last executing test programs: 2m45.180416101s ago: executing program 2 (id=4936): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x65b) (async) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x65b) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r1, &(0x7f0000000500)={0x1d, 0x0, 0x1, {0x0, 0xf0}, 0xfe}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r8, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8025}], 0x1, 0xc0) recvmsg(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x40010040) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r6, 0x0, {0x2, 0x1, 0x7}, 0xff}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r6, 0x0, {0x2, 0x1, 0x7}, 0xff}, 0x18) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000140)='westwood', 0x2c) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000200)=0x3d9c8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0xe, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYBLOB="53a4eabfa37599b053f61afbe0806fff4d25d7171269", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES16=r9, @ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) 2m44.229080453s ago: executing program 2 (id=4948): syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xffffff, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x5, 0x8, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0xd8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x4800) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m43.728122603s ago: executing program 2 (id=4956): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x0, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x4000}, 0x0) 2m43.597806614s ago: executing program 2 (id=4957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket(0x10, 0x3, 0x0) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd1, 0x9, 0x3, 0x0, 0x5, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) r10 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) writev(r12, &(0x7f0000000380)=[{&(0x7f0000000040)="3700000013", 0x5}], 0x1) connect$can_bcm(r10, &(0x7f00000005c0), 0x10) recvmmsg(r10, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d00)=""/119, 0x77}, {0x0}], 0x2}, 0x3}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m42.201170286s ago: executing program 2 (id=4973): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x7, 0xe47}, @sack_perm, @window={0x3, 0x0, 0x1}, @window={0x3, 0x91, 0x6}, @mss={0x2, 0x800}], 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m42.127585256s ago: executing program 2 (id=4974): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000005474453dd", @ANYRES32=0x0, @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 2m27.039656709s ago: executing program 32 (id=4974): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000005474453dd", @ANYRES32=0x0, @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 15.201771166s ago: executing program 3 (id=6325): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="d2ff03076003008cb89e08f086dd61f801a4aa1657fd215c0fe0286ef0c3832a800c916d655d8f3df0bf1da21fdd4cf529d12d0180f8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 9) 14.683229062s ago: executing program 3 (id=6330): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000025c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x1], 0x4, 0x1}, {0x0, [0x4, 0x11, 0x5, 0x1], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xffffff00, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001300010000000000000000007f00000100000000000000000000000000000000000000000000ffffe000000200000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0010000000ee934dbc8961fe65eec3406c3806c5000000000000000000ffe900000000000400000000000000000000080000000000000000000000000000000000c6aae78912c59da9c4d8c2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0010000800080000000000fec5239e214401f87434ea0187473561f40eb5d900000000000000"], 0xc4}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [], "13d86558da0a7f6b"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [], "13d86558da0a7f6b"}}}}}}}, 0x0) 6.1673115s ago: executing program 4 (id=6389): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) (async) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200", @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}, @generic="18c65db2"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (rerun: 64) 5.187993199s ago: executing program 4 (id=6395): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812007000000128008000100677470001400028005000600100000000800030000000020"], 0x40}}, 0x28000000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812007000000128008000100677470001400028005000600100000000800030000000020"], 0x40}}, 0x28000000) 5.061538893s ago: executing program 5 (id=6396): r0 = socket(0x11, 0x6, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000020901030000000000000005100002000c000280050001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x7f, 0xffff, 0xb9, 0x2, 0xfffffffffffffff7, 0xdb7]}, &(0x7f0000000040)=0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 3.926683587s ago: executing program 3 (id=6397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.871556007s ago: executing program 3 (id=6398): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 1.844080625s ago: executing program 1 (id=6399): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x35dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffffffd}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.805724239s ago: executing program 1 (id=6400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x6c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async) 1.71715074s ago: executing program 1 (id=6401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@acquire={0x128, 0x17, 0x1, 0x70bd29, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0xff}, @in6=@mcast1, {@in=@rand_addr=0x64010101, @in=@local, 0x4e22, 0x0, 0x4e24, 0xe0ec, 0x2, 0x80, 0x0, 0x32}, {{@in=@local, @in=@loopback, 0x4e24, 0x9, 0x4e23, 0x5, 0x2, 0x80, 0x20}, {0x9, 0x40000003, 0x800, 0x7, 0x5, 0x2, 0x9, 0x1ff}, {0x27b, 0x2, 0x6, 0x4000000000000}, 0x3, 0x6e6bbd, 0x0, 0x0, 0x2}, 0x5, 0x0, 0x7, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x8c0}, 0x2000) 1.603528472s ago: executing program 1 (id=6402): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000100)=0x3) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 1.177081818s ago: executing program 4 (id=6403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8020201}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x118, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'wg1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9b83}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_hsr\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4851}, 0x8000) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)={0x30, r2, 0x10, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1.012225171s ago: executing program 1 (id=6405): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="192c61024068a4e7", 0x8}, {&(0x7f0000000240)="794cfa63c2e62595358de69dca6f", 0xe}, {&(0x7f0000000300)="86fe502ecf40f04481c48b1bc08e4dc168ea18d4", 0x14}, {&(0x7f0000000700)="62729a4adfdb01a6ae312007d33401102050e7aae2be215bf2566064c95bf64d96bfa850e9c3c9cb17d5bc6247232132b58783cfe22de2f2f98173b6f19e5f739f78899c241d79991dc859e0f6cdc24e2ee429d9f54816fbdf28bfecb244169990393dd21670d43704bedff66b7ea06523a6a0d797d5c3b5aedc1bff2f11ec4069138517733d2e3ff633b1ff41165fd32baf0797652d75f9429eb60790c7addfc5d5faad041115b33913e8e22e5787", 