last executing test programs: 3.502257557s ago: executing program 2 (id=3127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x6, 0x2, 0x1, 0x7, 0x8, 0xffffffff, 0x8, 0xe3bc, 0x1, 0xd, 0x9, 0x2, 0x2, 0x6, 0x5, 0x8, 0x8, 0x0, 0xa23, 0x400, 0x6, 0x7}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x3c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x3c}}, 0x400c881) 3.326098339s ago: executing program 2 (id=3129): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a0083130000"], 0x20}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00012abd7000fddbdf25300000000500340003000000f481b1960415d34b78d3b1d7dc104892b5e7e5f0e59036e4fd0b30411f17a19662b6eadc2ff74bff566c604104b0db3a81d6ea4b0c70b632cfea4c9b064785bf90eda2b9eea5dd118df723077da6ee180e84744e074e10a5f2c6ba7266a225ff01ba0fca81b349f4cd30a5110a147666613ef96ac651e5c20870b91d725e3be2d62bae30090f8e170c12fb1478e889e5713c729968e006cec437"], 0x1c}, 0x1, 0x0, 0x0, 0xc084}, 0x8000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) close(0x4) syz_open_procfs$namespace(0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x54, 0xff, 0x0, 0x8}, {0x6, 0x74, 0x6}]}) unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a01080000000000000000070000000900010073797a30000000000900010073797a3100000000080002400000000050000000090a010400000000000000000700a638a7d0f9db44c3f349ade9ecb0afc2000008000a400000000008000340000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000380000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000000900010073797a3100000000140000001000010000000000000000000084000a"], 0xe4}}, 0x884) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500050000000500010006000000140007800600044000000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xd4}}, 0x4000040) 2.839299534s ago: executing program 0 (id=3132): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x648101, 0x0) (async) unshare(0x400) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000002e00010026bd37d9f212df2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.709870381s ago: executing program 3 (id=3133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2.690820118s ago: executing program 0 (id=3134): r0 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) (async) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) setsockopt(r1, 0x9, 0x1, &(0x7f0000001180)="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", 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000cb84063e0200000015496d634400", @ANYRES16=r4, @ANYBLOB="310301000000fcdbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000001c0), &(0x7f0000000300)=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000001c0), &(0x7f0000000300)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) (async) close(r11) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r11, r10, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r11, r10, 0x2f}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r12, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r10, r11, 0x2b, 0x2c, 0x4, @void, @void, @void, @value=r13}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r10, r11, 0x2b, 0x2c, 0x4, @void, @void, @void, @value=r13}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000af000000040000000600000000020000", @ANYRES32=0x1, @ANYBLOB="000100"/20, @ANYRES32=r6, @ANYRES32=r11, @ANYBLOB="05000029020000000400"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000af000000040000000600000000020000", @ANYRES32=0x1, @ANYBLOB="000100"/20, @ANYRES32=r6, @ANYRES32=r11, @ANYBLOB="05000029020000000400"/28], 0x50) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001100)={r5, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000001140)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001100)={r5, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000001140)=0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r2) sendmsg$SMC_PNETID_GET(r14, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r15, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.461620678s ago: executing program 0 (id=3136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x3, 0x0, &(0x7f0000000540)="e46033", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0x107, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="bb439a", 0x3}], 0x1}, 0x20048010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffb, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x400401a}, 0x4000080) close(0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xd4, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x7a}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x841) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000216c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000400003803c000080080003400000000230000b8020"], 0xf0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000000f000480280001800b0001006c6f6f6b75700000180002800900010073797a320000000008000240000000140900010073797a30000000001f2b150b73797a3200000000140000001100010000000000000000000000000af436ced95e6580b5c4b4c0ad226288356f8dedff64e7ade4bf62ee765d343f484c16037e049c59c4c364add03facd0688fafe9e6f3cd9a260c315a38a414da56c2522cb6bc10645c9a3fcdf0831c1cc79ae0c756219873c84156795617d2d655d02c615d34b2e848f7562e27bb58f6d56578127b37528e367b63ab384f8eb8f99ac347604dbf18598c9c1026cca93701e742d0b01e4102a7c0ff90faa4907f1352425ea8a28fdb97597dd14ebced4d3200f4de8a475b690c27caec0cd78cf8787ec93760b120ce5446b524feb603f8b27bc9abbe4c19bc4c56ff8ebeaed4e177fca44d9fc48ac04ff36d136ed357f1b180c99303571f37d092d2b62520ad9c85c5b55ca5eb28ed246d6a441ba6ed2765d2711decd9095502d4fe71fd80077e5290d44848f3d29c2584349fffd841a8798c6cb5558cc3"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.450757147s ago: executing program 3 (id=3137): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010118000000000000000c0000000c010000ddfdffff050000000000009306000000000000000100"], 0x0, 0x2a, 0x0, 0x1, 0x5}, 0x28) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x4}, {0x6, 0x60}]}) write$ppp(r0, &(0x7f00000008c0)="00003be032c6a4", 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000000206030000000000000000000700000014000780050003000c000000050003008000000005000100060000000500050002000000090002fd73797a32000000000900020073797a300000000015000300686173683a697074000000000c000300686173683a6970000000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2.18256678s ago: executing program 1 (id=3138): openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'pimreg1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000300)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x1, 0x1}, 0x4) (async) write$nci(r3, &(0x7f0000000300)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x1, 0x1}, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="010000000000fcdbdf25120000357d8e984660081800018014000200766574683004000000000000000000000800094d45360c12189b18c0bd609a3e74f0a658b8619fe99c0ae78c5599e2f31e6a847e8d2e1fcd53a97ace8009d717de1aba"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r10, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r10, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000380)=0x1, 0x4) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r9, r8, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r11) (async) close(r11) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.000472881s ago: executing program 3 (id=3139): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={r1, r2, r3}, 0xc) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) (async) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c00000008", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r11, &(0x7f0000000500), 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r12 = socket$inet6(0xa, 0x5, 0x0) preadv(r12, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000000700)=""/251, 0xfb}, {&(0x7f0000000900)=""/237, 0xed}, {&(0x7f0000000800)=""/136, 0x88}], 0x5, 0xb, 0x10000) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r13, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) 1.855629097s ago: executing program 4 (id=3140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1.848880704s ago: executing program 0 (id=3141): pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400e815}}], 0x1, 0x4) getgid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x801) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x100000000000003) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x48}}, 0x0) 1.739884642s ago: executing program 4 (id=3142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'tunl0\x00', @link_local}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000001740)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190043000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa400, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'tunl0\x00', @link_local}) (async) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000001740)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190043000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) 1.511279188s ago: executing program 0 (id=3143): shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="090000000400000006000000010001", @ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007740)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x20, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60243, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x3}]}}}]}, 0x3c}}, 0x28000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000400)="b9fdef306844268cb89614", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 1.510365656s ago: executing program 1 (id=3144): ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='syzkaller1\x00') r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast, 0x1}, 0x10) r1 = socket(0x1d, 0x5, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x8001}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x2, 0x88, 0x204, 0x7, 0x9, 0x7, 0xfffffffd, 0x6, r2}, 0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0xa12a}, 0x8) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, 0xb, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7d64}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xc}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4c20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xd08603e}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) connect$inet6(r3, &(0x7f0000000400)={0xa, 0x4e20, 0xb1fd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4b3}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xec, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xfc}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x52d}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x85, 0xbe, "deaf3896b33ddbd38fcc2475f5f29b1d02313c3d2c27b36835ae7a1ad0e7b5e36df4692baf7e72c5a962cd6c80989ccd1a00dd54594f82cdadaec6c01a12cebff79bdca39930b2f59df4f736cd8e676eba3144cecae20fccd7344357f3720ea465ed955ccfa3de108f66d96b2dc1b3f7d716927ed561d6d562c2d86dd060b98fd1"}]}, 0xec}, 0x1, 0x0, 0x0, 0x2000c811}, 0x20000000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r8, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/47, 0x2f}, {&(0x7f0000000780)=""/182, 0xb6}], 0x3, &(0x7f0000000880)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000001880)=@isdn, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/83, 0x53}, {&(0x7f0000001980)=""/241, 0xf1}], 0x2, &(0x7f0000001ac0)=""/6, 0x6}}, {{&(0x7f0000001b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001b80)=""/110, 0x6e}, {&(0x7f0000001c00)=""/55, 0x37}, {&(0x7f0000001c40)=""/203, 0xcb}, {&(0x7f0000001d40)=""/114, 0x72}, {&(0x7f0000001dc0)=""/240, 0xf0}], 0x5, &(0x7f0000001f40)=""/165, 0xa5}, 0x2}, {{&(0x7f0000002000)=@ax25={{0x3, @null}, [@bcast, @default, @rose, @rose, @null, @rose, @default]}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002080)=""/25, 0x19}], 0x1}}], 0x4, 0x40000000, &(0x7f0000002200)={0x77359400}) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000002240), 0x4) write$bt_hci(r1, &(0x7f0000002280)={0x1, @remote_name_req={{0x419, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x5a, 0x5}}}, 0xe) r10 = accept$unix(r1, &(0x7f00000022c0), &(0x7f0000002340)=0x6e) r11 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002500)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000002600)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002640)={0x0, 0x0, 0x0}, &(0x7f0000002680)=0xc) r14 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002fc0), 0x2, 0x0) r15 = openat$cgroup_int(r1, &(0x7f0000003580)='net_cls.classid\x00', 0x2, 0x0) r16 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000035c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000003600)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000003700)=0xe8) sendmmsg$unix(r10, &(0x7f0000003a40)=[{{&(0x7f0000002380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002400)="2edd674077361e10f325bb8fe164e2ec605538f16f6483e2390d92a4041f34728605608d273e8b4be13e35edee6cf5bcf11df986b875d368b666920f284203b525a8f5d9dd9fcb0b6619e80ed70a9123a315b2b8870532d045ac79702c5c8490708bae847040f70f75b00004800bdeeedb2503156d6af025adebead9fa4d125e158c3fa02f6b038dcd7acd745b5fb45d8a24d7d2d4764eb2d5f1d67041", 0x9d}], 0x1, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x20, 0x4000004}}, {{&(0x7f0000002700)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002780)}, {&(0x7f00000027c0)="d0eac198337b9595e2fd4a30273df3eb50f33fd773cf02433e5e3aa3e51bb19aef462ccb4abe0fd3cc8183d2f2e537875f8e7c248efda4d98a886bcd46ad00849b37393459a0a42b4bafb7a4b468e5f23ece3e88ef4753688c3630ed7366341461054a4067dbf09d37fa8cda6327fa30e48a439d5ef71fdd1fcd0dbac429c5f6b7fd0adf2a61452c4fd69edab0b5ba2a449bd4af26150033f6548fb9b6f9d3866ac227a4a5555c4c41542b7e07171e7ccad7ae92579cd19823c5ccca675f5faadcbd7ae40cc7bab9ba44d558f18fa9b09aed99e4506cec89f2d3cf07a0757f0b22ff5a2d7e30d00868a747f8", 0xec}, {&(0x7f00000028c0)="81ea856483c1f08ba3ff3ea5482150daf69265be8dcd30543dced2f8ae8f72dce0146a5d768c34a3b6940c24c9131bf8d69ca2a07f9f46ea2d94f83b6249158ffae14dc88712", 0x46}, {&(0x7f0000002940)="c4b5805b04a5a3866b1a5f9bc2fb9bd2b7f2c8e30465bdf3aa57c71b993c8d048184a12709374b1e00d17243a723bad96eecc4582cffb1155397f339ac5d97e2bb318145503790b09776996be061ad448614a6ea5a90342b109f0be2e9bb84e841028e26e0e28600d7be0b000caaa671bea5d800f9ad0949376ac6a7b084433871456a99e9f83ccb68b4b1a8df6afae6246266fc366bed2d25aa32d544c02544dd9117aacf3f427ea2715edb922b9f4fc88976", 0xb3}, {&(0x7f0000002a00)="7a1a6795a01d55042348c5ee832734cc63bba30a6bcd64efbfb7cbf713aa1fc0f4c3c34ddcc8ba190e484e7845e925d0f21d56ec3e66debd119f665f5abf3de9abd1bc7d318bec8ecd6d8e942d335ad6fae6b01d147791d7e52bff176cebb3cef52ff04fb18513b0ea06ae4220c9754d528dde6beffa962ed16f02cbb4c964fc239c1140a8e512aa67f837a890a973dd99a05c80623df7bc3064643f03732b87bff03f", 0xa3}, {&(0x7f0000002ac0)="69843b38cdf2e2ec985b15d06349d365838de7cf98f9a6438ec5d5c5cf1546fa485f1333a7ef924c", 0x28}], 0x6, &(0x7f0000002b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r3]}}], 0x20}}, {{&(0x7f0000002bc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002c40)="751b7c6cc75f896a861a772084f0925e95a457422cbcaa2ae4dc8e3a4672b250659cf16d8a3e52492d92519cc3693588e27d98c17b097f6bd1803d32e98f75d2c88d24d03679ce818d0befd08ed3cb4703733666fa34bcf5cdd017abafbcbd963514d68cb497a157e56c14a1d6671d7be569a5608e3c8ec58894afdc7eb667edb9d8a7f1b03b512d66f83be27b2e3ae5657c2695c8e55dd2bf3fb2bf472cfdd7fbf1730adabe02d77bee2507741c0970f519e49a0819ce0e2a0a9faf5d230457f22b95d5e652564fbf272a656da1109269533920af7adae3d5964158ee1e023882206b47be4b1843160142bb58", 0xed}, {&(0x7f0000002d40)="ddabb4436f045194bf97f01733714d44cf2e5a1c78bb5b27714436127219ba722f77aaa24caae68a414426782c2f96041d3a7d573cdac5f4614fa336ebcab5eac1aa068a56827b1db1e243f97c2d641cac45e494f7e6f6ac917bb31377aab5b9af59a4ce9f76bb4c23fe6aca62ba721b0f8ce9f93d9eaed65d63713400b3df055c2398", 0x83}, {&(0x7f0000002e00)="fa5cfaefd8e205c627d446dc7d4f804e315188d571779698c4b03c321e9016812e6f845337a1c13940d94bc5d7e5d2b1902e8f3d703eabd6f96b668f1ea665b0b8e98899029c984c01356f0d85d04ed60efeff79bc24c20d0d0a05354c5f4a34a4e42d2b1624fb9c737f9435080385ab9e76f5153f276b9885fb702bb115ba9be5", 0x81}, {&(0x7f0000002ec0)="647fb314bc7fe71caf286ef7c342d4d3321881b7ad8611c11146b4d3d02b8bbb189b95ff008a0b281eed31117fab59578b21c18b43c9ab0cccc9be6a9d2f43e3fad2b98cec301dbfcad44b3aab9c745d34539a7b767ed0de630fbbf3489bd7c105104901972ad52bc56c2e29e142679b1eefbbf51808bf67cf16b5e8c893b3ec9db7a6b20344a14d91223c13ca28ee4b8c9b4c3b4e0a", 0x96}], 0x4, &(0x7f0000003000)=[@rights={{0x14, 0x1, 0x1, [r14]}}], 0x18, 0x800}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003040)="7423c5758c80434d822bd11a8fa65dffa6e81ffa686d2f803d1cd23e06079d559d3bd904b5c8e69e156e140cdc9b9692af553adb29fbc7e3ac26fc9a9c620bdc680d92533681d8fbbacad0e8e27e5db5a7d58753687080ede3368bd4bc7360a7c59ed89bbc84b298ccb7b7413d06ed4c7383903b850f9fb1a797f7", 0x7b}, {&(0x7f00000030c0)="8f52b520853da69169de4549ce680bf455419baf7a3fc4c4c5e917548b14d6aeb33185", 0x23}, {&(0x7f0000003100)="d410c9dbd2023ad99ccf6b34647567c5e7c045ad2afbdbca161bb9e00dd477290474c6a27fce121614b423878e134b1e51f936423dbf0bf17bdd29e3572288825c9dc5efa8d7e7a5b8317c0a324508c9b058fb4f367395de50ab4b7e85d9", 0x5e}, {&(0x7f0000003180)="c51ae6e22fa2cbc53126bae53f8680e7a890d0377b6970c86603c170dae9d3da6dc953183bdd543862018d2d7f409f2b8a0ec21c65ee633d2d246c0427ecd2a0da37f9013d3d7ec90be65e130acfcb930fcd9dd2a09d8278100e9b25e5805d4dd4d7100b8a9b3b8ca5fbfaaa6136259df2f4bf1e9c068e4f3b05670898459d499014d4fd06e12c3def51bb69da1c21b026269fe648ce7a0682e96a81c21b12c5bf34f09a2d0e26fa8f4e4a950552671b54f8e68bfa71319cdea33f66", 0xbc}, {&(0x7f0000003240)="726dd106be71b0af9a41a675f8a96a772a8f7feec06dff2395bf0e7a12afd4", 0x1f}, {&(0x7f0000003280)="a5420f077d758eaa200ddd2adc156e8cbb85b97c23225054a5da3f", 0x1b}, {&(0x7f00000032c0)="3f2f28d9b3452e8927ec820d839523809ce69b45ac4e5dccac0799c1d9d4fa7b98f067f8a04e3152385c1aef5f28819bd71e0f17e43a78f11e61514c19c9cb7ced35dced6014beed1d40ffeb755f2ef83d2c1798fc5646228084865a82d97f5c4cd75d4fc9a4ba2c29d610b48345e0e9ca7c54142ddec8a1422afb98358366eced83910a", 0x84}, {&(0x7f0000003380)}, {&(0x7f00000033c0)="ceb4bc43736f981074c1fbf9a17d8e48cbbac8fc2e52a28821e169b731b0f86437913f0816838346ac18262501cb995a3613e86ea10feccdedc49e433bae378a2b17c2f6b77c2e121f799eb60abbd32a945c957ee61109946dc4388fd60b18ea01aa2a8cef989b2705bd969b1b542441dca6ac3088b02538688d88f356bff2bb880950a74ac74484dc53d58f1045a5e0cc90e2fbbf28f463891b14be647181d08e27d424f34c75ce33a5b8ab3fac2f623f7112e8aadd399c0db8efcce030229b6c839122927cd4e8851361f6f30f9969be85c4f464ebbe5713fac79e220c54a73e6b99085967", 0xe6}], 0x9, &(0x7f0000003940)=[@rights={{0x38, 0x1, 0x1, [r3, r3, r3, r15, r3, r16, r9, r9, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18}}}, @rights={{0x30, 0x1, 0x1, [r8, r8, r0, 0xffffffffffffffff, r3, r8, r0, r4]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r9, r0, 0xffffffffffffffff]}}], 0xd8, 0x4040000}}], 0x4, 0x2c023114d09a1f4b) 1.506803058s ago: executing program 3 (id=3145): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) unshare(0x22020400) (async) unshare(0x22020400) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r4, r3, 0x4, r3}, 0x9) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x40000) 1.430326589s ago: executing program 4 (id=3146): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000000000000000a005e240000000cff010000000000000000000000000001080400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000100000004"], 0x90) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.350528687s ago: executing program 2 (id=3147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffe, 0x100, 0x100}, 