last executing test programs: 2m52.2835544s ago: executing program 4 (id=1819): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001180)={{r0}, r1, 0x2, @unused=[0x3, 0x5, 0x1, 0x100000000], @subvolid=0x7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000200)="2423a2b1331e63cfdaf563e8c04b4ec87a0c2f9e7bbcbf2df393371204bfca31e71024167ecad2449899b59a0ff0028038ce68") setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0xa}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x10) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0xfffd, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24800000010401010019d695d6000000000001f9ff0001000000000500000d4000000000"], 0x24}}, 0x0) socket(0x6, 0x3, 0x81) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') preadv(r5, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="ddbe"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m51.942945684s ago: executing program 0 (id=1822): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x1a, 0x0, 0x1, [@generic="2fe5afbf"]}]}, 0x1c}], 0x1}, 0x0) (async) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r14, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) (async) syz_emit_ethernet(0x170, &(0x7f0000000280)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @dccp_packet={0x1, 0x6, "afafba", 0x13a, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, {[@srh={0x3b, 0x6, 0x4, 0x3, 0x0, 0x0, 0x1000, [@private1, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @broadcast}]}], {{0x4e20, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x1, 0x4, "0ca84a", 0x7, "820d6c"}, "89bdb88b5ec3bd5161484705fba3060e847042a1fe57be7556ec14027676b7a629aef24dfaf17a40cce3f6bd56b316682107ba9a2832bec52dc352247ef39e949322052128e065b69d4fc7ef2a489ca478e651b04294abb56c34af2c1e563575dedcf4391e15ab9221ee8bf474cc502d9e33095dd3d5a92f4600dbf3c0fd98c23dc6144ee2803f9110f47b61d4b7d8f4f8932631ab72d1ad639de26fed6064278e856f838c99eff1d33ee3ccddc16157ae14829d0ce1e274b993aa7819e005a0a27a34c755a5889b520708b129d37513df72c2f79d6fe4242ed977a144c403d4065f79eb08307ccd4c4872ff35688fb99e1e"}}}}}}, 0x0) (async) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r15, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) pipe(&(0x7f0000000200)) 2m51.693911805s ago: executing program 1 (id=1824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf001}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x3ff, &(0x7f0000000100)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711066000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0xf}, 0x94) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f8, 0x300, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}}, 0x8000) 2m51.643481983s ago: executing program 0 (id=1825): syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x101, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x10e00, 0x10090}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008801) 2m51.530523565s ago: executing program 1 (id=1826): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec200a5418d69d000", 0x10000000000001}, 0x60) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x4, 0x0, 0x6, "feff31d1ee602ec4802a04e87bdcd1510bd9893bc31f80718336d9bd3517076db9ad1f6a120c8be6d7f81cd81e8275000386e7d95f0669b744a5414779d000", 0x1b}, 0x9a) close(r3) 2m51.401740686s ago: executing program 0 (id=1827): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000400000000db00000000000000000000000000d3659c22b705255b5ffe6cce60b1487e89fff5f0db0000000a00000023bf76f17a4deacc7492c6add02caf50999e6b862fbb6831f474f049b8a5d32a4b6e9e712ade6d9560ea2f588e86090d8cd76942ad5a54eea17e33a6d1c73f6626106f825379a720f7d6add0beca57bc6b2edc28564a8654efa43612e7e635d5ad7dfe48f9f8eb95600e72ba3f3cd9"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000bc0)="c9"}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002b0007010000f4ffffffffff02"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c5d324009a019c13e95a1dd6ba56bb0d9976d0db46fc3de9f9d670de8f37499a8a97a0d4ba49e1ae185b6cfe86de70df07a0766706ecf210dc599b526ca8f71a037b929bfbc810bd5983de333842a7d7e3e857b0c57eba7ffb1a89c1369fb3c9e3f565508cfc68c096af61a3b7c7be2109376c16d3a3cd37bb0984dc44cb28b5465ae6de4a199b16e3b339b32c3543a562a63c923f15139f5b9b516c6bc527b7c34a116d2a431", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf256a00000008000300", @ANYRES32=r7, @ANYBLOB="0c00990001000000380000000a000600ffffffffffff00000a00060008021100000100000500d200030000000a00060008021100000100000500d200020000000500d200050000000500d20003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10008894}, 0x40c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711007000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x6000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) 2m51.305111964s ago: executing program 1 (id=1828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @random="476d0000eafb", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @private2, @loopback}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x33, 0x0, 0x4000}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x11, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x1b8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x3}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) 2m51.0549618s ago: executing program 1 (id=1829): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c1fc500", @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf250d0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1900a04f3940ce25ad0ae302220000006124ee8700d6c900000000000000239889e72f1640d4568ee36f7395487ac6e216e65c4b097e15588ac038c4dd0011a06398d2d3ba504340ea0f38395459177027e74f6ef37936ad6b65eb350d6d8e38b8fcfe7f703f", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0xbc, 0x10, 0x6, 0x32, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x0, 0x7fffffff}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @dev}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x80, 0x700, 0x9ba, 0x0, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_addr={0x44, 0x2c, 0x9c, 0x1, 0x2, [{@empty, 0xe}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x467a236f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@multicast2, 0x3}, {@private=0xa010100, 0x2e}]}, @lsrr={0x83, 0x17, 0x77, [@local, @rand_addr=0x64010101, @remote, @private=0xa010101, @private=0xa010101]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r14 = socket$packet(0x11, 0x2, 0x300) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r16, 0x1, 0x1, 0x6, @multicast}, 0x14) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r19, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="20010000", @ANYRES16=r4, @ANYBLOB="200028bd7000fedbdf25060000004c000180080003000200000008000100", @ANYRES32, @ANYBLOB="08000193235b67f7aee51ca9005d2ff9a22ce22b14e8c7ae6dffa10c81d98906d55d6400f8b8b7f20a1e2318350e20537df34414f6fd5f5a1099615c528f2593f197fad78a67cf391efc9d40407d4711a9a6", @ANYRES32=r10, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="14000200766c616e3000000000000000000000003800018008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="080003000200000014000200766c616e3000000000000000000000000800030001000000040001800c0001800800030003000000580001801400020076657468305f746f5f7465616d000000140002007767320000000000000000000000000008000100", @ANYRES32=r16, @ANYBLOB="1400020067726574617030000000000000000000080003000400000008000100", @ANYRES32=r19, @ANYBLOB="200001800800030002000000140002006c6f00"/32], 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x10) 2m50.536462875s ago: executing program 3 (id=1831): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) 2m50.423353636s ago: executing program 0 (id=1832): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x5, 0x480, 0x10001, {}, {0x0, 0x2710}, {0x4, 0x1, 0x0, 0x1}, 0x1, @can={{}, 0x7, 0x3, 0x0, 0x0, "d09a62af74fbbea1"}}, 0x48}}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x2, 0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x630, 0x3, 0x7fff, 0x80008000, 0x1]}, &(0x7f00000003c0)=0x54) syz_emit_ethernet(0x1170, &(0x7f0000000a40)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "f9df00", 0x113a, 0x11, 0x0, @mcast2, @remote, {[@hopopts={0x87, 0x202, '\x00', [@generic={0x80, 0x1000, "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"}, @hao={0xc9, 0x10, @private2}]}, @hopopts={0x84, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xdb, 0x5, "35f73cb676"}]}, @routing={0x6c, 0x4, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}, @fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x5, 0x65}], {0x4e22, 0x4e21, 0xca, 0x0, @gue={{0x1, 0x1, 0x0, 0x90, 0x0, @void}, "2532a8093cea1daf64644248c18f99e531454d11e3bd30ed0d2ee68d4a5fc186a254e25ff6127e8125ccde73fa29194d6755bbf8d802b004d28f52dc7b0be00bbefdf15b4f0c690e464a1cf61ecfeb8ea94f7577fed6dbf620946305c185d65bb09c79a3469cb85bf8b121d05e4adad038e2723657c5e5e4af9373384b84d5d4603054288b0b9a90d2cec0d10086fef07591f7dd2b4c3bf360cbddfe807c19247ee3f0b9a35a7f843106ce60625db8a5382d6fba9990035a33717c3809dc"}}}}}}}, 0x0) 2m50.297908749s ago: executing program 2 (id=1833): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) setsockopt$MRT6_PIM(r0, 0x29, 0xd0, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}]}}}}}}}, 0x0) 2m50.160862199s ago: executing program 4 (id=1834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xffffffff, 0x2, &(0x7f00000000c0)="372fec97111ea6806db5a1192c1e5b9222e4a19af28e27b5de622f8cabcd6c4aaaa9b082d82583647c697eee6ccb7b73", 0x30) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) 2m49.88689334s ago: executing program 3 (id=1835): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x3, 0x8, {{0xa, 0x4, 0x3, 0x2, 0x28, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @multicast2, {[@end, @ssrr={0x89, 0x13, 0xf2, [@dev={0xac, 0x14, 0x14, 0x10}, @multicast2, @rand_addr=0x64010100, @loopback]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', r0}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2m49.856349145s ago: executing program 0 (id=1836): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x4041080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="80010000100013070000000000000000fe880000000000000000000000000001fe8000000000000000000000000000414e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d433000000200100007d76f433109500000004000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000023500000a00000000000000000000008d001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000802000000000000b01f46fc7c0ff1ba6ae78607befd59c34031658fd87baff04f012138bf21fa481731c1a993da6cf3ec79d3767409b63af2c8cc54637c3d7545c6b42a31f9b70000000000000000"], 0x180}}, 0x1000) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r9, @ANYRES32=0x0, @ANYBLOB="c8a95b6395d735b6414cde2274af0e7cb89d711c99d46ab9678e88d943b198e79500a63ec7be01a8281d78", @ANYRES64=r8, @ANYRESDEC], 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000080)=0x20, 0x4) (async) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000080)=0x20, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) 2m49.809823876s ago: executing program 4 (id=1837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r1, 0x40c, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) getsockopt$sock_buf(r2, 0x1, 0x6, &(0x7f0000000000)=""/76, &(0x7f0000000080)=0x4c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000540)={'erspan0\x00', r4, 0x40, 0x20, 0x6, 0x57, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast1, @remote}}}}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r1, 0x40c, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) (async) getsockopt$sock_buf(r2, 0x1, 0x6, &(0x7f0000000000)=""/76, &(0x7f0000000080)=0x4c) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000540)={'erspan0\x00', r4, 0x40, 0x20, 0x6, 0x57, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast1, @remote}}}}) (async) 2m49.808832525s ago: executing program 1 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09e3ff08009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200f5ff04000000080000000100000080008000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES64=r3, @ANYBLOB='\x00'/28], 0x48) 2m49.758087419s ago: executing program 2 (id=1839): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0x138}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14}}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$isdn_base(0x22, 0x3, 0x0) accept(r4, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x404c957}, 0x40094) 2m49.645344394s ago: executing program 3 (id=1840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) 2m49.506192847s ago: executing program 2 (id=1841): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="00010000000000008cbb00007b6de6e911c624809632d27b4cd9"], 0x48}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m49.15794887s ago: executing program 3 (id=1842): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x90}}, 0x0) 2m49.154474279s ago: executing program 4 (id=1843): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xad, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000680)={'ip6gre0\x00', r2, 0x4, 0xf, 0x8, 0xc9a, 0x4, @loopback, @private0, 0x700, 0x20, 0x3ff, 0xd}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@ipv4_getroute={0x1c, 0x1a, 0x204, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x80, 0xad, 0x0, 0x2, 0x36, 0x7, 0x3c00}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4080) 2m49.154010982s ago: executing program 1 (id=1844): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xcc, r0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9e, 0xa9, @random="408e12a4312e1793ae1babbf02b3b63651356c0efa39cdc4a5c9d70605fb094c93e9094da2292ddd907d84c35d70832af73439492a9f3859e6646d880b729df16c49e75b346005e19030ecdf888d696fc448377086dfb94933b713c3b0aa3fb9db58a3481daffc5e0fddeb8303ceac653ba537460510836399cb5f5111f48fc8cd1caa36e8b2081cc0e1a263e859f73b46f36a91c094b51cf366"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004005}, 0x20000000) 2m49.032844018s ago: executing program 2 (id=1845): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) ioctl$FITHAW(r0, 0xc0045878) 2m49.014694767s ago: executing program 3 (id=1846): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x5, 0x480, 0x10001, {}, {0x0, 0x2710}, {0x4, 0x1, 0x0, 0x1}, 0x1, @can={{}, 0x7, 0x3, 0x0, 0x0, "d09a62af74fbbea1"}}, 0x48}}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x2, 0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x630, 0x3, 0x7fff, 0x80008000, 0x1]}, &(0x7f00000003c0)=0x54) syz_emit_ethernet(0x1170, &(0x7f0000000a40)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "f9df00", 0x113a, 0x11, 0x0, @mcast2, @remote, {[@hopopts={0x87, 0x202, '\x00', [@generic={0x80, 0x1000, "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"}, @hao={0xc9, 0x10, @private2}]}, @hopopts={0x84, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xdb, 0x5, "35f73cb676"}]}, @routing={0x6c, 0x4, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}, @fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x5, 0x65}], {0x4e22, 0x4e21, 0xca, 0x0, @gue={{0x1, 0x1, 0x0, 0x90, 0x0, @void}, "2532a8093cea1daf64644248c18f99e531454d11e3bd30ed0d2ee68d4a5fc186a254e25ff6127e8125ccde73fa29194d6755bbf8d802b004d28f52dc7b0be00bbefdf15b4f0c690e464a1cf61ecfeb8ea94f7577fed6dbf620946305c185d65bb09c79a3469cb85bf8b121d05e4adad038e2723657c5e5e4af9373384b84d5d4603054288b0b9a90d2cec0d10086fef07591f7dd2b4c3bf360cbddfe807c19247ee3f0b9a35a7f843106ce60625db8a5382d6fba9990035a33717c3809dc"}}}}}}}, 0x0) 2m48.845745343s ago: executing program 2 (id=1847): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', r3, 0x2f, 0x2, 0x4, 0x5, 0x30, @mcast2, @local, 0x700, 0x0, 0x101, 0x1ffe}}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000110000012dbd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="2c020000040000000800290008b505000803c9126c6a040014000300626f6e555f736c6176655f3100002b09b9b30d000900000c08001300", @ANYRES32=r5, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x8804}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m48.714186716s ago: executing program 3 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0x2, 0x10}, {0x1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x2, {}, 0xfc}, 0x18) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x7f, 0x4, 0xad39, 0xc7d4766c401ada6a, @dev={0xfe, 0x80, '\x00', 0x11}, @remote, 0x8000, 0x40, 0xd3dd, 0x3569}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x7, 0x8000, 0x2, 0x6, {{0x38, 0x4, 0x2, 0x33, 0xe0, 0x64, 0x0, 0xf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010100, {[@generic={0x83, 0x11, "077c2f918a4a17c5dc51df6579c5df"}, @rr={0x7, 0x13, 0x31, [@local, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @cipso={0x86, 0x5f, 0x3, [{0x2, 0x11, "390e4fedf136fb9dc30708e8912410"}, {0x6, 0x4, 'T<'}, {0x7, 0xd, "8281097ea47f240c02d2a6"}, {0x6, 0xf, "58e0356ec6924303852b88cc6d"}, {0x6, 0xd, "d514104e5ff53c8c0b073e"}, {0x7, 0x3, "f2"}, {0x7, 0x7, "3015eb1274"}, {0x0, 0x6, "0539ef6c"}, {0x2, 0xb, "55e03e2e4b21f07661"}]}, @lsrr={0x83, 0xb, 0xa0, [@dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100]}, @lsrr={0x83, 0x1f, 0x23, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0xfe, 0x0}, @remote, @multicast2, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xf9, 0x0, 0xd, [0x8, 0x3, 0xffff, 0x6]}]}}}}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={r8, 0x11, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000380)={r8, 0x11, 0x6, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000700000086d7c0d6c878f064eb0202868cb1755f9ff84b4ccd2aa151f755484be569035c807ba66b41314bc61be7fe853b914176bdc1f8a035826ee04c7dc9", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x20000000) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@deltaction={0x118, 