0xaf}], 0x4, 0x0, 0x0, 0x34044005}, 0x24004141) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/117, 0x75}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000840)=""/75, 0x4b}], 0x3}, 0x7fb}], 0x1, 0x40000160, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c001000cac24fc7d6948a20636446080057c6dcdbafa82c38a501b4f76eb9ec491009a5147f0a8017c1298dce21afe4c8a9a4b08dfd69f4ae040a9a29b35d57b2c9c123812a794f8495d9040a0ae083d21d66453f8a1f75f79424ff1284b31a95ab4b2c23066eb81e2131e25963b48e0fa6732acc496bef97f3964a2cce7a5e7b6abcdee1f85715c99974fbd2b7b072829dd2f6c9edd808b96b89d9178f20c39cb1c4a74ec6b9b57ab37761cc70d3ff01d17c1bc1a38bad2f0ff5059cdc3fb3497d66bb49081bef222ae4bc49930e7a48c2a4386a1a1f33cf7bb30293f14f40b6dda984ff5ac762e6bbf07c3ea99909f902f406f41c263be8d236d47a094d0d4844db2f1f492eb9d2a506410dbb84ba5f5262b136fba01af9b90ba8e724321b2f2c8a224be1a0f2af937ebcb7bfa5dbe75678fd4e579540c01d676daac86976dd25f5a6e07bb3fb2ddc8248e7e83afc3813871871c6c9c426dce260333f6c7ebfc27552e5a1fe76ef52936f694c229dfb48937b51f08fc99bd751dec8754964cd7985595a2a0d942fc942611170c75a7a653650dbfdb7001b0190c708d35e1983ed1e23a064843f10cfa9411f4b2e561297d3990ac8cf62b319159a1ad2934eef139b40354fa1e2e70719f1f4d8fcbed921feab2f7822581947c8d6a3673b7e21265d9324fd79299efdd6c45597e61e128b00b0cf4b170d085bdda57af46e42529d0e33c9c75bd20bf0411d1e834222f8b8015b5208d88e8ece518a16582ec477224c94785f9694ddaf7f608cb43af25baea7b396220fcff6ad26e87f9c44e872304af4c1d3dc246cb7f7525676e13398c743acbf97168c58c877e0b3e33315909abb6602c3981f177a166aa18b8aa2b26d5e0c80ffff0000b27b53149313191d98bcdd6aece1920485939b40a9fefa0f54e50798ffee1ef70d", @ANYRES16=r6, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r5, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x68, 0x10, 0x403, 0x2fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x68}}, 0x8000) 1.011701147s ago: executing program 5 (id=6406): r0 = socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000280)={0x7, 0x2, 0x9}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020c37050300000029bd7000fcdbdf2501001400ff0008001721e8630c349807d307166e4cd50a78c43e84ded86051028e580f855b076553b0abeec058186920ad28beed556135c1d04af95fef68a435f9ae7fad10ff2871a8e895f96e44126e9eaf391ff4914b7ab0aabf1cb75732739ffc53b89ef6097c6de5c078cd106592e67467e91d3e8a1561ea98e63bd38c4679aee12a9ae52b580d186c75e7589b4ec11f3277a91b62c1b2f119b663b8bed762b6985e0943c2ef1720b99d1c867f3dad2fe61b6e083ae6a4889bf14fee42a50509a2b50298aee886d129c2f0fcd819010a73"], 0x18}}, 0x40084) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000ef00002400000024000000050000000200000002000093010000000300000001000000ffffff7f01000000050000000500000000615f5f00"], &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28) 967.767799ms ago: executing program 0 (id=6407): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$unix(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xffffffffffffffea}], 0x1}}], 0x1, 0x0) 915.803053ms ago: executing program 5 (id=6408): r0 = socket$kcm(0x2, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) 784.479133ms ago: executing program 0 (id=6409): r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000580)={r1, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 737.521005ms ago: executing program 4 (id=6410): r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8, 0x700, 0x800, 0x2, {{0x23, 0x4, 0x1, 0x3, 0x8c, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x83, 0xf, "d07aa7ee12ce2f0e994d6575a0"}, @ssrr={0x89, 0x7, 0x88, [@broadcast]}, @timestamp_addr={0x44, 0x3c, 0xef, 0x1, 0x9, [{@local, 0x6}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d0}, {@local, 0x2}, {@remote, 0xffff7fff}, {@broadcast, 0x3}, {@rand_addr=0x64010101, 0x401}]}, @lsrr={0x83, 0x13, 0xe, [@remote, @private=0xa010101, @broadcast, @private=0xa010102]}, @rr={0x7, 0x7, 0xcb, [@dev={0xac, 0x14, 0x14, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x80, 0x8048, 0xd326, 0x4f032a59, {{0x2e, 0x4, 0x0, 0x9, 0xb8, 0x66, 0x0, 0xd8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, {[@timestamp_prespec={0x44, 0x24, 0xad, 0x3, 0xc, [{@multicast2, 0xff}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x3ff}, {@empty, 0x4e}, {@multicast1, 0xfffffffc}]}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x2, 0x4, "efed"}, {0x43867be3d1ad6a14, 0xb, "09649fe125bd154cb2"}, {0x7, 0xe, "713736e62f441c18bb11241f"}, {0x1, 0xf, "c1ef0e9879ec2f1b176a8b67b4"}, {0x0, 0x2}, {0x0, 0x12, "afb8aa3bc2094d412fb94f22aa27db1a"}, {0x0, 0x9, "ec53adc840beed"}]}, @cipso={0x86, 0x31, 0x0, [{0x7, 0x4, "be84"}, {0x6, 0x7, "5014744308"}, {0x0, 0x9, "7115516f358a96"}, {0x4, 0x4, "478b"}, {0x7, 0xd, "db32bad266f7a53d594ca1"}, {0x2, 0x6, "ebceba6f"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x700, 0x3f, 0x4, {{0xe, 0x4, 0x3, 0x2, 0x38, 0x64, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end, @rr={0x7, 0xb, 0x93, [@broadcast, @remote]}, @lsrr={0x83, 0x13, 0x8e, [@dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @remote, @multicast1]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x36, 0xef, 0x4, 0x34, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x2, 0x8}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40081}, 0x1) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000ac0)=""/127, 0x7f}], 0x2}, 0x9}], 0x2, 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 649.377685ms ago: executing program 3 (id=6411): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000980)=""/4094, 0xffe}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r4 = socket$xdp(0x2c, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="8e6463e22f866a36abc5a53be29b3490a91fc4591369b56816af964be4f8a793bd72095ee85f41d081596ec5594ec449bc5d20538378407316a641cf01e94e9e024f362ab503e8ad3e63fc713e87bfb8577dc6c1011d005fda0fc2f9950be8cb578ec367b5ae0b0a572d074b83e6eb6b249793eaae2f588659012866f9ab8f587e31b30c669ba117cf8ce2a0e6d96b60952f7d50cf336315fa36a75557e62180f9be349a2052d5c2e43213203f664baaccb8e82c837e76fa28c3b4388ec4b2b116eec967baa6f7d7", 0xc8, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback, 0x200}, 0x1c) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) 568.483518ms ago: executing program 0 (id=6412): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x1500) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910434000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 558.464561ms ago: executing program 1 (id=6413): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x7fff}], 0x10, 0x8800}, 0x4000000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getpeername$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006bc0)=@newtfilter={0x3864, 0x2c, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xffe0}, {0xfff2, 0xa}, {0xfff3, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @filter_kind_options=@f_basic={{0xa}, {0x37e4, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff8}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x4}, {0x7, 0x3, 0x1, "1089b9"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x5}, {0xe, 0x8, 0x2, "879a0d982514bdbd"}}}]}]}, @TCA_BASIC_POLICE={0x24, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb3d4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BASIC_ACT={0xba8, 