0x1c) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x32, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x0, 0x2}, @sadb_sa={0x2, 0x1, 0x4d6, 0x40, 0x0, 0xce, 0x1, 0x20000001}]}, 0x48}}, 0x14) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080005"], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000308030000000000000000000000000006000240ed590000060002400a000000"], 0x2c}}, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) 1.16710265s ago: executing program 3 (id=3148): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800"/27], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44b00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_TTL={0x5, 0x8, 0x9}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}}, 0x4040000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000200000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000397550ce4495000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff"]}, 0x138) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x20044000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2880, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x100000001}], 0x1}, 0x408c4) socket$kcm(0x29, 0x5, 0x0) 1.120055029s ago: executing program 4 (id=3149): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x18, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff0000000000020000000000000000000000ffff008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '$&)*-*)\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000080) 966.550769ms ago: executing program 2 (id=3150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e156f30642d654384d4be8b9eb4add6d9603e8fe122b9d70171d6f8ea5", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0xfffffffc, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0xfddb, 0x6, "e80d5303b42e583a5c0b57701dac2778fd37b2c7e3184f6adb20ee6eb6dc12b7fa207305bc6a7bcd25070e76c732b45305769262161aca87f9b8f790d4cb8ae52d70c35a735f818685f659ca022308e54f55602486baabee52669de00f36ceafc1d7d0d908d6af82a00909d3dffc1324e1d41f9cd41886404c9c3a1cf673e65ce885e7c86270b3add7cf3c45d84b349265d9e0e5a7577c744d61be9bcd62c6d2d94412dc526fd4dbd44a44085430182f0000000000000000207b6f317ae90c67400dcd018e2dc2951eede12567163a10d3a8e9f40adc1606980eb04a647d60d3185ee509bdade806185edcacfa3874fafd3ac1e8b4c7118df22647f5110f618039ab5577e137cb90ad362000ae4a1d8e402983fd6414bc33bf395c3651c8e13a85b942f5baea438aebf491230b9c045bf77bfe197e423024c27c9c5cf2390741e9746663f407d37bcd8ac942a74e4c3ff290733dc1df8ea27ad1e0430178b549a3e96f29ec3de770abf74f2f47e4de9d266c934b1c6830b82c611f3ea8ee3604dab910aaf210cc68f19287167cccc6240e701382c1924230a5b98b61bb3511bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d0}, 0x1800) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 895.426714ms ago: executing program 4 (id=3151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000880)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@map=r2, 0xffffffffffffffff, 0x2f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (async) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000880)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@map=r2, 0xffffffffffffffff, 0x2f}, 0x20) (async) 864.186816ms ago: executing program 3 (id=3152): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0xff}, @in6=@loopback, {0x200000003, 0x0, 0x1000000000000007, 0x0, 0x3, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x1}, 0x30bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r5, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c9c96c89a70f42f000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x301, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x20044882) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000060000340007801800018014000240fe7ffffffffff60000000000000000bb06bdd2c004400e1f00000500070088000000060005404e220000000adaef6168da9bd697a1921270a115bd67ada04eca905a455a0193f4dba964a62ef18d37aacb4a3cf37f4740b69dcca607bf7fe30b78c51ad2a875b9cb28c6043ef4832c457d668258edebd7f5700c80b5e8e6f6486b0c1a567d585273a0b2c5e855dd23e070d1b4d1042df2cbdb2d804a05ce6debbb53d8e0fc5addd45126de9d94acf55c38651729a44f603e79ff1908d326f3391551a17f4d51a35ffe29a23016300111839c342a667580d7a8d01a5c6e3a51ccdd15136de505e713c8969e4845abea419719bd886c3bb0cb711190e9696823190baebf2b0530cd89d87394c51aabed707e362a29435f8ba487a20356dbc53acc1c290b14151f381eba99357e2d869280bfdf56b922465106dd05619f57c86d5a9f6f3042817dd60b4f9aa308c9b48ee8ef06f7f6a729aa636ed95cf5e7f80e048382d45670502ececc0934ceb279fe7789c2f3ff989ef2c21a3ffbcfd8cef287b1fd064de4b2d5871895c0115c01b78b5c41160c02190ea5a43615b9a0611965aa1de3f371810fb2d79cb416278786ad117276ccc25846e3f540d700"/493], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000780)="653981a333c64f2f7a7bf3f05166b17416576f1260ea4e660b61bbf41102ceae3b070342a36767c036d9fd4b14313c3e7284b4543438bfca89760e52c6a676617abaae51798be6021cf7c8e16a4fd20a05d0e9bed3ae722f8848677a782ab0d883a674fcf8854ba2dc8d2a9db56bc71a735dcf4da66fad7973365715987742cf9e725144b62d88ea082025e231d3f14c07c0aac04317f8d2a4937a", 0x9b}, {&(0x7f00000005c0)="d895a827b773203423959039a709c5421840b09e5a0847420df18750211e4db73298b071687bb85776f8558d18db0dfbe6517db205718fda87a47df82a1d6984c59ea496f6f33bbdb4335e88dcd3b7692fc1ac71eb4035edf1f472179ab21b731f2c6817fa9dcae2dbe5416180b26c9775fa4731e011c5a9cca8308d4e8c390b06f57fdf6e5b8a689cf68b9b7e81c5bbb896bdfc9084a69db56490fb7c24eedb588bda033e51f942a34bb1632c9388c84f561eb5ccdda1a4d35319d7b56255eeadc0203c504fb1e7014a8360bdc964a51da8514adda65686a9077fb028a8", 0xde}, {&(0x7f0000000ac0)="7dda99ee1bd0747ad188b55ef8b29de3fc854120b2b88ebd9fb0b38fd0ddec11741fc12fbdbc6f2d58719101f8c9c1c08a6a180a7ee7f14f8004cb8b73e7da558625b5856ed1dde15537333a63b66775bb04eb2134ecc9e86061bdb032e7bbba1157ad808f4a036e4dbf29e59b9ba0aeeee103219a7bddc10a0f24c3a8f0e07443d7cba90aface227022f9aa1a72fac9d94faf69007ad0447b3d0acfdb51dbc8b77cc407eb60604dd471e41c377b4002fd9da98ad2ca63c591de84a98304478f0f070d2b5f011d4f826ec5c92f9ded52e14dcd03d6f0ec05bd8bac3205617b5000", 0xe1}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7f}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fff"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000b182f23de47f269352736295bf673ff1117bc1776b900f2f7dc5adbc48497b357abd20826c3b7bdc50dccc3c442cf3a2d62ed129eafd000ac700f60f59240c51e7f499115759e", @ANYRES16=0x0, @ANYBLOB="020023bd7000ffdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$nl_route_sched(r7, 0x0, 0x20008005) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 648.172688ms ago: executing program 4 (id=3153): unshare(0x6a040000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000000c0)=""/71, &(0x7f0000000180)=0x47) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a30000000000500010006000000050005000000000075670340ce92972b3ebb690500040000000000140007800800114000000000080012400000ffff0d00030068"], 0x5c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r8], 0x20, 0x6044}, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 527.129822ms ago: executing program 1 (id=3154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101900000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001ac0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x4}]}}]}, 0x40}}, 0x2000c800) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x96, 0x3, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x1c, 0x7b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast}, {@multicast1, 0x401}]}, @cipso={0x86, 0x15, 0xfffffffffffffffc, [{0x0, 0xf, "030eee62e8b2c5336341ef2a5a"}]}, @rr={0x7, 0x17, 0x20, [@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) r5 = socket(0x1d, 0x2, 0x6) accept4$alg(r5, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, r1, 0x1, 0x4, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x840) 516.893561ms ago: executing program 1 (id=3155): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="050009000400000006000e0002"], 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, r4, 0x325, 0x2, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000240), 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x82, "a0c834f0c91c3c988d6b83377f284720bfc8b99fda2b2a62635d3c3034c25c245c02140308d15785fc6b5111849cb4de742039d1912165bfdd04bfc5091c3da497493eab8ff6784b1f64cedcab1804a9cc35f9269d00cde459eb9961376717c31fac338e0c197caba1168c2eaef31c662c6dba128c468891f853281f9708a76322c4"}, &(0x7f00000000c0)=0x8a) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0xc78, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xc14, 0x8, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x350, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x104, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a90f713b9c482ff65125e8632430712ebbcdcdfdebd7815cb4e93f42295d9fa0"}, @WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x6}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}, {0x4}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000001, @mcast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x294, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d8e8992c813b0a62a94cc18fcaf9eff7029a514af55a80e3b91f263368a0925a"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c9d14da32fd95dd854722c0eb27d05aa3be697dcd3f86045bf825caaa5df5136"}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x3cc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @mcast1, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "21450afa16022dfd919aec909ee176d7b78123308d2ca7fa4a9b5fc67c553a4f"}, @WGPEER_A_ALLOWEDIPS={0x37c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x3}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e3ddd80cbce7aed0c4ca7b889693de20ed9d1b321d48bb6fb0ce33721cd2c9ed"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0xc78}, 0x1, 0x0, 0x0, 0x48c1}, 0x8844) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x1, 0x5, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc002) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x18, 0x25, 0x109, 0x70bd1f, 0xfffffffc, {0xe}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000000540)={r13, @in6={{0xa, 0x4e23, 0x4, @empty, 0x40}}, 0x2, 0x9}, 0x90) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000100)={r6, 0x3, 0x1, 0x8, 0x0, 0xff, 0x0, 0x40, {r13, @in6={{0xa, 0x4e22, 0x7, @loopback, 0xbf89}}, 0x2, 0x400000, 0x5, 0x1, 0x8}}, &(0x7f00000001c0)=0xb0) 504.427285ms ago: executing program 0 (id=3156): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000002100)={&(0x7f0000001ac0)={0xa, 0x4e21, 0x6, @empty, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000002080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x18}, 0x4044812) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) r2 = socket$inet(0xa, 0x806, 0x84) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r6, @ANYRES16=r2], 0x4640}, 0x2}, 0x20000000) listen(r2, 0x8) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r7) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0), 0x10) bind$802154_raw(r8, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvfrom$packet(r0, &(0x7f0000000140)=""/34, 0x22, 0x40000000, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001440)={0x30, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x3a}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdf}]}, @nested={0x10, 0x4, 0x0, 0x1, [@typed={0x4, 0xfb, 0x0, 0x0, @binary}, @typed={0x8, 0xee, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmmsg$inet(r9, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x10}}], 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f0000001f40)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 297.448287ms ago: executing program 1 (id=3157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000370427bd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c0400000000003400128009000100697069700000000024000280050005000300000005000a000000000006000f0003000000080002000a"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="7300330080200900ffffffffffff080211"], 0x90}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 256.689281ms ago: executing program 2 (id=3158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@fallback=r0, r0, 0x2f, 0x2000}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x810, r2, 0x3dd55000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x810, r2, 0x3dd55000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000101}, 0x84) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x40, 0x1f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c4) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x40, 0x1f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c4) 172.760136ms ago: executing program 1 (id=3159): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'rlimit'}, {0x6, 'io'}, {0x3b, 'net'}]}, 0x11) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e2", 0x7}], 0x1}}], 0x1, 0x20008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x123) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500"/15], &(0x7f0000000540)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x54, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x6, 0x0, &(0x7f00000004c0)="630b008646dc", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000340)=""/169, &(0x7f00000000c0)=0xa9) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) close(0x3) 0s ago: executing program 2 (id=3160): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000001600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001180)="b75f54acb592578380cf4600625ff62db1408c8909860ee56198", 0x1a}, {&(0x7f0000001340)="184ed3ed6fa2e4d1cef75c8063e18b637d4aa4cc171490f4bdb520d91c5a03ae056cbec6c44a12badfcb72d497a7dd25e1a7185fd9156511768d31aaa66ed76c635e0be3616eab294c9ec6fe7c6f9679c95aaae6ec1a474712e3be4934044be4e32a5ca69d42ab24d0622663c9cc711a7b619e3d1f5e91b44c79988462b375a6444925b86c36e3b6ef4ac6c7705e30f0e7e36ea66876ca2aeaea7c0ff15f51ad13e9f430ff37", 0xa6}, {&(0x7f0000001480)="14b94654d8a72e775fcebd9ba7f2c894e1140dc3e39ba75669b6e553e573218bb0bf3a003dd651c77b5e6e6765442c8cc3cb38f2985b51ce9c386d0aa31cdd1f68eefd979bdd1b6a2d2252e53a71f33b96c1c9290a84fe4c17d67f8409a8a61577f1561bbc571e48344daa623edcd03810e9e613", 0x74}, {&(0x7f0000001500)="ded6be2368b04311ad90364c5d5359ca891c81113301d680435ff868356855286298b4ad3f5519b4ced2d725aa111bf22f695067ae1a50df9d985b17b60a239c8d305e0f9295f9f9f78504", 0x4b}], 0x7, &(0x7f0000001880)=ANY=[@ANYRESDEC=r0], 0x110, 0x48811}], 0x1, 0x40800) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000001080)='./file0/file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001200)={r0, r5}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000000)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="02010909070000002bbd5000fdffffff050007002aa000000a004e230000005efe800000000000000000000000000041d40d00000000000085cb72acec7f8258598c001c6bf5c7aefbaee63219c9146dbe254a5613a0ca432db030db7ddf33918062814caa3d333490417abc648f934ae225d4b22c07acc9a84e84e36efd6fc9cc26a85cc12446e66a2711d2feb86fd74528f171c01a77d19fab97891dd9cca1d86ec827319cc290df9d5413934e42e8adcfd4348de7ba2df7e1a16083d6098a7073e141ee57fd000000001f6fa75e9387b9e7bf76cedb897942edb74c086c"], 0x38}}, 0x24000802) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wg2\x00'}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500000000", @ANYRES64=r1, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES8=r7, @ANYBLOB="eda20a00", @ANYRES32, @ANYBLOB], 0x44}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000010c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(r2, 0x0, 0x0, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x101, 0x0, 0x0) kernel console output (not intermixed with test programs): 9.117209][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 329.125284][ C1] lec:lec_tx_timeout: lec0 [ 329.138936][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.450954][T13828] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1937'. [ 329.491863][T13831] netlink: 'syz.2.1938': attribute type 13 has an invalid length. [ 329.536945][T13832] netlink: 1100 bytes leftover after parsing attributes in process `syz.3.1939'. [ 329.888692][T13850] netlink: 'syz.1.1940': attribute type 58 has an invalid length. [ 329.936761][T13850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1940'. [ 329.984205][T13831] tipc: Resetting bearer [ 330.149350][T13837] netlink: 1100 bytes leftover after parsing attributes in process `syz.3.1939'. [ 330.174118][T13849] netlink: 'syz.1.1940': attribute type 15 has an invalid length. [ 330.194104][T13849] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1940'. [ 330.377284][ T5986] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.385866][ T5986] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.409853][ T5986] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.445009][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1943'. [ 330.461594][ T5986] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.480479][ T5986] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.500720][ T5986] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.547531][ T5986] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.580173][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1945'. [ 330.587092][ T5986] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.621771][ T5986] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.647224][ T5986] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.655640][ T5986] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.705083][ T5986] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.830647][T13884] netlink: 'syz.1.1947': attribute type 58 has an invalid length. [ 330.857291][T13884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1947'. [ 330.927524][T13885] vlan3: entered promiscuous mode [ 330.932641][T13885] geneve1: entered promiscuous mode [ 330.971248][T13885] vlan3: entered allmulticast mode [ 331.007503][T13885] geneve1: entered allmulticast mode [ 331.069239][T13885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1948'. [ 331.214878][T13885] bond6: entered promiscuous mode [ 331.221163][T13885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.324380][T13895] netlink: 'syz.1.1949': attribute type 12 has an invalid length. [ 331.333702][T13895] netlink: 'syz.1.1949': attribute type 11 has an invalid length. [ 331.413057][T13904] netlink: 'syz.4.1951': attribute type 39 has an invalid length. [ 331.519777][T13910] nbd: nbd1 already in use [ 331.525471][T13910] block nbd1: NBD_DISCONNECT [ 331.545516][T13910] block nbd1: Send disconnect failed -32 [ 331.895062][T13927] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 332.160167][T13944] tipc: Enabled bearer , priority 0 [ 332.308424][ T24] IPVS: starting estimator thread 0... [ 332.320428][T13956] netlink: 'syz.4.1963': attribute type 1 has an invalid length. [ 332.345487][T13945] tipc: Disabling bearer [ 332.400095][T13958] IPVS: using max 26 ests per chain, 62400 per kthread [ 332.523113][ T30] audit: type=1107 audit(1769583810.928:5): pid=13968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­œf—m`"ÊýÍùñŒyO €àðt 5Ç>(Òäs'׃E‚' [ 332.539126][T13967] bridge_slave_0: invalid flags given to default FDB implementation [ 332.818094][T13980] __nla_validate_parse: 6 callbacks suppressed [ 332.818116][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1969'. [ 332.861942][T13982] openvswitch: netlink: IPv6 tunnel dst address is zero [ 332.881210][T13983] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 333.312358][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 333.347645][T13972] batadv2: entered promiscuous mode [ 333.377332][T13972] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 333.445560][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 