last executing test programs: 15.634207293s ago: executing program 0 (id=5954): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 15.499508491s ago: executing program 0 (id=5957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 15.27043747s ago: executing program 0 (id=5961): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x20004804) socket$tipc(0x1e, 0x4, 0x0) (async) r1 = socket$tipc(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="14dc5a5d92000000010a010800007cf771fef04a43d15350"], 0x14}}, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) connect$tipc(r1, &(0x7f00000052c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x1}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000200)={r6, 0x40, 0x8}, 0x8) setsockopt$rose(r4, 0x104, 0x6, &(0x7f00000004c0)=0x7f, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) (async) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast, @loopback}, 0xc) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast, @loopback}, 0xc) socket(0x840000000002, 0x3, 0x100) (async) r9 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r9, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) (async) setsockopt$inet_msfilter(r9, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) listen(r8, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9) sendmsg$TIPC_NL_MON_SET(r10, 0x0, 0x40000) 14.956963045s ago: executing program 0 (id=5964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x3ff, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x70, 0x1, 0x3, 0x6, 0xe40b, 0x4f}, &(0x7f00000000c0)=0x20) (async) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 13.950613493s ago: executing program 0 (id=5971): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x64000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250500000005000100010000000500010001000000140006000000000000000000000000000000000008000400000000002000070073797374656d5f753a6f626a6563745f723a636572745f743a7330001400060069703665727370616e30000000000000080005000a01010066ae5bba6e488a2c1e82634eb574e7d2d8f241fd7b4f14e686748718c345abe65e589cc711d0054d727da73fb677bd"], 0x7c}, 0x1, 0x0, 0x0, 0x4c810}, 0x8000) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000300)={@private2, @remote, 0x10, 0x9}}) listen(r1, 0x4) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}, {&(0x7f00000004c0)="c3c71f49e9e80f36e4f6ea0688acf15cc907fa8c910101ce0596a664edc6b36beca7645f340cf179d06bbda377196b2da9130763eae06098272512a58f00d8309514cf9c770bc0c39beeb99e5447a07c6ca90d2a7d313ca166091a575d1486aba6db3ea3634a32bd753b490d3f43762afdf2f8fe00"/129, 0x81}], 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="4dd89749e22ac8725b22ead8a542bca5f08c0b5f01f90bb213176aadc8a4a031d5f463e655849e503e30de2a5dda539311f9608c2994ad9fcda3433369a9c2952b137e71eda3753b7516d49a7fec55501252c47ebd0df19d174d888b1c81ec825804c925e11af39a32b1aacbf292864bbd", 0x71}], 0x1, 0x0, 0x0, 0x40841}], 0x1, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x3fd, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES8=r2, @ANYRESOCT=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc000000050006000d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68452}}, 0x20}}, 0x0) 13.784755819s ago: executing program 0 (id=5975): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff19) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000c40)={r6, 0xca60, 0xfffa}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000b40)=[@mss={0x2, 0x6}, @window={0x3, 0xbd, 0x8}, @timestamp, @mss={0x2, 0x7}, @sack_perm, @sack_perm], 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$inet_mreq(r7, 0x0, 0x20, 0x0, &(0x7f0000000200)) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000f80)={0x1a8, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8e, 0x3, "40d4038745d74975011f27b54755c94e20cbcecb6dfe2994a6d542382c9547f971ae76c4d1a18a6b03574b408402f829e2e4490a5079311c034637583080317c654a0644c22af3c77da73e60983852ee438f87e04cc99eb3889c13123fd2d23d3c3ec27e6c90ed3f90bda33105cb6cb4ccf392d5e34935f8cf5d069d3cbd4dbc93caa5e90c6cbf79e335"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x6f, "c743b99f8bcf4f4fe558e8ec010b08ac661d627c5ba8"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x32b840d}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a5b914c}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa6e9}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x4002) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000000140)=ANY=[], 0xc2) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[], 0xffdd) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000340)="7d24d6fd81292b8630c5e65fbe5fbc4ed6596662c6a154d292af16d9f732ca5d3bc81cb38d8103ef165513520ac7f7f7b6b68013489133e92797a49b7e4afa8c3cae2581a0c86633d04302a74d966067c99fa53454e7fadf4bc88a36759d5ced60a34d06a7b5a25fa645a7e2c779ea2d9aeb294a4308085fccd8128a31e1b405b7336a8d9b1434ce9efe354b2ba98e636e4a8fda32453b482fcff35a711862f6af917a1ab710eb1f7577ed81221ea575f7a57d616e5d675f48db529547739a98302db6c7a7bf46e672e2f6e2d01ef98c34da5acf7a189a90ed03fdf2e156045c26d3c6b1d7ecb62093d181d71d4e58019ff549f163", 0xf5}, {&(0x7f0000000440)="5a5b5ab3acd9037f4995e6e1fdc1821b179dbd505a7491dd11b9e4906cabb43d8efc502d483b12753f434e98f337f67083322bfe51b9f281121cbf24295e1a98a1202c5aa807addc5b7f657ca3ca84780ed5f795d37cd7607c3f8ae5dd64b35a4127b634f2c721e28eb40fb15d79867be8220aec3e82913a9f", 0x79}, {&(0x7f0000000500)="9b80d6b6ec805c9dfe5d9f001d1674ce3964e6ec6d9f369354b7c07193c94f055d80698a2a1d2b78395be47eac4914151922203237586bac6106e7a3153ad24f1e3e56c368eb780da9d766fa3e46c6482f39cb6588dc8228d8809f2fe02a9f643d6b91e771dee54e2e10a2fc845dbc3e19846813c1090644293a87858da23911b71bafe1135a4e29157ee791548e39d879445c7c180de4f7c7bf19d65186d224a37c2e1209572d7bf38b7a5d4ac685d723428ffd7287cbae34e577d0c2fcd6193ddc43622ffc16608655", 0xca}, {&(0x7f0000000600)="ac569f18a039bcd9b847651c5aacf2338222905d097c50223a0a949ff4715485533c0b0e09ebe32028877594ae16f83cf516d653b14b192bfffb011f09dfcd03bbf9024c9e70ed0b00d36764f65455b79e29bd5f6c4e0d83123bb5de4e44fd1fb84bf0cdc3b439ce2dc4790e99c3ad1d517e68fd13026cfac18fe149bdf4484662407a04c19dfc", 0x87}, {&(0x7f0000000a40)="4086940500e667900a503798983e9b67b30a8c8557624ab73b79713a2fe5a62a10f7bc7411461337ef8454cc97e3b563775c8b31361707bdf021a33b245801dc7048bbf3df36d1efa736e0a3a4576aa22b6a61584903074d7ae4ea63a0f40039fe99ec18ae37a495ffefbdd27c007079ad0439429da488aeae05f3fdd634b1d334aede56eaf7d19ebaafcc199318346cf43f20d9f5871a632051df2593eddf8a640930d2820e69e3a9b7c34679e07055d0b0a723563b8a8d090d4a21cf4b56fe4dbb118af2eac3e02360663711", 0xcd}], 0x5, &(0x7f0000000e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20000002}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x4f, 0x1, 0x6, [{@private=0xa010100, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xffffffbd}, {@private=0xa010100, 0x8001}, {@local, 0x200}, {@private=0xa010101, 0xc9}]}, @timestamp={0x44, 0x14, 0x33, 0x0, 0x2, [0x7, 0x0, 0xd, 0x2]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x35, 0x0, 0x8, [0x6, 0xfffffffd, 0x73, 0x2b9, 0x7]}, @end, @cipso={0x86, 0x32, 0x3, [{0x6, 0x3, 'p'}, {0x5, 0x6, "4831a1fc"}, {0x1, 0xc, "5a3f079c80f12eea1b5b"}, {0x6, 0xd, "4006eb46c0b801ac1f8ab5"}, {0x0, 0xa, "e650ac51cb62b784"}]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x6, 0xc, "559d77d61b040631f7ac"}, {0x1, 0xc, "0f4704a209341379b5ac"}]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x1, [{@private=0xa010100, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x86, 0xd, "189537bd45a818742a0d0a"}, @noop]}}}], 0x158}, 0x4008040) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 2.932977378s ago: executing program 4 (id=6094): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100)={r5, 0xa11c}, 0x8) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800007c1c000001000000ff0f00000000000000", @ANYRES32=r1, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x35, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r6, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r6}, 0x38) (async) r8 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@nfc_llcp, &(0x7f0000000140)=0x80) connect$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@llc={0x4, {@llc={0xaa, 0x0, 'c', "88a6a1f49f"}}}}}, 0x0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0xe, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) 2.734788604s ago: executing program 3 (id=6095): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x7ca8e000) writev(r2, &(0x7f0000000080)=[{0x0}], 0x1) 2.734155464s ago: executing program 4 (id=6096): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x140000b) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xcb5) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000180)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010004b0400000001fcdbdf257a000000", @ANYRES32=r5, @ANYBLOB="00000000040000001c0012800b00010062726964679cf1000c0002800800080088a8ffff"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x10, 0x80, 0xff, 0x6, {{0x2e, 0x4, 0x1, 0x2, 0xb8, 0x64, 0x0, 0x6, 0x4, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x23, 0x6f, [@dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @multicast1, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xe8, [@local, @rand_addr=0x64010100]}, @ssrr={0x89, 0x13, 0x1d, [@loopback, @broadcast, @rand_addr=0x64010101, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x62, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa9}, {@loopback, 0x10000}, {@empty, 0x28d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0xfffffff9}]}, @noop, @lsrr={0x83, 0x7, 0xaf, [@dev={0xac, 0x14, 0x14, 0x26}]}, @rr={0x7, 0x7, 0x47, [@private=0xa010100]}, @lsrr={0x83, 0x23, 0x38, [@local, @local, @local, @empty, @local, @multicast1, @multicast1, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00'}) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@multicast1, @private}, &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000bd689e8f48b4b549d029b11791cd0a5fcda36b0e5159e5d29511eac9c2ce", @ANYRESOCT, @ANYBLOB="1400020000000000000000000000ffff000000000800080009030000"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)}, 0x10) 2.612596659s ago: executing program 3 (id=6097): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009000800b600884700"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x8, 0x4, 0x800, 0x1000000}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 2.358761437s ago: executing program 2 (id=6099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x10001, [0xc7, 0x7e0eea36, 0x8, 0xffffffff, 0x9f9a, 0xa]}) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/138, 0x8a}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/206, 0xce}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x4, &(0x7f00000004c0)=""/145, 0x91}, 0x80000000}, {{&(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)=""/211, 0xd3}], 0x1, &(0x7f0000000740)=""/33, 0x21}}, {{&(0x7f0000000780)=@ax25={{0x3, @null}, [@default, @rose, @null, @remote, @default, @remote, @bcast, @netrom]}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000000940)=""/71, 0x47}, {&(0x7f00000009c0)=""/157, 0x9d}, {&(0x7f0000000a80)=""/173, 0xad}], 0x5}, 0xfffffff7}, {{&(0x7f0000000bc0)=@tipc, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c40)=""/67, 0x43}, {&(0x7f0000000cc0)=""/131, 0x83}, {&(0x7f0000000d80)=""/122, 0x7a}, {&(0x7f0000000e00)=""/1, 0x1}], 0x4, &(0x7f0000000e80)=""/62, 0x3e}, 0x40}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000ec0)=""/19, 0x13}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/186, 0xba}], 0x3, &(0x7f0000002000)=""/232, 0xe8}, 0x9}], 0x5, 0x40000022, &(0x7f0000002240)) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x1000) 2.287391431s ago: executing program 4 (id=6101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 2.139516296s ago: executing program 2 (id=6102): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000020000103000000000000000002000000000000081f0000000500160011000000b745a25990aca152663c35fc898a5764ebfd939a3d6a7c727f25311d82efb77a473876ec7e35461abae64fd98745e7fa07ad871320d09e10a5a5ec6e10bda4386deb17c050d6b5a3492314d10b9d11c52a8dffcf896963ebb8e43a939c2561ffcfff22bbbec882ed5d3699a99284f3e4dbafc8ebdad6"], 0x24}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan1\x00'}, @IFLA_PHYS_PORT_ID={0x10, 0x22, "4fbb54f28edca52e1d51bc77"}, @IFLA_MTU={0x8, 0x4, 0x9}, @IFLA_GROUP={0x8, 0x1b, 0x10000}, @IFLA_IFALIASn={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004001) 2.138986739s ago: executing program 4 (id=6103): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x8, 0x5, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x7, 0x4) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x2002, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x1ec, r6, 0x4, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x80000d0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$inet6(0xa, 0x1, 0x100) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) 2.098557391s ago: executing program 1 (id=6104): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'lo\x00', 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b3000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'lo\x00', 0x2}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b3000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 2.057332783s ago: executing program 2 (id=6105): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) 1.918721624s ago: executing program 4 (id=6106): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40004) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}}, {{&(0x7f0000000a00)=@in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x80, 0x0}}], 0x2, 0x4000040) r11 = socket(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r11, 0x89e0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r13 = socket$packet(0x11, 0x1, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007400), 0xffffffffffffffff) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r14, &(0x7f000000d8c0)={&(0x7f000000d780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d880)={&(0x7f000000d7c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="7007fedbdf25200000000800030000000000", @ANYRES32=0x0, @ANYBLOB="0c00060003000000000000000c000600010000000100000024002d800800030007000000080002000000000005000100060000000800030000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r12) 1.884280039s ago: executing program 1 (id=6107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000000006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) preadv(r0, &(0x7f0000001a40)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/244, 0xf4}, {&(0x7f00000003c0)=""/5, 0x5}], 0x6, 0xffffffb3, 0x1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r4, 0x9e2}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0)={0x0}, &(0x7f0000001b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b40)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000001c40)=0xe8) r7 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001c80)={r5, r6, r7}, 0xc) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x303, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e22, 0x4e23, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xfff], 0x0, [0x7]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @rand_addr=0x64010101, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x1}}}, {{@arp={@private=0xa010100, @remote, 0xff, 0x0, 0x2, 0x7, {@mac, {[0x7f, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x2, 0xd, 0x2, 0x9, 0x7c, 0xffe2, 'netdevsim0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.792565877s ago: executing program 2 (id=6108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x801) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', r5, 0x6, 0xb9, 0x9, 0x530, 0x18, @loopback, @remote, 0x8, 0x8000, 0x3, 0x1000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079a00000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', r5, 0x6, 0xb9, 0x9, 0x530, 0x18, @loopback, @remote, 0x8, 0x8000, 0x3, 0x1000}}) (async) 1.71151491s ago: executing program 4 (id=6109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f00000059c0)={0x48, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x12}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 1.710018645s ago: executing program 1 (id=6110): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0xfffffffffffffe16, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xb84}]}, 0x40}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0x0, 0x33}}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) 1.66503763s ago: executing program 3 (id=6111): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000400)=ANY=[], 0x0) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.280889835s ago: executing program 3 (id=6112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0x6) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x10}}, 0x0) 1.147377093s ago: executing program 3 (id=6113): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x40000021, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x8000}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xc}, {0x6}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x2}) 1.136524313s ago: executing program 2 (id=6114): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable', 0x8) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@local, 0x78, r6}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0x400, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x4e20, @multicast1}}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = socket$inet6(0x10, 0xa, 0x10003) sendto$inet6(r10, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 329.175343ms ago: executing program 1 (id=6115): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000140)={0x93, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x101}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}}, 