffffffff60d300000000000008000000b36b6e00020101000000000014000d00ffffffff0000000000000000000000002c001300ff01000000000000000000000000000100000000000000000000000000000001000000000200000008001f000400000014000d006401010100000000000000000000000008001e00ff7f000014000e007f00000100"/232], 0x130}, 0x1, 0x0, 0x0, 0x854}, 0x24008001) 4.320761682s ago: executing program 6 (id=2707): r0 = socket$kcm(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000340)) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)="5c6817", 0x3}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080007"], 0x104}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0xd8}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000480)={r3, 0x8, 0x0, 0x4, 0x1aef}, &(0x7f00000004c0)=0x18) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@nfc={0x27, 0x0, 0xfffffffb, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)="aaeac2088fd84dec817d97e401cc5aa09e3746a882a03700e9e396", 0x1b}, {&(0x7f0000000040)="ea06f8f824fbac149dfc200e81a539ac7a94c7c56d2843c50b1146bd9ee298519f07ec0693baef45846d8b5439aab883885035dd93aeb3557efde0f45fa8da4cdfa87f09599c99", 0x47}, {&(0x7f00000000c0)="4544cf16cb3f5b4218b5b77ad3551622a73db22c5ad8eebe38eedde716b7822a8d00"/47, 0x2f}, {&(0x7f0000000180)="26d7586139cd036e547b557034ce7e98e853d06a5d6f4b8b3804817d2e03f0973f05dc108fe9ada66e7bd02f1741bac934c586525077c28af90ea3906fd45d1977cc962327301b9917c2bcfb5d0315d80b9e3036a7ed8dfef8013e9a5a3fa21e69347c230def3090c03f74f01fc404556b6efe0e811fafba852aca4659d671e2e7eac9b9c4cc6104838a041128ff7ebafbe7164692095593cc7dc0645a13ce5ebaf06432ae9337fc83c88366ec7bc4e8a335c28db74814d483c10a13857cf2afa1a0cbfed8aae7daa375135e8c1ca337a5889e", 0xd3}, {&(0x7f0000000280)="d32349452f27969a7850f729dfe0f0dd8c0a172e557cae3ebe06629f208ed4e50cd42fed163dfba6880f918b964e4754a9be", 0x32}], 0x5, 0x0, 0x0, 0x900}, 0x0) 4.171284214s ago: executing program 4 (id=2708): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r3 = socket(0x1d, 0x2, 0x6) recvfrom$packet(r3, 0x0, 0x0, 0x4001, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="f80100"}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', r9, 0x8, 0x8000, 0xcc, 0x3ff, {{0x18, 0x4, 0x3, 0x3, 0x60, 0x66, 0x0, 0x49, 0x2f, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0x17, 0x9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @multicast1, @local]}, @rr={0x7, 0xf, 0xf6, [@broadcast, @rand_addr=0x64010101, @multicast1]}, @timestamp={0x44, 0x20, 0x80, 0x0, 0x2, [0x80000000, 0x7, 0x7, 0x58ff, 0x7, 0x1, 0x2]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWTABLE={0x1f8, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xcf, 0x6, "bd2b69fdf7f2899fb5642d15c536808612a6aa8ad377ae56c1afd41fcae9afc13875e95f19fdd7c49436fbada0638ebafb294a426f9bc42ee1c119d16be36fdb7ba987f9a88fca059189d7e3cc5eb282a88c90248272d5c8ca507f27b849b5b6862a096c00a340b48653e65a7b8bae186fb17444821312c92986d85ba9fca9f0367fa01890e21c8978719fabeb4b93455c1583fd6ebbea94675e247d050127e6e029b79b63962d350e6073677c70a47c1e2db1e0d1f5606a2c67d031292cc4b42ddc4eb48ac306e2f7bbca"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "a3e0d385103b8232586f65a9d3f1ff021632f32706c8c2b07a28caa3df6d7e0513996f85744abe755098"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa3, 0x6, "90a3201027764ebe9bb79a4fe8293dd021d6d867d41d0bc39fb8dda36fc96bdcd877cdc3c30679b846d66d4b21729765a567deae10c5a95f1a0b44d7fe373ae0ef3939397593585ba8595187efe83e12596057adc8198fe94c0f6f970feaf2bc6b4a6eda02ad4dc152ad4ae372ce55d8778c6dfe101ceceb2c8c91962d756177a2558db9b7b5f344b020573606596929fbeeed460adab25396e5ce5793faa1"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x27c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) socket(0x2d, 0x2, 0x0) (async) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) (async) socket(0x1d, 0x2, 0x6) (async) recvfrom$packet(r3, 0x0, 0x0, 0x4001, 0x0, 0x0) (async) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="f80100"}) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', r9, 0x8, 0x8000, 0xcc, 0x3ff, {{0x18, 0x4, 0x3, 0x3, 0x60, 0x66, 0x0, 0x49, 0x2f, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0x17, 0x9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @multicast1, @local]}, @rr={0x7, 0xf, 0xf6, [@broadcast, @rand_addr=0x64010101, @multicast1]}, @timestamp={0x44, 0x20, 0x80, 0x0, 0x2, [0x80000000, 0x7, 0x7, 0x58ff, 0x7, 0x1, 0x2]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWTABLE={0x1f8, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xcf, 0x6, "bd2b69fdf7f2899fb5642d15c536808612a6aa8ad377ae56c1afd41fcae9afc13875e95f19fdd7c49436fbada0638ebafb294a426f9bc42ee1c119d16be36fdb7ba987f9a88fca059189d7e3cc5eb282a88c90248272d5c8ca507f27b849b5b6862a096c00a340b48653e65a7b8bae186fb17444821312c92986d85ba9fca9f0367fa01890e21c8978719fabeb4b93455c1583fd6ebbea94675e247d050127e6e029b79b63962d350e6073677c70a47c1e2db1e0d1f5606a2c67d031292cc4b42ddc4eb48ac306e2f7bbca"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "a3e0d385103b8232586f65a9d3f1ff021632f32706c8c2b07a28caa3df6d7e0513996f85744abe755098"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa3, 0x6, "90a3201027764ebe9bb79a4fe8293dd021d6d867d41d0bc39fb8dda36fc96bdcd877cdc3c30679b846d66d4b21729765a567deae10c5a95f1a0b44d7fe373ae0ef3939397593585ba8595187efe83e12596057adc8198fe94c0f6f970feaf2bc6b4a6eda02ad4dc152ad4ae372ce55d8778c6dfe101ceceb2c8c91962d756177a2558db9b7b5f344b020573606596929fbeeed460adab25396e5ce5793faa1"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x27c}}, 0x0) (async) 4.168011522s ago: executing program 6 (id=2709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8001) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80d0}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000f7003616e2003bd5e694cdabace115f70cc37866dc7dccbd25a0081a1955148a1bd7a99eb0f4090000008e87b3ef1d", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf25140000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r10 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) close(r10) (async, rerun: 32) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async, rerun: 32) r12 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r11, 0x40305828, 0x0) (async, rerun: 32) r13 = gettid() syz_open_procfs$namespace(r13, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r13}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000020}, 0x8000) (rerun: 64) 3.947020504s ago: executing program 6 (id=2710): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) 3.795392987s ago: executing program 6 (id=2711): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="180001000000000000000000080041e4530a4280"], 0x18}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a"], 0x18}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES8=r2], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="05df25016f00000800010000000000000000", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT=r1], 0xfdef) 462.731707ms ago: executing program 0 (id=2712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x5, @remote, 0x441, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000440), 0xd5, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000180), &(0x7f00000004c0)=""/69}, 0x20) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4004040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="01000000400000001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xc, @dev={0xfe, 0x80, '\x00', 0xf}}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 438.407237ms ago: executing program 4 (id=2713): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0xd029) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006b00000000d86e6c1d0000147ea60864160af36504b68675f8001d000a008be6050017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 374.500839ms ago: executing program 1 (id=2714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x4}, 0x20) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0xa8a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0xb, 0x0, 0xfd, 0x0, 0x987b}, 0x20) close(0x3) 244.140365ms ago: executing program 1 (id=2715): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000400), 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x20040014}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x2}, 0x10) (async, rerun: 64) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async, rerun: 64) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) getsockopt$packet_int(r4, 0x107, 0x14, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52) 213.946971ms ago: executing program 4 (id=2716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x200, 0x0, 0x4bb8, 0x965f, 0x8}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="900400001900000229bd7000ff0c0100007c953677a732bdc79725ffffffff000000000000000000000000fe8000000000000000000000000000aa4e20000b4e", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="ffffffff000000000100000000000000040000000000000002000000000000000500000000000000030000000000000004000000000000000100000000000000070000000000000000800000000000000d060000000000007c4d0000000000000e000000bd6b6e000000020000000000e4000600fe880000000000000000000000000101fe8000000000000000000000000000aa4e2100004e2000010a00002016000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="fe800000000000000000000000000023000004d4ff0000002001000000000000000000000000000281000000000000001100000000000000ed83000000000000ff0000000000000008000000000000000400000000000000ff0f00000000000006000000000000009666fb650000000006000000000000000300000000000000ff07000000000000ffffffff040000000100000029bd7000013500000200020500000000000000000c001c00", @ANYRES32=r3, @ANYBLOB="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"], 0x490}, 0x1, 0x0, 0x0, 0x840}, 0x4000) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@mcast1, 0x4, r3}) 197.45036ms ago: executing program 6 (id=2717): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x2ff, 0x0, 0x0, {0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e000000100000000000000000000000000000000000000000000000000000000000401464e2400020000000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x40) 8.23335ms ago: executing program 2 (id=2718): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') (async) unshare(0x6a040000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x8, 0x3, 0x3) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) 6.040067ms ago: executing program 1 (id=2719): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073697a300000000044000000060a010400000000000000000500000008000b40000000001c00048018000180080001006c6f67000c00028006000140000600000900010073797a30"], 0xb8}}, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0xc6b80, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x402002, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x10200) (async) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d40ea7b51ec0617fdf04e717a36c8b14ab24deac6435e63d2e0df5f3c8cd5a9111768f95eb100e05", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb08ffff"], 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r9], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) (async) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r10, 0x112, 0x9, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, &(0x7f0000000080)="5d3f930a3b83f636b676511accd0ecfdc7e3e0b3b7d5d1fe83bce1423443c695d003c5c38ae749b9e248ce6d50f2e0b81facffb637365c3a3b4205fc581a755eeaa9a1d217347e1694150dd96b50e78fcc4e260f6f18ace5bf73f096b0629a61f099e969c255038b187d0af4f31e346454aade22ddd3dd14a2471db2d78b15fc503d33a8e363b1e428fccd6a29dd308ca43d3f5252c3e2e007e0b0b1e7662a669570971a61c56788bc4f6f512f6b5dabe5b4cf1a670c679b8e8a596ba7bad543779efe589e87ce02fc56c6f6e1e76b0e522d13f31e8dd3455ad050612c20ee1b0378e1ba7e89e5ae345a", &(0x7f0000000180)=""/124}, 0x20) 0s ago: executing program 4 (id=2720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0c000000010001", 0x7) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf25037c00000400c2800c00018008001f00", @ANYRES32=r4, @ANYBLOB="04000800a3a8cb3405949f7ff6424cd46d461c8862a4076cb97e9b70f41efcb11a8857549fb108ef8a91574bf243d18d29985b65e96aad73dcb34ce5c111e4b50f7ada52380af6a8d592"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) setsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x20000000, 0xffffffffffffffdf, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) kernel console output (not intermixed with test programs): 574][T10065] netlink: 444 bytes leftover after parsing attributes in process `syz.0.1048'. [ 298.909259][T10065] openvswitch: netlink: Flow key attr not present in new flow. [ 299.319663][T10091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1054'. [ 299.352927][T10075] raw_sendmsg: syz.1.1051 forgot to set AF_INET. Fix it! [ 299.368877][T10091] openvswitch: netlink: Flow key attr not present in new flow. [ 299.582810][T10102] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 299.605202][T10100] netlink: 'syz.4.1059': attribute type 1 has an invalid length. [ 299.688725][T10100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.195381][T10136] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 300.236162][T10136] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 300.273729][T10136] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 300.295542][T10136] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 300.316806][T10136] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 300.338440][T10136] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 300.347758][T10136] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 300.523501][T10151] sctp: [Deprecated]: syz.1.1076 (pid 10151) Use of int in maxseg socket option. [ 300.523501][T10151] Use struct sctp_assoc_value instead [ 300.554406][T10154] Cannot find set identified by id 65534 to match [ 301.085333][ T980] IPVS: starting estimator thread 0... [ 301.271187][T10175] IPVS: using max 24 ests per chain, 57600 per kthread [ 301.737209][T10200] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 301.744609][T10200] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 302.135862][T10217] syz.5.1097 uses old SIOCAX25GETINFO [ 302.151313][T10221] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 302.205764][T10217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.423079][T10242] tipc: Started in network mode [ 302.436161][T10242] tipc: Node identity ac14140f, cluster identity 4711 [ 302.450313][T10242] tipc: New replicast peer: 255.255.255.255 [ 302.458277][T10242] tipc: Enabled bearer , priority 10 [ 302.497487][T10244] bond4 (unregistering): Released all slaves [ 302.811911][T10264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.255418][T10296] veth0_to_team: entered allmulticast mode [ 303.275843][ T7558] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.315148][ T7558] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.357381][ T7558] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.392813][ T7558] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.430728][T10303] netlink: 'syz.1.1120': attribute type 11 has an invalid length. [ 303.574909][ T6535] tipc: Node number set to 2886997007 [ 303.652513][T10315] __nla_validate_parse: 34 callbacks suppressed [ 303.652542][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 303.680834][T10319] xt_policy: output policy not valid in PREROUTING and INPUT [ 303.774759][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.783083][ C1] lec:lec_tx_timeout: lec0 [ 303.785518][T10324] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1129'. [ 303.788524][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.910841][T10331] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1131'. [ 304.034070][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1135'. [ 304.055653][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1134'. [ 304.685269][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 304.823080][T10373] tipc: Started in network mode [ 304.828685][T10373] tipc: Node identity 02d915314db4, cluster identity 4711 [ 304.837352][T10373] tipc: Enabled bearer , priority 0 [ 304.892647][T10369] tipc: Disabling bearer [ 305.085221][T10376] syz.1.1146 (10376) used greatest stack depth: 17472 bytes left [ 305.319318][T10405] tipc: Can't bind to reserved service type 1 [ 305.357661][T10404] syzkaller0: entered promiscuous mode [ 305.378844][T10404] syzkaller0: entered allmulticast mode [ 305.788500][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 305.900573][T10423] tipc: Enabled bearer , priority 0 [ 305.935199][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 305.959660][T10420] tipc: Disabling bearer [ 306.410000][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1167'. [ 306.549460][T10447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.681603][T10458] siw: device registration error -23 [ 306.878244][T10469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'. [ 306.988256][T10469] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 307.010015][T10469] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 307.254243][T10485] pimreg3: entered allmulticast mode [ 307.446457][T10495] validate_nla: 