last executing test programs: 2.985128849s ago: executing program 2 (id=12150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffe95, &(0x7f0000000000)={&(0x7f0000000300)=@delchain={0x34, 0x65, 0x2, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0x3, 0x9}, {0xfff3, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x8}}]}, 0x34}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe2483, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r9 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000540)=ANY=[@ANYRES64=r2, @ANYRESOCT=0x0, @ANYBLOB="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"], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r5}, 0x14) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xec19c4db9d14220b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x5, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'veth1_macvtap\x00', {0x1}, 0x69}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r5], 0x28}}], 0x1, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c400000417ce3082dcb7479d85a4729d1a3b06bfaa4224c7634e3f0052997e5ab76b7a9b38da3ee00132b593da995d69ef9471c7ec72c493b8698d948728a5733e4a2dca3e106586f7b94101eb12d76d502f4d02811f5c199be3f7248271ac7c560f150da5d0448523edf795326a048177b448fc3bef7e324615ae95dc6aa06906bd5a787d53d454f24f73cd79484945ca174649405c93fac9d0ad8b79ee00f4091a1607e12190897fc25249f95d6db201a12a4c6a62dc6", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf254a00000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x8c0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x814) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002c00010122bd7005fcffffff0a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000002c0)) 2.798966086s ago: executing program 2 (id=12154): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000003d00)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000034600003f000013"], 0xfd6c) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000a006f51e3ea75bd408b6bd976a9284dfa98e8d345686326837ffb051349d7bcfaeba6b4cd770a5e765c5cd7647a7815e1b6f85635a4abccc0d1f0efa3ece323b2bb412e", @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000026008d03000008009f00"/31], 0x40}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) 2.187003793s ago: executing program 2 (id=12162): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updsa={0x154, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000280)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x8, 0x9}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x6, [0x2, 0xc, 0x9, 0x0, 0x9, 0x2, 0x2, 0x1, 0x6, 0xb, 0xf, 0x9, 0x4, 0x11, 0xf, 0xb], 0x1, [0x6, 0x67, 0x0, 0x2, 0x7, 0x401, 0x2, 0x800, 0x8, 0x3, 0xa58, 0x2, 0xe, 0x100, 0x9, 0x4], [0x48e3, 0x2, 0xfe01, 0xc, 0x33, 0x508, 0x5, 0x3, 0x7, 0x1ff, 0x1, 0x97a2, 0x3, 0xffc0, 0x3800, 0xc]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d616373656330"], 0x40}}, 0x0) 2.007895273s ago: executing program 3 (id=12166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0xfffffffc, 0x1000, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x40a, 0x8, 0x8, 0xf}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x38, 0x24044050}], 0x1, 0x0) 1.952674344s ago: executing program 2 (id=12167): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0xff}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, @private=0xa010100, 0xf, 0x12}}) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1}, 0x4020) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x184, 0x10, 0x403, 0x70bd26, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_VF_PORTS={0x14c, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "1aa0ed9fec7406f6ac1a82ff2725791f"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "edec3a01fa5957b9e8d75f4f064f7a8f"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x100}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "043bfde2b3cb4ee3333b7a7431b47cde"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7bb0fae795fcd9c2810ae20059434e4e"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, 'team0\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cdc2528eb83bf9eceb5cc40d328505af"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "94fea736000910faf9460358c227da22"}, @IFLA_PORT_VF={0x8, 0x1, 0x10}, @IFLA_PORT_VF={0x8, 0x1, 0x10001}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d543b726b8b931d0ac4b2710572acbde"}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3e15de0655309f4863690b347647bf8c"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0c1bfdcb3126f6a186953d1580dc7db2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a0b99a3d616b0d1401faec4c3ad49ab8"}, @IFLA_PORT_PROFILE={0x9, 0x2, '#-]{\x00'}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.742330662s ago: executing program 3 (id=12169): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000009ec0)={0x0, 0x0, &(0x7f0000009e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf250f0000000c0005000201aaaaaaaaaa0400a2aa0000a9f81014dadcdc4b4ef088e712f6f36a6d94cbff98f69a8179bed0e3d7694875ef149fa43e16"], 0x28}, 0x1, 0x0, 0x0, 0x808c}, 0x20004000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003f40)={&(0x7f0000001b40)={0x23d8, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7dc}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "4325464df0e1cca621bbe6c2b5fcc309322f37bcba6ee46b7a9938bee4"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1078, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "4c36b2088cdf60cafa63970ab7bf2839c3d4f05fc4e2b7506af50d8077140d43a861c9efb0f8d5eca6dd3a3576dd51e0035adf168552306d04f6d6dbef7d613441128b5146dd7d6e0924bcac33a91c9ad85c2af274"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1288, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x16c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x56}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e24}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*\xbd\'\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\xcd\v\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc80f}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8e, 0x4, "02ed911757f783cea99cc45b5b35a4231b96a03329cf9830c109da021e1d12bb811e04a101cdb52f985d70e48dd235cf889db826c5fb5020f030194f48784436d6c0d43fb203f87e46c6023ef1940bd4470a6a392a4a14369308dfc0874c990df7bae495d2bd59a05607df43244e903f04e6b39f2855418fd4a6b55b013d93e0bf4f9bde692c5df7f4d8"}]}]}, 0x23d8}, 0x1, 0x0, 0x0, 0x4000}, 0x24008080) 1.548592359s ago: executing program 3 (id=12172): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @ptr]}, {0x0, [0x0, 0x0, 0x2e, 0x30, 0x30]}}, 0x0, 0x3f}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 1.381248126s ago: executing program 3 (id=12176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)="d0d0648b9fff74a74c4b12ed95", 0xd}, {&(0x7f0000000240)="6fbccee3101c7a3518719d", 0xb}, {&(0x7f0000000000)="c9bf51ba4f1785089658b6b41db8da336f37a213e5848adbdab75e64a14fad286c0d65b523c3b756", 0x28}], 0x3}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(xts(aes),blake2s-160-x86)\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000006001a000000000006001b0000000000"], 0x44}}, 0x0) syz_emit_ethernet(0xa7, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x41424344, @ANYRES32=r0], 0x0) 1.268374956s ago: executing program 4 (id=12178): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7820, 0x20, 0x1, 0x7, {{0x6, 0x4, 0x2, 0x1c, 0x18, 0x67, 0x0, 0xe, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0x3, 0x2f}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001540)=0x5, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0x1, 0x8008, 0x4, 0x8, {{0x41, 0x4, 0x1, 0x5, 0x104, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010102, {[@cipso={0x86, 0x13, 0xffffffffffffffff, [{0x5, 0xd, "58f9f696544c83b1a64b82"}]}, @rr={0x7, 0xb, 0x1c, [@rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x14, 0x52, 0x0, 0x1, [0x9, 0x1, 0x1, 0x2]}, @generic={0x94, 0x11, "0d720143fe3124036370634dcba7ac"}, @timestamp_prespec={0x44, 0x3c, 0xbe, 0x3, 0x8, [{@multicast1, 0x13ad8f48}, {@private=0xa010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x70e}, {@private=0xa010100, 0x5}, {@empty, 0xa}, {@empty, 0x5f}]}, @ssrr={0x89, 0x13, 0x72, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @empty]}, @end, @timestamp_addr={0x44, 0x54, 0x90, 0x1, 0x3, [{@private=0xa010100, 0x4dd1}, {@remote, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xfffffff4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0xfffffffc}, {@loopback, 0x8}, {@private=0xa010101, 0x4}, {@multicast2, 0x5ac4b5b9}, {@empty, 0x3}, {@local, 0x2800}]}, @rr={0x7, 0x7, 0xb, [@loopback]}]}}}}}) 1.252549005s ago: executing program 3 (id=12179): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8105}, 0x50) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0x11, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffeb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7b40}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.227084391s ago: executing program 1 (id=12180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3506, 0x1, 0x3, 0xfc, 0x44, 0x8, 0x7ff}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x1, 0x0, 0x3, 0x4, 0x4, 0x3d}, {{@in6=@empty, 0x4d2, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x4, 0x0, 0x6, 0x3, 0x5, 0x2}]}]}, 0x17c}}, 0x4000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r3, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='gT/\\', 0x4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x8) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x920, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x6f}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)={0xd0, r2, 0x400, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfffffffffffffff7}, {0xc, 0x90, 0x180000000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x200400c0) 1.083600618s ago: executing program 0 (id=12181): r0 = socket$netlink(0x10, 0x3, 0x4) close(r0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000000000)=""/148, &(0x7f00000000c0)=0x94) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80800) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000180)={r0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'caif0\x00', 0x8000}) r7 = socket(0x18, 0x6, 0x1000) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0xb7, [0x6, 0x0, 0x5, 0xd, 0x0, 0xffffffffffffffff], 0x1, &(0x7f0000000300)=[{}], &(0x7f0000000340)=""/183}, &(0x7f0000000480)=0x78) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r8, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="117dde6753ee"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0xc8630eab1f13c08d}, 0x20040014) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r11, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4f0}]}, 0x4c}}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000009c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000019c0)={r12, r13, "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", "e9d7c74bf6d87250a04f0ab16a12f9de3706ffd84007429814709e53ce08726fdba551e1b334b7c68139afc55a7a1e85093ecbddd74c7ed51c8c51562f6d798c098c484b815b3066244cac79847825b0d1a60b6ebbc6f8536c20116515914e8c71524a4097a11485c80a29640d276bd6f3f1bef89d05194a353e097faea5ff2b278908383a6e83cb593491497fa5df1d3e23bc4b39ca3f23d766044104071564463fc418dda9b38496c6124f9377d90335eb701cddb0b2862ce8fd67243eaeac9261d562391ad16bd568d899c98f5907acdf1082f2bb95131edf36ad13a9c567c5cf84ca5d463c656252398d26d6d4ee365d982b231e78b9f7b336e7e87789b7d691579d9b769401f5536c1da282f1939b2cdb412c637cf9a4cbdf81ba2de4a1ec08f231eebb6d92c6e2e4214d7cd545a7b4593218a35c80c6907125a8b4c21051c1d339b5684e47f5d1df5550220229317f28c32698074bd1de2b00e43942759d67a11d8f70e9562e30fbf7844540a4f988a3f2757ade8307bb06644d3872bcc2c4b926971773bdf5a2fdbd21bff2082edbba468186c7ad24a27a611a5cdef2531f9e185a88277a27375284d11ec73ea2c5df3d6eab244eb29bcb522894df3fc587fe7d9bcfa90151ea4a2242db45c34a4a1d00fa84f0501a4242eb3fae5433f56feaf6eafbcf21fa2d7d135337fe72c8b95c2c3a99e0dab042c822a2eacad5a2b1590776d6298c39f8e264c150e2695630c8b6bd11b68cfd7963e5278e52f6a33cd3e982225258474276c0102b0fde86267db1268a7555b2e6b9acb016ce959b31577e4a823d0326559bf29703fcc58131ffa52c57e7330ce0f43f31a10cec01f8cb1f9c98e9a79adb8f9612dd177a7b9c40e124d209fec7cc83c9fff7b41b4a4a6a57262d405fbdb68061de6cbd7bfa8ea1917316ec904946f92c2a9a4bfb9477263ba1b2ecebfad01cffda400caf985e8d5ade53db949b389c67151faa3891ec0577de8231ed58dc00d97a936ad230837f9b82b51adf405b69f8c841076d4d5282586e7d504985ac8cc1911ecc9257b1ba24c02a1ea787fe6e811b699b44b18cd13ad6ee1d76a1c3925b9a7bed00c113cd36b7285d5575365f06a370fd75ca2b9201d18f7d8bf5d6132d748196fed5b3bfc6a5173571387eef8969d692d5ad0bf1dbf762efd8a8eb74df83840505f2345d7a9cc23c34b65c3d846a21bad357d9ce9a1bc158dc8679fd97c22235a818dd3af78318918d737a5c49c3f77f04826dcd2f9d9264d0e1aceed046d53d5bd0a47d82fa83ad07ef2fdb2916a17c0f3dcec757fac15de262299c494f2dc47d7bbd3a4dd4a8fdbdca26d000381cb5aa173a7b1dcbc7a909c4963020ac55c4a4c034df7af1bd0638a85f404e11ed502c97eaa916b2f6720f823e188ab7ba4a3648079804df352b74ecff0da61e70101fb1f6ca14ace8a545ded98240a0e2a73d0a90ca3fe6fa3cd0126d15baef79bab287bf916906612aaf40bf59a1e2e83348c0e82b8c86c1e097ce38c252dbc8b48c6ec0aaaac17438309eb59243c068485b8e0a372c74d83d9f1b700d16ca4d5aa8b64b3bd451c64f752c98c0ffd54d8a10031f908cacd24e5656e95f25261419d8e5ecc6bc1ad571d9d0ea3a6d75d3d5062aff1ff3b913e816b79a589fe7156ad88d2823c7053786d35c8b21732c1267fe413c73f4afe1f56ac25768ceeb5c19c67546dcd6e5bd5098995abce3dd50963147581ca0efd4c671d64860301761710eef2b8b06a7321cc3ee29c01fbace694aba397c1c2c9e87bb567b6b432503b6dfad6f433ab6cb21254508fee7e72b20a97d3f50a867877c407e7a41985f4b1b392a0f07a9c217e795ac1246904e594beb36075a141e20406b0aa9b821e3e956809b4340990ad60a65435afa5371a75b0b3e28e46bd5e01bc02f0d37aeac5cacf9e85f440d1b924ede63adcba792b74e1bbc8482f3fdaf1cc5ac8b9f646fd2c3553b9521611c295d432d6a16d4a6bc13ef8ca5b36bd45047a958bf73a34308a883111cdb1756a9eb90022b7adb23ed1a5d0ceba2c08a416b3d309a0f8c95e6e5bed80fd78fb507be7be3c0ef2af1200531a3af3d5fef774ac312f5a480db5d54199f1487ba3254a4a71dc419a60654bc42b36cae858955390cf2ca52d6c037dea619819176de8a80eae4f3c4ba70ea80329ce8bc17e3b389eb4b150837049cd538e4f95d1b70119140d7ae9beeee23efdc6d098af966c84f90f4ed60577d9f86e2d6df1e0c0a9030c2a923336fdc2e1f9e8734471fce354bf665510118c481c70c01083c91537a25fa9ab24dd7905499b78ab29f2a075762604b7867bb214c6ad6db4ded8954275e5c85052d814ca21a843d6622a722fcc12b7befbcf29d5b4981af375074e00c80e55fea03340b8b63368d484850ef94480600104144297e95d1a847bff486d9b798d5f099e5da20f7e8de689c8361035d156542e6163f0af9ea1e6a6c573560511bad4c621953b0637f19bf0841cd1b6b5c42756400bb712c4a6ad633b3bd0f289697143d7ee927351fe28c754058d3f443424dc1b0168ab0f57879bfa2d5334b234608f9e6879bce1c9000994cf03782678837dfb34f5f32de07f90f322c828b3db9b50c1a26e6e9401b53fc4bab924b863d14665872930dcd0ecb6efeebf05b90ff6439e844e42b444c52b0a419cfbba475dc4aad23ac8dc4c6925b6141efed0f729109b6156c38a0dd35610baa959269053d27116aa322b6c77dff2d7e2d61058676432e9af86787a994a22554fbcdb0f39798b090b8854c96d15563e23e72acb4ccb8d3fc779a51562b3bbca4a29f6324745408b79d75337effc9b8adbf478b7f7c168cd352f98590d1d640a87c0aa9db21efa622fc34749bf4d65feab9ab6d87bc5187edd6ce39350d96bef5284c5830a7a1d265cfe60e2fba1c2b47174ed7043178b2d01cbc53a5b6d9ae1a1ff75e18ea89d444dbb46d3118bbcca194de9f2ca1dee5070ca1e64bb57e9987658e7e070c8ccd51048c03c2accadad52b7c307a02ced742f2c5a9b5cbe252b175dca7a6079b3e85191c0f3da96d21b5aa0f925310ca38d11288fbce518cc12a9080e2fcd3e986559b4f0f80fb426c9cda573c8c39ac04408a42aaea0f9dce63ca24c656888e07af6105698fe625f59f7af66862406f29052a6f10fe35fb5dbb459fbe251b88d920664e759f44b490e402ff246951f5a1aad221b299a1a6ecb56eeac37a3c6eb3e81cd3a9bce046b64d29626a94de55fb328533c1bde445c6f333c0ac7dc9007b0683a87781f4011d97acc12249c98c7bf35db8c476cb3e7e2ea52cb31aea48b7bdca06dabd120e0e0e6b3aa5aa7b03dd85a75bce2c3a5988e70cf0211590a29a5634570cbc7f693ca8b0fc2693458b75f487246f8f38ed23adc96fbf7e3bb3e561f3e83e23746eb785fd9822afa0ee22d95436ad10d7f65d58381298c932c31a9804f18ff4dd83b844b6ce3a9709ed0f6d3fdb6b637c47edffe8619550f3921f984d575075580d89bebe5a232a8f71d2ecdba651bb3f8a3ec55a1e6b44aded92d593ee36a25a973d4da954114f2ed29d4559072baa00505f25776c046191636044cd88e93099ce251917747139be6a09ac4fa37c3d5f059ab21bd955012c8fe6b4b7d2c9921348280465df7479359cfdf3a0d4fea2bcb1a5bf3710e5979ed24419689036c34084eb3d7630ab3031771b09b75097ab9452b68b191516c79a2125d9b91cf6c303994442927a78de66189070256e8c19533d5e65f5092cce3418f144da955329ac64343afca173f0f7ed84011d468ef4fc2388d77d5bb00c397532fe8ec168c5cba397f237d73f39a817cb263aea3c4573760a1ed334d64624d63e14f9429e182d561c197b18db981fcad5125df70d1c58aabffe9b65002bc6cdf6ec08eae4fb296140e9d5ed717b0fe5bea55d8ebc872e1cc1cecd8b51e538b4273895688727ed6cec397db3f83e0d96a3ea867872f9ce6731ef3dddcaf9c7c61a6bb1b832636355a515a8833c967155941023c7d0ff8e71046da3230490010fbd6341157343574c95a8bf5b7a378c407d173b1b29d86a2c3a5a2839abe79fe55f37dc600c77f14aa0dfee83a9f41c9553ab0c7bd9db08c98c77033ff841dfe11f13199cef811a70d50b261753f65ab00b4efc9e0b1f672a93d967b0bc5e38aeab4e08f704a0030b31f41223052c1016fada595ceea21f548ba4e358ecd0db426e007d46a6bbaeaf1fbb1af9c81bd199cbc63868d2d7055004e6893b97164b052bc8fa9c1a828a1030bc96bd15a119e9a74a23b6fabbf187b979fb6db7a33f297ec296ed839a0be761789c07235ad24821671400cb046edb6bd49b1304ebd02c2ef142d7eecb075726f04a61085a6a9ab2f511027472eea11a003413c8e983042b28ff5a6a2b97ccbeadc2b57332639e54176a6cc07493b7710c14c4bc0b9aed854a9f244cc3a68f4651ce99726952a891afdb599e6c7d8cfdbbb84485d684034a0b7ed50ded2430cdf25777b82ededcd4bfe8183fac32c0300c1c0baef2c99fc973de33624ca45367090a13e0edd554b8629e9fa398f3b9974a0a28eaa04e36efb4f6501ff23b63961e1e5c3653e86cb3936e0a5ff9f80d1414c447c8fd34c2dea55b8b927e3b398b0087fc2b8e04cf07480f899116a512e8ae1847ca4e164ce7360c8b7bc55e8979f0503aa75fbb0b50b8acd332f711160534ad724e4730115c1baab218f95b8af4e7ed76ab24b6a53e8ce84ff34676c655c2564a8cce286187bbe0f5fd9dd32e8af0eda58fd7cf42a989b6bce29948599a8c38149aace78bd7ea80f293ade17ff0efbf0d02caa23ed70cc3121e1a2bd87f842f99933a306c1342680dbc02c122a2a53ff5daf72c18146dd34fd59c5e289e71165c08b93d9c3f16d55c5b96f8c869ef6796423b3246b6048f080bcc79dead8f42b5fb7fd2358b95c3ab1794e3939985ceb31d0736a1e2fb2fd02b28bbc7db995d179d1535077fcc2f5e8b7a69cd183a2c183d23ad3f11db4467abf9a9ce13f3b0445a643daf1e1040132a9422d707fad11e74db6410274192fb2d9b1aea2d5d493d0a83a12a0bceff538ee1a631d11f2e758e20e0fbd795847c8a1e4a5f717d22848df729e16d392803d17d57a683ec806beca5b7d0acaa71dab0ef248da7865da449ce004d0540763a57ed80a9d136945b6e6cf509f2ebea4bf602884d538c02c4f9d2f6d02f19e3b1de257252c8c9e537f4fed4e3612444dc80aaa4dc22d6b907de5efb574114c83d7a6c691dd56026898e6b5892b3aa8296d0ee4e6ad47db323a2dd29b7915629dbcbb25cbf2f7c29b41f4d2763e467ee61179421e04f52c9538aa10a80ad60d13dbe4f5889ba331115457cf10ac767e56e0a"}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x8010, r1, 0xef8e3000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x27c9545ebbd53703}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x34, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20040044) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002b40)={r6, 