last executing test programs: 3.040845389s ago: executing program 1 (id=4395): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa42123972"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) (async, rerun: 32) r2 = socket(0x28, 0x5, 0x0) (rerun: 32) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (async) listen(r2, 0x4) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async, rerun: 64) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async, rerun: 64) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 64) socket(0x2b, 0x1, 0x1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x2, 0x4) (async) r6 = accept(r0, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x6776, @private0, 0x8}, 0x1c) 2.660886604s ago: executing program 1 (id=4401): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x2, 0x2, 0x4, 0x2}}, 0x26) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000e0000002000000000000000000000000fc00000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00080000000000000c00000000000000000000000000000800000000000000000000000000000000ffffffffffffffff89a600000000000000000000000000000100008000000000000a0000000000000200000000000000020000000000000801040000000000000100060300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x40080) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000000c0)={r6, r6, 0x206, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2.515446457s ago: executing program 1 (id=4405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaababbbbbbbbbb28d75a3a442ecb982dd700415a414850bb86dd60dd69bfa591ad62dd013c94000000000000000000000000fe8000000000000000000000000000aa042081000000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000"], 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300002001800010000006cffc1044c6eced36cb331b563451ac0a460029a000000d6702aa67c60fa82", @ANYRES32=0x0, @ANYBLOB="0400100000000000"], 0x30}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000540)={r3, &(0x7f0000000400)='\':^,\x00', 0x202000, &(0x7f0000000440)={@_ha_fsid={[0x7, 0x9]}, {0x4, 0x0, 0x2, 0x4}}, 0x1000, &(0x7f0000000480), &(0x7f0000000500)=0xfffffff7}) mmap(&(0x7f00002c4000/0x3000)=nil, 0x3000, 0x2, 0x40010, r9, 0x876f6000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) r13 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r13, 0x8942, &(0x7f00000011c0)={'ip6_vti0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRESOCT=0x0, @ANYRES64=0x0], 0x48}}, 0x40) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r12, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006a0001002abd701bfbdbcf40c7892500000000000000000400090004000b0d1cf68f00008483d249d4e381c199fdbc7dde1ddd0996b99bd5daf9a838"], 0x20}, 0x1, 0x0, 0x0, 0x24008014}, 0x41) 2.229168164s ago: executing program 3 (id=4407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) 2.194515019s ago: executing program 1 (id=4409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) close(r8) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x24040000) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x24040000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22180, 0x0) ioctl$TUNSETOFFLOAD(r12, 0x4004743d, 0x110e22fff6) close(r11) ppoll(&(0x7f0000000140)=[{r12}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r10, {0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x80}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x2}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x140c0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) 2.029911399s ago: executing program 2 (id=4410): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, r2, 0x49801}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x321e2a5f}]}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendto$packet(r0, &(0x7f0000000180)="05d936277c6f5422007f9f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c7168c7eb53bcc69", 0x2a, 0x408a1, &(0x7f0000000040)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 1.771632895s ago: executing program 2 (id=4414): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x7, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x3, 0x34}, [@coaddr={0x14, 0xe, @in6=@private0}, @lifetime_val={0x24, 0x9, {0xfffffffffffffff2, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x1, 0x37, 0x5, @remote, @private2, 0x8000, 0x8, 0x75aa}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x7}, 0x10) close(r7) (async) close(r7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000000000000611161000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8010, r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000}], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x65, &(0x7f00000000c0)=""/101, 0x41100, 0x60, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r7, 0xffffffffffffffff, r8, r9, r10, r11], &(0x7f0000000540)=[{0x4, 0x4, 0xd, 0xb}], 0x10, 0x485d}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r3, 0x2) (async) listen(r3, 0x2) 1.673195634s ago: executing program 2 (id=4416): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.602968017s ago: executing program 1 (id=4417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000140)={0x2, 0x40, [0x2, 0x4, 0x9], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="300000000d0a01080000000000000081725f8f3b654a310073797a31008000d01a0a7ee9909f67310000000004000380"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.453646527s ago: executing program 1 (id=4419): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='6', 0x1}], 0x1}, 0x400c000) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0xc5}, 0x80) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db1", 0x4a}, {&(0x7f00000004c0)="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", 0xf0d}, {&(0x7f0000002440)="695c2769ae3b858d658ad07815e2166a6e87fdc9deb33bfb70854bac80fbca51c07e6b84fbe0506218b5a5764fd30823019a062c15f00618895b", 0x3a}], 0x3}, 0x4004000) sendto$inet6(r4, &(0x7f0000000240)="11", 0x1, 0x8010, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000240)="11", 0x1, 0x8010, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23}, [@IFA_LOCAL={0x6, 0x2, @remote}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23}, [@IFA_LOCAL={0x6, 0x2, @remote}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x15, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x13, 0x8, "84b3505490795cff2cc1b8f8e0ff76"}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20010040) 1.369525193s ago: executing program 4 (id=4420): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) sendto$unix(r0, 0x0, 0x0, 0x408c4, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r3, 0x1, 0x31, 0x0, &(0x7f00000008c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000100210000000033"], 0xf8}, 0x1, 0x0, 0x0, 0x4048808}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b8, 0x138, 0x368, 0x138, 0x1d0, 0x368, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000900)={@void, @val={0x3, 0x1, 0x47, 0x5, 0x1ff, 0x200}, @x25={0x1, 0xa, 0x1b, "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"}}, 0x100d) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) 1.306153997s ago: executing program 0 (id=4421): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0xa0}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$tipc(r2, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x1042}, 0x10) 1.301558114s ago: executing program 4 (id=4422): ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'dvmrp0\x00', {0x2, 0x0, @remote}}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x7ff) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f0000000100)='/dev/ppp\x00', 0x2, &(0x7f0000000140)={@align=0x4, {0xe, 0x2, 0xffffffff, 0xc}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000240)="391ff539d9f642ee78379738cbda7d42b647659dc58665c0cfe60256c775f1dec3234a0d0943422d16036a0ddefaef2fbb9315dbbad87bc286e264bd9ba77b8a23b0fe54ac5c3b7aec0cd6652228847ea6e9f4890af53d756601d1d16f5b37824ff0f3e0", 0x64}, {&(0x7f00000002c0)="2e9a76ee82341d3059dfd2797ace839096ab6227a282536c1e392be3ef35b3f37bef0a9fb2a83dc698cee0afde0695033af66dc1a8b239d2ad3d2bac93f4692b6a594227ca815eacac0c7d2bec3bece50078160327d793d9ff95e8a67d8e4862faffc126715bfa70a95b673cbdb8baf77c1c7f866fc1c788", 0x78}, {&(0x7f0000000340)="583453ec9fb9b75fe748ba7e28d4937f5bffad47d9aa3e122c5d9134afba40a874567d5c93dee7171f4c8be6c714e918109aa6fd41e75aeffa6e69c146e9459501392dee2d66e51cd815e361d47f11a493c4297e", 0x54}, {&(0x7f00000003c0)="230e368e0f4190a59432ecf2655711c880699a6bfbb71aba03529de2c91417a468df94e17c27b738e3e2462387bdf5000bc831634b4a31156a1966482d2145fedf4b5766fccc28f6fbbdd8b4cd4d4fc750de10ea0d8a5f5a8289942020cdfe6081dcac3c0131b718464fde3589bacf1dcc56e3f6017cb39ae82fe1a1b4fbba699c9995891cae5b10445332b382ad0df43ce89627fb2d04849e23fd9eb5fe869fbdce2047034bf959129405b8070e409a76858e08141f721b33b4a7ccde62512e5b47b242cb0415a47b4d67f9ac0c8bac45d0a717d96603dbe2", 0xd9}, {&(0x7f00000004c0)="b7d0bfe6141bfeee5f506fd312bec8a00fa66f63a22bdcb12275c188a43a67e805f1954c63833c63bbf0f26223984084ee6a2883c4fd65ec3a19450df3dcf9aad3e6c9c445d222b0555ff039af3d2b9325b78c4f3ba1aa6e5fbeddfe9d81a8cc89488cdb03618fa7542a0e555f7822aa8b5b374869", 0x75}, {&(0x7f0000000540)}, {&(0x7f0000000580)="bb0bd678b02f8fd4312c0e7ab76598ad0f58d736f05b9bb90b36e6fed4c180d7a00cd059d473ff21d0ee9ec63f2d84cca38ec81d1b1ae29531571ecdb3b9768d2e89be22b64418586f1cde6bea941a6730678e59b09130ed903f6f775e0e9b1ada09f09a9bbb4204ad5b1f38c7dac25d9ec7c6a811f848bb945525c911ee781093d0678953deac", 0x87}, {&(0x7f0000000640)="6ca73bf1d8fcec8260333ad8b1cf800d8676f95e08abd60fcf7783978cc3eee911eca43a60f715e0d98d5387bfa9f533ab3eba8b8f8471bd2245875d99a83bb0228f999bf55aed824a59563eb1cde0e3915d08786a49094a4ae428d40c127b49a90b6cb5480473ffd7ae96faf02da8b41844f17bd43bb3e924a1a1d29e355a569f7b3a92e6d11ceef7c8de074158559ac67a756e7f52b161f6b9ff04723f22eacbc87afb78b8bb8253f3e19168ff2d", 0xaf}], 0x8) syz_genetlink_get_family_id$smc(&(0x7f0000000780), r1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) r2 = socket$netlink(0x10, 0x3, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0xff03, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0x1d, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x5c, 0x6, 0xc, 0x8000, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @alu={0x4, 0x0, 0xc, 0xb, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x401, 0xb, &(0x7f0000000900)=""/11, 0x61780, 0x15, '\x00', 0x0, @fallback=0x35, r1, 0x8, &(0x7f0000000940)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x6, 0xfffffff8, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00), 0x10, 0x1}, 0x94) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000b00)={0xffff, 0x7fff, 0x6, 0xffffff80}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r1) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000d80)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000dc0)={'batadv_slave_0\x00'}) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000e00)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000f40)={r1, &(0x7f0000000e40)='*:\x00', 0x80000, &(0x7f0000000e80)={@align=0x7, {0x0, 0x7, 0xfffffffb, 0xf}}, 0x6, &(0x7f0000000ec0)={@_ha_fsid}, &(0x7f0000000f00)=0x400}) syz_extract_tcp_res(&(0x7f0000000f80)={0x41424344}, 0x6, 0x7) write$tun(r6, &(0x7f0000000fc0)={@val={0x0, 0x60}, @void, @ipv6=@tcp={0x3, 0x6, "b8270a", 0x41d, 0x6, 0x0, @remote, @remote, {[@dstopts={0x3b, 0x22, '\x00', [@generic={0x81, 0xf6, "1482ccd437ed213528c22961b3be285aa7cca6d2e0958f430b03553927a76f216136c2562a7369a8c3669e199d8346ee6fa3402b555055c77beb57ead06464dfe675adcbaf421ed6767a311738c785a25b7eb43280fce46641e6fadeed9f49aaa9e8f2ea97d3fcb062d596c8c6e28d6b5dd526ba7694376bb68d1c7313c306ebea74541c490114b16766c3f24d59a7823fd01d1ccd461f955e075e1433a18f6a4626331f34c7189f5751f7cf7fbcdd758a6b7a0bb9d6ba25e74235c7872a7794b710bb74cf977fc81e007acfade2f8e6bc73ebc83e163682088bf2df0e6c4c7d2c6ed7543fb1a693b50d7504b3dc0f4837703f95ce40"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0xc3, 0xec1b, [0x100000001]}}, @enc_lim, @pad1, @enc_lim={0x4, 0x1, 0x7}]}, @fragment={0x2c, 0x0, 0xaf, 0x1, 0x0, 0x17, 0x67}, @hopopts={0x0, 0x18, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xf4}, @generic={0x0, 0xae, "bb4718d5b54548fd168bbcf2f268359935137b3019255d959e6363905757277acc0c42a130f10e0f9f3fe5302c9d6fb1f411999dd3a4dae2383b331a6ab397a8ac44718f4bf4ec1ebdb65de2d53449d54e0fe6314042073977f38feaf66f4851f1f7b944895658ee4d98824973b25d09a20f4ec117e3eeb22245e39c83c4f5bf9e5f4d3f43060aaefafde7a4f19f17445b6e6f2221db48304653fedaa4ee953ab5be30609a293a5aec8a13dc0491"}]}, @hopopts={0x2f, 0x6, '\x00', [@ra={0x5, 0x2, 0xa}, @hao={0xc9, 0x10, @private1}, @pad1, @jumbo={0xc2, 0x4, 0x1ff}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}, @hopopts={0x2f, 0x10, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @generic={0xe, 0x63, "388da2ee49bba130e8eda126cc815f3bdd2a61160ec8c231e5bd24592ed616efe47c8826de8c5996c0482c90dd085674b1f37050d1ff4627c92f70f4aac0bb7ce6e25b475e6566bad187176dd316d4f70e4b9f531c010fb1ae4b81ec5e2d4fa0ef447d"}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x9}]}, @srh={0x2f, 0x8, 0x4, 0x4, 0xa, 0x38, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1]}, @routing={0x11, 0x8, 0x5, 0x9, 0x0, [@mcast1, @empty, @private1, @mcast1]}], {{0x4e22, 0x4e21, 0x41424344, r7, 0x1, 0x0, 0x6, 0x10, 0x4, 0x0, 0xfdaa, {[@nop]}}, {"96f61809d099fc393de9e6b410fe5739e9e51910bcbf57c73823ee9716038bcc1f35e2e5d51ac7efb6b9895aa5b1d6fb713184ed6c46e02524a37553bc2fa7a6462456358c7a8a74bf16eaac114d58fb9a28d2f481c1783e99b9acbca739023722fe848079536c2b0ae87badd598bb32a92ccd67f016652bfbef17fdf71ebd93d7b0ea12497e91062c7231234cdb21c8baf7f6d75d7a8804d8d0a1bf1ac55f48d06fd1f2329330a8985be5076f"}}}}}, 0x449) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000001440)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000001480)={@rand_addr=0x64010101, @multicast2, 0x1, 0x5, [@broadcast, @rand_addr=0x64010101, @multicast2, @loopback, @multicast1]}, 0x24) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x20040880) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000015c0)) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001600)={{r8}, "0b805e173dee56af704c1c424453c0bf6563e91db052fabeb308e0e0c8d8b8d3e6dc70921ba9ae8f29b7776cba0d1774dcaa3b99e9554c0d34c7f467873281b5fe704ee54635fb1981891c21b138b0b15a3d5160f545a4bc9c5fda15bf1fb8e8f7a8c0cbce90e54af4a6e7d99b71ddb26d24d74c1c461b92784a34adc2ea87eb96dea6b6cc05ba16d4a70d56f95837564331d427e57400d03273fc8f41352fa17468fba0c742d11797ba4a140b1007fc8cea11038cb8b7edadf0c39364c3963d9f3bc18fa04ae6e20b59bd1e2de2ed55653fe440152d4f38c0317dcf90c073d356e32d3b4a1b03eecd940a5a93d97d5e50b44799cfd507c27b17ab19a82f8d57cd1b604cd0fd979db4ae34717757a445cdf1346f15942840958a5dd8019c1af9e354fa00203c1f19f395edb6fa8fc86f8c6f361644f1a41fc1aea4e3b29b323c1852fef7c891fc92318afc81e211a741cce91d60339e309642537e9ee229764a6b06f9f89af87cc6ba21e054682b4ac3d17255966489c28e76c10dd7f0019cd9a18421ce6adadaf242625c7e2b54f1b35ec802f292edce750ecb7e6ad0825d0f26e5f0eeed44bdd04004652f2271ddc7fc59706a76833db4e83d29cb2ae8d1e27362f509b8fe92e3c4fcdd5d4cc0ff86e150340d76f169f89a2142050d9d7ace5819b70728bb162759aa8fa1e91fc286bd2a928577522532a57fe4a06bb513216e5e6e8671257710f6031b30a8e7106ee3bbc7fa8f1d15e45b14b1d27da5ae599b601637178d0425d4a578a54cc823e1900011e25130474f71b61ac1d6d0f8e80e349ab7887727db6e1c94a95ec03e894779ecaae1cf4f91bdd26857eceaf6b2c12a005a4f894ea1e25e95c3f1a3e9dcad5424a94b95b730cf9b01a82c21ff309f4205713f1218ec46ed2ec8e407757983dc1d0b24b7e70eb936cae3b1ad09f024acad48278d074fff2bed2fa28134b74c7746e63491005a301a19254edb5ad56fbd243efa5bce325bcf16c53c079b3e064bae1150d3900a2ef9a99f48d4ab96658707001331083ea0a7773c5d44f4bdff2c419c7b288c489a553ad0d619c036efb8ca59c7486abcecef94efb173b29f0b8061fb3f28122501b99680f43e25b0aaa54b68447500213d1832deb46bfb14997fa02b6467c5c55651750965bf9c7ac5be3c5bfe551e15e47c11ae9b532f499c55cd6a8d9039a2f21a363dd8eb180ca4a8c5bca8796c0340f144e0af9030c4a4f59a16ef77cae32b3f3797600b9dcd31a85445e66aafaac6bd52fb38f4908ba0d6584962e332d99aebd1e06317448dcb81d3e69d21491998b5b8acf558eed6d9410de0e758244aa27dc9d05919cb9fbd4570e0dfb058bb7b116e8251989e2b47c55389c7bdea44f468a706c6d9e13cc2281919eb2ac5d36d8b77d5f33987095e677a9aeee1a617091f1248bfbb541ba2f01b2ee139f9cc4c00845d41b4e0bd8f5f2340dd05fd52f916bbbed882552501008919f9d10cd621de17e340f3c50600deb2c159ad6e9b427f1d3f7c2e39532d5087c8e67a8e1e6fe5f35f29274659a45743b3ae2387c494c81c7c63ae749da70adc3e8f05a12fa60e4ade24e85afcc86ca255dabe5dc818f1c4c1865deacc24ba2db1a3f49d9e89a3e5835f84ec2ece428aa6752db92161e07f28cc31dc9ec03b8ee0c089bea1f62f942fa1a2a08c06b72cb5b5edb307eb010da497ec0baf00da9c5c6a35f906a93740bb7443f579f4e2efbb7696e128577db99aa350c93e6d4d36929ce0a9303222318b0e3c526419e0343ed0d3387f0a376f2882fd29abb60bafa228f530a642f64fb5c9f372a093e9d74fc0e2932ae76626d3389c89507ab49e1d9cab37582210dbf8c673c05c71b012d9ec8adb3acfcb7e5fb7ec892a8d08dfc6f362eb0f42b9bc7b8470ec39806eed03f173c32974a9b6ca78ea5d36116fb10bfc18df74b428b7cdef164e801d09051b66a12aa2e93d8e3e1d499804a113d4e6cadbe09be04ad0782c8271834cc4e6911969b9f4effead4a43fbfeb2ec0a9e88fc94429e9d738e1a7bfb7a78f48da61b70fa2cb1bb2d6d6c1ab9af4534cc73d52f22f1f3f930e2bc35c7b0afa59bf18bd434192546e0cfa1c7111026214828d5262540a7e5a979f28e33dc6a14c6969975ceba441b040294a353ca1de6ecc6d2601aecd035c2e4658171d303edc3ec97fa4c3fd3230cc6a9ce959230e603cab6ff189d0f3b55e8776cd7c7d116cd3d66db87f02bc1c917a1d1a7af83858bc9fe04b25d48c547a172993ff6e79207a2cda89a79f52e55017b36d88c8f2a9b9dce3cea3f0f2af906f77e59a7ed9534b08e11fa6ad98a70e79050453c4f81a722ffec73784c800020cf32e25099e254d52e943976221bfe8a4da666d69fd4d38dcd0ca88729d9e35dd6728a54a30930be4cab8459d766baf0f2c9f0982282d0cc3520112ad2bf060b915474b677b2d6214e938dea09e5bdf1681a1f93d46ad24c958071d2a3c82b642e25b440de69abef9e03df46a28764d145236bd29ca6a2a657233470b174b033a43744dfd1d513a27cbf1321d8d242667b518c20d4de892057cdf452e80a64c83aecc40e8612d6bf404ce140f48cf5f08bc73515351e4d60d94785b8234ef25525de240cc864bac99ad13c3268803570246fc2ebacf342a9cac2d840bceb7d0acb6ea8791f7801ea5db1cf14267550cc3f9308a922a134524c3a48538ce96568ad0310a2ad0094810f89c8ad4818ff60d7bbbc0ddda2c21ac8907f48b9dcd7790ebe929f560ec1d67e40cfd1fcd390add6c0d0c06612ba3bbb658bf80e001e88e0081771b62b88eb33d74bb313104e4528dbed78578b86bdec297328cb54b6351dea8ca3df99506466fe3a65c2a27676a82a23662ce80834eb32457ee415157f4d409ee3c72a4cbe175250e52bdee11c4d5ee68a149d49e8d19fb1061b08b4ff9b43013bc56fcf15f48ce71998c9da058f4cfceb2fcf3babe5668d88269e05e77fbfa39f2afbb5e7d5a801c9d4275187f879a841f3b52b8c29b5bd0d672a649af19543c5d870e0d9a41702ab63c9b226d96001d85f2242b7ea754fde507c5ec738175bdac0efde9a2ed32b74145600073a54b3942738ca9285c1e711738fb971f916b1a3a0e5458fc2630a75770ede53b0e74a21c9f2ab90136980dffcf5da872c2f68bd569bc2494cb5cf65837ee7aed8254467f25e4e87d8a64f983414301d770b2b875bac60b451269f9643c9df03db84c12b77b3261d700e86633fa6ff4ce8327ec66f5ca754e06f8c1de49e0507483ed9c16697f781de297c23a532ea7370c2145d3cebbf977c5f8abaebd8f91d19bbd6d6a598bc6596665f8ae2c42d082a438cdb55dbbfd9aec5ac2f0f8b6f4b0bea924046cda20c0a0a18b33e845af5be3d5979170658a74c3dd795dfaa91dfeb7db518a4629038a79969eab6c891ed139e6e88eb36e28203cbb6446b456ce98f6e2c91f80e50b8e1b38c4fc207ab26e55e617cf8e1026563c2f34f91a8ffdde1bc015e97e28f10529ba3c660f519a9c258606999cbdc0841e27ea7554cc2191b35d88a5e8aed0f8495085c4fe9e694b1e9c7f16787e05d10a05497b0337408d8331909291dc72945d16e59721b43eec16e2317393989a55e40e08237cf53d60db9f3e5d92a9862b96c689a1d0326e5105faf90edef832a592adc8f33f377124f5e3b6ce8c3a9acc1f087550fa10d1708a55fb66ff6fc2363d0cb222d583ad6334ea9b9c45d10aa0cf4439145250abc8baace596b928bb95e5aef449220a0a854a5c76d1760ee2a47fd43f29d94a92d23edb97b87737785c48eb202b390cd2039108a9e5826e1c8e89154dde2702deca9320e578daef52660e37d6076148fa3a08d9f5431246e2c1a20cf5b79f542f0722582dacf78bc332754470790131bf30ac431c08cdc82c77e90c1ce23b314fa30770f997a3d241ce3af0a1db350f020e9657def293119661ff8b1c8276aa56d1f8ad7b9ee6ead8a8c4f46e567516ef3d50b90ed09e5c99c0ede1fdd7811577f05757749809b74e41789d1ec1805b2ff0b54c7a2ee3b765bd1a9c211a36410ef1e7be596194978fad26186cb1feea5e99bc9d1d76a96146c31e9340bc82da52308b11419166bb2f01a9811282f4a2d53fa656b34f062146ae2db7d95767c93116b68030359d6f76b89d1b82fca97b2c3e8f9c35f1444d80deb231994c6e199f864c6ebdf7a17ff908d95c0636951bb39d63b7354252fbbff307896bbe4d1094ee0f907b65b8acbbb69f2b6af050bd52e6e283d263c60b063cc913efecf21002f92794c1df66e5e869235d42d14909da3695d0908a7caf506cf6fffcd255e76d67e4be176d12b967c28124742712648862a21e86f9b7d7eff262f16a7da81fb304c357529b9e6ee0a7f8c8675293a2b73b5de00d6d46eaaf87920e620d5ff9a64e8d3462e29cf9887fb26417344186de92237840fb4e072bdcc40baf9e662dc6757bfe10b10f33c72ad126c6bdb1b03b2dcfc97ed43aecd6b5d83332f2c56303db3aaf65823738d6d94bf6ab188ee8fe270a6d5ecc70282b85b1027c7d1d8afba6948b0335610673cdeb74546ed01b7cc460e7fb03d8ac20b85d1260589730e47e3a495dee6b0e81a5a20bd28db857a5df3a8661e1649b413b8ace55443af38f81b28a4c499b3e574f27f93f28e9d42393f1c17a543d8374718e612b69d427c46d677b596b69cf055e94ccf76e1b40216641e9f129b4057b19df76ec138b417bbabacfbb8e757b1a5536d37a6baf67505f57df501053cad6c9b415ba9293e355beac4777b13f98a8da8833e9970c62083c966c26f5f4235b77fadee68ddea868c73faf0727e616bff0d1326214a5555b273e8adeaf0da904a51cdefe47d329b082854451789b792e5f52e6f4b34de553c927a4ce4939acf5e1757d00e1598ddae5d553dee353ffc5519e1dc46b676c14a843a1f1aca6a7d992612c20d739224c07e5b27951bef7bdda497fa5650b6c709ad4ed98540fa1bcbf5d8b534a56f96e5c6f6acbff40eb53ee471dcafebf67321f2df87b80972c1d1980b145ad32896a7ff2bfc91bd4368c5ddd84a7c08597b538249cbdac5719c20ce8007b448ea02e3106bd5fa9d66fbc1a353a673cc0ee286e3e8d2381898bb7e37926b06c8ba26077e429aeb7064c340a26f6e703ac6e29eb9f3cd1f4509ff59fda75064f7e79d9fcfaadd949bf6bf5dcac7f05f8f2670b0ae5c698cf0fd61912f23ba01a34686a1e7e81166d1dee510d7d742191ea8a550e6292a198633b00c06dc4f454bce423e0fd8a976b42c21cb8458ca1527828200e5e265f1cfa8fcc996d3dbc2a893dd190a6545300e06dd2aab927e9e29774401bc16486b43e95ad860d7c626ad81f47bb3a3a7fdf9cd68b08a60893d223551068c9be273c177c7104f0b39ad889bb1dc69a313ddc870af9f88de52015b8bf5dcb57fdb391c7f4fee9603ded3f016a15ef81727b28bae8bf7418ca9e339c248f58b7689ec44527ab46d88a8ea230506feae88ad6cecfe0dadfdcb84faa40af4652496e7dec3a7acdb27b5260cb2b60db8166e8983bb365fe9a6cd1d3218fafe01be6ebd78d4f3a85c5438882814a6e11c5caa1551e4a2a2b4fe66c975f8184b7b1fdde917a27e4b805233816b58530490155da43e1311c158904575c00b6c520ba4d24809b9e9e3a17873c1a8ffad0ff6fad655e3533aa70adcbcf52618fe455001b750350a9f512ff79b77fcd0c57f6d55022ed122d6cf5007d023fb04"}) ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) socket$nl_generic(0x10, 0x3, 0x10) 1.09481431s ago: executing program 0 (id=4423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 893.992667ms ago: executing program 3 (id=4424): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) socket$nl_route(0x10, 0x3, 0x0) 854.098104ms ago: executing program 4 (id=4425): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x2, 0x800) 773.621193ms ago: executing program 2 (id=4426): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r7) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000004c0)={0x50, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x50}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 686.764242ms ago: executing program 3 (id=4427): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) 686.321871ms ago: executing program 0 (id=4428): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xa, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xa, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 676.830263ms ago: executing program 4 (id=4429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x6, 0x1, [0x83af]}, &(0x7f0000000040)=0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x19}, @val={0x1, 0x0, 0x0, 0x0, 0x20, 0x3}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @private=0xa010100}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x6, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xfffd, 0x88000}]}}}}}}, 0x46) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000240)={0x3, 0x8, 0xf4, &(0x7f0000000140)=""/244}) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r3, 0x7}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x158, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x144, 0x1, [@m_skbmod={0x140, 0x3, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="25195d1cfcd4"}]}, {0xe3, 0x6, "ccd1e5ff530d325f28265e257c4ba489d67ebfc6f93f20b9b7cd5fd6d38d4d426b44af6a0b06ae9808203816b619fc4d9acbb0f4a6f4a35d501556929c7d121b878b8bdea8e58d087349308d64792799b7ce0d60e7a987a1cc47771f8dbb93a3c124d586d5b6f30e8b2ecc1eff030254829c2dff857b12702514616681861d43456b3a0a772a6265f36f6d4df969ce0f875befd80f56b54642eca8aff7bcd80087355d5144cdddba899933a8f8899361ed735e1ecf5ece56f8d72cba769f26168a2fecb6295574885202a1de080eb0737615fa00f0b0acf103de687002eb78"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x158}}, 0x0) 466.868637ms ago: executing program 3 (id=4430): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_emit_ethernet(0x8a, &(0x7f00000004c0)={@local, @empty, @void, {@generic={0x9300, "33b17f0401e4173141cfd38cbd158ef433a81a0386c73620628aaf8b71accdd959363538f356eb240baf19147b48386295ed207683451948505d2269e23cc3f31da3ecf7844696f12f654c61cedbbd2f607ccb2e2d38fa1cce42b9241e85b0e14ce3a29be7b46ffc66f00ac74a26e66ac5743d6f665b22da8c866e55"}}}, 0x0) syz_emit_ethernet(0x31, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf, 0x0, @opaque="dff98c8d6b02f0"}}}}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x5, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r6, 0x1, 0x70bd29, 0x25ffdbfc, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000005}, 0x240440c4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x700, 0x20, 0x7, 0x8a2, {{0x8, 0x4, 0x1, 0x29, 0x20, 0x65, 0x0, 0x5, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newsa={0x150, 0x10, 0x413, 0x4, 0x25dfdbfa, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in=@rand_addr=0x64010102, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0x80000000000010, 0xfffffffffffffffc, 0x2, 0x20000000007}, {0x0, 0xe0b, 0x4}, {0xf6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x80, "a76af6c73c4a03bbca93d47bfc5f576ef2c8a50b"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x100, r10, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x100}}, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x30, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r13) (async) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r14, 0x3, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r12, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048002}, 0x2) 402.761486ms ago: executing program 0 (id=4431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r5, 0x0, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xca, &(0x7f0000000240)=""/202, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x19, &(0x7f0000000340)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x10, &(0x7f0000000040), 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB="058000000000000000000600000008000300e5b6526deed9922d8b66874fa3db8fc4efe7344e58761f92bc11de6cc69cd7f2b6d08cddf32a36f5dcdbf6268ae39395cedeb3af35747b3727be1d912d4193d2d8c760908c72d683624b869284b18f48c539e13a35f18df6f0d3d0dc1889d7e05472e24c60eec9b9aa16dd", @ANYRESDEC=r6, @ANYBLOB='$\x00\x00\x00', @ANYRES32=r4, @ANYRES32=r5, @ANYRESOCT=r4], 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) 402.377004ms ago: executing program 2 (id=4432): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x134, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x89a3, &(0x7f0000000100)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 379.989493ms ago: executing program 4 (id=4433): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000040)={0x0, 0x9, 0x7}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x3c}, 0x1, 0x2}, 0x20000090) recvmsg$can_raw(r2, &(0x7f0000000380)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/187, 0xbb}], 0x1, &(0x7f0000000340)=""/6, 0x6}, 0x40000001) 256.740387ms ago: executing program 0 (id=4434): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1412, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44040000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) 194.854696ms ago: executing program 3 (id=4435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000440), 0xd5, r0}, 0x38) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x20}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0xffffffee}, {&(0x7f0000000840)="418a", 0x2}], 0x4}, 0x20008b88) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000180), &(0x7f00000004c0)=""/69}, 0x20) 174.81994ms ago: executing program 4 (id=4436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x6e, 0x80800) accept4$unix(r1, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e, 0x81800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x23, 0xa, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) close(r5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002f00002c0012800b000100677265746170682c5c2393f67cbb1ab893db02a200001c00028006000edf020000000800070064010101060010004e22000008000a00", @ANYRES32=r4, @ANYBLOB], 0x54}}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4801000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="816fffff00000000280012800b0001006272696467650000180002800c001e0000005b8f000000000800010017000000"], 0x48}}, 0x0) 97.549821ms ago: executing program 2 (id=4437): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 1.841733ms ago: executing program 0 (id=4438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x10, 0x3, 0xfffffffc) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000380)={0x30, r5, 0x5, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac07]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendto$packet(r2, &(0x7f0000000240)="41d09292b4f9babe89cd637b86dd", 0xe, 0x40000, &(0x7f0000000200)={0x11, 0x17, r3, 0x1, 0x4, 0x6, @link_local}, 0x14) sendmmsg(r1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r10, 0x400454de, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r11, 0x89eb, &(0x7f0000000140)={0x0, 0xdec, 0x833c, 0x7, 0x0, 0x8d, 0x2b, "839bf939b57362abfaad537bda3067fc22f51ecb", "b6f6c857a33c218fa92e44589f8115fc47110400"}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xa}, {0x0, 0x6}, {0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 0s ago: executing program 3 (id=4439): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004b00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) kernel console output (not intermixed with test programs): : attribute type 11 has an invalid length. [ 401.944898][ T4944] Bluetooth: hci5: command tx timeout [ 401.985417][T16849] sctp: [Deprecated]: syz.4.2948 (pid 16849) Use of int in max_burst socket option. [ 401.985417][T16849] Use struct sctp_assoc_value instead [ 402.020956][T16853] nbd: illegal input index -8454144 [ 402.039679][T16604] bond0: (slave netdevsim1): Releasing backup interface [ 402.086942][T16604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.237612][T16604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.458094][T16867] H: renamed from dummy0 [ 402.767576][T16877] netlink: 'syz.4.2956': attribute type 1 has an invalid length. [ 402.859913][T16877] 8021q: adding VLAN 0 to HW filter on device bond18 [ 402.925078][T16889] netlink: 'syz.3.2959': attribute type 1 has an invalid length. [ 402.934985][T16889] netlink: 'syz.3.2959': attribute type 1 has an invalid length. [ 402.996745][T16877] bond18: (slave ip6gretap3): making interface the new active one [ 403.035397][T16877] bond18: (slave ip6gretap3): Enslaving as an active interface with an up link [ 403.193454][T16895] netlink: 'syz.0.2961': attribute type 3 has an invalid length. [ 403.234370][T16895] netlink: 'syz.0.2961': attribute type 1 has an invalid length. [ 403.292200][T16604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.321760][T16604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.352775][T16604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.413864][T16604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.439418][T16604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.557438][T16604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.580966][T16604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.625448][T16604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.949971][T16933] bridge6: entered promiscuous mode [ 403.962101][T16933] bridge6: entered allmulticast mode [ 404.014790][ T4944] Bluetooth: hci5: command tx timeout [ 404.336916][T16604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.466619][T16604] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.509080][T11285] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.516432][T11285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.611810][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.619111][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.748443][T16960] __nla_validate_parse: 14 callbacks suppressed [ 404.748466][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'. [ 404.770820][T16960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 404.780960][T16960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 404.829692][T16963] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2976'. [ 404.857671][T16960] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2976'. [ 405.049978][T16971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2979'. [ 405.374354][ T11] block nbd4: Possible stuck request ffff888027a47000: control (read@0,1024B). Runtime 180 seconds [ 405.385973][ T11] block nbd4: Possible stuck request ffff888027a471c0: control (read@1024,1024B). Runtime 180 seconds [ 405.397316][ T11] block nbd4: Possible stuck request ffff888027a47380: control (read@2048,1024B). Runtime 180 seconds [ 405.409105][ T11] block nbd4: Possible stuck request ffff888027a47540: control (read@3072,1024B). Runtime 180 seconds [ 405.869164][T17012] team_slave_1: Caught tx_queue_len zero misconfig [ 406.016366][T17015] netlink: 'syz.3.2991': attribute type 4 has an invalid length. [ 406.024428][T17020] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2992'. [ 406.049183][T17020] netlink: 46 bytes leftover after parsing attributes in process `syz.0.2992'. [ 406.077790][T17020] netlink: 46 bytes leftover after parsing attributes in process `syz.0.2992'. [ 406.227123][T16604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.427749][T16604] veth0_vlan: entered promiscuous mode [ 406.487473][T16604] veth1_vlan: entered promiscuous mode [ 406.651188][T16604] veth0_macvtap: entered promiscuous mode [ 406.679854][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2998'. [ 406.714911][T16604] veth1_macvtap: entered promiscuous mode [ 406.798606][T16604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.850156][T16604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.929395][T11271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.967190][T11271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.011162][T11271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.035689][T11271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.370562][T11285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.424826][T11285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.617439][T11283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.626937][T11283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.906161][T17098] xt_socket: unknown flags 0x8 [ 408.079208][T17099] bridge0: entered promiscuous mode [ 408.126113][T17099] bridge0: entered allmulticast mode [ 408.447130][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.470257][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.480372][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.493833][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.503691][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.874002][T17135] netlink: 'syz.1.3017': attribute type 39 has an invalid length. [ 408.900794][T17137] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 410.145850][T17179] netlink: 'syz.1.3025': attribute type 1 has an invalid length. [ 410.157659][T17179] __nla_validate_parse: 4 callbacks suppressed [ 410.157678][T17179] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3025'. [ 410.583433][ T4944] Bluetooth: hci0: command tx timeout [ 412.671619][ T4944] Bluetooth: hci0: command tx timeout [ 412.983386][ T4995] udevd[4995]: worker [5640] /devices/virtual/block/nbd4 timeout; kill it [ 413.021989][ T4995] udevd[4995]: seq 15185 '/devices/virtual/block/nbd4' killed [ 413.707027][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.206659][T17113] xfrm0 speed is unknown, defaulting to 1000 [ 414.264986][T17196] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3029'. [ 414.329559][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 414.367366][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 414.635985][T17210] veth1_to_bridge: left allmulticast mode [ 414.665426][T17210] veth1_to_bridge: left promiscuous mode [ 414.696012][T17210] bridge0: port 1(veth1_to_bridge) entered disabled state [ 414.735227][ T4944] Bluetooth: hci0: command tx timeout [ 414.756481][T17210] .`: (slave bond_slave_0): Releasing backup interface [ 414.818517][T17210] .