33 callbacks suppressed [ 307.446487][T10495] netlink: 'syz.4.1181': attribute type 1 has an invalid length. [ 307.660700][T10497] syzkaller0: entered promiscuous mode [ 307.669794][T10497] syzkaller0: entered allmulticast mode [ 307.994005][T10470] udevd[10470]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 308.482533][T10543] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 308.515956][T10541] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 308.524590][T10541] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 308.804743][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.813023][ C1] lec:lec_tx_timeout: lec0 [ 308.821351][T10543] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.824815][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 309.080025][T10565] netlink: 'syz.2.1194': attribute type 3 has an invalid length. [ 309.108984][T10563] netlink: 'syz.1.1193': attribute type 4 has an invalid length. [ 309.300655][T10581] netlink: 'syz.0.1199': attribute type 16 has an invalid length. [ 309.314351][T10581] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 309.331415][T10581] __nla_validate_parse: 2 callbacks suppressed [ 309.331438][T10581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1199'. [ 309.361363][ T980] hid-generic 0005:0458:5505.0001: item fetching failed at offset 0/1 [ 309.400245][ T980] hid-generic 0005:0458:5505.0001: probe with driver hid-generic failed with error -22 [ 309.750695][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 309.806882][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 309.849527][T10618] netlink: 'syz.1.1212': attribute type 10 has an invalid length. [ 309.964239][T10618] veth0_vlan: left promiscuous mode [ 310.007382][T10618] veth0_vlan: entered promiscuous mode [ 310.037455][T10618] team0: Device veth0_vlan failed to register rx_handler [ 310.243623][T10634] netlink: set zone limit has 4 unknown bytes [ 310.314415][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 310.413529][T10638] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 310.441889][T10638] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 310.484339][T10643] ipt_rpfilter: unknown options [ 310.574361][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1219'. [ 310.620897][T10648] netlink: 'syz.2.1220': attribute type 2 has an invalid length. [ 311.283766][T10687] syzkaller1: entered promiscuous mode [ 311.292264][T10687] syzkaller1: entered allmulticast mode [ 311.318881][T10691] netlink: 'syz.5.1229': attribute type 10 has an invalid length. [ 311.361650][T10691] veth0_vlan: left promiscuous mode [ 311.370500][T10691] veth0_vlan: entered promiscuous mode [ 311.380819][T10691] team0: Device veth0_vlan failed to register rx_handler [ 312.091915][T10743] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1242'. [ 313.834826][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 313.843110][ C1] lec:lec_tx_timeout: lec0 [ 313.847722][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.022069][T10670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.236031][T10751] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1248'. [ 314.313367][T10758] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1246'. [ 314.349647][T10758] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1246'. [ 314.615028][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1252'. [ 314.646222][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1252'. [ 314.684272][T10772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1252'. [ 314.694014][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 314.766476][T10780] bond0: entered allmulticast mode [ 314.773612][T10780] bond_slave_0: entered allmulticast mode [ 314.780569][T10780] bond_slave_1: entered allmulticast mode [ 314.869828][T10783] x_tables: duplicate underflow at hook 2 [ 314.961223][T10789] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1259'. [ 315.239719][T10800] netlink: 'syz.2.1260': attribute type 8 has an invalid length. [ 315.775329][T10828] syzkaller0: entered promiscuous mode [ 315.780896][T10828] syzkaller0: entered allmulticast mode [ 315.853777][T10831] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 315.917120][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1250'. [ 315.969147][T10831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1266'. [ 315.988239][T10835] netlink: 'syz.5.1250': attribute type 21 has an invalid length. [ 316.124937][T10835] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 316.142625][T10835] bond2 (unregistering): Released all slaves [ 316.252003][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 316.282759][T10850] macsec1: entered promiscuous mode [ 316.302032][T10850] bridge0: entered promiscuous mode [ 316.315129][T10850] macsec1: entered allmulticast mode [ 316.324822][T10850] bridge0: entered allmulticast mode [ 316.339555][T10850] bridge0: port 3(macsec1) entered blocking state [ 316.366690][T10850] bridge0: port 3(macsec1) entered disabled state [ 316.398874][T10850] bridge0: left allmulticast mode [ 316.404212][T10850] bridge0: left promiscuous mode [ 316.460152][T10863] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1275'. [ 316.807288][T10881] netlink: 'syz.4.1281': attribute type 1 has an invalid length. [ 316.945269][T10884] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 316.974473][T10884] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 317.124326][T10893] netlink: 'syz.0.1285': attribute type 21 has an invalid length. [ 317.240140][T10888] veth1_macvtap: renamed from veth0_vlan [ 317.290083][T10893] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 317.302152][T10893] bond3 (unregistering): Released all slaves [ 318.329807][T10951] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 318.625611][T10971] syzkaller0: entered promiscuous mode [ 318.634257][T10971] syzkaller0: entered allmulticast mode [ 318.753540][T10972] syzkaller1: entered promiscuous mode [ 318.775575][T10972] syzkaller1: entered allmulticast mode [ 318.854732][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.862893][ C1] lec:lec_tx_timeout: lec0 [ 318.868183][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.879761][ T5489] veth1_macvtap: left promiscuous mode [ 318.903519][ T5489] veth1_macvtap: entered promiscuous mode [ 319.318737][ T6522] IPVS: starting estimator thread 0... [ 319.424875][T11013] IPVS: using max 28 ests per chain, 67200 per kthread [ 320.910031][T11014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 320.929360][T11014] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 320.938006][T11014] gretap4: entered promiscuous mode [ 320.943383][T11014] gretap4: entered allmulticast mode [ 321.088444][T11019] can: request_module (can-proto-0) failed. [ 321.166586][T11023] GUP no longer grows the stack in syz.1.1312 (11023): 200000003000-200000005000 (200000001000) [ 321.178657][T11023] CPU: 0 UID: 0 PID: 11023 Comm: syz.1.1312 Not tainted syzkaller #0 PREEMPT(full) [ 321.178679][T11023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.178687][T11023] Call Trace: [ 321.178695][T11023] [ 321.178701][T11023] dump_stack_lvl+0xe8/0x150 [ 321.178729][T11023] __get_user_pages+0x2453/0x29d0 [ 321.178751][T11023] ? __lock_acquire+0x6b5/0x2cf0 [ 321.178780][T11023] ? __gup_longterm_locked+0xc4e/0x1630 [ 321.178800][T11023] ? down_read_killable+0x1bb/0x340 [ 321.178831][T11023] __gup_longterm_locked+0xdcf/0x1630 [ 321.178867][T11023] gup_fast_fallback+0x1d82/0x22e0 [ 321.178907][T11023] ? __pfx_gup_fast_fallback+0x10/0x10 [ 321.178926][T11023] ? do_raw_spin_lock+0x12b/0x2f0 [ 321.178939][T11023] ? is_valid_gup_args+0x11f/0x200 [ 321.178960][T11023] ? get_user_pages_fast+0x4d/0xb0 [ 321.178979][T11023] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 321.179001][T11023] ? stack_depot_save_flags+0x3f3/0x810 [ 321.179022][T11023] iov_iter_get_pages2+0x5e/0xa0 [ 321.179037][T11023] zerocopy_fill_skb_from_iter+0x2d1/0xf50 [ 321.179055][T11023] ? virtio_transport_send_pkt_info+0x570/0xff0 [ 321.179074][T11023] ? virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 321.179093][T11023] ? ____sys_sendmsg+0x972/0x9f0 [ 321.179107][T11023] ? ___sys_sendmsg+0x2a5/0x360 [ 321.179121][T11023] ? do_syscall_64+0x14d/0xf80 [ 321.179134][T11023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.179155][T11023] ? __pfx_zerocopy_fill_skb_from_iter+0x10/0x10 [ 321.179185][T11023] ? rcu_is_watching+0x15/0xb0 [ 321.179203][T11023] ? trace_kmem_cache_alloc+0x29/0xf0 [ 321.179219][T11023] __zerocopy_sg_from_iter+0x551/0x950 [ 321.179239][T11023] ? __alloc_skb+0x4e5/0x7d0 [ 321.179255][T11023] ? __pfx___zerocopy_sg_from_iter+0x10/0x10 [ 321.179275][T11023] ? skb_set_owner_w+0x26c/0x3e0 [ 321.179292][T11023] virtio_transport_alloc_skb+0x67c/0x1180 [ 321.179313][T11023] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 321.179329][T11023] ? __local_bh_enable_ip+0xd0/0x130 [ 321.179348][T11023] virtio_transport_send_pkt_info+0x570/0xff0 [ 321.179379][T11023] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 321.179399][T11023] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 321.179423][T11023] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 321.179439][T11023] vsock_connectible_sendmsg+0xad6/0x1070 [ 321.179466][T11023] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 321.179479][T11023] ? __pfx_aa_sk_perm+0x10/0x10 [ 321.179497][T11023] ? __pfx_woken_wake_function+0x10/0x10 [ 321.179514][T11023] ? aa_sock_msg_perm+0xf1/0x1b0 [ 321.179533][T11023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.179549][T11023] ____sys_sendmsg+0x972/0x9f0 [ 321.179569][T11023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.179589][T11023] ? import_iovec+0x73/0xa0 [ 321.179605][T11023] ___sys_sendmsg+0x2a5/0x360 [ 321.179623][T11023] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.179641][T11023] ? __pfx_futex_wake_mark+0x10/0x10 [ 321.179676][T11023] ? __fget_files+0x2a/0x420 [ 321.179693][T11023] ? __fget_files+0x3a0/0x420 [ 321.179717][T11023] __sys_sendmmsg+0x27c/0x4e0 [ 321.179735][T11023] ? __pfx___sys_sendmmsg+0x10/0x10 [ 321.179748][T11023] ? do_futex+0x333/0x420 [ 321.179780][T11023] ? __pfx___se_sys_futex+0x10/0x10 [ 321.179795][T11023] ? rcu_is_watching+0x15/0xb0 [ 321.179817][T11023] __x64_sys_sendmmsg+0xa0/0xc0 [ 321.179840][T11023] do_syscall_64+0x14d/0xf80 [ 321.179854][T11023] ? trace_irq_disable+0x3b/0x150 [ 321.179865][T11023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.179878][T11023] ? clear_bhb_loop+0x40/0x90 [ 321.179893][T11023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.179905][T11023] RIP: 0033:0x7f2d9879c819 [ 321.179920][T11023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.179931][T11023] RSP: 002b:00007f2d99728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.179946][T11023] RAX: ffffffffffffffda RBX: 00007f2d98a15fa0 RCX: 00007f2d9879c819 [ 321.179956][T11023] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 321.179964][T11023] RBP: 00007f2d98832c91 R08: 0000000000000000 R09: 0000000000000000 [ 321.179972][T11023] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 321.179980][T11023] R13: 00007f2d98a16038 R14: 00007f2d98a15fa0 R15: 00007ffe767f5978 [ 321.180000][T11023] [ 321.617462][T10960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.850691][T11027] IPVS: Scheduler module ip_vs_sip not found [ 321.908999][T11027] netlink: 'syz.4.1313': attribute type 11 has an invalid length. [ 321.916441][T11032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.112831][T11055] IPVS: length: 221 != 24 [ 322.292290][T11065] netlink: 'syz.0.1322': attribute type 3 has an invalid length. [ 322.320873][T11068] tc_dump_action: action bad kind [ 322.386502][T11063] __nla_validate_parse: 5 callbacks suppressed [ 322.386528][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1321'. [ 322.953925][T11103] xfrm1: entered allmulticast mode [ 323.039784][T11112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1333'. [ 323.693723][T11142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'. [ 323.817086][T11144] x_tables: unsorted underflow at hook 4 [ 324.050364][T11153] Bluetooth: MGMT ver 1.23 [ 324.106535][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1347'. [ 324.994708][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 325.002885][ C1] lec:lec_tx_timeout: lec0 [ 325.014842][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 325.306841][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1361'. [ 325.469127][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 325.479316][T11231] netlink: 'syz.5.1364': attribute type 3 has an invalid length. [ 325.996234][T11256] netlink: 'syz.5.1369': attribute type 6 has an invalid length. [ 326.048996][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 326.076156][T11254] netlink: 'syz.5.1369': attribute type 6 has an invalid length. [ 326.084268][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 326.084575][T11258] veth5: entered allmulticast mode [ 326.199823][T11264] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1373'. [ 326.237919][T11264] netlink: 'syz.5.1373': attribute type 10 has an invalid length. [ 326.249069][T11264] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.279706][T11264] bridge_slave_1: left allmulticast mode [ 326.289525][T11267] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1373'. [ 326.296887][T11265] netlink: Unknown conntrack attr (0) [ 326.307535][T11264] bridge_slave_1: left promiscuous mode [ 326.313610][T11264] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.324518][T11267] netlink: Unknown conntrack attr (0) [ 326.361796][T11264] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 326.458217][T11280] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 326.535857][T11280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.588624][T11285] vlan4: entered allmulticast mode [ 326.593807][T11285] bond6: entered allmulticast mode [ 327.026667][T11313] netlink: 'syz.0.1387': attribute type 4 has an invalid length. [ 327.150459][T11318] netlink: 'syz.0.1389': attribute type 8 has an invalid length. [ 327.161623][T11318] sch_fq: defrate 0 ignored. [ 327.437965][T11291] lec:lec_atm_close: lec0: Shut down! [ 327.838130][T11347] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.851739][T11347] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.027574][T11347] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.048753][T11347] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.054971][T11360] netlink: 'syz.0.1399': attribute type 21 has an invalid length. [ 328.091115][T11360] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 328.176837][T11347] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.207325][T11347] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.303300][T11347] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.342599][T11347] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.378373][T11370] __nla_validate_parse: 9 callbacks suppressed [ 328.378399][T11370] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.1402'. [ 328.969294][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 328.987334][T11412] netdevsim netdevsim1: Direct firmware load for 0 failed with error -2 [ 328.996366][T11412] netdevsim netdevsim1: Falling back to sysfs fallback for: 0 [ 329.043767][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1415'. [ 329.189075][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 329.211866][T11427] syzkaller0: entered promiscuous mode [ 329.268171][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 329.270164][T11430] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 329.362221][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'. [ 329.373514][T11438] netlink: 'syz.2.1422': attribute type 2 has an invalid length. [ 329.375232][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1421'. [ 329.393787][T11438] 9: entered promiscuous mode [ 329.479201][T11445] syzkaller1: entered promiscuous mode [ 329.485387][T11445] syzkaller1: entered allmulticast mode [ 329.547475][T11443] netlink: 9836 bytes leftover after parsing attributes in process `syz.2.1424'. [ 329.613102][T11452] vlan2: entered promiscuous mode [ 329.618835][T11452] bridge0: entered promiscuous mode [ 330.045997][T11463] netlink: 'syz.4.1429': attribute type 7 has an invalid length. [ 330.060669][T11463] netlink: 'syz.4.1429': attribute type 7 has an invalid length. [ 330.117997][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.127508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.279304][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1431'. [ 330.482339][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1432'. [ 330.666523][T11486] netlink: 'syz.4.1435': attribute type 2 has an invalid length. [ 330.692572][T11486] netlink: 'syz.4.1435': attribute type 8 has an invalid length. [ 330.977903][T11501] bridge_slave_1: left allmulticast mode [ 330.983634][T11501] bridge_slave_1: left promiscuous mode [ 330.993485][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.052441][T11501] ¾x9ÿ: left allmulticast mode [ 331.058528][T11501] ¾x9ÿ: left promiscuous mode [ 331.063562][T11501] bridge0: port 1(1¾x9ÿ) entered disabled state [ 331.081589][T11501] bridge0 (unregistering): left allmulticast mode [ 331.256587][T11507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.874230][T11540] tipc: Enabled bearer , priority 0 [ 331.895911][T11540] +: renamed from syzkaller0 [ 331.906458][T11540] tipc: Disabling bearer [ 331.961264][T11540] syzkaller0: entered promiscuous mode [ 332.206743][ T48] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.227975][ T48] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.249498][ T48] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.284801][ T48] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.303505][T11554] bridge_slave_1: left allmulticast mode [ 332.309434][T11554] bridge_slave_1: left promiscuous mode [ 332.325218][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.365865][T11554] bridge_slave_0: left allmulticast mode [ 332.387207][T11554] bridge_slave_0: left promiscuous mode [ 332.393301][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.561877][ T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.570357][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.612536][ T296] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.624623][ T296] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.674809][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 332.683407][ C1] lec:lec_tx_timeout: lec0 [ 332.688522][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.741133][T11567] validate_nla: 10 callbacks suppressed [ 332.741160][T11567] netlink: 'syz.0.1460': attribute type 5 has an invalid length. [ 332.766607][T11562] bond4: option xmit_hash_policy: invalid value (64) [ 332.789095][T11562] bond4 (unregistering): Released all slaves [ 333.360014][T11597] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 333.722628][T11602] bond2: option resend_igmp: invalid value (32767) [ 333.730252][T11602] bond2: option resend_igmp: allowed values 0 - 255 [ 333.813747][T11602] bond2 (unregistering): Released all slaves [ 334.341561][T11643] netlink: 'syz.0.1478': attribute type 16 has an invalid length. [ 334.363562][T11643] netlink: 'syz.0.1478': attribute type 17 has an invalid length. [ 334.416144][T11643] sit0: left promiscuous mode [ 334.433145][T11651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.511366][T11643] bond0: left allmulticast mode [ 334.518581][T11643] bond_slave_0: left allmulticast mode [ 334.524150][T11643] bond_slave_1: left allmulticast mode [ 334.538396][T11643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.645048][T11658] netlink: 'syz.4.1484': attribute type 10 has an invalid length. [ 334.670209][T11662] netlink: 'syz.4.1484': attribute type 10 has an invalid length. [ 334.671126][T11660] __nla_validate_parse: 11 callbacks suppressed [ 334.671143][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 334.699269][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 334.725784][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.735370][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.744350][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.754225][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 334.765225][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 334.778485][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.861245][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 334.948167][T11672] bond7: entered promiscuous mode [ 334.975619][T11672] 8021q: adding VLAN 0 to HW filter on device bond7 [ 335.024050][T11685] sock: sock_timestamping_bind_phc: sock not bind to device [ 335.061525][T11685] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1493'. [ 335.146804][T11692] xt_cgroup: xt_cgroup: no path or classid specified [ 335.217467][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1497'. [ 335.427884][T11705] geneve2: entered promiscuous mode [ 335.436669][T11709] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1500'. [ 335.452746][T11708] netlink: 'syz.0.1499': attribute type 62 has an invalid length. [ 335.477818][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 38343 - 0 [ 335.487857][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 38343 - 0 [ 335.498331][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 38343 - 0 [ 335.535853][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1501'. [ 335.555476][T11702] syzkaller1: entered promiscuous mode [ 335.565600][T11712] netlink: 'syz.1.1501': attribute type 7 has an invalid length. [ 335.573395][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1501'. [ 335.587825][T11702] syzkaller1: entered allmulticast mode [ 335.600350][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 38343 - 0 [ 335.642438][T11718] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 335.690804][T11712] erspan0: entered promiscuous mode [ 335.702966][T11712] erspan0: left promiscuous mode [ 336.044190][T11746] openvswitch: netlink: Duplicate key (type 2). [ 336.648109][T11780] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 336.790876][T11780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 336.883095][T11788] vlan3: entered promiscuous mode [ 336.899407][T11788] bond4: entered promiscuous mode [ 336.931689][T11788] vlan3: entered allmulticast mode [ 336.960392][T11788] bond4: entered allmulticast mode [ 337.027597][T11796] bond4: (slave bridge5): making interface the new active one [ 337.039558][T11796] bridge5: entered promiscuous mode [ 337.046119][T11796] bridge5: entered allmulticast mode [ 337.053268][T11796] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 337.137748][T11809] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 337.177100][T11809] bond8 (unregistering): Released all slaves [ 337.338618][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.347496][T11820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.362507][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.376212][T11820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.428625][T11822] pim6reg1: entered promiscuous mode [ 337.434008][T11822] pim6reg1: entered allmulticast mode [ 337.704714][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.712842][ C1] lec:lec_tx_timeout: lec0 [ 337.718271][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.798135][T11840] syzkaller0: entered promiscuous mode [ 337.817776][T11840] syzkaller0: entered allmulticast mode [ 337.845155][T11840] tipc: Started in network mode [ 337.854991][T11840] tipc: Node identity 3e16e86d610e, cluster identity 4711 [ 337.863084][T11840] tipc: Enabled bearer , priority 0 [ 337.890228][T11836] tipc: Resetting bearer [ 337.946019][T11836] tipc: Disabling bearer [ 338.650670][T11903] syzkaller0: entered promiscuous mode [ 338.662650][T11903] syzkaller0: entered allmulticast mode [ 338.684379][T11903] tipc: Enabled bearer , priority 0 [ 338.708177][T11901] tipc: Resetting bearer [ 338.803553][T11901] tipc: Disabling bearer [ 339.179599][T11929] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 339.220098][T11930] team0 (unregistering): Port device team_slave_1 removed [ 339.550864][T11950] tipc: Enabled bearer , priority 0 [ 342.672133][T11962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.724723][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 342.732909][ C1] lec:lec_tx_timeout: lec0 [ 342.738002][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.867957][T11982] __nla_validate_parse: 41 callbacks suppressed [ 342.867982][T11982] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1579'. [ 342.885388][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 342.886754][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 342.963279][T11987] xt_TCPMSS: Only works on TCP SYN packets [ 343.074327][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 343.111459][T12001] syzkaller0: entered promiscuous mode [ 343.134961][T12001] syzkaller0: entered allmulticast mode [ 343.158064][T12001] tipc: Enabled bearer , priority 0 [ 343.172940][T12000] tipc: Resetting bearer [ 343.266516][T12000] tipc: Disabling bearer [ 343.435010][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 343.445491][T12024] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 343.456894][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 343.677111][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'. [ 343.946605][T12058] netlink: 856 bytes leftover after parsing attributes in process `syz.1.1598'. [ 344.002360][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 344.016293][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 344.029051][T12061] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 344.038696][T12061] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 344.056142][T12064] syzkaller0: entered promiscuous mode [ 344.064817][T12064] syzkaller0: entered allmulticast mode [ 344.087923][T12064] tipc: Enabled bearer , priority 0 [ 344.126247][T12063] tipc: Resetting bearer [ 344.177756][T12063] tipc: Disabling bearer [ 344.441088][T12080] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 344.456411][T12080] bond4 (unregistering): Released all slaves [ 344.657790][T12091] xt_l2tp: v2 doesn't support IP mode [ 344.854080][T12109] syzkaller0: entered promiscuous mode [ 344.862188][T12109] syzkaller0: entered allmulticast mode [ 344.875484][T12109] tipc: Enabled bearer , priority 0 [ 344.885504][T12108] tipc: Resetting bearer [ 344.912339][T12108] tipc: Disabling bearer [ 345.942443][T12180] netlink: 'syz.4.1632': attribute type 15 has an invalid length. [ 345.963280][ T296] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 34048 - 0 [ 345.978028][ T296] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 34048 - 0 [ 345.993785][T12180] netlink: 'syz.4.1632': attribute type 15 has an invalid length. [ 346.006204][ T296] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 34048 - 0 [ 346.028695][ T296] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 34048 - 0 [ 346.208134][T12195] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 346.248982][T12199] veth0_to_bond: entered allmulticast mode [ 346.440997][T12205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.457222][T12205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 34048 - 0 [ 346.468569][T12205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 346.582558][T12205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.610849][T12205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 34048 - 0 [ 346.632584][T12205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 346.900690][T12205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.926662][T12205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 34048 - 0 [ 346.940935][T12205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 347.088179][T12241] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 347.109017][T12205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.139263][T12205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 34048 - 0 [ 347.151324][T12205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 347.268751][T12259] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 347.353728][ T7560] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.368859][ T7560] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 34048 - 0 [ 347.381629][ T7560] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 347.417720][ T7560] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.451156][ T7560] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 34048 - 0 [ 347.467360][ T7560] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 347.487638][T12262] tipc: Enabling of bearer rejected, media not registered [ 347.497646][ T48] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.507238][ T48] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 34048 - 0 [ 347.517978][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 347.548761][ T48] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.560227][ T48] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 34048 - 0 [ 347.569016][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 347.744787][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 347.753089][ C1] lec:lec_tx_timeout: lec0 [ 347.758300][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 347.923420][T12289] __nla_validate_parse: 22 callbacks suppressed [ 347.923686][T12289] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1660'. [ 348.013640][T12293] SET target dimension over the limit! [ 348.374543][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1668'. [ 348.412609][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 348.424509][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1668'. [ 348.434540][T12316] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 348.474879][T12314] can: request_module (can-proto-0) failed. [ 348.515107][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 348.524339][T12316] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1669'. [ 348.536255][T12316] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1669'. [ 348.576433][T12316] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1669'. [ 348.624994][T12316] netlink: 79 bytes leftover after parsing attributes in process `syz.2.1669'. [ 348.831627][T12330] netlink: 'syz.0.1671': attribute type 11 has an invalid length. [ 348.849951][T12332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1673'. [ 349.192379][T12347] syzkaller0: entered promiscuous mode [ 349.200742][T12350] IPVS: set_ctl: invalid protocol: 2 172.20.20.36:20000 [ 349.215109][T12347] syzkaller0: entered allmulticast mode [ 349.690398][T12373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.842062][T12379] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 349.877216][T12379] team1: entered promiscuous mode [ 349.882539][T12379] team1: entered allmulticast mode [ 350.052836][T12390] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 350.107585][T12393] syzkaller0: entered promiscuous mode [ 350.114544][T12393] syzkaller0: entered allmulticast mode [ 350.572889][T12421] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.599488][T12421] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.620987][T12426] netlink: 'syz.0.1700': attribute type 16 has an invalid length. [ 350.654592][T12421] tipc: Resetting bearer [ 350.662899][T12421] tipc: Resetting bearer [ 350.687865][T12421] tipc: Resetting bearer [ 350.696714][T12421] tipc: Resetting bearer [ 350.742151][ T12] tipc: Resetting bearer [ 350.794007][T12433] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 350.877279][T12433] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.910457][T12439] bond6: (slave gretap1): making interface the new active one [ 350.920941][T12439] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 350.936813][T12441] syzkaller0: entered promiscuous mode [ 350.942504][T12441] syzkaller0: entered allmulticast mode [ 351.057099][T12448] netlink: 'syz.0.1707': attribute type 3 has an invalid length. [ 351.213770][T12450] udevd[12450]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 351.232717][T12454] netlink: 'syz.4.1708': attribute type 21 has an invalid length. [ 351.289975][T12456] geneve2: entered promiscuous mode [ 351.308029][T12450] udevd[12450]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 351.318362][T12456] geneve2: entered allmulticast mode [ 351.332667][T12456] SET target dimension over the limit! [ 351.340961][ T7560] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 351.361826][ T7560] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 351.394846][ T7560] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 351.403739][ T7560] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 351.869870][T12488] sctp: [Deprecated]: syz.2.1719 (pid 12488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.869870][T12488] Use struct sctp_sack_info instead [ 352.000018][T12498] syzkaller0: entered promiscuous mode [ 352.010482][T12498] syzkaller0: entered allmulticast mode [ 352.108259][ T29] audit: type=1800 audit(1774890817.114:5): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1723" name="memory.events" dev="tmpfs" ino=1884 res=0 errno=0 [ 352.238383][T12517] netlink: 'syz.1.1729': attribute type 13 has an invalid length. [ 352.297690][T12517] macvtap0: entered allmulticast mode [ 352.328226][T12517] macvtap0: refused to change device tx_queue_len [ 352.527956][T12534] 8021q: VLANs not supported on ip6_vti0 [ 352.746964][T12555] F: renamed from gre0 (while UP) [ 352.757876][T12556] openvswitch: netlink: EtherType 50a is less than min 600 [ 352.764772][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 352.773840][ C1] lec:lec_tx_timeout: lec0 [ 352.778686][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 352.792355][T12555] F: entered allmulticast mode [ 352.850172][T12560] ip6tnl3: entered allmulticast mode [ 352.891016][T12564] veth1_to_bond: entered allmulticast mode [ 352.900877][T12564] veth1_to_bond: left allmulticast mode [ 352.992179][T12572] netlink: 