333.799395][T14014] FAULT_INJECTION: forcing a failure. [ 333.799395][T14014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.868675][T14014] CPU: 0 UID: 0 PID: 14014 Comm: syz.3.1977 Not tainted syzkaller #0 PREEMPT(full) [ 333.868705][T14014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 333.868718][T14014] Call Trace: [ 333.868726][T14014] [ 333.868735][T14014] dump_stack_lvl+0xe8/0x150 [ 333.868768][T14014] should_fail_ex+0x412/0x560 [ 333.868800][T14014] _copy_from_user+0x2d/0xb0 [ 333.868831][T14014] kstrtouint_from_user+0xd6/0x180 [ 333.868861][T14014] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 333.868906][T14014] proc_fail_nth_write+0x8e/0x210 [ 333.868936][T14014] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 333.868970][T14014] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 333.869002][T14014] vfs_write+0x29a/0xb90 [ 333.869041][T14014] ? __pfx_vfs_write+0x10/0x10 [ 333.869073][T14014] ? __fget_files+0x2a/0x420 [ 333.869101][T14014] ? __fget_files+0x3a0/0x420 [ 333.869122][T14014] ? __fget_files+0x2a/0x420 [ 333.869154][T14014] ksys_write+0x150/0x270 [ 333.869186][T14014] ? __pfx_ksys_write+0x10/0x10 [ 333.869237][T14014] do_syscall_64+0xe2/0xf80 [ 333.869261][T14014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.869280][T14014] ? trace_irq_disable+0x37/0x100 [ 333.869299][T14014] ? clear_bhb_loop+0x60/0xb0 [ 333.869324][T14014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.869344][T14014] RIP: 0033:0x7ffaf415b78e [ 333.869363][T14014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.869380][T14014] RSP: 002b:00007ffaf23f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.869402][T14014] RAX: ffffffffffffffda RBX: 00007ffaf23f66c0 RCX: 00007ffaf415b78e [ 333.869417][T14014] RDX: 0000000000000001 RSI: 00007ffaf23f60a0 RDI: 0000000000000004 [ 333.869430][T14014] RBP: 00007ffaf23f6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.869443][T14014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.869455][T14014] R13: 00007ffaf4416038 R14: 00007ffaf4415fa0 R15: 00007fff5b6cd938 [ 333.869490][T14014] [ 334.147312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.155391][ C1] lec:lec_tx_timeout: lec0 [ 334.160192][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.431832][T14038] syz.2.1983 (14038) used obsolete PPPIOCDETACH ioctl [ 334.557787][T14042] netlink: 'syz.2.1983': attribute type 10 has an invalid length. [ 334.565328][T14043] netlink: 'syz.1.1985': attribute type 83 has an invalid length. [ 334.637300][T14042] team0: Device ipvlan1 failed to register rx_handler [ 334.911246][T14050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1986'. [ 335.123218][T14049] wg1 speed is unknown, defaulting to 1000 [ 335.465794][T14057] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 335.494281][T14057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.663057][T14057] only policy match revision 0 supported [ 335.663081][T14057] unable to load match [ 335.687889][T14065] openvswitch: netlink: IP tunnel dst address not specified [ 335.904172][T14070] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 336.046774][T14075] wg1 speed is unknown, defaulting to 1000 [ 336.428124][T14089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1995'. [ 336.585976][T14094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1996'. [ 336.779480][T14101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1998'. [ 336.817646][T14101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1998'. [ 336.856953][T14103] geneve3: entered promiscuous mode [ 336.878221][ T7200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.897352][T14103] netlink: 'syz.3.2001': attribute type 15 has an invalid length. [ 336.905312][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 336.916835][T14103] netlink: 'syz.3.2001': attribute type 15 has an invalid length. [ 336.946025][ T7200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.967630][ T7200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.976397][ T7200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.989775][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 337.167748][T14116] syzkaller0: entered promiscuous mode [ 337.189048][T14116] syzkaller0: entered allmulticast mode [ 337.363301][T14121] x_tables: duplicate underflow at hook 1 [ 337.372639][T14121] netlink: 'syz.3.2007': attribute type 1 has an invalid length. [ 338.458464][T14113] syz.4.2004 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 338.592482][T14113] CPU: 0 UID: 0 PID: 14113 Comm: syz.4.2004 Not tainted syzkaller #0 PREEMPT(full) [ 338.592512][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 338.592523][T14113] Call Trace: [ 338.592531][T14113] [ 338.592539][T14113] dump_stack_lvl+0xe8/0x150 [ 338.592571][T14113] dump_header+0xd3/0x4c0 [ 338.592606][T14113] oom_kill_process+0x3ab/0x970 [ 338.592631][T14113] out_of_memory+0x106c/0x1410 [ 338.592648][T14113] ? percpu_ref_put+0x19/0x180 [ 338.592671][T14113] ? __pfx___mutex_lock+0x10/0x10 [ 338.592702][T14113] ? __pfx_out_of_memory+0x10/0x10 [ 338.592718][T14113] ? do_raw_spin_unlock+0xf5/0x210 [ 338.592750][T14113] try_charge_memcg+0xc53/0x1560 [ 338.592791][T14113] ? __pfx_try_charge_memcg+0x10/0x10 [ 338.592807][T14113] ? xa_load+0x60/0x210 [ 338.592835][T14113] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 338.592867][T14113] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 338.592901][T14113] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 338.592935][T14113] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 338.592968][T14113] __read_swap_cache_async+0x212/0x480 [ 338.593003][T14113] swap_cluster_readahead+0x358/0x680 [ 338.593038][T14113] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 338.593079][T14113] ? get_vma_policy+0x27b/0x3c0 [ 338.593104][T14113] swapin_readahead+0x196/0xc50 [ 338.593134][T14113] ? swap_table_get+0x1e/0x260 [ 338.593172][T14113] ? __pfx_swapin_readahead+0x10/0x10 [ 338.593199][T14113] ? swap_table_get+0x1e/0x260 [ 338.593222][T14113] ? swap_table_get+0x1e/0x260 [ 338.593242][T14113] ? swap_table_get+0x1e/0x260 [ 338.593266][T14113] ? swap_table_get+0x216/0x260 [ 338.593292][T14113] ? swap_cache_get_folio+0x513/0x520 [ 338.593324][T14113] do_swap_page+0x8ce/0x5e10 [ 338.593372][T14113] ? ___pte_offset_map+0x29/0x240 [ 338.593399][T14113] ? ___pte_offset_map+0x29/0x240 [ 338.593425][T14113] ? do_swap_page+0x18b/0x5e10 [ 338.593447][T14113] ? __pfx_do_swap_page+0x10/0x10 [ 338.593471][T14113] ? __lock_acquire+0x6b5/0x2cf0 [ 338.593496][T14113] ? __pfx_default_wake_function+0x10/0x10 [ 338.593525][T14113] ? ___pte_offset_map+0x1ae/0x240 [ 338.593555][T14113] ? pte_offset_map_rw_nolock+0xea/0x160 [ 338.593585][T14113] handle_mm_fault+0x12d2/0x32a0 [ 338.593627][T14113] ? handle_mm_fault+0xee/0x32a0 [ 338.593662][T14113] ? __pfx_handle_mm_fault+0x10/0x10 [ 338.593686][T14113] ? lock_vma_under_rcu+0x45a/0x500 [ 338.593733][T14113] do_user_addr_fault+0xa73/0x1360 [ 338.593769][T14113] ? rcu_is_watching+0x15/0xb0 [ 338.593789][T14113] ? trace_page_fault_user+0x84/0x1c0 [ 338.593822][T14113] exc_page_fault+0x6a/0xc0 [ 338.593845][T14113] asm_exc_page_fault+0x26/0x30 [ 338.593862][T14113] RIP: 0033:0x7f196524f780 [ 338.593882][T14113] Code: 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 [ 338.593898][T14113] RSP: 002b:00007ffd39fbc368 EFLAGS: 00010246 [ 338.593917][T14113] RAX: 0000000000000000 RBX: ffffffff81f33a97 RCX: ffffffff895fda97 [ 338.593930][T14113] RDX: 0000000000001a97 RSI: ffffffff81f33a97 RDI: 000000000000001c [ 338.593943][T14113] RBP: 0000000000000000 R08: 00007f1965600000 R09: 00007f1965602000 [ 338.593955][T14113] R10: 0000000081f33a9b R11: 000000000000001c R12: 00007f1965616038 [ 338.593967][T14113] R13: 000000000000000a R14: ffffffff81f330b9 R15: 00007f1966145720 [ 338.593981][T14113] ? bpf_lsm_bpf+0x9/0x20 [ 338.594005][T14113] ? bpf_lsm_is_trusted+0xc7/0x130 [ 338.594033][T14113] ? sk_setsockopt+0x25f7/0x2e80 [ 338.594053][T14113] ? bpf_lsm_is_trusted+0xc7/0x130 [ 338.594084][T14113] [ 339.004301][T14113] memory: usage 293416kB, limit 307200kB, failcnt 639 [ 339.011189][T14113] memory+swap: usage 291748kB, limit 9007199254740988kB, failcnt 0 [ 339.019180][T14113] kmem: usage 289464kB, limit 9007199254740988kB, failcnt 0 [ 339.026489][T14113] Memory cgroup stats for /syz4: [ 339.026983][T14113] cache 0 [ 339.034968][T14113] rss 24576 [ 339.038141][T14113] rss_huge 0 [ 339.041355][T14113] shmem 0 [ 339.044303][T14113] mapped_file 0 [ 339.048210][T14113] dirty 0 [ 339.051188][T14113] writeback 0 [ 339.054491][T14113] workingset_refault_anon 40 [ 339.059214][T14113] workingset_refault_file 1 [ 339.063733][T14113] swap 155648 [ 339.067069][T14113] swapcached 40960 [ 339.070802][T14113] pgpgin 43907 [ 339.074185][T14113] pgpgout 43895 [ 339.082353][T14113] pgfault 98690 [ 339.085860][T14113] pgmajfault 35 [ 339.089405][T14113] inactive_anon 0 [ 339.093051][T14113] active_anon 45056 [ 339.096873][T14113] inactive_file 0 [ 339.101028][T14113] active_file 0 [ 339.105042][T14113] unevictable 0 [ 339.108692][T14113] hierarchical_memory_limit 314572800 [ 339.114095][T14113] hierarchical_memsw_limit 9223372036854771712 [ 339.120343][T14113] total_cache 0 [ 339.123816][T14113] total_rss 24576 [ 339.127511][T14113] total_rss_huge 0 [ 339.131248][T14113] total_shmem 0 [ 339.134717][T14113] total_mapped_file 0 [ 339.138763][T14113] total_dirty 0 [ 339.142239][T14113] total_writeback 0 [ 339.146061][T14113] total_workingset_refault_anon 40 [ 339.151276][T14113] total_workingset_refault_file 1 [ 339.156310][T14113] total_swap 155648 [ 339.160246][T14113] total_swapcached 40960 [ 339.164504][T14113] total_pgpgin 43907 [ 339.167338][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 339.168434][T14113] total_pgpgout 43895 [ 339.176439][ C1] lec:lec_tx_timeout: lec0 [ 339.180457][T14113] total_pgfault 98690 [ 339.187358][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.188836][T14113] total_pgmajfault 35 [ 339.198730][T14113] total_inactive_anon 0 [ 339.202895][T14113] total_active_anon 45056 [ 339.207288][T14113] total_inactive_file 0 [ 339.211456][T14113] total_active_file 0 [ 339.215451][T14113] total_unevictable 0 [ 339.219518][T14113] anon_cost 0 [ 339.222817][T14113] file_cost 0 [ 339.226117][T14113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2004,pid=14113,uid=0 [ 339.242574][T14113] Memory cgroup out of memory: Killed process 14113 (syz.4.2004) total-vm:102256kB, anon-rss:1208kB, file-rss:23052kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 339.296286][T14168] wg1 speed is unknown, defaulting to 1000 [ 339.577663][T14171] nbd1: detected capacity change from 0 to 63 [ 339.590443][T12602] block nbd1: Send control failed (result -32) [ 339.592311][ T52] block nbd1: Receive control failed (result -32) [ 339.684905][T12602] block nbd1: Request send failed, requeueing [ 339.732026][ T11] block nbd1: Dead connection, failed to find a fallback [ 339.748481][T12602] blk_print_req_error: 138 callbacks suppressed [ 339.748501][T12602] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.764797][ T11] block nbd1: shutting down sockets [ 339.770158][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.779831][ T5835] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 339.788730][ T11] buffer_io_error: 138 callbacks suppressed [ 339.788748][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 339.822682][T12602] Buffer I/O error on dev nbd1, logical block 1, async page read [ 339.841864][T12602] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.862192][T12602] Buffer I/O error on dev nbd1, logical block 2, async page read [ 339.887553][T12602] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.957565][T12602] Buffer I/O error on dev nbd1, logical block 3, async page read [ 340.000692][T12602] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.001439][T14195] __nla_validate_parse: 2 callbacks suppressed [ 340.001454][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 340.062113][T12602] Buffer I/O error on dev nbd1, logical block 0, async page read [ 340.108053][T12602] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.136860][T14182] tipc: Resetting bearer [ 340.151088][T12602] Buffer I/O error on dev nbd1, logical block 1, async page read [ 340.197227][T12602] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.231956][T12602] Buffer I/O error on dev nbd1, logical block 2, async page read [ 340.236194][T14189] IPVS: Error connecting to the multicast addr [ 340.295452][T12602] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.332260][T14187] wg1 speed is unknown, defaulting to 1000 [ 340.372803][T12602] Buffer I/O error on dev nbd1, logical block 3, async page read [ 340.423505][T12602] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.477479][T12602] Buffer I/O error on dev nbd1, logical block 0, async page read [ 340.518908][T12602] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.577451][T12602] Buffer I/O error on dev nbd1, logical block 1, async page read [ 340.586154][T12602] ldm_validate_partition_table(): Disk read failed. [ 340.625898][T14208] netlink: 'syz.2.2028': attribute type 10 has an invalid length. [ 340.633963][T14208] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2028'. [ 340.644245][T12602] Dev nbd1: unable to read RDB block 0 [ 340.665542][T12602] nbd1: unable to read partition table [ 340.685142][T14208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.717791][T12602] ldm_validate_partition_table(): Disk read failed. [ 340.736646][T14208] bridge0: port 1(bond0) entered blocking state [ 340.757380][T12602] Dev nbd1: unable to read RDB block 0 [ 340.763106][T14208] bridge0: port 1(bond0) entered disabled state [ 340.775199][T12602] nbd1: unable to read partition table [ 340.781391][T14208] bond0: entered allmulticast mode [ 341.116333][T14224] wg1 speed is unknown, defaulting to 1000 [ 341.169562][T14222] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2032'. [ 341.362050][T14236] tipc: Enabling of bearer rejected, already enabled [ 341.372624][T14233] tunl0: Caught tx_queue_len zero misconfig [ 341.379593][T14233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2036'. [ 341.410192][T14237] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 341.587916][T14244] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 341.626326][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'. [ 341.688347][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2039'. [ 341.727924][T14244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2039'. [ 341.746559][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2039'. [ 341.800148][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2039'. [ 341.926468][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2042'. [ 342.248222][T13675] block nbd3: Possible stuck request ffff888025b38000: control (read@0,4096B). Runtime 150 seconds [ 343.859239][T14348] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.868189][T14348] bond0: (slave bond8): Enslaving as an active interface with an up link [ 344.083391][T14363] syzkaller0: entered promiscuous mode [ 344.108051][T14363] syzkaller0: entered allmulticast mode [ 344.133208][T14363] syzkaller0: left promiscuous mode [ 344.138550][T14363] syzkaller0: left allmulticast mode [ 344.203542][T14368] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 344.538991][T14385] xt_nfacct: accounting object `syz0' does not exist [ 344.967070][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 344.975163][ C1] lec:lec_tx_timeout: lec0 [ 344.980895][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.105459][T14371] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.114951][T14371] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 345.134307][T14371] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.141040][T14371] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 345.160328][T14371] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.166424][T14371] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 345.182555][T14371] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.190395][T14371] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 345.313664][T14424] hsr0: entered promiscuous mode [ 345.332317][T14423] hsr0: left promiscuous mode [ 345.811520][T14455] Ï: option downdelay: invalid value (18446744073709547007) [ 345.819085][T14455] Ï: option downdelay: allowed values 0 - 2147483647 [ 345.828375][T14455] Ï (unregistering): Released all slaves [ 345.955980][T14459] tipc: Enabled bearer , priority 0 [ 345.979120][T14459] syzkaller0: entered promiscuous mode [ 345.984604][T14459] syzkaller0: entered allmulticast mode [ 346.019893][T14459] tipc: Resetting bearer [ 346.028380][T14457] tipc: Resetting bearer [ 346.047892][T14457] tipc: Disabling bearer [ 346.161760][T14474] __nla_validate_parse: 52 callbacks suppressed [ 346.161783][T14474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2105'. [ 346.214750][T14476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2104'. [ 346.246656][T14476] wg1 speed is unknown, defaulting to 1000 [ 346.440263][T14484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2107'. [ 346.449643][T14484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2107'. [ 346.503557][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2107'. [ 346.615106][T14491] veth7: entered allmulticast mode [ 346.660984][T14501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'. [ 346.772473][T14506] bridge0: entered allmulticast mode [ 346.795941][T14506] vlan2: left allmulticast mode [ 346.801415][T14506] vlan2: left promiscuous mode [ 346.807481][T14506] bridge0: port 3(vlan2) entered disabled state [ 346.831691][T14506] bridge_slave_0: left allmulticast mode [ 346.837776][T14506] bridge_slave_0: left promiscuous mode [ 346.844869][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.898700][T14516] netlink: 'syz.4.2114': attribute type 1 has an invalid length. [ 347.095067][T14517] gre2: entered allmulticast mode [ 347.238894][T14527] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2116'. [ 347.420632][T14537] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 347.501075][T14544] xfrm0 speed is unknown, defaulting to 1000 [ 347.513940][T14544] xfrm0 speed is unknown, defaulting to 1000 [ 347.532495][T14538] delete_channel: no stack [ 347.538712][T14544] xfrm0 speed is unknown, defaulting to 1000 [ 347.586770][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'. [ 347.619717][T14548] Cannot find del_set index 0 as target [ 347.679256][T14552] FAULT_INJECTION: forcing a failure. [ 347.679256][T14552] name failslab, interval 1, probability 0, space 0, times 0 [ 347.707213][T14552] CPU: 1 UID: 0 PID: 14552 Comm: syz.3.2126 Not tainted syzkaller #0 PREEMPT(full) [ 347.707243][T14552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 347.707255][T14552] Call Trace: [ 347.707264][T14552] [ 347.707273][T14552] dump_stack_lvl+0xe8/0x150 [ 347.707306][T14552] should_fail_ex+0x412/0x560 [ 347.707335][T14552] should_failslab+0xa8/0x100 [ 347.707360][T14552] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 347.707390][T14552] ? __alloc_skb+0x186/0x7d0 [ 347.707414][T14552] ? __alloc_skb+0x1d0/0x7d0 [ 347.707435][T14552] ? __local_bh_enable_ip+0xd0/0x130 [ 347.707460][T14552] __alloc_skb+0x1d0/0x7d0 [ 347.707488][T14552] netlink_sendmsg+0x5d4/0xb40 [ 347.707523][T14552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.707550][T14552] ? aa_sock_msg_perm+0xf1/0x1b0 [ 347.707577][T14552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.707600][T14552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.707621][T14552] ____sys_sendmsg+0xa68/0xad0 [ 347.707649][T14552] ? __might_fault+0xaf/0x130 [ 347.707685][T14552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.707722][T14552] ? import_iovec+0x73/0xa0 [ 347.707756][T14552] ___sys_sendmsg+0x2a5/0x360 [ 347.707782][T14552] ? __lock_acquire+0x6b5/0x2cf0 [ 347.707813][T14552] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.707874][T14552] ? __fget_files+0x2a/0x420 [ 347.707895][T14552] ? __fget_files+0x3a0/0x420 [ 347.707928][T14552] __x64_sys_sendmsg+0x1bd/0x2a0 [ 347.707957][T14552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.707994][T14552] ? __pfx_ksys_write+0x10/0x10 [ 347.708036][T14552] do_syscall_64+0xe2/0xf80 [ 347.708068][T14552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.708087][T14552] ? trace_irq_disable+0x37/0x100 [ 347.708107][T14552] ? clear_bhb_loop+0x60/0xb0 [ 347.708130][T14552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.708150][T14552] RIP: 0033:0x7ffaf419aeb9 [ 347.708170][T14552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.708188][T14552] RSP: 002b:00007ffaf23f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.708210][T14552] RAX: ffffffffffffffda RBX: 00007ffaf4415fa0 RCX: 00007ffaf419aeb9 [ 347.708225][T14552] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000008 [ 347.708238][T14552] RBP: 00007ffaf23f6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.708250][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.708262][T14552] R13: 00007ffaf4416038 R14: 00007ffaf4415fa0 R15: 00007fff5b6cd938 [ 347.708294][T14552] [ 348.052674][T14563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2130'. [ 348.092622][T14544] infiniband syz1: set down [ 348.095006][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2127'. [ 348.097539][T14544] infiniband syz1: added xfrm0 [ 348.119895][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 348.161063][T14544] RDS/IB: syz1: added [ 348.166107][T14544] smc: adding ib device syz1 with port count 1 [ 348.173002][T14544] smc: ib device syz1 port 1 has no pnetid [ 348.183573][T14544] xfrm0 speed is unknown, defaulting to 1000 [ 348.247132][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 348.306531][T14567] wg1 speed is unknown, defaulting to 1000 [ 348.697675][T14544] xfrm0 speed is unknown, defaulting to 1000 [ 348.730836][T14585] tipc: Enabled bearer , priority 0 [ 348.741958][T14585] syzkaller0: entered promiscuous mode [ 348.748753][T14585] syzkaller0: entered allmulticast mode [ 348.783563][T14586] ipvlan0: mtu less than device minimum [ 348.789887][T14585] ipvlan0: mtu less than device minimum [ 348.811416][T14584] tipc: Resetting bearer [ 348.849507][T14584] tipc: Disabling bearer [ 349.171309][T14567] xfrm0 speed is unknown, defaulting to 1000 [ 349.321778][T14611] netlink: 'syz.2.2143': attribute type 13 has an invalid length. [ 349.467258][T14616] netlink: 'syz.4.2144': attribute type 13 has an invalid length. [ 349.486134][T14544] xfrm0 speed is unknown, defaulting to 1000 [ 349.526600][T14616] xt_cluster: node mask cannot exceed total number of nodes [ 349.830362][T14544] xfrm0 speed is unknown, defaulting to 1000 [ 350.007086][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 350.015161][ C1] lec:lec_tx_timeout: lec0 [ 350.020294][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.324571][T14544] xfrm0 speed is unknown, defaulting to 1000 [ 350.744465][T14657] 8021q: VLANs not supported on gre0 [ 351.044755][T14662] Cannot find set identified by id 65534 to match [ 351.264427][T14667] netlink: 'syz.3.2159': attribute type 1 has an invalid length. [ 351.285125][T14669] tipc: Enabling of bearer rejected, already enabled [ 351.356480][T14667] bond7: entered promiscuous mode [ 351.362187][T14667] 8021q: adding VLAN 0 to HW filter on device bond7 [ 351.476112][T14682] bond7: (slave veth9): making interface the new active one [ 351.512665][T14688] __nla_validate_parse: 6 callbacks suppressed [ 351.512684][T14688] netlink: 69 bytes leftover after parsing attributes in process `syz.1.2163'. [ 351.519319][T14682] veth9: entered promiscuous mode [ 351.535993][T14691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.551743][T14682] bond7: (slave veth9): Enslaving as an active interface with an up link [ 351.931819][T14707] wg1 speed is unknown, defaulting to 1000 [ 352.017511][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 352.032319][T14713] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 352.048069][T14722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 352.070787][T14713] bond8 (unregistering): Released all slaves [ 352.123701][T14707] xfrm0 speed is unknown, defaulting to 1000 [ 352.133695][T14727] bond0: Caught tx_queue_len zero misconfig [ 352.224958][T14731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.450861][T14733] wg1 speed is unknown, defaulting to 1000 [ 352.890039][T14733] xfrm0 speed is unknown, defaulting to 1000 [ 353.009825][T14769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2179'. [ 353.338393][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2184'. [ 353.346970][T14792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2187'. [ 353.362969][T14792] netlink: 560 bytes leftover after parsing attributes in process `syz.2.2187'. [ 353.474463][T14790] vlan2: left allmulticast mode [ 353.479933][T14790] team0: left allmulticast mode [ 353.485077][T14790] team_slave_0: left allmulticast mode [ 353.490890][T14790] team_slave_1: left allmulticast mode [ 353.496492][T14790] vlan2: left promiscuous mode [ 353.501912][T14790] team0: left promiscuous mode [ 353.506793][T14790] team_slave_0: left promiscuous mode [ 353.512648][T14790] team_slave_1: left promiscuous mode [ 353.518660][T14790] bridge0: port 3(vlan2) entered disabled state [ 353.528730][T14790] bridge_slave_1: left allmulticast mode [ 353.534380][T14790] bridge_slave_1: left promiscuous mode [ 353.540817][T14790] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.550917][T14790] bridge_slave_0: left allmulticast mode [ 353.556604][T14790] bridge_slave_0: left promiscuous mode [ 353.562526][T14790] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.028164][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 355.036200][ C1] lec:lec_tx_timeout: lec0 [ 355.040858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.737540][T14805] C: renamed from team_slave_0 [ 355.748541][T14805] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 355.757607][T14805] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2189'. [ 355.766865][T14805] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 355.849699][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 356.077391][T14823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2192'. [ 356.469027][T14846] x_tables: duplicate underflow at hook 4 [ 356.618377][T14851] netlink: 'syz.2.2203': attribute type 16 has an invalid length. [ 356.649670][T14851] netlink: 'syz.2.2203': attribute type 17 has an invalid length. [ 356.690139][T14851] netlink: 'syz.2.2203': attribute type 27 has an invalid length. [ 356.708392][T14854] wg1 speed is unknown, defaulting to 1000 [ 356.774475][T14854] xfrm0 speed is unknown, defaulting to 1000 [ 356.808523][T14851] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.2203'. [ 356.826837][T14870] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 356.960885][T14874] bond0: Caught tx_queue_len zero misconfig [ 357.028500][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2207'. [ 357.043696][T14879] openvswitch: netlink: IPv6 tunnel dst address is zero [ 357.057764][T14875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2207'. [ 357.067613][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2207'. [ 357.096576][T14875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2207'. [ 357.343829][T14886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2210'. [ 357.385433][T14888] syzkaller1: entered promiscuous mode [ 357.391282][T14888] syzkaller1: entered allmulticast mode [ 357.408147][T14890] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2212'. [ 357.802285][T14905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2214'. [ 357.853556][T14906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2216'. [ 357.874552][T14906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2216'. [ 357.953586][T14916] netlink: 'syz.0.2218': attribute type 2 has an invalid length. [ 358.029694][T14916] : entered promiscuous mode [ 358.261509][T14935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.277427][T14935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.808702][T14960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.939644][T14979] geneve6: entered promiscuous mode [ 358.956710][ T1146] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.984527][ T1146] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.019352][ T1146] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.040713][ T1146] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.090790][T14980] wg1 speed is unknown, defaulting to 1000 [ 359.098767][T14980] xfrm0 speed is unknown, defaulting to 1000 [ 359.350275][T14994] nbd0: detected capacity change from 0 to 127 [ 359.409507][ T5835] block nbd0: Receive control failed (result -104) [ 359.705782][T15013] netlink: 'syz.0.2243': attribute type 61 has an invalid length. [ 359.799582][T15013] netlink: 'syz.0.2243': attribute type 19 has an invalid length. [ 359.836274][T15013] netlink: 'syz.0.2243': attribute type 20 has an invalid length. [ 360.047316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 360.055378][ C1] lec:lec_tx_timeout: lec0 [ 360.060067][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.451861][T15036] syzkaller0: entered promiscuous mode [ 360.487278][T15036] syzkaller0: entered allmulticast mode [ 360.529356][T15064] tipc: Enabled bearer , priority 0 [ 360.568109][T15034] tipc: Resetting bearer [ 360.668405][T15034] tipc: Disabling bearer [ 360.816805][T15082] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.162414][T15082] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.293097][T15082] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.402274][T15082] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.437782][T15100] netlink: 'syz.1.2257': attribute type 1 has an invalid length. [ 361.564459][T15103] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 361.598113][T15103] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 361.648762][T15108] bond8: (slave bridge8): Enslaving as an active interface with a down link [ 361.741685][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.785959][ T1146] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.829363][T15111] geneve1: entered allmulticast mode [ 361.834947][ T1146] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.880590][ T3947] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.281816][T15149] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 363.332634][T15149] bond9 (unregistering): Released all slaves [ 363.353864][T15151] __nla_validate_parse: 73 callbacks suppressed [ 363.353884][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 363.487510][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2269'. [ 363.722396][T15161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2271'. [ 364.873049][T15210] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2286'. [ 364.896207][T15210] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 364.919307][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'. [ 364.969280][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'. [ 365.044675][T15198] netlink: 'syz.3.2284': attribute type 6 has an invalid length. [ 365.067082][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 365.075217][ C1] lec:lec_tx_timeout: lec0 [ 365.080143][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.257771][T15230] batadv_slave_0: entered promiscuous mode [ 365.437605][T15240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2292'. [ 365.453959][T15241] tipc: Enabling of bearer rejected, failed to enable media [ 365.489831][T15229] batadv_slave_0: left promiscuous mode [ 365.723490][T15259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2296'. [ 365.788240][T15257] pimreg: entered allmulticast mode [ 365.817741][T15264] geneve4: entered promiscuous mode [ 365.882163][T15273] lo: Caught tx_queue_len zero misconfig [ 366.075507][T15288] ip6erspan1: entered allmulticast mode [ 366.226884][T15305] dummy0: entered allmulticast mode [ 366.306624][T15305] netlink: zone id is out of range [ 366.335481][T15288] netlink: set zone limit has 4 unknown bytes [ 366.337306][T15307] netlink: 'syz.1.2307': attribute type 2 has an invalid length. [ 366.388165][T15309] bond0: (slave gre0): Error: Device type is different from other slaves [ 366.400097][T15287] dummy0: left allmulticast mode [ 366.595495][T15322] veth0: Caught tx_queue_len zero misconfig [ 366.639712][T15323] netlink: 'syz.4.2312': attribute type 13 has an invalid length. [ 366.706212][ T3947] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 366.753749][T15329] syzkaller0: Caught tx_queue_len zero misconfig [ 366.878322][T15345] netlink: 'syz.4.2319': attribute type 6 has an invalid length. [ 366.905523][T15344] wg1 speed is unknown, defaulting to 1000 [ 366.912681][T15344] xfrm0 speed is unknown, defaulting to 1000 [ 367.504608][T15367] sctp: [Deprecated]: syz.4.2322 (pid 15367) Use of int in max_burst socket option. [ 367.504608][T15367] Use struct sctp_assoc_value instead [ 367.672508][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2324'. [ 367.682493][T15374] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2324'. [ 367.874059][T15389] netlink: 'syz.1.2327': attribute type 10 has an invalid length. [ 367.906595][T15389] team0: Port device geneve0 added [ 368.085849][T15393] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 368.188684][T15400] team3: entered promiscuous mode [ 368.217517][T15400] team3: entered allmulticast mode [ 368.223101][T15400] 8021q: adding VLAN 0 to HW filter on device team3 [ 368.265599][T15401] team4: entered promiscuous mode [ 368.318723][T15401] team4: entered allmulticast mode [ 368.336903][T15401] 8021q: adding VLAN 0 to HW filter on device team4 [ 368.549920][T15417] __nla_validate_parse: 7 callbacks suppressed [ 368.549940][T15417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2334'. [ 368.594378][T15417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2334'. [ 368.925731][T15444] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2343'. [ 368.951771][T15444] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2343'. [ 368.999376][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 369.072634][T15445] wg1 speed is unknown, defaulting to 1000 [ 369.110767][T15445] xfrm0 speed is unknown, defaulting to 1000 [ 369.627296][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'. [ 369.640912][T15489] hsr_slave_0: left promiscuous mode [ 369.677457][T15489] hsr_slave_1: left promiscuous mode [ 369.901763][T15500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2350'. [ 370.040789][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 370.087389][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 370.095460][ C1] lec:lec_tx_timeout: lec0 [ 370.105314][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 370.185155][T15510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2352'. [ 370.221262][T15510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2352'. [ 370.248125][T15516] TCP: TCP_TX_DELAY enabled [ 370.419505][T15521] tipc: Enabling of bearer rejected, media not registered [ 370.694370][T15534] netlink: 'syz.3.2361': attribute type 1 has an invalid length. [ 370.855167][T15532] can: request_module (can-proto-5) failed. [ 370.912791][T15552] macvlan2: entered promiscuous mode [ 371.233403][T15563] syzkaller0: entered promiscuous mode [ 371.239369][T15563] syzkaller0: entered allmulticast mode [ 371.380945][T15578] netlink: 'syz.0.2369': attribute type 30 has an invalid length. [ 372.338802][T13675] block nbd3: Possible stuck request ffff888025b38000: control (read@0,4096B). Runtime 180 seconds [ 373.096323][T15571] wg1 speed is unknown, defaulting to 1000 [ 373.112447][T15595] gre0: left allmulticast mode [ 373.119876][T15595] erspan0: left allmulticast mode [ 373.139971][T15595] geneve2: left promiscuous mode [ 373.145119][T15595] geneve2: left allmulticast mode [ 373.152186][T15595] geneve3: left promiscuous mode [ 373.158186][T15595] geneve3: left allmulticast mode [ 373.163758][T15595] tipc: Resetting bearer [ 373.170381][T15595] syzkaller0: left promiscuous mode [ 373.175739][T15595] syzkaller0: left allmulticast mode [ 373.191308][T15595] ip6gre1: left promiscuous mode [ 373.203238][T15595] team1: left promiscuous mode [ 373.209503][T15595] team1: left allmulticast mode [ 373.214785][T15595] team2: left promiscuous mode [ 373.221248][T15595] team2: left allmulticast mode [ 373.227001][T15595] ip6gre2: left promiscuous mode [ 373.240227][T15595] geneve4: left promiscuous mode [ 373.254483][T15595] veth9: left promiscuous mode [ 373.269362][T15595] geneve5: left promiscuous mode [ 373.299005][T15595] geneve6: left promiscuous mode [ 373.314643][T15595] team3: left promiscuous mode [ 373.320674][T15595] team3: left allmulticast mode [ 373.335308][T15595] team4: left promiscuous mode [ 373.341028][T15595] team4: left allmulticast mode [ 373.347360][T15571] xfrm0 speed is unknown, defaulting to 1000 [ 373.353484][ T1146] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.385839][ T1146] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.395526][ T1146] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.445970][ T1146] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.716238][T15628] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 373.763917][T15630] __nla_validate_parse: 9 callbacks suppressed [ 373.763938][T15630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2383'. [ 373.905745][T15636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2384'. [ 373.931005][T15636] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2384'. [ 373.948023][T15634] lo: Caught tx_queue_len zero misconfig [ 374.046764][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 374.287202][T15654] nbd4: detected capacity change from 0 to 63 [ 374.293793][T15651] block nbd4: NBD_DISCONNECT [ 374.300385][T15651] block nbd4: Disconnected due to user request. [ 374.311224][T15651] block nbd4: shutting down sockets [ 374.328803][ C0] blk_print_req_error: 138 callbacks suppressed [ 374.328826][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.344999][ C0] buffer_io_error: 138 callbacks suppressed [ 374.345013][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 374.370035][ T30] audit: type=1800 audit(1769583852.778:6): pid=15661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2393" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2481 res=0 errno=0 [ 374.417267][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.426792][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 374.435008][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.444665][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 374.450123][T15660] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2392'. [ 374.452547][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.471036][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 374.472929][T15660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2392'. [ 