0x0) 115.195484ms ago: executing program 1 (id=6116): r0 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40) 112.937312ms ago: executing program 2 (id=6117): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x20}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x20}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 78.989521ms ago: executing program 3 (id=6118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x15, 0xffff, 0xfffffffd, 0x3, 0x2, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f00000002c0)="d2d48ec011df69a2819c917e6ae14b37c6fc579b6bef81be335511902beae0b82cf4192eb321de26695a454a0f26963ac3feefe61ac802d30aa290c943315c8329e38c514d57b9d08baf7af16a3fa2af63a7ac998c2ca8df22a70f00a5c786beb80e6c89cd6972be93e4d674d2a67392749c725a1946c875f2831b91638342a7e8977ce7cfc1529e45b4933dc7c8e7641a41bc4a4693a498fa115ece88ede0994175b2a149ede3bdec5e5fcdc4cab17b0e1b612839090b210508b0d4f2fc8358cef31d8852be21e6ea375ca3b98906f3b6a3d7ef7da0c78267838f559d4ea39ecbab686748ed581124462ed470d982d5136b23fb8e27c9a33695e593a6", &(0x7f0000000080)=""/9}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x17, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r2, &(0x7f0000001580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x14bc}, 0x1, 0x0, 0x0, 0x44000}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=@can_delroute={0x1c, 0x19, 0x1, 0xfffffffd, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x24}]}, 0x1c}}, 0x0) 0s ago: executing program 1 (id=6119): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) kernel console output (not intermixed with test programs): e check. [ 368.668548][T21249] : entered promiscuous mode [ 368.821091][T21266] syzkaller1: entered promiscuous mode [ 368.829499][T21266] syzkaller1: entered allmulticast mode [ 368.882870][T21274] netlink: 'syz.1.4064': attribute type 10 has an invalid length. [ 368.910287][T21274] 8021q: adding VLAN 0 to HW filter on device ` [ 368.925407][T21274] team0: Port device ` added [ 369.169780][T21296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4068'. [ 369.191541][T21300] netlink: 'syz.4.4070': attribute type 1 has an invalid length. [ 369.312709][T21311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.339960][T21313] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.347716][T21313] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.413817][T21320] syzkaller0: entered promiscuous mode [ 369.420381][T21320] syzkaller0: entered allmulticast mode [ 369.553717][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4076'. [ 369.564121][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4076'. [ 369.722576][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4078'. [ 369.897161][T21339] x_tables: duplicate underflow at hook 1 [ 369.953237][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4084'. [ 369.966572][T21349] netlink: 'syz.3.4085': attribute type 9 has an invalid length. [ 369.975766][T21349] netlink: 'syz.3.4085': attribute type 11 has an invalid length. [ 369.998988][T21349] netlink: 'syz.3.4085': attribute type 12 has an invalid length. [ 370.013756][T21347] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 370.030421][T21349] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.4085'. [ 370.066279][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'. [ 370.110852][T21347] bond2 (unregistering): Released all slaves [ 370.151320][T21359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4088'. [ 370.667012][T21389] netlink: 'syz.2.4099': attribute type 1 has an invalid length. [ 370.822267][T21401] wg1 speed is unknown, defaulting to 1000 [ 371.163229][T21421] openvswitch: netlink: Unknown key attributes 2 [ 371.170216][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 371.170251][ C0] lec:lec_tx_timeout: lec0 [ 371.183087][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 371.796852][T21467] IPVS: ip_vs_edit_dest(): server weight less than zero [ 371.804271][ T7820] IPVS: starting estimator thread 0... [ 371.899530][T21472] IPVS: using max 33 ests per chain, 79200 per kthread [ 372.258341][T21503] sctp: [Deprecated]: syz.3.4132 (pid 21503) Use of int in max_burst socket option deprecated. [ 372.258341][T21503] Use struct sctp_assoc_value instead [ 372.351457][T21508] netlink: 'syz.4.4133': attribute type 21 has an invalid length. [ 372.520677][T21530] ip6t_srh: unknown srh match flags 5F28 [ 372.967802][T21566] __nla_validate_parse: 16 callbacks suppressed [ 372.967820][T21566] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4154'. [ 373.054961][T21572] netlink: 182872 bytes leftover after parsing attributes in process `syz.1.4154'. [ 373.265944][T21585] tipc: Enabled bearer , priority 0 [ 373.398775][T21585] syzkaller0: entered promiscuous mode [ 373.439226][T21585] syzkaller0: entered allmulticast mode [ 373.447273][T21585] tipc: Resetting bearer [ 373.493197][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4159'. [ 373.510073][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4163'. [ 373.535375][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4163'. [ 373.551324][T21597] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4163'. [ 373.576209][T21584] tipc: Resetting bearer [ 375.311205][T21584] tipc: Disabling bearer [ 375.330573][T21611] vlan1: entered allmulticast mode [ 375.335727][T21611] hsr0: entered allmulticast mode [ 375.341859][T21611] hsr_slave_0: entered allmulticast mode [ 375.360423][ T7820] tipc: Node number set to 3093500709 [ 375.593730][T21644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.633654][T21645] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 375.757371][T21655] syzkaller0: entered promiscuous mode [ 375.772183][T21655] syzkaller0: entered allmulticast mode [ 375.788223][T21655] netlink: zone id is out of range [ 375.794173][T21655] netlink: zone id is out of range [ 375.799894][T21655] netlink: zone id is out of range [ 375.805196][T21655] netlink: zone id is out of range [ 375.811833][T21655] netlink: zone id is out of range [ 375.817098][T21655] netlink: zone id is out of range [ 375.817440][T21657] bond4: left promiscuous mode [ 375.838394][T21661] netlink: 'syz.2.4180': attribute type 14 has an invalid length. [ 375.843725][T21660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4179'. [ 375.860698][T21660] netlink: 'syz.0.4179': attribute type 3 has an invalid length. [ 375.872515][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4179'. [ 376.034566][T21672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4183'. [ 376.130521][T21682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4187'. [ 376.188978][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 376.197053][ C0] lec:lec_tx_timeout: lec0 [ 376.202226][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 376.249161][T21691] netlink: 'syz.0.4190': attribute type 64 has an invalid length. [ 376.258592][T21691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.589427][ T7820] IPVS: starting estimator thread 0... [ 376.691755][T21703] IPVS: using max 35 ests per chain, 84000 per kthread [ 376.721731][T21709] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 376.755074][T21709] bond0: entered promiscuous mode [ 376.760590][T21709] bond_slave_0: entered promiscuous mode [ 376.766377][T21709] bond_slave_1: entered promiscuous mode [ 376.773825][T21709] bond0: left promiscuous mode [ 376.778623][T21709] bond_slave_0: left promiscuous mode [ 376.788681][ T123] block nbd1: Possible stuck request ffff888024ed8000: control (read@0,1024B). Runtime 30 seconds [ 376.789285][T21709] bond_slave_1: left promiscuous mode [ 376.801746][ T123] block nbd1: Possible stuck request ffff888024ed8200: control (read@1024,1024B). Runtime 30 seconds [ 376.816429][ T123] block nbd1: Possible stuck request ffff888024ed8400: control (read@2048,1024B). Runtime 30 seconds [ 376.829021][ T123] block nbd1: Possible stuck request ffff888024ed8600: control (read@3072,1024B). Runtime 30 seconds [ 377.202594][T21741] IPVS: set_ctl: invalid protocol: 44 172.20.20.44:20004 [ 377.203186][T21739] syz.1.4208: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 377.267922][T21739] CPU: 0 UID: 0 PID: 21739 Comm: syz.1.4208 Not tainted syzkaller #0 PREEMPT(full) [ 377.267952][T21739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 377.267968][T21739] Call Trace: [ 377.267976][T21739] [ 377.267984][T21739] dump_stack_lvl+0xe8/0x150 [ 377.268016][T21739] warn_alloc+0x249/0x340 [ 377.268038][T21739] ? stack_trace_save+0xa9/0x100 [ 377.268065][T21739] ? __pfx_warn_alloc+0x10/0x10 [ 377.268092][T21739] ? kasan_save_track+0x4f/0x80 [ 377.268109][T21739] ? kasan_save_track+0x3e/0x80 [ 377.268124][T21739] ? __kasan_kmalloc+0x93/0xb0 [ 377.268148][T21739] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 377.268166][T21739] ? xskq_create+0x56/0x170 [ 377.268183][T21739] ? xsk_setsockopt+0x54c/0x990 [ 377.268209][T21739] ? do_sock_setsockopt+0x17c/0x1b0 [ 377.268230][T21739] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 377.268251][T21739] ? do_syscall_64+0xe2/0xf80 [ 377.268274][T21739] __vmalloc_node_range_noprof+0x132/0x1730 [ 377.268325][T21739] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 377.268351][T21739] ? __kasan_kmalloc+0x93/0xb0 [ 377.268376][T21739] vmalloc_user_noprof+0xad/0xe0 [ 377.268394][T21739] ? xskq_create+0xbf/0x170 [ 377.268412][T21739] xskq_create+0xbf/0x170 [ 377.268432][T21739] xsk_init_queue+0xad/0x110 [ 377.268462][T21739] xsk_setsockopt+0x54c/0x990 [ 377.268487][T21739] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.268511][T21739] ? __pfx_aa_sk_perm+0x10/0x10 [ 377.268533][T21739] ? aa_sock_opt_perm+0xff/0x1a0 [ 377.268558][T21739] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 377.268577][T21739] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.268607][T21739] do_sock_setsockopt+0x17c/0x1b0 [ 377.268636][T21739] __x64_sys_setsockopt+0x13d/0x1b0 [ 377.268666][T21739] do_syscall_64+0xe2/0xf80 [ 377.268685][T21739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.268703][T21739] ? trace_irq_disable+0x37/0x100 [ 377.268721][T21739] ? clear_bhb_loop+0x60/0xb0 [ 377.268744][T21739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.268766][T21739] RIP: 0033:0x7f97d219aeb9 [ 377.268784][T21739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.268799][T21739] RSP: 002b:00007f97d2fbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.268820][T21739] RAX: ffffffffffffffda RBX: 00007f97d2415fa0 RCX: 00007f97d219aeb9 [ 377.268835][T21739] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 377.268846][T21739] RBP: 00007f97d2208c1f R08: 0000000000000004 R09: 0000000000000000 [ 377.268859][T21739] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.268874][T21739] R13: 00007f97d2416038 R14: 00007f97d2415fa0 R15: 00007ffd22b510d8 [ 377.268903][T21739] [ 377.565521][T21750] netlink: 'syz.4.4212': attribute type 9 has an invalid length. [ 377.570166][T21739] Mem-Info: [ 377.576620][T21739] active_anon:6535 inactive_anon:0 isolated_anon:0 [ 377.576620][T21739] active_file:2693 inactive_file:40207 isolated_file:0 [ 377.576620][T21739] unevictable:768 dirty:72 writeback:0 [ 377.576620][T21739] slab_reclaimable:12211 slab_unreclaimable:123010 [ 377.576620][T21739] mapped:30350 shmem:1357 pagetables:1446 [ 377.576620][T21739] sec_pagetables:0 bounce:0 [ 377.576620][T21739] kernel_misc_reclaimable:0 [ 377.576620][T21739] free:1291056 free_pcp:13095 free_cma:0 [ 377.672435][T21739] Node 0 active_anon:26040kB inactive_anon:0kB active_file:10772kB inactive_file:160628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121400kB dirty:284kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14428kB pagetables:5436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.712338][T21739] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.743623][T21739] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.774852][T21739] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 377.775677][T21761] netlink: 'syz.4.4215': attribute type 1 has an invalid length. [ 377.780790][T21739] Node 0 DMA32 free:1257360kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26240kB inactive_anon:0kB active_file:10772kB inactive_file:160628kB unevictable:1536kB writepending:284kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:41876kB local_pcp:21040kB free_cma:0kB [ 377.780853][T21739] lowmem_reserve[]: 0 0 1 1 1 [ 377.780891][T21739] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.780946][T21739] lowmem_reserve[]: 0 0 0 0 0 [ 377.780983][T21739] Node 1 Normal free:3891504kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10912kB local_pcp:8576kB free_cma:0kB [ 377.781036][T21739] lowmem_reserve[]: 0 0 0 0 0 [ 377.903501][T21739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 377.916680][T21739] Node 0 DMA32: 7161*4kB (UM) 4894*8kB (UME) 2111*16kB (UM) 245*32kB (UME) 11*64kB (UM) 249*128kB (UM) 255*256kB (UM) 201*512kB (UM) 113*1024kB (UME) 54*2048kB (UME) 176*4096kB (UM) = 1257380kB [ 377.946841][T21739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 377.977536][T21766] __nla_validate_parse: 7 callbacks suppressed [ 377.977558][T21766] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4217'. [ 378.014736][T21739] Node 1 Normal: 146*4kB (UME) 37*8kB (UME) 32*16kB (UME) 164*32kB (UME) 49*64kB (UME) 14*128kB (UME) 4*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3891504kB [ 378.074697][T21739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.105757][T21739] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.143027][T21739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.169880][T21739] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.189076][T21739] 44252 total pagecache pages [ 378.204617][T21739] 0 pages in swap cache [ 378.208809][T21739] Free swap = 124996kB [ 378.233811][T21739] Total swap = 124996kB [ 378.238014][T21739] 2097051 pages RAM [ 378.243932][T21739] 0 pages HighMem/MovableOnly [ 378.248639][T21739] 426622 pages reserved [ 378.260568][T21739] 0 pages cma reserved [ 378.303147][T21781] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4223'. [ 378.322544][T21783] x_tables: duplicate entry at hook 1 [ 378.345662][T21781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4223'. [ 378.367611][T21786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4222'. [ 378.704133][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.780102][T21789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4226'. [ 378.794212][T21789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4226'. [ 378.826540][T21777] delete_channel: no stack [ 378.975996][T21803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4228'. [ 379.103053][T21820] bridge0: entered allmulticast mode [ 379.150382][ T7817] IPVS: starting estimator thread 0... [ 379.217819][T21831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4236'. [ 379.248850][T21823] IPVS: using max 32 ests per chain, 76800 per kthread [ 380.021168][T21882] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4250'. [ 380.054238][T21882] nbd: couldn't find a device at index 0 [ 380.180189][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4254'. [ 380.196663][T21898] netlink: 'syz.2.4254': attribute type 10 has an invalid length. [ 380.221747][T21898] team0: Port device dummy0 added [ 380.255800][T21904] tipc: Enabled bearer , priority 0 [ 380.307704][T21904] syzkaller0: entered promiscuous mode [ 380.314171][T21904] syzkaller0: entered allmulticast mode [ 380.323620][T21906] netlink: 'syz.2.4258': attribute type 1 has an invalid length. [ 380.337036][T21906] netlink: 'syz.2.4258': attribute type 3 has an invalid length. [ 380.337263][T21904] tipc: Resetting bearer [ 380.434018][T21902] tipc: Resetting bearer [ 382.381741][T21902] tipc: Disabling bearer [ 382.468321][ T797] tipc: Node number set to 3360047483 [ 382.532984][T21950] netlink: 'syz.0.4267': attribute type 1 has an invalid length. [ 382.541081][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 382.541110][ C0] lec:lec_tx_timeout: lec0 [ 382.550802][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 382.558182][T21945] dvmrp6: entered allmulticast mode [ 382.640371][T21952] tipc: Started in network mode [ 382.645632][T21952] tipc: Node identity 1, cluster identity 4711 [ 382.669036][T21952] tipc: Node number set to 1 [ 382.758280][T21960] bond0: entered promiscuous mode [ 382.780461][T21960] bond_slave_0: entered promiscuous mode [ 382.798371][T21960] bond_slave_1: entered promiscuous mode [ 382.814093][T21960] bond0: left promiscuous mode [ 382.821075][T21960] bond_slave_0: left promiscuous mode [ 382.826769][T21960] bond_slave_1: left promiscuous mode [ 383.276020][T21998] __nla_validate_parse: 10 callbacks suppressed [ 383.276042][T21998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4285'. [ 383.313521][T21998] syzkaller1: entered promiscuous mode [ 383.319282][T21998] syzkaller1: entered allmulticast mode [ 383.330343][T22003] netlink: 'syz.3.4284': attribute type 10 has an invalid length. [ 383.341687][T21998] netlink: 'syz.2.4285': attribute type 83 has an invalid length. [ 383.463589][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'. [ 383.485713][T17180] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 383.508466][T17180] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 383.516878][T22014] netlink: 'syz.1.4291': attribute type 10 has an invalid length. [ 383.518745][T17180] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 383.548200][T22014] bridge_slave_1: left allmulticast mode [ 383.560712][T22014] bridge_slave_1: left promiscuous mode [ 383.568116][T22014] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.621334][T22014] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 