`: (slave bond_slave_1): Releasing backup interface [ 414.879863][T17210] team0: Port device team_slave_0 removed [ 414.934315][T17210] team0: Port device team_slave_1 removed [ 414.991193][T17210] net_ratelimit: 42 callbacks suppressed [ 414.991317][T17210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 415.102788][T17214] batman_adv: batadv0: Adding interface: dummy0 [ 415.140974][T17214] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.254923][T17214] batman_adv: batadv0: Interface activated: dummy0 [ 415.350505][T17238] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 415.861323][T17255] netlink: 'syz.2.3043': attribute type 1 has an invalid length. [ 416.389755][T17272] syzkaller1: entered promiscuous mode [ 416.414457][T17272] syzkaller1: entered allmulticast mode [ 416.439595][T17277] xt_l2tp: v2 doesn't support IP mode [ 416.446236][T17276] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 416.492172][T17272] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3046'. [ 416.545098][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 416.820735][ T4944] Bluetooth: hci0: command tx timeout [ 416.899737][T17113] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.907510][T17113] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.915391][T17113] bridge_slave_0: entered allmulticast mode [ 416.923980][T17113] bridge_slave_0: entered promiscuous mode [ 416.934094][T17113] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.941333][T17113] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.949872][T17113] bridge_slave_1: entered allmulticast mode [ 416.958538][T17113] bridge_slave_1: entered promiscuous mode [ 417.191770][T17295] sctp: [Deprecated]: syz.2.3051 (pid 17295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.191770][T17295] Use struct sctp_sack_info instead [ 417.221208][T17113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.278964][T17299] netlink: 'syz.1.3052': attribute type 1 has an invalid length. [ 417.289524][T17113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.640866][T17113] team0: Port device team_slave_0 added [ 417.677475][T17113] team0: Port device team_slave_1 added [ 417.721235][T17320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'. [ 417.949776][T17328] netlink: 'syz.3.3058': attribute type 17 has an invalid length. [ 417.955125][T17113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.965231][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.997734][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3058'. [ 418.033282][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3058'. [ 418.071146][T17113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.222029][T17328] erspan0: entered promiscuous mode [ 418.259786][T17328] erspan0: left promiscuous mode [ 418.304930][T17113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.317603][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.382251][T17113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.788235][T17113] hsr_slave_0: entered promiscuous mode [ 418.838058][T17113] hsr_slave_1: entered promiscuous mode [ 418.874288][T17364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3065'. [ 418.886779][T17113] debugfs: 'hsr0' already exists in 'hsr' [ 418.916965][T17113] Cannot create hsr debugfs directory [ 418.971799][T17364] netlink: 'syz.3.3065': attribute type 21 has an invalid length. [ 419.043804][T17364] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3065'. [ 419.100062][T17364] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3065'. [ 420.224259][T17409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3075'. [ 420.372600][T17415] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 420.616698][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3079'. [ 420.629477][T17429] netlink: 'syz.4.3079': attribute type 3 has an invalid length. [ 420.713526][T17430] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 420.714292][T17113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.737860][T17113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.993398][T17444] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 421.070990][T17113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.106741][T17113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.166081][T17453] 8021q: VLANs not supported on ip6_vti0 [ 421.499367][T17113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.538814][T17113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.557597][T17465] __nla_validate_parse: 4 callbacks suppressed [ 421.557620][T17465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3086'. [ 421.582373][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3085'. [ 421.638105][T17459] bridge5: entered allmulticast mode [ 421.645692][T17473] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3085'. [ 421.798508][T17459] bridge5: left allmulticast mode [ 422.091513][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3091'. [ 422.582023][T17502] openvswitch: netlink: Duplicate key (type 2). [ 422.790320][T17113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.833732][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.877043][T17113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.928819][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.965469][T17113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 423.017941][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.038059][T17532] veth0: entered promiscuous mode [ 423.046222][T17113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 423.076819][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.085701][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3102'. [ 423.268482][T17540] netlink: 'syz.3.3103': attribute type 1 has an invalid length. [ 423.285582][T17540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3103'. [ 423.530183][T17546] Cannot find add_set index 0 as target [ 423.606537][T17113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.641988][T17558] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3106'. [ 423.702529][T17113] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.747116][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.754445][T11289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.807530][T11276] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.815053][T11276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.277808][T17580] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 424.590135][T17113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.645347][T17113] veth0_vlan: entered promiscuous mode [ 424.662911][T17113] veth1_vlan: entered promiscuous mode [ 424.698476][T17113] veth0_macvtap: entered promiscuous mode [ 424.709761][T17113] veth1_macvtap: entered promiscuous mode [ 424.732765][T17113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.756321][T17113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.780249][T11289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.790684][T11289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.811599][T11289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.837754][T11289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.835256][T17595] ipvlan1: Caught tx_queue_len zero misconfig [ 425.899513][T17597] netlink: 'syz.4.3113': attribute type 39 has an invalid length. [ 425.910889][T17597] hsr_slave_0: left promiscuous mode [ 425.918995][T17597] hsr_slave_1: left promiscuous mode [ 426.478106][T17559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.703946][T11283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.741281][T11283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.854077][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3117'. [ 426.874115][T11270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.883914][T11270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.888224][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3117'. [ 426.923666][T17620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3119'. [ 427.603620][T17631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3013'. [ 427.629192][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.649420][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.659957][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.672222][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.685807][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 427.892136][ T5639] bridge0: port 1(syz_tun) entered disabled state [ 427.987444][ T5639] syz_tun (unregistering): left allmulticast mode [ 428.003363][ T5639] syz_tun (unregistering): left promiscuous mode [ 428.026417][ T5639] bridge0: port 1(syz_tun) entered disabled state [ 428.102291][T17655] Bluetooth: MGMT ver 1.23 [ 428.129133][T17654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3127'. [ 428.160660][T17654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3127'. [ 428.465789][T17678] netlink: 'syz.3.3133': attribute type 11 has an invalid length. [ 428.510986][T17680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3130'. [ 428.921813][T17696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3135'. [ 429.080299][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 429.341348][T17707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 429.383370][T17707] block nbd6: Unsupported socket: should be TCP or UNIX. [ 429.409916][T17643] xfrm0 speed is unknown, defaulting to 1000 [ 429.779449][ T5629] Bluetooth: hci3: command tx timeout [ 429.972620][T17731] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.606419][T17748] tipc: Enabling of bearer rejected, failed to enable media [ 431.108565][T17764] netlink: 'syz.2.3152': attribute type 5 has an invalid length. [ 431.530450][T17776] veth0_to_bridge: entered promiscuous mode [ 431.549757][T17774] veth0_to_bridge: left promiscuous mode [ 431.596143][T17789] syzkaller0: entered promiscuous mode [ 431.617368][T17789] syzkaller0: entered allmulticast mode [ 431.658353][T17795] x_tables: duplicate underflow at hook 2 [ 431.854257][ T5629] Bluetooth: hci3: command tx timeout [ 432.310744][T17803] syzkaller1: entered promiscuous mode [ 432.318401][T17803] syzkaller1: entered allmulticast mode [ 432.337360][T17815] __nla_validate_parse: 3 callbacks suppressed [ 432.337381][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'. [ 432.448664][T17821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3166'. [ 432.650614][T17643] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.697090][T17643] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.729331][T17643] bridge_slave_0: entered allmulticast mode [ 432.764885][T17643] bridge_slave_0: entered promiscuous mode [ 432.791546][T17643] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.809126][T17643] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.833682][T17832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3168'. [ 432.833704][T17643] bridge_slave_1: entered allmulticast mode [ 432.852743][T17643] bridge_slave_1: entered promiscuous mode [ 433.007192][T17643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.051704][T17643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.235994][T17643] team0: Port device team_slave_0 added [ 433.270177][T17643] team0: Port device team_slave_1 added [ 433.473653][T17643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.520394][T17643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.672097][T17643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.737099][T17853] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3173'. [ 433.805854][T17865] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3174'. [ 433.871893][T17643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.916775][T17643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.945803][ T5629] Bluetooth: hci3: command tx timeout [ 433.964489][T17643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.165642][T17643] hsr_slave_0: entered promiscuous mode [ 434.193594][ T30] audit: type=1804 audit(1779871387.727:10): pid=17878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3178" name="/newroot/658/cgroup.controllers" dev="tmpfs" ino=3373 res=1 errno=0 [ 434.225653][T17643] hsr_slave_1: entered promiscuous mode [ 434.242056][T17643] debugfs: 'hsr0' already exists in 'hsr' [ 434.249549][T17643] Cannot create hsr debugfs directory [ 434.258705][ T30] audit: type=1800 audit(1779871387.727:11): pid=17878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3178" name="cgroup.controllers" dev="tmpfs" ino=3373 res=0 errno=0 [ 434.397757][T17888] netlink: 'syz.2.3181': attribute type 1 has an invalid length. [ 434.415234][T17888] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3181'. [ 434.435158][T17888] netlink: 'syz.2.3181': attribute type 1 has an invalid length. [ 434.451833][T17888] netlink: 'syz.2.3181': attribute type 8 has an invalid length. [ 434.483934][T17888] netlink: 582 bytes leftover after parsing attributes in process `syz.2.3181'. [ 434.524032][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3181'. [ 434.852314][T17901] vcan1: entered promiscuous mode [ 434.884492][T17901] vcan1: entered allmulticast mode [ 435.245709][T17915] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 435.323908][T17920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.454761][ T11] block nbd4: Possible stuck request ffff888027a47000: control (read@0,1024B). Runtime 210 seconds [ 435.465851][ T11] block nbd4: Possible stuck request ffff888027a471c0: control (read@1024,1024B). Runtime 210 seconds [ 435.477375][ T11] block nbd4: Possible stuck request ffff888027a47380: control (read@2048,1024B). Runtime 210 seconds [ 435.491659][ T11] block nbd4: Possible stuck request ffff888027a47540: control (read@3072,1024B). Runtime 210 seconds [ 435.789444][T17940] Bluetooth: MGMT ver 1.23 [ 435.997662][T17643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.009650][T17643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.021379][ T5629] Bluetooth: hci3: command tx timeout [ 436.308710][T17643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.349078][T17643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.412150][T17965] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 436.445878][T17967] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 436.470394][T17968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3202'. [ 436.485888][T17968] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3202'. [ 436.689677][T17643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.713064][T17643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.899232][T17984] netlink: 'syz.4.3208': attribute type 1 has an invalid length. [ 436.907337][T17643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.907415][T17643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.153583][T17988] xt_limit: Overflow, try lower: 271964/0 [ 437.174724][T17991] netlink: 'syz.4.3211': attribute type 2 has an invalid length. [ 437.407375][T17643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.445070][T17643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.545536][T17643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.581613][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880586d9800: rx timeout, send abort [ 437.610765][T17643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.648826][T17643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.721069][T17643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.740879][T18014] netlink: 'syz.4.3215': attribute type 3 has an invalid length. [ 437.751556][T17643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.794647][T17643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.070835][T18029] netlink: 'syz.0.3219': attribute type 23 has an invalid length. [ 438.081757][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805805fc00: rx timeout, send abort [ 438.094697][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880586d9800: abort rx timeout. Force session deactivation [ 438.138471][T17643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.333622][T17643] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.349091][T18032] netlink: 'syz.3.3220': attribute type 1 has an invalid length. [ 438.396371][T18036] openvswitch: netlink: IPv4 tun info is not correct [ 438.403169][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.403322][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.481009][ T8122] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.488346][ T8122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.590198][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805805fc00: abort rx timeout. Force session deactivation [ 439.087751][T18055] netlink: 'syz.4.3225': attribute type 21 has an invalid length. [ 439.877961][ T8122] tipc: Subscription rejected, illegal request [ 440.298879][T18098] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 440.774125][T18117] netlink: 'syz.2.3239': attribute type 16 has an invalid length. [ 440.791370][T18120] __nla_validate_parse: 2 callbacks suppressed [ 440.791392][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3236'. [ 440.809385][T18117] netlink: 'syz.2.3239': attribute type 17 has an invalid length. [ 441.077535][T18117] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 441.102085][T18117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.144986][T17643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.387540][T17643] veth0_vlan: entered promiscuous mode [ 441.422350][T18129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3243'. [ 441.447047][T17643] veth1_vlan: entered promiscuous mode [ 441.669278][T17643] veth0_macvtap: entered promiscuous mode [ 441.712232][T17643] veth1_macvtap: entered promiscuous mode [ 441.774148][T18134] IPv6: sit1: Disabled Multicast RS [ 441.841183][T17643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.972779][T17643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.061514][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.091803][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.141761][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.168847][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.268997][T18154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3251'. [ 442.373457][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3251'. [ 442.721218][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.762617][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.882406][ T8122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.905264][ T8122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.949126][T18170] netlink: 'syz.0.3254': attribute type 12 has an invalid length. [ 442.971891][T18172] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3255'. [ 443.013118][T18170] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3254'. [ 443.227753][T18178] netlink: 'syz.4.3256': attribute type 2 has an invalid length. [ 443.348643][T18176] netlink: 'syz.1.3123': attribute type 1 has an invalid length. [ 444.303776][ T4944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 444.318316][ T4944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 444.329710][ T4944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 444.348382][ T4944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 444.358464][ T4944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 444.500510][T18212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3266'. [ 444.542097][T18212] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3266'. [ 444.666964][T18215] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3266'. [ 444.811979][T18217] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3267'. [ 444.860552][T18217] syzkaller0: entered promiscuous mode [ 444.879426][T18217] syzkaller0: entered allmulticast mode [ 445.113432][ T8122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.127940][ T8122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.145473][ T8122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 445.158146][ T8122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 445.340348][ T8122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.370742][ T8122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.392475][ T8122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 445.404468][ T8122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 445.804984][ T8122] team0: Port device netdevsim1 removed [ 445.840511][ T8122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.865001][ T8122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.891266][ T8122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 445.905916][ T8122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 446.068353][ T8122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.096505][ T8122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.117080][ T8122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 446.128899][ T8122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 446.161091][T18204] xfrm0 speed is unknown, defaulting to 1000 [ 446.413637][ T5629] Bluetooth: hci4: command tx timeout [ 446.709088][ T8122] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 446.720035][ T8122] ip6gre1 (unregistering): left promiscuous mode [ 446.725272][T18190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.747111][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3268'. [ 446.833640][ T8122] bond12 (unregistering): (slave ip6gretap2): Releasing active interface [ 446.872414][T18267] netlink: 'syz.3.3271': attribute type 1 has an invalid length. [ 446.906175][T18267] netlink: 'syz.3.3271': attribute type 2 has an invalid length. [ 446.996238][ T8122] bond18 (unregistering): (slave ip6gretap3): Releasing active interface [ 447.235967][ T8122] 0ªX¹¦Dö» (unregistering): left promiscuous mode [ 447.363468][ T8122] bond10 (unregistering): (slave geneve4): Releasing active interface [ 447.523516][ T8122] bond8 (unregistering): (slave bridge2): Releasing active interface [ 447.730730][ T8122] bond0 (unregistering): Released all slaves [ 447.747513][ T8122] bond1 (unregistering): Released all slaves [ 447.769382][ T8122] bond2 (unregistering): Released all slaves [ 447.815064][ T8122] bond3 (unregistering): Released all slaves [ 447.837187][ T8122] bond4 (unregistering): Released all slaves [ 447.899245][ T8122] bond5 (unregistering): Released all slaves [ 447.928455][ T8122] bond6 (unregistering): Released all slaves [ 447.952327][ T8122] bond7 (unregistering): Released all slaves [ 447.973961][ T8122] bond8 (unregistering): Released all slaves [ 447.993453][ T8122] bond9 (unregistering): Released all slaves [ 448.014508][ T8122] bond10 (unregistering): Released all slaves [ 448.047732][ T8122] bond11 (unregistering): Released all slaves [ 448.066439][ T8122] bond12 (unregistering): Released all slaves [ 448.082809][ T8122] bond13 (unregistering): Released all slaves [ 448.109512][ T8122] bond14 (unregistering): Released all slaves [ 448.126958][ T8122] bond15 (unregistering): Released all slaves [ 448.147308][ T8122] bond16 (unregistering): Released all slaves [ 448.168093][ T8122] bond17 (unregistering): Released all slaves [ 448.189272][ T8122] bond18 (unregistering): Released all slaves [ 448.493476][ T5629] Bluetooth: hci4: command tx timeout [ 448.679752][ T8122] : left promiscuous mode [ 448.927287][T18292] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 448.976919][T18292] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 449.018099][ T8122] tipc: Disabling bearer [ 449.080663][ T8122] tipc: Left network mode [ 449.485019][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3277'. [ 449.548114][T18321] tipc: Enabled bearer , priority 0 [ 449.578737][T18292] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 449.610071][T18292] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 449.772398][T18318] syzkaller0: entered promiscuous mode [ 449.811800][T18318] syzkaller0: entered allmulticast mode [ 449.840148][T18318] tipc: Resetting bearer [ 450.210466][T18317] tipc: Resetting bearer [ 450.588694][ T5629] Bluetooth: hci4: command tx timeout [ 451.008827][T18356] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3282'. [ 452.655518][ T5629] Bluetooth: hci4: command tx timeout [ 454.045805][T18317] tipc: Disabling bearer [ 454.067746][T18292] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.076208][T18292] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 454.090927][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 454.392393][T18292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 454.410611][T18292] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 454.991645][T18204] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.000157][T18383] netlink: 'syz.3.3287': attribute type 1 has an invalid length. [ 455.033160][T18383] netlink: 'syz.3.3287': attribute type 1 has an invalid length. [ 455.041237][T18204] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.062350][T18204] bridge_slave_0: entered allmulticast mode [ 455.086128][T18204] bridge_slave_0: entered promiscuous mode [ 455.200324][T18204] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.211798][T18407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3290'. [ 455.221083][T18204] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.221330][T18204] bridge_slave_1: entered allmulticast mode [ 455.232687][T18204] bridge_slave_1: entered promiscuous mode [ 455.441149][T18420] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 455.535327][T18419] ip6gre1: entered allmulticast mode [ 455.692105][T18204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.767362][T18204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.883032][T18430] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3295'. [ 455.979966][T18433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3296'. [ 456.090429][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 456.117813][T18204] team0: Port device team_slave_0 added [ 456.169890][T18204] team0: Port device team_slave_1 added [ 456.256796][T18442] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3299'. [ 456.348824][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3299'. [ 456.380994][T18446] netlink: 'syz.2.3301': attribute type 61 has an invalid length. [ 456.401281][T18204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.403774][T18446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3301'. [ 456.463681][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.543601][T18204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.625838][T18204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.659945][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.693938][T18204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.831261][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3304'. [ 456.936242][ T8122] veth1_vlan: left allmulticast mode [ 456.956920][ T8122] veth1_vlan: left promiscuous mode [ 456.981753][ T8122] veth0_vlan: left promiscuous mode [ 457.030191][T18478] netlink: 'syz.2.3306': attribute type 21 has an invalid length. [ 457.138966][ T8122] team0 (unregistering): Port device batadv1 removed [ 457.165291][ T8122] pim6reg (unregistering): left allmulticast mode [ 457.208777][ T8122] team0 (unregistering): Port device macvlan1 removed [ 457.391225][ T8122] team0 (unregistering): Port device team_slave_1 removed [ 457.737146][T18204] hsr_slave_0: entered promiscuous mode [ 457.763084][T18204] hsr_slave_1: entered promiscuous mode [ 457.782143][T18204] debugfs: 'hsr0' already exists in 'hsr' [ 457.797328][T18204] Cannot create hsr debugfs directory [ 458.607088][ T8122] IPVS: stop unused estimator thread 0... [ 458.816245][T18520] xfrm0 speed is unknown, defaulting to 1000 [ 459.171204][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 459.221737][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 459.739419][T18555] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3321'. [ 460.470159][T18580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3327'. [ 460.809009][T18204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 460.851373][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.882294][T18204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 460.939315][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.972684][T18204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 461.009340][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.042112][T18204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 461.092633][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.357107][T18605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.408713][T18608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.448742][T18204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.563671][T18204] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.623883][T11284] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.631120][T11284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.689619][T11284] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.696881][T11284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.848553][T18618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3333'. [ 462.446175][T18638] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3338'. [ 462.492097][T18638] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3338'. [ 462.519403][T18638] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3338'. [ 463.546944][T18676] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 463.637605][T18676] bond2 (unregistering): Released all slaves [ 463.775652][T18204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.423707][T18721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3350'. [ 464.543507][T18721] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3350'. [ 465.028073][T18204] veth0_vlan: entered promiscuous mode [ 465.047887][T18204] veth1_vlan: entered promiscuous mode [ 465.151038][T18204] veth0_macvtap: entered promiscuous mode [ 465.165534][T18204] veth1_macvtap: entered promiscuous mode [ 465.195714][T18204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.242203][T18204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.280606][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.306547][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.325951][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.358461][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.538561][ T11] block nbd4: Possible stuck request ffff888027a47000: control (read@0,1024B). Runtime 240 seconds [ 465.549523][ T11] block nbd4: Possible stuck request ffff888027a471c0: control (read@1024,1024B). Runtime 240 seconds [ 465.561164][ T11] block nbd4: Possible stuck request ffff888027a47380: control (read@2048,1024B). Runtime 240 seconds [ 465.572532][ T11] block nbd4: Possible stuck request ffff888027a47540: control (read@3072,1024B). Runtime 240 seconds [ 465.881175][T18762] Unsupported ieee802154 address type: 0 [ 465.900947][T11270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.910354][T18764] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3358'. [ 465.930273][T11270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.939968][T18764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3358'. [ 465.980018][T18764] syzkaller0: entered promiscuous mode [ 465.992809][T18764] syzkaller0: entered allmulticast mode [ 466.065077][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'. [ 466.123777][T11270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.150428][T11270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.171676][T18774] netlink: 'syz.1.3360': attribute type 10 has an invalid length. [ 466.213475][T18774] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3360'. [ 466.689132][T18791] netlink: 'syz.4.3260': attribute type 3 has an invalid length. [ 467.253478][T18804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.275724][T18804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.298237][T18804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.320829][T18804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.331979][T18804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.385939][T18841] IPv6: sit1: Disabled Multicast RS [ 468.776655][T18803] xfrm0 speed is unknown, defaulting to 1000 [ 469.036039][T18832] netlink: 'syz.0.3371': attribute type 16 has an invalid length. [ 469.071430][T18832] netlink: 'syz.0.3371': attribute type 17 has an invalid length. [ 469.096657][T18856] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3376'. [ 469.378383][T18804] Bluetooth: hci1: command tx timeout [ 469.584560][T18835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'. [ 470.867164][T18891] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 471.186166][T18905] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 471.235439][T18803] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.247427][T18803] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.258528][T18803] bridge_slave_0: entered allmulticast mode [ 471.271558][T18803] bridge_slave_0: entered promiscuous mode [ 471.406797][T18896] nbd6: detected capacity change from 0 to 63 [ 471.439904][T18804] block nbd6: Receive control failed (result -32) [ 471.448395][ T5629] block nbd6: Receive control failed (result -32) [ 471.458971][ T5629] Bluetooth: hci1: command tx timeout [ 471.481301][ T5643] block nbd6: Dead connection, failed to find a fallback [ 471.497318][ T5643] block nbd6: shutting down sockets [ 471.504262][ T5643] blk_print_req_error: 138 callbacks suppressed [ 471.504283][ T5643] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.520232][ T5643] buffer_io_error: 138 callbacks suppressed [ 471.520251][ T5643] Buffer I/O error on dev nbd6, logical block 0, async page read [ 471.534713][ T5643] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.544265][ T5643] Buffer I/O error on dev nbd6, logical block 1, async page read [ 471.552239][ T5643] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.561527][ T5643] Buffer I/O error on dev nbd6, logical block 2, async page read [ 471.569560][ T5643] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.579717][ T5643] Buffer I/O error on dev nbd6, logical block 3, async page read [ 471.588333][ T5643] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.597756][ T5643] Buffer I/O error on dev nbd6, logical block 0, async page read [ 471.606228][ T5643] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.616761][ T5643] Buffer I/O error on dev nbd6, logical block 1, async page read [ 471.624820][ T5643] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.643142][ T5643] Buffer I/O error on dev nbd6, logical block 2, async page read [ 471.652765][ T5643] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.671939][ T5643] Buffer I/O error on dev nbd6, logical block 3, async page read [ 471.690250][ T5643] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.716831][ T5643] Buffer I/O error on dev nbd6, logical block 0, async page read [ 471.740767][ T5643] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.778405][T18803] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.778447][ T5643] Buffer I/O error on dev nbd6, logical block 1, async page read [ 471.819023][T18803] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.840536][T18803] bridge_slave_1: entered allmulticast mode [ 471.849070][ T5643] ldm_validate_partition_table(): Disk read failed. [ 471.869624][ T5643] Dev nbd6: unable to read RDB block 0 [ 471.882512][T18803] bridge_slave_1: entered promiscuous mode [ 471.897678][ T5643] nbd6: unable to read partition table [ 471.950835][ T5643] ldm_validate_partition_table(): Disk read failed. [ 471.960114][ T5643] Dev nbd6: unable to read RDB block 0 [ 471.968781][ T5643] nbd6: unable to read partition table [ 472.008414][T18915] tipc: Started in network mode [ 472.018489][T18915] tipc: Node identity 86896b72235e, cluster identity 4711 [ 472.032241][T18915] tipc: Enabled bearer , priority 0 [ 472.122709][T18803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.155441][T18803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.188960][T18915] tipc: Disabling bearer [ 472.258185][T18921] netlink: 'syz.2.3390': attribute type 10 has an invalid length. [ 472.333280][T18921] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.347095][T18921] bond0: (slave team0): Enslaving as an active interface with an up link [ 472.383475][T18803] team0: Port device team_slave_0 added [ 472.411765][T18803] team0: Port device team_slave_1 added [ 472.525982][T18927] syzkaller0: entered promiscuous mode [ 472.541319][T18927] syzkaller0: entered allmulticast mode [ 472.565154][T18803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.593323][T18803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.664202][T18803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.696095][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3393'. [ 472.725796][T18803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.748974][T18803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.842819][T18803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.861274][T18936] sctp: [Deprecated]: syz.1.3394 (pid 18936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.861274][T18936] Use struct sctp_sack_info instead [ 473.029422][T18803] hsr_slave_0: entered promiscuous mode [ 473.050848][T18803] hsr_slave_1: entered promiscuous mode [ 473.092089][T18803] debugfs: 'hsr0' already exists in 'hsr' [ 473.120500][T18803] Cannot create hsr debugfs directory [ 473.157895][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 473.177263][T18888] syz.0.3383 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 473.289299][T18888] CPU: 0 UID: 0 PID: 18888 Comm: syz.0.3383 Not tainted syzkaller #0 PREEMPT(full) [ 473.289334][T18888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.289370][T18888] Call Trace: [ 473.289465][T18888] [ 473.289533][T18888] dump_stack_lvl+0xe8/0x150 [ 473.289706][T18888] dump_header+0xd3/0x4c0 [ 473.289745][T18888] oom_kill_process+0x3ab/0x970 [ 473.289794][T18888] out_of_memory+0x106c/0x1410 [ 473.289817][T18888] ? try_charge_memcg+0xbb9/0x1570 [ 473.289898][T18888] ? __pfx___mutex_lock+0x10/0x10 [ 473.289995][T18888] ? __pfx_out_of_memory+0x10/0x10 [ 473.290016][T18888] ? do_raw_spin_unlock+0xf5/0x210 [ 473.290077][T18888] try_charge_memcg+0xc77/0x1570 [ 473.290124][T18888] ? __pfx_try_charge_memcg+0x10/0x10 [ 473.290147][T18888] ? percpu_ref_tryget+0x15/0x180 [ 473.290196][T18888] ? charge_memcg+0x23/0x2b0 [ 473.290225][T18888] charge_memcg+0x1a2/0x2b0 [ 473.290252][T18888] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 473.290278][T18888] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 473.290316][T18888] __swap_cache_prepare_and_add+0xdc/0x700 [ 473.290354][T18888] ? page_rmappable_folio+0x9a/0x170 [ 473.290385][T18888] swap_cache_alloc_folio+0xf1/0x240 [ 473.290412][T18888] swap_cluster_readahead+0x355/0x670 [ 473.290441][T18888] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 473.290478][T18888] ? get_vma_policy+0x27b/0x3c0 [ 473.290510][T18888] swapin_readahead+0x196/0xc50 [ 473.290535][T18888] ? swap_table_get+0x1e/0x260 [ 473.290562][T18888] ? __pfx_swapin_readahead+0x10/0x10 [ 473.290586][T18888] ? swap_table_get+0x1e/0x260 [ 473.290606][T18888] ? swap_table_get+0x1e/0x260 [ 473.290623][T18888] ? swap_table_get+0x1e/0x260 [ 473.290644][T18888] ? swap_table_get+0x216/0x260 [ 473.290665][T18888] ? swap_cache_get_folio+0x2e4/0x2f0 [ 473.290694][T18888] do_swap_page+0x555/0x5120 [ 473.290728][T18888] ? __pte_offset_map+0x29/0x240 [ 473.290751][T18888] ? __pte_offset_map+0x29/0x240 [ 473.290783][T18888] ? do_swap_page+0x128/0x5120 [ 473.290803][T18888] ? __pfx_do_swap_page+0x10/0x10 [ 473.290823][T18888] ? __pte_offset_map+0x1ae/0x240 [ 473.290848][T18888] ? pte_offset_map_rw_nolock+0xea/0x160 [ 473.290875][T18888] handle_mm_fault+0x12d4/0x3170 [ 473.290913][T18888] ? handle_mm_fault+0xee/0x3170 [ 473.290942][T18888] ? __pfx_handle_mm_fault+0x10/0x10 [ 473.290962][T18888] ? lock_vma_under_rcu+0x45a/0x500 [ 473.290986][T18888] ? __pfx___sys_bpf+0x10/0x10 [ 473.291057][T18888] do_user_addr_fault+0xa73/0x1340 [ 473.291095][T18888] ? rcu_is_watching+0x15/0xb0 [ 473.291124][T18888] ? trace_page_fault_user+0x84/0x1e0 [ 473.291145][T18888] exc_page_fault+0x6a/0xc0 [ 473.291205][T18888] asm_exc_page_fault+0x26/0x30 [ 473.291239][T18888] RIP: 0033:0x7fa30719ce6b [ 473.291286][T18888] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 473.291315][T18888] RSP: 002b:00007fa307fc6028 EFLAGS: 00010217 [ 473.291355][T18888] RAX: 000000000000000c RBX: 00007fa307415fa0 RCX: ffffffffffffffe8 [ 473.291368][T18888] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000000 [ 473.291379][T18888] RBP: 00007fa307232d6f R08: 0000000000000000 R09: 0000000000000000 [ 473.291390][T18888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.291401][T18888] R13: 00007fa307416038 R14: 00007fa307415fa0 R15: 00007ffec86f3008 [ 473.291433][T18888] [ 473.649875][T18888] memory: usage 307200kB, limit 307200kB, failcnt 639 [ 473.656910][T18888] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 473.665094][T18888] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 473.672518][T18888] Memory cgroup stats for /syz0: [ 473.673000][T18888] cache 0 [ 473.680936][T18888] rss 0 [ 473.683821][T18888] rss_huge 0 [ 473.687053][T18888] shmem 0 [ 473.690021][T18888] mapped_file 0 [ 473.693615][T18888] dirty 0 [ 473.696580][T18888] writeback 0 [ 473.699885][T18888] workingset_refault_anon 0 [ 473.704476][T18888] workingset_refault_file 103 [ 473.709188][T18888] swap 229376 [ 473.715230][T18888] swapcached 229376 [ 473.719122][T18888] pgpgin 79259 [ 473.722551][T18888] pgpgout 79259 [ 473.726130][T18888] pgfault 127122 [ 473.730122][T18888] pgmajfault 6 [ 473.733621][T18888] inactive_anon 0 [ 473.737391][T18888] active_anon 0 [ 473.740908][T18888] inactive_file 0 [ 473.756800][T18888] active_file 0 [ 473.760344][T18888] unevictable 0 [ 473.763904][T18888] hierarchical_memory_limit 314572800 [ 473.769320][T18888] hierarchical_memsw_limit 9223372036854771712 [ 473.775786][T18888] total_cache 0 [ 473.779318][T18888] total_rss 0 [ 473.782632][T18888] total_rss_huge 0 [ 473.786448][T18888] total_shmem 0 [ 473.789944][T18888] total_mapped_file 0 [ 473.794197][T18888] total_dirty 0 [ 473.797722][T18888] total_writeback 0 [ 473.802376][T18888] total_workingset_refault_anon 0 [ 473.807540][T18888] total_workingset_refault_file 103 [ 473.812784][T18888] total_swap 229376 [ 473.816718][T18888] total_swapcached 229376 [ 473.821123][T18888] total_pgpgin 79259 [ 473.825680][T18888] total_pgpgout 79259 [ 473.829716][T18888] total_pgfault 127122 [ 473.834267][T18888] total_pgmajfault 6 [ 473.838208][T18888] total_inactive_anon 0 [ 473.842393][T18888] total_active_anon 0 [ 473.846483][T18888] total_inactive_file 0 [ 473.850668][T18888] total_active_file 0 [ 473.853724][ T5629] Bluetooth: hci1: command tx timeout [ 473.860996][T18888] total_unevictable 0 [ 473.865872][T18888] anon_cost 0 [ 473.869208][T18888] file_cost 0 [ 473.872521][T18888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3383,pid=18887,uid=0 [ 473.892030][T18888] Memory cgroup out of memory: Killed process 18887 (syz.0.3383) total-vm:106660kB, anon-rss:1244kB, file-rss:26952kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 474.359146][T18956] openvswitch: netlink: Missing valid actions attribute. [ 474.388794][T18956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.456459][T18958] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 474.758412][T18803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.771357][T18803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 474.804112][T18803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 475.014892][T18980] openvswitch: netlink: Tunnel attr 321 out of range max 16 [ 475.256070][T18803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.276027][T18803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 475.287231][T18803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 475.591815][T18989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3410'. [ 475.656594][T18991] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 475.674781][T18803] team0: Port device netdevsim1 removed [ 475.684770][T18803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.697821][T18803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 475.722120][T18803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 475.933157][ T5629] Bluetooth: hci1: command tx timeout [ 476.053342][T18991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.068811][T19008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3416'. [ 476.137487][T18803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.148708][T18803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 476.164120][T18803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 476.190036][T19010] x_tables: duplicate underflow at hook 2 [ 476.205047][T18991] netlink: 'syz.2.3411': attribute type 9 has an invalid length. [ 476.236117][T19010] bridge0: port 3(team0) entered blocking state [ 476.259213][T19010] bridge0: port 3(team0) entered disabled state [ 476.278714][T19010] team0: entered allmulticast mode [ 476.296117][T19010] team_slave_0: entered allmulticast mode [ 476.312704][T19010] team_slave_1: entered allmulticast mode [ 476.367351][T19010] team0: entered promiscuous mode [ 476.381908][T19010] team_slave_0: entered promiscuous mode [ 476.400117][T19010] team_slave_1: entered promiscuous mode [ 476.420948][T19010] bridge0: port 3(team0) entered blocking state [ 476.427442][T19010] bridge0: port 3(team0) entered forwarding state [ 476.495455][T18991] bond2: (slave ip6gretap0): making interface the new active one [ 476.529251][T18991] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 476.744893][T19025] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3419'. [ 477.160867][T19033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3422'. [ 477.237082][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3423'. [ 477.259949][T19036] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3423'. [ 477.285605][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'. [ 477.477908][T18803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.517529][T18803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.551945][T18803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 477.595348][T18803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.622823][T18803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 477.676762][T18803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.703867][T18803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 477.744915][T18803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.992431][T18803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.018496][T18803] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.088046][ T8122] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.095314][ T8122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.215808][T11271] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.223235][T11271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.226965][T19065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.267694][T19064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3430'. [ 478.795367][T19091] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3437'. [ 479.210114][T19108] veth1_macvtap: entered allmulticast mode [ 479.398660][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3444'. [ 479.495211][T19114] veth1_macvtap: left allmulticast mode [ 479.671743][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 479.698096][T19133] netlink: 'syz.0.3446': attribute type 1 has an invalid length. [ 479.716553][T18803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.731557][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 479.755856][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 479.782783][T19133] netlink: 'syz.0.3446': attribute type 1 has an invalid length. [ 479.807323][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 479.830884][T19136] --map-set only usable from mangle table [ 479.965684][T18803] veth0_vlan: entered promiscuous mode [ 480.034581][T18803] veth1_vlan: entered promiscuous mode [ 480.130930][T18803] veth0_macvtap: entered promiscuous mode [ 480.180030][T18803] veth1_macvtap: entered promiscuous mode [ 480.312337][T18803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.341215][T19152] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3453'. [ 480.375289][T18803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.408771][ T8122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.448537][ T8122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.518087][ T8122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.530343][T19152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3453'. [ 480.571239][ T8122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.680567][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a63d800: rx timeout, send abort [ 480.705459][T19156] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 480.718149][T19156] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 480.729408][T19156] team0: Failed to send options change via netlink (err -105) [ 480.745042][T19156] team0: Port device batadv1 added [ 480.884422][T19165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3456'. [ 480.893744][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 480.894087][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 481.008754][T11271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.040314][T11271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.180770][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a63d400: rx timeout, send abort [ 481.189562][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a63d800: abort rx timeout. Force session deactivation [ 481.230541][T11295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.254581][T11295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.462479][T19188] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 481.658526][T19189] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 481.689481][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a63d400: abort rx timeout. Force session deactivation [ 481.728035][T19189] bond1 (unregistering): Released all slaves [ 482.267224][T19235] netlink: 'syz.0.3474': attribute type 12 has an invalid length. [ 482.294014][T19239] netlink: 'syz.0.3474': attribute type 12 has an invalid length. [ 482.310370][T19241] IPVS: Error connecting to the multicast addr [ 482.634483][T19258] tap0: tun_chr_ioctl cmd 1074025672 [ 482.648455][T19258] tap0: ignored: set checksum disabled [ 482.765208][T19258] bond3: Unable to set down delay as MII monitoring is disabled [ 482.846999][T19258] bond3 (unregistering): Released all slaves [ 483.430248][T19293] syzkaller1: entered promiscuous mode [ 483.487574][T19293] syzkaller1: entered allmulticast mode [ 483.538376][T19306] __nla_validate_parse: 6 callbacks suppressed [ 483.538398][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3493'. [ 483.593550][T19288] xfrm0 speed is unknown, defaulting to 1000 [ 484.183130][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'. [ 484.544884][T19345] netlink: 'syz.0.3503': attribute type 21 has an invalid length. [ 484.554095][T19349] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 484.579533][T19345] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.616178][T19345] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 484.624326][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'. [ 484.624364][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'. [ 484.669543][T19355] netlink: 'syz.1.3505': attribute type 11 has an invalid length. [ 484.679069][T19351] netlink: 'syz.3.3504': attribute type 61 has an invalid length. [ 484.825747][ T30] audit: type=1107 audit(1779871438.367:12): pid=19348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 484.914730][T19361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.171159][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3508'. [ 485.828113][T19393] bridge0: port 3(syz_tun) entered blocking state [ 485.885821][T19393] bridge0: port 3(syz_tun) entered disabled state [ 485.913349][T19393] syz_tun: entered allmulticast mode [ 485.983627][T19393] syz_tun: entered promiscuous mode [ 485.989807][T19393] bridge0: port 3(syz_tun) entered blocking state [ 485.996466][T19393] bridge0: port 3(syz_tun) entered forwarding state [ 486.037300][T19401] netem: change failed [ 486.051991][T19400] netem: change failed [ 486.238268][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 486.270771][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ed9d800: rx timeout, send abort [ 486.303568][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 486.319890][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 486.538054][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3520'. [ 486.551920][T19420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3521'. [ 486.709797][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3523'. [ 486.729390][T19427] netlink: 'syz.3.3523': attribute type 6 has an invalid length. [ 486.739916][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3523'. [ 486.766902][T19425] veth1: entered allmulticast mode [ 486.771082][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f613800: rx timeout, send abort [ 486.780860][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ed9d800: abort rx timeout. Force session deactivation [ 486.816205][ C1] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88802f613800: connection exists (fe ff). last cmd: 20 [ 486.853954][T11295] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.865604][T11295] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.875579][T11295] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.885539][T11295] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.066093][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f613400: rx timeout, send abort [ 487.138253][T19406] infiniband syz0: set active [ 487.143733][ T9] ip_vti0 speed is unknown, defaulting to 1000 [ 487.164911][T19406] infiniband syz0: added ip_vti0 [ 487.196290][T19406] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 487.207567][T19438] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3529'. [ 487.239868][T19406] infiniband syz0: Couldn't open port 1 [ 487.253473][T19406] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 487.307796][T19406] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 487.331992][T19438] batman_adv: batadv0: Interface deactivated: dummy0 [ 487.352171][T19406] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 487.386219][T19438] batman_adv: batadv0: Removing interface: dummy0 [ 487.464397][T19406] RDS/IB: syz0: added [ 487.480185][T19406] smc: adding ib device syz0 with port count 1 [ 487.494786][T19406] smc: ib device syz0 port 1 has no pnetid [ 487.508233][ T5634] ip_vti0 speed is unknown, defaulting to 1000 [ 487.519571][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 487.574773][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f613400: abort rx timeout. Force session deactivation [ 487.789874][T19459] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 487.820439][T19459] bond3 (unregistering): Released all slaves [ 487.965076][T19472] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 488.200340][T19484] netlink: 'syz.2.3539': attribute type 21 has an invalid length. [ 488.225551][T19484] IPv6: NLM_F_CREATE should be specified when creating new route [ 488.252166][T19484] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 488.313629][T19489] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 488.359525][T19489] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 488.507052][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 488.758202][T19508] __nla_validate_parse: 1 callbacks suppressed [ 488.758224][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3546'. [ 489.030757][T19522] netlink: 18 bytes leftover after parsing attributes in process `syz.0.3550'. [ 489.156695][T19519] veth3: entered allmulticast mode [ 489.312103][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 489.655168][T19550] ipt_REJECT: TCP_RESET invalid for non-tcp [ 489.688378][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3561'. [ 489.830630][T19553] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 489.844751][T19555] netlink: 'syz.0.3563': attribute type 17 has an invalid length. [ 489.858447][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 489.886149][T19553] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 