374.491145][T12611] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.507392][T12611] Buffer I/O error on dev nbd4, logical block 0, async page read [ 374.531529][T12611] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.570814][T12611] Buffer I/O error on dev nbd4, logical block 1, async page read [ 374.617577][T12611] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.624827][T15671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2397'. [ 374.647189][T12611] Buffer I/O error on dev nbd4, logical block 2, async page read [ 374.655044][T12611] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.661789][T15671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2397'. [ 374.707577][T12611] Buffer I/O error on dev nbd4, logical block 3, async page read [ 374.748151][T12611] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.773696][T12611] Buffer I/O error on dev nbd4, logical block 0, async page read [ 374.793236][T12611] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.848487][T12611] Buffer I/O error on dev nbd4, logical block 1, async page read [ 374.857902][T12611] ldm_validate_partition_table(): Disk read failed. [ 374.865377][T12611] Dev nbd4: unable to read RDB block 0 [ 374.883052][T12611] nbd4: unable to read partition table [ 374.912597][T12611] ldm_validate_partition_table(): Disk read failed. [ 374.942017][T12611] Dev nbd4: unable to read RDB block 0 [ 374.949086][T12611] nbd4: unable to read partition table [ 374.965709][T15689] syzkaller0: Caught tx_queue_len zero misconfig [ 375.117135][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.125223][ C1] lec:lec_tx_timeout: lec0 [ 375.130431][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.438746][T15704] Bluetooth: MGMT ver 1.23 [ 375.502485][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'. [ 375.880018][T15724] netlink: 'syz.4.2408': attribute type 10 has an invalid length. [ 375.920732][T15728] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 375.957229][T15728] batman_adv: batadv0: Adding interface: gretap2 [ 375.964415][T15728] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1512 would solve the problem. [ 375.990616][T15728] batman_adv: batadv0: Interface activated: gretap2 [ 376.142218][T15742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2412'. [ 376.160674][T15743] ip6tnl0: Caught tx_queue_len zero misconfig [ 376.277866][T15749] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 376.402435][T15753] vlan0: entered allmulticast mode [ 376.411685][T15753] team0: entered allmulticast mode [ 376.419561][T15753] C: entered allmulticast mode [ 376.424474][T15753] team_slave_1: entered allmulticast mode [ 376.437068][T15753] geneve0: entered allmulticast mode [ 376.471457][T15759] wg1 speed is unknown, defaulting to 1000 [ 376.486057][T15759] xfrm0 speed is unknown, defaulting to 1000 [ 377.180813][T15780] netlink: 'syz.0.2422': attribute type 10 has an invalid length. [ 377.191102][T15780] bond0: (slave wlan1): Opening slave failed [ 377.455670][T15789] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 377.710051][T15807] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.737566][T15807] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.835276][T15807] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.877322][T15807] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.910420][T15817] netlink: 'syz.0.2433': attribute type 10 has an invalid length. [ 377.932021][T15817] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.941937][T15817] bond0: (slave team0): Enslaving as an active interface with an up link [ 377.994676][T15807] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.019156][T15817] netlink: 'syz.0.2433': attribute type 1 has an invalid length. [ 378.027844][T15807] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.150743][T15807] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.177753][T15807] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.370760][T15820] wg1 speed is unknown, defaulting to 1000 [ 378.401703][ T7191] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.413290][ T7191] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.442061][T15820] xfrm0 speed is unknown, defaulting to 1000 [ 378.518978][ T7191] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.537524][ T7191] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.585841][ T7200] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.599973][ T7200] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.663686][ T7200] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.695767][ T7200] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.736584][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.868181][T15858] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 378.912560][T15858] veth0_vlan: left promiscuous mode [ 378.931765][T15858] veth0_vlan: entered promiscuous mode [ 378.978433][T15858] team0: Device veth0_vlan failed to register rx_handler [ 379.299518][T15872] netlink: 'syz.2.2447': attribute type 29 has an invalid length. [ 380.137094][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.145177][ C1] lec:lec_tx_timeout: lec0 [ 380.149821][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 382.591854][ T5201] udevd[5201]: worker [7355] /devices/virtual/block/nbd3 timeout; kill it [ 382.600719][ T5201] udevd[5201]: seq 13839 '/devices/virtual/block/nbd3' killed [ 385.157088][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.165126][ C1] lec:lec_tx_timeout: lec0 [ 389.608206][ T11] block nbd0: Possible stuck request ffff888025a32800: control (read@0,1024B). Runtime 30 seconds [ 389.619068][ T11] block nbd0: Possible stuck request ffff888025a32a00: control (read@1024,1024B). Runtime 30 seconds [ 389.630043][ T11] block nbd0: Possible stuck request ffff888025a32c00: control (read@2048,1024B). Runtime 30 seconds [ 389.641191][ T11] block nbd0: Possible stuck request ffff888025a32e00: control (read@3072,1024B). Runtime 30 seconds [ 402.410714][T13675] block nbd3: Possible stuck request ffff888025b38000: control (read@0,4096B). Runtime 210 seconds [ 409.033683][ T7392] lec:lec_start_xmit: lec0:No lecd attached [ 413.478137][T15884] __nla_validate_parse: 13 callbacks suppressed [ 413.478157][T15884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2450'. [ 413.509708][T15880] xt_connbytes: Forcing CT accounting to be enabled [ 413.591791][T15893] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 414.011887][T15921] bridge0: entered promiscuous mode [ 414.029686][T15921] macsec1: entered promiscuous mode [ 414.057044][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 414.065143][ C1] lec:lec_tx_timeout: lec0 [ 414.164795][T15935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2465'. [ 414.176295][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 414.242546][T15937] netlink: 'syz.4.2466': attribute type 6 has an invalid length. [ 414.259196][T15937] netlink: 'syz.4.2466': attribute type 6 has an invalid length. [ 414.340702][T15943] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20002 [ 414.352096][T15943] netlink: 'syz.0.2469': attribute type 30 has an invalid length. [ 414.436081][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2472'. [ 415.131738][T15990] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 415.535989][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 415.639373][T16014] syzkaller1: entered promiscuous mode [ 415.644910][T16014] syzkaller1: entered allmulticast mode [ 415.818138][T16025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2490'. [ 415.869746][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2490'. [ 415.920038][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 415.966065][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2490'. [ 416.029827][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 416.393420][T16043] ip6gretap1: entered promiscuous mode [ 416.406063][T16043] ip6gretap1: entered allmulticast mode [ 416.910243][T16075] Set syz1 is full, maxelem 8 reached [ 416.931617][T16071] Set syz1 is full, maxelem 8 reached [ 417.308979][T16098] netlink: 'syz.2.2509': attribute type 89 has an invalid length. [ 417.548831][T16105] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 417.575025][T16105] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 418.523759][T16162] netlink: zone id is out of range [ 418.551677][T16162] netlink: zone id is out of range [ 418.574310][T16163] vlan0: entered allmulticast mode [ 418.580256][T16162] netlink: zone id is out of range [ 418.586594][T16162] netlink: zone id is out of range [ 418.592530][T16162] netlink: zone id is out of range [ 418.598248][T16162] netlink: zone id is out of range [ 418.820592][T16169] wg1 speed is unknown, defaulting to 1000 [ 418.872682][T16175] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 418.924351][T16169] xfrm0 speed is unknown, defaulting to 1000 [ 419.077692][T16175] netlink: 'syz.2.2527': attribute type 13 has an invalid length. [ 419.156170][T16194] bond0: (slave team0): Releasing backup interface [ 419.187561][T16194] bond0: (slave dummy0): Releasing backup interface [ 419.199620][T16194] bond0: (slave bond_slave_0): Releasing backup interface [ 419.213739][T16194] bond0: (slave bond_slave_1): Releasing backup interface [ 419.228954][T16194] team0: Port device C removed [ 419.237366][T16203] netlink: 'syz.1.2534': attribute type 39 has an invalid length. [ 419.238728][T16194] team0: Port device team_slave_1 removed [ 419.252644][T16194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.263571][T16194] bond4: (slave ip6erspan0): Releasing active interface [ 419.274309][T16194] bond6: (slave gretap1): Releasing backup interface [ 419.284879][T16194] bond0: (slave bond8): Releasing backup interface [ 419.330175][T16181] syzkaller0: entered promiscuous mode [ 419.343771][T16181] syzkaller0: entered allmulticast mode [ 419.456398][T16209] tunl0: Caught tx_queue_len zero misconfig [ 419.591410][T16218] __nla_validate_parse: 4 callbacks suppressed [ 419.591432][T16218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2536'. [ 419.689979][ T11] block nbd0: Possible stuck request ffff888025a32800: control (read@0,1024B). Runtime 60 seconds [ 419.701449][ T11] block nbd0: Possible stuck request ffff888025a32a00: control (read@1024,1024B). Runtime 60 seconds [ 419.713257][ T11] block nbd0: Possible stuck request ffff888025a32c00: control (read@2048,1024B). Runtime 60 seconds [ 419.730169][ T11] block nbd0: Possible stuck request ffff888025a32e00: control (read@3072,1024B). Runtime 60 seconds [ 420.378587][T16255] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2546'. [ 420.395320][T16255] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2546'. [ 420.765307][T16286] netlink: 'syz.3.2554': attribute type 12 has an invalid length. [ 420.777730][T16287] netlink: 'syz.3.2554': attribute type 12 has an invalid length. [ 421.042747][T16307] FAULT_INJECTION: forcing a failure. [ 421.042747][T16307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.097594][T16307] CPU: 1 UID: 0 PID: 16307 Comm: syz.4.2561 Not tainted syzkaller #0 PREEMPT(full) [ 421.097624][T16307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 421.097635][T16307] Call Trace: [ 421.097643][T16307] [ 421.097653][T16307] dump_stack_lvl+0xe8/0x150 [ 421.097687][T16307] should_fail_ex+0x412/0x560 [ 421.097716][T16307] _copy_to_user+0x31/0xb0 [ 421.097749][T16307] simple_read_from_buffer+0xe1/0x170 [ 421.097776][T16307] proc_fail_nth_read+0x1bb/0x230 [ 421.097809][T16307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.097841][T16307] ? rw_verify_area+0x2a6/0x4d0 [ 421.097869][T16307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.097898][T16307] vfs_read+0x20c/0xa70 [ 421.097930][T16307] ? l2cap_sock_setsockopt+0x30a/0x1ec0 [ 421.097959][T16307] ? __pfx_vfs_read+0x10/0x10 [ 421.097993][T16307] ? aa_sk_perm+0x82d/0x960 [ 421.098022][T16307] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 421.098048][T16307] ? __pfx_aa_sk_perm+0x10/0x10 [ 421.098081][T16307] ksys_read+0x150/0x270 [ 421.098112][T16307] ? __pfx_ksys_read+0x10/0x10 [ 421.098151][T16307] do_syscall_64+0xe2/0xf80 [ 421.098175][T16307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.098195][T16307] ? trace_irq_disable+0x37/0x100 [ 421.098214][T16307] ? clear_bhb_loop+0x60/0xb0 [ 421.098237][T16307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.098256][T16307] RIP: 0033:0x7f196535b78e [ 421.098274][T16307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.098291][T16307] RSP: 002b:00007f19662cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.098313][T16307] RAX: ffffffffffffffda RBX: 00007f19662cc6c0 RCX: 00007f196535b78e [ 421.098327][T16307] RDX: 000000000000000f RSI: 00007f19662cc0a0 RDI: 0000000000000003 [ 421.098340][T16307] RBP: 00007f19662cc090 R08: 0000000000000000 R09: 0000000000000000 [ 421.098353][T16307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.098365][T16307] R13: 00007f1965616038 R14: 00007f1965615fa0 R15: 00007ffd39fbc2d8 [ 421.098399][T16307] [ 421.338260][T16305] syzkaller0: create flow: hash 1562539717 index 1 [ 421.513087][T16315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 421.588036][T15061] syzkaller0: tun_net_xmit 76 [ 421.677336][T16301] syzkaller0: delete flow: hash 1562539717 index 1 [ 422.230915][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'. [ 422.240523][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'. [ 422.304928][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'. [ 422.316318][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'. [ 422.444977][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'. [ 422.461938][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'. [ 423.500919][T16343] wg1 speed is unknown, defaulting to 1000 [ 423.528633][T16343] xfrm0 speed is unknown, defaulting to 1000 [ 423.915164][T16375] syzkaller0: entered promiscuous mode [ 423.945019][T16375] syzkaller0: entered allmulticast mode [ 424.524382][T16409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.884000][T16426] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2591'. [ 424.926582][T16426] netlink: 'syz.2.2591': attribute type 13 has an invalid length. [ 425.019248][T16426] tipc: Resetting bearer [ 425.438974][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2594'. [ 425.596969][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 425.629019][T16455] net_ratelimit: 9 callbacks suppressed [ 425.629041][T16455] openvswitch: netlink: Invalid VLAN frame [ 425.803779][T16462] netlink: 'syz.1.2603': attribute type 2 has an invalid length. [ 425.811943][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 425.893366][T16469] netlink: 'syz.3.2604': attribute type 1 has an invalid length. [ 425.903957][T16464] veth7: entered promiscuous mode [ 425.983066][T16471] gretap3: entered allmulticast mode [ 426.002398][T16471] bond9: (slave gretap3): making interface the new active one [ 426.033547][T16471] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 426.140932][T16478] netlink: 'syz.0.2610': attribute type 2 has an invalid length. [ 426.166583][T16478] : entered promiscuous mode [ 426.188754][T16481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2611'. [ 426.349976][T16490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2612'. [ 426.443231][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 426.606035][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 426.764598][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 426.927478][T16515] xt_CT: No such helper "snmp_trap" [ 427.084404][T16511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2616'. [ 427.863034][T16552] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 428.495084][T16583] gtp0: entered promiscuous mode [ 428.500637][T16583] gtp0: entered allmulticast mode [ 428.620646][T16592] netlink: 'syz.1.2639': attribute type 1 has an invalid length. [ 428.878340][T16607] geneve7: entered promiscuous mode [ 428.888598][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.896946][T16602] wg1 speed is unknown, defaulting to 1000 [ 428.905301][T16602] xfrm0 speed is unknown, defaulting to 1000 [ 428.912346][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.926395][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.047868][ T7191] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.057464][T16615] netlink: 'syz.1.2648': attribute type 15 has an invalid length. [ 429.395626][T16620] netlink: 'syz.1.2650': attribute type 50 has an invalid length. [ 429.968933][T16644] __nla_validate_parse: 16 callbacks suppressed [ 429.968957][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'. [ 430.019697][T16644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2660'. [ 430.038139][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'. [ 430.055504][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2660'. [ 430.097572][T16644] netlink: 'syz.4.2660': attribute type 14 has an invalid length. [ 430.120685][T16644] netlink: 'syz.4.2660': attribute type 13 has an invalid length. [ 430.155248][T16648] pim6reg1: entered promiscuous mode [ 430.190852][T16648] pim6reg1: entered allmulticast mode [ 430.209036][T16650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2663'. [ 430.228660][T16650] netlink: 'syz.2.2663': attribute type 7 has an invalid length. [ 430.236441][T16650] netlink: 'syz.2.2663': attribute type 8 has an invalid length. [ 430.277904][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 430.570543][T16666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2665'. [ 430.695906][T16672] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2668'. [ 430.738405][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2668'. [ 430.892152][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'. [ 430.912951][T16684] tipc: Enabled bearer , priority 0 [ 430.942892][T16683] syzkaller1: entered promiscuous mode [ 430.955803][T16683] syzkaller1: entered allmulticast mode [ 430.964511][T16685] raw_sendmsg: syz.3.2673 forgot to set AF_INET. Fix it! [ 431.023046][T16682] tipc: Disabling bearer [ 431.061530][T16690] IPVS: lc: FWM 3 0x00000003 - no destination available [ 431.064993][T16689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 431.081766][T16689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 431.090040][T16689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 431.096603][T16689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 431.103376][T16689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 431.104065][T16690] IPVS: lc: FWM 3 0x00000003 - no destination available [ 431.110469][T16689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 431.110505][T16689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 431.110533][T16689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 431.140585][T16689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 431.147766][T16690] IPVS: lc: FWM 3 0x00000003 - no destination available [ 431.155026][T16690] IPVS: lc: FWM 3 0x00000003 - no destination available [ 431.574452][T16706] "syz.3.2677" (16706) uses obsolete ecb(arc4) skcipher [ 431.576503][T16723] netlink: 'syz.4.2681': attribute type 1 has an invalid length. [ 431.630278][T16716] netlink: 'syz.2.2680': attribute type 5 has an invalid length. [ 431.648735][T16728] netlink: 'syz.0.2682': attribute type 10 has an invalid length. [ 431.995869][T16746] tunl0: Caught tx_queue_len zero misconfig [ 432.075594][T16737] wg1 speed is unknown, defaulting to 1000 [ 432.084086][T16737] xfrm0 speed is unknown, defaulting to 1000 [ 432.125221][T16751] wg1 speed is unknown, defaulting to 