383.648188][T17180] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 383.706908][T22021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4292'. [ 383.722475][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4294'. [ 383.740840][T22025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4294'. [ 383.762983][T22021] team0: Port device dummy0 removed [ 383.769823][T22024] IPVS: set_ctl: invalid protocol: 21 224.0.0.1:20000 [ 383.808538][T22029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4295'. [ 384.677633][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4302'. [ 384.698240][T22063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4303'. [ 384.713870][T22069] netlink: 'syz.2.4304': attribute type 1 has an invalid length. [ 384.723533][T22069] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4304'. [ 384.911113][T22085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4308'. [ 385.026178][T22089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.606994][T22138] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 385.673356][T22143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.782804][T22144] netlink: 'syz.4.4323': attribute type 2 has an invalid length. [ 386.095705][T22169] delete_channel: no stack [ 386.109731][T22169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.120333][T22169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.370522][T22188] IPv6: sit1: Disabled Multicast RS [ 386.377144][T22188] sit1: entered allmulticast mode [ 386.573289][T22201] syzkaller0: entered promiscuous mode [ 386.589549][T22201] syzkaller0: entered allmulticast mode [ 386.605757][T22201] netlink: 'syz.0.4341': attribute type 1 has an invalid length. [ 388.298911][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 388.307019][ C0] lec:lec_tx_timeout: lec0 [ 388.312953][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 388.477804][T22297] __nla_validate_parse: 47 callbacks suppressed [ 388.477821][T22297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4368'. [ 388.492676][T22301] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4370'. [ 388.766815][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4375'. [ 388.817923][T22326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4375'. [ 389.002737][T22330] team0: Port device team_slave_0 removed [ 389.254250][T22350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4384'. [ 389.266310][T22343] syzkaller0: entered promiscuous mode [ 389.300210][T22343] syzkaller0: entered allmulticast mode [ 389.343482][T22351] netlink: 'syz.2.4385': attribute type 1 has an invalid length. [ 389.377862][T22358] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 389.534972][T22360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4388'. [ 389.547147][T22364] netlink: 'syz.1.4390': attribute type 1 has an invalid length. [ 389.582722][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4389'. [ 389.626901][T22364] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 389.889343][T22391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'. [ 390.202390][T22406] netlink: 'syz.2.4401': attribute type 4 has an invalid length. [ 390.249248][T22405] netlink: 'syz.2.4401': attribute type 4 has an invalid length. [ 390.253706][T22406] netlink: 'syz.2.4401': attribute type 4 has an invalid length. [ 390.302560][T22414] xt_socket: unknown flags 0x50 [ 390.318173][T22414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4404'. [ 390.470560][T22425] netlink: 'syz.3.4409': attribute type 1 has an invalid length. [ 390.479640][T22425] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4409'. [ 390.635450][T22444] netlink: 'syz.0.4413': attribute type 13 has an invalid length. [ 390.652648][T17180] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 390.652716][T22444] netlink: 'syz.0.4413': attribute type 13 has an invalid length. [ 390.662104][T17180] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 390.688605][T17180] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 390.706296][T17180] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 390.747786][T22451] IPVS: set_ctl: invalid protocol: 10915 0.0.0.0:20003 [ 390.952568][T22468] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 394.059094][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 394.067138][ C0] lec:lec_tx_timeout: lec0 [ 394.073095][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 399.089004][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 399.097122][ C0] lec:lec_tx_timeout: lec0 [ 399.101836][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 404.108996][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 404.117105][ C0] lec:lec_tx_timeout: lec0 [ 404.122135][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 406.869121][ T123] block nbd1: Possible stuck request ffff888024ed8000: control (read@0,1024B). Runtime 60 seconds [ 406.879989][ T123] block nbd1: Possible stuck request ffff888024ed8200: control (read@1024,1024B). Runtime 60 seconds [ 406.890979][ T123] block nbd1: Possible stuck request ffff888024ed8400: control (read@2048,1024B). Runtime 60 seconds [ 406.902139][ T123] block nbd1: Possible stuck request ffff888024ed8600: control (read@3072,1024B). Runtime 60 seconds [ 408.542800][ T5195] udevd[5195]: worker [5841] /devices/virtual/block/nbd1 is taking a long time [ 409.128953][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 409.137059][ C0] lec:lec_tx_timeout: lec0 [ 409.141767][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 414.149124][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 414.157222][ C0] lec:lec_tx_timeout: lec0 [ 414.161930][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 416.805888][T22536] netlink: 'syz.2.4440': attribute type 10 has an invalid length. [ 416.813921][T22536] __nla_validate_parse: 13 callbacks suppressed [ 416.813941][T22536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4440'. [ 416.851151][T22536] team0: Port device geneve0 added [ 416.924888][T22547] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4442'. [ 417.388631][T22571] sctp: [Deprecated]: syz.3.4448 (pid 22571) Use of int in max_burst socket option deprecated. [ 417.388631][T22571] Use struct sctp_assoc_value instead [ 417.545471][T22588] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4452'. [ 417.849368][T22609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4460'. [ 418.054054][T22618] syzkaller0: entered promiscuous mode [ 418.055865][T22620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4464'. [ 418.059892][T22618] syzkaller0: entered allmulticast mode [ 418.115248][T22620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.125951][T22620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.137071][T22620] bond0 (unregistering): Released all slaves [ 418.151326][T22618] tipc: Enabled bearer , priority 0 [ 418.180194][T22617] tipc: Resetting bearer [ 418.240955][T22617] tipc: Disabling bearer [ 418.285371][T22628] xt_hashlimit: size too large, truncated to 1048576 [ 418.362854][T22632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4467'. [ 418.372312][T22632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4467'. [ 418.418163][T22637] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4469'. [ 418.552931][T22642] netlink: 'syz.0.4470': attribute type 1 has an invalid length. [ 418.570701][T22642] netlink: 476 bytes leftover after parsing attributes in process `syz.0.4470'. [ 418.599431][T22642] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4470'. [ 419.053812][T22677] netlink: 'syz.2.4483': attribute type 1 has an invalid length. [ 419.112705][T22677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.148589][T22681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.156279][T22681] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 419.177824][T22681] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 419.179418][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 419.193141][ C0] lec:lec_tx_timeout: lec0 [ 419.198520][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 419.231047][T22677] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 419.239806][T22686] tipc: Enabled bearer , priority 0 [ 419.366703][T22682] syzkaller0: entered promiscuous mode [ 419.382247][T22682] syzkaller0: entered allmulticast mode [ 419.393536][T22682] tipc: Resetting bearer [ 419.947292][T22717] tipc: Enabled bearer , priority 0 [ 419.984905][T22680] tipc: Resetting bearer [ 421.833080][T22680] tipc: Disabling bearer [ 421.842069][T22721] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 421.842850][T22718] syzkaller0: entered promiscuous mode [ 421.856760][T22718] syzkaller0: entered allmulticast mode [ 421.946066][T22718] tipc: Resetting bearer [ 422.032610][T22718] tipc: Disabling bearer [ 422.070772][T22752] __nla_validate_parse: 5 callbacks suppressed [ 422.070789][T22752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4504'. [ 422.148018][T22764] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4506'. [ 422.171604][T22765] netlink: 'syz.0.4506': attribute type 62 has an invalid length. [ 425.018987][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 425.027059][ C0] lec:lec_tx_timeout: lec0 [ 425.031789][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 430.038976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 430.047027][ C0] lec:lec_tx_timeout: lec0 [ 436.950742][ T123] block nbd1: Possible stuck request ffff888024ed8000: control (read@0,1024B). Runtime 90 seconds [ 436.961649][ T123] block nbd1: Possible stuck request ffff888024ed8200: control (read@1024,1024B). Runtime 90 seconds [ 436.972756][ T123] block nbd1: Possible stuck request ffff888024ed8400: control (read@2048,1024B). Runtime 90 seconds [ 436.983786][ T123] block nbd1: Possible stuck request ffff888024ed8600: control (read@3072,1024B). Runtime 90 seconds [ 440.144542][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.154962][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 443.894650][T22772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4507'. [ 443.909924][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4510'. [ 443.922097][T22772] IPVS: Error connecting to the multicast addr [ 444.229774][T22801] netlink: 'syz.3.4519': attribute type 1 has an invalid length. [ 444.313803][T22806] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 444.324272][T22806] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 444.339827][T22806] bond5: (slave xfrm1): making interface the new active one [ 444.355972][T22801] netlink: 5172 bytes leftover after parsing attributes in process `syz.3.4519'. [ 444.366558][T22809] netlink: 'syz.4.4520': attribute type 15 has an invalid length. [ 444.366885][T22806] bond5: (slave xfrm1): Enslaving as an active interface with an up link [ 444.388247][T22801] bond5 (unregistering): (slave xfrm1): Releasing backup interface [ 444.402926][T22801] bond5 (unregistering): Released all slaves [ 444.414690][T22809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4520'. [ 444.443976][T22814] geneve3: entered promiscuous mode [ 444.449847][T22814] geneve3: entered allmulticast mode [ 444.495027][T22817] syzkaller0: entered promiscuous mode [ 444.510524][T22817] syzkaller0: entered allmulticast mode [ 444.538347][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4523'. [ 444.892342][T22846] netlink: 'syz.3.4534': attribute type 14 has an invalid length. [ 445.110880][T22858] netlink: 'syz.2.4538': attribute type 18 has an invalid length. [ 445.118740][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4538'. [ 445.154031][T22858] netlink: 'syz.2.4538': attribute type 18 has an invalid length. [ 445.168909][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.174525][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4538'. [ 445.176931][ C0] lec:lec_tx_timeout: lec0 [ 445.177065][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.196206][T22877] xt_hashlimit: size too large, truncated to 1048576 [ 445.499221][T22909] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.506808][T22909] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.993960][T22948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4558'. [ 446.147204][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4562'. [ 446.233800][T22975] blkio.reset_stats is deprecated [ 446.382047][T22979] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4566'. [ 446.897057][T23024] bond7: option min_links: invalid value (18446744073709551614) [ 446.906360][T23024] bond7: option min_links: allowed values 0 - 2147483647 [ 446.917457][T23024] bond7 (unregistering): Released all slaves [ 447.245830][T23054] bond7 (unregistering): Released all slaves [ 447.807428][ T7820] IPVS: starting estimator thread 0... [ 447.815159][T23101] nbd: couldn't find a device at index 0 [ 447.919026][T23102] IPVS: using max 32 ests per chain, 76800 per kthread [ 447.968045][T23114] sctp: [Deprecated]: syz.4.4606 (pid 23114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.968045][T23114] Use struct sctp_sack_info instead [ 448.361636][T23141] netlink: 'syz.1.4613': attribute type 10 has an invalid length. [ 448.378195][T23144] netlink: 'syz.4.4614': attribute type 4 has an invalid length. [ 448.424024][T23141] team0: Port device geneve0 added [ 448.431592][T23150] netlink: 'syz.4.4614': attribute type 4 has an invalid length. [ 449.361280][T23200] netlink: 'syz.4.4630': attribute type 1 has an invalid length. [ 449.411905][T23207] __nla_validate_parse: 49 callbacks suppressed [ 449.411924][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4630'. [ 449.495450][T23209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4630'. [ 449.537630][T23209] 8021q: adding VLAN 0 to HW filter on device bond7 [ 449.609275][T23211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4633'. [ 449.642864][T23221] netlink: 'syz.2.4638': attribute type 9 has an invalid length. [ 449.899445][T23235] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 449.955648][T23238] 8021q: VLANs not supported on ip_vti0 [ 449.971905][T23241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4644'. [ 450.139916][T23252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4649'. [ 450.332532][T23266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4652'. [ 450.347845][T23271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4655'. [ 450.378709][T23273] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 450.457521][T23271] bond0 (unregistering): Released all slaves [ 450.482056][T23282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4656'. [ 450.562639][T23285] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4657'. [ 450.591806][T23287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4658'. [ 450.679875][T23289] : renamed from bond0 [ 450.836662][T23300] netlink: 'syz.4.4663': attribute type 1 has an invalid length. [ 450.841679][T23303] openvswitch: netlink: Flow key attr not present in new flow. [ 450.861849][T23302] openvswitch: netlink: Flow key attr not present in new flow. [ 451.018902][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 451.026987][ C0] lec:lec_tx_timeout: lec0 [ 451.046430][T23313] nbd: must specify a size in bytes for the device [ 451.213613][T23320] syzkaller0: entered promiscuous mode [ 451.221035][T23320] syzkaller0: entered allmulticast mode [ 451.230940][T23327] openvswitch: netlink: Missing key (keys=40, expected=100) [ 453.373720][T23358] netlink: 'syz.2.4681': attribute type 1 has an invalid length. [ 453.748469][T23385] wg1: entered promiscuous mode [ 453.755424][T23385] wg1: entered allmulticast mode [ 453.978023][T23396] hsr_slave_0 (unregistering): left promiscuous mode [ 454.055453][T23410] xt_hashlimit: size too large, truncated to 1048576 [ 454.508574][T23444] __nla_validate_parse: 18 callbacks suppressed [ 454.508595][T23444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4704'. [ 454.550465][T23446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.599635][T23446] syzkaller0: entered promiscuous mode [ 454.629914][T23454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4707'. [ 454.685897][T23461] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4709'. [ 454.826629][T23469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4712'. [ 454.874753][T23471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.901157][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4714'. [ 454.908127][T23475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4715'. [ 454.975852][T23477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4717'. [ 454.992180][T23475] netlink: 464 bytes leftover after parsing attributes in process `syz.4.4715'. [ 454.992647][T23480] netlink: 'syz.3.4716': attribute type 39 has an invalid length. [ 455.011356][T23477] openvswitch: netlink: IP tunnel dst address not specified [ 455.059376][T23477] netlink: 'syz.2.4717': attribute type 1 has an invalid length. [ 455.195460][T23489] geneve2: entered promiscuous mode [ 455.202202][T22902] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 35392 - 0 [ 455.211619][T22902] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 35392 - 0 [ 455.225599][T22902] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 35392 - 0 [ 455.251515][T22902] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 35392 - 0 [ 455.363415][T23500] netlink: 'syz.4.4723': attribute type 1 has an invalid length. [ 455.384374][T23501] tipc: Enabled bearer , priority 0 [ 455.415824][T23500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.423265][T23501] syzkaller0: entered promiscuous mode [ 455.433948][T23509] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.449037][T23501] syzkaller0: entered allmulticast mode [ 455.509929][T23501] tipc: Resetting bearer [ 455.531269][T23501] netlink: 'syz.0.4724': attribute type 1 has an invalid