0x58, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000002b80)={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @empty, 0x1, 0x7, 0x5, 0x500, 0x3, 0x4100042, r14}) r15 = accept$ax25(r7, &(0x7f0000002c00)={{0x3, @null}, [@bcast, @default, @remote, @rose, @null, @null, @default]}, &(0x7f0000002c80)=0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r15, 0x8982, &(0x7f0000002cc0)={0x6, 'pim6reg\x00', {0x10001}, 0xfffc}) 1.05972743s ago: executing program 1 (id=12182): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000300)={0x100, {{0xa, 0x4e20, 0xd, @mcast1, 0x9}}, {{0xa, 0x4e20, 0x6, @local, 0x2ef}}}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000006ee0000300000000000000003000000000100000003000000090000000000000000000002030000000b0000000000000a010000000000a0d1819083ce8c57117ab6d5ec140fbd60870f052559e399e3268e08823b0aab19d800"/108], 0x0, 0x4a}, 0x28) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES32=r2, @ANYRES32=r3, @ANYRES16=r0], 0x40}, 0x1, 0x0, 0x0, 0x400000c}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async, rerun: 64) sendmmsg$inet(r5, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="04c2712a", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x3, 0x0) (async, rerun: 64) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)}, 0x123) (async, rerun: 32) shutdown(r5, 0x1) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000ab98e2c862000062aaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0xfffffffffffffef1, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000001) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24084804) 1.002007164s ago: executing program 4 (id=12183): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x5865}, 0x48000) 956.745655ms ago: executing program 3 (id=12184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000040000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000009c0900020073797a31000000000900010073797a3000000000080005400000000c08000640ffffff000800034000000008400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001400038010000080080003400000000004000180140000001000010000000000000000000084000a"], 0xd4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r2, @ANYRESHEX=r4, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$nci(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="370301010a8f043519d3f506950eecf2b78064fcec9b12f408b240b90d8a7f64b29a7664c9f1a91d6a035f01e61cc7e90e661ce3bec4b0a07c802e83add346e0873eb727ab0d388cad90199b76a5f4dca1968ae205b53e86c71946e5dff38dabfc958d06e1860430863579a85484ae5cd89e227e"], 0x4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20040894) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x25, 0xa, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="027534ca1a0000010000000000000000"], 0x10}}, 0x34000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000004c0)={0xffffffffffffffff}) write$nci(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="4000000001ffff2b4d9dfa9edb658ab6059fa0846495382efb79e30b324a1cbd3c8c179d8fa5228753a090858bbd15d8d5d400a7f2c7e8d4157fd8e38e02111a23e8aa167db37b76dc87aa8b5661c5b8e6d1460fbdcae907c248e4d3b75ff4c1dc66f136e4865ce915e2682e2d40d580a169d4"], 0x6) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="07000000000000014a362eaf541d002007000000", @ANYRES32=0x0, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2000800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=ANY=[@ANYBLOB="1c0000001d000100000000f4fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="12000004"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 954.888327ms ago: executing program 0 (id=12185): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @empty, 0x8fc7}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) getpeername$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r6, 0x0, 0x8080, 0x20000000, 0x8000, {{0x23, 0x4, 0x0, 0x25, 0x8c, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @local, {[@cipso={0x86, 0x3b, 0x2, [{0x1, 0x9, "7f6b491ad45414"}, {0x5, 0xe, "d3268239aefdc1238572315f"}, {0x1, 0xc, "d8cf0c1b0bf5f2a08312"}, {0x0, 0x12, "9b1740c37a5ba9a16f7622849fc40981"}]}, @noop, @lsrr={0x83, 0x1b, 0xe1, [@loopback, @empty, @multicast1, @broadcast, @multicast2, @multicast1]}, @ssrr={0x89, 0x1f, 0x4a, [@local, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}]}]}}}}}) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0x6}, {0x9, 0x10}, {0x0, 0xe}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0xc040) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) 912.532777ms ago: executing program 0 (id=12186): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @local, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x1, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3b8) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) close(r0) 902.386147ms ago: executing program 1 (id=12187): vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000140)="df", 0x1}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="6a8b63bd33", 0x5) syz_emit_ethernet(0x7e, &(0x7f0000001180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x11, 0x0, 0xff, 0x0, 0x0, 0x4, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x2, 0x12) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @empty, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@allocspi={0x164, 0x16, 0x400, 0x70bd2c, 0x25dfdbfe, {{{@in6=@remote, @in6=@loopback, 0x4e23, 0x1, 0x4e24, 0x3, 0x2, 0x20, 0x0, 0x5c, r2, 0xee00}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x6ff8, 0x0, 0xfffffffffffffffb, 0x9, 0x27, 0x1, 0xfffffffffffeffff, 0x3ff}, {0x10, 0x5, 0x1, 0x33}, {0x8001, 0x1, 0x2}, 0x70bd27, 0x34ff, 0x2, 0x2, 0xd}, 0xb1, 0x8}, [@user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@broadcast}}, @encap={0x1c, 0x4, {0x7fffffffffffffff, 0x4e24, 0x4e23, @in6=@mcast2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @proto={0x5, 0x19, 0x32}, @coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 849.340918ms ago: executing program 4 (id=12188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0xf5ff, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) 684.025808ms ago: executing program 1 (id=12189): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xe, 0xb6}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340002100140c0009800800014000000081400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x32, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x5, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="fa28dff8b1df", @broadcast, @multicast, @rand_addr=0x64010102}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x40000d0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fddbdf25160000000a00060008021100000000000a001a00ffffffffffff00003a889e530bc9f058efed25f9674c666f35fd571d1866dc77e614093881aad71894c3d08acb950ba3cfd8fd81b6329aa54daffe3b8daf9ae186"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e21, 0xff, @remote, 0xe32c}}}, &(0x7f0000000140)=0x84) close(r7) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)=':', 0x1}], 0x1) ppoll(&(0x7f00000000c0)=[{r7, 0x8080}], 0x1, &(0x7f0000000180), 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000004c0)=0x34200, 0x4) 681.765112ms ago: executing program 0 (id=12190): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x100, r2, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9f6e23ae48405d483fcab6278a81eeabd783ac34a5c8a33a"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b3087d20196743bdaed79e72f8801d3304dc9954c517e836"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4432b7a9d9686ed2563af565b87c7b4b8c7067c3ac7432fb"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x100}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40080) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x32fe3cf8, 0x0, 0x11}, 0x14) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r4, &(0x7f0000000200)={@val={0xa}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @ipv4={'\x00', '\xff\xff', @loopback}, @random="4ee3cf6a6cb3", @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x38) 675.63261ms ago: executing program 4 (id=12191): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x2) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) 521.242972ms ago: executing program 2 (id=12192): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x1e}, 0x8) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, 0x4, "957b0a386101819797d7c1bd75f5fe54f049ddca5f0c5c9bc539d170cf2e21f5", 0xfd0, 0x3504, 0x4, 0x9}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0x11, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffeb}, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) socket$kcm(0x29, 0x8, 0x0) 460.149442ms ago: executing program 1 (id=12193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240007012ebd43c69eafa32a0c000c1c9d4e2d8425027c00000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="14010000320001000000000000000000010100800c0001000000000000000000e6a6db1b140003002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc460e449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0ef3f97994cd27776eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf7d6851bb2195341767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c47b7f78ffb36ca3e079e49d9fa5cd184192a946c192a817cb07cd2a1dfe46c7f495f5d2d747360fd7b7d0c7647b1973ca663f59becbe1df4ee3cc194a218cab6c37a0ddddb40d833f382a1392825190b2ae90a588e2aea34059badc03c48bf8ff185bb14796de6cd815fb19de76e0a7cb9750e77c8bb0d385d604a6393ab3de18d615612e5609c241ea0a231a38c8f15252d3b011e30100a8d1408675d87cf0c757a2b284d4adabf2a62ce0cc20c73ef7fff3124dafb93efb96258deeb13f2c4248600c1bbbb93"], 0x114}], 0x1}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100e7ff000000a54805000000e3ff0304"], 0x14}}, 0x20000000) 458.674876ms ago: executing program 4 (id=12194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000440)='GPL\x00'}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000002000000000000", @ANYRES32=r6, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) r8 = socket(0x22, 0x2, 0xe) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) recvfrom$rxrpc(r8, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x58, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x200ec000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000efff000000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c000280080002400004667293abd10e5000000008000340000000200900010073797a30000000cb97ab4bbe53d69a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) 305.686889ms ago: executing program 0 (id=12195): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c40001000000"], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2720, 0x0, &(0x7f0000000280)) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) 157.296602ms ago: executing program 1 (id=12196): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffffd5, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800ffff80000000000000010a200001ff00fd090000000008000300", @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, 'syz1\x00', @bcast, 0x40005, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001a00"], 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x440c5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00910000100091110c4886bc212aea26fee295f9", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0348000d"], 0xfdef) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r11}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 154.922321ms ago: executing program 2 (id=12197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x8000000, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 4.308847ms ago: executing program 0 (id=12198): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x8000, {0x0, 0x0, 0x0, r1, 0x137b, 0x800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x0, 0x7, 0xffffffff}, @IFLA_BOND_PRIMARY_RESELECT={0x0, 0xc, 0x2}, @IFLA_BOND_RESEND_IGMP={0x0, 0xf, 0x3}, @IFLA_BOND_PRIMARY_RESELECT={0x0, 0xc, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x0, 0x1d, 0x2}, @IFLA_BOND_PACKETS_PER_SLAVE={0x0, 0x14, 0x8000}, @IFLA_BOND_DOWNDELAY={0x0, 0x5, 0xe05}, @IFLA_BOND_ARP_INTERVAL={0x0, 0x7, 0x80000000}, @IFLA_BOND_DOWNDELAY={0x0, 0x5, 0x8000}]}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 0s ago: executing program 4 (id=12199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00000052560102030082c4ff04000000ffff"], 0x1c}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) (async) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private0, 0x1}, 0x1c) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r5 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000a000002ff000000ff2000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x48800) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=ANY=[@ANYBLOB="1800000000000000000000000000000089a000fe0000000095"], &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) syz_emit_ethernet(0xce, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) (async) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) (async) sendmmsg(r8, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c0d1) kernel console output (not intermixed with test programs): ve wlan1): Opening slave failed [ 1188.570224][T10540] IPVS: Unknown mcast interface: vcan0 [ 1188.803261][T10556] syzkaller0: entered promiscuous mode [ 1188.808910][T10556] syzkaller0: entered allmulticast mode [ 1188.897358][T10564] netlink: 'syz.4.10331': attribute type 33 has an invalid length. [ 1188.961262][T10564] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1188.999475][T10564] bond3 (unregistering): Released all slaves [ 1189.033247][T10578] netlink: 'syz.3.10334': attribute type 21 has an invalid length. [ 1189.057682][T10567] batadv_slave_0: entered promiscuous mode [ 1189.071722][T10578] netlink: 'syz.3.10334': attribute type 5 has an invalid length. [ 1189.095292][T10566] batadv_slave_0: left promiscuous mode [ 1189.200223][T10585] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1189.381445][T10592] openvswitch: netlink: IP tunnel dst address not specified [ 1189.837866][T10628] netlink: 'syz.3.10349': attribute type 25 has an invalid length. [ 1189.850033][T10628] netlink: 'syz.3.10349': attribute type 25 has an invalid length. [ 1190.193954][T10640] syzkaller0: entered promiscuous mode [ 1190.199631][T10640] syzkaller0: entered allmulticast mode [ 1190.508914][T10656] geneve2: entered promiscuous mode [ 1190.517750][T10656] geneve2: entered allmulticast mode [ 1190.532115][T10661] ip6gre0: Master is either lo or non-ether device [ 1190.547132][T10664] IPv6: sit1: Disabled Multicast RS [ 1190.564079][T10664] sit1: entered allmulticast mode [ 1190.754277][T10676] netlink: 'syz.1.10362': attribute type 15 has an invalid length. [ 1191.178970][T10705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.098609][T10750] __nla_validate_parse: 20 callbacks suppressed [ 1192.098630][T10750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10381'. [ 1192.314014][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10385'. [ 1192.338461][T10760] syzkaller0: entered promiscuous mode [ 1192.357306][T10760] syzkaller0: entered allmulticast mode [ 1192.655176][T10788] syz.0.10390: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1192.690761][T10788] CPU: 1 UID: 0 PID: 10788 Comm: syz.0.10390 Not tainted syzkaller #0 PREEMPT(full) [ 1192.690792][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1192.690806][T10788] Call Trace: [ 1192.690815][T10788] [ 1192.690826][T10788] dump_stack_lvl+0xe8/0x150 [ 1192.690863][T10788] warn_alloc+0x249/0x340 [ 1192.690890][T10788] ? stack_trace_save+0xa9/0x100 [ 1192.690917][T10788] ? __pfx_warn_alloc+0x10/0x10 [ 1192.690950][T10788] ? kasan_save_track+0x4f/0x80 [ 1192.690972][T10788] ? kasan_save_track+0x3e/0x80 [ 1192.690993][T10788] ? __kasan_kmalloc+0x93/0xb0 [ 1192.691014][T10788] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1192.691038][T10788] ? xskq_create+0x56/0x170 [ 1192.691061][T10788] ? xsk_setsockopt+0x54c/0x990 [ 1192.691080][T10788] ? do_sock_setsockopt+0x17c/0x1b0 [ 1192.691105][T10788] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1192.691128][T10788] ? do_syscall_64+0x14d/0xf80 [ 1192.691158][T10788] __vmalloc_node_range_noprof+0x132/0x1730 [ 1192.691217][T10788] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1192.691248][T10788] ? __kasan_kmalloc+0x93/0xb0 [ 1192.691280][T10788] vmalloc_user_noprof+0xad/0xe0 [ 1192.691304][T10788] ? xskq_create+0xbf/0x170 [ 1192.691339][T10788] xskq_create+0xbf/0x170 [ 1192.691368][T10788] xsk_init_queue+0x8a/0xe0 [ 1192.691394][T10788] xsk_setsockopt+0x54c/0x990 [ 1192.691419][T10788] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1192.691442][T10788] ? __pfx_aa_sk_perm+0x10/0x10 [ 1192.691476][T10788] ? aa_sock_opt_perm+0xff/0x1a0 [ 1192.691512][T10788] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1192.691537][T10788] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1192.691561][T10788] do_sock_setsockopt+0x17c/0x1b0 [ 1192.691592][T10788] __x64_sys_setsockopt+0x13d/0x1b0 [ 1192.691623][T10788] do_syscall_64+0x14d/0xf80 [ 1192.691648][T10788] ? trace_irq_disable+0x3b/0x150 [ 1192.691666][T10788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.691689][T10788] ? clear_bhb_loop+0x40/0x90 [ 1192.691715][T10788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.691736][T10788] RIP: 0033:0x7f0830f9c819 [ 1192.691757][T10788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.691776][T10788] RSP: 002b:00007f0831e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1192.691801][T10788] RAX: ffffffffffffffda RBX: 00007f0831215fa0 RCX: 00007f0830f9c819 [ 1192.691817][T10788] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1192.691831][T10788] RBP: 00007f0831032c91 R08: 0000000000000004 R09: 0000000000000000 [ 1192.691849][T10788] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.691863][T10788] R13: 00007f0831216038 R14: 00007f0831215fa0 R15: 00007ffd27acc3b8 [ 1192.691897][T10788] [ 1192.970179][T10788] Mem-Info: [ 1192.973792][T10788] active_anon:6362 inactive_anon:0 isolated_anon:0 [ 1192.973792][T10788] active_file:2364 inactive_file:41738 isolated_file:0 [ 1192.973792][T10788] unevictable:768 dirty:51 writeback:0 [ 1192.973792][T10788] slab_reclaimable:15848 slab_unreclaimable:169195 [ 1192.973792][T10788] mapped:33010 shmem:1370 pagetables:6063 [ 1192.973792][T10788] sec_pagetables:0 bounce:0 [ 1192.973792][T10788] kernel_misc_reclaimable:0 [ 1192.973792][T10788] free:1213174 free_pcp:28329 free_cma:0 [ 1193.054094][T10788] Node 0 active_anon:25448kB inactive_anon:0kB active_file:9456kB inactive_file:166748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:21636kB dirty:200kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21732kB pagetables:24092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1193.112080][T10788] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110404kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1193.174745][T10788] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1193.212360][T10788] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1193.218350][T10788] Node 