'syz.4.1744': attribute type 10 has an invalid length. [ 353.093024][T12576] __nla_validate_parse: 46 callbacks suppressed [ 353.093050][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1743'. [ 353.131284][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1743'. [ 353.141690][T12573] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 353.188827][T12573] bond8 (unregistering): Released all slaves [ 353.416063][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.436062][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.456309][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.469369][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.479443][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.494859][T12594] netlink: 'syz.2.1751': attribute type 10 has an invalid length. [ 353.677316][T12604] xfrm1: entered allmulticast mode [ 353.696879][T12604] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 353.980035][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 353.982918][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 354.033012][T12622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.516713][T12587] chnl_net:caif_netlink_parms(): no params data found [ 354.636040][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.643434][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.650978][T12587] bridge_slave_0: entered allmulticast mode [ 354.659709][T12587] bridge_slave_0: entered promiscuous mode [ 354.669770][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.677608][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.685257][T12587] bridge_slave_1: entered allmulticast mode [ 354.693886][T12587] bridge_slave_1: entered promiscuous mode [ 354.765386][T12587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.778815][T12587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.812042][T12587] team0: Port device team_slave_0 added [ 354.824201][T12587] team0: Port device team_slave_1 added [ 354.852853][T12587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.860264][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.886650][T12587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.899644][T12587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.907080][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.947836][T12587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.990747][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 355.023597][T12587] hsr_slave_0: entered promiscuous mode [ 355.030983][T12587] hsr_slave_1: entered promiscuous mode [ 355.038410][T12587] debugfs: 'hsr0' already exists in 'hsr' [ 355.044341][T12587] Cannot create hsr debugfs directory [ 355.074428][T12670] syzkaller0: entered promiscuous mode [ 355.080908][T12670] syzkaller0: entered allmulticast mode [ 355.554956][ T51] Bluetooth: hci6: command tx timeout [ 357.277296][T12639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.330759][T12587] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.432680][T12587] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.479348][T12587] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.521566][T12587] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 357.538622][T12684] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1771'. [ 357.644736][ T51] Bluetooth: hci6: command tx timeout [ 357.794753][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 357.802891][ C1] lec:lec_tx_timeout: lec0 [ 357.808267][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 357.900505][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'. [ 357.998383][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'. [ 358.031629][T12587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.140442][T12587] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.154602][T12726] syzkaller0: entered promiscuous mode [ 358.177930][T12726] syzkaller0: entered allmulticast mode [ 358.193270][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.200700][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.222320][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.229772][ T7560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.539559][T12587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.882501][T12587] veth0_vlan: entered promiscuous mode [ 358.896086][T12587] veth1_vlan: entered promiscuous mode [ 358.933602][T12587] veth0_macvtap: entered promiscuous mode [ 358.943340][T12587] veth1_macvtap: entered promiscuous mode [ 358.966270][T12587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.980914][T12587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.998414][ T7563] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.008499][ T7563] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.023524][ T7563] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.033454][ T7563] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.715133][ T5840] Bluetooth: hci6: command tx timeout [ 361.004808][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 361.053919][T12731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.078231][T12749] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 361.247277][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.279011][T12770] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1784'. [ 361.279157][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.348527][T12773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1785'. [ 361.426910][ T7563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.427663][T12778] 8021q: VLANs not supported on sit0 [ 361.454755][ T7563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.794918][ T51] Bluetooth: hci6: command tx timeout [ 361.824311][T12787] bond5: option mode: invalid value (133) [ 361.831236][T12798] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1745'. [ 361.841776][T12799] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1745'. [ 361.853138][T12787] bond5 (unregistering): Released all slaves [ 361.883979][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1745'. [ 361.987651][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 362.064624][T12802] syzkaller0: entered promiscuous mode [ 362.078811][T12802] syzkaller0: entered allmulticast mode [ 362.101825][T12802] tipc: Enabled bearer , priority 0 [ 362.109250][T12809] netlink: 'syz.6.1795': attribute type 23 has an invalid length. [ 362.123253][T12801] tipc: Resetting bearer [ 362.127854][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 362.152201][T12809] netlink: 'syz.6.1795': attribute type 11 has an invalid length. [ 362.162396][T12801] tipc: Disabling bearer [ 362.386349][T12820] ip6t_srh: unknown srh invflags 4000 [ 362.562153][T12831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1802'. [ 362.605250][T12831] netlink: 32448 bytes leftover after parsing attributes in process `syz.1.1802'. [ 362.668400][T12831] netlink: 'syz.1.1802': attribute type 9 has an invalid length. [ 362.710011][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 362.721003][T12831] netlink: 'syz.1.1802': attribute type 9 has an invalid length. [ 362.815000][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 362.823477][ C1] lec:lec_tx_timeout: lec0 [ 362.828664][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 362.903415][T12850] netlink: 'syz.0.1808': attribute type 2 has an invalid length. [ 362.973685][T12850] 9: entered promiscuous mode [ 363.028750][T12854] syzkaller0: entered promiscuous mode [ 363.040118][T12854] syzkaller0: entered allmulticast mode [ 363.067101][T12854] tipc: Enabled bearer , priority 0 [ 363.119422][T12851] tipc: Resetting bearer [ 363.259734][T12851] tipc: Disabling bearer [ 363.992699][T12900] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 364.134928][T12906] tipc: Resetting bearer [ 364.143131][T12906] tipc: Enabling of bearer rejected, already enabled [ 364.340960][T12916] netlink: 'syz.1.1829': attribute type 21 has an invalid length. [ 364.359406][T12916] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.386729][T12916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.394116][T12916] IPv6: NLM_F_CREATE should be set when creating new route [ 364.401889][T12916] IPv6: NLM_F_CREATE should be set when creating new route [ 364.409220][T12916] IPv6: NLM_F_CREATE should be set when creating new route [ 364.519912][T12919] syzkaller0: entered promiscuous mode [ 364.549031][T12919] syzkaller0: entered allmulticast mode [ 365.089127][T12955] syz.1.1839: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 365.107173][T12955] CPU: 1 UID: 0 PID: 12955 Comm: syz.1.1839 Not tainted syzkaller #0 PREEMPT(full) [ 365.107210][T12955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.107224][T12955] Call Trace: [ 365.107233][T12955] [ 365.107242][T12955] dump_stack_lvl+0xe8/0x150 [ 365.107282][T12955] warn_alloc+0x249/0x340 [ 365.107310][T12955] ? stack_trace_save+0xa9/0x100 [ 365.107338][T12955] ? __pfx_warn_alloc+0x10/0x10 [ 365.107371][T12955] ? kasan_save_track+0x4f/0x80 [ 365.107393][T12955] ? kasan_save_track+0x3e/0x80 [ 365.107415][T12955] ? __kasan_kmalloc+0x93/0xb0 [ 365.107440][T12955] ? __kmalloc_cache_noprof+0x31c/0x660 [ 365.107465][T12955] ? xskq_create+0x56/0x170 [ 365.107488][T12955] ? xsk_setsockopt+0x54c/0x990 [ 365.107520][T12955] ? do_sock_setsockopt+0x17c/0x1b0 [ 365.107542][T12955] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 365.107564][T12955] ? do_syscall_64+0x14d/0xf80 [ 365.107606][T12955] __vmalloc_node_range_noprof+0x132/0x1730 [ 365.107669][T12955] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 365.107701][T12955] ? __kasan_kmalloc+0x93/0xb0 [ 365.107733][T12955] vmalloc_user_noprof+0xad/0xe0 [ 365.107757][T12955] ? xskq_create+0xbf/0x170 [ 365.107780][T12955] xskq_create+0xbf/0x170 [ 365.107805][T12955] xsk_init_queue+0x8a/0xe0 [ 365.107830][T12955] xsk_setsockopt+0x54c/0x990 [ 365.107866][T12955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 365.107898][T12955] ? __pfx_aa_sk_perm+0x10/0x10 [ 365.107934][T12955] ? aa_sock_opt_perm+0xff/0x1a0 [ 365.107970][T12955] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 365.107993][T12955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 365.108025][T12955] do_sock_setsockopt+0x17c/0x1b0 [ 365.108051][T12955] __x64_sys_setsockopt+0x13d/0x1b0 [ 365.108076][T12955] do_syscall_64+0x14d/0xf80 [ 365.108120][T12955] ? trace_irq_disable+0x3b/0x150 [ 365.108137][T12955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.108159][T12955] ? clear_bhb_loop+0x40/0x90 [ 365.108188][T12955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.108206][T12955] RIP: 0033:0x7f2d9879c819 [ 365.108228][T12955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.108247][T12955] RSP: 002b:00007f2d99728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 365.108271][T12955] RAX: ffffffffffffffda RBX: 00007f2d98a15fa0 RCX: 00007f2d9879c819 [ 365.108288][T12955] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 365.108301][T12955] RBP: 00007f2d98832c91 R08: 0000000000000004 R09: 0000000000000000 [ 365.108314][T12955] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.108328][T12955] R13: 00007f2d98a16038 R14: 00007f2d98a15fa0 R15: 00007ffe767f5978 [ 365.108364][T12955] [ 365.108535][T12955] Mem-Info: [ 365.256061][T12953] syzkaller0: entered promiscuous mode [ 365.280355][T12955] active_anon:6876 inactive_anon:0 isolated_anon:0 [ 365.280355][T12955] active_file:2954 inactive_file:40005 isolated_file:0 [ 365.280355][T12955] unevictable:768 dirty:118 writeback:0 [ 365.280355][T12955] slab_reclaimable:12065 slab_unreclaimable:110870 [ 365.280355][T12955] mapped:41574 shmem:1388 pagetables:1582 [ 365.280355][T12955] sec_pagetables:0 bounce:0 [ 365.280355][T12955] kernel_misc_reclaimable:0 [ 365.280355][T12955] free:1286745 free_pcp:12427 free_cma:0 [ 365.288390][T12953] syzkaller0: entered allmulticast mode [ 365.290229][T12955] Node 0 active_anon:27504kB inactive_anon:0kB active_file:11816kB inactive_file:159824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:166296kB dirty:472kB writeback:0kB shmem:4016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14540kB pagetables:6204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 365.303500][T12953] tipc: Started in network mode [ 365.364912][T12955] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 365.371392][T12953] tipc: Node identity 0abbefd1aad6, cluster identity 4711 [ 365.385096][T12955] Node 0 [ 365.388202][T12953] tipc: Enabled bearer , priority 0 [ 365.392272][T12955] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.584712][T12955] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 365.590568][T12955] Node 0 DMA32 free:1192832kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35804kB inactive_anon:0kB active_file:11816kB inactive_file:159824kB unevictable:1536kB writepending:372kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:40980kB local_pcp:14176kB free_cma:0kB [ 365.627654][T12952] tipc: Resetting bearer [ 365.654781][T12955] lowmem_reserve[]: 0 0 0 0 0 [ 365.659608][T12955] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 365.691120][T12952] tipc: Disabling bearer [ 365.697759][T12955] lowmem_reserve[]: 0 0 0 0 0 [ 365.723031][T12955] Node 1 Normal free:3938624kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 365.762410][T12955] lowmem_reserve[]: 0 0 0 0 0 [ 365.768433][T12955] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 365.781775][T12955] Node 0 DMA32: 1*4kB (E) 1097*8kB (UME) 681*16kB (UE) 6*32kB (ME) 62*64kB (UE) 92*128kB (UME) 97*256kB (UM) 112*512kB (UM) 88*1024kB (UME) 53*2048kB (UME) 213*4096kB (UM) = 1188892kB [ 365.809603][T12955] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 365.810628][T12969] netlink: 'syz.4.1843': attribute type 4 has an invalid length. [ 365.824081][T12955] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 3*2048kB (U) 959*4096kB (M) = 3938624kB [ 365.848239][T12955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.893364][T12955] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.903073][T12955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.949938][T12955] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.994462][T12955] 44319 total pagecache pages [ 366.014971][T12955] 0 pages in swap cache [ 366.019329][T12955] Free swap = 124996kB [ 366.034365][T12955] Total swap = 124996kB [ 366.055414][T12955] 2097051 pages RAM [ 366.060978][T12955] 0 pages HighMem/MovableOnly [ 366.076087][T12981] x_tables: duplicate underflow at hook 2 [ 366.079756][T12955] 427052 pages reserved [ 366.123134][T12955] 0 pages cma reserved [ 366.382849][T12999] __nla_validate_parse: 19 callbacks suppressed [ 366.382875][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1852'. [ 366.385544][T12998] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 366.541901][T13001] bond8: (slave gretap4): making interface the new active one [ 366.570729][T13001] bond8: (slave gretap4): Enslaving as an active interface with an up link [ 366.808069][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'. [ 366.872166][T13008] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 366.910930][T13008] bond5 (unregistering): Released all slaves [ 367.066720][T13011] syzkaller0: entered promiscuous mode [ 367.099315][T13011] syzkaller0: entered allmulticast mode [ 367.135713][T13011] tipc: Enabled bearer , priority 0 [ 367.156886][T13010] tipc: Resetting bearer [ 367.216815][T13010] tipc: Disabling bearer [ 367.220144][T13036] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 367.235383][T13036] IPVS: ip_vs_add_dest(): server weight less than zero [ 367.257947][T13036] IPVS: length: 136 != 8 [ 367.272178][T13036] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 367.432849][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1863'. [ 367.527286][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'. [ 367.844736][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 367.852853][ C1] lec:lec_tx_timeout: lec0 [ 367.857654][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 367.932817][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 367.947169][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 367.978282][T13078] tipc: Enabled bearer , priority 0 [ 368.063124][T13074] syzkaller0: entered promiscuous mode [ 368.074937][T13074] syzkaller0: entered allmulticast mode [ 368.099085][T13074] tipc: Enabled bearer , priority 0 [ 368.146960][T13077] tipc: Disabling bearer [ 368.162120][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1876'. [ 368.199628][T13073] tipc: Resetting bearer [ 368.312566][T13073] tipc: Disabling bearer [ 368.524379][T13099] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 368.978976][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1886'. [ 369.046205][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'. [ 369.306501][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 369.620594][T13153] s5ÿÿø: renamed from gre0 (while UP) [ 369.837142][T13164] SET target dimension over the limit! [ 369.982992][T13170] bond0: entered allmulticast mode [ 369.990682][T13170] bond_slave_0: entered allmulticast mode [ 370.001709][T13170] bond_slave_1: entered allmulticast mode [ 370.027538][T13170] batadv0: entered allmulticast mode [ 370.330715][T13196] wireguard1: entered promiscuous mode [ 370.352510][T13196] wireguard1: entered allmulticast mode [ 370.425166][T13195] tipc: Enabling of bearer rejected, failed to enable media [ 370.609458][T13216] syzkaller0: entered promiscuous mode [ 370.629591][T13216] syzkaller0: entered allmulticast mode [ 370.713427][T13221] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.945847][T13234] netlink: 'syz.6.1921': attribute type 11 has an invalid length. [ 370.975010][T13223] bond9: entered promiscuous mode [ 370.980360][T13223] bond9: entered allmulticast mode [ 370.988240][T13223] 8021q: adding VLAN 0 to HW filter on device bond9 [ 371.000857][T13223] team0: Port device bond9 added [ 371.181828][T13223] vxcan1: entered promiscuous mode [ 371.468044][T13260] netlink: 'syz.2.1929': attribute type 10 has an invalid length. [ 371.919366][T13272] xt_hashlimit: size too large, truncated to 1048576 [ 372.069141][T13281] syzkaller1: entered promiscuous mode [ 372.084752][T13281] syzkaller1: entered allmulticast mode [ 372.301092][T13297] __nla_validate_parse: 13 callbacks suppressed [ 372.301118][T13297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1935'. [ 372.495299][T13302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.335742][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 373.636217][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 373.644617][ C1] lec:lec_tx_timeout: lec0 [ 373.649620][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 373.879248][T13370] syzkaller0: entered promiscuous mode [ 373.885677][T13370] syzkaller0: entered allmulticast mode [ 374.255513][T13378] netlink: 'syz.6.1958': attribute type 12 has an invalid length. [ 374.263561][T13378] netlink: 'syz.6.1958': attribute type 29 has an invalid length. [ 374.273099][T13378] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1958'. [ 374.283518][T13378] netlink: 'syz.6.1958': attribute type 2 has an invalid length. [ 374.291856][T13378] netlink: 23 bytes leftover after parsing attributes in process `syz.6.1958'. [ 375.161835][T13385] syzkaller0: entered promiscuous mode [ 375.167945][T13385] syzkaller0: entered allmulticast mode [ 376.099606][T13349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.546744][T13407] netlink: 'syz.2.1968': attribute type 13 has an invalid length. [ 377.583767][T13407] netlink: 'syz.2.1968': attribute type 58 has an invalid length. [ 377.609197][T13407] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1968'. [ 377.768795][T13414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1972'. [ 377.842852][T13414] vxcan3: entered promiscuous mode [ 378.031332][T13435] syzkaller0: entered promiscuous mode [ 378.041650][T13435] syzkaller0: entered allmulticast mode [ 378.283294][T13447] syzkaller0: entered promiscuous mode [ 378.327421][T13447] syzkaller0: entered allmulticast mode [ 378.394051][T13456] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 378.540870][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'. [ 378.546197][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'. [ 378.633388][T13466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.684835][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 378.692898][ C1] lec:lec_tx_timeout: lec0 [ 378.697811][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.712835][T13474] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1990'. [ 378.784018][T13480] : left promiscuous mode [ 379.180369][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 379.485766][T13528] netlink: 'syz.4.2008': attribute type 21 has an invalid length. [ 379.497981][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 379.512775][T13529] netlink: 'syz.0.2006': attribute type 1 has an invalid length. [ 379.522665][T13529] netlink: 'syz.0.2006': attribute type 2 has an invalid length. [ 379.585774][T13534] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2009'. [ 379.772281][T13548] netlink: 520 bytes leftover after parsing attributes in process `syz.4.2012'. [ 379.810224][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2011'. [ 379.849107][ T35] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.858345][ T35] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.880490][ T35] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.890843][ T35] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.139903][T13563] syzkaller0: entered promiscuous mode [ 380.157219][T13563] syzkaller0: entered allmulticast mode [ 380.558354][T13580] syzkaller0: entered promiscuous mode [ 380.587063][T13580] syzkaller0: entered allmulticast mode [ 383.279647][T13569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.498833][T13601] block nbd1: not configured, cannot reconfigure [ 383.645148][T13602] syzkaller0: entered promiscuous mode [ 383.650890][T13602] syzkaller0: entered allmulticast mode [ 383.704710][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 383.713044][ C1] lec:lec_tx_timeout: lec0 [ 383.717988][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.238921][T13644] __nla_validate_parse: 2 callbacks suppressed [ 386.238949][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2036'. [ 386.263560][T13653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.275124][T13648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2037'. [ 386.289326][T13656] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 386.410335][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2038'. [ 386.431408][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'. [ 386.457566][T13663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2038'. [ 386.499935][T13658] bond7: (slave geneve4): making interface the new active one [ 386.511095][T13658] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 386.552879][T13656] 8021q: adding VLAN 0 to HW filter on device bond7 [ 386.584614][ T7558] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 386.748113][ T7558] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 386.901244][ T7558] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 386.934260][ T7558] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 386.996942][T13690] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 387.403562][T13702] tipc: Enabled bearer , priority 0 [ 387.515515][T13714] netlink: 'syz.1.2057': attribute type 11 has an invalid length. [ 387.523898][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2057'. [ 387.592209][T13702] syzkaller0: entered promiscuous mode [ 387.603626][T13720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2058'. [ 387.609419][T13702] syzkaller0: entered allmulticast mode [ 387.622229][T13720] ip6t_srh: unknown srh match flags 4000 [ 387.637491][T13702] tipc: Resetting bearer [ 387.887476][T13701] tipc: Resetting bearer [ 388.187992][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 388.234260][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 388.247407][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 388.734701][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 388.742847][ C1] lec:lec_tx_timeout: lec0 [ 388.748279][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 390.553607][T13701] tipc: Disabling bearer [ 390.564174][ T6532] tipc: Node number set to 1332548913 [ 390.770361][T13776] netlink: 'syz.2.2076': attribute type 16 has an invalid length. [ 392.102418][T13824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 393.691271][T13842] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 393.754746][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 393.763252][ C1] lec:lec_tx_timeout: lec0 [ 393.767961][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 393.783195][T13850] __nla_validate_parse: 5 callbacks suppressed [ 393.783219][T13850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2095'. [ 393.804912][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 394.075635][T13875] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2102'. [ 395.159727][T13910] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2110'. [ 395.617208][T13923] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2114'. [ 395.958380][T13944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.965843][T13944] IPv6: NLM_F_CREATE should be set when creating new route [ 396.064832][T13937] lo: entered allmulticast mode [ 396.070370][T13937] tunl0: entered allmulticast mode [ 396.100176][T13937] bridge0: port 1(gretap0) entered disabled state [ 396.117483][T13937] erspan0: entered allmulticast mode [ 396.140711][T13937] ip_vti0: entered allmulticast mode [ 396.166759][T13937] ip6_vti0: entered allmulticast mode [ 396.185888][T13937] sit0: entered allmulticast mode [ 396.207652][T13937] ip6tnl0: entered allmulticast mode [ 396.236961][T13937] ip6gre0: entered allmulticast mode [ 396.295148][T13937] ip6gretap0: entered allmulticast mode [ 396.304080][T13937] bridge0: entered allmulticast mode [ 396.363860][T13937] bond0: entered allmulticast mode [ 396.372179][T13937] team0: entered allmulticast mode [ 396.381468][T13937] nlmon0: entered allmulticast mode [ 396.388942][T13937] caif0: entered allmulticast mode [ 396.422538][T13937] veth1_macvtap: left promiscuous mode [ 396.447735][T13937] macvlan2: entered allmulticast mode [ 396.472524][T13937] geneve2: left promiscuous mode [ 396.500804][T13937] bridge2: entered allmulticast mode [ 396.528098][T13937] ip6erspan0: entered allmulticast mode [ 396.552736][T13937] sit1: entered allmulticast mode [ 396.580321][T13937] : entered allmulticast mode [ 396.611516][T13937] gtp0: entered allmulticast mode [ 396.628303][T13937] bond1: entered allmulticast mode [ 396.637366][T13937] vxlan0: entered allmulticast mode [ 396.647032][T13937] vlan2: entered allmulticast mode [ 396.675645][T13937] bond2: left promiscuous mode [ 396.700968][T13937] ip6tnl1: entered allmulticast mode [ 396.729253][T13937] veth2: entered allmulticast mode [ 396.748198][T13937] veth3: entered allmulticast mode [ 396.762553][T13937] vþ: entered allmulticast mode [ 396.790050][T13937] bond3: entered allmulticast mode [ 396.805924][T13937] geneve3: entered allmulticast mode [ 396.828827][T13937] bridge3: entered allmulticast mode [ 396.872577][T13937] ip6gre1: entered allmulticast mode [ 396.895790][T13984] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2125'. [ 396.912958][T13937] bridge4: entered allmulticast mode [ 396.942742][T13937] sit2: entered allmulticast mode [ 396.990096][T13937] macvlan3: entered allmulticast mode [ 397.011480][T13937] macvlan4: entered allmulticast mode [ 397.028507][T13937] bridge5: entered allmulticast mode [ 397.044511][T13937] sit3: entered allmulticast mode [ 397.072079][T13937] vxlan1: entered allmulticast mode [ 397.079566][T13937] netdevsim netdevsim4 eth0: entered allmulticast mode [ 397.086880][T13937] netdevsim netdevsim4 eth1: entered allmulticast mode [ 397.093975][T13937] netdevsim netdevsim4 eth2: entered allmulticast mode [ 397.101539][T13937] netdevsim netdevsim4 eth3: entered allmulticast mode [ 397.109247][T13937] bridge6: entered allmulticast mode [ 397.120640][T13937] bond4: entered allmulticast mode [ 397.126378][T13937] bond5: entered allmulticast mode [ 397.131946][T13937] team1: left promiscuous mode [ 397.137162][T13937] wlan0.2: entered allmulticast mode [ 397.143827][T13937] bond6: entered allmulticast mode [ 397.149465][T13937] gretap1: entered allmulticast mode [ 397.161111][T13937] bridge7: entered allmulticast mode [ 397.168007][T13937] bridge8: entered allmulticast mode [ 397.177696][T13937] vxlan2: entered allmulticast mode [ 397.185795][T13937] syztnl0: entered allmulticast mode [ 397.192269][T13937] bond7: entered allmulticast mode [ 397.199462][T13937] geneve4: entered allmulticast mode [ 397.220250][ T7563] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.234914][ T7563] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 34048 - 0 [ 397.243659][ T7563] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 397.253259][ T7563] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.256608][T13957] delete_channel: no stack [ 397.269489][ T7563] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.283380][ T7563] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 34048 - 0 [ 397.294378][ T7563] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 397.306849][ T7563] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.429802][T13974] syzkaller0: entered promiscuous mode [ 397.437778][T13974] syzkaller0: entered allmulticast mode [ 398.779545][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 398.787813][ C1] lec:lec_tx_timeout: lec0 [ 398.792534][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.496796][ T7563] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.506320][ T7563] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 34048 - 0 [ 399.515381][ T7563] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 399.524040][ T7563] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 399.533373][ T7563] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.543834][ T7563] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 34048 - 0 [ 399.552666][ T7563] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 399.561156][ T7563] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 399.940110][T14030] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2137'. [ 400.182111][T14047] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 400.379462][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 400.598780][T14059] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2144'. [ 400.852554][T14077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.045707][T14094] x_tables: ip6_tables: LED.0 target: invalid size 40 (kernel) != (user) 216 [ 401.046031][T14092] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2152'. [ 401.200836][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 401.340224][T14109] openvswitch: netlink: Flow key attr not present in new flow. [ 401.506500][T14121] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.2161'. [ 401.516348][T14122] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.2161'. [ 401.666404][T14127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2163'. [ 401.700643][T14129] netlink: 'syz.4.2164': attribute type 51 has an invalid length. [ 401.755214][T14127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2163'. [ 401.875339][T14137] syzkaller0: entered promiscuous mode [ 401.880893][T14137] syzkaller0: entered allmulticast mode [ 401.933326][T14137] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 402.068266][T14141] syzkaller1: entered promiscuous mode [ 402.073909][T14141] syzkaller1: entered allmulticast mode [ 402.179775][T14154] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2172'. [ 402.195707][T14149] atomic_op ffff888030eaf998 conn xmit_atomic 0000000000000000 [ 402.446878][T14168] netlink: 'syz.2.2175': attribute type 21 has an invalid length. [ 402.472701][T14168] netlink: 'syz.2.2175': attribute type 21 has an invalid length. [ 403.226855][T14218] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 403.657384][T14237] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 403.800381][T14246] sctp: [Deprecated]: syz.1.2192 (pid 14246) Use of int in max_burst socket option deprecated. [ 403.800381][T14246] Use struct sctp_assoc_value instead [ 403.817247][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 403.817285][ C1] lec:lec_tx_timeout: lec0 [ 403.825637][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 404.093247][T14263] veth0_vlan: left promiscuous mode [ 404.236626][T14273] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.208558][T14323] __nla_validate_parse: 7 callbacks suppressed [ 405.208584][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2216'. [ 405.300335][T14325] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.521556][T14334] netlink: 'syz.0.2221': attribute type 9 has an invalid length. [ 405.553769][T14334] netlink: 'syz.0.2221': attribute type 11 has an invalid length. [ 405.595506][T14338] 8021q: VLANs not supported on ip6_vti0 [ 405.615851][T14334] netlink: 'syz.0.2221': attribute type 12 has an invalid length. [ 405.638844][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2221'. [ 405.651576][T14334] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2221'. [ 405.685386][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 405.749020][T14349] syzkaller0: entered promiscuous mode [ 405.754599][T14349] syzkaller0: entered allmulticast mode [ 405.783328][T14345] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2221'. [ 405.814493][T14352] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.2226'. [ 405.863952][T14355] netlink: 'syz.6.2228': attribute type 1 has an invalid length. [ 405.926034][T14354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2227'. [ 