1000 [ 432.141479][T16754] netlink: 'syz.3.2688': attribute type 3 has an invalid length. [ 432.285039][T16760] netem: incorrect gi model size [ 432.295402][T16760] netem: change failed [ 432.495769][T13675] block nbd3: Possible stuck request ffff888025b38000: control (read@0,4096B). Runtime 240 seconds [ 432.731710][T16751] xfrm0 speed is unknown, defaulting to 1000 [ 432.895528][T16793] netlink: 'syz.3.2696': attribute type 29 has an invalid length. [ 432.907567][T16795] netlink: 'syz.3.2696': attribute type 29 has an invalid length. [ 433.122562][T16790] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 433.382950][T16807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.121026][T16835] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 434.140766][T16835] bond5 (unregistering): Released all slaves [ 434.685126][T16869] openvswitch: netlink: IP tunnel dst address not specified [ 434.754188][T16868] wg1 speed is unknown, defaulting to 1000 [ 434.789220][T16868] xfrm0 speed is unknown, defaulting to 1000 [ 435.344625][T16894] __nla_validate_parse: 10 callbacks suppressed [ 435.344649][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2719'. [ 435.434585][T16899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.525315][T16899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.559745][T16894] wg1 speed is unknown, defaulting to 1000 [ 435.663033][T16894] xfrm0 speed is unknown, defaulting to 1000 [ 435.716013][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 435.746896][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 435.848362][T16920] ipvlan1: entered promiscuous mode [ 435.874061][T16920] ipvlan1: entered allmulticast mode [ 435.888329][T16920] veth0_vlan: entered allmulticast mode [ 436.218948][T16936] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 436.424765][T16933] wg1 speed is unknown, defaulting to 1000 [ 436.467990][T16933] xfrm0 speed is unknown, defaulting to 1000 [ 437.518187][T16984] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 437.941437][T16996] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2743'. [ 438.116071][T17007] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 438.558261][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'. [ 438.591855][T17022] syzkaller0: entered promiscuous mode [ 438.607488][T17022] syzkaller0: entered allmulticast mode [ 438.648441][T17026] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2747'. [ 438.674588][T17028] sctp: [Deprecated]: syz.4.2750 (pid 17028) Use of int in maxseg socket option. [ 438.674588][T17028] Use struct sctp_assoc_value instead [ 439.012868][T17037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2751'. [ 439.156793][T17042] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2753'. [ 440.174847][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.184030][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 440.882714][ T5201] udevd[5201]: worker [12602] /devices/virtual/block/nbd0 is taking a long time [ 441.326717][T17051] bridge4: entered promiscuous mode [ 441.338901][T17051] bridge4: entered allmulticast mode [ 441.369483][T17051] team0: Port device bridge4 added [ 441.509243][T17055] tipc: Enabled bearer , priority 0 [ 441.521212][T17055] syzkaller0: entered promiscuous mode [ 441.530318][T17055] syzkaller0: entered allmulticast mode [ 441.582603][T17055] tipc: Resetting bearer [ 441.609673][T17055] netlink: 'syz.1.2758': attribute type 1 has an invalid length. [ 441.640676][T17055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2758'. [ 441.668522][T17054] tipc: Resetting bearer [ 441.681584][T17063] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 441.694780][T17063] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 441.710899][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2760'. [ 441.710994][T17054] tipc: Disabling bearer [ 441.742221][T17065] wg1 speed is unknown, defaulting to 1000 [ 441.763647][T17073] pimreg: entered allmulticast mode [ 441.770803][T17065] xfrm0 speed is unknown, defaulting to 1000 [ 441.779673][T17069] pimreg: left allmulticast mode [ 441.785775][T17072] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 442.498637][T17094] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2766'. [ 442.533126][T17094] netlink: 'syz.3.2766': attribute type 9 has an invalid length. [ 442.559591][T17096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2765'. [ 442.566684][T17094] netlink: 'syz.3.2766': attribute type 11 has an invalid length. [ 442.586596][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2765'. [ 442.598576][T17094] netlink: 'syz.3.2766': attribute type 12 has an invalid length. [ 442.617456][T17094] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2766'. [ 442.656454][T17073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2761'. [ 442.661523][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2766'. [ 443.072934][T17107] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2770'. [ 443.295838][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 443.361652][T17073] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 443.403001][T17073] bond8 (unregistering): Released all slaves [ 443.449161][T17110] ip6tnl2: entered promiscuous mode [ 444.092689][T17152] sock: sock_timestamping_bind_phc: sock not bind to device [ 444.159459][T17152] bond0: Caught tx_queue_len zero misconfig [ 444.184058][T17152] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 444.255996][T17162] : entered promiscuous mode [ 444.334953][T17162] vlan2: entered promiscuous mode [ 444.344294][T17162] bond0: entered promiscuous mode [ 444.350096][T17162] : entered promiscuous mode [ 444.355659][T17162] bond_slave_1: entered promiscuous mode [ 444.362228][T17162] ip6erspan0: entered promiscuous mode [ 444.368947][T17162] bridge_slave_1: entered promiscuous mode [ 444.376345][T17162] vlan2: entered allmulticast mode [ 444.385195][T17162] bond0: entered allmulticast mode [ 444.393281][T17162] : entered allmulticast mode [ 444.398769][T17162] bond_slave_1: entered allmulticast mode [ 444.427170][T17162] ip6erspan0: entered allmulticast mode [ 444.432752][T17162] bridge_slave_1: entered allmulticast mode [ 444.588927][T17179] netlink: 'syz.1.2791': attribute type 21 has an invalid length. [ 444.597382][T17179] netlink: 'syz.1.2791': attribute type 4 has an invalid length. [ 444.605271][T17179] netlink: 'syz.1.2791': attribute type 3 has an invalid length. [ 444.665269][T17182] tipc: Enabling of bearer rejected, failed to enable media [ 444.680611][T17177] wg1 speed is unknown, defaulting to 1000 [ 444.681287][T17179] syzkaller1: entered promiscuous mode [ 444.718423][T17179] syzkaller1: entered allmulticast mode [ 444.744210][T17177] xfrm0 speed is unknown, defaulting to 1000 [ 444.807663][T17194] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 444.816743][T17188] syzkaller0: entered promiscuous mode [ 444.822449][T17188] syzkaller0: entered allmulticast mode [ 445.439468][T17203] wg1 speed is unknown, defaulting to 1000 [ 445.453578][T17203] xfrm0 speed is unknown, defaulting to 1000 [ 445.696663][T17225] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 445.725138][T17222] netlink: 'syz.1.2803': attribute type 1 has an invalid length. [ 445.792464][T17222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.842591][T17222] bond1: (slave dummy0): making interface the new active one [ 445.875319][T17222] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 446.007062][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 446.015152][ C1] lec:lec_tx_timeout: lec0 [ 446.069811][T17221] wg1 speed is unknown, defaulting to 1000 [ 446.078391][T17216] wg1 speed is unknown, defaulting to 1000 [ 446.086828][T17221] xfrm0 speed is unknown, defaulting to 1000 [ 446.582935][T17257] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 446.604595][T17216] xfrm0 speed is unknown, defaulting to 1000 [ 446.614851][T17257] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 446.647544][T17257] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 446.663811][T17257] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 446.677698][T17257] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 446.698737][T17257] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 446.708015][T17257] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 446.716383][T17257] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 446.735241][T17257] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 447.135880][T17271] dvmrp1: entered allmulticast mode [ 447.194654][T17274] dvmrp1: left allmulticast mode [ 448.233509][T17301] __nla_validate_parse: 21 callbacks suppressed [ 448.233533][T17301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'. [ 448.449424][T17305] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 448.460640][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2819'. [ 448.609608][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2820'. [ 448.794394][T17320] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2821'. [ 448.820867][T17320] 0ªX¹¦À: renamed from caif0 [ 448.871011][T17320] 0ªX¹¦À: entered allmulticast mode [ 449.279436][T17343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 449.411784][T17352] tipc: Enabled bearer , priority 0 [ 449.420125][T17352] syzkaller0: entered promiscuous mode [ 449.430137][T17352] syzkaller0: entered allmulticast mode [ 449.463978][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'. [ 449.518664][T17355] tipc: Resetting bearer [ 449.550863][T17355] tipc: Disabling bearer [ 449.775106][ T11] block nbd0: Possible stuck request ffff888025a32800: control (read@0,1024B). Runtime 90 seconds [ 449.785931][ T11] block nbd0: Possible stuck request ffff888025a32a00: control (read@1024,1024B). Runtime 90 seconds [ 449.797294][ T11] block nbd0: Possible stuck request ffff888025a32c00: control (read@2048,1024B). Runtime 90 seconds [ 449.808516][ T11] block nbd0: Possible stuck request ffff888025a32e00: control (read@3072,1024B). Runtime 90 seconds [ 450.243453][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 450.255650][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 450.264044][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 450.273389][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 450.283078][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.301088][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 450.315626][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 450.325545][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 450.363616][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 450.371535][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.508080][T17389] wg1 speed is unknown, defaulting to 1000 [ 450.515801][T17389] xfrm0 speed is unknown, defaulting to 1000 [ 450.584107][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2838'. [ 451.195275][T17419] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2841'. [ 451.451070][T17430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2844'. [ 451.476957][T17430] netlink: 'syz.0.2844': attribute type 1 has an invalid length. [ 451.525461][T17430] lo: left promiscuous mode [ 451.532192][T17430] ipvlan1: left promiscuous mode [ 451.539701][T17430] batadv2: left promiscuous mode [ 451.546135][T17430] macsec1: left promiscuous mode [ 451.555198][T17430] gtp0: left promiscuous mode [ 451.600361][T17436] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 451.606248][T17436] pim6reg0: linktype set to 804 [ 451.736655][T17389] chnl_net:caif_netlink_parms(): no params data found [ 451.908646][T17449] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2849'. [ 452.057419][T17456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2850'. [ 452.173505][T17389] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.187658][T17389] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.195104][T17389] bridge_slave_0: entered allmulticast mode [ 452.203496][T17389] bridge_slave_0: entered promiscuous mode [ 452.219134][T17389] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.226572][T17389] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.246914][T17389] bridge_slave_1: entered allmulticast mode [ 452.259026][T17389] bridge_slave_1: entered promiscuous mode [ 452.365541][T17389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.393393][T17389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.407323][ T5835] Bluetooth: hci5: command tx timeout [ 452.414488][T17471] netlink: 'syz.0.2854': attribute type 10 has an invalid length. [ 452.520957][T17471] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.549445][T17471] bond0: (slave team0): Enslaving as an active interface with an up link [ 452.665156][T17389] team0: Port device team_slave_0 added [ 452.692494][T17389] team0: Port device team_slave_1 added [ 452.828554][T17484] wg1 speed is unknown, defaulting to 1000 [ 452.858773][T17389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.892503][T17389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.998556][T17389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.037738][T17484] xfrm0 speed is unknown, defaulting to 1000 [ 453.085390][T17389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.107162][T17389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.157740][T17389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.287949][T17502] __nla_validate_parse: 14 callbacks suppressed [ 453.287971][T17502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2859'. [ 453.330716][T17389] hsr_slave_0: entered promiscuous mode [ 453.348627][T17389] hsr_slave_1: entered promiscuous mode [ 453.629630][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2863'. [ 453.649890][T17514] netlink: 'syz.4.2863': attribute type 2 has an invalid length. [ 453.657848][T17514] netlink: 'syz.4.2863': attribute type 1 has an invalid length. [ 453.723483][T17514] gre3: entered promiscuous mode [ 453.731583][T17514] gre3: entered allmulticast mode [ 453.859554][T17516] wg1 speed is unknown, defaulting to 1000 [ 453.922623][T17516] xfrm0 speed is unknown, defaulting to 1000 [ 453.968781][T17389] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.997133][T17389] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.344221][T17389] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.354272][T17389] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.478910][T17538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2866'. [ 454.488551][ T5835] Bluetooth: hci5: command tx timeout [ 454.517061][T17538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2866'. [ 454.664531][T17540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2866'. [ 454.682011][T17540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2866'. [ 454.706129][T17389] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.727132][T17389] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.785568][T17540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2866'. [ 454.800281][T17540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2866'. [ 454.823969][T17389] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.837496][T17389] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.403510][T17389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 455.462855][T17389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 455.505132][T17565] netlink: 'syz.3.2876': attribute type 11 has an invalid length. [ 455.708180][T17572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2878'. [ 455.796765][T17389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 455.852218][T17389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 455.890664][T17572] nbd: socks must be embedded in a SOCK_ITEM attr [ 455.950192][T17229] block nbd64: NBD_DISCONNECT [ 456.200977][T17579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2879'. [ 456.314332][T17228] udevd[17228]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 456.567192][ T5835] Bluetooth: hci5: command tx timeout [ 456.770556][T17389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.844478][T17389] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.891626][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.898893][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.972161][T14338] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.979442][T14338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.086374][T17624] tipc: Resetting bearer [ 457.476918][T17632] netlink: 'syz.3.2888': attribute type 3 has an invalid length. [ 457.536382][T17627] wg1 speed is unknown, defaulting to 1000 [ 457.621418][T17627] xfrm0 speed is unknown, defaulting to 1000 [ 458.189462][T17389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.383972][T17389] veth0_vlan: entered promiscuous mode [ 458.501327][T17696] __nla_validate_parse: 40 callbacks suppressed [ 458.501350][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 458.552732][T17389] veth1_vlan: entered promiscuous mode [ 458.647120][ T5835] Bluetooth: hci5: command tx timeout [ 458.718507][T17389] veth0_macvtap: entered promiscuous mode [ 458.731723][T17389] veth1_macvtap: entered promiscuous mode [ 458.761612][T17389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.780612][T17389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.870728][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.880756][ T1143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.899302][ T1143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.909940][ T1143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.250107][ T7191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.264282][T17722] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2905'. [ 459.287026][ T7191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.377493][ T7200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.397829][ T7200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.402054][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 459.490494][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 459.518782][T17725] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2907'. [ 459.730684][T17734] netlink: 'syz.4.2910': attribute type 5 has an invalid length. [ 460.182432][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.192386][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.202203][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.218042][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.225912][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.282653][T17742] wg1 speed is unknown, defaulting to 1000 [ 460.291003][T17742] xfrm0 speed is unknown, defaulting to 1000 [ 460.428660][T17749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2915'. [ 460.521345][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 460.601563][T17751] wg1 speed is unknown, defaulting to 1000 [ 460.897338][T17751] xfrm0 speed is unknown, defaulting to 1000 [ 461.445236][T17742] chnl_net:caif_netlink_parms(): no params data found [ 461.532574][T17769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2918'. [ 461.893472][T17786] netlink: 'syz.4.2923': attribute type 10 has an invalid length. [ 461.905590][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2922'. [ 461.921259][T17742] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.930170][T17742] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.938881][T17742] bridge_slave_0: entered allmulticast mode [ 461.939229][T17784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2922'. [ 461.946741][T17742] bridge_slave_0: entered promiscuous mode [ 