length. [ 455.543375][T23497] tipc: Resetting bearer [ 455.564167][T23497] tipc: Disabling bearer [ 455.578020][T23516] netlink: 'syz.4.4728': attribute type 1 has an invalid length. [ 455.587553][T23517] netlink: 'syz.4.4728': attribute type 1 has an invalid length. [ 455.608551][T23516] bond8: entered promiscuous mode [ 455.619587][T23516] bond8: entered allmulticast mode [ 455.951357][T23548] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4738'. [ 456.003741][T23551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.096555][T23555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4741'. [ 456.375643][T23571] tipc: Enabled bearer , priority 0 [ 456.425873][T23574] netlink: 'syz.3.4746': attribute type 1 has an invalid length. [ 456.443914][T23571] syzkaller0: entered promiscuous mode [ 456.449769][T23571] syzkaller0: entered allmulticast mode [ 456.456186][T23571] tipc: Resetting bearer [ 456.462467][T23574] s5: renamed from vlan1 [ 456.480873][T23569] tipc: Resetting bearer [ 458.333751][T23569] tipc: Disabling bearer [ 458.679546][T23629] C: renamed from lo [ 458.702402][T23629] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 458.783171][T23641] syzkaller0: entered promiscuous mode [ 458.797766][T23641] syzkaller0: entered allmulticast mode [ 458.947481][T23651] netlink: 'syz.3.4765': attribute type 4 has an invalid length. [ 459.038492][T23656] dvmrp6: entered allmulticast mode [ 459.259680][T23673] syzkaller0: entered promiscuous mode [ 459.267313][T23673] syzkaller0: entered allmulticast mode [ 459.329653][T23676] netlink: 'syz.1.4775': attribute type 10 has an invalid length. [ 459.368031][T23676] `: (slave wlan1): Opening slave failed [ 459.378550][T23676] netlink: 'syz.1.4775': attribute type 11 has an invalid length. [ 459.448092][T23682] syzkaller0: entered promiscuous mode [ 459.454877][T23682] syzkaller0: entered allmulticast mode [ 459.616350][T23703] netlink: 'syz.2.4781': attribute type 13 has an invalid length. [ 459.669459][T23703] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.676623][T23703] bridge0: port 2(bridge_slave_1) entered listening state [ 459.684091][T23703] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.691268][T23703] bridge0: port 1(bridge_slave_0) entered listening state [ 459.721017][T23703] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.732407][T23703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.025350][T23728] team0: Device macvlan2 failed to change mtu [ 460.041122][T23731] tipc: Enabled bearer , priority 0 [ 460.132182][T23736] __nla_validate_parse: 5 callbacks suppressed [ 460.132204][T23736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4795'. [ 460.206197][T23740] syzkaller1: entered promiscuous mode [ 460.212500][T23740] syzkaller1: entered allmulticast mode [ 460.455858][T23766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4803'. [ 460.825849][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4815'. [ 460.838081][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4815'. [ 460.901193][T23793] team0 (unregistering): Port device team_slave_0 removed [ 460.909914][T23793] team0 (unregistering): Port device team_slave_1 removed [ 460.918285][T23793] team0 (unregistering): Port device macvlan2 removed [ 460.952355][T23798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4816'. [ 461.092228][T23814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4821'. [ 461.109937][T23814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4821'. [ 461.122229][T23814] validate_nla: 1 callbacks suppressed [ 461.122245][T23814] netlink: 'syz.2.4821': attribute type 14 has an invalid length. [ 461.159810][T23814] netlink: 'syz.2.4821': attribute type 13 has an invalid length. [ 461.249434][T23823] netlink: 'syz.1.4823': attribute type 1 has an invalid length. [ 461.292505][T23822] netlink: 'syz.1.4823': attribute type 1 has an invalid length. [ 461.360249][T23823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.413149][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4826'. [ 461.446242][T23833] bond4: (slave veth0_to_bond): making interface the new active one [ 461.457866][T23833] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 461.481849][T23844] netlink: 'syz.2.4827': attribute type 1 has an invalid length. [ 461.502150][T23844] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.4827'. [ 461.621121][T23853] veth0: entered promiscuous mode [ 461.630204][T23851] IPv6: sit1: Disabled Multicast RS [ 461.687931][T23858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4830'. [ 462.631587][T23922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.643273][T23922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.652825][T23922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.660863][T23922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.701260][T23924] netlink: 'syz.3.4850': attribute type 1 has an invalid length. [ 462.750728][T23924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 462.774075][T23921] vlan1: entered promiscuous mode [ 462.779595][T23921] bond5: entered promiscuous mode [ 462.784798][T23921] vlan1: entered allmulticast mode [ 462.790320][T23921] bond5: entered allmulticast mode [ 462.811606][T23921] bond5: (slave bridge7): making interface the new active one [ 462.819303][T23921] bridge7: entered promiscuous mode [ 462.824690][T23921] bridge7: entered allmulticast mode [ 462.833828][T23921] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 462.868968][T23931] netlink: 'syz.2.4852': attribute type 3 has an invalid length. [ 463.246062][T23958] netlink: 'syz.0.4860': attribute type 39 has an invalid length. [ 463.306748][T23961] bond3: option lp_interval: invalid value (0) [ 463.313781][T23961] bond3: option lp_interval: allowed values 1 - 2147483647 [ 463.324111][T23961] bond3 (unregistering): Released all slaves [ 463.438525][T23970] bridge0: port 3(syz_tun) entered blocking state [ 463.460333][T23970] bridge0: port 3(syz_tun) entered disabled state [ 463.466994][T23970] syz_tun: entered allmulticast mode [ 463.476374][T23970] syz_tun: entered promiscuous mode [ 464.314618][T24028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.554747][T24040] Cannot find add_set index 0 as target [ 465.131252][T24109] netlink: 'syz.3.4901': attribute type 1 has an invalid length. [ 465.143546][T24109] __nla_validate_parse: 10 callbacks suppressed [ 465.143564][T24109] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4901'. [ 465.182531][T24116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.326584][T24123] delete_channel: no stack [ 465.438046][T24127] syzkaller0: entered promiscuous mode [ 465.447998][T24127] syzkaller0: entered allmulticast mode [ 465.687558][T24140] Unknown metaid 0 dlen 28 [ 465.697178][T24140] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 465.775962][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4914'. [ 465.793282][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4914'. [ 465.842291][T24151] netlink: 'syz.4.4914': attribute type 16 has an invalid length. [ 465.869063][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4914'. [ 466.074546][T24156] openvswitch: netlink: Multiple metadata blocks provided [ 466.613190][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4922'. [ 466.771563][T24201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4926'. [ 467.028791][ T123] block nbd1: Possible stuck request ffff888024ed8000: control (read@0,1024B). Runtime 120 seconds [ 467.040837][ T123] block nbd1: Possible stuck request ffff888024ed8200: control (read@1024,1024B). Runtime 120 seconds [ 467.052598][ T123] block nbd1: Possible stuck request ffff888024ed8400: control (read@2048,1024B). Runtime 120 seconds [ 467.064626][ T123] block nbd1: Possible stuck request ffff888024ed8600: control (read@3072,1024B). Runtime 120 seconds [ 467.189102][T24227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4938'. [ 467.235049][T24227] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4938'. [ 467.250125][T24228] veth9: entered promiscuous mode [ 467.406696][T24245] syzkaller0: entered promiscuous mode [ 467.412833][T24245] syzkaller0: entered allmulticast mode [ 467.445721][T24249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4942'. [ 467.561840][T24252] netlink: 'syz.0.4942': attribute type 1 has an invalid length. [ 467.569751][T24252] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4942'. [ 469.309196][T24277] netlink: 'syz.0.4950': attribute type 1 has an invalid length. [ 469.506837][T24283] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.555934][T24289] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 469.737394][T24313] netlink: 'syz.0.4961': attribute type 11 has an invalid length. [ 469.753852][T24314] xt_bpf: check failed: parse error [ 470.225334][T24294] bond6 (unregistering): (slave dummy0): Releasing backup interface [ 470.238520][T24294] bond6 (unregistering): Released all slaves [ 470.927925][T24368] dvmrp6: entered allmulticast mode [ 471.226654][T24379] ipvlan2: entered promiscuous mode [ 471.232285][T24379] ipvlan2: entered allmulticast mode [ 471.237613][T24379] batadv_slave_1: entered allmulticast mode [ 471.259937][T24379] batman_adv: batadv0: Adding interface: ipvlan2 [ 471.266309][T24379] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.308404][T24379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.326685][T24379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.337001][T24379] batman_adv: batadv0: Interface activated: ipvlan2 [ 471.688657][T24421] netlink: 'syz.4.4988': attribute type 9 has an invalid length. [ 471.891795][T24436] __nla_validate_parse: 6 callbacks suppressed [ 471.891814][T24436] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4991'. [ 472.010311][T24445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4994'. [ 472.029686][T24445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4994'. [ 472.075017][T24453] xt_hashlimit: size too large, truncated to 1048576 [ 472.137133][T24460] xt_hashlimit: size too large, truncated to 1048576 [ 472.234292][T24458] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 472.566132][T24485] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5002'. [ 472.615154][T24490] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5003'. [ 472.855969][T24490] netlink: 'syz.0.5003': attribute type 1 has an invalid length. [ 472.897489][T24499] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.945750][T24508] dvmrp0: entered allmulticast mode [ 472.969450][T24499] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.993675][T24499] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.248507][T24525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.259686][T24523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5014'. [ 473.291380][T24523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5014'. [ 473.320713][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5016'. [ 473.540414][T24541] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 473.573825][T24499] infiniband syz2: set down [ 473.580352][T24499] infiniband syz2: added ip6_vti0 [ 473.586835][T24499] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 473.594706][T24544] netlink: 'syz.4.5020': attribute type 2 has an invalid length. [ 473.595809][ T7817] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.612069][T24542] netlink: 'syz.4.5020': attribute type 2 has an invalid length. [ 473.620844][T24499] infiniband syz2: Couldn't open port 1 [ 473.632042][T24544] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5020'. [ 473.638693][T24542] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5020'. [ 473.706573][T24499] RDS/IB: syz2: added [ 473.721660][T24499] smc: adding ib device syz2 with port count 1 [ 473.737023][T24499] smc: ib device syz2 port 1 has no pnetid [ 473.747855][ T7817] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.758735][T24499] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.779473][T24553] netlink: 'syz.4.5024': attribute type 4 has an invalid length. [ 473.781111][T24554] netlink: 'syz.0.5022': attribute type 13 has an invalid length. [ 473.799471][T24554] netlink: 'syz.0.5022': attribute type 17 has an invalid length. [ 473.957176][T24554] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.971553][T24554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.997971][T24557] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 474.120763][T24499] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.195636][T24572] syzkaller0: entered promiscuous mode [ 474.252963][T24572] syzkaller0: entered allmulticast mode [ 474.536328][T24583] syzkaller0: entered promiscuous mode [ 474.543950][T24583] syzkaller0: entered allmulticast mode [ 474.560095][T24499] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.839191][T24604] tipc: Started in network mode [ 474.844121][T24604] tipc: Node identity d2dc193e48a, cluster identity 4711 [ 474.869871][T24604] tipc: Enabled bearer , priority 0 [ 474.902441][T24610] syzkaller0: entered promiscuous mode [ 474.908232][T24610] syzkaller0: entered allmulticast mode [ 474.916152][T24499] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.933122][T24612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.942064][T24604] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 474.984974][T24604] tipc: Resetting bearer [ 475.009979][T24603] tipc: Resetting bearer [ 475.036054][T24603] tipc: Disabling bearer [ 475.195525][T24622] vxcan2: entered allmulticast mode [ 475.227813][T24623] vxcan2: entered allmulticast mode [ 475.340437][T24499] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.015798][T24673] bond6: entered promiscuous mode [ 476.025710][T24673] bond6: entered allmulticast mode [ 476.032588][T24673] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.044349][T24499] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.110714][T24689] rdma_op ffff888079b739f0 conn xmit_rdma 0000000000000000 [ 476.274406][T24698] xt_hashlimit: overflow, try lower: 3/0 [ 476.291081][T24700] xt_hashlimit: overflow, try lower: 3/0 [ 476.473016][T24664] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 476.498683][T24685] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 476.874798][T24736] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 477.235994][T24772] netlink: 'syz.4.5082': attribute type 39 has an invalid length. [ 477.292081][T24772] syz_tun (unregistering): left allmulticast mode [ 477.299144][T24772] syz_tun (unregistering): left promiscuous mode [ 477.305603][T24772] bridge0: port 3(syz_tun) entered disabled state [ 477.336782][T24783] netlink: 'syz.1.5088': attribute type 1 has an invalid length. [ 477.361663][T24783] netlink: 'syz.1.5088': attribute type 3 has an invalid length. [ 477.379293][T24783] netlink: 'syz.1.5088': attribute type 7 has an invalid length. [ 477.400584][T24784] __nla_validate_parse: 10 callbacks suppressed [ 477.400601][T24784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5088'. [ 477.406257][T24783] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5088'. [ 477.467806][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5091'. [ 477.488989][T24783] NCSI netlink: No device for ifindex 131092 [ 477.505046][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5089'. [ 477.684902][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5094'. [ 477.720855][T24813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5096'. [ 477.832247][T24825] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5099'. [ 477.878365][T24831] validate_nla: 1 callbacks suppressed [ 477.878382][T24831] netlink: 'syz.0.5101': attribute type 10 has an invalid length. [ 477.896140][T24832] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5100'. [ 477.909893][T24832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5100'. [ 478.090820][T24847] netlink: 'syz.2.5104': attribute type 32 has an invalid length. [ 478.114902][T24849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5105'. [ 478.309829][T24865] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 478.327580][T24867] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 478.352114][T24861] netlink: 'syz.1.5108': attribute type 5 has an invalid length. [ 478.640742][T24888] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.647992][T24888] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.810514][T24888] wg1: left promiscuous mode [ 478.819157][T24888] wg1: left allmulticast mode [ 479.234811][T24888] mac80211_hwsim hwsim44 wlan0: left promiscuous mode [ 479.253579][T24888] bond1: left promiscuous mode [ 479.278745][T24888] geneve2: left promiscuous mode [ 479.335747][T24913] bridge0: port 3(ipvlan2) entered blocking state [ 479.342989][T24913] bridge0: port 3(ipvlan2) entered disabled state [ 479.349884][T24913] ipvlan2: entered allmulticast mode [ 479.355244][T24913] bridge0: entered allmulticast mode [ 479.363338][T24913] ipvlan2: left allmulticast mode [ 479.368674][T24913] bridge0: left allmulticast mode [ 479.383774][T22900] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.393653][T22900] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 35392 - 0 [ 479.446028][T22900] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.456608][T22900] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 35392 - 0 [ 479.466392][T22900] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.476402][T22900] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 35392 - 0 [ 479.486052][T22900] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.497121][T22900] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 35392 - 0 [ 479.548801][T24920] netlink: 'syz.4.5125': attribute type 10 has an invalid length. [ 