406.006887][T14355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.059082][T14360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.086323][T14360] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 406.130856][T14360] bond1: (slave vcan1): Error -95 calling set_mac_address [ 406.247257][T14367] bond1: (slave gretap1): making interface the new active one [ 406.265213][T14367] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 406.304176][T14355] macvlan2: entered promiscuous mode [ 406.315461][T14385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2234'. [ 406.315792][T14355] macvlan2: entered allmulticast mode [ 406.326206][T14383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.357381][T14355] bond1: entered promiscuous mode [ 406.374832][T14355] gretap1: entered promiscuous mode [ 406.381897][T14355] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 406.399818][T14355] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 406.412795][T14355] bond1: left promiscuous mode [ 406.419222][T14355] gretap1: left promiscuous mode [ 406.520039][T14397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2237'. [ 406.607000][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 406.680369][T14403] netlink: 'syz.0.2238': attribute type 10 has an invalid length. [ 406.680581][T14399] vlan4: entered allmulticast mode [ 406.697869][T14399] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 406.707050][T14401] tc_dump_action: action bad kind [ 407.297844][T14439] xt_nat: multiple ranges no longer supported [ 407.489599][T14455] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 408.072110][T14486] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 408.085248][T14489] netlink: 'syz.1.2264': attribute type 1 has an invalid length. [ 408.160708][T14486] bond4 (unregistering): Released all slaves [ 408.472926][T14497] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.535574][T14497] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.644072][T14502] bond10: option all_slaves_active: invalid value (222) [ 408.656022][T14502] bond10 (unregistering): Released all slaves [ 408.762616][T14497] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.773709][T14497] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.834771][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 408.842928][ C1] lec:lec_tx_timeout: lec0 [ 408.848076][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 408.950502][T14497] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.962244][T14497] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.380195][T14550] netlink: 'syz.2.2280': attribute type 83 has an invalid length. [ 409.435351][ T296] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.471818][ T296] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.553817][ T296] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.580024][ T296] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.672131][ T296] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.690482][ T296] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.713448][ T296] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.722940][ T296] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.898516][T14568] veth0: entered promiscuous mode [ 410.070472][T14574] syzkaller0: entered promiscuous mode [ 410.098553][T14574] syzkaller0: entered allmulticast mode [ 410.245927][T14567] veth0: left promiscuous mode [ 410.299697][T14584] openvswitch: netlink: IPv6 tunnel dst address is zero [ 410.561124][T14593] syzkaller0: entered promiscuous mode [ 410.574806][T14593] syzkaller0: entered allmulticast mode [ 410.829984][T14604] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 410.986434][T14614] __nla_validate_parse: 12 callbacks suppressed [ 410.986459][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2295'. [ 411.201796][T14622] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2297'. [ 411.277905][T14622] netlink: 'syz.2.2297': attribute type 2 has an invalid length. [ 413.854833][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 413.862889][ C1] lec:lec_tx_timeout: lec0 [ 413.867813][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.714964][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 419.723022][ C1] lec:lec_tx_timeout: lec0 [ 419.727747][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.734830][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.742980][ C1] lec:lec_tx_timeout: lec0 [ 424.748265][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 429.754736][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 429.762777][ C1] lec:lec_tx_timeout: lec0 [ 429.767722][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 430.980680][T14681] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2304'. [ 431.025486][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'. [ 431.200988][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2307'. [ 431.294198][T14706] Cannot find set identified by id 65534 to match [ 431.363762][T14713] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2311'. [ 431.396532][T14713] xt_policy: neither incoming nor outgoing policy selected [ 431.529069][T14717] syzkaller0: entered promiscuous mode [ 431.538311][T14717] syzkaller0: entered allmulticast mode [ 431.542190][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 432.006851][T14744] netlink: 328 bytes leftover after parsing attributes in process `syz.2.2319'. [ 432.033203][T14745] syzkaller0: entered promiscuous mode [ 432.045074][T14745] syzkaller0: entered allmulticast mode [ 432.131379][T14741] sctp: [Deprecated]: syz.1.2318 (pid 14741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.131379][T14741] Use struct sctp_sack_info instead [ 432.245407][T14757] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2324'. [ 432.408127][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'. [ 432.450059][T14759] sctp: [Deprecated]: syz.0.2325 (pid 14759) Use of int in max_burst socket option. [ 432.450059][T14759] Use struct sctp_assoc_value instead [ 432.500885][T14760] sctp: [Deprecated]: syz.0.2325 (pid 14760) Use of int in max_burst socket option. [ 432.500885][T14760] Use struct sctp_assoc_value instead [ 432.766434][T14782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2330'. [ 432.838396][T14785] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2332'. [ 433.010530][T14792] openvswitch: netlink: Missing valid actions attribute. [ 433.036509][T14792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.261322][T14850] netlink: Unknown conntrack attr (type=2304, max=9) [ 434.353159][T14861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.399676][T14863] netlink: 'syz.0.2355': attribute type 1 has an invalid length. [ 434.655112][T14860] bond5: (slave geneve3): making interface the new active one [ 434.682485][T14860] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 434.705302][ T13] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 434.743361][ T13] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 434.773374][ T13] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 434.784785][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 434.792925][ C1] lec:lec_tx_timeout: lec0 [ 434.798118][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 434.819871][ T13] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 434.920356][T14889] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 436.062729][T14951] netlink: 'syz.6.2381': attribute type 5 has an invalid length. [ 436.277939][T14967] netlink: 'syz.2.2383': attribute type 1 has an invalid length. [ 436.329881][T14969] __nla_validate_parse: 9 callbacks suppressed [ 436.329906][T14969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2383'. [ 436.358736][T14967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.511204][T14974] netlink: 'syz.6.2385': attribute type 2 has an invalid length. [ 436.766087][T14982] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2388'. [ 436.784164][T14981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2387'. [ 436.952260][T15003] netlink: 'syz.4.2394': attribute type 10 has an invalid length. [ 436.961626][T15003] bridge0: left allmulticast mode [ 436.968098][T15002] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2393'. [ 436.973329][T15003] bridge0: entered allmulticast mode [ 436.986690][T15003] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 437.243277][T15022] netlink: 'syz.4.2399': attribute type 10 has an invalid length. [ 437.261951][T15022] vxcan1: left allmulticast mode [ 437.280818][T15022] vxcan1: entered allmulticast mode [ 437.297033][T15022] team0: Port device vxcan1 added [ 437.407508][T15031] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 437.437903][T15031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2402'. [ 437.706868][T15049] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2404'. [ 437.797243][ T5840] Bluetooth: hci5: command 0x0405 tx timeout [ 438.360740][T15082] syzkaller0: entered promiscuous mode [ 438.400847][T15082] syzkaller0: entered allmulticast mode [ 438.421617][T15089] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 438.441518][T15089] bond3: (slave lo): Enslaving as an active interface with an up link [ 438.456538][T15089] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 438.559330][T15092] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 438.574535][T15092] bond2 (unregistering): Released all slaves [ 438.589732][T15100] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2421'. [ 438.612371][T15102] netlink: 'syz.0.2422': attribute type 1 has an invalid length. [ 438.697356][T15105] xt_recent: Unsupported userspace flags (000000b1) [ 438.704842][T15105] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2421'. [ 438.870156][T15118] netlink: 'syz.0.2424': attribute type 58 has an invalid length. [ 438.893637][T15118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2424'. [ 439.144520][T15125] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2429'. [ 439.160249][T15131] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.172376][T15130] ip6tnl3: entered promiscuous mode [ 439.352484][T15137] bond2: invalid ARP target 0.0.0.0 specified for addition [ 439.360737][T15137] bond2: option arp_ip_target: invalid value (0) [ 439.373542][T15137] bond2 (unregistering): Released all slaves [ 439.804943][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 439.813129][ C1] lec:lec_tx_timeout: lec0 [ 439.818325][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 439.863007][T15165] nbd: must specify a device to reconfigure [ 439.921616][T15168] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 440.186147][T15183] syzkaller0: entered promiscuous mode [ 440.208938][T15183] syzkaller0: entered allmulticast mode [ 440.368823][T15191] netlink: 'syz.6.2450': attribute type 3 has an invalid length. [ 440.390134][T15185] bond10: option mode: invalid value (255) [ 440.398616][T15185] bond10 (unregistering): Released all slaves [ 441.046221][T15227] syzkaller0: entered promiscuous mode [ 441.052131][T15227] syzkaller0: entered allmulticast mode [ 441.138377][T15229] netlink: 'syz.6.2465': attribute type 1 has an invalid length. [ 441.269816][T15229] bond2: entered promiscuous mode [ 441.306864][T15229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.389446][T15246] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 441.481840][T15250] __nla_validate_parse: 6 callbacks suppressed [ 441.481867][T15250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'. [ 441.550496][T15251] bond6: (slave ip6gretap1): making interface the new active one [ 441.580170][T15251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 441.604902][T15251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 441.614286][T15251] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 441.676856][T15229] bond2: (slave bridge1): making interface the new active one [ 441.703570][T15229] bridge1: entered promiscuous mode [ 441.729100][T15229] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 441.888260][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2473'. [ 441.911493][T15266] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 441.991945][T15270] : renamed from bond0 (while UP) [ 442.037129][T15268] netlink: 'syz.4.2475': attribute type 39 has an invalid length. [ 442.060236][T15274] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2477'. [ 442.368645][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2479'. [ 442.733312][T15305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.879254][T15308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2487'. [ 443.067218][T15312] syzkaller0: entered promiscuous mode [ 443.087224][T15312] syzkaller0: entered allmulticast mode [ 443.443008][T14749] udevd[14749]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 443.788331][T15334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2496'. [ 444.027735][T15350] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2499'. [ 444.043164][T15348] netlink: 'syz.2.2498': attribute type 4 has an invalid length. [ 444.053129][T15348] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2498'. [ 444.221654][T15348] bond5: Unable to set down delay as MII monitoring is disabled [ 444.232310][T15348] bond5 (unregistering): Released all slaves [ 444.279315][T15361] IPVS: Error connecting to the multicast addr [ 444.510306][T15382] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2504'. [ 444.531585][T15359] syzkaller0: entered promiscuous mode [ 444.540610][T15359] syzkaller0: entered allmulticast mode [ 444.548796][T15382] xt_policy: neither incoming nor outgoing policy selected [ 444.559446][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 444.597169][T15388] netlink: 'syz.0.2506': attribute type 10 has an invalid length. [ 444.834709][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 444.842941][ C1] lec:lec_tx_timeout: lec0 [ 444.848176][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 445.645032][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 449.854981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 449.863281][ C1] lec:lec_tx_timeout: lec0 [ 449.868004][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 456.195527][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 456.203881][ C1] lec:lec_tx_timeout: lec0 [ 456.209589][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 461.954798][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 461.963031][ C1] lec:lec_tx_timeout: lec0 [ 461.967931][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 464.344414][T15399] netlink: 'syz.6.2512': attribute type 1 has an invalid length. [ 464.353257][T15399] __nla_validate_parse: 1 callbacks suppressed [ 464.353287][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'. [ 464.655410][T15421] netlink: 'syz.6.2514': attribute type 10 has an invalid length. [ 464.666227][T15421] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.674514][T15421] bridge_slave_1: left allmulticast mode [ 464.689545][T15421] bridge_slave_1: left promiscuous mode [ 464.706923][T15421] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.768564][T15421] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 464.807864][T15431] tipc: Enabling of bearer rejected, failed to enable media [ 464.902423][T15439] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 464.916808][T15436] syzkaller0: entered promiscuous mode [ 464.924468][T15436] syzkaller0: entered allmulticast mode [ 464.943752][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2522'. [ 465.020211][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'. [ 465.207074][T15456] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2525'. [ 465.239913][T15456] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2525'. [ 465.271274][T15456] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2525'. [ 465.634117][T15472] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2530'. [ 465.655082][T15472] xt_policy: neither incoming nor outgoing policy selected [ 465.738735][T15474] netlink: 'syz.4.2529': attribute type 15 has an invalid length. [ 465.826972][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2529'. [ 465.957119][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2532'. [ 466.031681][T15484] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2531'. [ 466.067698][T15465] FAULT_INJECTION: forcing a failure. [ 466.067698][T15465] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 466.104964][T15465] CPU: 1 UID: 0 PID: 15465 Comm: syz.2.2528 Not tainted syzkaller #0 PREEMPT(full) [ 466.104997][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.105010][T15465] Call Trace: [ 466.105018][T15465] [ 466.105027][T15465] dump_stack_lvl+0xe8/0x150 [ 466.105064][T15465] should_fail_ex+0x412/0x560 [ 466.105099][T15465] _copy_from_iter+0x1d3/0x1670 [ 466.105136][T15465] ? rcu_is_watching+0x15/0xb0 [ 466.105170][T15465] ? __pfx__copy_from_iter+0x10/0x10 [ 466.105214][T15465] ? netlink_sendmsg+0x650/0xb40 [ 466.105233][T15465] ? skb_put+0x11b/0x210 [ 466.105259][T15465] netlink_sendmsg+0x6c0/0xb40 [ 466.105288][T15465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.105313][T15465] ? aa_sock_msg_perm+0xf1/0x1b0 [ 466.105344][T15465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.105382][T15465] ____sys_sendmsg+0x972/0x9f0 [ 466.105414][T15465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.105449][T15465] ? import_iovec+0x73/0xa0 [ 466.105475][T15465] ___sys_sendmsg+0x2a5/0x360 [ 466.105504][T15465] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.105567][T15465] ? __fget_files+0x2a/0x420 [ 466.105596][T15465] ? __fget_files+0x3a0/0x420 [ 466.105636][T15465] __x64_sys_sendmsg+0x1bd/0x2a0 [ 466.105663][T15465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.105698][T15465] ? __pfx_ksys_write+0x10/0x10 [ 466.105735][T15465] do_syscall_64+0x14d/0xf80 [ 466.105758][T15465] ? trace_irq_disable+0x3b/0x150 [ 466.105776][T15465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.105797][T15465] ? clear_bhb_loop+0x40/0x90 [ 466.105822][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.105842][T15465] RIP: 0033:0x7f5e37b9c819 [ 466.105864][T15465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.105881][T15465] RSP: 002b:00007f5e38a64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.105904][T15465] RAX: ffffffffffffffda RBX: 00007f5e37e15fa0 RCX: 00007f5e37b9c819 [ 466.105919][T15465] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 466.105931][T15465] RBP: 00007f5e38a64090 R08: 0000000000000000 R09: 0000000000000000 [ 466.105944][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.105955][T15465] R13: 00007f5e37e16038 R14: 00007f5e37e15fa0 R15: 00007ffecbab0278 [ 466.105989][T15465] [ 466.354309][T15479] team0: Port device team_slave_0 removed [ 466.570301][T15499] syz.4.2537: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 466.588195][T15499] CPU: 1 UID: 0 PID: 15499 Comm: syz.4.2537 Not tainted syzkaller #0 PREEMPT(full) [ 466.588225][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.588238][T15499] Call Trace: [ 466.588247][T15499] [ 466.588256][T15499] dump_stack_lvl+0xe8/0x150 [ 466.588294][T15499] warn_alloc+0x249/0x340 [ 466.588321][T15499] ? stack_trace_save+0xa9/0x100 [ 466.588349][T15499] ? __pfx_warn_alloc+0x10/0x10 [ 466.588381][T15499] ? kasan_save_track+0x4f/0x80 [ 466.588402][T15499] ? kasan_save_track+0x3e/0x80 [ 466.588422][T15499] ? __kasan_kmalloc+0x93/0xb0 [ 466.588442][T15499] ? __kmalloc_cache_noprof+0x31c/0x660 [ 466.588474][T15499] ? xskq_create+0x56/0x170 [ 466.588495][T15499] ? xsk_setsockopt+0x54c/0x990 [ 466.588524][T15499] ? do_sock_setsockopt+0x17c/0x1b0 [ 466.588546][T15499] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 466.588565][T15499] ? do_syscall_64+0x14d/0xf80 [ 466.588593][T15499] __vmalloc_node_range_noprof+0x132/0x1730 [ 466.588655][T15499] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 466.588687][T15499] ? __kasan_kmalloc+0x93/0xb0 [ 466.588718][T15499] vmalloc_user_noprof+0xad/0xe0 [ 466.588741][T15499] ? xskq_create+0xbf/0x170 [ 466.588763][T15499] xskq_create+0xbf/0x170 [ 466.588789][T15499] xsk_init_queue+0x8a/0xe0 [ 466.588813][T15499] xsk_setsockopt+0x54c/0x990 [ 466.588848][T15499] ? __pfx_xsk_setsockopt+0x10/0x10 [ 466.588879][T15499] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.588912][T15499] ? aa_sock_opt_perm+0xff/0x1a0 [ 466.588946][T15499] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 466.588970][T15499] ? __pfx_xsk_setsockopt+0x10/0x10 [ 466.589003][T15499] do_sock_setsockopt+0x17c/0x1b0 [ 466.589032][T15499] __x64_sys_setsockopt+0x13d/0x1b0 [ 466.589062][T15499] do_syscall_64+0x14d/0xf80 [ 466.589084][T15499] ? trace_irq_disable+0x3b/0x150 [ 466.589102][T15499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.589122][T15499] ? clear_bhb_loop+0x40/0x90 [ 466.589145][T15499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.589164][T15499] RIP: 0033:0x7f0d5a59c819 [ 466.589183][T15499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.589200][T15499] RSP: 002b:00007f0d5b3c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 466.589224][T15499] RAX: ffffffffffffffda RBX: 00007f0d5a816090 RCX: 00007f0d5a59c819 [ 466.589239][T15499] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 466.589252][T15499] RBP: 00007f0d5a632c91 R08: 0000000000000004 R09: 0000000000000000 [ 466.589265][T15499] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.589278][T15499] R13: 00007f0d5a816128 R14: 00007f0d5a816090 R15: 00007ffe5ced11e8 [ 466.589314][T15499] [ 466.589322][T15499] Mem-Info: [ 466.883341][T15499] active_anon:6729 inactive_anon:0 isolated_anon:0 [ 466.883341][T15499] active_file:2957 inactive_file:40039 isolated_file:0 [ 466.883341][T15499] unevictable:768 dirty:55 writeback:0 [ 466.883341][T15499] slab_reclaimable:12020 slab_unreclaimable:115590 [ 466.883341][T15499] mapped:41636 shmem:1413 pagetables:1580 [ 466.883341][T15499] sec_pagetables:0 bounce:0 [ 466.883341][T15499] kernel_misc_reclaimable:0 [ 466.883341][T15499] free:1281836 free_pcp:12499 free_cma:0 [ 466.956985][T15499] Node 0 active_anon:26616kB inactive_anon:0kB active_file:11828kB inactive_file:159960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:166544kB dirty:216kB writeback:0kB shmem:4116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13860kB pagetables:5996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 467.003825][T15499] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 467.042096][T15499] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.096302][T15499] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 467.105726][T15499] Node 0 DMA32 free:1173148kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26616kB inactive_anon:0kB active_file:11828kB inactive_file:159960kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:50876kB local_pcp:19960kB free_cma:0kB [ 467.178003][T15516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.235030][T15499] lowmem_reserve[]: 0 0 0 0 0 [ 467.240136][T15499] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 467.291760][T15499] lowmem_reserve[]: 0 0 0 0 0 [ 467.297653][T15499] Node 1 Normal free:3939092kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.343266][T15499] lowmem_reserve[]: 0 0 0 0 0 [ 467.355313][T15499] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 467.369117][T15499] Node 0 DMA32: 2733*4kB (UM) 3073*8kB (UME) 1236*16kB (UME) 233*32kB (UME) 106*64kB (UM) 72*128kB (UME) 71*256kB (UME) 146*512kB (UME) 106*1024kB (UM) 66*2048kB (UME) 185*4096kB (UM) = 1173148kB [ 467.398883][T15499] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 467.450418][T15499] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 7*16kB (UM) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 3*2048kB (U) 959*4096kB (M) = 3939092kB [ 467.532590][T15499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.540035][T15520] FAULT_INJECTION: forcing a failure. [ 467.540035][T15520] name failslab, interval 1, probability 0, space 0, times 1 [ 467.563400][T15499] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 467.583146][T15520] CPU: 1 UID: 0 PID: 15520 Comm: syz.1.2543 Not tainted syzkaller #0 PREEMPT(full) [ 467.583183][T15520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.583196][T15520] Call Trace: [ 467.583205][T15520] [ 467.583214][T15520] dump_stack_lvl+0xe8/0x150 [ 467.583251][T15520] should_fail_ex+0x412/0x560 [ 467.583288][T15520] should_failslab+0xa8/0x100 [ 467.583318][T15520] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 467.583341][T15520] ? __alloc_skb+0x186/0x7d0 [ 467.583363][T15520] ? __alloc_skb+0x1d0/0x7d0 [ 467.583380][T15520] ? __local_bh_enable_ip+0xd0/0x130 [ 467.583412][T15520] __alloc_skb+0x1d0/0x7d0 [ 467.583434][T15520] ? netlink_ack_tlv_len+0x6c/0x210 [ 467.583468][T15520] netlink_ack+0x146/0xa50 [ 467.583502][T15520] ? __pfx___up_read+0x10/0x10 [ 467.583534][T15520] rdma_nl_rcv+0x3f1/0xa10 [ 467.583576][T15520] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 467.583606][T15520] ? __netlink_lookup+0x7e4/0x8b0 [ 467.583647][T15520] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.583686][T15520] netlink_unicast+0x80f/0x9b0 [ 467.583725][T15520] ? __pfx_netlink_unicast+0x10/0x10 [ 467.583756][T15520] ? netlink_sendmsg+0x650/0xb40 [ 467.583774][T15520] ? skb_put+0x11b/0x210 [ 467.583799][T15520] netlink_sendmsg+0x813/0xb40 [ 467.583830][T15520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.583854][T15520] ? aa_sock_msg_perm+0xf1/0x1b0 [ 467.583887][T15520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.583914][T15520] ____sys_sendmsg+0x972/0x9f0 [ 467.583950][T15520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.583985][T15520] ? import_iovec+0x73/0xa0 [ 467.584013][T15520] ___sys_sendmsg+0x2a5/0x360 [ 467.584044][T15520] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.584109][T15520] ? __fget_files+0x2a/0x420 [ 467.584145][T15520] ? __fget_files+0x3a0/0x420 [ 467.584186][T15520] __x64_sys_sendmsg+0x1bd/0x2a0 [ 467.584213][T15520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.584249][T15520] ? __pfx_ksys_write+0x10/0x10 [ 467.584285][T15520] do_syscall_64+0x14d/0xf80 [ 467.584308][T15520] ? trace_irq_disable+0x3b/0x150 [ 467.584326][T15520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.584347][T15520] ? clear_bhb_loop+0x40/0x90 [ 467.584373][T15520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.584392][T15520] RIP: 0033:0x7f2d9879c819 [ 467.584414][T15520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.584431][T15520] RSP: 002b:00007f2d99728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.584454][T15520] RAX: ffffffffffffffda RBX: 00007f2d98a15fa0 RCX: 00007f2d9879c819 [ 467.584468][T15520] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 467.584481][T15520] RBP: 00007f2d99728090 R08: 0000000000000000 R09: 0000000000000000 [ 467.584492][T15520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.584503][T15520] R13: 00007f2d98a16038 R14: 00007f2d98a15fa0 R15: 00007ffe767f5978 [ 467.584533][T15520] [ 467.588671][T15499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.634869][ T5840] Bluetooth: hci6: command 0x0405 tx timeout [ 467.714661][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 467.888685][T15499] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 467.893969][ C1] lec:lec_tx_timeout: lec0 [ 467.969445][T15499] 46831 total pagecache pages [ 467.974200][T15499] 0 pages in swap cache [ 468.000659][T15499] Free swap = 124996kB [ 468.028256][T15499] Total swap = 124996kB [ 468.045081][T15499] 2097051 pages RAM [ 468.059279][T15499] 0 pages HighMem/MovableOnly [ 468.079917][T15499] 427052 pages reserved [ 468.090105][T15499] 0 pages cma reserved [ 468.229756][ T7560] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 468.506034][T15555] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 468.534412][T15555] bond3 (unregistering): Released all slaves [ 469.027519][T15585] syzkaller0: entered promiscuous mode [ 469.046125][T15585] syzkaller0: entered allmulticast mode [ 469.360623][T15593] syzkaller0: entered promiscuous mode [ 471.945062][T15622] netlink: 'syz.1.2572': attribute type 22 has an invalid length. [ 471.953072][T15622] __nla_validate_parse: 5 callbacks suppressed [ 471.953095][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 471.973395][T15622] netlink: 'syz.1.2572': attribute type 22 has an invalid length. [ 471.989967][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 472.010566][T15624] openvswitch: netlink: IP tunnel dst address not specified [ 472.029716][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2571'. [ 472.061147][T15626] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2573'. [ 472.096392][T15626] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2573'. [ 472.157148][T15628] syzkaller0: entered promiscuous mode [ 472.200959][T15628] sch_tbf: peakrate 3 is lower than or equals to rate 4809694931295673562 ! [ 472.416334][T15646] netlink: 'syz.1.2580': attribute type 16 has an invalid length. [ 472.428464][T15646] netlink: 'syz.1.2580': attribute type 17 has an invalid length. [ 472.504913][T15646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.726634][T15638] FAULT_INJECTION: forcing a failure. [ 472.726634][T15638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.744440][T15659] netlink: 'syz.4.2584': attribute type 1 has an invalid length. [ 472.763601][T15659] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2584'. [ 472.776142][T15638] CPU: 0 UID: 0 PID: 15638 Comm: syz.6.2579 Not tainted syzkaller #0 PREEMPT(full) [ 472.776173][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.776185][T15638] Call Trace: [ 472.776193][T15638] [ 472.776203][T15638] dump_stack_lvl+0xe8/0x150 [ 472.776239][T15638] should_fail_ex+0x412/0x560 [ 472.776271][T15659] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2584'. [ 472.776275][T15638] _copy_to_user+0x31/0xb0 [ 472.776302][T15638] simple_read_from_buffer+0xe1/0x170 [ 472.776336][T15638] proc_fail_nth_read+0x1bb/0x230 [ 472.776376][T15638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.776405][T15638] ? rw_verify_area+0x2a6/0x4d0 [ 472.776426][T15638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.776452][T15638] vfs_read+0x20c/0xa70 [ 472.776471][T15638] ? fdget_pos+0x246/0x320 [ 472.776493][T15638] ? __pfx___mutex_lock+0x10/0x10 [ 472.776518][T15638] ? __pfx_vfs_read+0x10/0x10 [ 472.776540][T15638] ? __fget_files+0x2a/0x420 [ 472.776571][T15638] ? __fget_files+0x3a0/0x420 [ 472.776596][T15638] ? __fget_files+0x2a/0x420 [ 472.776631][T15638] ksys_read+0x150/0x270 [ 472.776653][T15638] ? __pfx_ksys_read+0x10/0x10 [ 472.776685][T15638] do_syscall_64+0x14d/0xf80 [ 472.776707][T15638] ? trace_irq_disable+0x3b/0x150 [ 472.776723][T15638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.776742][T15638] ? clear_bhb_loop+0x40/0x90 [ 472.776765][T15638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.776788][T15638] RIP: 0033:0x7f44db75d04e [ 472.776807][T15638] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 472.776823][T15638] RSP: 002b:00007f44dc681fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.776844][T15638] RAX: ffffffffffffffda RBX: 00007f44dc6826c0 RCX: 00007f44db75d04e [ 472.776857][T15638] RDX: 000000000000000f RSI: 00007f44dc6820a0 RDI: 0000000000000006 [ 472.776869][T15638] RBP: 00007f44dc682090 R08: 0000000000000000 R09: 0000000000000000 [ 472.776880][T15638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.776890][T15638] R13: 00007f44dba16038 R14: 00007f44dba15fa0 R15: 00007ffe23366d68 [ 472.776921][T15638] [ 473.042249][T15659] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2584'. [ 473.187496][T15677] bridge2: entered promiscuous mode [ 473.192928][T15677] bridge2: entered allmulticast mode [ 473.427511][T15692] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 473.541148][T15703] netlink: 'syz.2.2595': attribute type 1 has an invalid length. [ 473.574256][T15704] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 473.794551][T15719] netlink: 'syz.2.2598': attribute type 39 has an invalid length. [ 473.859008][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 473.885127][T15720] netlink: 146872 bytes leftover after parsing attributes in process `syz.2.2598'. [ 474.336229][T15749] netlink: zone id is out of range [ 474.341911][T15749] netlink: zone id is out of range [ 474.347869][T15749] netlink: zone id is out of range [ 474.353280][T15749] netlink: zone id is out of range [ 474.359289][T15749] netlink: zone id is out of range [ 474.372693][T15749] netlink: zone id is out of range [ 474.409275][T15749] netlink: zone id is out of range [ 474.414508][T15749] netlink: zone id is out of range [ 474.498971][T15753] can: request_module (can-proto-3) failed. [ 474.522115][T15759] syzkaller1: entered promiscuous mode [ 474.540062][T15759] syzkaller1: entered allmulticast mode [ 475.031838][T15798] syzkaller0: entered promiscuous mode [ 475.038801][T15798] syzkaller0: entered allmulticast mode [ 475.517978][T15812] netlink: 'syz.0.2621': attribute type 21 has an invalid length. [ 475.578768][T15812] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.737457][T15821] sctp: [Deprecated]: syz.6.2623 (pid 15821) Use of int in max_burst socket option deprecated. [ 475.737457][T15821] Use struct sctp_assoc_value instead [ 475.931671][T15829] macsec1: entered promiscuous mode [ 476.123183][T15835] xt_hashlimit: size too large, truncated to 1048576 [ 476.180556][T15837] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 476.188268][T15837] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 476.400964][T15845] syzkaller0: entered promiscuous mode [ 476.414543][T15845] syzkaller0: entered allmulticast mode [ 476.842065][T15861] macvlan0: entered promiscuous mode [ 477.040010][T15870] __nla_validate_parse: 5 callbacks suppressed [ 477.040038][T15870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2633'. [ 477.110853][T15870] netlink: 'syz.2.2633': attribute type 4 has an invalid length. [ 477.125030][T15870] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2633'. [ 477.246532][T15877] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 477.277000][T15877] wireguard: wg2: Could not create IPv4 socket [ 