0 DMA32 free:1180300kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25372kB inactive_anon:0kB active_file:9456kB inactive_file:166748kB unevictable:1536kB writepending:200kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:52928kB local_pcp:19728kB free_cma:0kB [ 1193.255275][T10788] lowmem_reserve[]: 0 0 0 0 0 [ 1193.260120][T10788] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1193.291597][T10788] lowmem_reserve[]: 0 0 0 0 0 [ 1193.296762][T10788] Node 1 Normal free:3661060kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60168kB local_pcp:26800kB free_cma:0kB [ 1193.342499][T10788] lowmem_reserve[]: 0 0 0 0 0 [ 1193.347432][T10788] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11240kB [ 1193.363890][T10788] Node 0 DMA32: 10784*4kB (UME) 9831*8kB (UME) 5336*16kB (UM) 122*32kB (ME) 244*64kB (UME) 871*128kB (UME) 1001*256kB (UME) 519*512kB (UM) 178*1024kB (UE) 69*2048kB (UM) 0*4096kB = 1183736kB [ 1193.383663][T10788] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1193.396526][T10788] Node 1 Normal: 8*4kB (U) 14*8kB (UM) 13*16kB (UM) 13*32kB (UM) 16*64kB (UM) 14*128kB (UM) 12*256kB (UM) 10*512kB (UM) 10*1024kB (UM) 7*2048kB (U) 885*4096kB (UM) = 3661312kB [ 1193.415144][T10788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1193.426434][T10788] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1193.436930][T10788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1193.463350][T10788] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1193.474738][T10788] 45468 total pagecache pages [ 1193.491081][T10788] 0 pages in swap cache [ 1193.496618][T10788] Free swap = 124996kB [ 1193.500924][T10788] Total swap = 124996kB [ 1193.512458][T10788] 2097051 pages RAM [ 1193.516340][T10788] 0 pages HighMem/MovableOnly [ 1193.521066][T10788] 427062 pages reserved [ 1193.539100][T10788] 0 pages cma reserved [ 1193.778197][T10796] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10391'. [ 1194.306037][ T25] block nbd6: Possible stuck request ffff888027018000: control (read@0,1024B). Runtime 60 seconds [ 1194.317691][ T25] block nbd6: Possible stuck request ffff888027018200: control (read@1024,1024B). Runtime 60 seconds [ 1194.331241][ T25] block nbd6: Possible stuck request ffff888027018400: control (read@2048,1024B). Runtime 60 seconds [ 1194.342936][ T25] block nbd6: Possible stuck request ffff888027018600: control (read@3072,1024B). Runtime 60 seconds [ 1195.476205][ T5193] udevd[5193]: worker [8484] /devices/virtual/block/nbd6 is taking a long time [ 1196.077339][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10385'. [ 1196.338332][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10394'. [ 1196.376797][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10395'. [ 1196.408910][T10816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1196.428592][T10814] syzkaller0: entered promiscuous mode [ 1196.442760][T10814] syzkaller0: entered allmulticast mode [ 1196.724795][T10831] netlink: 'syz.4.10399': attribute type 1 has an invalid length. [ 1196.733752][T10830] netlink: 'syz.1.10401': attribute type 10 has an invalid length. [ 1196.757779][T10830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10401'. [ 1196.793308][T10831] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1196.810897][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10401'. [ 1196.860447][T10831] bond3: (slave gretap3): making interface the new active one [ 1196.906479][T10831] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 1197.295723][T10846] syzkaller0: entered allmulticast mode [ 1197.389798][T10859] tipc: Enabling of bearer rejected, failed to enable media [ 1198.033477][T10889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1198.076454][T10897] netlink: 'syz.1.10423': attribute type 2 has an invalid length. [ 1198.089980][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10423'. [ 1198.140840][T10898] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.10422'. [ 1198.174621][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10423'. [ 1198.204523][T10901] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10424'. [ 1198.212296][T10898] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10422'. [ 1198.224853][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.255734][T10903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10425'. [ 1198.269891][T10903] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10425'. [ 1198.281397][T10903] netlink: 'syz.2.10425': attribute type 6 has an invalid length. [ 1198.290531][T10903] netlink: 'syz.2.10425': attribute type 5 has an invalid length. [ 1198.298673][T10903] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10425'. [ 1198.341636][T10903] tipc: Enabled bearer , priority 11 [ 1198.397588][T10906] bond0: Error: Cannot enslave bond to itself. [ 1198.423937][T10906] netlink: 'syz.1.10426': attribute type 1 has an invalid length. [ 1198.425320][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10427'. [ 1198.441921][T10906] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10426'. [ 1198.711359][T10924] x_tables: duplicate entry at hook 3 [ 1199.025336][T10942] macsec0: entered promiscuous mode [ 1199.033991][T10942] macsec0: entered allmulticast mode [ 1199.049704][T10943] veth1_macvtap: entered allmulticast mode [ 1199.056980][T10943] macsec0: left promiscuous mode [ 1199.063510][T10943] macsec0: left allmulticast mode [ 1199.068852][T10943] veth1_macvtap: left allmulticast mode [ 1200.196392][T11021] tipc: Enabling of bearer rejected, failed to enable media [ 1200.249346][T11023] geneve2: entered promiscuous mode [ 1200.256651][ T7156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.270001][ T7156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.279923][T11023] netlink: 'syz.2.10463': attribute type 10 has an invalid length. [ 1200.288597][ T7156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.301535][ T7156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.476573][T11032] netlink: 'syz.0.10465': attribute type 7 has an invalid length. [ 1200.490554][T11030] bridge0: entered promiscuous mode [ 1200.504446][T11030] macsec1: entered promiscuous mode [ 1200.510516][T11030] macsec1: entered allmulticast mode [ 1200.520588][T11030] bridge0: entered allmulticast mode [ 1200.556457][T11030] bridge0: port 4(macsec1) entered blocking state [ 1200.583015][T11030] bridge0: port 4(macsec1) entered disabled state [ 1200.599387][T11030] bridge0: left allmulticast mode [ 1200.605534][T11030] bridge0: left promiscuous mode [ 1201.295097][T11081] xt_hashlimit: size too large, truncated to 1048576 [ 1201.605376][T11101] openvswitch: netlink: Flow actions attr not present in new flow. [ 1201.693752][T11106] erspan0: entered allmulticast mode [ 1201.979456][T11124] netlink: 'syz.3.10491': attribute type 4 has an invalid length. [ 1202.315608][T11144] netlink: 'syz.2.10496': attribute type 1 has an invalid length. [ 1202.356446][T11145] macvtap2: entered allmulticast mode [ 1202.379092][T11142] tipc: Enabling of bearer rejected, media not registered [ 1202.468202][T11150] netlink: 'syz.0.10498': attribute type 6 has an invalid length. [ 1202.876769][T11173] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 1202.951159][T11122] openvswitch: netlink: Key type 122 is out of range max 32 [ 1203.177575][T11184] __nla_validate_parse: 21 callbacks suppressed [ 1203.177599][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10504'. [ 1203.224079][T11184] netlink: 'syz.2.10504': attribute type 11 has an invalid length. [ 1203.537831][T11200] x_tables: duplicate underflow at hook 1 [ 1203.654993][T11207] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10516'. [ 1203.749254][T11213] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1203.851393][T11219] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1203.878713][T11227] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10521'. [ 1203.965893][T11218] : renamed from team_slave_1 (while UP) [ 1204.150761][T11240] bond3: Removing last arp target with arp_interval on [ 1204.159991][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10526'. [ 1204.226768][T11251] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10528'. [ 1204.255744][T11237] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode [ 1204.308266][T11260] sctp: [Deprecated]: syz.0.10529 (pid 11260) Use of int in max_burst socket option deprecated. [ 1204.308266][T11260] Use struct sctp_assoc_value instead [ 1204.399656][T11262] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10530'. [ 1204.636031][T11278] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10536'. [ 1204.673690][T11281] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1204.685812][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1204.937340][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10540'. [ 1205.087139][T11290] hsr0 (unregistering): left allmulticast mode [ 1205.426499][T11319] "syz.0.10550" (11319) uses obsolete ecb(arc4) skcipher [ 1205.525421][T11325] syzkaller0: entered promiscuous mode [ 1205.553711][T11325] syzkaller0: entered allmulticast mode [ 1205.755660][T11334] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1206.086754][T11349] can: request_module (can-proto-3) failed. [ 1206.286754][T11360] team0: Port device team_slave_0 removed [ 1206.520083][T11382] xt_hashlimit: overflow, rate too high: 0 [ 1206.885504][T11391] bond7: entered promiscuous mode [ 1206.890712][T11391] bond7: entered allmulticast mode [ 1206.898199][T11391] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1207.155741][ T1157] nci: nci_rsp_packet: unknown rsp opcode 0x404 [ 1207.256557][T11429] bond8: entered allmulticast mode [ 1210.004020][T11414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1210.271512][T11450] __nla_validate_parse: 14 callbacks suppressed [ 1210.271535][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10586'. [ 1210.281122][T11451] xt_cgroup: invalid path, errno=-2 [ 1210.308668][T11455] netlink: 'syz.1.10587': attribute type 1 has an invalid length. [ 1210.337157][T11456] netlink: 'syz.1.10587': attribute type 1 has an invalid length. [ 1210.349081][T11455] netlink: 'syz.1.10587': attribute type 3 has an invalid length. [ 1210.373241][T11456] netlink: 'syz.1.10587': attribute type 3 has an invalid length. [ 1210.390364][T11455] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10587'. [ 1210.403842][T11456] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10587'. [ 1210.429809][T11462] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10588'. [ 1210.452218][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10588'. [ 1210.518829][T11463] syzkaller0: entered promiscuous mode [ 1210.524899][T11463] syzkaller0: entered allmulticast mode [ 1210.535378][T11463] tc action pedit offset must be on 32 bit boundaries [ 1210.653888][T11466] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10590'. [ 1210.684117][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10593'. [ 1210.695981][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10593'. [ 1210.711293][T11471] netlink: 'syz.1.10593': attribute type 3 has an invalid length. [ 1210.765576][T11474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1210.841739][T11474] bond4: (slave bond_slave_1): Device is not our slave [ 1210.857414][T11474] bond4: option active_slave: invalid value (bond_slave_1) [ 1210.906377][T11474] bond4 (unregistering): Released all slaves [ 1211.623885][T11501] tipc: Resetting bearer [ 1211.676251][ T7156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.686151][ T7156] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.707262][ T7156] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.722484][ T7156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.015938][T11526] netlink: 'syz.3.10614': attribute type 1 has an invalid length. [ 1212.070995][T11531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10617'. [ 1212.090087][T11526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1212.153562][T11532] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1212.170464][T11529] bond_slave_0: entered promiscuous mode [ 1212.177245][T11529] bond_slave_1: entered promiscuous mode [ 1212.185528][T11529] vlan2: entered promiscuous mode [ 1212.202179][T11529] bond0: entered promiscuous mode [ 1212.524182][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10625'. [ 1212.739131][ T60] tipc: Subscription rejected, illegal request [ 1213.082542][T11594] syz.3.10635: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1213.082921][ T60] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1213.131390][T11585] sctp: [Deprecated]: syz.1.10633 (pid 11585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1213.131390][T11585] Use struct sctp_sack_info instead [ 1213.181383][T11594] CPU: 1 UID: 0 PID: 11594 Comm: syz.3.10635 Not tainted syzkaller #0 PREEMPT(full) [ 1213.181415][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1213.181429][T11594] Call Trace: [ 1213.181440][T11594] [ 1213.181451][T11594] dump_stack_lvl+0xe8/0x150 [ 1213.181488][T11594] warn_alloc+0x249/0x340 [ 1213.181518][T11594] ? stack_trace_save+0xa9/0x100 [ 1213.181546][T11594] ? __pfx_warn_alloc+0x10/0x10 [ 1213.181579][T11594] ? kasan_save_track+0x4f/0x80 [ 1213.181601][T11594] ? kasan_save_track+0x3e/0x80 [ 1213.181621][T11594] ? __kasan_kmalloc+0x93/0xb0 [ 1213.181644][T11594] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1213.181668][T11594] ? xskq_create+0x56/0x170 [ 1213.181691][T11594] ? xsk_setsockopt+0x54c/0x990 [ 1213.181720][T11594] ? do_sock_setsockopt+0x17c/0x1b0 [ 1213.181745][T11594] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1213.181769][T11594] ? do_syscall_64+0x14d/0xf80 [ 1213.181802][T11594] __vmalloc_node_range_noprof+0x132/0x1730 [ 1213.181865][T11594] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1213.181898][T11594] ? __kasan_kmalloc+0x93/0xb0 [ 1213.181931][T11594] vmalloc_user_noprof+0xad/0xe0 [ 1213.181955][T11594] ? xskq_create+0xbf/0x170 [ 1213.181980][T11594] xskq_create+0xbf/0x170 [ 1213.182007][T11594] xsk_init_queue+0x8a/0xe0 [ 1213.182034][T11594] xsk_setsockopt+0x54c/0x990 [ 1213.182060][T11594] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1213.182083][T11594] ? __pfx_aa_sk_perm+0x10/0x10 [ 1213.182118][T11594] ? aa_sock_opt_perm+0xff/0x1a0 [ 1213.182153][T11594] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1213.182179][T11594] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1213.182202][T11594] do_sock_setsockopt+0x17c/0x1b0 [ 1213.182234][T11594] __x64_sys_setsockopt+0x13d/0x1b0 [ 1213.182267][T11594] do_syscall_64+0x14d/0xf80 [ 1213.182294][T11594] ? trace_irq_disable+0x3b/0x150 [ 1213.182313][T11594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.182336][T11594] ? clear_bhb_loop+0x40/0x90 [ 1213.182364][T11594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.182386][T11594] RIP: 0033:0x7fce4139c819 [ 1213.182407][T11594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.182427][T11594] RSP: 002b:00007fce42315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1213.182450][T11594] RAX: ffffffffffffffda RBX: 00007fce41616090 RCX: 00007fce4139c819 [ 1213.182466][T11594] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1213.182480][T11594] RBP: 00007fce41432c91 R08: 0000000000000004 R09: 0000000000000000 [ 1213.182494][T11594] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1213.182507][T11594] R13: 00007fce41616128 R14: 00007fce41616090 R15: 00007ffe4fcadf48 [ 1213.182543][T11594] [ 1213.491765][T11594] Mem-Info: [ 1213.496193][T11594] active_anon:6427 inactive_anon:0 isolated_anon:0 [ 1213.496193][T11594] active_file:2364 inactive_file:41746 isolated_file:0 [ 1213.496193][T11594] unevictable:768 dirty:54 writeback:0 [ 1213.496193][T11594] slab_reclaimable:16120 slab_unreclaimable:167086 [ 1213.496193][T11594] mapped:30974 shmem:1369 pagetables:6102 [ 1213.496193][T11594] sec_pagetables:0 bounce:0 [ 1213.496193][T11594] kernel_misc_reclaimable:0 [ 1213.496193][T11594] free:1219620 free_pcp:25664 free_cma:0 [ 1213.619945][T11594] Node 0 active_anon:26008kB inactive_anon:0kB active_file:9456kB inactive_file:166780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:21592kB dirty:212kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21488kB pagetables:24248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1213.657109][T11594] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102304kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1213.688461][T11594] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1213.720124][T11594] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1213.726090][T11594] Node 0 DMA32 free:1200856kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26208kB inactive_anon:0kB active_file:9456kB inactive_file:166780kB unevictable:1536kB writepending:212kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:38528kB local_pcp:18856kB free_cma:0kB [ 1213.794629][T11594] lowmem_reserve[]: 0 0 0 0 0 [ 1213.799502][T11594] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1213.895285][T11594] lowmem_reserve[]: 0 0 0 0 0 [ 1213.900127][T11594] Node 1 Normal free:3665884kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63536kB local_pcp:28960kB free_cma:0kB [ 1213.977487][T11594] lowmem_reserve[]: 0 0 0 0 0 [ 1213.988763][T11594] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11240kB [ 1214.024391][T30191] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1214.033339][T11594] Node 0 DMA32: 11138*4kB (UME) 10608*8kB (UM) 5537*16kB (UME) 338*32kB (UME) 250*64kB (UM) 871*128kB (UME) 1000*256kB (UME) 519*512kB (UM) 177*1024kB (UE) 69*2048kB (UM) 0*4096kB = 1200600kB [ 1214.033560][T11594] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1214.033685][T11594] Node 1 Normal: 7*4kB (U) 14*8kB (UM) 13*16kB (UM) 12*32kB (UM) 16*64kB (UM) 12*128kB (UM) 11*256kB (UM) 8*512kB (UM) 10*1024kB (UM) 6*2048kB (U) 887*4096kB (UM) = 3665884kB [ 1214.033885][T11594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.033904][T11594] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1214.033922][T11594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.033940][T11594] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1214.033958][T11594] 45525 total pagecache pages [ 1214.033969][T11594] 0 pages in swap cache [ 1214.033978][T11594] Free swap = 124996kB [ 1214.033989][T11594] Total swap = 124996kB [ 1214.033999][T11594] 2097051 pages RAM [ 1214.034009][T11594] 0 pages HighMem/MovableOnly [ 1214.034028][T11594] 427062 pages reserved [ 1214.034038][T11594] 0 pages cma reserved [ 1214.184032][T30191] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1214.194155][T30191] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1214.213038][T30191] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1214.475449][T11628] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 