479.722261][T22869] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.740445][T22869] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.759005][T22869] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.768706][T22869] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.824883][T24941] syzkaller0: entered promiscuous mode [ 479.836792][T24941] syzkaller0: entered allmulticast mode [ 480.048538][T24957] netlink: 'syz.1.5139': attribute type 7 has an invalid length. [ 480.599326][T25002] block nbd2: server does not support multiple connections per device. [ 480.609730][T25002] block nbd2: shutting down sockets [ 480.709430][T25013] netlink: 'syz.3.5154': attribute type 1 has an invalid length. [ 480.812415][T25023] netlink: 'syz.3.5158': attribute type 13 has an invalid length. [ 480.956840][T25035] pim6reg: entered allmulticast mode [ 480.964967][T25036] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 480.973908][T25036] syzkaller0: entered promiscuous mode [ 480.980138][T25036] syzkaller0: entered allmulticast mode [ 481.031877][T25028] pim6reg: left allmulticast mode [ 481.078707][T25023] tipc: Enabled bearer , priority 0 [ 481.122723][T25022] tipc: Resetting bearer [ 481.177173][T25022] tipc: Disabling bearer [ 481.227407][T25060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.290975][T25061] netlink: 'syz.2.5168': attribute type 1 has an invalid length. [ 481.387856][T25061] bond3: entered promiscuous mode [ 481.394329][T25061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.467850][T25074] netlink: 'syz.0.5172': attribute type 83 has an invalid length. [ 481.525772][T25075] syzkaller0: entered promiscuous mode [ 481.535170][T25075] syzkaller0: entered allmulticast mode [ 481.553977][T25070] SET target dimension over the limit! [ 481.578323][T25079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.588287][T25079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.069280][T25111] syzkaller0: entered promiscuous mode [ 482.074924][T25111] syzkaller0: entered allmulticast mode [ 482.802219][T25137] batadv_slave_0: left allmulticast mode [ 482.857178][T25173] netlink: 'syz.2.5203': attribute type 29 has an invalid length. [ 482.971232][T25183] __nla_validate_parse: 25 callbacks suppressed [ 482.971251][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5204'. [ 482.987543][T25183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5204'. [ 483.012417][T25180] veth0: entered promiscuous mode [ 483.035146][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5204'. [ 483.046043][T25179] veth0: left promiscuous mode [ 483.052409][T25183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5204'. [ 483.431464][T25212] ip6gre2: entered allmulticast mode [ 483.717445][T25244] xt_hashlimit: invalid interval [ 483.928443][T25260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5228'. [ 484.087434][T25269] netlink: 'syz.2.5232': attribute type 1 has an invalid length. [ 484.121162][T25269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.140835][T25272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5233'. [ 484.350094][T25280] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.5236'. [ 484.608118][T25284] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 484.627358][T25298] ip6gretap0: entered promiscuous mode [ 484.640133][T25298] netlink: 'syz.1.5242': attribute type 10 has an invalid length. [ 484.643731][T25295] syzkaller0: entered promiscuous mode [ 484.659451][T25295] syzkaller0: entered allmulticast mode [ 484.731750][T25298] team0: Device veth1_macvtap failed to register rx_handler [ 484.885316][T25308] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5245'. [ 485.142320][T25316] netlink: 'syz.2.5249': attribute type 1 has an invalid length. [ 485.510057][T25346] x_tables: duplicate underflow at hook 1 [ 485.656261][T25361] netlink: 'syz.0.5259': attribute type 1 has an invalid length. [ 485.668291][T25361] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5259'. [ 485.678145][T25361] netlink: 'syz.0.5259': attribute type 1 has an invalid length. [ 485.686969][T25361] netlink: 'syz.0.5259': attribute type 8 has an invalid length. [ 485.695557][T25361] netlink: 606 bytes leftover after parsing attributes in process `syz.0.5259'. [ 485.763483][T25357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.793704][T25369] geneve0: Caught tx_queue_len zero misconfig [ 485.883847][T25373] ipt_ECN: cannot use operation on non-tcp rule [ 486.102115][T25385] syzkaller1: entered promiscuous mode [ 486.107906][T25385] syzkaller1: entered allmulticast mode [ 486.402325][T25402] syzkaller1: entered promiscuous mode [ 486.404048][T25401] netlink: 'syz.2.5276': attribute type 4 has an invalid length. [ 486.411792][T25402] syzkaller1: entered allmulticast mode [ 486.545648][T25412] netlink: 'syz.4.5280': attribute type 32 has an invalid length. [ 487.114482][T25450] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 487.204292][T25453] netlink: 'syz.3.5290': attribute type 83 has an invalid length. [ 487.241809][T25455] FAULT_INJECTION: forcing a failure. [ 487.241809][T25455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.255108][T25455] CPU: 0 UID: 0 PID: 25455 Comm: syz.1.5291 Not tainted syzkaller #0 PREEMPT(full) [ 487.255131][T25455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 487.255142][T25455] Call Trace: [ 487.255150][T25455] [ 487.255157][T25455] dump_stack_lvl+0xe8/0x150 [ 487.255183][T25455] should_fail_ex+0x412/0x560 [ 487.255208][T25455] _copy_from_user+0x2d/0xb0 [ 487.255232][T25455] ___sys_sendmsg+0x1c6/0x360 [ 487.255252][T25455] ? __lock_acquire+0x6b5/0x2cf0 [ 487.255276][T25455] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.255326][T25455] ? __fget_files+0x2a/0x420 [ 487.255343][T25455] ? __fget_files+0x3a0/0x420 [ 487.255370][T25455] __x64_sys_sendmsg+0x1bd/0x2a0 [ 487.255393][T25455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.255423][T25455] ? __pfx_ksys_write+0x10/0x10 [ 487.255452][T25455] do_syscall_64+0xe2/0xf80 [ 487.255468][T25455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.255482][T25455] ? trace_irq_disable+0x37/0x100 [ 487.255497][T25455] ? clear_bhb_loop+0x60/0xb0 [ 487.255517][T25455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.255533][T25455] RIP: 0033:0x7f97d219aeb9 [ 487.255550][T25455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.255573][T25455] RSP: 002b:00007f97d2fbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.255591][T25455] RAX: ffffffffffffffda RBX: 00007f97d2415fa0 RCX: 00007f97d219aeb9 [ 487.255604][T25455] RDX: 0000000024048000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 487.255614][T25455] RBP: 00007f97d2fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 487.255625][T25455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.255635][T25455] R13: 00007f97d2416038 R14: 00007f97d2415fa0 R15: 00007ffd22b510d8 [ 487.255663][T25455] [ 487.752492][T25483] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 487.778727][T25483] bond0 (unregistering): Released all slaves [ 488.082454][T25512] tipc: Enabling of bearer rejected, failed to enable media [ 488.278807][T25523] __nla_validate_parse: 16 callbacks suppressed [ 488.287835][T25523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5312'. [ 488.297806][T25523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5312'. [ 488.322649][T25523] openvswitch: netlink: Flow actions attr not present in new flow. [ 488.531667][T25539] netlink: 'syz.2.5318': attribute type 11 has an invalid length. [ 488.548997][T25539] netlink: 'syz.2.5318': attribute type 4 has an invalid length. [ 488.565488][T25539] netlink: 199748 bytes leftover after parsing attributes in process `syz.2.5318'. [ 488.838759][T25559] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5325'. [ 489.010881][T25566] syzkaller0: entered promiscuous mode [ 489.027707][T25566] syzkaller0: entered allmulticast mode [ 489.535718][T25601] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5339'. [ 489.626312][T25606] validate_nla: 2 callbacks suppressed [ 489.626330][T25606] netlink: 'syz.4.5339': attribute type 1 has an invalid length. [ 489.789154][T25615] lo: entered promiscuous mode [ 489.821752][T25615] netlink: 'syz.0.5341': attribute type 2 has an invalid length. [ 489.855564][T25618] netlink: 'syz.0.5341': attribute type 1 has an invalid length. [ 489.864059][T25615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.887322][T25622] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 490.533317][T25655] netlink: 'syz.1.5353': attribute type 1 has an invalid length. [ 490.704492][T25655] bond0: entered promiscuous mode [ 490.748383][T25655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.808065][T25673] bond0: (slave bridge6): making interface the new active one [ 490.824739][T25673] bridge6: entered promiscuous mode [ 490.846044][T25673] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 490.929363][T25681] ip6_vti0 speed is unknown, defaulting to 1000 [ 490.990236][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5359'. [ 491.041980][T25694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5359'. [ 491.073333][T25694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5359'. [ 491.217493][T25689] bond0: entered promiscuous mode [ 491.249518][T25689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.275954][T25696] bond0: (slave xfrm1): refused to change device type [ 491.579188][T25711] netlink: 'syz.2.5365': attribute type 3 has an invalid length. [ 491.635924][T25715] openvswitch: netlink: Missing valid actions attribute. [ 491.643271][T25715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.753027][T25723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5370'. [ 491.773356][T25723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5370'. [ 491.815370][T25723] vxcan0: entered allmulticast mode [ 492.040519][T25735] siw: device registration error -23 [ 492.343760][T25756] ip6tnl0: Caught tx_queue_len zero misconfig [ 492.683499][T25780] nbd: couldn't find a device at index 0 [ 492.972343][T25797] netem: invalid attributes len -24 [ 492.977582][T25797] netem: change failed [ 493.208294][T25776] infiniband : set down [ 493.228929][T25776] infiniband : added ipvlan0 [ 493.277530][T25776] RDS/IB: : added [ 493.289004][T25776] smc: adding ib device  with port count 1 [ 493.319258][T25776] smc: ib device  port 1 has no pnetid [ 493.412335][T25831] __nla_validate_parse: 11 callbacks suppressed [ 493.412353][T25831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5399'. [ 493.488412][T25829] tipc: Enabled bearer , priority 0 [ 493.502333][T25829] syzkaller0: entered promiscuous mode [ 493.507833][T25829] syzkaller0: entered allmulticast mode [ 493.533127][T25829] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 493.570506][T25830] tipc: Resetting bearer [ 493.602196][T25829] sctp: [Deprecated]: syz.4.5402 (pid 25829) Use of int in max_burst socket option deprecated. [ 493.602196][T25829] Use struct sctp_assoc_value instead [ 493.650438][T25835] netlink: 'syz.0.5403': attribute type 21 has an invalid length. [ 493.658343][T25830] sctp: [Deprecated]: syz.4.5402 (pid 25830) Use of int in max_burst socket option deprecated. [ 493.658343][T25830] Use struct sctp_assoc_value instead [ 493.690946][T25835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5403'. [ 493.843747][T25847] netlink: 'syz.3.5408': attribute type 1 has an invalid length. [ 493.863910][T25846] netlink: 'syz.3.5408': attribute type 1 has an invalid length. [ 493.881370][T25843] xt_CT: No such helper "syz1" [ 493.948381][T25857] netlink: 'syz.3.5410': attribute type 13 has an invalid length. [ 493.970048][T25857] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5410'. [ 494.031556][T25862] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.5412'. [ 494.049616][T25862] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.5412'. [ 494.082016][T25862] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.5412'. [ 494.104083][T25862] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.5412'. [ 494.126356][T25867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5413'. [ 494.228518][T25822] tipc: Resetting bearer [ 494.294434][T25822] tipc: Disabling bearer [ 494.343759][T25876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5413'. [ 494.486137][T25878] FAULT_INJECTION: forcing a failure. [ 494.486137][T25878] name failslab, interval 1, probability 0, space 0, times 1 [ 494.509187][T25878] CPU: 1 UID: 0 PID: 25878 Comm: syz.1.5417 Not tainted syzkaller #0 PREEMPT(full) [ 494.509211][T25878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 494.509221][T25878] Call Trace: [ 494.509228][T25878] [ 494.509234][T25878] dump_stack_lvl+0xe8/0x150 [ 494.509260][T25878] should_fail_ex+0x412/0x560 [ 494.509282][T25878] should_failslab+0xa8/0x100 [ 494.509303][T25878] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 494.509327][T25878] ? __alloc_skb+0x1d7/0x390 [ 494.509343][T25878] ? __local_bh_enable_ip+0xd0/0x130 [ 494.509370][T25878] ? __alloc_skb+0x193/0x390 [ 494.509388][T25878] __alloc_skb+0x1d7/0x390 [ 494.509408][T25878] netlink_ack+0x146/0xa50 [ 494.509424][T25878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.509442][T25878] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 494.509460][T25878] ? __pfx_nl80211_post_doit+0x10/0x10 [ 494.509483][T25878] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.509509][T25878] netlink_rcv_skb+0x2b6/0x4b0 [ 494.509526][T25878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.509547][T25878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.509559][T25878] ? genl_rcv+0x19/0x40 [ 494.509593][T25878] ? down_read+0x272/0x2e0 [ 494.509609][T25878] ? genl_rcv+0xd/0x40 [ 494.509629][T25878] genl_rcv+0x28/0x40 [ 494.509647][T25878] netlink_unicast+0x80f/0x9b0 [ 494.509677][T25878] ? __pfx_netlink_unicast+0x10/0x10 [ 494.509699][T25878] ? __alloc_skb+0x193/0x390 [ 494.509718][T25878] ? netlink_sendmsg+0x650/0xb40 [ 494.509731][T25878] ? skb_put+0x11b/0x210 [ 494.509753][T25878] netlink_sendmsg+0x813/0xb40 [ 494.509780][T25878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.509800][T25878] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.509822][T25878] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.509842][T25878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.509858][T25878] ____sys_sendmsg+0xa68/0xad0 [ 494.509879][T25878] ? __might_fault+0xaf/0x130 [ 494.509908][T25878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.509935][T25878] ? import_iovec+0x73/0xa0 [ 494.509960][T25878] ___sys_sendmsg+0x2a5/0x360 [ 494.509980][T25878] ? __lock_acquire+0x6b5/0x2cf0 [ 494.510005][T25878] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.510062][T25878] ? __fget_files+0x2a/0x420 [ 494.510079][T25878] ? __fget_files+0x3a0/0x420 [ 494.510106][T25878] __x64_sys_sendmsg+0x1bd/0x2a0 [ 494.510129][T25878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.510159][T25878] ? __pfx_ksys_write+0x10/0x10 [ 494.510194][T25878] do_syscall_64+0xe2/0xf80 [ 494.510211][T25878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.510227][T25878] ? trace_irq_disable+0x37/0x100 [ 494.510243][T25878] ? clear_bhb_loop+0x60/0xb0 [ 494.510263][T25878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.510279][T25878] RIP: 0033:0x7f97d219aeb9 [ 494.510295][T25878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.510309][T25878] RSP: 002b:00007f97d2fbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.510328][T25878] RAX: ffffffffffffffda RBX: 00007f97d2415fa0 RCX: 00007f97d219aeb9 [ 494.510340][T25878] RDX: 0000000024048000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 494.510359][T25878] RBP: 00007f97d2fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 494.510370][T25878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.510380][T25878] R13: 00007f97d2416038 R14: 00007f97d2415fa0 R15: 00007ffd22b510d8 [ 494.510411][T25878] [ 494.612209][T25887] netlink: 'syz.4.5419': attribute type 5 has an invalid length. [ 494.832476][T25886] bridge0: port 3(ipvlan3) entered blocking state [ 494.859015][T25887] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5419'. [ 494.871600][T25886] bridge0: port 3(ipvlan3) entered disabled state [ 494.891768][T25886] ipvlan3: entered allmulticast mode [ 494.897106][T25886] bridge0: entered allmulticast mode [ 494.904912][T25886] ipvlan3: left allmulticast mode [ 494.911237][T25886] bridge0: left allmulticast mode [ 495.172662][T25896] 8021q: adding VLAN 0 to HW filter on device bond7 [ 495.288340][ T30] audit: type=1107 audit(1769881579.947:42): pid=25906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 495.430398][T25912] team0 (unregistering): Port device team_slave_0 removed [ 495.447837][T25912] team0 (unregistering): Port device team_slave_1 removed [ 495.529435][T25926] xt_hashlimit: overflow, try lower: 3/0 [ 495.685054][T25925] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 496.087404][T25958] vcan0: entered allmulticast mode [ 496.134127][T25960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.236213][T25970] netlink: 'syz.2.5446': attribute type 39 has an invalid length. [ 496.548045][T25982] netlink: 'syz.4.5451': attribute type 83 has an invalid length. [ 496.725368][T25999] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 496.746926][T26001] syzkaller0: entered promiscuous mode [ 496.771474][T26001] syzkaller0: entered allmulticast mode [ 496.917966][T26013] syzkaller0: entered promiscuous mode [ 496.923628][T26013] syzkaller0: entered allmulticast mode [ 496.978364][T26016] syzkaller0: entered promiscuous mode [ 496.984320][T26016] syzkaller0: entered allmulticast mode [ 497.062530][T26024] netlink: 'syz.1.5463': attribute type 1 has an invalid length. [ 497.105512][ T123] block nbd1: Possible stuck request ffff888024ed8000: control (read@0,1024B). Runtime 150 seconds [ 497.116415][ T123] block nbd1: Possible stuck request ffff888024ed8200: control (read@1024,1024B). Runtime 150 seconds [ 497.127960][ T123] block nbd1: Possible stuck request ffff888024ed8400: control (read@2048,1024B). Runtime 150 seconds [ 497.139704][ T123] block nbd1: Possible stuck request ffff888024ed8600: control (read@3072,1024B). Runtime 150 seconds [ 497.485662][T26047] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.527614][T26050] syzkaller0: entered promiscuous mode [ 497.533600][T26050] syzkaller0: entered allmulticast mode [ 497.853881][T26070] netlink: 'syz.0.5479': attribute type 18 has an invalid length. [ 497.866733][T26070] netlink: 'syz.0.5479': attribute type 18 has an invalid length. [ 497.917201][T26077] syzkaller0: entered promiscuous mode [ 497.928969][T26077] syzkaller0: entered allmulticast mode [ 498.192544][T26085] syzkaller0: entered promiscuous mode [ 498.216842][T26085] syzkaller0: entered allmulticast mode [ 498.395545][T26103] netlink: 'syz.3.5488': attribute type 1 has an invalid length. [ 498.445342][T26104] syzkaller0: entered promiscuous mode [ 498.451341][T26104] syzkaller0: entered allmulticast mode [ 498.512659][T26103] bond8: (slave ip6gretap1): making interface the new active one [ 498.521699][T26103] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 498.588555][T26107] __nla_validate_parse: 12 callbacks suppressed [ 498.588572][T26107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5489'. [ 498.989417][T26126] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 499.053959][T26132] batman_adv: batadv0: Adding interface: dummy0 [ 499.069173][T26132] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.122437][T26132] batman_adv: batadv0: Interface activated: dummy0 [ 499.154263][T26134] batadv0: mtu less than device minimum [ 499.170740][T26134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.182530][T26134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.194272][T26134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.205990][T26134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.217779][T26134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.229579][T26134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.241518][T26134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.253183][T26134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.264827][T26134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.382666][T26152] bond5: Unable to set up delay as MII monitoring is disabled [ 499.435603][T26152] bond5 (unregistering): Released all slaves [ 499.476281][T26165] netlink: 81 bytes leftover after parsing attributes in process `syz.4.5506'. [ 499.605400][T26154] syzkaller0: entered promiscuous mode [ 499.611134][T26154] syzkaller0: entered allmulticast mode [ 499.639379][T26178] netlink: 'syz.3.5507': attribute type 2 has an invalid length. [ 499.647215][T26178] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5507'. [ 499.660380][T26176] syzkaller0: entered promiscuous mode [ 499.665885][T26176] syzkaller0: entered allmulticast mode [ 499.676864][T26176] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 499.740683][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5510'. [ 499.777717][T26186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5511'. [ 499.868369][T26192] netlink: 'syz.0.5508': attribute type 63 has an invalid length. [ 499.925772][T26197] netlink: 'syz.0.5508': attribute type 63 has an invalid length. [ 501.588178][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.729017][T26187] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5508'. [ 501.741682][T26187] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5508'. [ 501.752212][T26187] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5508'. [ 501.766309][T26196] veth0_vlan: left promiscuous mode [ 501.772567][T26196] veth0_vlan: entered promiscuous mode [ 501.897692][T26221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5519'. [ 501.965219][T26227] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 502.001415][T26230] x_tables: duplicate underflow at hook 1 [ 502.170059][T26240] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5522'. [ 502.282666][T26248] syzkaller0: entered promiscuous mode [ 502.284723][T26254] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004 [ 502.299712][T26248] syzkaller0: entered allmulticast mode [ 502.318319][T26253] xt_l2tp: v2 tid > 0xffff: 1114244 [ 502.504983][T26263] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 502.674842][T26278] team0: entered promiscuous mode [ 502.680446][T26278] team_slave_0: entered promiscuous mode [ 502.686431][T26278] team_slave_1: entered promiscuous mode [ 502.698098][T26278] `: entered promiscuous mode [ 502.710178][T26284] netlink: 'syz.2.5538': attribute type 11 has an invalid length. [ 502.712093][T26278] bond_slave_0: entered promiscuous mode [ 502.724610][T26278] bond_slave_1: entered promiscuous mode [ 502.733983][T26278] bridge_slave_1: entered promiscuous mode [ 502.761359][T26278] geneve0: entered promiscuous mode [ 502.790741][T26278] team0: left promiscuous mode [ 502.799828][T26278] team_slave_0: left promiscuous mode [ 502.806427][T26278] team_slave_1: left promiscuous mode [ 502.813066][T26278] `: left promiscuous mode [ 502.817603][T26278] bond_slave_0: left promiscuous mode [ 502.825253][T26278] bond_slave_1: left promiscuous mode [ 502.833368][T26278] bridge_slave_1: left promiscuous mode [ 502.839719][T26278] geneve0: left promiscuous mode [ 502.943836][T26290] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 502.968711][T26290] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 502.987548][T26296] "syz.1.5544" (26296) uses obsolete ecb(arc4) skcipher [ 503.098319][T26302] syzkaller0: entered promiscuous mode [ 503.106735][T26302] syzkaller0: entered allmulticast mode [ 503.234458][T26311] netlink: 'syz.0.5549': attribute type 12 has an invalid length. [ 503.557411][T26333] pim6reg527: entered allmulticast mode [ 503.602958][T26333] veth5: entered promiscuous mode [ 503.711859][T26343] __nla_validate_parse: 10 callbacks suppressed [ 503.711877][T26343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5561'. [ 503.897418][T26360] syzkaller0: entered promiscuous mode [ 503.906389][T26360] syzkaller0: entered allmulticast mode [ 504.064862][T22869] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.093858][T22869] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.110910][T22869] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.121491][T22869] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.311331][T26387] netlink: 'syz.3.5570': attribute type 33 has an invalid length. [ 504.473643][T26406] tipc: New replicast peer: 255.255.255.255 [ 504.480719][T26406] tipc: Enabled bearer , priority 10 [ 504.602391][T26409] netlink: 'syz.1.5577': attribute type 2 has an invalid length. [ 504.611538][T26409] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5577'. [ 504.752656][T26409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5577'. [ 504.843277][T26417] syzkaller0: entered promiscuous mode [ 504.849405][T26417] syzkaller0: entered allmulticast mode [ 505.183054][T26425] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 505.242382][T26443] syzkaller0: entered promiscuous mode [ 505.248144][T26443] syzkaller0: entered allmulticast mode [ 505.327982][T26448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'. [ 505.342010][T26448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5589'. [ 505.352646][T26452] netlink: 'syz.1.5590': attribute type 3 has an invalid length. [ 505.353235][T26448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5589'. [ 505.375829][T26448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5589'. [ 505.599340][T26465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5593'. [ 505.780066][T26478] syzkaller0: entered promiscuous mode [ 505.785642][T26478] syzkaller0: entered allmulticast mode [ 505.851142][T26480] nbd: must specify a size in bytes for the device [ 505.944715][T26480] nbd: must specify a size in bytes for the device [ 506.003456][T26491] netlink: 'syz.0.5602': attribute type 19 has an invalid length. [ 506.030351][T26491] netlink: 'syz.0.5602': attribute type 19 has an invalid length. [ 506.065877][T26498] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5604'. [ 506.374454][T26516] syzkaller0: entered promiscuous mode [ 506.387589][T26516] syzkaller0: entered allmulticast mode [ 506.522734][T26524] netlink: 'syz.2.5613': attribute type 21 has an invalid length. [ 506.553094][T26524] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 506.571307][T26524] bond5 (unregistering): Released all slaves [ 506.609733][T26527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5614'. [ 506.784091][T26541] net_ratelimit: 14 callbacks suppressed [ 506.784111][T26541] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 506.824752][T26543] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 506.844418][T26542] syzkaller0: entered promiscuous mode [ 506.863852][T26542] syzkaller0: entered allmulticast mode [ 506.977359][T26549] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 506.997476][T26549] bond3 (unregistering): Released all slaves [ 507.018877][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5440 ms [ 507.027165][ C0] lec:lec_tx_timeout: lec0 [ 507.032236][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 507.072695][T26566] syzkaller0: entered promiscuous mode [ 507.081657][T26566] syzkaller0: entered allmulticast mode [ 507.363026][T26583] netlink: 'syz.3.5633': attribute type 7 has an invalid length. [ 507.549913][T26595] ip6_vti0 speed is unknown, defaulting to 1000 [ 508.015934][T26598] netlink: 'syz.1.5635': attribute type 1 has an invalid length. [ 508.072162][T26598] bond5: entered promiscuous mode [ 508.077567][T26598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.267897][T26602] bond5: (slave bridge7): making interface the new active one [ 508.278746][T26602] bridge7: entered promiscuous mode [ 508.285707][T26602] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 508.362218][T26613] syzkaller0: entered promiscuous mode [ 508.367735][T26613] syzkaller0: entered allmulticast mode [ 508.387100][T26618] nbd: must specify a size in bytes for the device [ 508.721332][T26631] __nla_validate_parse: 10 callbacks suppressed [ 508.721353][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5644'. [ 508.829486][T26640] syzkaller1: entered promiscuous mode [ 508.845379][T26640] syzkaller1: entered allmulticast mode [ 509.103786][T26650] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5650'. [ 509.202863][T26658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5652'. [ 509.207333][T26659] netlink: 'syz.1.5651': attribute type 12 has an invalid length. [ 509.221068][T26659] netlink: 'syz.1.5651': attribute type 29 has an invalid length. [ 509.249174][T26659] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5651'. [ 509.271393][T26659] netlink: 'syz.1.5651': attribute type 2 has an invalid length. [ 509.283298][T26659] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5651'. [ 509.293176][T26661] delete_channel: no stack [ 509.307852][T26667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5654'. [ 509.375250][T26669] syzkaller0: entered promiscuous mode [ 509.381156][T26669] syzkaller0: entered allmulticast mode [ 509.402590][T26671] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 509.435465][T26671] sch_fq: defrate 0 ignored. [ 509.502745][T26674] veth9: entered allmulticast mode [ 509.585162][T26681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5659'. [ 509.595260][T26681] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5659'. [ 509.606397][T26681] netlink: 'syz.3.5659': attribute type 6 has an invalid length. [ 509.635481][T26681] netlink: 'syz.3.5659': attribute type 5 has an invalid length. [ 509.643799][T26681] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5659'. [ 509.784168][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5664'. [ 509.793170][T26694] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 509.950214][T26707] syzkaller0: entered promiscuous mode [ 509.955799][T26707] syzkaller0: entered allmulticast mode [ 510.173452][T26724] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 510.208055][T26726] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 510.801703][T26751] xt_CT: No such helper "syz1" [ 511.011100][T26767] syzkaller0: entered promiscuous mode [ 511.016605][T26767] syzkaller0: entered allmulticast mode [ 511.219524][T26784] syzkaller0: entered promiscuous mode [ 511.225401][T26784] syzkaller0: entered allmulticast mode [ 511.405068][T26796] syzkaller0: entered allmulticast mode [ 511.565641][T26806] syzkaller0: entered promiscuous mode [ 511.574029][T26806] syzkaller0: entered allmulticast mode [ 511.661853][T26814] netlink: 'syz.1.5700': attribute type 1 has an invalid length. [ 511.819157][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 511.851584][T26822] syzkaller0: entered promiscuous mode [ 511.938952][T26822] syzkaller0: entered allmulticast mode [ 512.038955][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 512.047153][ C0] lec:lec_tx_timeout: lec0 [ 512.505868][T26848] Unsupported ieee802154 address type: 0 [ 512.700409][T26855] syzkaller0: entered promiscuous mode [ 512.705898][T26855] syzkaller0: entered allmulticast mode [ 513.110523][T26893] batman_adv: batadv0: Interface deactivated: dummy0 [ 513.132003][T26893] batman_adv: batadv0: Removing interface: dummy0 [ 513.161411][T26893] bridge_slave_0: left allmulticast mode [ 513.173596][T26893] bridge_slave_0: left promiscuous mode [ 513.186199][T26893] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.207658][T26893] bridge_slave_1: left allmulticast mode [ 513.214012][T26893] bridge_slave_1: left promiscuous mode [ 513.221268][T26893] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.237339][T26893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.257454][T26893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.272671][T26893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 513.290784][T26897] bridge_slave_0: entered promiscuous mode [ 513.607132][T26929] syzkaller0: entered promiscuous mode [ 513.615449][T26929] syzkaller0: entered allmulticast mode [ 513.714444][T26939] netlink: 'syz.3.5733': attribute type 1 has an invalid length. [ 513.735556][T26937] vcan0: tx address claim with dest, not broadcast [ 513.795864][T26939] 8021q: adding VLAN 0 to HW filter on device bond9 [ 513.811827][T26940] vlan3: entered allmulticast mode [ 513.817755][T26940] veth1: entered allmulticast mode [ 513.826301][T26940] bond9: (slave vlan3): Opening slave failed [ 513.963759][T26951] ip6_vti0 speed is unknown, defaulting to 1000 [ 513.998199][T26961] __nla_validate_parse: 16 callbacks suppressed [ 513.998218][T26961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5738'. [ 514.573749][T26984] netlink: 'syz.2.5746': attribute type 10 has an invalid length. [ 514.594512][T26981] syzkaller0: entered promiscuous mode [ 514.610751][T26981] syzkaller0: entered allmulticast mode [ 514.630124][T26984] veth0_vlan: left promiscuous mode [ 514.637564][T26984] veth0_vlan: entered promiscuous mode [ 514.646129][T26984] team0: Device veth0_vlan failed to register rx_handler [ 514.863499][T26991] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5749'. [ 514.895891][T26993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5749'. [ 514.960912][T26991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5749'. [ 514.994556][T26993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5749'. [ 515.270380][T27010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5754'. [ 515.587479][T27032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.608279][T27032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5760'. [ 515.622633][T27029] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5757'. [ 515.659406][T27035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5761'. [ 515.676464][T27027] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.134028][T27048] netlink: 'syz.2.5766': attribute type 21 has an invalid length. [ 516.150702][T27051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5767'. [ 516.849149][T27092] netlink: 'syz.0.5778': attribute type 4 has an invalid length. [ 516.964839][T27093] tipc: Enabled bearer , priority 0 [ 516.990811][T27093] syzkaller0: entered promiscuous mode [ 517.006658][T27093] syzkaller0: entered allmulticast mode [ 517.078189][T27093] tipc: Resetting bearer [ 517.167174][T27091] tipc: Resetting bearer [ 517.198159][T27091] tipc: Disabling bearer [ 517.350477][T27122] netlink: 'syz.3.5786': attribute type 3 has an invalid length. [ 517.464773][T27128] tunl0: Caught tx_queue_len zero misconfig [ 517.644770][T27136] syzkaller0: entered promiscuous mode [ 517.664900][T27136] syzkaller0: entered allmulticast mode [ 517.680947][T27137] nbd: couldn't find a device at index 0 [ 518.333979][T27183] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.430923][T27189] netlink: 'syz.3.5802': attribute type 33 has an invalid length. [ 518.501862][T27189] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 518.514747][T27189] bond10 (unregistering): Released all slaves [ 518.735993][T27205] netlink: 'syz.4.5805': attribute type 23 has an invalid length. [ 518.823847][T27208] netlink: 'syz.1.5806': attribute type 1 has an invalid length. [ 518.863653][T27208] netlink: 'syz.1.5806': attribute type 2 has an invalid length. [ 518.959325][T27207] netlink: 'syz.1.5806': attribute type 1 has an invalid length. [ 518.977050][T27207] netlink: 'syz.1.5806': attribute type 2 has an invalid length. [ 519.096185][T27223] __nla_validate_parse: 13 callbacks suppressed [ 