477.563598][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'. [ 477.718376][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 477.759358][T15898] net_ratelimit: 47 callbacks suppressed [ 477.759387][T15898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.787210][T15898] netlink: 'syz.6.2640': attribute type 17 has an invalid length. [ 477.793008][T15899] syzkaller0: entered promiscuous mode [ 477.802388][T15899] syzkaller0: entered allmulticast mode [ 477.804739][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 477.840976][T15898] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2640'. [ 477.996814][T15898] gretap0: entered promiscuous mode [ 478.029477][T15898] gretap0: left promiscuous mode [ 478.079096][T15912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2644'. [ 478.099457][T15912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2644'. [ 478.129121][T15906] syzkaller0: entered promiscuous mode [ 478.167380][T15906] syzkaller0: entered allmulticast mode [ 478.757310][T15942] openvswitch: netlink: Flow key attribute not present in set flow. [ 478.952674][T15951] veth0: entered promiscuous mode [ 478.982047][T15951] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2652'. [ 479.116047][T15950] veth0: left promiscuous mode [ 479.321796][T15965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2656'. [ 479.509410][T15967] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 479.852104][T15987] netlink: 'syz.6.2661': attribute type 1 has an invalid length. [ 479.981634][T15995] bond3: (slave gretap2): making interface the new active one [ 480.016820][T15995] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 480.040211][T15999] veth0: entered promiscuous mode [ 480.048797][T15991] veth0: left promiscuous mode [ 480.306228][T16008] netlink: 'syz.6.2668': attribute type 4 has an invalid length. [ 480.588839][T16019] netlink: 'syz.6.2672': attribute type 1 has an invalid length. [ 480.609476][T16019] netlink: 'syz.6.2672': attribute type 1 has an invalid length. [ 480.627394][T16019] netlink: 'syz.6.2672': attribute type 8 has an invalid length. [ 480.892207][T16027] syz_tun: entered promiscuous mode [ 481.202557][T16038] netlink: 'syz.1.2677': attribute type 1 has an invalid length. [ 481.252363][T16038] veth0_to_bond: left allmulticast mode [ 482.012308][T16068] netlink: 'syz.0.2687': attribute type 14 has an invalid length. [ 482.232900][T16081] __nla_validate_parse: 10 callbacks suppressed [ 482.232928][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2691'. [ 482.249924][T16081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2691'. [ 482.279920][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2691'. [ 482.315872][T16081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2691'. [ 482.335576][T16081] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2691'. [ 482.555960][T16103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2693'. [ 483.029720][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 483.041853][ T9490] lec:lec_start_xmit: lec0:No lecd attached [ 483.057140][T16125] bridge_slave_1: entered promiscuous mode [ 484.475473][T16175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2711'. [ 486.063919][T16128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.206578][ T30] INFO: task syz.5.1541:11857 blocked for more than 143 seconds. [ 488.244997][ T30] Not tainted syzkaller #0 [ 488.261300][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.296416][ T30] task:syz.5.1541 state:D stack:27144 pid:11857 tgid:11856 ppid:8013 task_flags:0x400040 flags:0x00080002 [ 488.353102][ T30] Call Trace: [ 488.358157][ T30] [ 488.361365][ T30] __schedule+0x15dd/0x52d0 [ 488.370833][ T30] ? __pfx___schedule+0x10/0x10 [ 488.376522][ T30] ? schedule+0x90/0x360 [ 488.381201][ T30] schedule+0x164/0x360 [ 488.387366][ T30] schedule_preempt_disabled+0x13/0x30 [ 488.393299][ T30] __mutex_lock+0x7fe/0x1300 [ 488.398628][ T30] ? __mutex_lock+0x5ac/0x1300 [ 488.403754][ T30] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 488.410845][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 488.417154][ T30] ? __nlmsg_put+0xef/0x1b0 [ 488.421957][ T30] ? genlmsg_put+0x137/0x2e0 [ 488.431602][ T30] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 488.438044][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 488.443608][ T30] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 488.455525][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 488.461265][ T30] ? __asan_memcpy+0x40/0x70 [ 488.466697][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.472989][ T30] genl_rcv_msg+0x61c/0x7a0 [ 488.483065][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.489643][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 488.497776][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 488.502955][ T30] netlink_rcv_skb+0x232/0x4b0 [ 488.508751][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.514061][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.520891][ T30] ? down_read+0x272/0x2e0 [ 488.526001][ T30] ? genl_rcv+0xd/0x40 [ 488.530588][ T30] genl_rcv+0x28/0x40 [ 488.537344][ T30] netlink_unicast+0x80f/0x9b0 [ 488.542534][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 488.548529][ T30] ? netlink_sendmsg+0x650/0xb40 [ 488.553808][ T30] ? skb_put+0x11b/0x210 [ 488.560635][ T30] netlink_sendmsg+0x813/0xb40 [ 488.567417][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.572900][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.579017][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.584476][ T30] ____sys_sendmsg+0x972/0x9f0 [ 488.593369][ T30] ? futex_unqueue+0x211/0x240 [ 488.599678][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.606841][ T30] ? import_iovec+0x73/0xa0 [ 488.611702][ T30] ___sys_sendmsg+0x2a5/0x360 [ 488.618684][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.624062][ T30] ? futex_wait+0x29a/0x380 [ 488.630739][ T30] ? __fget_files+0x2a/0x420 [ 488.636083][ T30] ? __fget_files+0x3a0/0x420 [ 488.641134][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 488.647706][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.653482][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.660422][ T30] do_syscall_64+0x14d/0xf80 [ 488.667048][ T30] ? trace_irq_disable+0x3b/0x150 [ 488.672406][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.679080][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 488.679118][ C1] lec:lec_tx_timeout: lec0 [ 488.703519][ T30] ? clear_bhb_loop+0x40/0x90 [ 488.708858][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.715673][ T30] RIP: 0033:0x7f7e28d9c819 [ 488.720260][ T30] RSP: 002b:00007f7e29d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.729569][ T30] RAX: ffffffffffffffda RBX: 00007f7e29015fa0 RCX: 00007f7e28d9c819 [ 488.738510][ T30] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000004 [ 488.748609][ T30] RBP: 00007f7e28e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 488.767994][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.777961][ T30] R13: 00007f7e29016038 R14: 00007f7e29015fa0 R15: 00007ffdc17a5b88 [ 488.786525][ T30] [ 488.789927][ T30] [ 488.789927][ T30] Showing all locks held in the system: [ 488.803909][ T30] 3 locks held by kworker/0:1/10: [ 488.813258][ T30] 3 locks held by kworker/u8:1/13: [ 488.827258][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 488.842002][ T30] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 488.854082][ T30] #2: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 488.864199][ T30] 1 lock held by khungtaskd/30: [ 488.870043][ T30] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 488.880789][ T30] 2 locks held by kworker/0:2/980: [ 488.887297][ T30] 2 locks held by getty/5584: [ 488.892275][ T30] #0: ffff88803679a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 488.903528][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 488.914505][ T30] 2 locks held by syz.3.353/7294: [ 488.920707][ T30] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 488.929971][ T30] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 488.941038][ T30] 2 locks held by syz.5.1541/11857: [ 488.946873][ T30] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 488.955940][ T30] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 488.967063][ T30] 2 locks held by syz.0.2712/16184: [ 488.972417][ T30] #0: ffffffff9011f880 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 488.982853][ T30] #1: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 488.993016][ T30] 4 locks held by syz.0.2712/16192: [ 488.998916][ T30] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.007853][ T30] #1: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 489.018280][ T30] #2: ffff88806a9c8788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x11b/0x140 [ 489.029282][ T30] #3: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 489.041598][ T30] 1 lock held by syz.0.2712/16201: [ 489.048188][ T30] #0: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 489.059443][ T30] 2 locks held by syz.2.2718/16213: [ 489.065232][ T30] #0: ffffffff8fbc0a50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 489.076404][ T30] #1: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 489.087686][ T30] 2 locks held by syz.4.2720/16206: [ 489.093224][ T30] #0: ffffffff8fbd2968 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc6/0xd70 [ 489.105861][ T30] #1: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 489.117630][ T30] 2 locks held by syz.1.2719/16210: [ 489.122975][ T30] #0: ffffffff8f385cc8 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1b10 [ 489.134288][ T30] #1: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x6ce/0x1b10 [ 489.144347][ T30] [ 489.152265][T16184] bond3: option mode: unable to set because the bond device has slaves [ 489.175258][ T30] ============================================= [ 489.175258][ T30] [ 489.199684][ T30] NMI backtrace for cpu 1 [ 489.199710][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 489.199735][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.199747][ T30] Call Trace: [ 489.199755][ T30] [ 489.199764][ T30] dump_stack_lvl+0xe8/0x150 [ 489.199802][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 489.199834][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 489.199864][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 489.199899][ T30] sys_info+0x135/0x170 [ 489.199924][ T30] watchdog+0xfd9/0x1030 [ 489.199950][ T30] ? watchdog+0x21a/0x1030 [ 489.199978][ T30] kthread+0x388/0x470 [ 489.199999][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.200015][ T30] ? __pfx_kthread+0x10/0x10 [ 489.200036][ T30] ret_from_fork+0x51e/0xb90 [ 489.200067][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 489.200090][ T30] ? __switch_to+0xc7d/0x1450 [ 489.200119][ T30] ? __pfx_kthread+0x10/0x10 [ 489.200152][ T30] ret_from_fork_asm+0x1a/0x30 [ 489.200242][ T30] [ 489.200250][ T30] Sending NMI from CPU 1 to CPUs 0: [ 489.315381][ C0] NMI backtrace for cpu 0 [ 489.315404][ C0] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 489.315426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.315437][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 489.315474][ C0] RIP: 0010:unwind_next_frame+0x484/0x23c0 [ 489.315501][ C0] Code: d2 84 c0 48 0f 45 d1 48 89 15 68 3f ac 11 48 85 d2 0f 84 40 02 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 66 18 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 489.315516][ C0] RSP: 0018:ffffc900000073f8 EFLAGS: 00000a02 [ 489.315530][ C0] RAX: 0000000000000000 RBX: ffffffff9083ea38 RCX: ffffffff9083ea3c [ 489.315542][ C0] RDX: ffffffff912cf416 RSI: ffffffff912cf416 RDI: ffffffff8c27caa0 [ 489.315554][ C0] RBP: dffffc0000000000 R08: 0000000000000009 R09: ffffffff8e75e620 [ 489.315565][ C0] R10: ffffc90000007518 R11: ffffffff81b0cfd0 R12: ffffffff912cf41a [ 489.315576][ C0] R13: ffffffff912cf41b R14: ffffc900000074c8 R15: ffffffff9083ea38 [ 489.315588][ C0] FS: 0000000000000000(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 489.315602][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.315613][ C0] CR2: 000055557c472a28 CR3: 0000000075a1c000 CR4: 00000000003526f0 [ 489.315630][ C0] Call Trace: [ 489.315636][ C0] [ 489.315647][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 489.315669][ C0] ? __napi_poll+0xae/0x340 [ 489.315694][ C0] ? __napi_poll+0xae/0x340 [ 489.315715][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.315733][ C0] arch_stack_walk+0x11b/0x150 [ 489.315759][ C0] ? __napi_poll+0xae/0x340 [ 489.315782][ C0] stack_trace_save+0xa9/0x100 [ 489.315798][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 489.315816][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 489.315839][ C0] kasan_save_track+0x3e/0x80 [ 489.315856][ C0] ? kasan_save_track+0x3e/0x80 [ 489.315871][ C0] ? kasan_save_free_info+0x46/0x50 [ 489.315892][ C0] ? __kasan_slab_free+0x5c/0x80 [ 489.315908][ C0] ? kfree+0x1c1/0x630 [ 489.315931][ C0] ? skb_release_data+0x6f0/0x940 [ 489.315949][ C0] ? __kfree_skb+0x5d/0x210 [ 489.315964][ C0] ? __netif_receive_skb_core+0x2c10/0x31a0 [ 489.315985][ C0] ? process_backlog+0x76d/0x1950 [ 489.315999][ C0] ? __napi_poll+0xae/0x340 [ 489.316039][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 489.316058][ C0] kasan_save_free_info+0x46/0x50 [ 489.316080][ C0] __kasan_slab_free+0x5c/0x80 [ 489.316097][ C0] kfree+0x1c1/0x630 [ 489.316111][ C0] ? skb_release_data+0x6f0/0x940 [ 489.316131][ C0] skb_release_data+0x6f0/0x940 [ 489.316153][ C0] __kfree_skb+0x5d/0x210 [ 489.316170][ C0] __netif_receive_skb_core+0x2c10/0x31a0 [ 489.316194][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.316217][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 489.316237][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 489.316260][ C0] ? stack_depot_save_flags+0x33/0x810 [ 489.316283][ C0] ? __lock_acquire+0x630/0x2cf0 [ 489.316308][ C0] ? lock_acquire+0xf0/0x2e0 [ 489.316328][ C0] ? process_backlog+0x3eb/0x1950 [ 489.316343][ C0] ? process_backlog+0x3eb/0x1950 [ 489.316357][ C0] ? process_backlog+0x3eb/0x1950 [ 489.316372][ C0] process_backlog+0x76d/0x1950 [ 489.316396][ C0] __napi_poll+0xae/0x340 [ 489.316416][ C0] ? skb_defer_free_flush+0x233/0x260 [ 489.316439][ C0] net_rx_action+0x627/0xf70 [ 489.316462][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 489.316482][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 489.316512][ C0] handle_softirqs+0x22a/0x870 [ 489.316534][ C0] ? do_softirq+0x76/0xd0 [ 489.316555][ C0] ? __dev_queue_xmit+0x277/0x3890 [ 489.316575][ C0] do_softirq+0x76/0xd0 [ 489.316594][ C0] [ 489.316599][ C0] [ 489.316606][ C0] __local_bh_enable_ip+0xf8/0x130 [ 489.316625][ C0] ? __dev_queue_xmit+0x277/0x3890 [ 489.316643][ C0] __dev_queue_xmit+0x1e78/0x3890 [ 489.316666][ C0] ? __dev_queue_xmit+0x277/0x3890 [ 489.316691][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 489.316712][ C0] ? skb_release_data+0x2bb/0x940 [ 489.316743][ C0] ? batadv_skb_head_push+0x187/0x200 [ 489.316763][ C0] batadv_send_skb_packet+0x418/0x690 [ 489.316787][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x631/0x7e0 [ 489.316810][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 489.316832][ C0] process_scheduled_works+0xb6e/0x18c0 [ 489.316865][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 489.316887][ C0] ? assign_work+0x3d5/0x5e0 [ 489.316909][ C0] worker_thread+0xa53/0xfc0 [ 489.316948][ C0] kthread+0x388/0x470 [ 489.316964][ C0] ? __pfx_worker_thread+0x10/0x10 [ 489.316983][ C0] ? __pfx_kthread+0x10/0x10 [ 489.316998][ C0] ret_from_fork+0x51e/0xb90 [ 489.317020][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 489.317038][ C0] ? __switch_to+0xc7d/0x1450 [ 489.317058][ C0] ? __pfx_kthread+0x10/0x10 [ 489.317074][ C0] ret_from_fork_asm+0x1a/0x30 [ 489.317104][ C0] [ 489.822039][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 489.828993][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 489.838311][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.848400][ T30] Call Trace: [ 489.851796][ T30] [ 489.854870][ T30] vpanic+0x56c/0xa60 [ 489.859072][ T30] ? __pfx___schedule+0x10/0x10 [ 489.863956][ T30] ? __pfx_vpanic+0x10/0x10 [ 489.868494][ T30] ? __pfx_console_unlock+0x10/0x10 [ 489.873922][ T30] panic+0xc5/0xd0 [ 489.877709][ T30] ? __pfx_panic+0x10/0x10 [ 489.882192][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 489.887855][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 489.894129][ T30] watchdog+0x1023/0x1030 [ 489.898511][ T30] ? watchdog+0x21a/0x1030 [ 489.902969][ T30] kthread+0x388/0x470 [ 489.907067][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.911775][ T30] ? __pfx_kthread+0x10/0x10 [ 489.916405][ T30] ret_from_fork+0x51e/0xb90 [ 489.921036][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 489.926184][ T30] ? __switch_to+0xc7d/0x1450 [ 489.930900][ T30] ? __pfx_kthread+0x10/0x10 [ 489.935512][ T30] ret_from_fork_asm+0x1a/0x30 [ 489.940387][ T30] [ 489.944109][ T30] Kernel Offset: disabled [ 489.948432][ T30] Rebooting in 86400 seconds..