0x3, [@m_xt={0x290, 0x0, 0x0, 0x0, {{0x7}, {0x170, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xdd, 0x6, {0xb, 'nat\x00', 0x40, 0x5, "6bbbc817933b9dcb27fe6c11881a7deb74bca10362c2b43ff6490caa0e61079329a524e616b60793817beb41df39ffbed316be87c03ae6d8db4e36030eb78730ea54af6e37f569fbf9abad7899631a8abed5dede4ef173ab2362f53214f434f74719d667e6cfeeb0c9c3ad813035a92f6bb8c60f6c776b6764d5c10994663f5a31ee84b0b8986b85882b176291fc187d266e76ca21287d3dc4cf8e39a5722df7c5851c61178ed42185e571bebbdfff1089d304"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xc}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xfa, 0x6, "1e5f50ed94d89e827f72eb39b393d28411a0073b6d4720bca6ba7c3c450e82d3a45b5d8ca3951dfb70fafc4ba764e78c83719ab6ea4aa560246113c442c01051b544de90d1abc1c5d8921acbfccf38364da358a50f3ff83135fdd9ac8d9ee93dddec86ba3bee9957ecfda9cf2a57e9ffb680ff35ea5c5b756ab487b98060fb1370eda6f6d7e27b7b92ceb808884112a66e1ce94f933c1d9a2f6ca8da867347957b4ddbbb766f4b1e85edf824a9ff6bed85cc3fe41a26e0202314caa19a92b51abb2545ded1c76c7fe942ccb2f2f69efa456170980189bd4433ab72e8ea3537aa233ac947e69d474169d506d83a141d21ec43f1969a1b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x258, 0x6, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x750, 0x500000, 0x3, 0x3, 0x1}, @broadcast, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffa, 0x4e93, 0x5, 0x7fffffff}, @empty, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xeffa, 0x6, 0x941, 0x6c4}, @broadcast, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8000, 0x20000000, 0x1, 0x6}, @empty, @private=0x8001, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x9, 0x8, 0x8001, 0x6c5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x0, 0x1, 0xcb, 0x7fffffff}, @broadcast, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1000, 0x8, 0x1000, 0x4}, @loopback, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff21, 0x3, 0x0, 0x20, 0x101}, @local, @broadcast, 0xffffff00}}]}, {0xef, 0x6, "56be97ec851e4be3363e14dec04e5308537b5cc1a1234d655d09bbaad0953813ebfd5f84f9dbaec2d22213fa5442d3bcb9b3a97dca80bebe1349b9562e8550d5415b146e6fe29950404fffa436b7b6e6f4707323c02107df7bd78846e7ec193e24186f62c895647999490540bb19eb1e0b6a8189d3edd2f9048d6f3ffc7b5de8da3ee5310a10799cc3f59a8586b5b78de69e16f160620fa15c148fbdf9a3dbde989f9eb83c124d3cfb30f87fe2803ca5413a489a5ff09f8f4fed30a92a7c8313cab29d497a73cde099bc471f7689df540b9e1a9f72cac943084e5ca045a1d4f20e65b5f14c6aca7e72046b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x160, 0x0, 0x0, 0x0, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x40}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x95e}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x400}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x1, 0xffffffffffffffff, 0x7, 0x10000}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x18, 0x0, 0xffffff66, 0x7}}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x40}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, {0x55, 0x6, "cfe203bd24d13e4ffd6cf05d2a2e080ad642684d264dc5bc2eff9f29b9c442cd9e0e244d48825eb940f0f1720c5668ac1b576cb78c02deb1da29a3c0e14a1f9a2a0f5e69b2d504fcd627e5a1ad0ab65015"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0xac, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1, 0x1, 0x1, 0xfffffffa}, @loopback, @private=0xa010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x6, 0xf, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x40}, 0xff, 0x1}}]}, {0x34, 0x6, "aa1c6fb7ba673d87cc735e31cffb4fa4079f2b9adca682f716471c2b4951c20d08dec1069ffd2a727a774a071fb54d94"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xec, 0x7, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x0, 0x4, 0x6, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x26, 0xe8bbabe94593d0a1, 0xb9a, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc39, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x54e, 0x5}}]}, {0x76, 0x6, "fc2e80b8ec1c124f4579d9b1b3e0c32082608f3713237fafacf398198e8a2277e5749e9a32c33bb085523cd61d65fc56ec46f5b8ecf805f46ba3ddd89e6b5e0fd53a50a32ee9a9c68fccdae1743d92f963258472dc470addb0d9efd3f79d7ab20e30011b9f99651d6289cd1d09ca4f7e616f"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xa0, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}]}, {0x69, 0x6, "cf70c87c01f1105b11c0c1fcfa6941327a4e3d0a75bc6da67570ca4daf5e9088af50625fbd46e33428969bb279dbb3d84aaf8a2d017d56e0d4bc67c927aca8f0d29a5c0128c933c5b4d1cc8213de81e6ccaf6443f6d761c5926c00fbe731a0f81a7b5df272"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x20c, 0x5, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0xff, 0x10000000, 0x5, 0x5}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x0, 0x1}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x888, 0x0, 0xa, 0x8}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc0000000, 0x7, 0x6, 0x4, 0x2}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x20000000, 0x5459, 0x6db}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0xa, 0x3, 0x1, 0xf3}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0xffffffffffffffff, 0xfb, 0x80}, 0x2000000f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x3, 0x5c8bd6c}, 0x3b}}]}, {0xfd, 0x6, "7f2f3713344fc88bc9e573151d2752265dc732f79c15afa682835422dc3a5868622cdda8381e462a173fd565ffbe74fbf3ffa1c1cb2456f4a8319fabf36774c21910bed656a2b6ecca8a05a6d136beec545e2b558b42b73d12d2710fc781e5cbbceea36012de3a335db0483a7b665704fa2c8089bda9b7aab02f8b9380abc3ba1c54f6f8f1b519de5e85ef169a2ffdbb3c65ba1a76f8b059ada74da515560b5873d01c757d9dfdcb1df23eccfef13ce7c76a94203cc15b72f3c2ad6c2df2d0fc3ac813137945fd567c410a53dae4edf905fa4513ac699c3acd24b91782881b2551da159251bb7a602a1442620cfd49c647342deb146d16bbb7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xac, 0x12, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xfffffff8, 0x0, 0x3, 0x1}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa6f, 0x0, 0x1, 0x8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x5787, 0x1, 0x0, 0x7265}}}]}, {0x25, 0x6, "eb38a5c01d4bed074102435de9960a974315484d8f6f6093924930d452d0b110d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x6c, 0x2, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x38}}, @TCA_CT_ZONE={0x6, 0x4, 0x6f}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7fff}]}, {0x1c, 0x6, "b63560771af51a9c307df994ea4886b9de3528ae17435151"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_BASIC_POLICE={0x85c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x1, 0xfffffffc, 0xffff, 0xaec0, 0xcc, 0x4315, 0x5b, 0x3, 0x0, 0x9, 0x2, 0x452, 0x8, 0xfffffff7, 0xbacc, 0x8, 0x0, 0x3, 0xfffff6bc, 0x59, 0x5, 0x0, 0x6, 0x2, 0x800, 0x20, 0x7a13, 0x7a, 0x8000, 0x1, 0x4, 0x1000, 0x781a, 0x6, 0x10001, 0x4, 0x0, 0x3, 0x7, 0x4, 0x731689f8, 0x80000000, 0x4, 0x1, 0x0, 0x5, 0x6, 0x4, 0x4, 0x8, 0x1, 0x6, 0x800, 0xc75, 0x10001, 0x9, 0xdcf, 0x8, 0x0, 0x2, 0x80, 0x55, 0x3d61, 0x8, 0x6, 0x48a3, 0xbc3f, 0x0, 0x8, 0xb, 0x786, 0x5, 0x30, 0x800, 0x8001, 0x6, 0x120, 0x5, 0x1, 0x3, 0x10, 0xb, 0x0, 0x6, 0x9, 0x0, 0x1, 0x7, 0x9, 0x9, 0x1ff, 0xd925, 0x5bba, 0x4, 0x4, 0x5, 0x6, 0x3ff, 0x3, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0x3, 0x0, 0x6, 0xfffffffc, 0x2, 0xb, 0x20cd, 0x3, 0x3, 0x2, 0x5, 0x400, 0x5, 0x40000000, 0x4, 0xfffffff2, 0x3, 0x1000, 0x6, 0x1, 0x9e2, 0x1, 0x3159, 0x1, 0x4, 0xcf1d, 0x3, 0x8ea4, 0xd, 0x8, 0x101, 0x2, 0x1, 0x16, 0x5f8, 0x3b5a, 0xe, 0xfffffeff, 0x4, 0x81, 