519.096205][T27223] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5809'. [ 519.211963][T27231] netlink: 'syz.4.5811': attribute type 10 has an invalid length. [ 519.344080][T27241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5813'. [ 519.576907][T27252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.936951][T27267] bridge_slave_1: entered allmulticast mode [ 520.030435][T27277] syzkaller0: entered promiscuous mode [ 520.041068][T27277] syzkaller0: entered allmulticast mode [ 520.215072][T27289] openvswitch: netlink: Missing valid actions attribute. [ 520.246490][T27289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.263201][T27286] syzkaller0: entered promiscuous mode [ 520.268755][T27286] syzkaller0: entered allmulticast mode [ 520.285200][T27286] netlink: 'syz.1.5825': attribute type 11 has an invalid length. [ 520.318337][T27286] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5825'. [ 520.433434][T27294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5827'. [ 520.544816][T27298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 520.626707][T27298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 520.811711][T27314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5836'. [ 520.943252][T27324] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5840'. [ 520.979863][T27324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5840'. [ 520.999322][T27324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5840'. [ 521.222922][T27339] netlink: 'syz.1.5841': attribute type 12 has an invalid length. [ 521.275479][T27339] bond6: option primary_reselect: invalid value (255) [ 521.286062][T27339] bond6 (unregistering): Released all slaves [ 521.382383][T27347] netlink: 'syz.0.5845': attribute type 8 has an invalid length. [ 521.592355][T27345] syzkaller1: entered allmulticast mode [ 521.864723][T27364] netlink: 'syz.4.5850': attribute type 4 has an invalid length. [ 522.125977][T27379] sock: sock_timestamping_bind_phc: sock not bind to device [ 522.134479][T27379] syzkaller0: entered promiscuous mode [ 522.141910][T27379] syzkaller0: entered allmulticast mode [ 522.286096][T27390] pimreg: entered allmulticast mode [ 522.355205][T27393] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 522.687618][T27426] syzkaller0: entered promiscuous mode [ 522.704622][T27426] syzkaller0: entered allmulticast mode [ 522.821255][T27431] netlink: 'syz.4.5874': attribute type 10 has an invalid length. [ 523.206871][T27451] syzkaller0: entered promiscuous mode [ 523.212903][T27451] syzkaller0: entered allmulticast mode [ 523.234898][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 523.248213][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 523.260795][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 523.286730][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 523.306317][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 523.372141][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 523.393555][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 523.401333][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 523.412756][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 523.421972][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 523.572615][T27456] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.986165][T27486] block nbd1: NBD_DISCONNECT [ 523.993195][T27486] block nbd1: Send disconnect failed -32 [ 524.002520][T27496] xt_TPROXY: Can be used only with -p tcp or -p udp [ 524.004298][T27486] block nbd1: shutting down sockets [ 524.036025][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.045913][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 524.055747][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.065317][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 524.073252][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.082861][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 524.090681][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.100289][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 524.138413][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.156126][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 524.179335][ T5841] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.189456][ T5841] Buffer I/O error on dev nbd1, logical block 1, async page read [ 524.197532][ T5841] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.217840][ T5841] Buffer I/O error on dev nbd1, logical block 2, async page read [ 524.240866][ T5841] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.267067][ T5841] Buffer I/O error on dev nbd1, logical block 3, async page read [ 524.285746][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.359196][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 524.367032][ T5841] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.395216][ T5841] Buffer I/O error on dev nbd1, logical block 1, async page read [ 524.411623][ T5841] ldm_validate_partition_table(): Disk read failed. [ 524.427003][ T5841] Dev nbd1: unable to read RDB block 0 [ 524.449424][ T5841] nbd1: unable to read partition table [ 524.466668][T27521] __nla_validate_parse: 10 callbacks suppressed [ 524.466686][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5897'. [ 524.485959][ T5841] ldm_validate_partition_table(): Disk read failed. [ 524.502901][ T5841] Dev nbd1: unable to read RDB block 0 [ 524.532663][ T5841] nbd1: unable to read partition table [ 524.613983][T27525] netlink: 17916 bytes leftover after parsing attributes in process `syz.0.5899'. [ 524.757416][T27538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.764727][T27538] IPv6: NLM_F_CREATE should be set when creating new route [ 524.772029][T27538] IPv6: NLM_F_CREATE should be set when creating new route [ 524.779379][T27538] IPv6: NLM_F_CREATE should be set when creating new route [ 524.789755][T27537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.942928][T27554] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5907'. [ 524.983600][T27560] validate_nla: 3 callbacks suppressed [ 524.983618][T27560] netlink: 'syz.1.5908': attribute type 1 has an invalid length. [ 525.063083][T27565] Bluetooth: MGMT ver 1.23 [ 525.203591][T27456] chnl_net:caif_netlink_parms(): no params data found [ 525.476847][T27456] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.491341][T27456] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.499646][ T5839] Bluetooth: hci0: command tx timeout [ 525.519471][T27456] bridge_slave_0: entered allmulticast mode [ 525.533204][T27456] bridge_slave_0: entered promiscuous mode [ 525.551231][T27456] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.558499][T27456] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.566376][T27456] bridge_slave_1: entered allmulticast mode [ 525.576921][T27456] bridge_slave_1: entered promiscuous mode [ 525.668086][T27456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.703239][T27456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.711723][T27599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5920'. [ 525.785114][T27456] team0: Port device team_slave_0 added [ 525.802364][T27456] team0: Port device team_slave_1 added [ 525.875153][T27456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.909407][T27612] netlink: 'syz.1.5922': attribute type 10 has an invalid length. [ 525.925039][T27456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.988973][T27456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.011693][T27456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.018653][T27456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.065376][T27456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.106497][T27612] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.177360][T27628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5927'. [ 526.218673][T27456] hsr_slave_0: entered promiscuous mode [ 526.226682][T27456] hsr_slave_1: entered promiscuous mode [ 526.239130][T27456] debugfs: 'hsr0' already exists in 'hsr' [ 526.247039][T27456] Cannot create hsr debugfs directory [ 526.262131][T27632] netlink: 'syz.2.5929': attribute type 1 has an invalid length. [ 526.311344][T27632] bond5: entered promiscuous mode [ 526.316768][T27632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 526.332089][T27638] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 526.344980][T27638] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 526.355410][T27638] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 526.805354][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5937'. [ 526.805465][T27666] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5937'. [ 526.911480][T27666] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5937'. [ 526.971341][T27679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5938'. [ 527.029392][T27666] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5937'. [ 527.143895][T27688] netlink: 'syz.2.5941': attribute type 10 has an invalid length. [ 527.167839][T27672] bond3 (unregistering): Released all slaves [ 527.227227][T27680] bridge_slave_1: left allmulticast mode [ 527.241721][T27680] bridge_slave_1: left promiscuous mode [ 527.266123][T27680] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.285899][T27680] bridge_slave_0: left allmulticast mode [ 527.293844][T27680] bridge_slave_0: left promiscuous mode [ 527.300443][T27680] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.590085][ T5839] Bluetooth: hci0: command tx timeout [ 527.630851][T27707] only policy match revision 0 supported [ 527.630865][T27707] unable to load match [ 527.670226][T27707] netlink: 'syz.4.5944': attribute type 10 has an invalid length. [ 527.871129][T27718] netlink: 'syz.1.5946': attribute type 29 has an invalid length. [ 527.912885][T27718] netlink: 'syz.1.5946': attribute type 29 has an invalid length. [ 527.952419][T27727] nbd: couldn't find a device at index 0 [ 527.964604][T27729] bridge0: port 3(veth0_to_bridge) entered blocking state [ 527.973669][T27729] bridge0: port 3(veth0_to_bridge) entered disabled state [ 527.982388][T27729] veth0_to_bridge: entered allmulticast mode [ 527.990712][T27729] veth0_to_bridge: entered promiscuous mode [ 528.004087][T27730] : entered promiscuous mode [ 528.063345][T27732] netlink: 'syz.4.5951': attribute type 2 has an invalid length. [ 528.091835][T27456] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 528.124124][T27456] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 528.134440][T27737] netlink: 'syz.2.5952': attribute type 11 has an invalid length. [ 528.228289][T27742] netlink: 'syz.1.5956': attribute type 10 has an invalid length. [ 528.237549][T27456] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 528.285046][T27742] team0: Port device dummy0 added [ 528.299317][T27456] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 528.342856][T27746] netlink: 'syz.2.5958': attribute type 1 has an invalid length. [ 528.427015][T27456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.485500][T27456] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.509811][T27759] C: renamed from lo [ 528.523364][T27759] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 528.557038][T22891] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.564293][T22891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.628343][T22891] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.635791][T22891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.726245][T27771] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.747519][T27771] bond0: (slave team0): Enslaving as an active interface with an up link [ 529.156148][T27456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.274411][T27456] veth0_vlan: entered promiscuous mode [ 529.304624][T27798] xt_ecn: cannot match TCP bits for non-tcp packets [ 529.323121][T27456] veth1_vlan: entered promiscuous mode [ 529.390084][T27456] veth0_macvtap: entered promiscuous mode [ 529.403702][T27456] veth1_macvtap: entered promiscuous mode [ 529.449576][T27456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.491081][T27456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.522234][T22891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.565250][T22891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.609750][T22891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.626139][T22891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.664747][ T5839] Bluetooth: hci0: command tx timeout [ 529.936605][T27826] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 529.979785][T27826] syzkaller1: linktype set to 823 [ 529.999260][T27828] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 530.009568][T22870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.028870][T22870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.117390][T22900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.136916][T22900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.514794][T27859] validate_nla: 2 callbacks suppressed [ 530.514814][T27859] netlink: 'syz.3.5979': attribute type 1 has an invalid length. [ 530.650390][T27871] __nla_validate_parse: 17 callbacks suppressed [ 530.650411][T27871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5980'. [ 530.735252][T27875] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5983'. [ 531.234380][T27910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5991'. [ 531.367081][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 531.378093][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 531.389511][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 531.398692][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 531.407570][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 531.409027][T27922] netlink: 'syz.1.5992': attribute type 2 has an invalid length. [ 531.481610][T27922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5992'. [ 531.591078][T27929] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5994'. [ 531.627301][T27917] ip6_vti0 speed is unknown, defaulting to 1000 [ 531.639758][T27929] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5994'. [ 531.742291][ T5828] Bluetooth: hci0: command tx timeout [ 531.872513][T27954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.920721][T27957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5998'. [ 531.938994][T27954] netlink: 'syz.2.5999': attribute type 1 has an invalid length. [ 531.953378][T27954] netlink: 'syz.2.5999': attribute type 3 has an invalid length. [ 531.982112][T27954] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5999'. [ 531.987782][T27960] netlink: 'syz.2.5999': attribute type 4 has an invalid length. [ 532.000189][T27956] netlink: 'syz.2.5999': attribute type 4 has an invalid length. [ 532.018558][T27961] netlink: 'syz.1.6000': attribute type 1 has an invalid length. [ 532.082034][T27966] xt_NFQUEUE: number of total queues is 0 [ 532.083760][T27961] 8021q: adding VLAN 0 to HW filter on device bond7 [ 532.156074][T22900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 532.167935][T22900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 532.178491][T22900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.189100][T22900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 532.221050][T27961] bond7: (slave veth9): Enslaving as an active interface with a down link [ 532.254620][T27966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.262623][T27966] bond7: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 532.363928][T22900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 532.376955][T22900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 532.390268][T22900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.414957][T22900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 532.581791][T22900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 532.619735][T22900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 532.643359][T22900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.676362][T22900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 532.817270][T28002] ipt_ECN: cannot use operation on non-tcp rule [ 532.823738][T22900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 532.823790][T22900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 532.823814][T22900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.823836][T22900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 532.925285][T28002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6009'. [ 532.944616][T28011] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 533.330803][T27917] chnl_net:caif_netlink_parms(): no params data found [ 533.400815][T22900] tipc: Resetting bearer [ 533.581049][ T5828] Bluetooth: hci5: command tx timeout [ 534.110738][T22900] tipc: Disabling bearer [ 534.134141][T22900] bond1 (unregistering): (slave gretap1): Releasing active interface [ 534.218167][T22900] dvmrp6 (unregistering): left allmulticast mode [ 534.652176][T22900] bond1 (unregistering): Released all slaves [ 534.664538][T22900] bond2 (unregistering): Released all slaves [ 534.801497][T22900] bond0 (unregistering): Released all slaves [ 534.977500][T28079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6029'. [ 535.047125][T22900] : left promiscuous mode [ 535.074732][T28090] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 535.116113][T22900] tipc: Disabling bearer [ 535.122092][T22900] tipc: Left network mode [ 535.215011][T27917] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.241829][T27917] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.253703][T27917] bridge_slave_0: entered allmulticast mode [ 535.283777][T27917] bridge_slave_0: entered promiscuous mode [ 535.305547][T28101] netlink: 'syz.4.6033': attribute type 7 has an invalid length. [ 