489.903674][T19555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3563'. [ 489.980190][T19555] erspan0: entered promiscuous mode [ 490.028406][T19555] erspan0: left promiscuous mode [ 490.115536][T19565] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 490.147594][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 490.219835][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3566'. [ 490.261280][T19568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.337045][T19572] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 490.501180][T19581] netlink: 'syz.3.3570': attribute type 1 has an invalid length. [ 490.525523][T19572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.600223][T19578] bridge2: entered promiscuous mode [ 490.629236][T19578] bridge2: entered allmulticast mode [ 490.803921][T19581] bond2: entered promiscuous mode [ 490.826864][T19581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.845625][T19595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.887823][T19583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.896527][T19583] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 490.908717][T19583] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 490.923994][T19583] bond2: (slave ip6gre1): making interface the new active one [ 490.932423][T19583] ip6gre1: entered promiscuous mode [ 490.944039][T19583] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 490.978540][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 491.168778][ T6016] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.211574][ T6016] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.239447][ T6016] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.252742][ T6016] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.592212][T19615] GUP no longer grows the stack in syz.2.3579 (19615): 200000003000-20000000a000 (200000001000) [ 491.624473][T19615] CPU: 1 UID: 0 PID: 19615 Comm: syz.2.3579 Not tainted syzkaller #0 PREEMPT(full) [ 491.624507][T19615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.624522][T19615] Call Trace: [ 491.624530][T19615] [ 491.624540][T19615] dump_stack_lvl+0xe8/0x150 [ 491.624573][T19615] __get_user_pages+0x2378/0x2720 [ 491.624604][T19615] ? __gup_longterm_locked+0xc4e/0x1630 [ 491.624648][T19615] ? __gup_longterm_locked+0xc4e/0x1630 [ 491.624674][T19615] ? down_read_killable+0x1bb/0x340 [ 491.624707][T19615] __gup_longterm_locked+0xdcf/0x1630 [ 491.624743][T19615] ? lock_acquire+0x106/0x350 [ 491.624785][T19615] gup_fast_fallback+0x1d84/0x20d0 [ 491.624846][T19615] ? __pfx_gup_fast_fallback+0x10/0x10 [ 491.624874][T19615] ? is_valid_gup_args+0x11f/0x200 [ 491.624901][T19615] ? get_user_pages_fast+0x4d/0xb0 [ 491.624927][T19615] __iov_iter_get_pages_alloc+0x370/0xa10 [ 491.625099][T19615] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 491.625159][T19615] iov_iter_get_pages2+0x5e/0xa0 [ 491.625186][T19615] __se_sys_vmsplice+0x7c7/0x1620 [ 491.625234][T19615] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 491.625262][T19615] ? __pfx_futex_wait+0x10/0x10 [ 491.625370][T19615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.625393][T19615] do_syscall_64+0x174/0xf80 [ 491.625414][T19615] ? trace_irq_disable+0x3b/0x140 [ 491.625444][T19615] ? clear_bhb_loop+0x40/0x90 [ 491.625470][T19615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.625490][T19615] RIP: 0033:0x7f9ae499ce59 [ 491.625510][T19615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.625527][T19615] RSP: 002b:00007f9ae588d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 491.625549][T19615] RAX: ffffffffffffffda RBX: 00007f9ae4c15fa0 RCX: 00007f9ae499ce59 [ 491.625563][T19615] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 491.625576][T19615] RBP: 00007f9ae4a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 491.625588][T19615] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 491.625599][T19615] R13: 00007f9ae4c16038 R14: 00007f9ae4c15fa0 R15: 00007ffd1b190048 [ 491.625634][T19615] [ 491.885367][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 491.999409][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3583'. [ 492.104806][T19625] x_tables: duplicate underflow at hook 1 [ 492.319268][T19629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3585'. [ 492.350952][T19632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3588'. [ 492.364379][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 492.393534][T19632] openvswitch: netlink: Flow key attr not present in new flow. [ 492.540037][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 493.112329][T19659] netlink: 'syz.4.3594': attribute type 1 has an invalid length. [ 493.318543][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 493.401943][T19674] netlink: 'syz.2.3597': attribute type 1 has an invalid length. [ 493.431409][T19674] netlink: 'syz.2.3597': attribute type 2 has an invalid length. [ 493.469269][T19674] netlink: 'syz.2.3597': attribute type 2 has an invalid length. [ 493.498881][T19674] netlink: 'syz.2.3597': attribute type 2 has an invalid length. [ 493.610590][T19686] tipc: Started in network mode [ 493.625624][T19686] tipc: Node identity aed8deafa8bc, cluster identity 4711 [ 493.641862][T19686] tipc: Enabled bearer , priority 0 [ 493.702196][T19688] tipc: Disabling bearer [ 493.770031][T19693] __nla_validate_parse: 2 callbacks suppressed [ 493.770053][T19693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3602'. [ 493.804169][T19692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3602'. [ 494.150139][T19406] ip_vti0 speed is unknown, defaulting to 1000 [ 494.185467][T19705] pim6reg: entered allmulticast mode [ 494.583314][T19722] netlink: 54 bytes leftover after parsing attributes in process `syz.0.3612'. [ 494.605242][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3612'. [ 494.908376][T19735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.325735][T19747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3619'. [ 495.407857][T19747] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 495.616080][ T11] block nbd4: Possible stuck request ffff888027a47000: control (read@0,1024B). Runtime 270 seconds [ 495.627578][ T11] block nbd4: Possible stuck request ffff888027a471c0: control (read@1024,1024B). Runtime 270 seconds [ 495.639501][ T11] block nbd4: Possible stuck request ffff888027a47380: control (read@2048,1024B). Runtime 270 seconds [ 495.651033][ T11] block nbd4: Possible stuck request ffff888027a47540: control (read@3072,1024B). Runtime 270 seconds [ 495.925113][T19772] netlink: 'syz.3.3626': attribute type 1 has an invalid length. [ 496.171867][T19780] bond3: (slave gretap1): making interface the new active one [ 496.216465][T19780] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 496.230685][T19790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.271574][T19790] netlink: 'syz.0.3627': attribute type 1 has an invalid length. [ 496.340719][T19772] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 496.357062][T19787] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 496.367640][T19787] syzkaller1: Refused to change device type [ 496.389686][T19786] macvlan2: entered promiscuous mode [ 496.396198][T19786] macvlan2: entered allmulticast mode [ 496.404046][T19786] bond3: entered promiscuous mode [ 496.409327][T19786] gretap1: entered promiscuous mode [ 496.420929][T19786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 496.444040][T19786] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 496.473291][T19786] bond3: left promiscuous mode [ 496.478410][T19786] gretap1: left promiscuous mode [ 496.531041][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3631'. [ 496.567773][T19790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.577310][T19781] ip_vti0: entered promiscuous mode [ 496.720863][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3633'. [ 496.797167][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3634'. [ 496.882431][T19813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3635'. [ 496.942258][T19815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3636'. [ 497.044354][T19824] netlink: 'syz.0.3638': attribute type 1 has an invalid length. [ 497.183334][T19824] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 497.908403][T19865] netlink: 'syz.0.3648': attribute type 1 has an invalid length. [ 498.289034][T19885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.296349][T19885] IPv6: NLM_F_CREATE should be set when creating new route [ 501.153917][T19878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.789862][T19865] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 501.905612][T19890] __nla_validate_parse: 9 callbacks suppressed [ 501.905635][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 501.975133][T19890] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 502.659538][T19916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3660'. [ 502.784534][T19916] syzkaller0: entered promiscuous mode [ 502.823049][T19916] syzkaller0: entered allmulticast mode [ 502.995080][T19941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3665'. [ 503.116359][T19949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.668799][T19966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3673'. [ 503.928319][T19982] sctp: [Deprecated]: syz.0.3676 (pid 19982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.928319][T19982] Use struct sctp_sack_info instead [ 504.116678][T19992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3678'. [ 504.151154][T19992] veth5: entered allmulticast mode [ 504.283702][T19997] pim6reg527: entered allmulticast mode [ 506.765438][T19976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.068788][T20016] netlink: 'syz.0.3681': attribute type 1 has an invalid length. [ 507.088436][T20016] netlink: 'syz.0.3681': attribute type 1 has an invalid length. [ 507.111345][T20016] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.3681'. [ 507.197328][T20024] vlan2: entered promiscuous mode [ 507.223888][T20024] geneve1: entered promiscuous mode [ 507.243947][T20024] vlan2: entered allmulticast mode [ 507.252205][T20024] geneve1: entered allmulticast mode [ 507.460967][T20044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.729580][T20057] Bluetooth: MGMT ver 1.23 [ 508.029374][T20075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3701'. [ 508.262730][T20079] syzkaller1: entered promiscuous mode [ 508.292058][T20079] syzkaller1: entered allmulticast mode [ 508.451241][T20094] netlink: 'syz.1.3704': attribute type 4 has an invalid length. [ 508.528570][T20098] netlink: 'syz.0.3706': attribute type 12 has an invalid length. [ 509.551522][T20143] netlink: 'syz.1.3715': attribute type 7 has an invalid length. [ 509.777276][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3716'. [ 509.842784][T20154] netlink: 'syz.0.3717': attribute type 1 has an invalid length. [ 510.098934][T20157] bond2: (slave geneve2): making interface the new active one [ 510.150105][T20157] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 510.200860][T20174] tipc: Started in network mode [ 510.227588][T20174] tipc: Node identity , cluster identity 4711 [ 510.251154][T20174] tipc: Failed to obtain node identity [ 510.270504][T20174] tipc: Enabling of bearer rejected, failed to enable media [ 510.316765][T20175] tipc: Started in network mode [ 510.346943][T20175] tipc: Node identity , cluster identity 4711 [ 510.367231][T20175] tipc: Failed to obtain node identity [ 510.393188][T20175] tipc: Enabling of bearer rejected, failed to enable media [ 510.681498][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 510.720486][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 510.919586][T20210] x_tables: unsorted underflow at hook 4 [ 511.192728][ T30] audit: type=1804 audit(1779871464.727:13): pid=20224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3734" name="/newroot/172/cgroup.controllers" dev="tmpfs" ino=882 res=1 errno=0 [ 511.292108][ T30] audit: type=1800 audit(1779871464.727:14): pid=20224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3734" name="cgroup.controllers" dev="tmpfs" ino=882 res=0 errno=0 [ 511.667054][T20242] SET target dimension over the limit! [ 512.037245][T20259] netlink: 'syz.3.3742': attribute type 7 has an invalid length. [ 512.290109][T20270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3744'. [ 512.345345][T20270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3744'. [ 512.399078][T20268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3744'. [ 512.596172][T20290] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3750'. [ 513.058652][T20312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3755'. [ 513.412060][T20323] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3758'. [ 513.441535][T20330] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3761'. [ 513.467634][T20330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3761'. [ 513.881514][T20336] 0: reclassify loop, rule prio 0, protocol 800 [ 513.913419][T20347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.989518][T20353] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3765'. [ 514.260617][T20359] veth3: entered allmulticast mode [ 514.341295][T20363] openvswitch: netlink: IP tunnel dst address not specified [ 515.006120][T20393] syzkaller0: entered promiscuous mode [ 515.014555][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3778'. [ 515.025718][T20393] syzkaller0: entered allmulticast mode [ 515.359984][T20415] bridge3: entered promiscuous mode [ 515.368384][T20415] bridge3: entered allmulticast mode [ 515.526541][T20423] netlink: 'syz.1.3785': attribute type 3 has an invalid length. [ 516.511067][T20465] netem: change failed [ 516.798270][T20482] netlink: 'syz.2.3802': attribute type 1 has an invalid length. [ 517.068641][T20491] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 517.165267][T20491] bond4 (unregistering): Released all slaves [ 517.401877][T20482] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 517.766888][T20525] netlink: 'syz.3.3810': attribute type 1 has an invalid length. [ 517.812546][T20527] openvswitch: netlink: IP tunnel dst address not specified [ 517.922795][T20522] netlink: 'syz.4.3809': attribute type 1 has an invalid length. [ 517.966841][T20536] __nla_validate_parse: 5 callbacks suppressed [ 517.966862][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3813'. [ 518.150349][T20525] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.674763][T20555] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3819'. [ 518.703944][T20555] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3819'. [ 518.861939][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3823'. [ 519.023574][T20579] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 519.093159][T20587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3827'. [ 519.817659][T20627] IPv6: NLM_F_CREATE should be specified when creating new route [ 519.840178][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'. [ 519.977359][T20631] geneve3: entered promiscuous mode [ 519.994172][T20631] geneve3: entered allmulticast mode [ 520.006830][T11283] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 520.074764][T11283] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 520.089372][T11283] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 520.190811][T20631] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.282367][T20640] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.3841'. [ 520.337277][T20642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3842'. [ 520.539231][T20642] team0 (unregistering): Port device team_slave_0 removed [ 520.566720][T20642] team0 (unregistering): Port device team_slave_1 removed [ 520.626905][T20642] team0 (unregistering): Port device batadv1 removed [ 520.865221][T20641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.893962][ T5629] Bluetooth: hci1: command tx timeout [ 521.212692][T20686] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3852'. [ 521.258603][T20686] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3852'. [ 522.408591][ T5290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.751897][T20761] netlink: 'syz.0.3869': attribute type 12 has an invalid length. [ 523.106272][T20779] veth0_to_bond: entered allmulticast mode [ 523.317840][T20793] __nla_validate_parse: 4 callbacks suppressed [ 523.317862][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3879'. [ 523.334846][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3882'. [ 523.361258][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3882'. [ 523.375164][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3882'. [ 523.393367][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3882'. [ 523.419176][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3882'. [ 523.451478][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3882'. [ 523.518814][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3882'. [ 523.579851][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3882'. [ 523.626852][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3882'. [ 523.658769][T20802] netlink: 'syz.0.3883': attribute type 1 has an invalid length. [ 523.884438][T20810] syzkaller0: entered promiscuous mode [ 523.911508][T20810] syzkaller0: entered allmulticast mode [ 524.209611][T20836] x_tables: unsorted entry at hook 2 [ 524.226048][T20825] syzkaller0: entered promiscuous mode [ 524.241885][T20825] syzkaller0: entered allmulticast mode [ 524.401739][T20829] bond5: option xmit_hash_policy: invalid value (64) [ 524.421543][T20829] bond5 (unregistering): Released all slaves [ 524.695423][T20817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 524.701697][T20817] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 525.695699][ T11] block nbd4: Possible stuck request ffff888027a47000: control (read@0,1024B). Runtime 300 seconds [ 525.710001][ T11] block nbd4: Possible stuck request ffff888027a471c0: control (read@1024,1024B). Runtime 300 seconds [ 525.722329][ T11] block nbd4: Possible stuck request ffff888027a47380: control (read@2048,1024B). Runtime 300 seconds [ 525.734466][ T11] block nbd4: Possible stuck request ffff888027a47540: control (read@3072,1024B). Runtime 300 seconds [ 528.412541][T20862] netlink: 'syz.1.3905': attribute type 7 has an invalid length. [ 528.551697][T11295] bond17 (unregistering): (slave ip6gretap0): Releasing active interface [ 528.776063][T11295] bond5 (unregistering): (slave gretap1): Releasing active interface [ 528.858846][T11295] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 528.867135][T11295] bridge1 (unregistering): left promiscuous mode [ 529.211198][T11295] .