0x8, 0x4, 0x9476, 0x10, 0x3, 0x4, 0x20000000, 0x0, 0xce, 0xff, 0x3ff, 0x4, 0x6, 0x2830, 0x7, 0x7, 0x1, 0x0, 0x48, 0x2, 0x3, 0x0, 0xff, 0x1, 0xf, 0x7fff, 0x5, 0x5, 0xfffffff0, 0x3, 0x432, 0x1, 0x0, 0x6, 0xc000, 0x8, 0x1, 0x80000000, 0x40, 0x8, 0xb16, 0x100, 0x2, 0x7, 0xfffffff7, 0xffff, 0x1, 0x2, 0x0, 0x9, 0x4, 0x200, 0x1, 0x200, 0x3, 0x2, 0x2, 0x4, 0x6, 0x3, 0x81, 0x99, 0x35, 0x9, 0x2, 0xffffffff, 0x4, 0xfffffffc, 0xfdf6, 0x101, 0x6, 0x3, 0xe, 0x9, 0xe, 0x1000, 0x9da8, 0x9, 0x28, 0x81, 0xfffffffa, 0x7fffffff, 0x7, 0x8, 0x2, 0x7, 0x3, 0x9c, 0xf, 0x6, 0x8, 0x7fffffff, 0xdd66, 0xd, 0x2, 0x7fffffff, 0x9, 0x4, 0x3, 0x4, 0x2, 0x5, 0x9, 0x4, 0x3, 0x1, 0x5, 0x1, 0x9, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xbed, 0x6, 0x10, 0x8, 0x8, 0x10001, 0x4, 0x6, 0x2, 0x7fffffff, 0x0, 0x200, 0x800, 0xc20, 0x0, 0x2, 0x8, 0x4, 0x5, 0xd, 0x4, 0x8000, 0x8, 0x9bf, 0x3ff, 0x8000, 0x4, 0x9, 0xffff, 0x80, 0xff, 0x800, 0x4, 0x380, 0x7, 0x6, 0x5, 0x200, 0x7, 0x1, 0xffff0001, 0x3, 0xffffffff, 0x5, 0x7, 0x9, 0x2, 0x3, 0x7, 0x4, 0x0, 0x8, 0x6, 0xc479, 0xf, 0xed, 0x10001, 0xfffffffb, 0x0, 0x7, 0x8, 0x5, 0x100, 0x9, 0x3ce9, 0x2, 0x6, 0x6, 0x8, 0xfffffffa, 0x1000, 0x3, 0x6, 0x0, 0x7, 0xffff, 0x3, 0x80000000, 0x5, 0xf, 0x80000001, 0x7ff, 0x4, 0xdc88, 0x3, 0xfffffff9, 0x4, 0x8000, 0x7b9e, 0xd3, 0x0, 0x4, 0x4, 0x56b, 0x9, 0x1, 0x0, 0x1, 0x3ff, 0x0, 0x9, 0xfffffff7, 0xaba3, 0x81, 0x5, 0xd, 0xf, 0x5, 0x0, 0x1, 0x6, 0x3, 0x2, 0x9, 0x7, 0x9, 0x4, 0x0, 0x4, 0x6, 0x10001, 0xf, 0x2, 0x1, 0x3, 0xe, 0x765, 0xfffffffb, 0x2, 0x8, 0x4, 0x7, 0x39, 0x0, 0x4983, 0x4, 0x10, 0x7f, 0xffff, 0x0, 0xae13541, 0x5, 0x9, 0xa0, 0x5, 0x4, 0x2, 0x1, 0x1, 0xffffffff, 0x80000000, 0x8, 0x1, 0x4c1, 0xfffffffd, 0x8, 0x5, 0x5, 0x2, 0x8, 0xa25, 0x1, 0x5, 0xbc62, 0x6, 0x7288, 0x7fff, 0x5b, 0x9, 0x10000, 0x8, 0x0, 0x1, 0xa1e, 0x81, 0x562, 0x7, 0x6, 0x3, 0x8, 0x400, 0xa89, 0xffffffc0, 0x28c, 0xffffffc0, 0x4, 0x100, 0x9, 0x80, 0x1000, 0x7, 0x0, 0x5, 0x80000000, 0x6653, 0x10001, 0x9, 0x8, 0x9, 0x5, 0x9, 0xc0000, 0x76f1, 0x9, 0x7fff, 0x5, 0x4, 0x6, 0xc00, 0x2, 0x1, 0x5, 0x1ff, 0x2, 0x1, 0xe, 0x3, 0xff, 0x0, 0x7, 0x3, 0x0, 0x5, 0x6, 0x7f, 0x8001, 0x8, 0x80000000, 0x8000, 0x1, 0x8000, 0x0, 0xffff9946, 0x7, 0x7, 0x4, 0x5, 0x7, 0x7fffffff, 0x5, 0x6, 0x101, 0x9, 0x2, 0x5, 0x40, 0x1, 0x1, 0x4, 0x8, 0x3, 0x26, 0x7, 0xc, 0xee50]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x0, 0x5, 0x8, {0xf9, 0x0, 0x5, 0x200, 0x8, 0xb}, {0x1, 0x2, 0x8, 0x1000, 0x5}, 0x6, 0x5, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_BASIC_EMATCHES={0x1174, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x101, 0x1, 0x99}, {0x8, 0x5, 0xd89, 0x6, 0xb, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0xc}, {0x1b0, 0xd, 0x4, 0x3, 0x3, 0x3, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x73a, 0x7, 0xffff}, {{0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x2}, {0x4, 0x3, 0x1, "34de43"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8f23, 0x8, 0x8}, {0xffffffffffffffff, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x90, 0x1, 0x0, 0x0, {{0x7ff, 0x9, 0x7ff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x73, 0x5, "3b77ecbaa162b91536c276d7e9d3421174cb5ae466a89bf21c42596a615aa6fd79fcec3f46a114403116b600666a7c1700aa1cf35976ffc1cb8c1f9c26eefaad4f8fb72cf3c486940cc7767585a78d2b85e1e40a7760426c8f33987d71f308c24cb2667b2c56c04dd1dfd42ced4bf0"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0xa1c1}, {0x9, 0x6, 0xff80, 0x5, 0x7, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x10fb, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0xc}, {0x7fff, 0xffffffff, 0x6, 0xffffffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x1010, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0xfffe, 0x0, 0x6}, "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"}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff3}}, @TCA_BASIC_ACT={0x11f4, 0x3, [@m_connmark={0xd4, 0x9, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1800, 0x7, 0x3, 0xc56, 0x10000}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x80, 0x4, 0x4317, 0xe}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xffffff80, 0x20000000, 0x5d4, 0x9}, 0x8d47}}]}, {0x50, 0x6, "4052c61d8089861e376e62239a73ee175defadce9e0c0e391c751f224d3b897a6b2c21a49e9d36753600fd9ad4dfda8a211d64ecfe14e818c6c1f4784326735fa4be4aac08f608944d65169d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x64, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9a6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0x15, 0x6, "f994d1586305e7ec02c277e6dc80cdfae2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x64, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1685, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x20e3, 0x2}}]}, {0x1e, 0x6, "66614b5d9853c08feba19be3723548bdf95a1de36d999c37946b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1054, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3ff, 0x2, 0xbd}, @multicast1, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffff00, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x36634324}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x3ffc02}, @TCA_CHAIN={0x8, 0xb, 0x3cb7}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x3864}}, 0x20040845) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r10, 0x401}, 0x8) connect$unix(r3, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x5, r12, 0x1, 0x4, 0x6, @remote}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendto$inet6(r13, &(0x7f00000000c0)="e16104c1e39a2c3b15cb2a933f3feb16c4c8ad333ee7c0a9dded4dac5bafa85b1581deee8de460293612fc7c85a8ffd47fa298a7159633d6033a9b4ba1697f708e4eddc217e5e8d54fc5d91adf23d3abcf94e899ec2c0b132cbe2fe2890ff36702d204567cd7d72f0442498794942f80f6c0f8ba8ab65f3d2f4eae3bdb92b4ef2a61325866c1addc3de81f72e980", 0x8e, 0x1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100}, 0x1c) 499.752189ms ago: executing program 5 (id=6414): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000001c0)={0x8, 'geneve1\x00', {'ip_vti0\x00'}, 0x7}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@gettaction={0x124, 0x32, 0x100, 0x70bd2a, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8a8}}, {0xc, 0x56e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b1}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x124}, 0x1, 0x0, 0x0, 0x8080}, 0x100000c4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendto(r2, &(0x7f0000000300)="f403053d8bf5", 0x6, 0x80c0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "9c88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "0949e1d3eb512ff0"}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="780000001000"/20, @ANYRESDEC=r0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108"], 0x78}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 384.570859ms ago: executing program 5 (id=6415): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000580)}], 0x2, 0x0, 0x0, 0x4000801}], 0x1, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="030000000400000004"], 0x16) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000090000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 295.761583ms ago: executing program 0 (id=6416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='syzkaller\x00', 0xa) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@remote, @rose, @default, @netrom, @remote, @bcast, @default, @netrom]}, &(0x7f00000001c0)=0x48) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0x10, 