0x31, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe711}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff80}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc6}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x99}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x128}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000) 2m48.707726197s ago: executing program 4 (id=1849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@empty, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x50, 0x3c, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@fragment={0x3c, 0x0, 0x7, 0x1, 0x0, 0x6, 0x100064}, @dstopts={0x3b, 0x7, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0xe, 0xffff, [0x200, 0x413892ca, 0x4]}}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @empty}]}]}}}}}, 0x0) 2m48.652743783s ago: executing program 2 (id=1850): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) 2m48.597816812s ago: executing program 0 (id=1851): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)={0xe0, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe225}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0xe0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)='Ir;', 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@getaddr={0x14, 0x16, 0x400, 0x70bd26, 0x1, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x20044094) 2m46.396508921s ago: executing program 4 (id=1852): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0xffff, 0xfffffff9, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x67, 0x0, 0xb, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x4, 0x6, 0x0, 0x100, 0x4, 0x20000, r5}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r5}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x40000009}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x9, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x140a, 0x1f95844b79e8a54d, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24000880) (async) sendto$packet(r6, &(0x7f00000000c0)="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", 0xfc, 0x40081, 0x0, 0x0) 2m26.108498012s ago: executing program 32 (id=1851): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)={0xe0, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe225}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0xe0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)='Ir;', 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@getaddr={0x14, 0x16, 0x400, 0x70bd26, 0x1, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x20044094) 0s ago: executing program 33 (id=1844): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xcc, r0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9e, 0xa9, @random="408e12a4312e1793ae1babbf02b3b63651356c0efa39cdc4a5c9d70605fb094c93e9094da2292ddd907d84c35d70832af73439492a9f3859e6646d880b729df16c49e75b346005e19030ecdf888d696fc448377086dfb94933b713c3b0aa3fb9db58a3481daffc5e0fddeb8303ceac653ba537460510836399cb5f5111f48fc8cd1caa36e8b2081cc0e1a263e859f73b46f36a91c094b51cf366"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004005}, 0x20000000) kernel console output (not intermixed with test programs): (UME) 9*128kB (M) 11*256kB (ME) 4*512kB (UM) 2*1024kB (UE) 2*2048kB (M) 332*4096kB (M) = 1376764kB [ 98.350819][ T6714] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 98.384605][ T6714] Node 1 Normal: 197*4kB (UME) 54*8kB (UME) 44*16kB (UME) 86*32kB (UME) 22*64kB (UME) 9*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3892548kB [ 98.409160][ T6714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.419932][ T6739] Illegal XDP return value 2601015111 on prog (id 46) dev N/A, expect packet loss! [ 98.474377][ T6714] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.543332][ T6714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.575795][ T6714] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.586768][ T6714] 43994 total pagecache pages [ 98.591475][ T6714] 0 pages in swap cache [ 98.595632][ T6714] Free swap = 124996kB [ 98.610161][ T6714] Total swap = 124996kB [ 98.614339][ T6714] 2097051 pages RAM [ 98.638104][ T6714] 0 pages HighMem/MovableOnly [ 98.643541][ T6714] 424543 pages reserved [ 98.659014][ T6714] 0 pages cma reserved [ 98.805625][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 98.818556][ T6755] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 99.053666][ T6762] macvlan0: entered promiscuous mode [ 99.059961][ T6762] macvlan0: entered allmulticast mode [ 99.069948][ T6774] netlink: 'syz.4.231': attribute type 11 has an invalid length. [ 99.099151][ T6762] bond1: entered promiscuous mode [ 99.117703][ T6762] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 99.126091][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 99.164265][ T6762] bond1: left promiscuous mode [ 99.552564][ T6798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.591751][ T6800] Bluetooth: MGMT ver 1.23 [ 99.666187][ T6802] tipc: Trying to set illegal importance in message [ 99.818619][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 99.878458][ T6794] nbd0: detected capacity change from 0 to 63 [ 99.896803][ T6800] block nbd0: NBD_DISCONNECT [ 99.904064][ T6800] block nbd0: Disconnected due to user request. [ 99.915815][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.939572][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 99.948414][ T6800] block nbd0: shutting down sockets [ 99.948447][ T6813] hsr_slave_1 (unregistering): left promiscuous mode [ 99.978349][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 99.987944][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 99.998203][ T97] Buffer I/O error on dev nbd0, logical block 2, async page read [ 100.002753][ T6815] netlink: 108 bytes leftover after parsing attributes in process `syz.4.240'. [ 100.006071][ T97] Buffer I/O error on dev nbd0, logical block 3, async page read [ 100.023927][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.033095][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.042351][ T5843] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.051674][ T5843] Buffer I/O error on dev nbd0, logical block 1, async page read [ 100.060728][ T5843] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.070451][ T5843] Buffer I/O error on dev nbd0, logical block 2, async page read [ 100.078435][ T5843] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.092162][ T5843] Buffer I/O error on dev nbd0, logical block 3, async page read [ 100.103931][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.113504][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.121637][ T5843] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.131763][ T5843] Buffer I/O error on dev nbd0, logical block 1, async page read [ 100.139863][ T5843] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.150790][ T5843] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.164840][ T5843] ldm_validate_partition_table(): Disk read failed. [ 100.174789][ T5843] Dev nbd0: unable to read RDB block 0 [ 100.199400][ T5843] nbd0: unable to read partition table [ 100.251679][ T5843] ldm_validate_partition_table(): Disk read failed. [ 100.288530][ T5843] Dev nbd0: unable to read RDB block 0 [ 100.296219][ T5843] nbd0: unable to read partition table [ 100.335788][ T6818] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 100.381059][ T6820] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 100.721921][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 101.189859][ T6866] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 101.197728][ T6866] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 101.226217][ T6866] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 101.256584][ T6866] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 101.292334][ T6866] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 101.344689][ T6866] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 101.345700][ T6880] Bluetooth: hci0: invalid length 39, exp 2 for type 19 [ 101.366227][ T6866] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 101.404233][ T6866] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 101.430596][ T6866] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 101.701229][ T6896] tipc: Started in network mode [ 101.706179][ T6896] tipc: Node identity 662f67e0bb0a, cluster identity 4711 [ 101.733159][ T6896] tipc: Enabled bearer , priority 0 [ 101.740842][ T6899] syzkaller0: entered promiscuous mode [ 101.747683][ T6899] syzkaller0: entered allmulticast mode [ 101.805576][ T6894] tipc: Resetting bearer [ 101.876519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 101.884544][ C1] lec:lec_tx_timeout: lec0 [ 101.890680][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 101.915454][ T6902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.924018][ T6892] tipc: Resetting bearer [ 101.981582][ T6911] __nla_validate_parse: 3 callbacks suppressed [ 101.981599][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 102.027727][ T6892] tipc: Disabling bearer [ 102.224049][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.266'. [ 102.456954][ T6925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.270'. [ 102.739100][ T6940] netdevsim netdevsim3: Direct firmware load for . [ 102.739100][ T6940] failed with error -2 [ 102.787527][ T6940] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 102.787527][ T6940] [ 103.057583][ T6954] tipc: Started in network mode [ 103.062741][ T6954] tipc: Node identity ac1414aa, cluster identity 4711 [ 103.071497][ T6954] tipc: Enabled bearer , priority 10 [ 103.704492][ T6993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.724107][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 104.028380][ T7004] validate_nla: 49 callbacks suppressed [ 104.028399][ T7004] netlink: 'syz.4.298': attribute type 19 has an invalid length. [ 104.187566][ T9] tipc: Node number set to 2886997162 [ 104.238099][ T7015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.301'. [ 104.270000][ T7016] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 104.293204][ T7016] netlink: 224 bytes leftover after parsing attributes in process `syz.3.299'. [ 104.574801][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 104.587454][ T7034] xt_policy: too many policy elements [ 104.596986][ T7034] sch_tbf: burst 0 is lower than device lo mtu (17233) ! [ 104.974776][ T7056] team0: Device ip6gre1 is of different type [ 105.010497][ T7059] netlink: 104 bytes leftover after parsing attributes in process `syz.3.314'. [ 105.580685][ T7083] netlink: 244 bytes leftover after parsing attributes in process `syz.0.316'. [ 105.808360][ T7097] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 105.830579][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 105.855638][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.932373][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.417197][ T7129] netlink: 'syz.1.326': attribute type 11 has an invalid length. [ 106.696112][ T7150] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 106.906499][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 106.914543][ C1] lec:lec_tx_timeout: lec0 [ 106.919825][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 107.219411][ T7177] netlink: 'syz.2.342': attribute type 21 has an invalid length. [ 107.249385][ T7177] __nla_validate_parse: 4 callbacks suppressed [ 107.249401][ T7177] netlink: 156 bytes leftover after parsing attributes in process `syz.2.342'. [ 107.289798][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 107.298850][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 107.308363][ T7181] netlink: 'syz.3.344': attribute type 15 has an invalid length. [ 107.422657][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 107.825759][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 108.229201][ T7233] IPVS: length: 239 != 24 [ 108.242030][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.362'. [ 108.272361][ T7241] netlink: 64 bytes leftover after parsing attributes in process `syz.4.364'. [ 108.282898][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 108.303677][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 108.376100][ T5910] IPVS: starting estimator thread 0... [ 108.470604][ T7248] IPVS: using max 27 ests per chain, 64800 per kthread [ 108.599964][ T7253] syzkaller0: entered promiscuous mode [ 108.611090][ T7253] syzkaller0: entered allmulticast mode [ 108.986570][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 109.661738][ T7315] dvmrp1: entered allmulticast mode [ 109.969114][ T7330] netlink: 'syz.2.391': attribute type 2 has an invalid length. [ 109.988253][ T7329] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 110.363816][ T7354] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.389821][ T7354] veth0_macvtap: left promiscuous mode [ 110.412392][ T7357] x_tables: duplicate underflow at hook 3 [ 110.537794][ T7353] syz.2.397 (7353) used greatest stack depth: 16520 bytes left [ 110.844066][ T7381] netlink: 'syz.2.406': attribute type 3 has an invalid length. [ 110.915178][ T7382] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 110.970110][ T7387] xt_TPROXY: Can be used only with -p tcp or -p udp [ 111.198439][ T7397] netlink: 'syz.0.412': attribute type 7 has an invalid length. [ 111.570802][ T7414] tipc: Started in network mode [ 111.583368][ T7414] tipc: Node identity 2e326bf51ecc, cluster identity 4711 [ 111.607031][ T7414] tipc: Enabled bearer , priority 0 [ 111.615063][ T7424] syzkaller0: entered promiscuous mode [ 111.624346][ T7424] syzkaller0: entered allmulticast mode [ 111.882759][ T7424] tipc: Resetting bearer [ 111.926700][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 111.934838][ C1] lec:lec_tx_timeout: lec0 [ 111.940461][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 111.981887][ T7413] tipc: Resetting bearer [ 112.025356][ T7413] tipc: Disabling bearer [ 112.265314][ T7443] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 112.288384][ T7455] __nla_validate_parse: 17 callbacks suppressed [ 112.288410][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 112.421136][ T7464] netlink: 220 bytes leftover after parsing attributes in process `syz.3.429'. [ 112.501854][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 112.853481][ T7495] syz_tun: entered allmulticast mode [ 112.867757][ T7495] macvlan0: entered allmulticast mode [ 112.873263][ T7495] veth1_vlan: entered allmulticast mode [ 112.908979][ T7494] syz_tun: left allmulticast mode [ 112.913745][ T7497] xt_CT: No such helper "syz1" [ 112.986329][ T7501] netlink: 112 bytes leftover after parsing attributes in process `syz.0.440'. [ 113.028058][ T9] IPVS: starting estimator thread 0... [ 113.146520][ T7509] IPVS: using max 33 ests per chain, 79200 per kthread [ 113.181313][ T7518] netlink: 'syz.1.445': attribute type 2 has an invalid length. [ 113.745907][ T7566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.460'. [ 113.772915][ T7566] netlink: 44 bytes leftover after parsing attributes in process `syz.2.460'. [ 113.874552][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'. [ 113.892576][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 113.901651][ T7572] netlink: 244 bytes leftover after parsing attributes in process `syz.0.463'. [ 113.928883][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 113.974730][ T7575] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 114.525617][ T7611] IPVS: Error connecting to the multicast addr [ 115.960426][ T7644] tipc: Enabling of bearer rejected, failed to enable media [ 116.162738][ T7665] netlink: 'syz.4.491': attribute type 21 has an invalid length. [ 116.348449][ T7673] bridge0: port 3(veth0_to_bridge) entered blocking state [ 116.360458][ T7673] bridge0: port 3(veth0_to_bridge) entered disabled state [ 116.369013][ T7673] veth0_to_bridge: entered allmulticast mode [ 116.383696][ T7673] veth0_to_bridge: entered promiscuous mode [ 116.390600][ T7673] bridge0: port 3(veth0_to_bridge) entered blocking state [ 116.398025][ T7673] bridge0: port 3(veth0_to_bridge) entered listening state [ 116.706721][ T7701] openvswitch: netlink: Flow key attr not present in new flow. [ 116.771651][ T7705] netlink: 'syz.3.506': attribute type 1 has an invalid length. [ 116.871677][ T7705] syzkaller0: entered promiscuous mode [ 116.884775][ T7705] syzkaller0: entered allmulticast mode [ 116.956674][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 116.964712][ C1] lec:lec_tx_timeout: lec0 [ 116.969514][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 116.976130][ T7718] syzkaller0 speed is unknown, defaulting to 1000 [ 116.987781][ T7718] syzkaller0 speed is unknown, defaulting to 1000 [ 116.998807][ T7718] syzkaller0 speed is unknown, defaulting to 1000 [ 117.018588][ T7718] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.037698][ T7718] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.082415][ T7718] syzkaller0 speed is unknown, defaulting to 1000 [ 117.091943][ T7718] syzkaller0 speed is unknown, defaulting to 1000 [ 117.102539][ T7718] syzkaller0 speed is unknown, defaulting to 1000 [ 117.112081][ T7718] syzkaller0 speed is unknown, defaulting to 1000 [ 117.122199][ T7718] syzkaller0 speed is unknown, defaulting to 1000 [ 117.320420][ T7735] __nla_validate_parse: 38 callbacks suppressed [ 117.320440][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.516'. [ 117.339722][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 117.350584][ T7736] netlink: 52 bytes leftover after parsing attributes in process `syz.0.517'. [ 117.484411][ T7742] netlink: 'syz.2.520': attribute type 33 has an invalid length. [ 117.493032][ T7740] syzkaller0 speed is unknown, defaulting to 1000 [ 117.619490][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'. [ 