` (unregistering): Released all slaves [ 529.230279][T11295] bond1 (unregistering): Released all slaves [ 529.251906][T11295] bond2 (unregistering): Released all slaves [ 529.267835][T11295] bond3 (unregistering): Released all slaves [ 529.284823][T11295] bond4 (unregistering): Released all slaves [ 529.316906][T11295] bond0 (unregistering): Released all slaves [ 529.339792][T11295] bond5 (unregistering): Released all slaves [ 529.356929][T11295] bond6 (unregistering): Released all slaves [ 529.373710][T11295] bond7 (unregistering): Released all slaves [ 529.392251][T11295] bond8 (unregistering): Released all slaves [ 529.411707][T11295] bond9 (unregistering): Released all slaves [ 529.448289][T11295] bond10 (unregistering): Released all slaves [ 529.466840][T11295] bond11 (unregistering): Released all slaves [ 529.482540][T11295] bond12 (unregistering): Released all slaves [ 529.499468][T11295] bond13 (unregistering): (slave bond14): Releasing backup interface [ 529.518192][T11295] bond13 (unregistering): Released all slaves [ 529.536206][T11295] bond14 (unregistering): Released all slaves [ 529.552431][T11295] bond15 (unregistering): Released all slaves [ 529.578721][T11295] bond16 (unregistering): Released all slaves [ 529.596139][T11295] bond17 (unregistering): Released all slaves [ 529.612033][T11295] bond18 (unregistering): Released all slaves [ 529.628598][T11295] bond19 (unregistering): Released all slaves [ 529.651945][T20856] erspan0: entered promiscuous mode [ 529.675615][T20858] __nla_validate_parse: 29 callbacks suppressed [ 529.675638][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3903'. [ 530.092800][T20879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3906'. [ 530.118348][T20890] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 530.170399][T11295] tipc: Disabling bearer [ 530.228491][T11295] tipc: Left network mode [ 530.612741][T20902] geneve1: entered promiscuous mode [ 530.888127][T20915] gretap2: entered promiscuous mode [ 530.928725][T20915] batman_adv: batadv0: Adding interface: gretap2 [ 530.951616][T20915] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 531.045066][T20915] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 531.590853][T20942] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3927'. [ 532.899740][T20972] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3937'. [ 533.035582][T20982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.090440][T20985] netlink: 'syz.4.3938': attribute type 1 has an invalid length. [ 533.255630][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3938'. [ 533.364842][T20997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3938'. [ 533.412517][T11295] hsr_slave_0: left promiscuous mode [ 533.436036][T11295] hsr_slave_1: left promiscuous mode [ 533.560098][T11295] veth0_vlan: left promiscuous mode [ 534.276777][T20982] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 534.341800][T20976] veth5: entered promiscuous mode [ 534.352430][T21013] Unsupported ieee802154 address type: 0 [ 534.485117][T21015] xt_cgroup: path and classid specified [ 534.551552][T21018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.574582][T21019] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3947'. [ 534.741819][T21022] netlink: 'syz.4.3948': attribute type 10 has an invalid length. [ 534.792498][T21022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.809159][T11295] IPVS: stop unused estimator thread 0... [ 534.828766][T21022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.854779][T21022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.892792][T21022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.094376][T21037] syz_tun: entered allmulticast mode [ 535.149495][T21039] Cannot find set identified by id 1 to match [ 535.169138][T21036] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 535.221110][T21036] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 535.251584][T21036] gretap2: entered promiscuous mode [ 535.260682][T21036] gretap2: entered allmulticast mode [ 535.302331][T21034] syz_tun: left allmulticast mode [ 535.318872][T21047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3955'. [ 535.921268][T21076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3965'. [ 535.976103][T21079] vlan2: entered promiscuous mode [ 535.981513][T21079] bridge0: entered promiscuous mode [ 536.098053][T21085] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3967'. [ 536.111438][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'. [ 536.409468][T21089] bond2: option mode: invalid value (18) [ 536.479497][T21089] bond2 (unregistering): Released all slaves [ 536.542677][T21096] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3970'. [ 536.619154][T21092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.802731][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 536.829772][T21110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3973'. [ 536.833948][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3974'. [ 536.849744][T21110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3973'. [ 536.911466][T21102] netlink: 'syz.0.3974': attribute type 11 has an invalid length. [ 536.931162][T21105] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 536.947384][T21102] netlink: 180760 bytes leftover after parsing attributes in process `syz.0.3974'. [ 536.966323][T21105] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 536.979988][T21105] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 537.386389][T21140] netlink: 'syz.0.3984': attribute type 1 has an invalid length. [ 537.442710][T21140] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 537.455076][T21140] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 537.530948][T21144] bond3: (slave gretap3): making interface the new active one [ 537.556345][T21144] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 537.777469][T21154] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 537.812412][T21155] nbd: couldn't find device at index 2958377 [ 538.998618][T21238] netlink: 'syz.0.4011': attribute type 1 has an invalid length. [ 539.024432][T21238] netlink: 'syz.0.4011': attribute type 1 has an invalid length. [ 539.032297][T21238] netlink: 'syz.0.4011': attribute type 8 has an invalid length. [ 539.397949][T21258] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 539.496141][T21262] tipc: Failed to remove unknown binding: 66,0,0/0:66890012/66890014 [ 539.509258][T21262] tipc: Failed to remove unknown binding: 66,0,0/0:66890012/66890013 [ 539.537112][T21261] tipc: Failed to remove unknown binding: 66,0,0/0:66890012/66890014 [ 539.573169][T21261] tipc: Failed to remove unknown binding: 66,0,0/0:66890012/66890013 [ 539.607011][T21261] tipc: Failed to remove unknown binding: 66,0,0/0:66890012/66890014 [ 539.618848][T21261] tipc: Failed to remove unknown binding: 66,0,0/0:66890012/66890013 [ 539.758291][T21276] vlan0: entered promiscuous mode [ 540.366935][T21307] __nla_validate_parse: 14 callbacks suppressed [ 540.366959][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4031'. [ 540.411619][T21307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4031'. [ 540.702466][T21330] tipc: Enabled bearer , priority 0 [ 540.731306][T21330] syzkaller0: MTU too low for tipc bearer [ 540.745726][T21330] tipc: Disabling bearer [ 540.752297][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4042'. [ 540.792460][T11268] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.818617][T11268] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.886471][T11268] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.887846][T21338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4043'. [ 540.903356][T21345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4045'. [ 540.912298][T21338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4043'. [ 540.923331][T11268] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.279344][T21362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4048'. [ 541.308445][T21372] xt_ecn: cannot match TCP bits for non-tcp packets [ 541.340701][T21374] netlink: 'syz.2.4052': attribute type 2 has an invalid length. [ 541.478505][T21381] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4055'. [ 541.540747][T21382] H: renamed from dummy0 (while UP) [ 541.644994][T21388] openvswitch: netlink: IP tunnel dst address not specified [ 542.040211][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4063'. [ 542.155310][T21413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4064'. [ 542.641700][T21435] openvswitch: netlink: IP tunnel dst address not specified [ 543.080683][T21453] netlink: 'syz.3.4073': attribute type 1 has an invalid length. [ 543.181454][T21453] bond5: entered promiscuous mode [ 543.187832][T21453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.228306][T21460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.235842][T21460] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 543.250397][T21460] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 543.277911][T21460] bond5: (slave ip6gre2): making interface the new active one [ 543.287177][T21460] ip6gre2: entered promiscuous mode [ 543.306072][T21460] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 543.330490][T21458] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 543.435664][T21462] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 543.944479][T21493] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 544.274408][T21514] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 544.292364][T21514] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 544.300961][T21514] gretap4: entered promiscuous mode [ 544.306985][T21514] gretap4: entered allmulticast mode [ 544.550832][T21528] macvtap1: entered promiscuous mode [ 544.563269][T21528] macvtap1: entered allmulticast mode [ 544.577014][T21528] veth1_vlan: entered allmulticast mode [ 544.607902][T21535] macvtap2: entered promiscuous mode [ 544.613578][T21535] macvtap2: entered allmulticast mode [ 544.881271][T21551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.943555][T21558] netlink: 'syz.1.4106': attribute type 12 has an invalid length. [ 544.951496][T21558] netlink: 'syz.1.4106': attribute type 29 has an invalid length. [ 544.975276][T21557] netlink: 'syz.1.4106': attribute type 1 has an invalid length. [ 545.013327][T21557] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 545.036870][T21558] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 545.243970][T21569] syzkaller1: entered promiscuous mode [ 545.259976][T21569] syzkaller1: entered allmulticast mode [ 545.536474][T21582] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 545.815997][T21603] netlink: 'syz.2.4117': attribute type 1 has an invalid length. [ 545.841927][T21603] __nla_validate_parse: 82 callbacks suppressed [ 545.841948][T21603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4117'. [ 545.963559][T21609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.990857][T21608] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 546.016702][T21616] netlink: 'syz.1.4120': attribute type 10 has an invalid length. [ 546.026362][T21608] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 546.059003][T21609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4119'. [ 546.247750][T21623] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 546.261864][T21623] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 546.334984][T21630] netlink: 'syz.2.4127': attribute type 3 has an invalid length. [ 546.532367][T21634] IPVS: Scheduler module ip_vs_sip not found [ 546.552119][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'. [ 546.588218][T21639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4129'. [ 546.807671][T21650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4134'. [ 546.831762][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 546.852722][T21651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 547.330088][T21675] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4140'. [ 547.344870][T21681] xt_hashlimit: overflow, try lower: 3/0 [ 547.527732][T21697] nbd: illegal input index 2958377 [ 547.684309][T21707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4149'. [ 547.982390][T21724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4153'. [ 548.092782][T21730] bridge0: port 3(gretap0) entered blocking state [ 548.109641][T21730] bridge0: port 3(gretap0) entered disabled state [ 548.121724][T21730] gretap0: entered allmulticast mode [ 548.136793][T21730] gretap0: entered promiscuous mode [ 548.144613][T21730] bridge0: port 3(gretap0) entered blocking state [ 548.151362][T21730] bridge0: port 3(gretap0) entered forwarding state [ 548.212371][T21741] netlink: 'syz.3.4154': attribute type 29 has an invalid length. [ 548.233664][T21730] netlink: 'syz.3.4154': attribute type 29 has an invalid length. [ 548.289766][T21748] erspan0: entered promiscuous mode [ 548.309418][T21748] erspan0: entered allmulticast mode [ 548.794739][T21776] netlink: 'syz.1.4168': attribute type 1 has an invalid length. [ 548.874350][T21776] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 548.993635][T21776] veth9: entered promiscuous mode [ 549.026447][T21776] bond2: (slave veth9): Enslaving as a backup interface with a down link [ 549.076517][T21776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.128133][T11283] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 549.276621][T21206] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 549.360088][T21797] veth1_to_bond: entered allmulticast mode [ 549.405470][T21797] veth1_to_bond: left allmulticast mode [ 549.676135][T21806] nbd7: detected capacity change from 0 to 63 [ 549.688557][T21813] block nbd0: NBD_DISCONNECT [ 549.694265][T21813] block nbd0: Send disconnect failed -32 [ 549.700105][T21813] block nbd0: Send disconnect failed -32 [ 549.751334][ T5629] block nbd7: Receive control failed (result -104) [ 549.937290][T21820] netlink: 'syz.1.4180': attribute type 2 has an invalid length. [ 549.957021][T21820] netlink: 'syz.1.4180': attribute type 2 has an invalid length. [ 550.110447][T21835] netlink: 'syz.3.4183': attribute type 1 has an invalid length. [ 550.286110][T21835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 550.316746][T21838] vlan2: entered promiscuous mode [ 550.322330][T21838] bond6: entered promiscuous mode [ 550.328188][T21838] vlan2: entered allmulticast mode [ 550.334298][T21838] bond6: entered allmulticast mode [ 550.417020][T21844] bond6: (slave bridge2): making interface the new active one [ 550.447742][T21844] bridge2: entered promiscuous mode [ 550.466214][T21844] bridge2: entered allmulticast mode [ 550.477017][T21844] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 550.807451][T21871] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 551.087371][T21890] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 551.126400][T21890] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 551.212343][T21893] netlink: 'syz.3.4199': attribute type 23 has an invalid length. [ 551.281407][T21897] __nla_validate_parse: 3 callbacks suppressed [ 551.281429][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'. [ 551.328607][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'. [ 551.640733][T21909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4202'. [ 551.692031][T21912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4204'. [ 551.743961][T21912] netlink: 'syz.0.4204': attribute type 5 has an invalid length. [ 551.756173][T21908] netlink: 640 bytes leftover after parsing attributes in process `syz.1.4203'. [ 551.768539][T21912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 551.789510][T21908] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 552.057977][T21924] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4207'. [ 552.105999][T21934] veth0: entered promiscuous mode [ 552.119074][T21924] openvswitch: netlink: Missing key (keys=40, expected=100) [ 552.134484][T21936] netlink: 'syz.4.4207': attribute type 1 has an invalid length. [ 552.259915][T21925] veth0: left promiscuous mode [ 552.385894][T21950] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4214'. [ 552.460063][T21954] netlink: 'syz.0.4215': attribute type 1 has an invalid length. [ 552.477764][T21924] veth7: entered promiscuous mode [ 552.504483][T21924] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 552.648966][T21956] ip6gretap0: entered promiscuous mode [ 552.666581][T21956] ip6gretap0: entered allmulticast mode [ 552.691823][T21956] bond4: (slave ip6gretap0): making interface the new active one [ 552.701342][T21956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 552.714698][T21956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 552.723073][T21956] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 552.971008][T21968] 8021q: adding VLAN 0 to HW filter on device bond7 [ 553.006739][T21972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4219'. [ 553.022992][T21972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4219'. [ 553.035064][T21968] ip6t_srh: unknown srh invflags 4000 [ 553.050389][T21975] ip6t_srh: unknown srh invflags 4000 [ 553.210075][T21981] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 553.639342][T22003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.764777][T22011] validate_nla: 1 callbacks suppressed [ 553.764798][T22011] netlink: 'syz.0.4235': attribute type 1 has an invalid length. [ 553.959807][T22011] openvswitch: netlink: IPv6 tunnel dst address is zero [ 554.161507][T22023] vlan3: entered allmulticast mode [ 554.179801][T22023] bond0: entered allmulticast mode [ 554.203205][T22023] bond_slave_0: entered allmulticast mode [ 554.232064][T22023] bond_slave_1: entered allmulticast mode [ 554.316794][T22036] openvswitch: netlink: Message has 4 unknown bytes. [ 554.769407][T22059] tipc: Started in network mode [ 554.782411][T22059] tipc: Node identity ac14140f, cluster identity 4711 [ 554.799998][T22059] tipc: New replicast peer: 255.255.255.255 [ 554.821393][T22059] tipc: Enabled bearer , priority 10 [ 555.051129][T22067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 555.209222][T22067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.227222][T22067] bond5: (slave bond6): Enslaving as an active interface with an up link [ 555.427100][T22088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.773575][ T11] block nbd4: Possible stuck request ffff888027a47000: control (read@0,1024B). Runtime 330 seconds [ 555.784709][ T11] block nbd4: Possible stuck request ffff888027a471c0: control (read@1024,1024B). Runtime 330 seconds [ 555.796903][ T11] block nbd4: Possible stuck request ffff888027a47380: control (read@2048,1024B). Runtime 330 seconds [ 555.812204][ T11] block nbd4: Possible stuck request ffff888027a47540: control (read@3072,1024B). Runtime 330 seconds [ 555.935476][ T9] tipc: Node number set to 2886997007 [ 556.155982][ T5629] block nbd0: Receive control failed (result -32) [ 556.298681][T22125] tipc: Enabling of bearer rejected, failed to enable media [ 556.546017][T22149] __nla_validate_parse: 20 callbacks suppressed [ 556.546038][T22149] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4279'. [ 556.609143][T22153] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4279'. [ 557.315949][T22179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4286'. [ 557.403392][T22189] xt_hashlimit: size too large, truncated to 1048576 [ 557.429073][T22188] xt_hashlimit: size too large, truncated to 1048576 [ 557.606897][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.616150][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.623050][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.629895][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.636721][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.643536][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.650321][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.657173][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.663991][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.670851][T22195] tc action pedit offset must be on 32 bit boundaries [ 557.677837][T22195] 0: reclassify loop, rule prio 0, protocol 800 [ 557.841213][T22206] SET target dimension over the limit! [ 557.931972][T22208] openvswitch: netlink: Flow key attr not present in new flow. [ 558.155855][T22225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4298'. [ 558.155858][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4298'. [ 558.198830][T22218] gretap3: entered promiscuous mode [ 558.214294][T22218] batman_adv: batadv0: Adding interface: gretap3 [ 558.232340][T22218] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.296098][T22218] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 558.323178][T22231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.330555][T22231] IPv6: NLM_F_CREATE should be set when creating new route [ 558.337917][T22231] IPv6: NLM_F_CREATE should be set when creating new route [ 558.366377][T22231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.383388][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4300'. [ 558.540523][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4303'. [ 558.554497][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4303'. [ 558.593564][ T809] IPVS: starting estimator thread 0... [ 558.655601][T22252] IPVS: sed: FWM 3 0x00000003 - no destination available [ 558.678370][T22246] IPVS: sed: FWM 3 0x00000003 - no destination available [ 558.713877][T22251] IPVS: using max 25 ests per chain, 60000 per kthread [ 559.107995][T22275] netlink: 'syz.4.4309': attribute type 1 has an invalid length. [ 559.205469][T22275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 559.431915][T22284] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 559.448231][T22284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4312'. [ 559.472492][T22289] netlink: 'syz.0.4310': attribute type 13 has an invalid length. [ 559.761650][T22298] mac80211_hwsim hwsim32 syzkaller0: Caught tx_queue_len zero misconfig [ 560.058213][T22308] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 560.411774][T22335] sctp: [Deprecated]: syz.4.4326 (pid 22335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.411774][T22335] Use struct sctp_sack_info instead [ 560.527819][T22335] xt_hashlimit: size too large, truncated to 1048576 [ 560.548277][T22342] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4328'. [ 560.630037][T22343] netlink: 'syz.4.4326': attribute type 1 has an invalid length. [ 560.632029][T22342] xt_connbytes: Forcing CT accounting to be enabled [ 560.979454][T22365] bond0: (slave team0): Releasing backup interface [ 561.014034][T22365] bridge_slave_0: left allmulticast mode [ 561.019773][T22365] bridge_slave_0: left promiscuous mode [ 561.026153][T22365] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.067831][T22365] bridge_slave_1: left allmulticast mode [ 561.077801][T22365] bridge_slave_1: left promiscuous mode [ 561.084776][T22365] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.097715][T22365] bond0: (slave bond_slave_0): Releasing backup interface [ 561.119283][T22365] bond0: (slave bond_slave_1): Releasing backup interface [ 561.154100][T22365] team0: Port device team_slave_0 removed [ 561.180066][T22365] team0: Port device team_slave_1 removed [ 561.192320][T22365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.201578][T22365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.210566][T22365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.219896][T22365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.230984][T22365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 561.298180][T22366] ip6gre1: entered allmulticast mode [ 561.319891][T22366] team0: Port device ip6gre1 added [ 561.609594][T22381] tipc: Failed to remove unknown binding: 66,1,1/0:3150144126/3150144128 [ 561.632555][T22381] tipc: Failed to remove unknown binding: 66,1,1/0:3150144126/3150144128 [ 561.648033][T22383] netlink: 'syz.3.4339': attribute type 29 has an invalid length. [ 561.660329][T22381] netlink: 'syz.1.4338': attribute type 142 has an invalid length. [ 561.818412][T22388] netlink: 'syz.2.4341': attribute type 3 has an invalid length. [ 561.835074][T22388] netlink: 'syz.2.4341': attribute type 1 has an invalid length. [ 561.851321][T22388] __nla_validate_parse: 3 callbacks suppressed [ 561.851339][T22388] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4341'. [ 562.003397][T22396] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 562.106819][T22391] netlink: 212048 bytes leftover after parsing attributes in process `syz.1.4343'. [ 562.128841][T22389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4342'. [ 562.349119][T22418] netlink: 'syz.1.4351': attribute type 1 has an invalid length. [ 562.415469][T22421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4352'. [ 562.571139][T22435] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4353'. [ 562.600876][T22431] No such timeout policy "syz0" [ 562.608568][T22434] netlink: 'syz.1.4356': attribute type 22 has an invalid length. [ 562.618443][T22434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4356'. [ 562.759734][T22440] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4357'. [ 562.780527][T22434] netlink: 'syz.1.4356': attribute type 22 has an invalid length. [ 562.838749][T22434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4356'. [ 562.862124][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4358'. [ 562.907756][T22448] veth0: entered promiscuous mode [ 562.915557][T22447] veth0: left promiscuous mode [ 563.303143][T22452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4361'. [ 563.565100][T22477] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 564.082028][T22504] openvswitch: netlink: Multiple metadata blocks provided [ 564.599495][T22544] xt_hashlimit: invalid rate [ 564.690624][T22547] batman_adv: batadv0: Removing interface: gretap3 [ 565.052003][T22573] validate_nla: 6 callbacks suppressed [ 565.052023][T22573] netlink: 'syz.2.4396': attribute type 1 has an invalid length. [ 565.120806][T22575] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 565.381794][T22588] netlink: 'syz.3.4400': attribute type 16 has an invalid length. [ 565.430147][T22588] netlink: 'syz.3.4400': attribute type 17 has an invalid length. [ 565.599585][T22588] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 566.064209][T22617] syzkaller0: entered promiscuous mode [ 566.093387][T22617] syzkaller0: entered allmulticast mode [ 566.598593][T22656] xt_SECMARK: invalid mode: 9 [ 566.815288][T22642] bridge3: port 1(veth3) entered blocking state [ 566.849244][T22642] bridge3: port 1(veth3) entered disabled state [ 566.873637][T22642] veth3: entered allmulticast mode [ 566.898151][T22642] veth3: entered promiscuous mode [ 566.929628][T22646] bridge3: port 2(veth0_to_bond) entered blocking state [ 566.955302][T22646] bridge3: port 2(veth0_to_bond) entered disabled state [ 566.974570][T22646] veth0_to_bond: entered allmulticast mode [ 566.985195][T22646] veth0_to_bond: entered promiscuous mode [ 567.007231][T22666] netlink: 'syz.0.4423': attribute type 10 has an invalid length. [ 567.091855][T22666] dummy0: entered promiscuous mode [ 567.116935][T22666] dummy0: entered allmulticast mode [ 567.146246][T22666] team0: Port device dummy0 added [ 567.356602][T22676] __nla_validate_parse: 15 callbacks suppressed [ 567.356623][T22676] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4427'. [ 567.377774][T22682] lo: Caught tx_queue_len zero misconfig [ 567.398220][T22680] openvswitch: netlink: Message has -2 unknown bytes. [ 567.415089][T22682] openvswitch: netlink: Message has -2 unknown bytes. [ 567.871178][T22701] netlink: 'syz.4.4436': attribute type 1 has an invalid length. [ 567.926908][T22705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4436'. [ 567.940434][T22703] netlink: 'syz.2.4437': attribute type 1 has an invalid length. [ 567.950899][ T31] INFO: task udevd:5640 blocked in I/O wait for more than 143 seconds. [ 567.980741][ T31] Not tainted syzkaller #0 [ 568.007134][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 568.045180][ T31] task:udevd state:D stack:22424 pid:5640 tgid:5640 ppid:4995 task_flags:0x400140 flags:0x00080002 [ 568.084886][ T31] Call Trace: [ 568.095148][ T31] [ 568.099164][T22703] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 568.101093][ T31] __schedule+0x1821/0x5740 [ 568.150916][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 568.170371][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 568.194800][ T31] ? __pfx___schedule+0x10/0x10 [ 568.204150][ T31] ? schedule+0x90/0x360 [ 568.208573][ T31] schedule+0x164/0x360 [ 568.222058][ T31] io_schedule+0x7f/0xd0 [ 568.226565][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 568.231913][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 568.237204][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 568.244035][ T31] ? filemap_read_folio+0x23e/0x3b0 [ 568.249286][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 568.255087][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 568.260999][ T31] do_read_cache_folio+0x1ad/0x590 [ 568.266275][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 568.271917][ T31] read_part_sector+0xb6/0x2b0 [ 568.277998][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 568.283520][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 568.289917][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 568.295635][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 568.301695][ T31] bdev_disk_changed+0x817/0x1770 [ 568.307930][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 568.313630][ T31] blkdev_get_whole+0x380/0x510 [ 568.318581][ T31] bdev_open+0x31e/0xd30 [ 568.322970][ T31] blkdev_open+0x470/0x610 [ 568.327454][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 568.332448][ T31] do_dentry_open+0x822/0x13a0 [ 568.338771][ T31] vfs_open+0x3b/0x340 [ 568.342965][ T31] ? path_openat+0x2df0/0x3860 [ 568.347775][ T31] path_openat+0x2e08/0x3860 [ 568.352399][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 568.357986][ T31] ? stack_depot_save_flags+0x33/0x810 [ 568.364546][ T31] ? __pfx_path_openat+0x10/0x10 [ 568.369545][ T31] ? __x64_sys_openat+0x138/0x170 [ 568.374835][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 568.379845][ T31] do_file_open+0x23e/0x4a0 [ 568.384510][ T31] ? __pfx_do_file_open+0x10/0x10 [ 568.389596][ T31] ? _raw_spin_unlock+0x28/0x50 [ 568.395780][ T31] ? alloc_fd+0x64b/0x6c0 [ 568.400200][ T31] do_sys_openat2+0x113/0x200 [ 568.404973][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 568.410632][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 568.416007][ T31] ? rcu_is_watching+0x15/0xb0 [ 568.420860][ T31] __x64_sys_openat+0x138/0x170 [ 568.426722][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.432975][ T31] do_syscall_64+0x174/0xf80 [ 568.437637][ T31] ? clear_bhb_loop+0x40/0x90 [ 568.442335][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.448339][ T31] RIP: 0033:0x7f81542a7407 [ 568.453846][ T31] RSP: 002b:00007ffdc5017620 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 568.462395][ T31] RAX: ffffffffffffffda RBX: 00007f8154a6d880 RCX: 00007f81542a7407 [ 568.470574][ T31] RDX: 00000000000a0800 RSI: 0000558b64f76320 RDI: ffffffffffffff9c [ 568.478695][ T31] RBP: 0000558b64f59910 R08: 0000000000000000 R09: 0000000000000000 [ 568.487691][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558b64f6dfa0 [ 568.495909][ T31] R13: 0000558b64f67190 R14: 0000000000000000 R15: 0000558b64f6dfa0 [ 568.504033][ T31] [ 568.507313][ T31] [ 568.507313][ T31] Showing all locks held in the system: [ 568.516464][ T31] 1 lock held by khungtaskd/31: [ 568.521400][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 568.531613][ T31] 2 locks held by klogd/4984: [ 568.536478][ T31] 2 locks held by getty/5389: [ 568.541197][ T31] #0: ffff8880319b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 568.552305][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 568.562578][ T31] 1 lock held by udevd/5640: [ 568.567267][ T31] #0: ffff888027934350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 568.592958][ T31] 1 lock held by udevd/19893: [ 568.599237][ T31] #0: ffff888027a80350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 568.622916][ T31] 2 locks held by syz.0.4438/22712: [ 568.629747][ T31] #0: ffffffff8fdc5180 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 568.652961][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 568.669668][ T31] 1 lock held by dhcpcd/22716: [ 568.674585][ T31] #0: ffff888029966260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 568.684597][ T31] [ 568.687448][ T31] ============================================= [ 568.687448][ T31] [ 568.705224][ T31] NMI backtrace for cpu 1 [ 568.705246][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 568.705286][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.705306][ T31] Call Trace: [ 568.705320][ T31] [ 568.705335][ T31] dump_stack_lvl+0xe8/0x150 [ 568.705366][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 568.705493][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 568.705526][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 568.705557][ T31] sys_info+0x135/0x170 [ 568.705603][ T31] watchdog+0xfd3/0x1030 [ 568.705648][ T31] ? watchdog+0x1c9/0x1030 [ 568.705683][ T31] kthread+0x389/0x470 [ 568.705722][ T31] ? __pfx_watchdog+0x10/0x10 [ 568.705747][ T31] ? __pfx_kthread+0x10/0x10 [ 568.705774][ T31] ret_from_fork+0x514/0xb70 [ 568.705810][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 568.705831][ T31] ? __switch_to+0xc79/0x1410 [ 568.705863][ T31] ? __pfx_kthread+0x10/0x10 [ 568.705889][ T31] ret_from_fork_asm+0x1a/0x30 [ 568.705930][ T31] [ 568.705938][ T31] Sending NMI from CPU 1 to CPUs 0: [ 568.833425][ C0] NMI backtrace for cpu 0 [ 568.833445][ C0] CPU: 0 UID: 0 PID: 5634 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 568.833468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.833481][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 568.833642][ C0] RIP: 0010:__lock_acquire+0x6a0/0x2cf0 [ 568.833667][ C0] Code: 1a 48 8b 7c 24 08 4c 89 ee ba 04 00 00 00 e8 87 44 00 00 85 c0 0f 84 99 0d 00 00 41 8b 45 20 a9 00 00 18 00 0f 84 bc 00 00 00 <4c> 8b 74 24 08 4c 89 f7 4c 89 ee ba 08 00 00 00 e8 5b 44 00 00 31 [ 568.833684][ C0] RSP: 0018:ffffc900042ef890 EFLAGS: 00000002 [ 568.833700][ C0] RAX: 0000000000000001 RBX: ffff88803075be00 RCX: ffffffff93e61a00 [ 568.833714][ C0] RDX: 0000000000000006 RSI: ffff88803075c9e0 RDI: ffff88803075be00 [ 568.833727][ C0] RBP: 0000000000000000 R08: ffffffff867822dd R09: ffffffff8f51e398 [ 568.833740][ C0] R10: dffffc0000000000 R11: fffffbfff1ea3c71 R12: 00000000ffffff05 [ 568.833754][ C0] R13: ffff88803075c9e0 R14: ffff88803075be00 R15: 0000000000000002 [ 568.833768][ C0] FS: 0000000000000000(0000) GS:ffff8881252ab000(0000) knlGS:0000000000000000 [ 568.833784][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.833797][ C0] CR2: 00007fcb2a7ea2f8 CR3: 0000000075398000 CR4: 00000000003526f0 [ 568.833814][ C0] Call Trace: [ 568.833821][ C0] [ 568.833835][ C0] ? irqentry_exit+0x218/0x8b0 [ 568.833857][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 568.833876][ C0] ? __pfx___schedule+0x10/0x10 [ 568.833908][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 568.833935][ C0] lock_acquire+0x106/0x350 [ 568.833954][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 568.833991][ C0] _raw_spin_lock+0x2e/0x40 [ 568.834017][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 568.834044][ C0] wg_ratelimiter_gc_entries+0x5d/0x450 [ 568.834096][ C0] ? process_scheduled_works+0xa70/0x1860 [ 568.834117][ C0] process_scheduled_works+0xb5d/0x1860 [ 568.834153][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 568.834175][ C0] ? assign_work+0x3d5/0x5e0 [ 568.834196][ C0] worker_thread+0xa53/0xfc0 [ 568.834229][ C0] kthread+0x389/0x470 [ 568.834253][ C0] ? __pfx_worker_thread+0x10/0x10 [ 568.834271][ C0] ? __pfx_kthread+0x10/0x10 [ 568.834294][ C0] ret_from_fork+0x514/0xb70 [ 568.834315][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 568.834334][ C0] ? __switch_to+0xc79/0x1410 [ 568.834362][ C0] ? __pfx_kthread+0x10/0x10 [ 568.834385][ C0] ret_from_fork_asm+0x1a/0x30 [ 568.834417][ C0] [ 569.096452][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 569.103377][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 569.112539][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 569.122635][ T31] Call Trace: [ 569.125958][ T31] [ 569.128925][ T31] vpanic+0x56c/0xa60 [ 569.132952][ T31] ? __pfx___schedule+0x10/0x10 [ 569.137851][ T31] ? __pfx_vpanic+0x10/0x10 [ 569.142463][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 569.148685][ T31] panic+0xc5/0xd0 [ 569.152446][ T31] ? __pfx_panic+0x10/0x10 [ 569.156920][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 569.162336][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 569.168557][ T31] watchdog+0x102c/0x1030 [ 569.173060][ T31] ? watchdog+0x1c9/0x1030 [ 569.177539][ T31] kthread+0x389/0x470 [ 569.181649][ T31] ? __pfx_watchdog+0x10/0x10 [ 569.186367][ T31] ? __pfx_kthread+0x10/0x10 [ 569.191338][ T31] ret_from_fork+0x514/0xb70 [ 569.195971][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 569.201117][ T31] ? __switch_to+0xc79/0x1410 [ 569.205833][ T31] ? __pfx_kthread+0x10/0x10 [ 569.210462][ T31] ret_from_fork_asm+0x1a/0x30 [ 569.215533][ T31] [ 569.219565][ T31] Kernel Offset: disabled [ 569.224082][ T31] Rebooting in 86400 seconds..