0x16, 0x0, 0x1, [@nested={0xc, 0x4f, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @pid=r3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000801) 251.535679ms ago: executing program 0 (id=6417): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x44}}, 0x0) 233.355953ms ago: executing program 4 (id=6418): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @remote}}}], 0x20}}, {{&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x2, 0x4000800) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) splice(r0, &(0x7f0000000000)=0xc0, r0, &(0x7f0000000040)=0x7f, 0x9, 0x91bca753f1b5b447) 196.807274ms ago: executing program 5 (id=6419): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8, @remote}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000015c0)=0x1c00) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8, @remote}, 0x1c) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000015c0)=0x1c00) (async) 131.912805ms ago: executing program 3 (id=6420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 76.514898ms ago: executing program 4 (id=6421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000440)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03", 0x0, 0xb7df, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0xffffc000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001140)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd645c374cf4861b8}, {0x8ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=6422): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) unshare(0x22020400) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) (async) ioctl$TUNSETOFFLOAD(r1, 0x8008743f, 0xf0ff1f00000000) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5ad}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)='_j', 0x2}], 0x1}, 0x1) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={r6, 0x2, 0x1, "fa"}, 0x9) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r6, 0x7}, &(0x7f00000000c0)=0x8) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x1, 0x80000, @local, 0xf}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000000000002900000005"], 0x10}, 0x40048d0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x10, 0x0, 0x0, 0x0, 0x95}, 0x9c) kernel console output (not intermixed with test programs): [ 689.134569][T26153] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.842525][T26201] netlink: 'syz.4.5144': attribute type 12 has an invalid length. [ 689.851899][T26201] __nla_validate_parse: 11 callbacks suppressed [ 689.851918][T26201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5144'. [ 690.077713][T22857] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.089433][T22857] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.125288][T22857] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.134108][T22857] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.231333][T22858] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.248826][T22858] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.267393][T22858] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.288323][T22858] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.958328][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 691.255834][T26242] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5155'. [ 691.392623][T26247] xt_bpf: check failed: parse error [ 691.568886][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5157'. [ 691.828324][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 692.200722][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5161'. [ 692.281575][T26266] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5163'. [ 692.296376][T26266] tipc: Enabled bearer , priority 0 [ 692.304544][T26266] syzkaller0: entered promiscuous mode [ 692.311477][T26266] syzkaller0: entered allmulticast mode [ 692.329007][T26266] IPVS: length: 24 != 36888 [ 692.363144][T26266] tipc: Resetting bearer [ 692.378285][T26269] lo: entered allmulticast mode [ 692.383681][T26269] lo: left allmulticast mode [ 692.397000][T26265] tipc: Resetting bearer [ 692.432611][T26265] tipc: Disabling bearer [ 693.669933][T26316] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5177'. [ 693.701163][T17532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.709624][T17532] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 693.717914][T17532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 693.730105][T17532] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 693.739896][T17532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 693.760435][T26316] tipc: Started in network mode [ 693.808230][T26316] tipc: Node identity 92ab6044721c, cluster identity 4711 [ 693.825793][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.834673][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 693.842308][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 693.853647][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 693.867348][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 693.869258][T26316] tipc: Enabled bearer , priority 0 [ 693.914922][T26325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5178'. [ 693.952555][T26326] syzkaller0: entered promiscuous mode [ 693.967534][T26326] syzkaller0: entered allmulticast mode [ 693.998724][T26325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.043157][T26316] IPVS: length: 24 != 36888 [ 694.121623][T26316] tipc: Resetting bearer [ 694.165393][T26314] tipc: Resetting bearer [ 694.239561][T26314] tipc: Disabling bearer [ 694.318282][T26331] netlink: 'syz.4.5179': attribute type 29 has an invalid length. [ 694.627794][T26339] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5181'. [ 694.690523][T26340] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5181'. [ 694.753428][T26344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5182'. [ 694.810704][T26318] chnl_net:caif_netlink_parms(): no params data found [ 695.096889][T26318] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.104277][T26318] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.113049][T26318] bridge_slave_0: entered allmulticast mode [ 695.121580][T26318] bridge_slave_0: entered promiscuous mode [ 695.131118][T26318] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.138579][T26318] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.145917][T26318] bridge_slave_1: entered allmulticast mode [ 695.154499][T26318] bridge_slave_1: entered promiscuous mode [ 695.185763][T26363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5185'. [ 695.195863][T26363] chnl_net:caif_netlink_parms(): no params data found [ 695.260497][T26318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.289022][T26318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.407098][T26318] team0: Port device team_slave_0 added [ 695.433338][T26318] team0: Port device team_slave_1 added [ 695.484421][T26318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.492587][T26318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.528992][T26318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.544348][T26318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.562589][T26318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.589900][T26318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.624083][T26372] netlink: 'syz.4.5189': attribute type 39 has