117.694803][ T7755] tipc: Started in network mode [ 117.700198][ T7755] tipc: Node identity 080211, cluster identity 4711 [ 117.707134][ T7755] tipc: Enabled bearer , priority 0 [ 117.714703][ T7755] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 117.725406][ T7755] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 117.735052][ T7755] tipc: Resetting bearer [ 117.743257][ T2154] syzkaller0 speed is unknown, defaulting to 1000 [ 117.754363][ T7757] netlink: 'syz.3.525': attribute type 3 has an invalid length. [ 117.772895][ T7755] tipc: Resetting bearer [ 117.848425][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 117.850561][ T7763] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 117.951150][ T7763] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 118.759368][ T2154] tipc: Node number set to 134353152 [ 118.819968][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 118.841547][ T7835] sctp: [Deprecated]: syz.0.548 (pid 7835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.841547][ T7835] Use struct sctp_sack_info instead [ 118.848600][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.547'. [ 119.068667][ T7847] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 119.232616][ T7856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.262127][ T7858] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 119.294682][ T7860] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 119.521923][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 119.840234][ T7897] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.007078][ T7907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.570'. [ 120.633877][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 120.654366][ T7912] tipc: Enabled bearer , priority 0 [ 120.712002][ T7912] syzkaller0: entered promiscuous mode [ 120.723219][ T7912] syzkaller0: entered allmulticast mode [ 120.736060][ T7925] tipc: Resetting bearer [ 120.770822][ T7911] tipc: Resetting bearer [ 120.814782][ T7911] tipc: Disabling bearer [ 121.003954][ T7946] IPv4: Oversized IP packet from 127.202.26.0 [ 121.141919][ T7963] syzkaller0: create flow: hash 2092864475 index 2 [ 121.271479][ T803] syzkaller0: tun_net_xmit 76 [ 121.278978][ T803] syzkaller0: tun_net_xmit 48 [ 121.286305][ T7971] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 121.297048][ T5910] syzkaller0: tun_net_xmit 76 [ 121.342515][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.363566][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.457394][ T7950] syzkaller0: delete flow: hash 2092864475 index 2 [ 121.516640][ T1212] syzkaller0: tun_net_xmit 76 [ 121.601614][ T7981] pim6reg1: entered promiscuous mode [ 121.619545][ T7981] pim6reg1: entered allmulticast mode [ 121.669077][ T8000] Cannot find add_set index 0 as target [ 121.976718][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 121.984780][ C1] lec:lec_tx_timeout: lec0 [ 121.989503][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 122.674596][ T8003] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 122.855762][ T8032] dvmrp1: entered allmulticast mode [ 122.967782][ T8040] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 122.994824][ T8040] __nla_validate_parse: 9 callbacks suppressed [ 122.994844][ T8040] netlink: 144 bytes leftover after parsing attributes in process `syz.4.604'. [ 123.026509][ T8040] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 123.043334][ T8040] netlink: 'syz.4.604': attribute type 2 has an invalid length. [ 123.077931][ T8040] netlink: 64 bytes leftover after parsing attributes in process `syz.4.604'. [ 123.566276][ T8078] netlink: 9 bytes leftover after parsing attributes in process `syz.3.614'. [ 123.582799][ T8081] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 123.616871][ T8082] netlink: 5 bytes leftover after parsing attributes in process `syz.3.614'. [ 123.642761][ T8078] gretap0: entered promiscuous mode [ 123.667651][ T8082] 0ªî{X¹¦: renamed from gretap0 [ 123.728512][ T8082] 0ªî{X¹¦: left promiscuous mode [ 123.742569][ T8082] 0ªî{X¹¦: entered allmulticast mode [ 123.767326][ T8082] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 123.939532][ T8103] syzkaller1: entered promiscuous mode [ 123.945049][ T8103] syzkaller1: entered allmulticast mode [ 124.448342][ T8123] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.626'. [ 124.470135][ T8123] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 124.620802][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 124.663582][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 124.675822][ T8137] netlink: 'syz.4.631': attribute type 12 has an invalid length. [ 124.684326][ T8137] netlink: 'syz.4.631': attribute type 11 has an invalid length. [ 124.863203][ T8155] syzkaller0: entered promiscuous mode [ 124.869651][ T8155] syzkaller0: entered allmulticast mode [ 124.878604][ T8154] tipc: Enabled bearer , priority 0 [ 124.960127][ T8154] tipc: Resetting bearer [ 125.017739][ T8154] tipc: Disabling bearer [ 125.359112][ T8187] netlink: 'syz.1.649': attribute type 5 has an invalid length. [ 125.473482][ T8198] syz_tun: entered allmulticast mode [ 125.557081][ T8197] syz_tun: left allmulticast mode [ 125.622914][ T8210] tipc: Enabled bearer , priority 0 [ 125.674390][ T8215] syzkaller0: entered promiscuous mode [ 125.695544][ T8215] syzkaller0: entered allmulticast mode [ 125.767860][ T8210] tipc: Resetting bearer [ 125.813568][ T8223] x_tables: unsorted entry at hook 2 [ 125.833342][ T8216] bond2: entered promiscuous mode [ 125.839062][ T8216] bond2: entered allmulticast mode [ 125.845489][ T8216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.864857][ T8209] tipc: Resetting bearer [ 125.876029][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 125.885891][ T8209] tipc: Disabling bearer [ 125.896436][ T8224] netlink: 'syz.3.659': attribute type 12 has an invalid length. [ 125.908378][ T8220] bridge_slave_1: left allmulticast mode [ 125.914057][ T8220] bridge_slave_1: left promiscuous mode [ 125.922428][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.933928][ T8220] bridge_slave_0: left allmulticast mode [ 125.940317][ T8227] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 125.951038][ T8220] bridge_slave_0: left promiscuous mode [ 125.957426][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.300493][ T8244] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.332161][ T8248] netlink: 244 bytes leftover after parsing attributes in process `syz.1.669'. [ 126.514775][ T8253] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 126.559402][ T8255] IPVS: Error connecting to the multicast addr [ 126.570620][ T8260] netlink: 312 bytes leftover after parsing attributes in process `syz.1.671'. [ 126.594284][ T8253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.739466][ T8273] netlink: 'syz.2.676': attribute type 29 has an invalid length. [ 126.766252][ T8273] netlink: 'syz.2.676': attribute type 29 has an invalid length. [ 126.775333][ T8273] unsupported nla_type 58 [ 126.788876][ T8275] veth1_to_bond: entered allmulticast mode [ 126.852696][ T8275] veth1_to_bond: left allmulticast mode [ 126.996777][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 127.004822][ C1] lec:lec_tx_timeout: lec0 [ 127.009830][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 127.381162][ T8320] openvswitch: netlink: Flow actions attr not present in new flow. [ 127.928325][ T8363] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 128.059491][ T8368] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 128.109612][ T8374] __nla_validate_parse: 11 callbacks suppressed [ 128.109630][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 128.302984][ T8390] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 128.423355][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.717'. [ 128.518608][ T5842] Bluetooth: hci0: command tx timeout [ 128.564575][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 128.582397][ T8405] netlink: 44 bytes leftover after parsing attributes in process `syz.3.719'. [ 128.595651][ T8405] nbd: socks must be embedded in a SOCK_ITEM attr [ 128.603736][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.654276][ T8409] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.739822][ T8415] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 128.741335][ T8412] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 128.747657][ T8415] netlink: 'syz.1.724': attribute type 4 has an invalid length. [ 128.763885][ T8415] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.724'. [ 128.854770][ T8412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.876277][ T8420] vlan0: entered promiscuous mode [ 128.883264][ T8420] bond1: entered promiscuous mode [ 128.889670][ T8420] vlan0: entered allmulticast mode [ 128.896148][ T8420] bond1: entered allmulticast mode [ 128.907398][ T8424] netlink: 'syz.1.726': attribute type 14 has an invalid length. [ 128.942301][ T8412] bond1: (slave gretap1): making interface the new active one [ 128.952582][ T8412] gretap1: entered promiscuous mode [ 128.959340][ T8412] gretap1: entered allmulticast mode [ 128.988521][ T8412] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 129.182859][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 129.209987][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 129.280756][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.305596][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.356259][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.388376][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.481305][ T8452] syzkaller0 speed is unknown, defaulting to 1000 [ 129.753649][ T8484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.868527][ T8491] netlink: 256 bytes leftover after parsing attributes in process `syz.2.746'. [ 129.957455][ T8493] veth0: entered promiscuous mode [ 129.965581][ T8493] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 129.974645][ T8497] netlink: 'syz.4.747': attribute type 3 has an invalid length. [ 130.013681][ T8493] bond2: entered promiscuous mode [ 130.020012][ T8493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.070112][ T8501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.084902][ T8501] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 130.103782][ T8501] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 130.126354][ T8501] bond2: (slave wireguard0): making interface the new active one [ 130.134593][ T8501] wireguard0: entered promiscuous mode [ 130.142495][ T8501] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 130.152953][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.749'. [ 130.157028][ T8492] veth0: left promiscuous mode [ 130.282549][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 130.326214][ T8520] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.547514][ T8528] bond0: (slave bond_slave_0): Releasing backup interface [ 130.581796][ T8528] bond0: (slave bond_slave_1): Releasing backup interface [ 130.597647][ T8535] siw: device registration error -23 [ 130.644245][ T8528] team0: Port device team_slave_0 removed [ 130.721209][ T8528] team0: Port device team_slave_1 removed [ 130.737498][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.750144][ T8528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.767225][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.784359][ T8528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.800829][ T8528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.035590][ T8562] syzkaller0: entered promiscuous mode [ 131.041675][ T8562] syzkaller0: entered allmulticast mode [ 131.980614][ T8614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.009261][ T8614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.020089][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 132.020146][ C1] lec:lec_tx_timeout: lec0 [ 132.028740][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 132.130849][ T8614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.141401][ T8614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.193832][ T8634] x_tables: duplicate underflow at hook 1 [ 132.203086][ T8633] tipc: Started in network mode [ 132.218278][ T8633] tipc: Node identity , cluster identity 4711 [ 132.224465][ T8633] tipc: Failed to set node id, please configure manually [ 132.231758][ T8633] tipc: Enabling of bearer rejected, failed to enable media [ 132.272565][ T8614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.285274][ T8614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.315239][ T8639] validate_nla: 3 callbacks suppressed [ 132.315257][ T8639] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 132.400866][ T1166] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 132.428429][ T8614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.451032][ T8614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.509474][ T8647] syzkaller0 speed is unknown, defaulting to 1000 [ 132.606269][ T803] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.622135][ T803] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.736667][ T803] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.745012][ T803] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.770665][ T1150] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.783826][ T1150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.817218][ T1150] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.834995][ T1150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.850510][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856956][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.166780][ T8685] __nla_validate_parse: 5 callbacks suppressed [ 133.166796][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 133.453521][ T8706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.806'. [ 133.468727][ T8708] netlink: 14 bytes leftover after parsing attributes in process `syz.0.809'. [ 133.478262][ T8706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.806'. [ 133.556046][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 133.720545][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 133.729899][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.810'. [ 133.773145][ T8708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.793598][ T8708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.811768][ T8708] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 133.826949][ T8708] bond0 (unregistering): Released all slaves [ 133.927115][ T8735] tipc: Enabling of bearer rejected, already enabled [ 133.941285][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.948494][ T8737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.949300][ T8742] netlink: 'syz.0.815': attribute type 1 has an invalid length. [ 133.969383][ T8742] netlink: 224 bytes leftover after parsing attributes in process `syz.0.815'. [ 133.979806][ T8715] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.985828][ T8715] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 134.004889][ T8715] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.011331][ T8715] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 134.024776][ T8715] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.031162][ T8715] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 134.072984][ T8715] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.079827][ T8715] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 134.216923][ T8715] tipc: Resetting bearer [ 134.292061][ T8756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'. [ 134.478048][ T8766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.822'. [ 134.694451][ T8776] can: request_module (can-proto-4) failed. [ 135.731264][ T8828] netlink: 'syz.4.833': attribute type 2 has an invalid length. [ 136.213794][ T8863] netlink: 'syz.2.847': attribute type 6 has an invalid length. [ 136.222554][ T8863] netlink: 'syz.2.847': attribute type 6 has an invalid length. [ 136.259641][ T8865] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 136.272176][ T8865] bond0 (unregistering): Released all slaves [ 136.362545][ T8871] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 136.378578][ T8871] bond2 (unregistering): Released all slaves [ 136.643346][ T8886] netlink: 'syz.2.855': attribute type 30 has an invalid length. [ 136.898590][ T8898] bond0: entered promiscuous mode [ 137.036696][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 137.044735][ C1] lec:lec_tx_timeout: lec0 [ 137.052084][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 137.259030][ T8921] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 137.281220][ T8929] syzkaller1: entered promiscuous mode [ 137.286843][ T8921] netlink: 'syz.1.866': attribute type 2 has an invalid length. [ 137.309333][ T8929] syzkaller1: entered allmulticast mode [ 137.316167][ T8931] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 137.339233][ T8931] netlink: 'syz.1.866': attribute type 2 has an invalid length. [ 137.370854][ T8934] netlink: 'syz.3.867': attribute type 29 has an invalid length. [ 140.533007][ T8942] sctp: [Deprecated]: syz.2.872 (pid 8942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.533007][ T8942] Use struct sctp_sack_info instead [ 140.549502][ T8948] netlink: 'syz.0.874': attribute type 3 has an invalid length. [ 140.562796][ T8949] __nla_validate_parse: 6 callbacks suppressed [ 140.562813][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 140.584710][ T8950] netlink: 'syz.0.874': attribute type 3 has an invalid length. [ 140.785848][ T8962] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.880'. [ 140.808728][ T8962] openvswitch: netlink: Key type 112 is out of range max 32 [ 140.961063][ T8977] netlink: 'syz.2.886': attribute type 2 has an invalid length. [ 140.969111][ T8977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.886'. [ 140.969998][ T8974] netlink: 348 bytes leftover after parsing attributes in process `syz.3.884'. [ 140.982763][ T8979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.024682][ T8980] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 141.048964][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.885'. [ 141.134161][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 141.144849][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 141.561784][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.896'. [ 141.674762][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 141.909760][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 142.114964][ T9039] gtp0: entered promiscuous mode [ 142.121799][ T9039] gtp0: entered allmulticast mode [ 142.301425][ T9042] team0: Cannot enslave team device to itself [ 142.800005][ T9076] syzkaller0 speed is unknown, defaulting to 1000 [ 142.836404][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 142.844465][ C1] lec:lec_tx_timeout: lec0 [ 142.849571][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 143.266606][ T9108] netlink: 'syz.1.929': attribute type 2 has an invalid length. [ 143.304803][ T9108] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 143.378085][ T9115] veth0_to_bridge: entered promiscuous mode [ 143.527474][ T9113] veth0_to_bridge: left promiscuous mode [ 144.299470][ T9150] tipc: Enabled bearer , priority 0 [ 144.460554][ T9150] syzkaller0: entered promiscuous mode [ 144.471001][ T9150] syzkaller0: entered allmulticast mode [ 144.477688][ T9150] tipc: Resetting bearer [ 144.505916][ T9161] bond2: option min_links: invalid value (18446744073709551614) [ 144.514787][ T9161] bond2: option min_links: allowed values 0 - 2147483647 [ 144.524847][ T9161] bond2 (unregistering): Released all slaves [ 144.557876][ T9171] netlink: 'syz.1.945': attribute type 10 has an invalid length. [ 144.568870][ T9148] tipc: Resetting bearer [ 144.608836][ T9163] x_tables: duplicate underflow at hook 2 [ 144.642030][ T9163] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 144.695302][ T9182] netlink: 'syz.2.948': attribute type 2 has an invalid length. [ 145.681063][ T9148] tipc: Disabling bearer [ 145.693210][ T9171] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 145.709712][ T9186] __nla_validate_parse: 9 callbacks suppressed [ 145.709731][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 145.737706][ T9186] netlink: 6 bytes leftover after parsing attributes in process `syz.3.949'. [ 145.950604][ T9206] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 145.968889][ T9206] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 145.977012][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 146.024250][ T9213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.123000][ T9217] tipc: Enabled bearer , priority 0 [ 146.151412][ T9217] syzkaller0: entered promiscuous mode [ 146.158836][ T9217] syzkaller0: entered allmulticast mode [ 146.169244][ T9217] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 146.225513][ T9221] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 146.261519][ T9217] tipc: Resetting bearer [ 146.300501][ T9215] tipc: Resetting bearer [ 146.356115][ T9215] tipc: Disabling bearer [ 146.437610][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.965'. [ 146.756729][ T9247] netlink: 64 bytes leftover after parsing attributes in process `syz.1.972'. [ 146.788007][ T9247] veth1_to_bond: entered allmulticast mode [ 146.797598][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'. [ 146.842399][ T9247] bond0: (slave bond_slave_1): Releasing backup interface [ 146.909630][ T9247] veth1_to_bond (unregistering): left allmulticast mode [ 146.918121][ C0] bridge0: port 3(veth0_to_bridge) entered learning state [ 146.951639][ T9255] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 146.980215][ T9262] x_tables: duplicate entry at hook 2 [ 146.991753][ T9262] Unsupported ieee802154 address type: 0 [ 147.120917][ T9272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.982'. [ 147.201083][ T9281] netlink: 140 bytes leftover after parsing attributes in process `syz.0.984'. [ 147.250937][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 147.574621][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad77400: rx timeout, send abort [ 147.584408][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad77c00: rx timeout, send abort [ 147.645840][ T9306] xt_bpf: check failed: parse error [ 147.766853][ T9316] netlink: 388 bytes leftover after parsing attributes in process `syz.4.991'. [ 147.878279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 147.886340][ C1] lec:lec_tx_timeout: lec0 [ 147.892094][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 148.083700][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad77400: abort rx timeout. Force session deactivation [ 148.095492][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad77c00: abort rx timeout. Force session deactivation [ 148.265120][ T9345] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 148.668297][ T9375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.857783][ T9391] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 148.940947][ T9391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.004054][ T9402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.011336][ T9402] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 149.025578][ T9402] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 149.117192][ T9409] IPv6: sit1: Disabled Multicast RS [ 149.123567][ T9409] sit1: entered allmulticast mode [ 149.264746][ T9418] vcan0: entered allmulticast mode [ 149.306454][ T9422] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20016 [ 149.612878][ T9444] openvswitch: netlink: Message has -2 unknown bytes. [ 149.805575][ T9456] tipc: Enabled bearer , priority 0 [ 149.824051][ T9456] syzkaller0: entered promiscuous mode [ 149.835722][ T9456] syzkaller0: entered allmulticast mode [ 149.872453][ T9459] tipc: Started in network mode [ 149.889461][ T9459] tipc: Node identity e2a4edca23e2, cluster identity 4711 [ 149.912668][ T9459] tipc: Enabled bearer , priority 0 [ 149.929894][ T9456] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 149.984244][ T9471] syzkaller0: entered promiscuous mode [ 149.993575][ T9471] syzkaller0: entered allmulticast mode [ 150.023005][ T9456] tipc: Resetting bearer [ 150.034000][ T9459] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 150.054002][ T9455] tipc: Resetting bearer [ 150.083801][ T9455] tipc: Disabling bearer [ 150.108632][ T9459] tipc: Resetting bearer [ 150.116070][ T9476] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 150.188941][ T9457] tipc: Resetting bearer [ 150.247778][ T9457] tipc: Disabling bearer [ 150.327137][ T9479] veth3: entered promiscuous mode [ 150.351948][ T9486] tipc: Enabling of bearer rejected, failed to enable media [ 150.719654][ T9514] __nla_validate_parse: 8 callbacks suppressed [ 150.719673][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 150.797269][ T9522] xt_cgroup: invalid path, errno=-2 [ 150.871117][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 150.986802][ T9536] tap0: tun_chr_ioctl cmd 1074025677 [ 150.993204][ T9536] tap0: linktype set to 65534 [ 151.031765][ T9535] syzkaller1: entered promiscuous mode [ 151.041421][ T9535] syzkaller1: entered allmulticast mode [ 151.075924][ T9542] team0: Device gtp1 is up. Set it down before adding it as a team port [ 151.114835][ T9537] team0: Device gtp1 is up. Set it down before adding it as a team port [ 151.262165][ T9545] raw_sendmsg: syz.4.1058 forgot to set AF_INET. Fix it! [ 151.394764][ T9556] netlink: 'syz.2.1061': attribute type 21 has an invalid length. [ 151.417694][ T9556] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1061'. [ 151.582794][ T9558] syzkaller1: entered promiscuous mode [ 151.594494][ T9558] syzkaller1: entered allmulticast mode [ 151.795316][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 151.810982][ T9587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1072'. [ 151.821632][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1072'. [ 151.930520][ T9581] ip6gre1: entered allmulticast mode [ 151.946508][ T9586] vlan1: entered allmulticast mode [ 151.951866][ T9586] hsr0: entered allmulticast mode [ 151.959324][ T9586] hsr_slave_0: entered allmulticast mode [ 151.965576][ T9586] hsr_slave_1: entered allmulticast mode [ 152.218615][ T9581] syzkaller0: entered promiscuous mode [ 152.224192][ T9581] syzkaller0: entered allmulticast mode [ 152.283099][ T9612] netlink: 492 bytes leftover after parsing attributes in process `syz.2.1078'. [ 152.300607][ T9603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'. [ 152.403192][ T9617] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 152.411421][ T9617] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1075'. [ 152.420604][ T9617] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 152.906794][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 152.914939][ C1] lec:lec_tx_timeout: lec0 [ 152.920067][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 153.757099][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'. [ 153.768505][ T9646] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 153.794706][ T2154] IPVS: starting estimator thread 0... [ 153.809221][ T9646] team1: entered promiscuous mode [ 153.814452][ T9646] team1: entered allmulticast mode [ 153.906482][ T9650] IPVS: using max 29 ests per chain, 69600 per kthread [ 154.392534][ T9699] x_tables: duplicate underflow at hook 1 [ 154.620773][ T9710] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 154.629213][ T9710] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 154.638494][ T9710] netlink: 'syz.2.1106': attribute type 2 has an invalid length. [ 155.136545][ T9760] vxlan2: entered promiscuous mode [ 155.142099][ T9760] vxlan2: entered allmulticast mode [ 155.208975][ T9766] batadv_slave_1: entered promiscuous mode [ 155.215225][ T9766] batadv_slave_1: left promiscuous mode [ 155.318063][ T9775] netlink: 'syz.2.1124': attribute type 8 has an invalid length. [ 155.339279][ T9773] netlink: 'syz.3.1125': attribute type 1 has an invalid length. [ 155.614136][ T9802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.861996][ T9819] __nla_validate_parse: 11 callbacks suppressed [ 155.862016][ T9819] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1139'. [ 155.932059][ T9823] netlink: 'syz.3.1139': attribute type 4 has an invalid length. [ 155.959307][ T9823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1139'. [ 156.138094][ T9842] netlink: 'syz.4.1143': attribute type 12 has an invalid length. [ 156.143957][ T9849] IPv6: sit1: Disabled Multicast RS [ 156.161074][ T9849] sit1: entered allmulticast mode [ 156.257859][ T9858] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 156.309101][ T9861] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 156.358765][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 156.408114][ T9863] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 156.426902][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 156.456152][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 156.539236][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1152'. [ 156.598752][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 156.627121][ T9871] bond2 (unregistering): Released all slaves [ 156.789145][ T9899] x_tables: duplicate underflow at hook 1 [ 156.792476][ T9896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.821010][ T9896] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 156.830732][ T9901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1160'. [ 157.045971][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1166'. [ 157.079858][ T9918] x_tables: duplicate underflow at hook 4 [ 157.197653][ T9926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1169'. [ 157.333339][ T9935] sctp: [Deprecated]: syz.3.1173 (pid 9935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.333339][ T9935] Use struct sctp_sack_info instead [ 157.501224][ T9944] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.511661][ T9944] bond4: (slave bond5): making interface the new active one [ 157.519853][ T9944] bond4: (slave bond5): Enslaving as an active interface with an up link [ 157.526861][ T9952] tipc: Can't bind to reserved service type 2 [ 157.545702][ T9949] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.558335][ T9949] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 157.588333][ T9953] tipc: Enabling of bearer rejected, failed to enable media [ 157.605651][ T9948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.927022][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 157.935126][ C1] lec:lec_tx_timeout: lec0 [ 157.939733][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 158.257500][ T9998] x_tables: duplicate underflow at hook 3 [ 158.463484][T10010] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 158.610813][ T1166] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.626867][ T1166] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.652279][ T1166] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.206306][T10065] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 159.562185][T10093] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.679725][T10099] validate_nla: 2 callbacks suppressed [ 159.679744][T10099] netlink: 'syz.2.1225': attribute type 126 has an invalid length. [ 159.949794][T10127] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 160.258771][T10136] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.460771][T10164] hsr0 speed is unknown, defaulting to 1000 [ 160.469727][T10164] hsr0 speed is unknown, defaulting to 1000 [ 160.480846][T10164] hsr0 speed is unknown, defaulting to 1000 [ 160.528297][T10164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 160.575065][T10171] netlink: 'syz.2.1245': attribute type 2 has an invalid length. [ 160.612384][T10164] hsr0 speed is unknown, defaulting to 1000 [ 160.636116][T10164] hsr0 speed is unknown, defaulting to 1000 [ 160.644488][T10164] hsr0 speed is unknown, defaulting to 1000 [ 160.735861][T10184] netlink: 'syz.2.1248': attribute type 1 has an invalid length. [ 160.779197][T10164] hsr0 speed is unknown, defaulting to 1000 [ 160.816750][T10164] hsr0 speed is unknown, defaulting to 1000 [ 161.685409][T10246] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 161.734033][T10246] bond2 (unregistering): Released all slaves [ 162.315743][T10271] __nla_validate_parse: 25 callbacks suppressed [ 162.315762][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1276'. [ 162.569930][T10290] x_tables: duplicate entry at hook 2 [ 162.747874][T10297] tipc: Enabled bearer , priority 0 [ 162.755951][T10297] syzkaller0: entered promiscuous mode [ 162.764738][T10297] syzkaller0: entered allmulticast mode [ 162.826997][T10297] tipc: Resetting bearer [ 162.902847][T10294] tipc: Resetting bearer [ 162.956400][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 162.964481][ C1] lec:lec_tx_timeout: lec0 [ 162.969581][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 162.982851][T10294] tipc: Disabling bearer [ 163.286088][T10328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1294'. [ 163.423526][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1298'. [ 163.505696][T10348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.532960][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1300'. [ 163.782695][T10369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1305'. [ 163.812823][T10367] tipc: Enabled bearer , priority 0 [ 163.821995][T10369] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 163.868571][T10367] tipc: Disabling bearer [ 164.091445][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 164.133271][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'. [ 164.208846][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'. [ 164.307786][T10400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.433263][T10410] bond4: entered promiscuous mode [ 164.463397][T10413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1318'. [ 164.802346][T10380] lec:lec_atm_close: lec0: Shut down! [ 165.229090][T10437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.232922][T10439] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 165.486318][T10456] ipt_REJECT: TCP_RESET invalid for non-tcp [ 165.936150][T10458] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1331'. [ 166.016201][T10465] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 166.041455][T10458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.080486][T10458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.100716][T10458] bond0 (unregistering): Released all slaves [ 166.350583][T10477] tipc: Enabling of bearer rejected, already enabled [ 167.168563][T10536] netlink: 'syz.0.1360': attribute type 11 has an invalid length. [ 167.211895][T10535] tipc: Enabled bearer , priority 0 [ 167.243862][T10535] syzkaller0: entered promiscuous mode [ 167.250112][T10535] syzkaller0: entered allmulticast mode [ 167.305040][T10542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.344662][T10547] __nla_validate_parse: 2 callbacks suppressed [ 167.344681][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 167.366034][T10532] tipc: Resetting bearer [ 167.373673][T10547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1366'. [ 167.406979][T10532] tipc: Disabling bearer [ 167.429332][T10553] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1364'. [ 167.625541][T10562] netlink: 