1215.976749][T11579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1216.201487][T11641] netlink: 'syz.4.10650': attribute type 1 has an invalid length. [ 1216.245978][T11641] __nla_validate_parse: 8 callbacks suppressed [ 1216.245997][T11641] netlink: 476 bytes leftover after parsing attributes in process `syz.4.10650'. [ 1216.297315][T11641] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.10650'. [ 1216.638049][T11670] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10657'. [ 1216.865950][T11680] sit2: entered promiscuous mode [ 1216.882785][T11680] sit2: entered allmulticast mode [ 1217.365321][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10665'. [ 1217.591617][T11724] bond3: entered allmulticast mode [ 1217.670810][T11723] bond3: left allmulticast mode [ 1217.759946][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10672'. [ 1217.939810][T11740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10675'. [ 1218.120913][T11752] sctp: [Deprecated]: syz.0.10679 (pid 11752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1218.120913][T11752] Use struct sctp_sack_info instead [ 1218.343035][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10683'. [ 1218.394292][T11765] netlink: 'syz.2.10680': attribute type 17 has an invalid length. [ 1218.405701][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10680'. [ 1218.423826][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10684'. [ 1218.434494][T11763] netlink: 'syz.4.10684': attribute type 1 has an invalid length. [ 1218.444119][T11763] netlink: 'syz.4.10684': attribute type 4 has an invalid length. [ 1218.453329][T11763] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.10684'. [ 1219.321240][T11798] netlink: 'syz.1.10694': attribute type 1 has an invalid length. [ 1219.340434][T11791] syzkaller0: entered promiscuous mode [ 1219.363352][T11791] syzkaller0: entered allmulticast mode [ 1219.397134][T11803] xt_policy: too many policy elements [ 1219.408867][T11798] bond9: entered promiscuous mode [ 1219.415298][T11798] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1222.375198][T11798] bond9: (slave bridge5): making interface the new active one [ 1222.383339][T11798] bridge5: entered promiscuous mode [ 1222.389877][T11798] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 1222.429875][T11822] __nla_validate_parse: 3 callbacks suppressed [ 1222.429897][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10703'. [ 1222.564037][T11835] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10706'. [ 1222.675078][T11843] netlink: 'syz.1.10708': attribute type 2 has an invalid length. [ 1222.810077][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10710'. [ 1222.873611][T11857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10712'. [ 1222.927383][T11865] netlink: 'syz.0.10713': attribute type 3 has an invalid length. [ 1222.975725][T11869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1223.107793][T11880] netlink: 'syz.0.10716': attribute type 1 has an invalid length. [ 1223.187720][T11886] netlink: 'syz.2.10718': attribute type 10 has an invalid length. [ 1223.209765][T11886] bond0: (slave wlan1): Opening slave failed [ 1223.709560][T11928] netlink: 41 bytes leftover after parsing attributes in process `syz.0.10727'. [ 1223.769017][T11928] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10727'. [ 1223.797853][T11928] netlink: 41 bytes leftover after parsing attributes in process `syz.0.10727'. [ 1223.809299][T11932] netlink: 41 bytes leftover after parsing attributes in process `syz.0.10727'. [ 1223.821533][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10727'. [ 1223.833365][T11932] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10727'. [ 1224.019710][T11939] x_tables: unsorted underflow at hook 3 [ 1224.205014][T11945] gretap1: entered promiscuous mode [ 1224.228606][T11945] batman_adv: batadv0: Adding interface: gretap1 [ 1224.249136][T11945] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1224.284305][T11953] netlink: 'syz.1.10734': attribute type 10 has an invalid length. [ 1224.307305][T11945] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1224.385376][ T25] block nbd6: Possible stuck request ffff888027018000: control (read@0,1024B). Runtime 90 seconds [ 1224.400033][ T25] block nbd6: Possible stuck request ffff888027018200: control (read@1024,1024B). Runtime 90 seconds [ 1224.412867][ T25] block nbd6: Possible stuck request ffff888027018400: control (read@2048,1024B). Runtime 90 seconds [ 1224.425647][ T25] block nbd6: Possible stuck request ffff888027018600: control (read@3072,1024B). Runtime 90 seconds [ 1225.383989][T12023] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1225.499564][T12030] netlink: 'syz.4.10758': attribute type 11 has an invalid length. [ 1226.136358][T12083] xt_hashlimit: size too large, truncated to 1048576 [ 1226.158903][T12080] ip_vti0: entered promiscuous mode [ 1226.896462][T12127] bond6: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1226.929775][T12127] bond6 (unregistering): Released all slaves [ 1226.986863][T12125] syzkaller0: entered promiscuous mode [ 1226.996152][T12125] syzkaller0: entered allmulticast mode [ 1227.009232][T12137] syzkaller0: entered promiscuous mode [ 1227.015960][T12137] syzkaller0: entered allmulticast mode [ 1227.351396][T12154] netlink: 'syz.2.10792': attribute type 1 has an invalid length. [ 1227.412078][T12154] netlink: 'syz.2.10792': attribute type 1 has an invalid length. [ 1227.419983][T12154] netlink: 'syz.2.10792': attribute type 2 has an invalid length. [ 1227.435288][T12158] netlink: 'syz.2.10792': attribute type 23 has an invalid length. [ 1227.459537][T12154] __nla_validate_parse: 24 callbacks suppressed [ 1227.459558][T12154] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10792'. [ 1227.778816][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10803'. [ 1227.897668][T12191] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10805'. [ 1227.908779][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10804'. [ 1227.936237][T12185] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10803'. [ 1228.007081][T12191] netlink: 'syz.4.10805': attribute type 1 has an invalid length. [ 1228.016587][T12191] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10805'. [ 1228.245938][T12210] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.10810'. [ 1229.097405][T12209] wlan1 speed is unknown, defaulting to 1000 [ 1229.300408][T12254] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.10820'. [ 1229.361497][T12254] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1229.700033][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10821'. [ 1229.975912][T12274] macsec0: entered promiscuous mode [ 1229.981254][T12274] macsec0: entered allmulticast mode [ 1230.017802][T12274] veth1_macvtap: entered allmulticast mode [ 1230.024225][T12274] macsec0: left promiscuous mode [ 1230.029508][T12274] macsec0: left allmulticast mode [ 1230.035047][T12274] veth1_macvtap: left allmulticast mode [ 1230.198337][T12287] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1230.333965][T12294] netlink: 'syz.1.10830': attribute type 10 has an invalid length. [ 1230.353815][T12294] bond0: (slave wlan1): Opening slave failed [ 1230.371182][ T2155] wlan1 speed is unknown, defaulting to 1000 [ 1230.380106][ T3650] wlan1 speed is unknown, defaulting to 1000 [ 1230.475124][T12303] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10833'. [ 1230.764268][T12321] syzkaller1: entered promiscuous mode [ 1230.769877][T12321] syzkaller1: entered allmulticast mode [ 1230.792695][T12331] netlink: 'syz.1.10841': attribute type 39 has an invalid length. [ 1231.047545][T12346] xt_ecn: cannot match TCP bits for non-tcp packets [ 1231.172523][T12352] x_tables: unsorted underflow at hook 3 [ 1231.278613][T12361] netlink: 'syz.2.10849': attribute type 1 has an invalid length. [ 1231.440386][T12376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1231.740026][T12391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1231.858494][T12397] syzkaller0: entered promiscuous mode [ 1231.865205][T12397] syzkaller0: entered allmulticast mode [ 1232.842784][T12448] __nla_validate_parse: 16 callbacks suppressed [ 1232.842807][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10875'. [ 1232.887671][T12448] netlink: 163948 bytes leftover after parsing attributes in process `syz.2.10875'. [ 1233.866285][T12490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1233.953980][T12494] sctp: [Deprecated]: syz.4.10890 (pid 12494) Use of int in max_burst socket option deprecated. [ 1233.953980][T12494] Use struct sctp_assoc_value instead [ 1234.067246][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10892'. [ 1234.251288][T12506] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10894'. [ 1234.772950][T12533] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1234.996963][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10905'. [ 1235.124307][T12550] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1235.155606][T12550] CPU: 1 UID: 0 PID: 12550 Comm: syz.2.10904 Not tainted syzkaller #0 PREEMPT(full) [ 1235.155639][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1235.155654][T12550] Call Trace: [ 1235.155663][T12550] [ 1235.155674][T12550] dump_stack_lvl+0xe8/0x150 [ 1235.155713][T12550] sysfs_warn_dup+0x8e/0xa0 [ 1235.155746][T12550] sysfs_do_create_link_sd+0xc0/0x110 [ 1235.155782][T12550] device_add_class_symlinks+0x1cf/0x240 [ 1235.155819][T12550] device_add+0x475/0xb70 [ 1235.155854][T12550] wiphy_register+0x1d73/0x2d50 [ 1235.155897][T12550] ? __pfx_wiphy_register+0x10/0x10 [ 1235.155922][T12550] ? __pfx_netdev_run_todo+0x10/0x10 [ 1235.155954][T12550] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1235.155995][T12550] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1235.156035][T12550] ieee80211_register_hw+0x3562/0x4200 [ 1235.156082][T12550] ? ieee80211_register_hw+0x14d1/0x4200 [ 1235.156126][T12550] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1235.156207][T12550] ? __hrtimer_setup+0x181/0x200 [ 1235.156239][T12550] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1235.156277][T12550] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1235.156344][T12550] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1235.156373][T12550] ? kstrndup+0xbf/0x160 [ 1235.156414][T12550] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1235.156472][T12550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1235.156514][T12550] ? rcu_is_watching+0x15/0xb0 [ 1235.156546][T12550] ? trace_kmalloc+0x2a/0x110 [ 1235.156580][T12550] ? __nla_parse+0x40/0x60 [ 1235.156608][T12550] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1235.156650][T12550] genl_family_rcv_msg_doit+0x22a/0x330 [ 1235.156689][T12550] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1235.156735][T12550] ? bpf_lsm_capable+0x9/0x20 [ 1235.156766][T12550] ? security_capable+0x7e/0x2c0 [ 1235.156807][T12550] genl_rcv_msg+0x61c/0x7a0 [ 1235.156844][T12550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1235.156872][T12550] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1235.156903][T12550] ? __lock_acquire+0x6b5/0x2cf0 [ 1235.156946][T12550] netlink_rcv_skb+0x232/0x4b0 [ 1235.156971][T12550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1235.157001][T12550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1235.157047][T12550] ? down_read+0x272/0x2e0 [ 1235.157076][T12550] ? genl_rcv+0xd/0x40 [ 1235.157106][T12550] genl_rcv+0x28/0x40 [ 1235.157166][T12550] netlink_unicast+0x80f/0x9b0 [ 1235.157250][T12550] ? __pfx_netlink_unicast+0x10/0x10 [ 1235.157281][T12550] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1235.157311][T12550] ? netlink_sendmsg+0x650/0xb40 [ 1235.157332][T12550] ? skb_put+0x11b/0x210 [ 1235.157362][T12550] netlink_sendmsg+0x813/0xb40 [ 1235.157397][T12550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1235.157425][T12550] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1235.157478][T12550] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1235.157508][T12550] ____sys_sendmsg+0x972/0x9f0 [ 1235.157548][T12550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1235.157588][T12550] ? import_iovec+0x73/0xa0 [ 1235.157619][T12550] ___sys_sendmsg+0x2a5/0x360 [ 1235.157655][T12550] ? __pfx____sys_sendmsg+0x10/0x10 [ 1235.157692][T12550] ? futex_wake+0x4ac/0x580 [ 1235.157756][T12550] ? __fget_files+0x2a/0x420 [ 1235.157775][T12550] ? __fget_files+0x3a0/0x420 [ 1235.157808][T12550] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1235.157840][T12550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1235.157880][T12550] ? rcu_is_watching+0x15/0xb0 [ 1235.157926][T12550] do_syscall_64+0x14d/0xf80 [ 1235.157954][T12550] ? trace_irq_disable+0x3b/0x150 [ 1235.157974][T12550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.157996][T12550] ? clear_bhb_loop+0x40/0x90 [ 1235.158024][T12550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.158047][T12550] RIP: 0033:0x7ff01819c819 [ 1235.158070][T12550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.158089][T12550] RSP: 002b:00007ff019073028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1235.158113][T12550] RAX: ffffffffffffffda RBX: 00007ff018416270 RCX: 00007ff01819c819 [ 1235.158129][T12550] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000007 [ 1235.158144][T12550] RBP: 00007ff018232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1235.158159][T12550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.158179][T12550] R13: 00007ff018416308 R14: 00007ff018416270 R15: 00007ffebd8bfcc8 [ 1235.158219][T12550] [ 1235.974867][T12558] pim6reg1: entered promiscuous mode [ 1236.001121][T12558] pim6reg1: entered allmulticast mode [ 1236.248041][T12576] netlink: 'syz.1.10913': attribute type 12 has an invalid length. [ 1236.574499][T12587] xt_hashlimit: size too large, truncated to 1048576 [ 1236.615478][T12588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10919'. [ 1236.656396][T12590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10918'. [ 1236.956305][T12606] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10923'. [ 1237.228198][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10927'. [ 1237.341600][T12627] netlink: 'syz.1.10931': attribute type 3 has an invalid length. [ 1238.400934][T12687] xt_HMARK: spi-set and port-set can't be combined [ 1239.118604][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1241.004903][T12695] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10946'. [ 1241.250773][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10953'. [ 1241.276853][T12712] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10953'. [ 1241.413773][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10958'. [ 1241.743792][T12744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10963'. [ 1242.030381][T12757] netlink: 'syz.4.10968': attribute type 39 has an invalid length. [ 1242.148377][T12764] vlan0: entered promiscuous mode [ 1242.159406][T12764] geneve1: entered promiscuous mode [ 1242.189167][T12764] vlan0: entered allmulticast mode [ 1242.212785][T12764] geneve1: entered allmulticast mode [ 1242.251258][T12768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10972'. [ 1242.458326][T12777] bond6: option lp_interval: invalid value (0) [ 1242.465010][T12777] bond6: option lp_interval: allowed values 1 - 2147483647 [ 1242.477391][T12777] bond6 (unregistering): Released all slaves [ 1242.681746][T12791] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.10982'. [ 1242.712487][T12791] openvswitch: netlink: Flow key attr not present in new flow. [ 1243.016834][T12817] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1243.041793][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10992'. [ 1243.060718][T12817] netlink: 'syz.3.10990': attribute type 11 has an invalid length. [ 1243.070564][T12817] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.10990'. [ 1243.270455][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10996'. [ 1243.443311][T12841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1244.046934][T12879] netlink: 'syz.0.11006': attribute type 1 has an invalid length. [ 1244.189525][T12879] bond5: (slave gretap1): making interface the new active one [ 1244.199452][T12879] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1244.209349][T12887] F: renamed from gre0 (while UP) [ 1244.226004][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1244.234118][ C0] lec:lec_tx_timeout: lec0 [ 1244.239772][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1244.248124][T12887] F: entered allmulticast mode [ 1244.379601][T12890] bond6 (unregistering): Released all slaves [ 1244.721627][T12910] bond6: Removing last arp target with arp_interval on [ 1245.008824][T12922] can: request_module (can-proto-0) failed. [ 1245.158080][T12936] netlink: 'syz.4.11022': attribute type 8 has an invalid length. [ 1245.190529][T12936] sch_fq: defrate 0 ignored. [ 1245.673761][T12963] bridge6: entered promiscuous mode [ 1245.685996][T12963] bridge6: entered allmulticast mode [ 1245.755614][T12968] netlink: 'syz.4.11029': attribute type 1 has an invalid length. [ 1245.788106][T12963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1245.835809][T12971] syzkaller1: entered promiscuous mode [ 1245.841508][T12971] syzkaller1: entered allmulticast mode [ 1246.228926][T12984] __nla_validate_parse: 6 callbacks suppressed [ 1246.228947][T12984] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.11034'. [ 1246.474892][T13002] netlink: 'syz.1.11038': attribute type 21 has an invalid length. [ 1246.525896][T13005] netlink: 'syz.4.11039': attribute type 1 has an invalid length. [ 1246.541100][T13002] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1246.565192][T13002] bond10 (unregistering): Released all slaves [ 1246.577111][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11039'. [ 1246.618334][T13005] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1246.644601][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11038'. [ 1246.655973][T13009] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1246.677416][T13009] bond6: entered allmulticast mode [ 1246.713199][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11040'. [ 1246.985656][T13030] IPv6: NLM_F_CREATE should be specified when creating new route [ 1246.994174][T13030] netlink: 'syz.1.11044': attribute type 1 has an invalid length. [ 1247.171585][T13034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11045'. [ 1247.825140][T13085] IPVS: set_ctl: invalid protocol: 59 172.20.20.59:20004 [ 1248.340329][T13122] gretap3: entered promiscuous mode [ 1248.348077][T13122] batman_adv: batadv0: Adding interface: gretap3 [ 