an invalid length. [ 695.672024][T26318] hsr_slave_0: entered promiscuous mode [ 695.680544][T26318] hsr_slave_1: entered promiscuous mode [ 695.687108][T26318] debugfs: 'hsr0' already exists in 'hsr' [ 695.693590][T26318] Cannot create hsr debugfs directory [ 695.726351][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5190'. [ 695.736309][T26379] openvswitch: netlink: Flow actions attr not present in new flow. [ 695.968161][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 695.976224][ C0] lec:lec_tx_timeout: lec0 [ 695.989059][T17532] Bluetooth: hci2: command tx timeout [ 696.036165][T26381] syzkaller0: entered promiscuous mode [ 696.042147][T26381] syzkaller0: entered allmulticast mode [ 696.649683][T26400] netlink: 'syz.0.5195': attribute type 1 has an invalid length. [ 697.991765][T26318] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 698.016314][T26318] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 698.068180][T17532] Bluetooth: hci2: command tx timeout [ 698.083931][T26318] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 698.121453][T26318] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 698.431121][T26318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.567211][T26452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5206'. [ 698.682661][T26318] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.721991][T26455] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5208'. [ 698.840963][T22837] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.848238][T22837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.858492][T26461] netlink: 'syz.4.5208': attribute type 30 has an invalid length. [ 699.157513][T22837] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.164949][T22837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.908212][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 700.066893][T26318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.103912][T26493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5215'. [ 700.148427][T17532] Bluetooth: hci2: command tx timeout [ 700.588569][T26504] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 700.691875][T26504] bond5 (unregistering): Released all slaves [ 700.926683][T26519] syzkaller0: entered promiscuous mode [ 700.951818][T26519] syzkaller0: entered allmulticast mode [ 701.060318][T26526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5221'. [ 701.170002][T26536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5221'. [ 701.380897][T26318] veth0_vlan: entered promiscuous mode [ 701.432674][T26318] veth1_vlan: entered promiscuous mode [ 701.714296][T26554] tipc: Enabling of bearer rejected, already enabled [ 701.747862][T26548] tipc: Resetting bearer [ 701.775006][T26318] veth0_macvtap: entered promiscuous mode [ 701.839966][T26318] veth1_macvtap: entered promiscuous mode [ 701.883026][T26318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.931839][T26318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.963761][T26558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5229'. [ 701.995170][T12061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.018952][T12061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.037945][T12061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.069030][T26567] netlink: 'syz.1.5229': attribute type 7 has an invalid length. [ 702.082389][T26558] macvtap2: entered promiscuous mode [ 702.087866][T26558] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 702.168686][T26564] netlink: 'syz.3.5230': attribute type 1 has an invalid length. [ 702.226898][T22857] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.237623][T17532] Bluetooth: hci2: command tx timeout [ 702.330378][T22858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.338456][T22858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.423373][T22857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.448731][T22857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.588968][T26574] tipc: Enabling of bearer rejected, failed to enable media [ 702.600182][T26581] netlink: 'syz.1.5234': attribute type 10 has an invalid length. [ 702.608316][T26581] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.5234'. [ 702.611040][T26588] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5236'. [ 702.652920][T26588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5236'. [ 702.807601][T26597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5240'. [ 702.819634][T26595] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5239'. [ 702.964393][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5241'. [ 703.180032][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 703.324999][T26630] netlink: 'syz.1.5249': attribute type 12 has an invalid length. [ 703.368091][T26630] netlink: 'syz.1.5249': attribute type 29 has an invalid length. [ 703.641896][T26653] openvswitch: netlink: Missing key (keys=40, expected=80) [ 704.009923][T26661] lec:lec_start_xmit: lec0:No lecd attached [ 704.425434][T26694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.495461][T26690] syzkaller1: entered promiscuous mode [ 704.508790][T26690] syzkaller1: entered allmulticast mode [ 705.508952][ T5830] Bluetooth: hci2: command 0x0405 tx timeout [ 706.050489][T26767] netlink: 'syz.1.5284': attribute type 1 has an invalid length. [ 706.071943][T26767] __nla_validate_parse: 11 callbacks suppressed [ 706.071962][T26767] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5284'. [ 706.315065][T26759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5280'. [ 706.570488][T26784] xt_recent: Unsupported userspace flags (000000b1) [ 706.905449][T26796] netlink: 'syz.5.5292': attribute type 1 has an invalid length. [ 707.012119][T26809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5296'. [ 708.383227][T26858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5301'. [ 708.439489][T26858] hsr_slave_0: left promiscuous mode [ 708.477862][T26858] hsr_slave_1: left promiscuous mode [ 708.523990][T26865] netlink: 'syz.5.5308': attribute type 10 has an invalid length. [ 708.533618][T26866] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5308'. [ 708.776214][T26875] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5310'. [ 709.018064][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 709.026230][ C0] lec:lec_tx_timeout: lec0 [ 709.031095][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 709.059318][T26893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5315'. [ 709.165221][T26899] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5316'. [ 709.295317][T26905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5320'. [ 709.337795][T26907] netlink: 'syz.5.5321': attribute type 2 has an invalid length. [ 709.345829][T26905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5320'. [ 709.567626][T26919] netlink: 'syz.0.5326': attribute type 6 has an invalid length. [ 709.628736][T26919] netlink: 'syz.0.5326': attribute type 2 has an invalid length. [ 709.654647][T26919] netlink: 'syz.0.5326': attribute type 11 has an invalid length. [ 709.760918][T26926] tipc: Enabling of bearer rejected, failed to enable media [ 709.943842][T26941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.987043][T26941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.074462][T26952] netlink: 'syz.5.5333': attribute