462.170864][T17742] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.189630][T17742] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.199675][T17742] bridge_slave_1: entered allmulticast mode [ 462.209301][T17742] bridge_slave_1: entered promiscuous mode [ 462.329215][ T5835] Bluetooth: hci4: command tx timeout [ 462.572372][T13675] block nbd3: Possible stuck request ffff888025b38000: control (read@0,4096B). Runtime 270 seconds [ 462.885245][T17801] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 462.939678][T17801] bond1 (unregistering): Released all slaves [ 463.214645][T17742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.293901][T17742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.433472][T17742] team0: Port device team_slave_0 added [ 463.453533][T17742] team0: Port device team_slave_1 added [ 463.471750][T17831] SET target dimension over the limit! [ 463.614467][T17742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.643342][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.687937][T17742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.701873][T17742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.712064][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.740508][T17742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.879199][T17742] hsr_slave_0: entered promiscuous mode [ 463.895082][T17742] hsr_slave_1: entered promiscuous mode [ 463.914722][T17742] debugfs: 'hsr0' already exists in 'hsr' [ 463.929226][T17742] Cannot create hsr debugfs directory [ 464.350794][T17742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.365117][T17742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.408993][ T5835] Bluetooth: hci4: command tx timeout [ 464.432590][T17867] __nla_validate_parse: 2 callbacks suppressed [ 464.432612][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2935'. [ 464.670702][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 464.750046][T17742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.774467][T17742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.842683][T17874] tipc: Started in network mode [ 464.861495][T17874] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 464.878116][T17874] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 464.918196][T17874] tipc: Enabled bearer , priority 10 [ 464.933947][T17889] tipc: Enabled bearer , priority 0 [ 465.004232][T17742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.019444][T17742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.107929][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2942'. [ 465.124002][T17742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.154367][T17742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.652294][T17742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.684753][T17742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.809507][T17742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.849212][T17929] wg1 speed is unknown, defaulting to 1000 [ 465.856312][T17742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.914760][T17929] xfrm0 speed is unknown, defaulting to 1000 [ 465.947935][T17935] wg1 speed is unknown, defaulting to 1000 [ 466.037174][T15059] tipc: Node number set to 1 [ 466.245495][T17742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.299070][T17742] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.336663][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.343940][ T7200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.389499][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.396762][ T7200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.487354][ T5835] Bluetooth: hci4: command tx timeout [ 466.744258][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 466.768743][T17985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2959'. [ 466.837282][T17935] xfrm0 speed is unknown, defaulting to 1000 [ 467.256211][T17742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.564602][T17742] veth0_vlan: entered promiscuous mode [ 467.713107][T17742] veth1_vlan: entered promiscuous mode [ 467.841228][T18015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2962'. [ 468.030202][T17742] veth0_macvtap: entered promiscuous mode [ 468.056225][T17742] veth1_macvtap: entered promiscuous mode [ 468.224351][T17742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.340551][T17742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.405086][ T1143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.453899][ T1143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.495156][ T1143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.531246][ T1143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.567657][ T5835] Bluetooth: hci4: command tx timeout [ 468.880901][T18035] wg1 speed is unknown, defaulting to 1000 [ 468.897290][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.905156][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.957111][T18035] xfrm0 speed is unknown, defaulting to 1000 [ 468.990983][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.047813][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.945203][T18076] wg1 speed is unknown, defaulting to 1000 [ 470.231819][T18076] xfrm0 speed is unknown, defaulting to 1000 [ 470.719202][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.730248][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.740149][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.762982][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.772683][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.814531][ T5835] Bluetooth: hci3: command tx timeout [ 472.914631][T18126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2977'. [ 472.973451][T18127] netlink: 'syz.0.2977': attribute type 15 has an invalid length. [ 473.424988][ T7191] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.514481][T18103] wg1 speed is unknown, defaulting to 1000 [ 473.655339][ T7191] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.672278][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'. [ 473.675011][T18103] xfrm0 speed is unknown, defaulting to 1000 [ 473.681329][T18136] netlink: 'syz.3.2979': attribute type 30 has an invalid length. [ 473.742367][ T7194] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.751238][ T7194] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.767927][ T7194] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.776775][ T7194] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.823206][ T7191] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.835533][T18140] netlink: 'syz.0.2980': attribute type 32 has an invalid length. [ 473.885540][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 473.898533][ T7392] lec:lec_start_xmit: lec0:No lecd attached [ 473.926238][ T7191] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.209762][T18140] bond9: option coupled_control: invalid value (116) [ 474.223117][T18140] bond9 (unregistering): Released all slaves [ 474.592032][T18155] wg1 speed is unknown, defaulting to 1000 [ 474.617275][ T7183] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 474.635869][T18155] xfrm0 speed is unknown, defaulting to 1000 [ 474.682537][ T7183] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 474.776415][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 474.829979][ T36] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 474.833331][T18160] netlink: 'syz.0.2987': attribute type 6 has an invalid length. [ 474.851180][ T7191] bond0: left allmulticast mode [ 474.858263][ T7191] bridge0: port 1(bond0) entered disabled state [ 474.887780][T18162] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2988'. [ 474.890870][ T5835] Bluetooth: hci3: command tx timeout [ 474.934230][ T7191] tipc: Resetting bearer [ 474.939763][T18164] netlink: 'syz.0.2987': attribute type 6 has an invalid length. [ 475.140538][T18168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2989'. [ 475.419878][ T7191] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 475.428547][ T7191] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - d6:22:4b:52:76:27 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 475.447788][ T7191] bond3 (unregistering): (slave erspan0): making interface the new active one [ 475.621383][ T7191] bond3 (unregistering): (slave erspan0): Releasing active interface [ 475.887881][ T7191] tipc: Disabling bearer [ 476.304593][ T7191] bond0 (unregistering): Released all slaves [ 476.314465][ T7191] bond1 (unregistering): Released all slaves [ 476.430161][ T7191] bond2 (unregistering): (slave veth3): Releasing active interface [ 476.438962][ T7191] bond2 (unregistering): Released all slaves [ 476.549353][ T7191] bond3 (unregistering): (slave veth9): Releasing active interface [ 476.558159][ T7191] bond3 (unregistering): Released all slaves [ 476.669418][ T7191] bond4 (unregistering): Released all slaves [ 476.842735][T18187] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 476.960680][ T7191] : left promiscuous mode [ 476.968494][ T5835] Bluetooth: hci3: command tx timeout [ 477.130682][ T7191] tipc: Left network mode [ 477.643001][T18103] chnl_net:caif_netlink_parms(): no params data found [ 478.375262][T18242] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3001'. [ 478.407750][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3000'. [ 478.564653][T18247] sch_tbf: peakrate 3 is lower than or equals to rate 3280788874595949110 ! [ 478.675229][T18248] bond0: (slave batadv_slave_0): Releasing backup interface [ 478.686530][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'. [ 478.714329][ T7191] hsr_slave_0: left promiscuous mode [ 478.721189][ T7191] hsr_slave_1: left promiscuous mode [ 478.823658][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'. [ 478.969290][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5070 ms [ 478.977458][ C1] lec:lec_tx_timeout: lec0 [ 479.047700][ T5835] Bluetooth: hci3: command tx timeout [ 479.860090][ T11] block nbd0: Possible stuck request ffff888025a32800: control (read@0,1024B). Runtime 120 seconds [ 479.871158][ T11] block nbd0: Possible stuck request ffff888025a32a00: control (read@1024,1024B). Runtime 120 seconds [ 479.882407][ T11] block nbd0: Possible stuck request ffff888025a32c00: control (read@2048,1024B). Runtime 120 seconds [ 479.893731][ T11] block nbd0: Possible stuck request ffff888025a32e00: control (read@3072,1024B). Runtime 120 seconds [ 479.989383][T18103] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.996688][T18103] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.004507][T18103] bridge_slave_0: entered allmulticast mode [ 480.013237][T18103] bridge_slave_0: entered promiscuous mode [ 480.023081][T18103] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.031420][T18103] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.038803][T18103] bridge_slave_1: entered allmulticast mode [ 480.046739][T18103] bridge_slave_1: entered promiscuous mode [ 480.054417][T18240] ip6_vti0: entered promiscuous mode [ 480.060591][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2999'. [ 480.200986][T18103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.213308][T18257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.266130][T18103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.359658][T18103] team0: Port device team_slave_0 added [ 480.369360][T18261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3005'. [ 480.379704][T18103] team0: Port device team_slave_1 added [ 480.474574][T18103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.492174][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.529181][T18103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.560377][T18103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.586004][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.695282][T18103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.724342][T18287] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3010'. [ 480.774096][T18291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 480.781679][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'. [ 480.886768][ T7191] IPVS: stop unused estimator thread 0... [ 480.949362][T18103] hsr_slave_0: entered promiscuous mode [ 480.970970][T18103] hsr_slave_1: entered promiscuous mode [ 480.984265][T18301] netlink: 'syz.1.3015': attribute type 89 has an invalid length. [ 480.995739][T18103] debugfs: 'hsr0' already exists in 'hsr' [ 481.010514][T18103] Cannot create hsr debugfs directory [ 481.931433][T18103] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 482.173647][T18103] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 482.436222][T18103] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 482.679486][T18103] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 482.783138][T18363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3021'. [ 483.222516][T18103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 483.294849][T18103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 483.375642][T18379] netlink: 'syz.3.3026': attribute type 1 has an invalid length. [ 483.386028][T18103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 483.405238][T18379] __nla_validate_parse: 5 callbacks suppressed [ 483.405258][T18379] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3026'. [ 483.436324][T18379] NCSI netlink: No device for ifindex 0 [ 483.441001][T18103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 483.656274][T18395] wg1 speed is unknown, defaulting to 1000 [ 483.745646][T18395] xfrm0 speed is unknown, defaulting to 1000 [ 483.835204][T18406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3032'. [ 483.856685][T18103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.857236][T18406] netlink: 'syz.0.3032': attribute type 13 has an invalid length. [ 484.038856][T18103] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.082254][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.089515][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.144903][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.152185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.117199][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 485.233878][T18457] net_ratelimit: 57 callbacks suppressed [ 485.233900][T18457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.423504][T18103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.594323][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 485.624454][T18103] veth0_vlan: entered promiscuous mode [ 485.656570][T18469] bridge_slave_1: left allmulticast mode [ 485.670307][T18469] bridge_slave_1: left promiscuous mode [ 485.684425][T18469] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.722675][T18469] bridge_slave_0: left allmulticast mode [ 485.741370][T18469] bridge_slave_0: left promiscuous mode [ 485.770909][T18469] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.958764][T18103] veth1_vlan: entered promiscuous mode [ 485.990253][T18475] wg1 speed is unknown, defaulting to 1000 [ 486.022879][T18475] xfrm0 speed is unknown, defaulting to 1000 [ 486.085015][T18103] veth0_macvtap: entered promiscuous mode [ 486.149184][T18103] veth1_macvtap: entered promiscuous mode [ 486.219907][T18103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.239647][T18103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.388667][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.415327][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.494666][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.571511][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.662431][T18487] wg1 speed is unknown, defaulting to 1000 [ 486.798122][T18509] netlink: 'syz.1.3049': attribute type 32 has an invalid length. [ 486.819024][T18487] xfrm0 speed is unknown, defaulting to 1000 [ 486.826553][T18509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3049'. [ 486.874669][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3050'. [ 486.884733][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3050'. [ 486.906552][T18509] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 487.088508][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.096920][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.257833][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.270597][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.309324][T18523] openvswitch: netlink: Key type 44 is out of range max 32 [ 488.295570][T18547] wg1 speed is unknown, defaulting to 1000 [ 488.345562][T18547] xfrm0 speed is unknown, defaulting to 1000 [ 488.665384][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.675137][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.683703][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 488.693233][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 488.701256][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.742561][T18555] syzkaller1: entered promiscuous mode [ 488.771454][T18555] syzkaller1: entered allmulticast mode [ 489.144662][T18554] wg1 speed is unknown, defaulting to 1000 [ 489.204423][T18554] xfrm0 speed is unknown, defaulting to 1000 [ 489.248510][T18565] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3056'. [ 489.841851][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3060'. [ 490.387163][T18601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3065'. [ 490.674861][T18609] netlink: 65173 bytes leftover after parsing attributes in process `syz.1.3067'. [ 490.727742][ T5835] Bluetooth: hci1: command tx timeout [ 490.831205][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3069'. [ 490.925311][T18554] chnl_net:caif_netlink_parms(): no params data found [ 491.192753][T18645] netlink: 'syz.3.3073': attribute type 4 has an invalid length. [ 491.420123][T18554] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.446754][T18554] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.465977][T18554] bridge_slave_0: entered allmulticast mode [ 491.487560][T18554] bridge_slave_0: entered promiscuous mode [ 491.513137][T18554] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.536019][T18554] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.562203][T18554] bridge_slave_1: entered allmulticast mode [ 491.590104][T18554] bridge_slave_1: entered promiscuous mode [ 491.627093][T18657] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 491.643878][T18657] batman_adv: batadv0: Adding interface: gretap1 [ 491.662790][T18657] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.696108][T18657] batman_adv: batadv0: Interface activated: gretap1 [ 491.902362][T18670] Cannot find del_set index 3 as target [ 491.919999][T18554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.934799][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'. [ 491.950981][T18671] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3077'. [ 491.966609][T18663] wg1 speed is unknown, defaulting to 1000 [ 491.980161][T18554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.007929][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'. [ 492.016849][T18671] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3077'. [ 492.037303][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'. [ 492.046413][T18663] xfrm0 speed is unknown, defaulting to 1000 [ 492.083627][T18676] netlink: 'syz.2.3078': attribute type 5 has an invalid length. [ 492.096764][T18677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.120690][T18677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.151766][T18677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.172191][T18677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.198885][T18677] batman_adv: batadv0: Interface deactivated: gretap1 [ 492.215842][T18677] batman_adv: batadv0: Removing interface: gretap1 [ 492.364490][T18667] wg1 speed is unknown, defaulting to 1000 [ 492.383306][T18554] team0: Port device team_slave_0 added [ 492.420801][T18554] team0: Port device team_slave_1 added [ 492.556009][T18554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.571547][T18554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.604736][T18554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.626797][T18554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.638162][T18554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.676553][T13675] block nbd3: Possible stuck request ffff888025b38000: control (read@0,4096B). Runtime 300 seconds [ 492.743501][T18554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.814027][ T5835] Bluetooth: hci1: command tx timeout [ 492.910395][T18554] hsr_slave_0: entered promiscuous mode [ 492.938636][T18554] hsr_slave_1: entered promiscuous mode [ 492.945167][T18554] debugfs: 'hsr0' already exists in 'hsr' [ 492.962609][T18554] Cannot create hsr debugfs directory [ 493.350566][T18667] xfrm0 speed is unknown, defaulting to 1000 [ 493.738457][T18719] wg1 speed is unknown, defaulting to 1000 [ 494.037378][T18719] xfrm0 speed is unknown, defaulting to 1000 [ 494.152959][T18734] syzkaller0: entered promiscuous mode [ 494.187374][T18734] syzkaller0: entered allmulticast mode [ 494.568304][T18554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 494.594061][T18554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 494.615377][T18554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 494.650931][T18554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 494.889936][ T5835] Bluetooth: hci1: command tx timeout [ 495.726384][T18554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.852169][T18554] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.911162][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.918406][ T7183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.012699][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.019981][ T7183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.285070][T18778] __nla_validate_parse: 2 callbacks suppressed [ 496.285092][T18778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3089'. [ 496.330038][T18778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3089'. [ 496.477320][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3089'. [ 496.514993][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3089'. [ 496.621573][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3089'. [ 496.700379][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3089'. [ 496.913336][T18554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.967731][ T5835] Bluetooth: hci1: command tx timeout [ 497.116441][T18809] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3097'. [ 497.139212][T18809] netlink: Unknown conntrack attr (0) [ 497.438188][T18829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3102'. [ 497.438188][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3102'. [ 497.535566][T18835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3103'. [ 497.676988][T18554] veth0_vlan: entered promiscuous mode [ 497.739642][T18554] veth1_vlan: entered promiscuous mode [ 497.759446][T18846] macsec1: entered promiscuous mode [ 497.764706][T18846] macsec1: entered allmulticast mode [ 497.806946][T18554] veth0_macvtap: entered promiscuous mode [ 497.825882][T18554] veth1_macvtap: entered promiscuous mode [ 497.854111][T18554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.874540][T18554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.893322][ T3582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.903616][ T3582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.918017][ T3582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.929328][ T3582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.116480][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.149891][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.235731][T18855] ipvlan1: left allmulticast mode [ 498.242514][T18855] veth0_vlan: left allmulticast mode [ 498.282618][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.292011][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.442063][T18864] netlink: 'syz.0.3112': attribute type 8 has an invalid length. [ 498.491558][T18867] netlink: 'syz.4.3054': attribute type 4 has an invalid length. [ 498.499801][T18867] netlink: 'syz.4.3054': attribute type 8 has an invalid length. [ 498.531665][T18869] xt_TPROXY: Can be used only with -p tcp or -p udp [ 498.565078][T18867] team0 (unregistering): Port device team_slave_0 removed [ 498.620194][T18867] team0 (unregistering): Port device team_slave_1 removed [ 498.666643][T18865] wg1 speed is unknown, defaulting to 1000 [ 498.701021][T18865] xfrm0 speed is unknown, defaulting to 1000 [ 498.715516][T18869] wg1 speed is unknown, defaulting to 1000 [ 498.724405][T18879] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 528 [ 498.755641][T18877] wg1 speed is unknown, defaulting to 1000 [ 499.036826][T18885] wg1 speed is unknown, defaulting to 1000 [ 499.148460][T18869] xfrm0 speed is unknown, defaulting to 1000 [ 499.574118][T18877] xfrm0 speed is unknown, defaulting to 1000 [ 499.598623][T18897] netlink: 'syz.4.3120': attribute type 15 has an invalid length. [ 499.852261][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 499.991976][T18903] netlink: 'syz.4.3121': attribute type 3 has an invalid length. [ 500.015729][T18885] xfrm0 speed is unknown, defaulting to 1000 [ 500.039393][T18902] vlan2: entered allmulticast mode [ 500.044640][T18902] dummy0: entered allmulticast mode [ 501.020215][T18912] wg1 speed is unknown, defaulting to 1000 [ 501.031586][T18912] xfrm0 speed is unknown, defaulting to 1000 [ 501.277579][T18920] netlink: 'syz.0.3126': attribute type 101 has an invalid length. [ 501.285643][T18920] netlink: 'syz.0.3126': attribute type 7 has an invalid length. [ 501.411556][T18930] __nla_validate_parse: 10 callbacks suppressed [ 501.411579][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3129'. [ 501.615711][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.627563][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.636505][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 501.651722][T18932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3129'. [ 501.683946][T18937] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 501.705755][T18930] wg1 speed is unknown, defaulting to 1000 [ 501.713712][T18937] netlink: 'syz.0.3131': attribute type 2 has an invalid length. [ 501.735960][T18938] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 501.789982][T18930] xfrm0 speed is unknown, defaulting to 1000 [ 502.095935][T18946] sctp: [Deprecated]: syz.0.3134 (pid 18946) Use of int in max_burst socket option. [ 502.095935][T18946] Use struct sctp_assoc_value instead [ 502.425998][T18960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 502.528186][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3136'. [ 502.547073][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3136'. [ 502.640564][T18963] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3136'. [ 502.739274][T18971] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3139'. [ 502.840576][T18971] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3139'. [ 502.877151][T18971] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3139'. [ 502.886734][T18971] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3139'. [ 503.089238][T18980] bridge0: port 1(batadv3) entered blocking state [ 503.098119][T18980] bridge0: port 1(batadv3) entered disabled state [ 503.104838][T18980] batadv3: entered allmulticast mode [ 503.111623][T18980] batadv3: entered promiscuous mode [ 503.261344][T18990] Cannot find set identified by id 0 to match [ 503.286340][T18992] Cannot find set identified by id 0 to match [ 503.306101][T18991] wg1 speed is unknown, defaulting to 1000 [ 503.321477][T18991] xfrm0 speed is unknown, defaulting to 1000 [ 503.394831][T18986] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 503.422427][T18986] bond9 (unregistering): Released all slaves [ 503.507134][T18134] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 503.516883][T18134] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 504.255152][T19028] sctp: [Deprecated]: syz.1.3155 (pid 19028) Use of int in maxseg socket option. [ 504.255152][T19028] Use struct sctp_assoc_value instead [ 504.401236][T19020] wg1 speed is unknown, defaulting to 1000 [ 504.442997][T19020] xfrm0 speed is unknown, defaulting to 1000 [ 505.522712][T19026] team_slave_1: Caught tx_queue_len zero misconfig [ 505.591132][T19081] validate_nla: 1 callbacks suppressed [ 505.591151][T19081] netlink: 'syz.3.3166': attribute type 8 has an invalid length. [ 505.872557][T19090] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 506.967105][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 506.975144][ C1] lec:lec_tx_timeout: lec0 [ 509.927701][ T11] block nbd0: Possible stuck request ffff888025a32800: control (read@0,1024B). Runtime 150 seconds [ 509.938685][ T11] block nbd0: Possible stuck request ffff888025a32a00: control (read@1024,1024B). Runtime 150 seconds [ 509.949822][ T11] block nbd0: Possible stuck request ffff888025a32c00: control (read@2048,1024B). Runtime 150 seconds [ 509.960863][ T11] block nbd0: Possible stuck request ffff888025a32e00: control (read@3072,1024B). Runtime 150 seconds [ 522.738330][T13675] block nbd3: Possible stuck request ffff888025b38000: control (read@0,4096B). Runtime 330 seconds [ 530.408314][ T31] INFO: task udevd:7355 blocked for more than 143 seconds. [ 530.415575][ T31] Not tainted syzkaller #0 [ 530.421614][ T31] Blocked by coredump. [ 530.426235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.435242][ T31] task:udevd state:D stack:20648 pid:7355 tgid:7355 ppid:5201 task_flags:0x40054c flags:0x00080003 [ 530.447481][ T31] Call Trace: [ 530.450785][ T31] [ 530.453734][ T31] __schedule+0x14ea/0x5050 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 530.458414][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 530.464003][ T31] ? __pfx___schedule+0x10/0x10 [ 530.469933][ T31] ? schedule+0x90/0x360 [ 530.474219][ T31] schedule+0x164/0x360 [ 530.478805][ T31] io_schedule+0x7f/0xd0 [ 530.483091][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 530.489125][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 530.495394][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 530.501778][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 530.572764][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 530.612516][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 530.637312][ T31] truncate_inode_pages_range+0x48b/0xe30 [ 530.643127][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 530.687396][ T31] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 530.694009][ T31] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 530.717087][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 530.722193][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 530.737081][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 530.742345][ T31] bdev_release+0x417/0x650 [ 530.746892][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 530.767250][ T31] blkdev_release+0x15/0x20 [ 530.771819][ T31] __fput+0x44f/0xa70 [ 530.775853][ T31] task_work_run+0x1d9/0x270 [ 530.787046][ T31] ? __pfx_task_work_run+0x10/0x10 [ 530.792212][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 530.817076][ T31] do_exit+0x69b/0x2310 [ 530.821304][ T31] ? cgroup1_freezing+0x20/0x350 [ 530.826281][ T31] ? __pfx_do_exit+0x10/0x10 [ 530.837023][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 530.842174][ T31] do_group_exit+0x21b/0x2d0 [ 530.846791][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.877240][ T31] get_signal+0x1284/0x1330 [ 530.881834][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 530.897108][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 530.903336][ T31] ? ksys_read+0x1fc/0x270 [ 530.917062][ T31] exit_to_user_mode_loop+0x86/0x480 [ 530.922417][ T31] ? rcu_is_watching+0x15/0xb0 [ 530.937092][ T31] do_syscall_64+0x2b7/0xf80 [ 530.941736][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.957391][ T31] ? clear_bhb_loop+0x60/0xb0 [ 530.962123][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.987215][ T31] RIP: 0033:0x7f385b4a7407 [ 530.991690][ T31] RSP: 002b:00007fff494654a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 531.000598][ T31] RAX: fffffffffffffffc RBX: 00007f385bb45880 RCX: 00007f385b4a7407 [ 531.009718][ T31] RDX: 0000000000000200 RSI: 00007f385bb44000 RDI: 0000000000000009 [ 531.018148][ T31] RBP: 0000560615542f80 R08: 0000000000000000 R09: 0000000000000000 [ 531.026154][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 531.034214][ T31] R13: 0000000000000000 R14: 00005606155441a8 R15: 00007f385bc6c39c [ 531.042292][ T31] [ 531.045412][ T31] [ 531.045412][ T31] Showing all locks held in the system: [ 531.053850][ T31] 1 lock held by khungtaskd/31: [ 531.058896][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 531.069164][ T31] 1 lock held by klogd/5190: [ 531.073770][ T31] 2 locks held by getty/5588: [ 531.087069][ T31] #0: ffff888030d840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 531.096905][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 531.147047][ T31] 1 lock held by udevd/7355: [ 531.152220][ T31] #0: ffff888141b09358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 531.177073][ T31] 1 lock held by udevd/12602: [ 531.181805][ T31] #0: ffff888141f9a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 531.217176][ T31] 3 locks held by kworker/1:11/15060: [ 531.222609][ T31] 3 locks held by kworker/1:17/15071: [ 531.257163][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 531.287172][ T31] #1: ffffc9000f02fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 531.319543][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 531.337121][ T31] 5 locks held by syz-executor/17389: [ 531.342895][ T31] #0: ffff888056d88ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 531.367133][ T31] #1: ffff888056d880c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 531.377359][ T31] #2: ffffffff8fb37be8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 531.397181][ T31] #3: ffff88807bdf2b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 531.406592][ T31] #4: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 531.457335][ T31] 3 locks held by syz-executor/17742: [ 531.462767][ T31] #0: ffff888051520ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 531.497343][ T31] #1: ffff8880515200c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 531.517088][ T31] #2: ffffffff8fb37be8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 531.537252][ T31] 3 locks held by syz-executor/18103: [ 531.542720][ T31] #0: ffff88807d944ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 531.552926][ T31] #1: ffff88807d9440c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 531.563143][ T31] #2: ffffffff8fb37be8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 531.573564][ T31] 3 locks held by syz-executor/18554: [ 531.579367][ T31] #0: ffff888077e74ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 531.589983][ T31] #1: ffff888077e740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 531.599839][ T31] #2: ffffffff8fb37be8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 531.650056][ T31] [ 531.652442][ T31] ============================================= [ 531.652442][ T31] [ 531.670500][ T31] NMI backtrace for cpu 0 [ 531.670521][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 531.670540][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 531.670550][ T31] Call Trace: [ 531.670557][ T31] [ 531.670564][ T31] dump_stack_lvl+0xe8/0x150 [ 531.670592][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 531.670618][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 531.670645][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 531.670671][ T31] sys_info+0x135/0x170 [ 531.670692][ T31] watchdog+0xf90/0xfe0 [ 531.670714][ T31] ? watchdog+0x209/0xfe0 [ 531.670737][ T31] kthread+0x726/0x8b0 [ 531.670758][ T31] ? __pfx_watchdog+0x10/0x10 [ 531.670790][ T31] ? __pfx_kthread+0x10/0x10 [ 531.670814][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.670832][ T31] ? __pfx_kthread+0x10/0x10 [ 531.670853][ T31] ret_from_fork+0x51b/0xa40 [ 531.670882][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 531.670910][ T31] ? __switch_to+0xc82/0x1410 [ 531.670940][ T31] ? __pfx_kthread+0x10/0x10 [ 531.670962][ T31] ret_from_fork_asm+0x1a/0x30 [ 531.671006][ T31] [ 531.671016][ T31] Sending NMI from CPU 0 to CPUs 1: [ 531.794573][ C1] NMI backtrace for cpu 1 [ 531.794591][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 531.794609][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 531.794619][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 531.794644][ C1] Code: c8 5f 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 531.794658][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 531.794673][ C1] RAX: 0000000000138e6b RBX: ffffffff81995e9d RCX: 0000000080000001 [ 531.794685][ C1] RDX: 0000000000000001 RSI: ffffffff8dccbf1c RDI: ffffffff8c073980 [ 531.794696][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 531.794708][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef1270 [ 531.794719][ C1] R13: 1ffff110039dcb70 R14: 0000000000000001 R15: 0000000000000001 [ 531.794730][ C1] FS: 0000000000000000(0000) GS:ffff8881257f3000(0000) knlGS:0000000000000000 [ 531.794743][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.794754][ C1] CR2: 000055d07809cf40 CR3: 000000007a8c6000 CR4: 00000000003526f0 [ 531.794771][ C1] Call Trace: [ 531.794778][ C1] [ 531.794784][ C1] default_idle+0x9/0x20 [ 531.794803][ C1] default_idle_call+0x72/0xb0 [ 531.794824][ C1] do_idle+0x1bd/0x500 [ 531.794838][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 531.794858][ C1] ? __pfx_do_idle+0x10/0x10 [ 531.794884][ C1] cpu_startup_entry+0x43/0x60 [ 531.794899][ C1] start_secondary+0x101/0x110 [ 531.794920][ C1] common_startup_64+0x13e/0x147 [ 531.794947][ C1] [ 531.963174][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 531.970096][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 531.979834][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 531.989891][ T31] Call Trace: [ 531.993165][ T31] [ 531.996086][ T31] vpanic+0x1e0/0x670 [ 532.000068][ T31] panic+0xc5/0xd0 [ 532.003790][ T31] ? __pfx_panic+0x10/0x10 [ 532.008198][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 532.013568][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 532.019734][ T31] watchdog+0xfda/0xfe0 [ 532.023927][ T31] ? watchdog+0x209/0xfe0 [ 532.028283][ T31] kthread+0x726/0x8b0 [ 532.032363][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.037060][ T31] ? __pfx_kthread+0x10/0x10 [ 532.041668][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.046870][ T31] ? __pfx_kthread+0x10/0x10 [ 532.051463][ T31] ret_from_fork+0x51b/0xa40 [ 532.056073][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 532.061194][ T31] ? __switch_to+0xc82/0x1410 [ 532.065884][ T31] ? __pfx_kthread+0x10/0x10 [ 532.070480][ T31] ret_from_fork_asm+0x1a/0x30 [ 532.075279][ T31] [ 532.078443][ T31] Kernel Offset: disabled [ 532.082760][ T31] Rebooting in 86400 seconds..