1248.354876][T13122] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1248.377455][T13122] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 1248.469586][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11074'. [ 1248.479608][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11074'. [ 1248.489429][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11074'. [ 1248.535943][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11075'. [ 1248.573977][T13128] syzkaller0: entered allmulticast mode [ 1248.777985][T13146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1249.075955][T13163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11088'. [ 1249.254439][T13179] netlink: 'syz.2.11091': attribute type 1 has an invalid length. [ 1249.262574][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1249.262606][ C0] lec:lec_tx_timeout: lec0 [ 1249.482752][ T7156] batadv1: left allmulticast mode [ 1249.487878][ T7156] batadv1: left promiscuous mode [ 1249.516437][ T7156] bridge0: port 3(batadv1) entered disabled state [ 1249.818167][ T7156] bond7 (unregistering): (slave ip6gre2): Releasing backup interface [ 1249.841639][T27523] IPVS: starting estimator thread 0... [ 1249.943696][T13213] IPVS: using max 27 ests per chain, 64800 per kthread [ 1250.065136][ T7156] dvmrp0 (unregistering): left allmulticast mode [ 1250.134361][ T7156] bond0 (unregistering): Released all slaves [ 1250.141276][T13220] netlink: 'syz.0.11100': attribute type 1 has an invalid length. [ 1250.161110][ T7156] bond1 (unregistering): Released all slaves [ 1250.177395][ T7156] bond2 (unregistering): Released all slaves [ 1250.205907][ T7156] team0: Port device bond3 removed [ 1250.213613][ T7156] bond3 (unregistering): Released all slaves [ 1250.238242][ T7156] bond4 (unregistering): Released all slaves [ 1250.255336][ T7156] bond5 (unregistering): Released all slaves [ 1250.274691][ T7156] bond6 (unregistering): Released all slaves [ 1250.300024][ T7156] bond7 (unregistering): Released all slaves [ 1250.320033][ T7156] bond8 (unregistering): Released all slaves [ 1250.344768][T13191] bond0: entered promiscuous mode [ 1250.349873][T13191] bond_slave_0: entered promiscuous mode [ 1250.356073][T13191] bond_slave_1: entered promiscuous mode [ 1250.554428][T13221] bond7: (slave geneve2): making interface the new active one [ 1250.574847][T13221] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1250.607362][T13222] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1250.759204][T30188] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1250.774419][ T7156] : left promiscuous mode [ 1250.846342][T13238] gtp1: entered promiscuous mode [ 1250.851683][T13238] gtp1: entered allmulticast mode [ 1250.866137][T30188] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1250.912745][T30188] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1250.921655][T30188] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1251.407331][T13269] netlink: 'syz.0.11114': attribute type 1 has an invalid length. [ 1251.487131][T13269] bond8: entered promiscuous mode [ 1251.500034][T13269] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1251.560968][T13271] macvtap1: entered allmulticast mode [ 1251.924713][T13275] wlan1 speed is unknown, defaulting to 1000 [ 1252.129694][T13292] __nla_validate_parse: 8 callbacks suppressed [ 1252.129717][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11120'. [ 1252.218004][T13302] netlink: 'syz.0.11123': attribute type 21 has an invalid length. [ 1252.420532][T13302] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1252.434241][T13302] bond9 (unregistering): Released all slaves [ 1252.440566][T13319] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11125'. [ 1252.624200][T13324] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11127'. [ 1252.788147][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11130'. [ 1252.882754][T13334] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11130'. [ 1252.905992][T13333] netlink: 'syz.0.11130': attribute type 1 has an invalid length. [ 1252.958379][T13342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11131'. [ 1252.996182][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11131'. [ 1253.021100][T13347] lo: Caught tx_queue_len zero misconfig [ 1253.121568][T13333] bond9: (slave gretap3): making interface the new active one [ 1253.153968][T13333] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 1253.205369][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11135'. [ 1253.321299][ T7156] hsr0: left allmulticast mode [ 1253.332665][ T7156] veth1_macvtap: left promiscuous mode [ 1253.348256][ T7156] veth0_macvtap: left promiscuous mode [ 1253.373278][ T7156] veth1_vlan: left promiscuous mode [ 1253.378911][ T7156] veth0_vlan: left promiscuous mode [ 1253.447053][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11139'. [ 1253.493660][T13368] netlink: 'syz.4.11138': attribute type 3 has an invalid length. [ 1253.505307][T13368] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11138'. [ 1253.566351][ T7156] pim6reg (unregistering): left allmulticast mode [ 1253.586168][ T7156] pimreg (unregistering): left allmulticast mode [ 1253.909346][T13364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.135322][T13379] netlink: 'syz.0.11142': attribute type 1 has an invalid length. [ 1254.427646][ T7156] IPVS: stop unused estimator thread 0... [ 1254.468142][ T25] block nbd6: Possible stuck request ffff888027018000: control (read@0,1024B). Runtime 120 seconds [ 1254.482229][ T25] block nbd6: Possible stuck request ffff888027018200: control (read@1024,1024B). Runtime 120 seconds [ 1254.493571][ T25] block nbd6: Possible stuck request ffff888027018400: control (read@2048,1024B). Runtime 120 seconds [ 1254.505413][ T25] block nbd6: Possible stuck request ffff888027018600: control (read@3072,1024B). Runtime 120 seconds [ 1254.628014][T13405] vlan1: entered promiscuous mode [ 1254.639520][T13405] vlan1: entered allmulticast mode [ 1254.645596][T13405] hsr_slave_1: entered allmulticast mode [ 1254.936998][T13408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.044472][T13408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.944088][T30192] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.975470][T30192] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.990998][T30192] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.017550][T30192] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.027855][T30192] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.060224][T30192] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.069571][T30192] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.079087][T30192] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.126916][T13456] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1256.262132][T13460] netlink: 'syz.3.11165': attribute type 2 has an invalid length. [ 1256.433495][T13467] syzkaller1: entered promiscuous mode [ 1256.439081][T13467] syzkaller1: entered allmulticast mode [ 1256.720910][T13473] syzkaller0: entered promiscuous mode [ 1256.726793][T13473] syzkaller0: entered allmulticast mode [ 1258.376661][T13430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1258.893965][T13507] __nla_validate_parse: 3 callbacks suppressed [ 1258.893988][T13507] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11178'. [ 1258.928131][T13506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1258.929922][T13495] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1258.974686][T13495] bond10 (unregistering): Released all slaves [ 1259.131748][T13520] pim6reg1: entered promiscuous mode [ 1259.143802][T13520] pim6reg1: entered allmulticast mode [ 1259.196397][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11183'. [ 1259.420570][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11189'. [ 1259.449264][T13546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11190'. [ 1259.475130][T13546] openvswitch: netlink: Flow key attr not present in new flow. [ 1259.501342][T13552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11189'. [ 1259.519159][T13553] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 1259.547755][T13552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11189'. [ 1259.580514][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11189'. [ 1259.618633][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11189'. [ 1259.701058][T13561] netlink: 216 bytes leftover after parsing attributes in process `syz.0.11193'. [ 1259.721380][T13561] netlink: 'syz.0.11193': attribute type 2 has an invalid length. [ 1259.743417][T13561] netlink: 'syz.0.11193': attribute type 1 has an invalid length. [ 1259.789839][T13551] syzkaller0: entered promiscuous mode [ 1259.797203][T13551] syzkaller0: entered allmulticast mode [ 1259.937346][T13577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11198'. [ 1259.993720][T13580] netlink: 'syz.1.11199': attribute type 7 has an invalid length. [ 1260.015831][T13580] netlink: 'syz.1.11199': attribute type 8 has an invalid length. [ 1262.561591][T13583] tipc: Enabling of bearer rejected, failed to enable media [ 1262.839043][T13600] vlan2: entered allmulticast mode [ 1263.188716][T13618] x_tables: duplicate underflow at hook 1 [ 1263.348220][T13594] wlan1 speed is unknown, defaulting to 1000 [ 1263.361336][T13632] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 1263.489057][T13640] netlink: 'syz.1.11216': attribute type 4 has an invalid length. [ 1263.566522][T13645] tipc: MTU too low for tipc bearer [ 1263.620178][T13650] netlink: 'syz.0.11220': attribute type 1 has an invalid length. [ 1263.651786][T27523] IPVS: starting estimator thread 0... [ 1263.762074][T13652] IPVS: using max 24 ests per chain, 57600 per kthread [ 1263.815028][T13650] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1263.837878][T13656] bond10: (slave geneve3): making interface the new active one [ 1263.848655][T13656] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 1264.036697][T13661] bond10 (unregistering): Released all slaves [ 1264.066335][T13665] __nla_validate_parse: 6 callbacks suppressed [ 1264.066355][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11224'. [ 1264.144938][T13665] netlink: 244 bytes leftover after parsing attributes in process `syz.4.11224'. [ 1264.308169][T13677] siw: device registration error -23 [ 1264.333237][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11229'. [ 1264.369142][T13684] veth1_macvtap: left promiscuous mode [ 1264.433045][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11231'. [ 1264.508519][T13687] netlink: 'syz.4.11232': attribute type 1 has an invalid length. [ 1264.736164][T13698] syzkaller0: entered promiscuous mode [ 1264.747430][T13698] syzkaller0: entered allmulticast mode [ 1264.857544][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11239'. [ 1264.871111][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11240'. [ 1265.196255][T13727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.217249][T13725] netlink: 'syz.3.11244': attribute type 83 has an invalid length. [ 1265.248586][T13727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.334375][T13727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.549892][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11251'. [ 1265.705971][T13760] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1265.786710][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11252'. [ 1265.826994][T13749] syzkaller0: entered promiscuous mode [ 1265.843707][T13749] syzkaller0: entered allmulticast mode [ 1265.910277][T13773] sctp: [Deprecated]: syz.0.11258 (pid 13773) Use of int in max_burst socket option deprecated. [ 1265.910277][T13773] Use struct sctp_assoc_value instead [ 1266.036265][T13780] netlink: 'syz.2.11260': attribute type 10 has an invalid length. [ 1266.060917][T13780] netlink: 228 bytes leftover after parsing attributes in process `syz.2.11260'. [ 1266.158463][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11263'. [ 1267.042548][T13809] wlan1 speed is unknown, defaulting to 1000 [ 1267.718929][T13859] netlink: 'syz.1.11287': attribute type 1 has an invalid length. [ 1267.758283][T13859] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1268.001186][T13873] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1268.257606][T13890] x_tables: duplicate underflow at hook 1 [ 1268.310689][T13894] x_tables: duplicate underflow at hook 1 [ 1268.593981][T13919] sctp: [Deprecated]: syz.2.11307 (pid 13919) Use of int in max_burst socket option deprecated. [ 1268.593981][T13919] Use struct sctp_assoc_value instead [ 1268.718794][T13920] netlink: 'syz.4.11305': attribute type 3 has an invalid length. [ 1268.891457][T13933] IPVS: length: 8 != 1152 [ 1268.903970][T13936] netlink: 'syz.3.11312': attribute type 2 has an invalid length. [ 1269.109288][T30192] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.155971][T30192] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.175383][T30192] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.206125][T13955] __nla_validate_parse: 10 callbacks suppressed [ 1269.206146][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11317'. [ 1269.224409][T13952] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1269.249646][T30192] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.295925][T13953] syzkaller0: entered promiscuous mode [ 1269.301746][T13953] syzkaller0: entered allmulticast mode [ 1269.474871][T13973] netlink: 'syz.1.11322': attribute type 21 has an invalid length. [ 1269.509948][T13973] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11322'. [ 1269.564969][T13978] SET target dimension over the limit! [ 1269.690700][T13973] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11322'. [ 1269.968523][T13994] tipc: Enabling of bearer rejected, failed to enable media [ 1270.166533][T14007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11334'. [ 1270.178742][T14010] nbd: socks must be embedded in a SOCK_ITEM attr [ 1270.213109][T14007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11334'. [ 1270.227591][T14017] nbd: socks must be embedded in a SOCK_ITEM attr [ 1270.604740][T14032] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1270.896080][T14049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11346'. [ 1271.119763][T14055] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1271.173231][T14061] syzkaller0: entered promiscuous mode [ 1271.189053][T14061] syzkaller0: entered allmulticast mode [ 1271.329564][T14068] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11353'. [ 1271.356262][T14067] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 1271.370058][T14068] netlink: 396 bytes leftover after parsing attributes in process `syz.1.11353'. [ 1271.380837][T14068] openvswitch: netlink: Flow key attr not present in new flow. [ 1271.391627][T14067] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @ [ 1271.566588][T14079] xt_TCPMSS: Only works on TCP SYN packets [ 1271.572488][T14075] netlink: 'syz.1.11355': attribute type 1 has an invalid length. [ 1271.597229][T14079] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20002 [ 1271.675206][T14082] bond3: (slave veth0_to_bond): Releasing active interface [ 1272.017586][T14102] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1272.075528][T14102] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11362'. [ 1272.275539][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11367'. [ 1272.654893][T14132] lo: entered allmulticast mode [ 1272.698974][T14132] lo: left allmulticast mode [ 1273.253875][T14166] tipc: New replicast peer: 172.20.20.19 [ 1273.635918][T14191] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1273.786811][T14201] syzkaller1: entered promiscuous mode [ 1273.797069][T14201] syzkaller1: entered allmulticast mode [ 1273.828300][T14206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1274.877338][T14243] __nla_validate_parse: 10 callbacks suppressed [ 1274.877358][T14243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11405'. [ 1274.968009][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11409'. [ 1275.033656][T14254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11410'. [ 1275.058622][T14255] openvswitch: netlink: IP tunnel dst address not specified [ 1275.480762][T14281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1275.755824][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11421'. [ 1275.826156][T14291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11423'. [ 1276.195255][T14307] netlink: 'syz.2.11427': attribute type 2 has an invalid length. [ 1276.263902][T14320] openvswitch: netlink: IP tunnel TTL not specified. [ 1276.336688][T14320] openvswitch: netlink: IP tunnel TTL not specified. [ 1276.389631][T14330] sctp: [Deprecated]: syz.3.11434 (pid 14330) Use of int in maxseg socket option. [ 1276.389631][T14330] Use struct sctp_assoc_value instead [ 1276.464923][T14332] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11436'. [ 1276.487296][T14332] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11436'. [ 1276.540382][T14344] openvswitch: netlink: EtherType 0 is less than min 600 [ 1276.696148][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11441'. [ 1276.855734][T14358] ip6erspan0: entered allmulticast mode [ 1277.125989][T14374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11447'. [ 1277.176726][T14374] bridge4: entered promiscuous mode [ 1277.191333][T14374] bridge4: entered allmulticast mode [ 1277.403412][T14391] bond7: option all_slaves_active: invalid value (222) [ 1277.413781][T14403] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000 [ 1277.441986][T14404] netlink: 'syz.0.11456': attribute type 1 has an invalid length. [ 1277.444546][T14391] bond7 (unregistering): Released all slaves [ 1277.488868][T14405] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 1277.549791][T14404] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1278.249545][T14445] netlink: 'syz.1.11467': attribute type 4 has an invalid length. [ 1278.388044][T14460] xt_nfacct: accounting object `syz1' does not exist [ 1278.453667][T14466] netlink: 'syz.0.11476': attribute type 4 has an invalid length. [ 1278.466664][T14467] netlink: 'syz.3.11475': attribute type 2 has an invalid length. [ 1278.642955][T14478] IPv4: Oversized IP packet from 127.202.26.0 [ 1278.951141][T14498] xt_hashlimit: max too large, truncated to 1048576 [ 1279.062897][T14504] netlink: 'syz.1.11487': attribute type 83 has an invalid length. [ 1279.360669][T14515] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1279.398736][T14521] syzkaller1: entered promiscuous mode [ 1279.414964][T14521] syzkaller1: entered allmulticast mode [ 1280.010444][T14556] xt_l2tp: unknown flags: 10 [ 1280.094695][T14560] __nla_validate_parse: 10 callbacks suppressed [ 1280.094745][T14560] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11504'. [ 1280.140078][T14560] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11504'. [ 