'syz.4.1369': attribute type 7 has an invalid length. [ 167.644731][T10562] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1369'. [ 167.674332][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 167.732975][T10569] Bluetooth: hci0: unsupported parameter 1024 [ 167.741739][T10569] Bluetooth: hci0: invalid len left 28, exp >= 128 [ 167.752454][T10568] delete_channel: no stack [ 167.844013][T10571] sctp: [Deprecated]: syz.1.1373 (pid 10571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.844013][T10571] Use struct sctp_sack_info instead [ 167.909135][T10571] bond6: option resend_igmp: invalid value (32767) [ 167.915686][T10571] bond6: option resend_igmp: allowed values 0 - 255 [ 167.925481][T10571] bond6 (unregistering): Released all slaves [ 168.095784][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 168.149613][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 168.196966][T10598] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 168.362489][T10608] openvswitch: netlink: Message has 1847 unknown bytes. [ 168.370617][T10608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.570631][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 169.504256][T10598] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 169.526931][T10620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.551761][T10620] bond0: (slave rose0): Enslaving as an active interface with an up link [ 169.655136][T10624] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.727927][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 169.876490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 169.884647][ C1] lec:lec_tx_timeout: lec0 [ 169.896842][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 170.145981][T10661] tipc: Enabling of bearer rejected, already enabled [ 170.243139][T10660] syzkaller0 speed is unknown, defaulting to 1000 [ 170.287485][T10668] tipc: Enabled bearer , priority 0 [ 170.312637][T10668] syzkaller0: entered promiscuous mode [ 170.327011][T10668] syzkaller0: entered allmulticast mode [ 170.345215][T10660] hsr0 speed is unknown, defaulting to 1000 [ 170.390309][T10668] tipc: Resetting bearer [ 170.452528][T10667] tipc: Resetting bearer [ 170.500628][T10667] tipc: Disabling bearer [ 170.551090][T10662] siw: device registration error -23 [ 170.695999][T10683] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1406'. [ 171.010381][T10703] Bluetooth: MGMT ver 1.23 [ 171.710214][T10760] netlink: 'syz.2.1430': attribute type 3 has an invalid length. [ 171.816286][T10764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.930969][T10775] netlink: 'syz.0.1433': attribute type 10 has an invalid length. [ 171.950747][T10775] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 171.987034][T10775] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 172.000175][T10775] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 172.421891][T10816] __nla_validate_parse: 4 callbacks suppressed [ 172.421910][T10816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1444'. [ 172.440501][T10816] Cannot find add_set index 0 as target [ 172.462571][T10819] net veth1_virt_wifi .: renamed from virt_wifi0 [ 172.601173][T10824] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 172.642971][T10824] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.661502][T10824] bond6: (slave gretap2): making interface the new active one [ 172.671890][T10824] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 172.772128][T10841] tipc: Enabled bearer , priority 0 [ 172.780224][T10841] syzkaller0: entered promiscuous mode [ 172.786151][T10841] syzkaller0: entered allmulticast mode [ 172.800910][T10847] tap0: tun_chr_ioctl cmd 2148553947 [ 172.836132][T10839] tipc: Resetting bearer [ 172.888198][T10839] tipc: Disabling bearer [ 173.039385][T10862] vlan1: entered allmulticast mode [ 173.058504][T10862] veth0_vlan: entered allmulticast mode [ 173.382194][T10876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1464'. [ 173.392223][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 173.582326][T10884] veth0: entered promiscuous mode [ 173.607317][T10884] veth0: left promiscuous mode [ 173.664394][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 173.693474][T10889] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 173.760607][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 173.843025][T10898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.924287][T10905] tipc: Enabled bearer , priority 13 [ 174.261023][T10922] can: request_module (can-proto-3) failed. [ 174.460278][T10941] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1484'. [ 174.502785][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 174.596026][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 174.624532][T10957] delete_channel: no stack [ 174.793657][T10963] tap0: tun_chr_ioctl cmd 1074025672 [ 174.804248][T10963] tap0: ignored: set checksum disabled [ 174.906948][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 174.915011][ C1] lec:lec_tx_timeout: lec0 [ 174.919592][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 174.950175][T10969] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 175.036692][ T5910] tipc: Node number set to 3242651082 [ 175.080252][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 175.370339][T11003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1500'. [ 175.596156][T11026] wlan0: mtu less than device minimum [ 175.780082][T11039] xt_hashlimit: size too large, truncated to 1048576 [ 175.804266][T11039] warn_alloc: 1 callbacks suppressed [ 175.804284][T11039] syz.3.1508: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.859849][T11039] CPU: 0 UID: 0 PID: 11039 Comm: syz.3.1508 Not tainted syzkaller #0 PREEMPT(full) [ 175.859877][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.859889][T11039] Call Trace: [ 175.859904][T11039] [ 175.859912][T11039] dump_stack_lvl+0x189/0x250 [ 175.859943][T11039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.859963][T11039] ? __pfx__printk+0x10/0x10 [ 175.859984][T11039] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.860011][T11039] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.860039][T11039] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 175.860068][T11039] warn_alloc+0x214/0x310 [ 175.860103][T11039] ? __pfx_warn_alloc+0x10/0x10 [ 175.860141][T11039] ? __get_vm_area_node+0x28f/0x300 [ 175.860168][T11039] ? htable_create+0x101/0x7a0 [ 175.860204][T11039] __vmalloc_node_range_noprof+0x690/0x12d0 [ 175.860258][T11039] ? alloc_pages_mpol+0x3cd/0x4a0 [ 175.860291][T11039] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.860323][T11039] ? rcu_is_watching+0x15/0xb0 [ 175.860345][T11039] ? htable_create+0x101/0x7a0 [ 175.860372][T11039] __kvmalloc_node_noprof+0x674/0x910 [ 175.860401][T11039] ? htable_create+0x101/0x7a0 [ 175.860424][T11039] ? hashlimit_pernet+0x23/0x240 [ 175.860450][T11039] ? hashlimit_pernet+0x23/0x240 [ 175.860474][T11039] ? hashlimit_pernet+0x23/0x240 [ 175.860507][T11039] htable_create+0x101/0x7a0 [ 175.860542][T11039] hashlimit_mt_check_common+0x719/0xa10 [ 175.860579][T11039] xt_check_match+0x3d1/0xab0 [ 175.860611][T11039] ? __pfx_xt_check_match+0x10/0x10 [ 175.860639][T11039] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 175.860678][T11039] ? xt_find_match+0x1f7/0x250 [ 175.860710][T11039] translate_table+0x1553/0x2040 [ 175.860762][T11039] ? __pfx_translate_table+0x10/0x10 [ 175.860791][T11039] ? __might_fault+0xb0/0x130 [ 175.860842][T11039] ? _copy_from_user+0x94/0xb0 [ 175.860867][T11039] do_ip6t_set_ctl+0x970/0xce0 [ 175.860903][T11039] ? rcu_is_watching+0x15/0xb0 [ 175.860925][T11039] ? trace_contention_end+0x39/0x120 [ 175.860949][T11039] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 175.861001][T11039] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.861032][T11039] ? __pfx_css_rstat_updated+0x10/0x10 [ 175.861060][T11039] ? __lock_acquire+0xab9/0xd20 [ 175.861083][T11039] nf_setsockopt+0x26c/0x290 [ 175.861116][T11039] rawv6_setsockopt+0x23b/0x5b0 [ 175.861148][T11039] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 175.861177][T11039] ? aa_sock_opt_perm+0xff/0x1b0 [ 175.861206][T11039] ? sock_common_setsockopt+0x36/0xc0 [ 175.861235][T11039] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 175.861267][T11039] do_sock_setsockopt+0x179/0x1b0 [ 175.861295][T11039] __x64_sys_setsockopt+0x13f/0x1b0 [ 175.861324][T11039] do_syscall_64+0xfa/0xfa0 [ 175.861346][T11039] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.861369][T11039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.861388][T11039] ? clear_bhb_loop+0x60/0xb0 [ 175.861411][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.861430][T11039] RIP: 0033:0x7f50a4b8eec9 [ 175.861447][T11039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.861463][T11039] RSP: 002b:00007f50a5abe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.861483][T11039] RAX: ffffffffffffffda RBX: 00007f50a4de6180 RCX: 00007f50a4b8eec9 [ 175.861497][T11039] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 175.861509][T11039] RBP: 00007f50a4c11f91 R08: 0000000000000588 R09: 0000000000000000 [ 175.861521][T11039] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 175.861533][T11039] R13: 00007f50a4de6218 R14: 00007f50a4de6180 R15: 00007ffc7d255648 [ 175.861568][T11039] [ 175.863821][T11039] Mem-Info: [ 175.980976][T11039] active_anon:3886 inactive_anon:0 isolated_anon:0 [ 175.980976][T11039] active_file:2952 inactive_file:39911 isolated_file:0 [ 175.980976][T11039] unevictable:768 dirty:48 writeback:0 [ 175.980976][T11039] slab_reclaimable:11549 slab_unreclaimable:99002 [ 175.980976][T11039] mapped:28891 shmem:1362 pagetables:928 [ 175.980976][T11039] sec_pagetables:0 bounce:0 [ 175.980976][T11039] kernel_misc_reclaimable:0 [ 175.980976][T11039] free:1331221 free_pcp:15018 free_cma:0 [ 176.286494][T11039] Node 0 active_anon:15644kB inactive_anon:0kB active_file:11808kB inactive_file:159440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115564kB dirty:192kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12620kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.318523][T11039] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.364358][T11039] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.414698][T11056] netlink: 'syz.2.1514': attribute type 4 has an invalid length. [ 176.437883][T11039] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 176.443687][T11039] Node 0 DMA32 free:1415140kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15544kB inactive_anon:0kB active_file:11808kB inactive_file:159440kB unevictable:1536kB writepending:192kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:45868kB local_pcp:20828kB free_cma:0kB [ 176.517357][T11039] lowmem_reserve[]: 0 0 1 1 1 [ 176.522384][T11039] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.585764][T11039] lowmem_reserve[]: 0 0 0 0 0 [ 176.593151][T11039] Node 1 Normal free:3893884kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15584kB local_pcp:7776kB free_cma:0kB [ 176.632808][T11039] lowmem_reserve[]: 0 0 0 0 0 [ 176.686070][T11039] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 176.726761][T11039] Node 0 DMA32: 1206*4kB (UME) 1304*8kB (UME) 959*16kB (UME) 591*32kB (UME) 418*64kB (UME) 124*128kB (UME) 62*256kB (UME) 19*512kB (UME) 7*1024kB (UME) 4*2048kB (UM) 313*4096kB (UM) = 1415144kB [ 176.755065][T11039] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 176.772638][T11083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.818480][T11085] netlink: 'syz.4.1522': attribute type 10 has an invalid length. [ 176.824173][T11039] Node 1 Normal: 195*4kB (UME) 54*8kB (UME) 44*16kB (UME) 104*32kB (UME) 34*64kB (UME) 9*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3893884kB [ 176.875083][T11083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.903104][T11039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.914106][T11039] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.936063][T11039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.946176][T11039] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.955918][T11085] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 176.963647][T11085] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 176.974460][T11085] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 176.996549][ C0] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 177.004115][ C0] bridge0: topology change detected, propagating [ 177.015129][T11039] 44224 total pagecache pages [ 177.019957][T11039] 0 pages in swap cache [ 177.025190][T11039] Free swap = 124996kB [ 177.025536][T11092] veth0_macvtap: left promiscuous mode [ 177.030723][T11039] Total swap = 124996kB [ 177.039243][T11039] 2097051 pages RAM [ 177.044735][T11039] 0 pages HighMem/MovableOnly [ 177.049493][T11039] 424543 pages reserved [ 177.053644][T11039] 0 pages cma reserved [ 177.433524][T11119] __nla_validate_parse: 8 callbacks suppressed [ 177.433542][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 177.531515][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 177.719779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.732914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.745401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.757831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.770286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.782828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.795248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.807677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.820179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.832675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.918174][T11142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.239408][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1540'. [ 178.388670][T11164] tipc: Enabled bearer , priority 0 [ 178.418558][T11164] syzkaller0: entered promiscuous mode [ 178.434389][T11164] syzkaller0: entered allmulticast mode [ 178.746023][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 178.778020][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 179.366060][T11177] tipc: Resetting bearer [ 179.456233][T11180] xfrm1: entered allmulticast mode [ 179.521380][ T5890] tipc: Node number set to 821980149 [ 179.855208][T11210] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1552'. [ 179.883897][T11163] tipc: Resetting bearer [ 179.930756][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 179.938927][ C1] lec:lec_tx_timeout: lec0 [ 179.956950][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 180.123087][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 180.179673][T11163] tipc: Disabling bearer [ 180.413910][T11215] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 180.588637][T11227] macvtap1: entered promiscuous mode [ 180.630781][T11227] vlan0: entered promiscuous mode [ 180.652457][T11227] macvtap1: entered allmulticast mode [ 180.671575][T11233] netlink: 'syz.3.1558': attribute type 4 has an invalid length. [ 180.680549][T11227] vlan0: entered allmulticast mode [ 180.699554][T11227] veth0_vlan: entered allmulticast mode [ 180.700717][T11229] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1557'. [ 180.771321][T11230] macvtap2: entered promiscuous mode [ 180.784187][T11230] macvtap2: entered allmulticast mode [ 181.258704][T11249] x_tables: duplicate underflow at hook 3 [ 181.391311][T11229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.460592][T11229] bond0 (unregistering): Released all slaves [ 181.980593][T11264] netlink: 'syz.1.1565': attribute type 2 has an invalid length. [ 182.018753][T11264] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1565'. [ 182.414634][T11279] netlink: 'syz.4.1572': attribute type 11 has an invalid length. [ 182.643536][T11283] macvtap0: entered promiscuous mode [ 182.682482][T11283] macvtap0: entered allmulticast mode [ 182.726424][ C1] net_ratelimit: 12411 callbacks suppressed [ 182.726444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.744961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.757451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.769952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.782415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.794864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.807308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.819766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.832234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.844741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.343167][T11307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1579'. [ 183.555772][T11323] netlink: 'syz.1.1584': attribute type 11 has an invalid length. [ 183.587464][T11323] netlink: 'syz.1.1584': attribute type 11 has an invalid length. [ 183.618696][T11323] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1584'. [ 184.194676][T11341] netlink: 'syz.2.1589': attribute type 2 has an invalid length. [ 184.236204][T11341] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1589'. [ 184.970759][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 184.978856][ C1] lec:lec_tx_timeout: lec0 [ 184.995576][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 185.159198][T11372] Cannot find del_set index 4 as target [ 185.197977][T11370] xt_CT: No such helper "snmp" [ 185.244994][T11377] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 185.490496][T11377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.533458][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 185.582762][T11371] bond0: (slave geneve3): making interface the new active one [ 185.601755][T11371] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 185.629984][ T1166] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.661330][ T1166] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.703437][ T1166] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.979620][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1595'. [ 186.134047][T11398] tipc: Enabling of bearer rejected, already enabled [ 186.461949][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1609'. [ 186.517796][T11408] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1609'. [ 186.709287][T11418] syzkaller0: entered promiscuous mode [ 186.750730][T11418] syzkaller0: entered allmulticast mode [ 186.826744][T11426] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1612'. [ 186.857944][T11427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'. [ 187.736600][ C1] net_ratelimit: 12163 callbacks suppressed [ 187.736619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.754976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.755548][T11463] wg1: entered promiscuous mode [ 187.767470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.784650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.797084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.809546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.817450][T11463] wg1: entered allmulticast mode [ 187.821961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.838843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.851529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.864646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.276186][T11466] netem: unknown loss type 0 [ 188.282308][T11466] netem: change failed [ 188.362050][T11480] netlink: 'syz.1.1626': attribute type 12 has an invalid length. [ 188.405404][T11480] netlink: 'syz.1.1626': attribute type 29 has an invalid length. [ 188.443674][T11480] netlink: 'syz.1.1626': attribute type 2 has an invalid length. [ 188.478226][T11480] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1626'. [ 188.672759][T11490] tipc: Enabling of bearer rejected, already enabled [ 189.057442][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 189.087839][T11504] dvmrp0: left allmulticast mode [ 189.092907][T11504] dvmrp1: left allmulticast mode [ 189.103786][T11502] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1634'. [ 189.358519][T11515] netlink: 'syz.3.1638': attribute type 33 has an invalid length. [ 189.380270][T11515] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1638'. [ 189.531781][T11518] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 189.867571][T11531] netlink: 'syz.0.1641': attribute type 11 has an invalid length. [ 189.882670][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1644'. [ 189.900750][T11531] netlink: 'syz.0.1641': attribute type 4 has an invalid length. [ 189.914189][T11531] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1641'. [ 189.923891][T11525] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1643'. [ 190.017129][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 190.025167][ C1] lec:lec_tx_timeout: lec0 [ 190.041054][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 190.228920][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'. [ 190.677180][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 190.753018][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 191.057199][T11565] netlink: 'syz.3.1655': attribute type 1 has an invalid length. [ 191.079700][T11568] netlink: 'syz.0.1653': attribute type 83 has an invalid length. [ 191.441968][T11565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.521651][T11571] bond2: (slave geneve2): making interface the new active one [ 191.553911][T11571] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 191.684040][ T1096] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.863799][ T1096] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.023496][ T1096] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.064725][ T1096] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.746406][ C1] net_ratelimit: 12302 callbacks suppressed [ 192.746425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.764700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.777079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.789486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.801893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.814239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.826683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.839190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.851590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.863990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.983452][T11635] IPv6: NLM_F_REPLACE set, but no existing node found! [ 193.253532][T11645] tc_dump_action: action bad kind [ 193.407923][T11655] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 193.733829][T11663] netlink: 'syz.3.1683': attribute type 1 has an invalid length. [ 193.767875][T11665] block nbd0: Unsupported socket: should be TCP or UNIX. [ 193.805284][T11663] netlink: 'syz.3.1683': attribute type 2 has an invalid length. [ 193.857004][T11666] block nbd0: Unsupported socket: should be TCP or UNIX. [ 194.009584][T11669] __nla_validate_parse: 7 callbacks suppressed [ 194.009605][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 194.103315][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 194.187220][T11674] geneve2: entered promiscuous mode [ 194.192582][T11674] geneve2: entered allmulticast mode [ 194.320844][T11678] syzkaller0: entered promiscuous mode [ 194.328660][T11680] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1688'. [ 194.344344][T11678] syzkaller0: entered allmulticast mode [ 194.380338][T11678] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 194.420305][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.438704][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.613494][T11690] rdma_rxe: rxe_newlink: failed to add bond0 [ 194.652189][T11690] rdma_rxe: rxe_newlink: failed to add bond0 [ 194.803896][T11694] ªªªªªª: renamed from vlan0 (while UP) [ 195.056928][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 195.064990][ C1] lec:lec_tx_timeout: lec0 [ 195.082946][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 195.146263][T11700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 195.786166][T11717] ipip0: entered allmulticast mode [ 196.577644][T11749] netlink: 'syz.4.1708': attribute type 10 has an invalid length. [ 196.621725][T11749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1708'. [ 196.678095][T11754] Cannot find add_set index 2 as target [ 196.705321][T11749] dummy0: entered promiscuous mode [ 196.784237][T11749] bridge0: port 3(dummy0) entered blocking state [ 196.824699][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 197.001086][T11749] bridge0: port 3(dummy0) entered disabled state [ 197.086024][T11749] dummy0: entered allmulticast mode [ 197.193490][T11754] batadv_slave_1: entered promiscuous mode [ 197.276841][T11754] batadv_slave_1: left promiscuous mode [ 197.756421][ C1] net_ratelimit: 12035 callbacks suppressed [ 197.756441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.774807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.787241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.799702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.812175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.824650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.837075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.849520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.861909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.874348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.107291][T11780] netlink: 'syz.2.1717': attribute type 11 has an invalid length. [ 198.146930][T11780] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1717'. [ 198.317123][T11788] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 198.721824][T11802] pim6reg: entered allmulticast mode [ 198.827992][T11805] vlan2: entered promiscuous mode [ 198.865794][T11805] vlan2: entered allmulticast mode [ 198.889226][T11805] hsr_slave_1: entered allmulticast mode [ 199.265936][T11824] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1730'. [ 199.610616][T11832] vlan0: entered allmulticast mode [ 199.639044][T11832] hsr0: entered allmulticast mode [ 199.651490][T11832] hsr_slave_0: entered allmulticast mode [ 199.709761][T11832] hsr_slave_1: entered allmulticast mode [ 199.959539][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 200.010306][T11856] netlink: 'syz.3.1739': attribute type 33 has an invalid length. [ 200.033956][T11856] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1739'. [ 200.654731][T11859] tipc: Enabled bearer , priority 0 [ 200.717137][T11864] syzkaller0: entered promiscuous mode [ 200.722889][T11864] syzkaller0: entered allmulticast mode [ 201.109734][T11870] tipc: Resetting bearer [ 201.134700][T11894] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1746'. [ 201.167956][T11893] vlan1: left allmulticast mode [ 201.172852][T11893] veth0_vlan: left allmulticast mode [ 201.267086][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 201.324894][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6230 ms [ 201.332976][ C1] lec:lec_tx_timeout: lec0 [ 201.338040][T11899] xt_TCPMSS: Only works on TCP SYN packets [ 201.350272][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 201.463035][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 201.747017][T11870] tipc: Resetting bearer [ 201.985715][T11870] tipc: Disabling bearer [ 202.149027][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 202.288589][T11920] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 202.341324][T11920] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1751'. [ 202.423513][T11930] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1752'. [ 202.488000][T11930] netem: invalid attributes len -24 [ 202.540632][T11930] netem: change failed [ 202.766546][ C1] net_ratelimit: 12730 callbacks suppressed [ 202.766564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.784949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.797449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.809938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.822461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.835015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.847491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.859998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.872541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.885018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.227613][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1759'. [ 203.408629][T11962] netlink: 'syz.4.1762': attribute type 1 has an invalid length. [ 203.429194][T11962] netlink: 'syz.4.1762': attribute type 2 has an invalid length. [ 205.204069][T12017] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 205.390210][T12017] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 205.665197][T12026] __nla_validate_parse: 1 callbacks suppressed [ 205.665215][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 205.713247][T12026] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 205.758559][T12028] tipc: Enabled bearer , priority 0 [ 205.781372][T12028] syzkaller0: entered promiscuous mode [ 205.792950][T12028] syzkaller0: entered allmulticast mode [ 205.851535][T12028] tipc: Resetting bearer [ 205.870455][T12027] tipc: Resetting bearer [ 206.010863][T12027] tipc: Disabling bearer [ 206.022874][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'. [ 206.247048][T12035] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1786'. [ 206.309636][T12036] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1786'. [ 206.343671][T12045] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1789'. [ 206.416525][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1789'. [ 206.537070][T12049] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 206.787332][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1792'. [ 206.863944][T12054] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1792'. [ 207.073720][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1792'. [ 207.077490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 207.090717][ C1] lec:lec_tx_timeout: lec0 [ 207.105682][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 207.137729][T12071] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1792'. [ 207.755400][T12081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.770616][T12081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.776675][ C1] net_ratelimit: 12212 callbacks suppressed [ 207.776694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.781809][T12081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 207.787168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.821552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.833965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.846364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.858757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.871099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.883332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.895520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.907763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.923179][T12085] tipc: Enabled bearer , priority 0 [ 207.970436][T12084] veth5: entered allmulticast mode [ 207.976505][T12087] syzkaller0: entered promiscuous mode [ 207.982376][T12087] syzkaller0: entered allmulticast mode [ 208.018601][T12093] bond7: option resend_igmp: invalid value (32767) [ 208.025520][T12093] bond7: option resend_igmp: allowed values 0 - 255 [ 208.110996][T12093] bond7 (unregistering): Released all slaves [ 208.223119][T12102] tipc: Resetting bearer [ 208.314767][T12081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.330591][T12081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.344878][T12081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.386183][T12074] tipc: Resetting bearer [ 208.427776][T12074] tipc: Disabling bearer [ 208.695960][T12081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.732271][T12081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.746237][T12081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.849341][T12112] wg1: left promiscuous mode [ 208.895835][T12112] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 208.933136][T12112] team1: left promiscuous mode [ 208.948789][T12112] vlan2: left promiscuous mode [ 209.419578][T12133] xt_TCPMSS: Only works on TCP SYN packets [ 209.728398][ T9834] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.758520][ T9834] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.790241][ T9834] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.826606][ T9834] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.844963][ T9834] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.863851][ T9834] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.989765][ T9844] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.026787][ T9844] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.057802][ T9844] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.105348][ T9844] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.122228][ T9844] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.140090][ T9844] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.718785][T12172] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 210.812042][T12175] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 210.947121][T12181] __nla_validate_parse: 3 callbacks suppressed [ 210.947139][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1823'. [ 211.253075][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 211.354422][T12190] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1828'. [ 211.535917][T12198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1829'. [ 211.849188][T12198] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.857959][T12198] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.786407][ C1] net_ratelimit: 13469 callbacks suppressed [ 212.786426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.804722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.817102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.829520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.841950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.854343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.866748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.878956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.891191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.903565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.922641][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 212.930691][ C1] lec:lec_tx_timeout: lec0 [ 212.942068][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 213.005312][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'. [ 213.059783][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'. [ 213.221860][T12242] macvtap3: entered promiscuous mode [ 213.252122][T12242] macvtap3: entered allmulticast mode [ 213.337349][T12243] macvtap4: entered promiscuous mode [ 213.353267][T12243] macvtap4: entered allmulticast mode [ 213.660193][T12247] veth0_to_bond: entered allmulticast mode [ 213.711100][T12256] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1847'. [ 213.940639][T12264] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 217.796493][ C0] net_ratelimit: 19819 callbacks suppressed [ 