535.323984][T27917] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.338699][T27917] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.350845][T27917] bridge_slave_1: entered allmulticast mode [ 535.370821][T27917] bridge_slave_1: entered promiscuous mode [ 535.486253][T27917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.518633][T27917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.660498][ T5828] Bluetooth: hci5: command tx timeout [ 535.674068][T27917] team0: Port device team_slave_0 added [ 535.685310][T27917] team0: Port device team_slave_1 added [ 535.866479][T27917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.887938][T27917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.915470][T28128] sctp: [Deprecated]: syz.3.6041 (pid 28128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.915470][T28128] Use struct sctp_sack_info instead [ 535.947973][T27917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.100832][T28144] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 536.189773][T28151] __nla_validate_parse: 1 callbacks suppressed [ 536.189793][T28151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6045'. [ 536.217541][T28152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6046'. [ 536.250429][T28153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6045'. [ 536.331388][T27917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.338700][T27917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.369324][T27917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.395410][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6046'. [ 536.411522][T28151] xfrm1: entered promiscuous mode [ 536.416671][T28151] xfrm1: entered allmulticast mode [ 536.506554][T28162] netlink: 'syz.2.6048': attribute type 21 has an invalid length. [ 536.515106][T28162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6048'. [ 536.538617][T28157] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 536.556507][T28164] IPv6: NLM_F_CREATE should be specified when creating new route [ 536.560645][T28161] netlink: 'syz.2.6048': attribute type 21 has an invalid length. [ 536.573362][T28161] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6048'. [ 536.609610][T28159] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.617179][T28159] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.700722][T28159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.714704][T28159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.847848][T28162] netlink: 'syz.2.6048': attribute type 4 has an invalid length. [ 536.856727][T28162] netlink: 'syz.2.6048': attribute type 5 has an invalid length. [ 536.878273][T28162] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6048'. [ 536.917979][T27917] hsr_slave_0: entered promiscuous mode [ 536.926268][T27917] hsr_slave_1: entered promiscuous mode [ 536.949775][T27917] debugfs: 'hsr0' already exists in 'hsr' [ 536.955702][T27917] Cannot create hsr debugfs directory [ 536.971119][T28161] netlink: 'syz.2.6048': attribute type 4 has an invalid length. [ 537.010003][T28161] netlink: 'syz.2.6048': attribute type 5 has an invalid length. [ 537.017814][T28161] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6048'. [ 537.072737][T22873] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.099678][T22873] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.165496][T22873] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.180037][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.193154][T22873] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.201941][T28184] netlink: 'syz.4.6056': attribute type 6 has an invalid length. [ 537.259734][T28189] netlink: 'syz.3.6057': attribute type 1 has an invalid length. [ 537.317755][T28191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.327512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.424790][T28203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6058'. [ 537.473567][T28196] tipc: Enabling of bearer rejected, failed to enable media [ 537.482428][T28201] tipc: Enabling of bearer rejected, failed to enable media [ 537.605596][T28191] syz_tun: entered allmulticast mode [ 537.741016][ T5828] Bluetooth: hci5: command tx timeout [ 537.900403][T28230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6066'. [ 538.219091][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.494960][T22900] hsr_slave_0: left promiscuous mode [ 538.563648][T22900] hsr_slave_1: left promiscuous mode [ 538.592176][T22900] veth1_vlan: left allmulticast mode [ 538.597896][T22900] veth0_macvtap: left promiscuous mode [ 538.614991][T22900] veth1_vlan: left promiscuous mode [ 538.641597][T22900] veth0_vlan: left promiscuous mode [ 538.785700][T22900] pimreg (unregistering): left allmulticast mode [ 538.982571][T28288] netlink: 'syz.4.6077': attribute type 1 has an invalid length. [ 539.260727][T17178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.269234][T17178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.771504][T22900] vcan0 (unregistering): left allmulticast mode [ 539.821697][ T5828] Bluetooth: hci5: command tx timeout [ 540.079590][T28311] xt_hashlimit: size too large, truncated to 1048576 [ 540.319079][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.544094][T28333] openvswitch: netlink: IPv4 tunnel dst address is zero [ 540.712198][T28342] netlink: 'syz.4.6090': attribute type 10 has an invalid length. [ 540.825311][T22900] IPVS: stop unused estimator thread 0... [ 540.930273][T27917] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 540.965913][T27917] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 541.204337][T28378] __nla_validate_parse: 9 callbacks suppressed [ 541.204356][T28378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6096'. [ 541.222056][T28377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.265411][T28381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6098'. [ 541.270344][T27917] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 541.290625][T28381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6098'. [ 541.318710][T27917] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 541.346040][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.355744][T28366] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6096'. [ 541.414890][T28383] dvmrp0: entered allmulticast mode [ 541.669570][T27917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.732915][T27917] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.771487][T22891] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.778688][T22891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.835080][T28419] validate_nla: 2 callbacks suppressed [ 541.835098][T28419] netlink: 'syz.4.6106': attribute type 1 has an invalid length. [ 541.872881][T17178] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.880166][T17178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.057861][T27917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.144959][T28436] netlink: 'syz.3.6111': attribute type 3 has an invalid length. [ 542.184592][T28436] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6111'. [ 542.222714][T28436] netlink: 'syz.3.6111': attribute type 13 has an invalid length. [ 542.232406][T28437] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6110'. [ 542.340295][T28438] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.396738][T28449] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.6110'. [ 542.562486][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.357296][ T5839] Bluetooth: hci5: command 0x0405 tx timeout [ 543.554590][T27917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.579514][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.740025][ C0] ------------[ cut here ]------------ [ 543.745863][ C0] sk->sk_forward_alloc [ 543.745891][ C0] WARNING: net/ipv4/af_inet.c:157 at inet_sock_destruct+0x62d/0x740, CPU#0: syz-executor/17647 [ 543.760582][ C0] Modules linked in: [ 543.765206][ C0] CPU: 0 UID: 0 PID: 17647 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 543.774907][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 543.785234][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 543.791111][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 90 2e b3 f7 90 0f 0b 90 e9 8b fe ff ff e8 82 2e b3 f7 90 0f 0b 90 e9 b1 fe ff ff e8 74 2e b3 f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 543.810948][ C0] RSP: 0018:ffffc90000007d28 EFLAGS: 00010246 [ 543.817028][ C0] RAX: ffffffff8a1148dc RBX: dffffc0000000000 RCX: ffff8880267c5b80 [ 543.825323][ C0] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 543.833354][ C0] RBP: 0000000000000090 R08: ffff888022aa4ce7 R09: 1ffff1100455499c [ 543.841489][ C0] R10: dffffc0000000000 R11: ffffed100455499d R12: ffff888022aa4a40 [ 543.849597][ C0] R13: dffffc0000000000 R14: ffff888022aa4ccc R15: ffffffff8fa89340 [ 543.857590][ C0] FS: 000055556e897500(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 543.866590][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.873256][ C0] CR2: 00005555896199e8 CR3: 0000000031194000 CR4: 00000000003526f0 [ 543.881277][ C0] Call Trace: [ 543.884663][ C0] [ 543.887528][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 543.893147][ C0] __sk_destruct+0x85/0x880 [ 543.897770][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 543.902961][ C0] ? rcu_core+0xc2a/0x1750 [ 543.907422][ C0] rcu_core+0xc9e/0x1750 [ 543.911777][ C0] ? __pfx_rcu_core+0x10/0x10 [ 543.916570][ C0] ? sched_clock_cpu+0x74/0x440 [ 543.921592][ C0] handle_softirqs+0x22a/0x7c0 [ 543.926567][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 543.931846][ C0] __irq_exit_rcu+0x5f/0x150 [ 543.936633][ C0] irq_exit_rcu+0x9/0x30 [ 543.940947][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 543.946806][ C0] [ 543.949887][ C0] [ 543.952451][T28494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.952835][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.968110][ C0] RIP: 0010:bpf_inode_storage_free+0x109/0x5b0 [ 543.974349][ C0] Code: 0d d4 a8 ff 65 48 8b 05 0d c8 08 11 4c 8d b8 e0 66 f4 92 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 6c 04 00 00 41 ff 07 <43> 0f b6 44 25 00 84 c0 0f 85 79 04 00 00 66 c7 03 01 00 bf 01 00 [ 543.983942][T27917] veth0_vlan: entered promiscuous mode [ 543.994615][ C0] RSP: 0018:ffffc900046bfc08 EFLAGS: 00000202 [ 543.994642][ C0] RAX: 0000000000000000 RBX: ffff8880267c6000 RCX: ffffffff99fe1400 [ 543.994658][ C0] RDX: ffff8880267c5b80 RSI: 0000000000000000 RDI: ffffffff81e9e813 [ 544.022392][ C0] RBP: 0000000000000000 R08: ffffffff8fef1a77 R09: 1ffffffff1fde34e [ 544.030800][ C0] R10: dffffc0000000000 R11: ffffffff8209c7e0 R12: dffffc0000000000 [ 544.038822][ C0] R13: 1ffff11004cf8c00 R14: ffff88805a478b08 R15: ffff8880b863b6e0 [ 544.040721][T27917] veth1_vlan: entered promiscuous mode [ 544.046983][ C0] ? __pfx_shmem_get_dquots+0x10/0x10 [ 544.047017][ C0] ? bpf_inode_storage_free+0xe3/0x5b0 [ 544.063556][ C0] ? bpf_inode_storage_free+0xe3/0x5b0 [ 544.069110][ C0] security_inode_free+0xdc/0x180 [ 544.074264][ C0] __destroy_inode+0x2da/0x670 [ 544.079261][ C0] evict+0x8a7/0xb10 [ 544.083188][ C0] ? __pfx_evict+0x10/0x10 [ 544.087631][ C0] ? _raw_spin_unlock+0x28/0x50 [ 544.092564][ C0] ? iput+0xcc2/0x1020 [ 544.096751][ C0] do_unlinkat+0x354/0x590 [ 544.101242][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 544.106212][ C0] ? getname_flags+0x1e4/0x540 [ 544.111141][ C0] __x64_sys_unlink+0x47/0x50 [ 544.115936][ C0] do_syscall_64+0xe2/0xf80 [ 544.120542][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.126635][ C0] ? trace_irq_disable+0x37/0x100 [ 544.131754][ C0] ? clear_bhb_loop+0x60/0xb0 [ 544.136463][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.142428][ C0] RIP: 0033:0x7f97d2199fa7 [ 544.146954][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 544.154900][T27917] veth0_macvtap: entered promiscuous mode [ 544.167420][ C0] RSP: 002b:00007ffd22b50348 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 544.167449][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f97d2199fa7 [ 544.167463][ C0] RDX: 00007ffd22b50370 RSI: 00007ffd22b50400 RDI: 00007ffd22b50400 [ 544.167479][ C0] RBP: 00007ffd22b50400 R08: 00007ffd22b51400 R09: 00000000ffffffff [ 544.206447][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd22b51490 [ 544.214494][ C0] R13: 00007f97d220471f R14: 0000000000084ba9 R15: 00007ffd22b514d0 [ 544.222547][ C0] [ 544.225636][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 544.232952][ C0] CPU: 0 UID: 0 PID: 17647 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 544.242604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 544.252769][ C0] Call Trace: [ 544.256853][ C0] [ 544.259720][ C0] vpanic+0x1e0/0x670 [ 544.263909][ C0] panic+0xc5/0xd0 [ 544.267667][ C0] ? __pfx_panic+0x10/0x10 [ 544.272131][ C0] __warn+0x315/0x4a0 [ 544.276412][ C0] ? inet_sock_destruct+0x62d/0x740 [ 544.281646][ C0] ? inet_sock_destruct+0x62d/0x740 [ 544.286877][ C0] __report_bug+0x29a/0x540 [ 544.291409][ C0] ? kasan_save_track+0x4f/0x80 [ 544.296289][ C0] ? kasan_save_track+0x3e/0x80 [ 544.301259][ C0] ? inet_sock_destruct+0x62d/0x740 [ 544.306490][ C0] ? __pfx___report_bug+0x10/0x10 [ 544.311538][ C0] ? security_inode_free+0xdc/0x180 [ 544.316762][ C0] ? __destroy_inode+0x2da/0x670 [ 544.321734][ C0] ? evict+0x8a7/0xb10 [ 544.325837][ C0] ? do_unlinkat+0x354/0x590 [ 544.330457][ C0] ? __x64_sys_unlink+0x47/0x50 [ 544.335341][ C0] ? do_syscall_64+0xe2/0xf80 [ 544.340041][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.346148][ C0] ? inet_sock_destruct+0x62d/0x740 [ 544.351420][ C0] report_bug+0x16a/0x220 [ 544.355766][ C0] ? inet_sock_destruct+0x62d/0x740 [ 544.361233][ C0] ? inet_sock_destruct+0x62f/0x740 [ 544.366456][ C0] handle_bug+0x98/0x200 [ 544.370713][ C0] exc_invalid_op+0x1a/0x50 [ 544.375308][ C0] asm_exc_invalid_op+0x1a/0x20 [ 544.380153][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 544.386048][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 90 2e b3 f7 90 0f 0b 90 e9 8b fe ff ff e8 82 2e b3 f7 90 0f 0b 90 e9 b1 fe ff ff e8 74 2e b3 f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 544.406008][ C0] RSP: 0018:ffffc90000007d28 EFLAGS: 00010246 [ 544.412172][ C0] RAX: ffffffff8a1148dc RBX: dffffc0000000000 RCX: ffff8880267c5b80 [ 544.420236][ C0] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 544.428213][ C0] RBP: 0000000000000090 R08: ffff888022aa4ce7 R09: 1ffff1100455499c [ 544.436290][ C0] R10: dffffc0000000000 R11: ffffed100455499d R12: ffff888022aa4a40 [ 544.444279][ C0] R13: dffffc0000000000 R14: ffff888022aa4ccc R15: ffffffff8fa89340 [ 544.452272][ C0] ? inet_sock_destruct+0x62c/0x740 [ 544.457496][ C0] ? inet_sock_destruct+0x62c/0x740 [ 544.462702][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 544.468183][ C0] __sk_destruct+0x85/0x880 [ 544.472803][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 544.478018][ C0] ? rcu_core+0xc2a/0x1750 [ 544.482482][ C0] rcu_core+0xc9e/0x1750 [ 544.486763][ C0] ? __pfx_rcu_core+0x10/0x10 [ 544.491720][ C0] ? sched_clock_cpu+0x74/0x440 [ 544.496606][ C0] handle_softirqs+0x22a/0x7c0 [ 544.501732][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 544.506590][ C0] __irq_exit_rcu+0x5f/0x150 [ 544.511176][ C0] irq_exit_rcu+0x9/0x30 [ 544.515858][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 544.521511][ C0] [ 544.524437][ C0] [ 544.527471][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 544.533458][ C0] RIP: 0010:bpf_inode_storage_free+0x109/0x5b0 [ 544.539628][ C0] Code: 0d d4 a8 ff 65 48 8b 05 0d c8 08 11 4c 8d b8 e0 66 f4 92 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 6c 04 00 00 41 ff 07 <43> 0f b6 44 25 00 84 c0 0f 85 79 04 00 00 66 c7 03 01 00 bf 01 00 [ 544.559253][ C0] RSP: 0018:ffffc900046bfc08 EFLAGS: 00000202 [ 544.565409][ C0] RAX: 0000000000000000 RBX: ffff8880267c6000 RCX: ffffffff99fe1400 [ 544.573474][ C0] RDX: ffff8880267c5b80 RSI: 0000000000000000 RDI: ffffffff81e9e813 [ 544.581449][ C0] RBP: 0000000000000000 R08: ffffffff8fef1a77 R09: 1ffffffff1fde34e [ 544.589498][ C0] R10: dffffc0000000000 R11: ffffffff8209c7e0 R12: dffffc0000000000 [ 544.597457][ C0] R13: 1ffff11004cf8c00 R14: ffff88805a478b08 R15: ffff8880b863b6e0 [ 544.605612][ C0] ? __pfx_shmem_get_dquots+0x10/0x10 [ 544.610998][ C0] ? bpf_inode_storage_free+0xe3/0x5b0 [ 544.616670][ C0] ? bpf_inode_storage_free+0xe3/0x5b0 [ 544.622149][ C0] security_inode_free+0xdc/0x180 [ 544.627293][ C0] __destroy_inode+0x2da/0x670 [ 544.632082][ C0] evict+0x8a7/0xb10 [ 544.635988][ C0] ? __pfx_evict+0x10/0x10 [ 544.640505][ C0] ? _raw_spin_unlock+0x28/0x50 [ 544.645353][ C0] ? iput+0xcc2/0x1020 [ 544.649420][ C0] do_unlinkat+0x354/0x590 [ 544.653841][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 544.658802][ C0] ? getname_flags+0x1e4/0x540 [ 544.663713][ C0] __x64_sys_unlink+0x47/0x50 [ 544.668406][ C0] do_syscall_64+0xe2/0xf80 [ 544.672929][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.679165][ C0] ? trace_irq_disable+0x37/0x100 [ 544.684196][ C0] ? clear_bhb_loop+0x60/0xb0 [ 544.689046][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.695028][ C0] RIP: 0033:0x7f97d2199fa7 [ 544.699527][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 544.719302][ C0] RSP: 002b:00007ffd22b50348 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 544.727990][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f97d2199fa7 [ 544.735967][ C0] RDX: 00007ffd22b50370 RSI: 00007ffd22b50400 RDI: 00007ffd22b50400 [ 544.744294][ C0] RBP: 00007ffd22b50400 R08: 00007ffd22b51400 R09: 00000000ffffffff [ 544.752461][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd22b51490 [ 544.760474][ C0] R13: 00007f97d220471f R14: 0000000000084ba9 R15: 00007ffd22b514d0 [ 544.768600][ C0] [ 544.772374][ C0] Kernel Offset: disabled [ 544.776810][ C0] Rebooting in 86400 seconds..