1280.180685][T14560] netlink: 'syz.4.11504': attribute type 5 has an invalid length. [ 1280.215240][T14560] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11504'. [ 1280.327529][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11504'. [ 1280.485541][T14578] netlink: 'syz.2.11511': attribute type 1 has an invalid length. [ 1280.505812][T14578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11511'. [ 1280.534103][T14579] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1280.551018][T14578] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1280.605434][T14583] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1281.016879][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11518'. [ 1281.086461][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11522'. [ 1281.255143][T14626] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11522'. [ 1281.268336][T14619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11524'. [ 1281.494457][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11528'. [ 1281.735461][T14657] openvswitch: netlink: Invalid VLAN frame [ 1282.455544][T14691] batman_adv: batadv0: Adding interface: dummy0 [ 1282.464008][T14691] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.491733][T14691] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1282.585724][T30192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1282.596517][T30192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1282.624958][T30192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1282.656547][T30192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1282.719090][T14698] xt_hashlimit: size too large, truncated to 1048576 [ 1282.774487][T14699] x_tables: duplicate underflow at hook 2 [ 1282.823438][T14706] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 1283.596104][T14754] openvswitch: netlink: EtherType 50a is less than min 600 [ 1284.176339][T14791] hsr_slave_0 (unregistering): left promiscuous mode [ 1284.543060][ T25] block nbd6: Possible stuck request ffff888027018000: control (read@0,1024B). Runtime 150 seconds [ 1284.555805][ T25] block nbd6: Possible stuck request ffff888027018200: control (read@1024,1024B). Runtime 150 seconds [ 1284.572984][ T25] block nbd6: Possible stuck request ffff888027018400: control (read@2048,1024B). Runtime 150 seconds [ 1284.584684][ T25] block nbd6: Possible stuck request ffff888027018600: control (read@3072,1024B). Runtime 150 seconds [ 1284.764330][T14837] syzkaller1: entered promiscuous mode [ 1284.774647][T14837] syzkaller1: entered allmulticast mode [ 1284.998565][T14850] mac80211_hwsim hwsim108 syzkaller0: Caught tx_queue_len zero misconfig [ 1285.051102][T14846] netlink: 'syz.2.11587': attribute type 1 has an invalid length. [ 1285.497349][T14882] __nla_validate_parse: 16 callbacks suppressed [ 1285.497371][T14882] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11594'. [ 1285.545091][T14886] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11591'. [ 1285.579911][T14886] netlink: 'syz.2.11591': attribute type 1 has an invalid length. [ 1285.635866][T14886] netlink: 'syz.2.11591': attribute type 1 has an invalid length. [ 1285.924670][T14876] wlan1 speed is unknown, defaulting to 1000 [ 1286.015210][T14908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1286.174619][T14914] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11604'. [ 1286.258465][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11604'. [ 1286.631494][T14941] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.11612'. [ 1286.674132][T14946] netlink: 'syz.1.11613': attribute type 15 has an invalid length. [ 1286.697288][T14946] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20002 [ 1286.846504][T14951] netlink: 'syz.0.11614': attribute type 1 has an invalid length. [ 1286.899981][T14953] netlink: 'syz.2.11615': attribute type 58 has an invalid length. [ 1286.910390][T14954] netlink: 'syz.2.11615': attribute type 58 has an invalid length. [ 1286.942987][T14953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11615'. [ 1286.951294][T14954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11615'. [ 1287.043139][T14957] netlink: 'syz.0.11614': attribute type 1 has an invalid length. [ 1287.239821][T14957] vxlan1: entered promiscuous mode [ 1287.398028][T14968] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.11619'. [ 1287.455911][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11619'. [ 1287.467955][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11619'. [ 1287.518500][T14968] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1287.537149][T14968] team0: Port device batadv1 added [ 1287.570372][T14970] netlink: 'syz.1.11620': attribute type 3 has an invalid length. [ 1287.601616][T14979] pim6reg1: entered promiscuous mode [ 1287.607749][T14979] pim6reg1: entered allmulticast mode [ 1287.764754][T14985] sctp: [Deprecated]: syz.3.11622 (pid 14985) Use of int in max_burst socket option deprecated. [ 1287.764754][T14985] Use struct sctp_assoc_value instead [ 1288.218697][T15017] netlink: 'syz.1.11632': attribute type 12 has an invalid length. [ 1288.275715][T15019] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1288.507901][T15034] mac80211_hwsim hwsim108 syzkaller0: left promiscuous mode [ 1288.517669][T15034] mac80211_hwsim hwsim108 syzkaller0: left allmulticast mode [ 1288.658945][T15041] xt_hashlimit: size too large, truncated to 1048576 [ 1288.726126][T15051] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20000 [ 1290.190767][T15135] batadv_slave_0: entered promiscuous mode [ 1290.509968][T15140] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1290.528483][T15146] __nla_validate_parse: 15 callbacks suppressed [ 1290.528504][T15146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11669'. [ 1290.550302][T15140] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1290.566278][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1290.584535][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1290.595145][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1290.618497][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1290.653837][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1290.695198][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1290.714129][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1290.721678][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1290.733236][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1290.744837][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1290.769543][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11670'. [ 1290.794554][T15151] sctp: [Deprecated]: syz.0.11670 (pid 15151) Use of int in max_burst socket option. [ 1290.794554][T15151] Use struct sctp_assoc_value instead [ 1290.814006][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11670'. [ 1291.044384][T15153] sctp: [Deprecated]: syz.0.11671 (pid 15153) Use of int in maxseg socket option. [ 1291.044384][T15153] Use struct sctp_assoc_value instead [ 1291.279128][ T7149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1291.318860][ T7149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1291.340976][ T7149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.378177][T15165] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.11674'. [ 1291.535766][ T7149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1291.554481][ T7149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1291.587301][ T7149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.665321][T15144] wlan1 speed is unknown, defaulting to 1000 [ 1291.920120][ T7149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1291.931671][ T7149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1291.952194][ T7149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.990684][T15147] wlan1 speed is unknown, defaulting to 1000 [ 1292.095334][ T7149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1292.107026][ T7149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1292.121073][ T7149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.613645][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11689'. [ 1292.708803][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11689'. [ 1292.871717][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11689'. [ 1292.944887][ T5840] Bluetooth: hci3: command tx timeout [ 1292.975655][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11690'. [ 1293.069460][ T7149] dummy0: left allmulticast mode [ 1293.079361][ T7149] bridge0: port 3(dummy0) entered disabled state [ 1293.099031][ T7149] bridge_slave_1: left allmulticast mode [ 1293.112615][ T7149] bridge_slave_1: left promiscuous mode [ 1293.122733][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.143191][ T7149] bridge_slave_0: left allmulticast mode [ 1293.148919][ T7149] bridge_slave_0: left promiscuous mode [ 1293.169277][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.365801][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11692'. [ 1293.493496][ T7149] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 1293.617472][ T7149] erspan0 (unregistering): left promiscuous mode [ 1293.654716][ T7149] gretap0 (unregistering): left promiscuous mode [ 1293.957308][ T7149] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 1293.965675][ T7149] bridge5 (unregistering): left promiscuous mode [ 1294.091612][ T7149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1294.102411][ T7149] bond_slave_0: left promiscuous mode [ 1294.108076][ T7149] bond_slave_0: left allmulticast mode [ 1294.120802][ T7149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1294.131570][ T7149] bond_slave_1: left promiscuous mode [ 1294.138221][ T7149] bond_slave_1: left allmulticast mode [ 1294.151256][ T7149] bond0 (unregistering): Released all slaves [ 1294.164183][ T7149] bond1 (unregistering): Released all slaves [ 1294.180846][ T7149] bond2 (unregistering): Released all slaves [ 1294.197267][ T7149] bond3 (unregistering): Released all slaves [ 1294.224500][ T7149] bond4 (unregistering): Released all slaves [ 1294.240010][ T7149] bond5 (unregistering): Released all slaves [ 1294.256368][ T7149] bond6 (unregistering): Released all slaves [ 1294.277880][ T7149] bond7 (unregistering): Released all slaves [ 1294.293083][ T7149] bond8 (unregistering): Released all slaves [ 1294.310368][ T7149] bond9 (unregistering): Released all slaves [ 1294.330587][ T7149] bond10 (unregistering): Released all slaves [ 1294.410416][T15237] tipc: Enabling of bearer rejected, failed to enable media [ 1294.467878][T15258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.484487][T15258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.525022][T15258] batman_adv: batadv0: Removing interface: gretap3 [ 1294.574621][T15147] chnl_net:caif_netlink_parms(): no params data found [ 1294.600493][ T7149] 9: left promiscuous mode [ 1294.794342][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11696'. [ 1295.033586][ T5840] Bluetooth: hci3: command tx timeout [ 1295.178163][T15275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.278180][T15275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.313646][T15280] ip6gretap0: entered promiscuous mode [ 1295.524063][T15147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.531513][T15147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.540080][T15147] bridge_slave_0: entered allmulticast mode [ 1295.548869][T15147] bridge_slave_0: entered promiscuous mode [ 1295.580615][T15303] __nla_validate_parse: 2 callbacks suppressed [ 1295.580638][T15303] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11703'. [ 1295.780780][T15147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.799838][T15147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.809319][T15147] bridge_slave_1: entered allmulticast mode [ 1295.822384][T15147] bridge_slave_1: entered promiscuous mode [ 1296.019256][T15147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.090638][T15147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.306982][T15147] team0: Port device team_slave_0 added [ 1296.324477][T15147] team0: Port device team_slave_1 added [ 1296.430976][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11711'. [ 1296.558563][T15147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.596451][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.680351][T15147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.746967][T15147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.766119][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.838208][T15147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.113883][ T5840] Bluetooth: hci3: command tx timeout [ 1297.257110][T15375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11719'. [ 1297.340191][T15147] hsr_slave_0: entered promiscuous mode [ 1297.402725][T15147] hsr_slave_1: entered promiscuous mode [ 1297.425045][T15147] debugfs: 'hsr0' already exists in 'hsr' [ 1297.431384][T15147] Cannot create hsr debugfs directory [ 1297.490365][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1297.505162][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.525672][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.535980][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.588003][ T7149] vlan0: left allmulticast mode [ 1297.604838][T15388] validate_nla: 2 callbacks suppressed [ 1297.604869][T15388] netlink: 'syz.3.11724': attribute type 2 has an invalid length. [ 1297.619238][ T7149] veth0_vlan: left allmulticast mode [ 1297.626877][ T7149] vlan0: left promiscuous mode [ 1297.633183][ T7149] hsr0: left allmulticast mode [ 1297.638141][ T7149] veth0_macvtap: left promiscuous mode [ 1297.651060][T15388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11724'. [ 1297.663747][ T7149] veth1_vlan: left promiscuous mode [ 1297.671621][ T7149] veth0_vlan: left promiscuous mode [ 1298.037955][ T9996] udevd[9996]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1298.117139][T11596] udevd[11596]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1298.710638][T15412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11726'. [ 1298.846743][T15416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11727'. [ 1298.856989][T15416] netlink: 'syz.0.11727': attribute type 7 has an invalid length. [ 1298.865770][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11727'. [ 1299.164661][ T7149] pimreg3 (unregistering): left allmulticast mode [ 1299.182758][ T5840] Bluetooth: hci3: command tx timeout [ 1299.344251][ T7149] team0 (unregistering): Port device team_slave_1 removed [ 1299.478044][T15383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.503890][T15383] team0: Cannot enslave team device to itself [ 1299.536012][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11725'. [ 1299.563164][T15416] gretap0: entered promiscuous mode [ 1299.587645][T15416] gretap0: left promiscuous mode [ 1300.080495][T15440] netlink: 'syz.4.11734': attribute type 1 has an invalid length. [ 1300.555135][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1300.933670][T15475] netlink: 'syz.3.11740': attribute type 1 has an invalid length. [ 1300.948910][ T7149] IPVS: stop unused estimator thread 0... [ 1301.063357][T15482] netlink: 'syz.0.11742': attribute type 1 has an invalid length. [ 1301.090513][T15482] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11742'. [ 1301.113653][T15475] bond8: entered promiscuous mode [ 1301.119363][T15475] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1301.239006][T15478] lo: Caught tx_queue_len zero misconfig [ 1301.292365][T15485] bond0: entered promiscuous mode [ 1301.298045][T15485] bond_slave_0: entered promiscuous mode [ 1301.306556][T15485] : entered promiscuous mode [ 1301.313850][T15485] bridge_slave_1: entered promiscuous mode [ 1301.320101][T15485] bond0: entered allmulticast mode [ 1301.330445][T15485] bond_slave_0: entered allmulticast mode [ 1301.337542][T15485] : entered allmulticast mode [ 1301.343769][T15485] bridge_slave_1: entered allmulticast mode [ 1301.351098][T15485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.463282][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11738'. [ 1301.537249][T15472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.895189][T15147] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1302.001211][T15147] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1302.103750][T15147] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1302.190838][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11750'. [ 1302.196598][T15147] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1302.430119][T15543] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1302.567393][T15147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.633725][T15147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.668279][T15561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11758'. [ 1302.681511][T30189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.688768][T30189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.713850][T30188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.721153][T30188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.185821][ T7149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1303.200924][ T7149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1303.221218][T27523] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1303.445087][T15147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.483190][ T9379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1303.700804][T15147] veth0_vlan: entered promiscuous mode [ 1303.731144][T15147] veth1_vlan: entered promiscuous mode [ 1303.847548][T15147] veth0_macvtap: entered promiscuous mode [ 1303.879318][T15147] veth1_macvtap: entered promiscuous mode [ 1304.023610][T15147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.068226][ T9379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1304.125662][T15147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.203523][T30191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.234153][T30191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.293981][T15642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11774'. [ 1304.310452][T30191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.323536][T30191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.348551][T15646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11774'. [ 1304.554861][T15650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11775'. [ 1304.571529][T30197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.597205][T30197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.719318][T15655] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11775'. [ 1304.732833][ T7156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.747415][ T7156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.178097][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11663'. [ 1305.420705][T15684] openvswitch: netlink: Message has 8 unknown bytes. [ 1305.420713][T15685] openvswitch: netlink: Message has 8 unknown bytes. [ 1305.420746][T15684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.452607][T15685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.987563][T15700] sctp: [Deprecated]: syz.2.11785 (pid 15700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1305.987563][T15700] Use struct sctp_sack_info instead [ 1306.222050][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1306.230180][ C0] lec:lec_tx_timeout: lec0 [ 1306.533123][T15720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11790'. [ 1307.228518][T15743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1307.342459][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1307.428615][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11795'. [ 1307.599361][T19941] lec:lec_start_xmit: lec0:No lecd attached [ 1307.820698][T15782] geneve3: entered promiscuous mode [ 1307.837979][T15786] netlink: 'syz.0.11803': attribute type 1 has an invalid length. [ 1307.846873][T15782] geneve3: entered allmulticast mode [ 1307.866203][T30189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1307.875516][T15786] netlink: 'syz.0.11803': attribute type 3 has an invalid length. [ 1307.883925][T15787] netem: change failed [ 1307.888705][T15786] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11803'. [ 1307.901220][T15789] tunl0: Caught tx_queue_len zero misconfig [ 1307.918123][T30189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1307.927587][T30189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1307.943175][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11803'. [ 1307.952935][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11803'. [ 1307.968682][T15787] sctp: [Deprecated]: syz.4.11804 (pid 15787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1307.968682][T15787] Use struct sctp_sack_info instead [ 1307.981269][T15786] netlink: 'syz.0.11803': attribute type 3 has an invalid length. [ 1308.026383][T15793] netlink: 'syz.0.11803': attribute type 2 has an invalid length. [ 1308.059204][T30189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1308.081243][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11803'. [ 1308.198029][T15805] netlink: 'syz.2.11808': attribute type 1 has an invalid length. [ 1308.337949][T15805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11808'. [ 1308.351162][T15806] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.11807'. [ 1308.393898][T15810] bond6: (slave veth11): Enslaving as an active interface with a down link [ 1308.407628][T15805] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1308.435467][T15813] tipc: Enabling of bearer rejected, failed to enable media [ 1308.866205][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11816'. [ 1308.995131][T15845] tipc: Started in network mode [ 1309.000473][T15845] tipc: Node identity 8ad25a0ba873, cluster identity 4711 [ 1309.046958][T15845] tipc: Enabled bearer , priority 0 [ 1309.071073][T15843] tipc: Enabling of bearer rejected, already enabled [ 1309.093569][T15851] netlink: 'syz.2.11821': attribute type 12 has an invalid length. [ 1309.123625][T15851] netlink: 'syz.2.11821': attribute type 29 has an invalid length. [ 1309.140089][T15851] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11821'. [ 1309.195896][T15843] tipc: Disabling bearer [ 1309.469922][T15873] netlink: 'syz.3.11826': attribute type 10 has an invalid length. [ 1309.495672][T15874] bridge0: port 3(ipvlan0) entered blocking state [ 1309.523093][T15874] bridge0: port 3(ipvlan0) entered disabled state [ 1309.530134][T15874] ipvlan0: entered allmulticast mode [ 1309.551110][T15874] bridge0: entered allmulticast mode [ 1309.566409][T15874] ipvlan0: left allmulticast mode [ 1309.581563][T15874] bridge0: left allmulticast mode [ 1309.600309][T15881] sctp: [Deprecated]: syz.4.11828 (pid 15881) Use of int in max_burst socket option deprecated. [ 1309.600309][T15881] Use struct sctp_assoc_value instead [ 1309.627240][T15873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.656955][T15873] batadv0: entered promiscuous mode [ 1309.679889][T15873] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1309.938650][T15897] netlink: 'syz.3.11835': attribute type 3 has an invalid length. [ 1310.080233][T15911] netlink: 'syz.1.11839': attribute type 11 has an invalid length. [ 1310.360797][T15925] syzkaller0: entered promiscuous mode [ 1310.369294][T15925] syzkaller0: entered allmulticast mode [ 1310.389399][T15928] xt_hashlimit: size too large, truncated to 1048576 [ 1310.696938][T15951] syz_tun: entered allmulticast mode [ 1310.767093][T15943] syz_tun: left allmulticast mode [ 1311.078963][T15972] netlink: 'syz.1.11860': attribute type 4 has an invalid length. [ 1311.161232][T15972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1311.340630][T15989] team_slave_0: Caught tx_queue_len zero misconfig [ 1311.477963][T15993] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 1311.564478][T15998] __nla_validate_parse: 10 callbacks suppressed [ 1311.564499][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11866'. [ 1311.661144][T16000] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1311.705358][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11866'. [ 1312.003397][T16014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1312.010811][T16014] IPv6: NLM_F_CREATE should be set when creating new route [ 1312.018175][T16014] IPv6: NLM_F_CREATE should be set when creating new route [ 1312.071101][T16018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11872'. [ 1312.349614][T16027] syzkaller0: entered promiscuous mode [ 1312.356263][T16027] syzkaller0: entered allmulticast mode [ 1313.272136][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1313.280247][ C0] lec:lec_tx_timeout: lec0 [ 1314.243959][T15983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1314.431352][T16041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11876'. [ 1314.628868][ T25] block nbd6: Possible stuck request ffff888027018000: control (read@0,1024B). Runtime 180 seconds [ 1314.641006][ T25] block nbd6: Possible stuck request ffff888027018200: control (read@1024,1024B). Runtime 180 seconds [ 1314.652818][ T25] block nbd6: Possible stuck request ffff888027018400: control (read@2048,1024B). Runtime 180 seconds [ 1314.664693][ T25] block nbd6: Possible stuck request ffff888027018600: control (read@3072,1024B). Runtime 180 seconds [ 1314.732151][T16054] validate_nla: 1 callbacks suppressed [ 1314.732174][T16054] netlink: 'syz.1.11882': attribute type 4 has an invalid length. [ 1314.733557][T16056] netlink: 'syz.1.11882': attribute type 4 has an invalid length. [ 1314.919897][T16062] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1315.235617][T16071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11886'. [ 1315.262484][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1315.490795][T16094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11889'. [ 1315.531340][T16094] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1315.655229][T16081] syzkaller1: entered promiscuous mode [ 1315.660784][T16081] syzkaller1: entered allmulticast mode [ 1315.937529][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11891'. [ 1316.378815][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11893'. [ 1316.557398][T16119] netlink: 'syz.1.11894': attribute type 1 has an invalid length. [ 1316.584971][T16120] netlink: 'syz.1.11894': attribute type 1 has an invalid length. [ 1316.683354][T16125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11895'. [ 1316.726569][T16119] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1316.728015][T16120] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1316.792877][T16125] mac80211_hwsim hwsim108 syzkaller0: Caught tx_queue_len zero misconfig [ 1316.985253][T16144] x_tables: duplicate underflow at hook 1 [ 1317.041158][T16148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11902'. [ 1317.041495][T16149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1317.106430][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11905'. [ 1317.255342][T16165] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.11906'. [ 1317.376015][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11906'. [ 1317.460516][T16164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1317.624331][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11909'. [ 1318.297799][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11920'. [ 1318.308082][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11920'. [ 1318.321034][T16222] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11920'. [ 1318.333321][T16223] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11920'. [ 1318.613681][T30188] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 1318.646863][T16244] netlink: 'syz.1.11923': attribute type 1 has an invalid length. [ 1318.695199][T16244] bond1: entered promiscuous mode [ 1318.700707][T16244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1318.735333][T16247] bond1: (slave bridge1): making interface the new active one [ 1318.745430][T16247] bridge1: entered promiscuous mode [ 1318.752453][T16247] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1318.776993][T16248] syzkaller0: entered promiscuous mode [ 1318.789669][T16248] syzkaller0: entered allmulticast mode [ 1318.852061][T16250] netlink: 'syz.1.11926': attribute type 2 has an invalid length. [ 1318.880838][T16250] !: entered promiscuous mode [ 1319.282957][T16226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1319.746161][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1319.758203][T16284] tipc: Enabled bearer , priority 0 [ 1319.761138][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1319.779342][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1319.788709][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1319.798816][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1319.845615][T16282] tipc: Disabling bearer [ 1320.296551][T16303] bridge0: port 1(gretap0) entered blocking state [ 1320.315013][T16303] bridge0: port 1(gretap0) entered disabled state [ 1320.322308][T16303] gretap0: entered allmulticast mode [ 1320.330184][T16303] gretap0: entered promiscuous mode [ 1320.798191][T16330] syzkaller0: entered promiscuous mode [ 1320.806924][T16330] syzkaller0: entered allmulticast mode [ 1321.827684][ T5840] Bluetooth: hci0: command tx timeout [ 1322.949595][ T5193] udevd[5193]: worker [8484] /devices/virtual/block/nbd6 timeout; kill it [ 1322.967159][ T5193] udevd[5193]: seq 43437 '/devices/virtual/block/nbd6' killed [ 1323.902219][ T5840] Bluetooth: hci0: command tx timeout [ 1324.451045][T16384] netlink: 'syz.3.11959': attribute type 1 has an invalid length. [ 1324.531510][T16384] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1324.616778][T16390] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1324.631053][T16390] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 1324.675183][T16390] bond9: (slave vcan0): Error -95 calling set_mac_address [ 1324.729991][T16395] __nla_validate_parse: 10 callbacks suppressed [ 1324.730012][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11961'. [ 1324.791021][T16287] chnl_net:caif_netlink_parms(): no params data found [ 1324.863114][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11961'. [ 1324.941714][T16402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11963'. [ 1325.084936][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11963'. [ 1325.100742][T16405] lo speed is unknown, defaulting to 1000 [ 1325.103263][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11963'. [ 1325.122750][T16405] lo speed is unknown, defaulting to 1000 [ 1325.135555][T16405] lo speed is unknown, defaulting to 1000 [ 1325.160874][T16287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.170424][T16287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.180942][T16287] bridge_slave_0: entered allmulticast mode [ 1325.190378][T16287] bridge_slave_0: entered promiscuous mode [ 1325.206709][T16287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.213992][T16405] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1325.233132][T16287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.248745][T16287] bridge_slave_1: entered allmulticast mode [ 1325.260034][T16287] bridge_slave_1: entered promiscuous mode [ 1325.317102][T16412] netlink: 'syz.0.11965': attribute type 21 has an invalid length. [ 1325.335819][T16405] lo speed is unknown, defaulting to 1000 [ 1325.351722][T16287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.369513][T16405] lo speed is unknown, defaulting to 1000 [ 1325.494856][T16405] lo speed is unknown, defaulting to 1000 [ 1325.504165][T16405] lo speed is unknown, defaulting to 1000 [ 1325.518957][T16405] lo speed is unknown, defaulting to 1000 [ 1325.535239][T16412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11965'. [ 1325.560945][T16287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.665361][T16405] lo speed is unknown, defaulting to 1000 [ 1325.713326][T16405] lo speed is unknown, defaulting to 1000 [ 1325.728452][T16287] team0: Port device team_slave_0 added [ 1325.748607][T16405] lo speed is unknown, defaulting to 1000 [ 1325.761242][T16424] x_tables: unsorted entry at hook 2 [ 1325.766852][T16287] team0: Port device team_slave_1 added [ 1325.809576][T16405] lo speed is unknown, defaulting to 1000 [ 1325.867113][T16405] lo speed is unknown, defaulting to 1000 [ 1325.883967][T16287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.902997][T16287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.962621][T16287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.982280][ T5840] Bluetooth: hci0: command tx timeout [ 1325.988855][T16287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.004006][T16287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.031144][T16287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.045249][T16405] lo speed is unknown, defaulting to 1000 [ 1326.055500][T16405] lo speed is unknown, defaulting to 1000 [ 1326.097558][T16405] lo speed is unknown, defaulting to 1000 [ 1326.123450][T16405] lo speed is unknown, defaulting to 1000 [ 1326.131196][T16405] lo speed is unknown, defaulting to 1000 [ 1326.156174][T16287] hsr_slave_0: entered promiscuous mode [ 1326.183929][T16287] hsr_slave_1: entered promiscuous mode [ 1326.190700][T16287] debugfs: 'hsr0' already exists in 'hsr' [ 1326.207648][T16287] Cannot create hsr debugfs directory [ 1326.217642][T16405] lo speed is unknown, defaulting to 1000 [ 1326.727616][T16443] bond8: Removing last arp target with arp_interval on [ 1326.742786][T16458] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1326.753421][T16458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1327.253187][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11980'. [ 1327.284366][T16478] nbd: must specify a size in bytes for the device [ 1327.647064][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11981'. [ 1327.679605][T16287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.694469][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11983'. [ 1327.705956][T16287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1327.758844][T16483] vlan0: entered promiscuous mode [ 1327.905964][T16491] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11985'. [ 1328.048650][T16287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.080785][ T5840] Bluetooth: hci0: command tx timeout [ 1328.080812][T16287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1328.140973][T16485] lo speed is unknown, defaulting to 1000 [ 1328.177417][T16498] netlink: 'syz.1.11987': attribute type 61 has an invalid length. [ 1328.286497][T16287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.321703][T16287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1328.443153][T16287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.459508][T16287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1328.997660][T16287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1329.020936][T16287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1329.049625][T16287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1329.080338][T16287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1329.341101][T16287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.454403][T16527] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1329.495763][T16287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.506433][T16526] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 1329.536308][T30188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.552728][T30188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.667870][T30197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.675157][T30197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.833751][T16546] netlink: 'syz.1.11995': attribute type 1 has an invalid length. [ 1329.965873][T16546] bond2: entered promiscuous mode [ 1330.019771][T16546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1330.080741][T16550] netlink: 'syz.3.11996': attribute type 3 has an invalid length. [ 1330.094416][T16550] netlink: 'syz.3.11996': attribute type 3 has an invalid length. [ 1330.144636][T16555] bond2: (slave bridge2): making interface the new active one [ 1330.168987][T16555] bridge2: entered promiscuous mode [ 1330.193819][T16555] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1330.622457][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1330.672995][T16571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.760124][T16575] netlink: 'syz.0.12001': attribute type 10 has an invalid length. [ 1330.836305][T16571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.121748][T16287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.397312][T16287] veth0_vlan: entered promiscuous mode [ 1331.447774][T16287] veth1_vlan: entered promiscuous mode [ 1331.599947][T16287] veth0_macvtap: entered promiscuous mode [ 1331.610634][T16612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1331.647420][T16287] veth1_macvtap: entered promiscuous mode [ 1331.718936][T16287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.775357][T16287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.828518][T30196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.869481][T30196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.901464][T30196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.963584][T30196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.211404][T30188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.246007][T30188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.277115][T16640] __nla_validate_parse: 1 callbacks suppressed [ 1332.277139][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12017'. [ 1332.349733][T16644] xt_hashlimit: size too large, truncated