217.796513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.796693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.802844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.814781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.826715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.838908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.850434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.862368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.874246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.886199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.968136][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 217.976166][ C1] lec:lec_tx_timeout: lec0 [ 217.993924][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 222.806655][ C0] net_ratelimit: 21193 callbacks suppressed [ 222.806678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.806932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.813019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.824921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.836415][ C0] sched: DL replenish lagged too much [ 222.837034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.848748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.860690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.866412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.877933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.889759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.010837][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 223.018903][ C1] lec:lec_tx_timeout: lec0 [ 223.036583][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.816694][ C1] net_ratelimit: 21371 callbacks suppressed [ 227.816714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.816780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.823004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.835001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.846828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.858742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.870967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.882546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.894423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.906405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.053963][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 228.062032][ C1] lec:lec_tx_timeout: lec0 [ 228.079517][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 233.880414][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 233.888484][ C1] lec:lec_tx_timeout: lec0 [ 233.906269][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 238.918429][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 238.926515][ C1] lec:lec_tx_timeout: lec0 [ 238.942923][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 243.963025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 243.971079][ C1] lec:lec_tx_timeout: lec0 [ 243.987593][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 248.999513][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 249.007574][ C1] lec:lec_tx_timeout: lec0 [ 249.023815][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 254.044378][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 254.052437][ C1] lec:lec_tx_timeout: lec0 [ 254.068605][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 259.881344][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 259.889434][ C1] lec:lec_tx_timeout: lec0 [ 259.906408][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.143073][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.160997][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.918442][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 264.926495][ C1] lec:lec_tx_timeout: lec0 [ 264.943800][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.958846][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 269.966993][ C1] lec:lec_tx_timeout: lec0 [ 269.983241][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 275.002410][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 275.010469][ C1] lec:lec_tx_timeout: lec0 [ 275.026883][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 280.047433][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 280.055474][ C1] lec:lec_tx_timeout: lec0 [ 280.071718][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.888090][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 285.896119][ C1] lec:lec_tx_timeout: lec0 [ 285.914343][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.932920][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 290.940988][ C1] lec:lec_tx_timeout: lec0 [ 290.958732][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 295.968498][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 295.976558][ C1] lec:lec_tx_timeout: lec0 [ 295.994005][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.006965][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 301.015009][ C1] lec:lec_tx_timeout: lec0 [ 317.821250][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.840078][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.752602][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 329.883179][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 329.891251][ C1] lec:lec_tx_timeout: lec0 [ 378.589030][ C0] warn_alloc: 1 callbacks suppressed [ 378.589051][ C0] kworker/u8:12: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 378.591269][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 378.594382][ C0] ,cpuset=/ [ 378.605689][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 378.615558][ C0] ,mems_allowed=0-1 [ 378.618668][ C1] node 0: slabs: 44838, objs: 717408, free: 0 [ 378.629069][ C0] [ 378.629165][ C0] CPU: 0 UID: 0 PID: 9836 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 378.629187][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.629200][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 378.629239][ C0] Call Trace: [ 378.629249][ C0] [ 378.629259][ C0] dump_stack_lvl+0x189/0x250 [ 378.629285][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.629305][ C0] ? __pfx__printk+0x10/0x10 [ 378.629324][ C0] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 378.629351][ C0] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 378.629378][ C0] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 378.629406][ C0] warn_alloc+0x214/0x310 [ 378.629439][ C0] ? __pfx_warn_alloc+0x10/0x10 [ 378.629479][ C0] ? wake_all_kswapds+0x167/0x280 [ 378.629514][ C0] __alloc_pages_slowpath+0xc4f/0xcf0 [ 378.629551][ C0] __alloc_frozen_pages_noprof+0x319/0x370 [ 378.629573][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 378.629601][ C0] ? policy_nodemask+0x28b/0x720 [ 378.629630][ C0] ? ___slab_alloc+0x151/0x18a0 [ 378.629652][ C0] alloc_pages_mpol+0x232/0x4a0 [ 378.629686][ C0] allocate_slab+0xe5/0x3a0 [ 378.629710][ C0] ___slab_alloc+0xe94/0x18a0 [ 378.629732][ C0] ? skb_ext_add+0x148/0x8f0 [ 378.629760][ C0] ? skb_ext_add+0x148/0x8f0 [ 378.629780][ C0] __slab_alloc+0x65/0x100 [ 378.629804][ C0] kmem_cache_alloc_noprof+0x3f9/0x6e0 [ 378.629827][ C0] ? __asan_memset+0x22/0x50 [ 378.629850][ C0] ? skb_ext_add+0x148/0x8f0 [ 378.629867][ C0] ? br_validate_ipv6+0x461/0x730 [ 378.629896][ C0] skb_ext_add+0x148/0x8f0 [ 378.629926][ C0] br_nf_pre_routing_ipv6+0x132/0x6b0 [ 378.629955][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 378.629983][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 378.630014][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 378.630036][ C0] br_handle_frame+0x97f/0x14c0 [ 378.630069][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 378.630090][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 378.630118][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 378.630140][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 378.630169][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 378.630194][ C0] __netif_receive_skb_core+0x10b6/0x4380 [ 378.630223][ C0] ? kmem_cache_free+0x19b/0x690 [ 378.630255][ C0] ? ip6_mc_input+0x8de/0xb70 [ 378.630288][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 378.630318][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 378.630344][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 378.630372][ C0] ? NF_HOOK+0x309/0x3a0 [ 378.630395][ C0] ? skb_orphan+0xaf/0xd0 [ 378.630434][ C0] ? process_backlog+0x2d5/0x14f0 [ 378.630454][ C0] ? process_backlog+0x2d5/0x14f0 [ 378.630474][ C0] __netif_receive_skb+0x72/0x380 [ 378.630511][ C0] ? process_backlog+0x2d5/0x14f0 [ 378.630531][ C0] process_backlog+0x60e/0x14f0 [ 378.630548][ C0] ? rcu_is_watching+0x15/0xb0 [ 378.630582][ C0] ? __pfx_process_backlog+0x10/0x10 [ 378.630598][ C0] ? do_raw_spin_lock+0x121/0x290 [ 378.630626][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 378.630654][ C0] __napi_poll+0xc4/0x360 [ 378.630679][ C0] ? skb_defer_free_flush+0x229/0x250 [ 378.630709][ C0] net_rx_action+0x5f7/0xdf0 [ 378.630742][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 378.630796][ C0] handle_softirqs+0x283/0x870 [ 378.630821][ C0] ? do_softirq+0xec/0x180 [ 378.630845][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 378.630871][ C0] ? kernel_fpu_end+0xc8/0x120 [ 378.630897][ C0] do_softirq+0xec/0x180 [ 378.630915][ C0] [ 378.630922][ C0] [ 378.630930][ C0] ? __pfx_do_softirq+0x10/0x10 [ 378.630950][ C0] ? kernel_fpu_end+0xd2/0x120 [ 378.630979][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 378.630999][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 378.631019][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 378.631039][ C0] ? get_random_u32+0x155/0x940 [ 378.631065][ C0] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 378.631093][ C0] kernel_fpu_end+0xd2/0x120 [ 378.631117][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 378.631139][ C0] ? get_random_u32+0x48e/0x940 [ 378.631161][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.631184][ C0] ? get_random_u32+0x155/0x940 [ 378.631212][ C0] blake2s_compress+0xe9/0x1b80 [ 378.631238][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 378.631257][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.631287][ C0] ? __up_read+0x280/0x680 [ 378.631313][ C0] ? __pfx___up_read+0x10/0x10 [ 378.631339][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 378.631359][ C0] ? __asan_memset+0x22/0x50 [ 378.631382][ C0] ? wg_noise_handshake_create_initiation+0x618/0x750 [ 378.631418][ C0] ? blake2s_update+0x134/0x450 [ 378.631441][ C0] blake2s_update+0x1cb/0x450 [ 378.631464][ C0] compute_mac1+0x145/0x1a0 [ 378.631486][ C0] ? __pfx_compute_mac1+0x10/0x10 [ 378.631523][ C0] ? do_raw_spin_lock+0x121/0x290 [ 378.631554][ C0] wg_cookie_add_mac_to_packet+0x57/0x1a0 [ 378.631579][ C0] wg_packet_handshake_send_worker+0x17c/0x320 [ 378.631608][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 378.631655][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.631675][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 378.631695][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 378.631717][ C0] process_scheduled_works+0xae1/0x17b0 [ 378.631766][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.631804][ C0] worker_thread+0x8a0/0xda0 [ 378.631849][ C0] kthread+0x711/0x8a0 [ 378.631878][ C0] ? __pfx_worker_thread+0x10/0x10 [ 378.631897][ C0] ? __pfx_kthread+0x10/0x10 [ 378.631923][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.631943][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.631962][ C0] ? __pfx_kthread+0x10/0x10 [ 378.631987][ C0] ret_from_fork+0x4bc/0x870 [ 378.632009][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 378.632036][ C0] ? __switch_to_asm+0x39/0x70 [ 378.632056][ C0] ? __switch_to_asm+0x33/0x70 [ 378.632076][ C0] ? __pfx_kthread+0x10/0x10 [ 378.632101][ C0] ret_from_fork_asm+0x1a/0x30 [ 378.632140][ C0] [ 378.632152][ C0] Mem-Info: [ 378.632866][ C1] node 1: slabs: 103910, objs: 1662560, free: 0 [ 378.639116][ C0] active_anon:3824 inactive_anon:12 isolated_anon:0 [ 378.639116][ C0] active_file:2539 inactive_file:40285 isolated_file:0 [ 378.639116][ C0] unevictable:768 dirty:0 writeback:2 [ 378.639116][ C0] slab_reclaimable:10700 slab_unreclaimable:1427233 [ 378.639116][ C0] mapped:28858 shmem:1362 pagetables:835 [ 378.639116][ C0] sec_pagetables:0 bounce:0 [ 378.639116][ C0] kernel_misc_reclaimable:0 [ 378.639116][ C0] free:9660 free_pcp:8798 free_cma:0 [ 378.641503][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 378.650945][ C0] Node 0 active_anon:15272kB inactive_anon:48kB active_file:10156kB inactive_file:160908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115432kB dirty:0kB writeback:8kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12340kB pagetables:3136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.661007][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 378.667933][ C0] Node 1 active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.671200][ C1] node 0: slabs: 44838, objs: 717408, free: 0 [ 378.674026][ C0] Node 0 [ 378.678694][ C1] node 1: slabs: 103910, objs: 1662560, free: 0 [ 378.683871][ C0] DMA free:10008kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:124kB free_cma:0kB [ 378.688718][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 378.694836][ C0] lowmem_reserve[]: 0 [ 378.701254][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 378.707738][ C0] 2501 2503 [ 378.712046][ C1] node 0: slabs: 44838, objs: 717408, free: 0 [ 378.716888][ C0] 2503 2503 [ 378.721887][ C1] node 1: slabs: 103910, objs: 1662560, free: 0 [ 378.727247][ C0] [ 378.727256][ C0] Node 0 DMA32 free:12656kB boost:61440kB min:95704kB low:104268kB high:112832kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15272kB inactive_anon:48kB active_file:10156kB inactive_file:160908kB unevictable:1536kB writepending:8kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:8896kB local_pcp:4124kB free_cma:0kB [ 378.733218][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 378.739362][ C0] lowmem_reserve[]: 0 [ 378.744280][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 378.749123][ C0] 0 1 [ 378.753952][ C1] node 0: slabs: 44838, objs: 717408, free: 0 [ 378.758449][ C0] 1 1 [ 378.763101][ C1] node 1: slabs: 103910, objs: 1662560, free: 0 [ 378.767679][ C0] [ 378.767688][ C0] Node 0 [ 378.772425][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 378.776662][ C0] Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.782099][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 378.786682][ C0] lowmem_reserve[]: 0 0 [ 378.791254][ C1] node 0: slabs: 44838, objs: 717408, free: 0 [ 378.796275][ C0] 0 0 [ 378.800670][ C1] node 1: slabs: 103910, objs: 1662560, free: 0 [ 378.806012][ C0] 0 [ 378.812074][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 378.817085][ C0] Node 1 Normal free:15976kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26048kB local_pcp:9416kB free_cma:0kB [ 378.822526][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 378.827369][ C0] lowmem_reserve[]: 0 [ 378.832630][ C1] node 0: slabs: 44838, objs: 717408, free: 0 [ 378.838770][ C0] 0 0 0 [ 378.844641][ C1] node 1: slabs: 103910, objs: 1662560, free: 0 [ 378.850441][ C0] 0 [ 378.855884][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 378.861415][ C0] Node 0 DMA: [ 378.866351][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 378.871003][ C0] 0*4kB [ 378.876000][ C1] node 0: slabs: 44838, objs: 717408, free: 0 [ 378.882062][ C0] 1*8kB (U) [ 378.886912][ C1] node 1: slabs: 103910, objs: 1662560, free: 0 [ 378.891122][ C0] 0*16kB [ 378.895602][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 378.900445][ C0] 0*32kB 0*64kB [ 378.905458][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 378.910485][ C0] 0*128kB [ 378.915488][ C1] node 0: slabs: 44838, objs: 717408, free: 0 [ 378.920327][ C0] 1*256kB (U) [ 378.925067][ C1] node 1: slabs: 103910, objs: 1662560, free: 0 [ 378.930339][ C0] 1*512kB (U) [ 378.935850][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 378.940714][ C0] 1*1024kB (U) 2*2048kB (UM) 1*4096kB [ 378.945216][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 378.950588][ C0] (M) = 9992kB [ 378.955158][ C1] node 0: slabs: 6647, objs: 94522, free: 0 [ 378.960259][ C0] Node 0 DMA32: [ 378.965002][ C1] node 1: slabs: 13729, objs: 219664, free: 8 [ 378.969413][ C0] 11*4kB (M) [ 378.974942][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 378.979433][ C0] 267*8kB (ME) [ 378.983659][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 378.986590][ C0] 123*16kB (ME) [ 378.989510][ C1] node 0: slabs: 6647, objs: 94522, free: 0 [ 378.994331][ C0] 66*32kB [ 378.999112][ C1] node 1: slabs: 13729, objs: 219664, free: 8 [ 379.004355][ C0] (ME) 44*64kB [ 379.361921][T12270] ODEBUG: Out of memory. ODEBUG disabled [ 379.363043][ C0] (ME) 11*128kB (ME) 8*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12532kB [ 379.882513][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 379.894056][ C0] Node 1 Normal: 1*4kB (E) 5*8kB (UME) 6*16kB (UME) 7*32kB (UME) 3*64kB (ME) 5*128kB (ME) 3*256kB (UE) 0*512kB 2*1024kB (UM) 2*2048kB (ME) 3*4096kB (UM) = 20396kB [ 379.910579][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.920158][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.929465][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.939033][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.948338][ C0] 43833 total pagecache pages [ 379.953016][ C0] 0 pages in swap cache [ 379.957206][ C0] Free swap = 124992kB [ 379.961364][ C0] Total swap = 124996kB [ 379.965527][ C0] 2097051 pages RAM [ 379.969355][ C0] 0 pages HighMem/MovableOnly [ 379.974030][ C0] 424543 pages reserved [ 379.978195][ C0] 0 pages cma reserved [ 380.007187][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.013513][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.048448][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 