to 1048576 [ 1332.358382][T30197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.372986][T30197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.743478][T16665] netlink: 'syz.2.12022': attribute type 1 has an invalid length. [ 1332.818835][T16665] macvtap1: entered allmulticast mode [ 1333.165745][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1333.193518][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1333.214699][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1333.236200][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1333.244731][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1333.435007][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12030'. [ 1333.473426][T16699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12031'. [ 1333.778209][ T5533] syz_tun (unregistering): left allmulticast mode [ 1333.787546][ T5533] syz_tun (unregistering): left promiscuous mode [ 1333.803844][ T5533] bridge0: port 2(syz_tun) entered disabled state [ 1334.179378][T16683] lo speed is unknown, defaulting to 1000 [ 1334.188351][T16723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12036'. [ 1334.289495][T16725] netlink: 'syz.2.12035': attribute type 1 has an invalid length. [ 1334.299144][T16725] netlink: 'syz.2.12035': attribute type 7 has an invalid length. [ 1334.332541][T16725] netlink: 'syz.2.12035': attribute type 8 has an invalid length. [ 1334.360246][T16725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12035'. [ 1334.426949][T16732] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12035'. [ 1334.439807][T16732] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12035'. [ 1334.508484][T16727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12037'. [ 1334.575210][T16742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12041'. [ 1334.999708][T16769] netlink: 'syz.2.12047': attribute type 21 has an invalid length. [ 1335.074526][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12047'. [ 1335.125081][T16683] chnl_net:caif_netlink_parms(): no params data found [ 1335.294515][T16778] bond12: (slave bond_slave_1): Device is not our slave [ 1335.301520][T16778] bond12: option active_slave: invalid value (bond_slave_1) [ 1335.313013][T16778] bond12 (unregistering): Released all slaves [ 1335.343682][ T5840] Bluetooth: hci1: command tx timeout [ 1335.351477][T16683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.364195][T16683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.375115][T16683] bridge_slave_0: entered allmulticast mode [ 1335.388516][T16683] bridge_slave_0: entered promiscuous mode [ 1335.397642][T16683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.405055][T16683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.415161][T16683] bridge_slave_1: entered allmulticast mode [ 1335.424313][T16683] bridge_slave_1: entered promiscuous mode [ 1335.495690][T16683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.517611][T16683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.597159][T16683] team0: Port device team_slave_0 added [ 1335.617912][T16683] team0: Port device team_slave_1 added [ 1335.720585][T16796] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 1335.728696][T16683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.728718][T16683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.728746][T16683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.748659][T16683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.789773][T16683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.818674][T16683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.956174][T16683] hsr_slave_0: entered promiscuous mode [ 1335.965467][T16683] hsr_slave_1: entered promiscuous mode [ 1335.976366][T16683] debugfs: 'hsr0' already exists in 'hsr' [ 1335.986210][T16683] Cannot create hsr debugfs directory [ 1336.079048][T16811] geneve4: entered promiscuous mode [ 1336.112133][T16811] geneve4: entered allmulticast mode [ 1336.119763][T30196] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 1336.144931][T30196] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 1336.191603][T30196] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 1336.215277][T30196] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 1336.422991][T16825] pim6reg: entered allmulticast mode [ 1336.561211][T16683] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1336.590999][T16805] lo speed is unknown, defaulting to 1000 [ 1336.660311][T16683] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1336.727233][T16683] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1336.840544][T16836] openvswitch: netlink: IPv4 tun info is not correct [ 1336.850816][T16683] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1337.309824][T16683] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1337.338727][T16683] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1337.374231][T16855] __nla_validate_parse: 7 callbacks suppressed [ 1337.374253][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12072'. [ 1337.380910][T16683] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1337.404216][T16683] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1337.435630][T16855] bond1: Invalid ad_actor_system MAC address. [ 1337.435669][ T5840] Bluetooth: hci1: command tx timeout [ 1337.462167][T16855] bond1: option ad_actor_system: invalid value (1) [ 1337.470908][T16855] bond1 (unregistering): Released all slaves [ 1337.747411][T16880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12077'. [ 1337.836559][T16683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.907118][T16683] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.007786][T30196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.015067][T30196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.038190][T16889] tc_dump_action: action bad kind [ 1338.056940][T30196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.064239][T30196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.246906][T16897] bridge0: port 3(ipvlan0) entered blocking state [ 1338.272670][T16897] bridge0: port 3(ipvlan0) entered disabled state [ 1338.281151][T16897] ipvlan0: entered allmulticast mode [ 1338.287673][T16897] bridge0: entered allmulticast mode [ 1338.307319][T16897] ipvlan0: left allmulticast mode [ 1338.332722][T16897] bridge0: left allmulticast mode [ 1338.470346][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12086'. [ 1338.556268][T16683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.752523][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12089'. [ 1338.767205][T16921] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12089'. [ 1338.779639][T16921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12089'. [ 1338.906664][T16927] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1339.067805][T16683] veth0_vlan: entered promiscuous mode [ 1339.113378][T16683] veth1_vlan: entered promiscuous mode [ 1339.201687][T16683] veth0_macvtap: entered promiscuous mode [ 1339.226189][T16683] veth1_macvtap: entered promiscuous mode [ 1339.284981][T16683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.317901][T16683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.330851][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12097'. [ 1339.367027][ T7149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.408113][ T7149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.439232][ T7156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.491750][ T7156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.513819][ T5840] Bluetooth: hci1: command tx timeout [ 1339.521043][T16952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12098'. [ 1339.553924][T16952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12098'. [ 1339.861734][ T7149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.883947][ T7149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.093525][T16979] syzkaller1: entered promiscuous mode [ 1340.099085][T16979] syzkaller1: entered allmulticast mode [ 1340.123266][T30197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.139598][T30197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.294525][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12105'. [ 1340.367379][T16990] pimreg: entered allmulticast mode [ 1340.530133][T16996] x_tables: duplicate underflow at hook 3 [ 1340.875830][T17020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1341.304274][T17048] netlink: 'syz.2.12123': attribute type 1 has an invalid length. [ 1341.348369][T17048] xt_TCPMSS: Only works on TCP SYN packets [ 1341.585464][ T5840] Bluetooth: hci1: command tx timeout [ 1341.610113][T17067] xt_hashlimit: size too large, truncated to 1048576 [ 1341.893623][T17080] netlink: 'syz.2.12130': attribute type 3 has an invalid length. [ 1342.060682][T17080] syzkaller0: entered promiscuous mode [ 1342.072843][T17080] syzkaller0: entered allmulticast mode [ 1342.456959][T17116] __nla_validate_parse: 6 callbacks suppressed [ 1342.456996][T17116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12141'. [ 1342.495505][T17117] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12142'. [ 1342.584980][T17122] bond1: option all_slaves_active: invalid value (222) [ 1342.607238][T17122] bond1 (unregistering): Released all slaves [ 1342.700862][T17132] syzkaller0: entered promiscuous mode [ 1342.719583][T17132] syzkaller0: entered allmulticast mode [ 1342.738245][T17132] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1342.953217][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12149'. [ 1343.053695][T17150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12151'. [ 1343.238054][T17158] syzkaller1: entered promiscuous mode [ 1343.244191][T17158] syzkaller1: entered allmulticast mode [ 1343.274492][T17158] netlink: 'syz.2.12154': attribute type 33 has an invalid length. [ 1343.315384][T17158] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1343.366034][T17158] bond2 (unregistering): Released all slaves [ 1343.821185][T17136] erspan0: entered promiscuous mode [ 1343.833475][T17136] erspan0: entered allmulticast mode [ 1343.970524][T17191] netlink: 'syz.1.12164': attribute type 1 has an invalid length. [ 1344.004922][T17191] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12164'. [ 1344.025980][T17193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12165'. [ 1344.035765][T17193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12165'. [ 1344.049738][T17191] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12164'. [ 1344.072897][T17191] netlink: 'syz.1.12164': attribute type 1 has an invalid length. [ 1344.082654][T17191] netlink: 634 bytes leftover after parsing attributes in process `syz.1.12164'. [ 1344.119856][T17198] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12166'. [ 1344.276644][T17204] wireguard0: entered promiscuous mode [ 1344.310806][T17204] wireguard0: entered allmulticast mode [ 1344.354150][T17210] netlink: 'syz.4.12168': attribute type 15 has an invalid length. [ 1344.709098][ T25] block nbd6: Possible stuck request ffff888027018000: control (read@0,1024B). Runtime 210 seconds [ 1344.724899][ T25] block nbd6: Possible stuck request ffff888027018200: control (read@1024,1024B). Runtime 210 seconds [ 1344.738830][ T25] block nbd6: Possible stuck request ffff888027018400: control (read@2048,1024B). Runtime 210 seconds [ 1344.750577][ T25] block nbd6: Possible stuck request ffff888027018600: control (read@3072,1024B). Runtime 210 seconds [ 1345.334119][T17265] tipc: New replicast peer: 255.255.255.255 [ 1345.340938][T17265] tipc: Enabled bearer , priority 10 [ 1345.355240][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079331000: rx timeout, send abort [ 1345.365912][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079331000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1345.696431][T17278] netlink: 'syz.4.12194': attribute type 1 has an invalid length. [ 1345.705058][T17278] netlink: 'syz.4.12194': attribute type 2 has an invalid length. [ 1345.779225][T17281] vlan1: entered promiscuous mode [ 1345.811594][T17281] vlan1: entered allmulticast mode [ 1345.971493][T17291] [ 1345.973902][T17291] ====================================================== [ 1345.980986][T17291] WARNING: possible circular locking dependency detected [ 1345.988082][T17291] syzkaller #0 Not tainted [ 1345.992520][T17291] ------------------------------------------------------ [ 1345.999567][T17291] syz.1.12196/17291 is trying to acquire lock: [ 1346.005753][T17291] ffffffff8fd4d058 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1346.015130][T17291] [ 1346.015130][T17291] but task is already holding lock: [ 1346.022529][T17291] ffff8880b0ffcd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1346.031983][T17291] [ 1346.031983][T17291] which lock already depends on the new lock. [ 1346.031983][T17291] [ 1346.042412][T17291] [ 1346.042412][T17291] the existing dependency chain (in reverse order) is: [ 1346.051463][T17291] [ 1346.051463][T17291] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1346.059493][T17291] _raw_spin_lock_bh+0x36/0x50 [ 1346.064815][T17291] nr_rt_device_down+0x153/0x860 [ 1346.070308][T17291] nr_device_event+0x137/0x150 [ 1346.075626][T17291] notifier_call_chain+0x1be/0x400 [ 1346.081303][T17291] __dev_notify_flags+0x16d/0x310 [ 1346.087021][T17291] netif_change_flags+0xe8/0x1a0 [ 1346.092523][T17291] dev_change_flags+0x130/0x260 [ 1346.097930][T17291] dev_ioctl+0x7b4/0x1150 [ 1346.102838][T17291] sock_do_ioctl+0x23e/0x320 [ 1346.108068][T17291] sock_ioctl+0x5c6/0x7f0 [ 1346.112946][T17291] __se_sys_ioctl+0xfc/0x170 [ 1346.118088][T17291] do_syscall_64+0x14d/0xf80 [ 1346.123223][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.129932][T17291] [ 1346.129932][T17291] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1346.137795][T17291] _raw_spin_lock_bh+0x36/0x50 [ 1346.143126][T17291] nr_rt_device_down+0xbe/0x860 [ 1346.148545][T17291] nr_device_event+0x137/0x150 [ 1346.153854][T17291] notifier_call_chain+0x1be/0x400 [ 1346.159524][T17291] __dev_notify_flags+0x16d/0x310 [ 1346.165098][T17291] netif_change_flags+0xe8/0x1a0 [ 1346.170604][T17291] dev_change_flags+0x130/0x260 [ 1346.175999][T17291] dev_ioctl+0x7b4/0x1150 [ 1346.180891][T17291] sock_do_ioctl+0x23e/0x320 [ 1346.186031][T17291] sock_ioctl+0x5c6/0x7f0 [ 1346.190922][T17291] __se_sys_ioctl+0xfc/0x170 [ 1346.196071][T17291] do_syscall_64+0x14d/0xf80 [ 1346.201215][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.207711][T17291] [ 1346.207711][T17291] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1346.215674][T17291] __lock_acquire+0x15a5/0x2cf0 [ 1346.221083][T17291] lock_acquire+0xf0/0x2e0 [ 1346.226064][T17291] _raw_spin_lock_bh+0x36/0x50 [ 1346.231565][T17291] nr_remove_neigh+0x25/0xe0 [ 1346.236716][T17291] nr_add_node+0x1e41/0x2630 [ 1346.241859][T17291] nr_rt_ioctl+0xe59/0xf90 [ 1346.246846][T17291] sock_do_ioctl+0x101/0x320 [ 1346.252092][T17291] sock_ioctl+0x5c6/0x7f0 [ 1346.257075][T17291] __se_sys_ioctl+0xfc/0x170 [ 1346.262250][T17291] do_syscall_64+0x14d/0xf80 [ 1346.267491][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.273951][T17291] [ 1346.273951][T17291] other info that might help us debug this: [ 1346.273951][T17291] [ 1346.284242][T17291] Chain exists of: [ 1346.284242][T17291] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1346.284242][T17291] [ 1346.298132][T17291] Possible unsafe locking scenario: [ 1346.298132][T17291] [ 1346.305612][T17291] CPU0 CPU1 [ 1346.311266][T17291] ---- ---- [ 1346.316652][T17291] lock(&nr_node->node_lock); [ 1346.321446][T17291] lock(nr_node_list_lock); [ 1346.328614][T17291] lock(&nr_node->node_lock); [ 1346.335948][T17291] lock(nr_neigh_list_lock); [ 1346.340774][T17291] [ 1346.340774][T17291] *** DEADLOCK *** [ 1346.340774][T17291] [ 1346.348942][T17291] 1 lock held by syz.1.12196/17291: [ 1346.354166][T17291] #0: ffff8880b0ffcd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1346.364139][T17291] [ 1346.364139][T17291] stack backtrace: [ 1346.370060][T17291] CPU: 0 UID: 0 PID: 17291 Comm: syz.1.12196 Not tainted syzkaller #0 PREEMPT(full) [ 1346.370084][T17291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1346.370097][T17291] Call Trace: [ 1346.370105][T17291] [ 1346.370114][T17291] dump_stack_lvl+0xe8/0x150 [ 1346.370144][T17291] print_circular_bug+0x2e1/0x300 [ 1346.370180][T17291] check_noncircular+0x12e/0x150 [ 1346.370209][T17291] __lock_acquire+0x15a5/0x2cf0 [ 1346.370244][T17291] lock_acquire+0xf0/0x2e0 [ 1346.370265][T17291] ? nr_remove_neigh+0x25/0xe0 [ 1346.370301][T17291] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1346.370320][T17291] ? nr_remove_neigh+0x25/0xe0 [ 1346.370350][T17291] _raw_spin_lock_bh+0x36/0x50 [ 1346.370369][T17291] ? nr_remove_neigh+0x25/0xe0 [ 1346.370392][T17291] nr_remove_neigh+0x25/0xe0 [ 1346.370417][T17291] nr_add_node+0x1e41/0x2630 [ 1346.370442][T17291] ? nr_call_to_digi+0x126/0x1b0 [ 1346.370465][T17291] nr_rt_ioctl+0xe59/0xf90 [ 1346.370491][T17291] ? kasan_quarantine_put+0xbb/0x1f0 [ 1346.370510][T17291] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1346.370536][T17291] ? apparmor_capable+0x126/0x170 [ 1346.370559][T17291] ? capable+0x88/0xe0 [ 1346.370581][T17291] ? nr_ioctl+0x1b1/0x3b0 [ 1346.370599][T17291] sock_do_ioctl+0x101/0x320 [ 1346.370625][T17291] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1346.370648][T17291] ? do_futex+0x395/0x420 [ 1346.370675][T17291] sock_ioctl+0x5c6/0x7f0 [ 1346.370700][T17291] ? __pfx_sock_ioctl+0x10/0x10 [ 1346.370723][T17291] ? __fget_files+0x2a/0x420 [ 1346.370737][T17291] ? __fget_files+0x3a0/0x420 [ 1346.370751][T17291] ? __fget_files+0x2a/0x420 [ 1346.370766][T17291] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1346.370788][T17291] ? __pfx_sock_ioctl+0x10/0x10 [ 1346.370811][T17291] __se_sys_ioctl+0xfc/0x170 [ 1346.370832][T17291] do_syscall_64+0x14d/0xf80 [ 1346.370853][T17291] ? trace_irq_disable+0x3b/0x150 [ 1346.370868][T17291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.370885][T17291] ? clear_bhb_loop+0x40/0x90 [ 1346.370910][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.370928][T17291] RIP: 0033:0x7f883d19c819 [ 1346.370945][T17291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.370960][T17291] RSP: 002b:00007f883e0fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.370979][T17291] RAX: ffffffffffffffda RBX: 00007f883d416090 RCX: 00007f883d19c819 [ 1346.370992][T17291] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000005 [ 1346.371004][T17291] RBP: 00007f883d232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1346.371015][T17291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1346.371026][T17291] R13: 00007f883d416128 R14: 00007f883d416090 R15: 00007ffe695bb088 [ 1346.371048][T17291] [ 1346.651892][ T9361] tipc: Node number set to 580999691 [ 1346.789763][T17287] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280