385.056315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.064355][ C1] lec:lec_tx_timeout: lec0 [ 388.266572][ T31] INFO: task kworker/u8:10:9834 blocked for more than 154 seconds. [ 388.274511][ T31] Not tainted syzkaller #0 [ 388.356463][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.365176][ T31] task:kworker/u8:10 state:D stack:21096 pid:9834 tgid:9834 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 388.466666][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 388.472714][ T31] Call Trace: [ 388.475997][ T31] [ 388.519628][ T31] __schedule+0x1798/0x4cc0 [ 388.524198][ T31] ? __lock_acquire+0xab9/0xd20 [ 388.566843][ T31] ? __lock_acquire+0xab9/0xd20 [ 388.571740][ T31] ? __pfx___schedule+0x10/0x10 [ 388.606387][ T31] ? schedule+0x91/0x360 [ 388.610697][ T31] schedule+0x165/0x360 [ 388.614868][ T31] schedule_preempt_disabled+0x13/0x30 [ 388.666649][ T31] __mutex_lock+0x7e6/0x1350 [ 388.671303][ T31] ? __mutex_lock+0x5bb/0x1350 [ 388.676090][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 388.736730][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 388.741802][ T31] ? do_raw_spin_lock+0x121/0x290 [ 388.786487][ T31] ? look_up_lock_class+0x74/0x170 [ 388.791665][ T31] addrconf_dad_work+0x112/0x14b0 [ 388.826694][ T31] ? __lock_acquire+0xab9/0xd20 [ 388.831606][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 388.866387][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 388.872175][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.917377][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 388.923150][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 388.970375][ T31] process_scheduled_works+0xae1/0x17b0 [ 388.976014][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.016842][ T31] worker_thread+0x8a0/0xda0 [ 389.021511][ T31] kthread+0x711/0x8a0 [ 389.025598][ T31] ? __pfx_worker_thread+0x10/0x10 [ 389.066651][ T31] ? __pfx_kthread+0x10/0x10 [ 389.071296][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.116417][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.121667][ T31] ? __pfx_kthread+0x10/0x10 [ 389.161886][ T31] ret_from_fork+0x4bc/0x870 [ 389.176752][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.181914][ T31] ? __switch_to_asm+0x39/0x70 [ 389.226459][ T31] ? __switch_to_asm+0x33/0x70 [ 389.231274][ T31] ? __pfx_kthread+0x10/0x10 [ 389.235881][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.336729][ T31] [ 389.361442][ T31] [ 389.361442][ T31] Showing all locks held in the system: [ 389.416436][ T31] 3 locks held by kworker/0:0/9: [ 389.421410][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.546721][ T31] #1: ffffc900000e7ba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.626466][ T31] #2: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 389.706516][ T31] 3 locks held by kworker/0:1/10: [ 389.711576][ T31] #0: ffff88813ff1a948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.829726][ T31] #1: ffffc900000f7ba0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.916783][ T31] #2: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf40 [ 389.986374][ T31] 1 lock held by khungtaskd/31: [ 389.991254][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.096395][ T31] 2 locks held by getty/5590: [ 390.101192][ T31] #0: ffff8880336da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.206675][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 390.286444][ T31] 1 lock held by syz-executor/5826: [ 390.291678][ T31] #0: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 390.386734][ T31] 4 locks held by syz-executor/5833: [ 390.392058][ T31] 2 locks held by syz-executor/5834: [ 390.466474][ T31] 3 locks held by kworker/0:5/5897: [ 390.471718][ T31] 4 locks held by kworker/1:5/5910: [ 390.536623][ T31] 3 locks held by syz.0.1851/12264: [ 390.541862][ T31] 2 locks held by syz-executor/12270: [ 390.597021][ T31] 2 locks held by syz-executor/12272: [ 390.626677][ T31] [ 390.629038][ T31] ============================================= [ 390.629038][ T31] [ 390.696423][ T31] NMI backtrace for cpu 1 [ 390.696445][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 390.696466][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.696478][ T31] Call Trace: [ 390.696486][ T31] [ 390.696494][ T31] dump_stack_lvl+0x189/0x250 [ 390.696522][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.696543][ T31] ? __pfx__printk+0x10/0x10 [ 390.696576][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 390.696609][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 390.696641][ T31] ? __pfx__printk+0x10/0x10 [ 390.696665][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 390.696697][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 390.696730][ T31] watchdog+0xf60/0xfa0 [ 390.696755][ T31] ? watchdog+0x1e2/0xfa0 [ 390.696779][ T31] kthread+0x711/0x8a0 [ 390.696809][ T31] ? __pfx_watchdog+0x10/0x10 [ 390.696827][ T31] ? __pfx_kthread+0x10/0x10 [ 390.696854][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.696875][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.696895][ T31] ? __pfx_kthread+0x10/0x10 [ 390.696921][ T31] ret_from_fork+0x4bc/0x870 [ 390.696943][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 390.696971][ T31] ? __switch_to_asm+0x39/0x70 [ 390.696992][ T31] ? __switch_to_asm+0x33/0x70 [ 390.697011][ T31] ? __pfx_kthread+0x10/0x10 [ 390.697037][ T31] ret_from_fork_asm+0x1a/0x30 [ 390.697076][ T31] [ 390.697084][ T31] Sending NMI from CPU 1 to CPUs 0: [ 390.844494][ C0] NMI backtrace for cpu 0 [ 390.844513][ C0] CPU: 0 UID: 0 PID: 5897 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 390.844533][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.844545][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 390.844571][ C0] RIP: 0010:rcu_is_watching+0x70/0xb0 [ 390.844592][ C0] Code: c3 d8 3f 92 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d e9 31 eb 10 74 11 83 e0 04 c1 e8 02 5b <41> 5e 41 5f e9 47 46 a8 09 cc e8 01 9a 8d ff eb e8 48 c7 c7 00 30 [ 390.844607][ C0] RSP: 0018:ffffc90000006318 EFLAGS: 00000202 [ 390.844620][ C0] RAX: 0000000000000001 RBX: ffffffff902b3101 RCX: fb4990ab1e11b600 [ 390.844633][ C0] RDX: ffffc90000006401 RSI: ffffffff8bc074c0 RDI: ffffffff8bc07480 [ 390.844645][ C0] RBP: dffffc0000000000 R08: ffffc90005207f38 R09: 0000000000000000 [ 390.844657][ C0] R10: ffffc900000064b8 R11: fffff52000000c99 R12: ffffc90005207f48 [ 390.844670][ C0] R13: ffffffff81731d25 R14: ffffffff8da0add0 R15: dffffc0000000000 [ 390.844683][ C0] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 390.844697][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.844708][ C0] CR2: 00007fd7dfb1d040 CR3: 000000007129e000 CR4: 00000000003526f0 [ 390.844723][ C0] Call Trace: [ 390.844730][ C0] [ 390.844737][ C0] ? unwind_next_frame+0xa5/0x2390 [ 390.844757][ C0] lock_release+0x4b/0x3e0 [ 390.844772][ C0] ? deref_stack_reg+0x19f/0x230 [ 390.844793][ C0] ? unwind_next_frame+0xa5/0x2390 [ 390.844811][ C0] unwind_next_frame+0x19a9/0x2390 [ 390.844832][ C0] ? unwind_next_frame+0xa5/0x2390 [ 390.844851][ C0] ? ret_from_fork+0x4bc/0x870 [ 390.844868][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 390.844891][ C0] arch_stack_walk+0x11c/0x150 [ 390.844913][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 390.844934][ C0] stack_trace_save+0x9c/0xe0 [ 390.844955][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 390.844976][ C0] ? __lock_acquire+0xab9/0xd20 [ 390.844995][ C0] kasan_save_track+0x3e/0x80 [ 390.845017][ C0] ? kasan_save_track+0x3e/0x80 [ 390.845037][ C0] ? __kasan_save_free_info+0x46/0x50 [ 390.845055][ C0] ? __kasan_slab_free+0x5c/0x80 [ 390.845077][ C0] ? kmem_cache_free+0x19b/0x690 [ 390.845099][ C0] ? br_nf_dev_queue_xmit+0x4ec/0x2580 [ 390.845121][ C0] ? NF_HOOK+0x61b/0x6b0 [ 390.845138][ C0] ? br_nf_post_routing+0xb66/0xfe0 [ 390.845157][ C0] ? nf_hook_slow+0xc5/0x220 [ 390.845173][ C0] ? NF_HOOK+0x215/0x3c0 [ 390.845189][ C0] ? br_forward_finish+0xd3/0x130 [ 390.845204][ C0] ? br_nf_forward_finish+0xa40/0xe60 [ 390.845223][ C0] ? NF_HOOK+0x61b/0x6b0 [ 390.845240][ C0] ? br_nf_forward_ip+0x647/0x7e0 [ 390.845259][ C0] ? nf_hook_slow+0xc5/0x220 [ 390.845274][ C0] ? NF_HOOK+0x215/0x3c0 [ 390.845294][ C0] ? __br_forward+0x41e/0x600 [ 390.845310][ C0] ? maybe_deliver+0xb5/0x160 [ 390.845326][ C0] ? br_flood+0x31a/0x6a0 [ 390.845341][ C0] ? br_handle_frame_finish+0x15a3/0x1c50 [ 390.845361][ C0] ? br_nf_hook_thresh+0x3c6/0x4a0 [ 390.845379][ C0] ? br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 390.845401][ C0] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 390.845420][ C0] ? br_handle_frame+0x97f/0x14c0 [ 390.845438][ C0] ? __netif_receive_skb_core+0x10b6/0x4380 [ 390.845462][ C0] ? __netif_receive_skb+0x72/0x380 [ 390.845485][ C0] ? process_backlog+0x60e/0x14f0 [ 390.845499][ C0] ? __napi_poll+0xc4/0x360 [ 390.845521][ C0] ? net_rx_action+0x5f7/0xdf0 [ 390.845535][ C0] ? handle_softirqs+0x283/0x870 [ 390.845551][ C0] ? do_softirq+0xec/0x180 [ 390.845566][ C0] ? __local_bh_enable_ip+0x17d/0x1c0 [ 390.845582][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 390.845596][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 390.845613][ C0] ? worker_thread+0x8a0/0xda0 [ 390.845629][ C0] ? kthread+0x711/0x8a0 [ 390.845648][ C0] ? ret_from_fork+0x4bc/0x870 [ 390.845673][ C0] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 390.845698][ C0] ? br_nf_dev_queue_xmit+0x4ec/0x2580 [ 390.845717][ C0] __kasan_save_free_info+0x46/0x50 [ 390.845736][ C0] __kasan_slab_free+0x5c/0x80 [ 390.845759][ C0] kmem_cache_free+0x19b/0x690 [ 390.845781][ C0] ? __skb_ext_put+0x218/0x2e0 [ 390.845802][ C0] br_nf_dev_queue_xmit+0x4ec/0x2580 [ 390.845825][ C0] ? NF_HOOK+0x9e/0x6b0 [ 390.845844][ C0] ? NF_HOOK+0x9e/0x6b0 [ 390.845861][ C0] NF_HOOK+0x61b/0x6b0 [ 390.845883][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 390.845902][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 390.845924][ C0] ? net_generic+0x1e/0x240 [ 390.845941][ C0] ? net_generic+0x1e/0x240 [ 390.845958][ C0] ? net_generic+0x1e/0x240 [ 390.845975][ C0] ? skb_pull+0xc1/0x1d0 [ 390.845996][ C0] br_nf_post_routing+0xb66/0xfe0 [ 390.846016][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 390.846040][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 390.846061][ C0] nf_hook_slow+0xc5/0x220 [ 390.846079][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 390.846097][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 390.846114][ C0] NF_HOOK+0x215/0x3c0 [ 390.846132][ C0] ? NF_HOOK+0x9e/0x3c0 [ 390.846148][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 390.846163][ C0] ? net_generic+0x1e/0x240 [ 390.846182][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 390.846203][ C0] ? net_generic+0x1e/0x240 [ 390.846222][ C0] br_forward_finish+0xd3/0x130 [ 390.846238][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 390.846260][ C0] br_nf_forward_finish+0xa40/0xe60 [ 390.846288][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 390.846310][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 390.846329][ C0] ? NF_HOOK+0x9e/0x6b0 [ 390.846348][ C0] ? NF_HOOK+0x9e/0x6b0 [ 390.846367][ C0] NF_HOOK+0x61b/0x6b0 [ 390.846390][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 390.846410][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 390.846439][ C0] br_nf_forward_ip+0x647/0x7e0 [ 390.846457][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 390.846480][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 390.846502][ C0] nf_hook_slow+0xc5/0x220 [ 390.846521][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 390.846536][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 390.846552][ C0] NF_HOOK+0x215/0x3c0 [ 390.846571][ C0] ? NF_HOOK+0x9e/0x3c0 [ 390.846587][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 390.846604][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 390.846627][ C0] __br_forward+0x41e/0x600 [ 390.846643][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 390.846663][ C0] ? __pfx___br_forward+0x10/0x10 [ 390.846681][ C0] ? skb_clone+0x246/0x3a0 [ 390.846702][ C0] maybe_deliver+0xb5/0x160 [ 390.846720][ C0] br_flood+0x31a/0x6a0 [ 390.846743][ C0] br_handle_frame_finish+0x15a3/0x1c50 [ 390.846769][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 390.846795][ C0] ? ip6t_do_table+0x1db/0x1560 [ 390.846819][ C0] ? nf_hook_slow+0x176/0x220 [ 390.846837][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 390.846857][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 390.846880][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 390.846901][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 390.846920][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 390.846948][ C0] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 390.846970][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 390.847012][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 390.847034][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 390.847057][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 390.847080][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 390.847102][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 390.847125][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 390.847143][ C0] br_handle_frame+0x97f/0x14c0 [ 390.847168][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 390.847186][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 390.847210][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 390.847228][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 390.847251][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 390.847271][ C0] __netif_receive_skb_core+0x10b6/0x4380 [ 390.847301][ C0] ? kmem_cache_free+0x19b/0x690 [ 390.847326][ C0] ? ip6_mc_input+0x8de/0xb70 [ 390.847356][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 390.847390][ C0] ? process_backlog+0x2d5/0x14f0 [ 390.847406][ C0] ? process_backlog+0x2d5/0x14f0 [ 390.847423][ C0] __netif_receive_skb+0x72/0x380 [ 390.847447][ C0] ? process_backlog+0x2d5/0x14f0 [ 390.847463][ C0] process_backlog+0x60e/0x14f0 [ 390.847486][ C0] ? __pfx_process_backlog+0x10/0x10 [ 390.847500][ C0] ? do_raw_spin_lock+0x121/0x290 [ 390.847523][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 390.847547][ C0] __napi_poll+0xc4/0x360 [ 390.847568][ C0] ? skb_defer_free_flush+0x229/0x250 [ 390.847593][ C0] net_rx_action+0x5f7/0xdf0 [ 390.847616][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 390.847649][ C0] handle_softirqs+0x283/0x870 [ 390.847668][ C0] ? do_softirq+0xec/0x180 [ 390.847686][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 390.847706][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 390.847722][ C0] do_softirq+0xec/0x180 [ 390.847738][ C0] [ 390.847743][ C0] [ 390.847749][ C0] ? __pfx_do_softirq+0x10/0x10 [ 390.847770][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 390.847786][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 390.847803][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 390.847821][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 390.847837][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 390.847853][ C0] neigh_periodic_work+0xc28/0xe50 [ 390.847872][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 390.847890][ C0] process_scheduled_works+0xae1/0x17b0 [ 390.847921][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 390.847947][ C0] worker_thread+0x8a0/0xda0 [ 390.847966][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 390.847989][ C0] ? __kthread_parkme+0x7b/0x200 [ 390.848012][ C0] kthread+0x711/0x8a0 [ 390.848035][ C0] ? __pfx_worker_thread+0x10/0x10 [ 390.848052][ C0] ? __pfx_kthread+0x10/0x10 [ 390.848073][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.848091][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.848108][ C0] ? __pfx_kthread+0x10/0x10 [ 390.848130][ C0] ret_from_fork+0x4bc/0x870 [ 390.848147][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 390.848167][ C0] ? __switch_to_asm+0x39/0x70 [ 390.848185][ C0] ? __switch_to_asm+0x33/0x70 [ 390.848202][ C0] ? __pfx_kthread+0x10/0x10 [ 390.848223][ C0] ret_from_fork_asm+0x1a/0x30 [ 390.848250][ C0] [ 392.216959][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 392.223855][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 392.232981][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 392.243041][ T31] Call Trace: [ 392.246330][ T31] [ 392.249265][ T31] dump_stack_lvl+0x99/0x250 [ 392.253869][ T31] ? __asan_memcpy+0x40/0x70 [ 392.258471][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.263676][ T31] ? __pfx__printk+0x10/0x10 [ 392.268288][ T31] vpanic+0x237/0x6d0 [ 392.272283][ T31] ? __pfx_vpanic+0x10/0x10 [ 392.276795][ T31] ? preempt_schedule_common+0x83/0xd0 [ 392.282272][ T31] panic+0xb9/0xc0 [ 392.286007][ T31] ? __pfx_panic+0x10/0x10 [ 392.290435][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 392.295827][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 392.302023][ T31] watchdog+0xf9f/0xfa0 [ 392.306200][ T31] ? watchdog+0x1e2/0xfa0 [ 392.310551][ T31] kthread+0x711/0x8a0 [ 392.314638][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.319320][ T31] ? __pfx_kthread+0x10/0x10 [ 392.323928][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.329144][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.334362][ T31] ? __pfx_kthread+0x10/0x10 [ 392.338971][ T31] ret_from_fork+0x4bc/0x870 [ 392.343571][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.348697][ T31] ? __switch_to_asm+0x39/0x70 [ 392.353471][ T31] ? __switch_to_asm+0x33/0x70 [ 392.358242][ T31] ? __pfx_kthread+0x10/0x10 [ 392.362849][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.367650][ T31] [ 392.370935][ T31] Kernel Offset: disabled [ 392.375334][ T31] Rebooting in 86400 seconds..