type 1 has an invalid length. [ 710.920965][T26980] syzkaller0: entered promiscuous mode [ 710.926950][T26980] syzkaller0: entered allmulticast mode [ 710.934295][T26973] bond0: Caught tx_queue_len zero misconfig [ 711.428377][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 711.624916][T26981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.901235][T27004] __nla_validate_parse: 6 callbacks suppressed [ 711.901256][T27004] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5351'. [ 711.930069][T27004] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5351'. [ 712.024037][T27013] FAULT_INJECTION: forcing a failure. [ 712.024037][T27013] name failslab, interval 1, probability 0, space 0, times 0 [ 712.052634][T27013] CPU: 0 UID: 0 PID: 27013 Comm: syz.5.5352 Not tainted syzkaller #0 PREEMPT(full) [ 712.052673][T27013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 712.052694][T27013] Call Trace: [ 712.052702][T27013] [ 712.052712][T27013] dump_stack_lvl+0xe8/0x150 [ 712.052744][T27013] should_fail_ex+0x412/0x560 [ 712.052774][T27013] should_failslab+0xa8/0x100 [ 712.052799][T27013] __kmalloc_noprof+0xde/0x7e0 [ 712.052820][T27013] ? rcu_is_watching+0x15/0xb0 [ 712.052838][T27013] ? security_sk_alloc+0x52/0x360 [ 712.052874][T27013] security_sk_alloc+0x52/0x360 [ 712.052908][T27013] sk_prot_alloc+0x101/0x210 [ 712.052934][T27013] ? sk_alloc+0x27/0x390 [ 712.052963][T27013] sk_alloc+0x3a/0x390 [ 712.052994][T27013] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 712.053031][T27013] ? __fget_files+0x2a/0x420 [ 712.053054][T27013] ? __fget_files+0x3a0/0x420 [ 712.053069][T27013] ? __fget_files+0x2a/0x420 [ 712.053089][T27013] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 712.053105][T27013] bpf_prog_test_run+0x2c7/0x340 [ 712.053125][T27013] __sys_bpf+0x5cb/0x920 [ 712.053142][T27013] ? __pfx___sys_bpf+0x10/0x10 [ 712.053169][T27013] ? ksys_write+0x242/0x270 [ 712.053192][T27013] ? __pfx_ksys_write+0x10/0x10 [ 712.053220][T27013] __x64_sys_bpf+0x7c/0x90 [ 712.053243][T27013] do_syscall_64+0xe2/0xf80 [ 712.053264][T27013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.053278][T27013] ? trace_irq_disable+0x37/0x100 [ 712.053292][T27013] ? clear_bhb_loop+0x60/0xb0 [ 712.053310][T27013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.053328][T27013] RIP: 0033:0x7f0109d9aeb9 [ 712.053346][T27013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.053358][T27013] RSP: 002b:00007f0107fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.053380][T27013] RAX: ffffffffffffffda RBX: 00007f010a015fa0 RCX: 00007f0109d9aeb9 [ 712.053391][T27013] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 712.053402][T27013] RBP: 00007f0107fee090 R08: 0000000000000000 R09: 0000000000000000 [ 712.053411][T27013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.053420][T27013] R13: 00007f010a016038 R14: 00007f010a015fa0 R15: 00007ffcc929bdb8 [ 712.053444][T27013] [ 712.441675][T27017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5354'. [ 713.835168][T26999] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5348'. [ 714.038237][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 714.046364][ C0] lec:lec_tx_timeout: lec0 [ 714.054810][T27035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5356'. [ 714.069125][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 714.115904][T27037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5356'. [ 714.533462][T27061] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5363'. [ 714.747904][T27079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5368'. [ 714.775696][T27079] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5368'. [ 714.903534][T27079] netlink: 'syz.3.5368': attribute type 4 has an invalid length. [ 714.924194][T27079] netlink: 372 bytes leftover after parsing attributes in process `syz.3.5368'. [ 715.094889][T27101] FAULT_INJECTION: forcing a failure. [ 715.094889][T27101] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 715.139224][T27101] CPU: 1 UID: 0 PID: 27101 Comm: syz.3.5372 Not tainted syzkaller #0 PREEMPT(full) [ 715.139255][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 715.139269][T27101] Call Trace: [ 715.139278][T27101] [ 715.139288][T27101] dump_stack_lvl+0xe8/0x150 [ 715.139321][T27101] should_fail_ex+0x412/0x560 [ 715.139350][T27101] _copy_to_user+0x31/0xb0 [ 715.139433][T27101] bpf_test_finish+0x1db/0x6b0 [ 715.139466][T27101] ? __pfx_bpf_test_finish+0x10/0x10 [ 715.139490][T27101] ? eth_type_trans+0x43b/0x6d0 [ 715.139531][T27101] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 715.139570][T27101] ? __fget_files+0x2a/0x420 [ 715.139593][T27101] ? __fget_files+0x3a0/0x420 [ 715.139615][T27101] ? __fget_files+0x2a/0x420 [ 715.139643][T27101] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 715.139667][T27101] bpf_prog_test_run+0x2c7/0x340 [ 715.139695][T27101] __sys_bpf+0x5cb/0x920 [ 715.139720][T27101] ? __pfx___sys_bpf+0x10/0x10 [ 715.139757][T27101] ? ksys_write+0x242/0x270 [ 715.139790][T27101] ? __pfx_ksys_write+0x10/0x10 [ 715.139828][T27101] __x64_sys_bpf+0x7c/0x90 [ 715.139859][T27101] do_syscall_64+0xe2/0xf80 [ 715.139889][T27101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.139909][T27101] ? trace_irq_disable+0x37/0x100 [ 715.139929][T27101] ? clear_bhb_loop+0x60/0xb0 [ 715.139955][T27101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.139975][T27101] RIP: 0033:0x7f33c459aeb9 [ 715.139995][T27101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.140012][T27101] RSP: 002b:00007f33c537c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 715.140034][T27101] RAX: ffffffffffffffda RBX: 00007f33c4815fa0 RCX: 00007f33c459aeb9 [ 715.140049][T27101] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 715.140062][T27101] RBP: 00007f33c537c090 R08: 0000000000000000 R09: 0000000000000000 [ 715.140075][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.140087][T27101] R13: 00007f33c4816038 R14: 00007f33c4815fa0 R15: 00007ffc58a705e8 [ 715.140122][T27101] [ 715.533380][T27103] geneve0: entered promiscuous mode [ 715.565012][T27103] geneve0: entered allmulticast mode [ 715.714780][T27119] netlink: 'syz.4.5379': attribute type 3 has an invalid length. [ 716.046419][T27133] gretap3: entered allmulticast mode [ 716.548486][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 716.553319][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.934077][T27195] netlink: 'syz.0.5398': attribute type 3 has an invalid length. [ 717.464081][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 717.761417][T27240] __nla_validate_parse: 6 callbacks suppressed [ 717.761437][T27240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5408'. [ 717.870297][T27243] netlink: 'syz.5.5407': attribute type 3 has an invalid length. [ 717.899214][T27243] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5407'. [ 717.945258][T27246] FAULT_INJECTION: forcing a failure. [ 717.945258][T27246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.959994][T27246] CPU: 1 UID: 0 PID: 27246 Comm: syz.1.5409 Not tainted syzkaller #0 PREEMPT(full) [ 717.960022][T27246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 717.960034][T27246] Call Trace: [ 717.960043][T27246] [ 717.960052][T27246] dump_stack_lvl+0xe8/0x150 [ 717.960084][T27246] should_fail_ex+0x412/0x560 [ 717.960114][T27246] _copy_to_user+0x31/0xb0 [ 717.960148][T27246] bpf_test_finish+0x53c/0x6b0 [ 717.960183][T27246] ? __pfx_bpf_test_finish+0x10/0x10 [ 717.960213][T27246] ? eth_type_trans+0x43b/0x6d0 [ 717.960254][T27246] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 717.960291][T27246] ? __fget_files+0x2a/0x420 [ 717.960320][T27246] ? __fget_files+0x3a0/0x420 [ 717.960341][T27246] ? __fget_files+0x2a/0x420 [ 717.960368][T27246] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 717.960392][T27246] bpf_prog_test_run+0x2c7/0x340 [ 717.960419][T27246] __sys_bpf+0x5cb/0x920 [ 717.960442][T27246] ? __pfx___sys_bpf+0x10/0x10 [ 717.960480][T27246] ? ksys_write+0x242/0x270 [ 717.960512][T27246] ? __pfx_ksys_write+0x10/0x10 [ 717.960550][T27246] __x64_sys_bpf+0x7c/0x90 [ 717.960588][T27246] do_syscall_64+0xe2/0xf80 [ 717.960617][T27246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.960636][T27246] ? trace_irq_disable+0x37/0x100 [ 717.960656][T27246] ? clear_bhb_loop+0x60/0xb0 [ 717.960681][T27246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.960708][T27246] RIP: 0033:0x7f276959aeb9 [ 717.960727][T27246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.960744][T27246] RSP: 002b:00007f276a3c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 717.960766][T27246] RAX: ffffffffffffffda RBX: 00007f2769815fa0 RCX: 00007f276959aeb9 [ 717.960781][T27246] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 717.960795][T27246] RBP: 00007f276a3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 717.960807][T27246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.960820][T27246] R13: 00007f2769816038 R14: 00007f2769815fa0 R15: 00007ffe5c5a52d8 [ 717.960854][T27246] [ 718.408221][T27257] netlink: 'syz.5.5413': attribute type 21 has an invalid length. [ 718.419256][T27257] IPv6: NLM_F_CREATE should be specified when creating new route [ 718.526299][T27264] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.5415'. [ 718.593516][ T2151] IPVS: starting estimator thread 0... [ 718.688269][T27270] IPVS: using max 29 ests per chain, 69600 per kthread [ 719.078206][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 719.086339][ C0] lec:lec_tx_timeout: lec0 [ 719.108527][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 720.336999][T27221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 720.601985][T27287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5419'. [ 720.646602][T27283] netlink: 'syz.0.5421': attribute type 1 has an invalid length. [ 720.666575][T27283] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5421'. [ 720.770337][T27292] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20001 [ 721.283397][T27325] wg1: entered promiscuous mode [ 721.289421][T27325] wg1: entered allmulticast mode [ 721.537797][T27335] syzkaller0: entered promiscuous mode [ 721.543468][T27335] syzkaller0: entered allmulticast mode [ 721.606246][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5432'. [ 722.557249][T27342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5434'. [ 722.572754][T27342] vlan4: entered promiscuous mode [ 722.577928][T27342] bridge0: entered promiscuous mode [ 723.997586][T27311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.118093][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 724.126245][ C0] lec:lec_tx_timeout: lec0 [ 724.148732][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 724.257271][T27350] pimreg: entered allmulticast mode [ 724.310523][T27357] netlink: 284 bytes leftover after parsing attributes in process `syz.5.5437'. [ 724.316333][T27358] netlink: 284 bytes leftover after parsing attributes in process `syz.5.5437'. [ 724.496744][T27372] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5443'. [ 724.528284][T27372] netlink: 'syz.4.5443': attribute type 9 has an invalid length. [ 724.755251][T27392] dvmrp1: entered allmulticast mode [ 724.903804][T27402] tipc: Started in network mode [ 724.909787][T27402] tipc: Node identity 16d225cc641, cluster identity 4711 [ 724.917156][T27402] tipc: Enabled bearer , priority 0 [ 724.939544][T27402] syzkaller0: entered promiscuous mode [ 724.945197][T27402] syzkaller0: entered allmulticast mode [ 724.992309][T27402] tipc: Resetting bearer [ 725.296235][T27418] lo: Caught tx_queue_len zero misconfig [ 725.415029][T27402] tipc: Resetting bearer [ 725.479656][T27402] tipc: Disabling bearer [ 725.586356][T27430] openvswitch: netlink: IP tunnel dst address not specified [ 725.598553][T27431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.616054][T27431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.685172][T27435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5460'. [ 728.498594][T27435] .`: Device is already in use. [ 728.503707][ T9068] tipc: Node number set to 1925326284 [ 728.646505][T27448] netlink: 'syz.5.5463': attribute type 13 has an invalid length. [ 728.709300][ T2151] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 728.718334][ T2151] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 728.855681][T27454] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5465'. [ 728.900416][T27448] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.908281][T27448] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.998347][ T9068] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 729.096724][T27448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.107689][T27467] netlink: 'syz.1.5467': attribute type 1 has an invalid length. [ 729.130192][T27448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.237719][T27473] xt_recent: Unsupported userspace flags (000000b1) [ 729.258322][ T9068] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 729.585732][T27467] 8021q: adding VLAN 0 to HW filter on device bond6 [ 729.612331][T27465] syzkaller1: entered promiscuous mode [ 729.617932][T27465] syzkaller1: entered allmulticast mode [ 729.677619][T22856] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.687632][T22856] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.714252][T22856] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.751505][T27496] netlink: 'syz.0.5473': attribute type 1 has an invalid length. [ 729.836668][T22856] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.998093][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5850 ms [ 730.006161][ C0] lec:lec_tx_timeout: lec0 [ 730.011137][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 730.115540][T27510] syzkaller0: entered promiscuous mode [ 730.121300][T27510] syzkaller0: entered allmulticast mode [ 730.129838][T27510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5476'. [ 730.170619][T27522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5479'. [ 730.185148][T27522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5479'. [ 730.195010][T27518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5477'. [ 730.206205][T27517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5477'. [ 730.447762][T27542] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5484'. [ 730.471616][T27532] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 730.682408][T27552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5486'. [ 730.984098][T27555] bond5: Unable to set up delay as MII monitoring is disabled [ 731.007884][T27566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5492'. [ 731.019967][T27555] bond5 (unregistering): Released all slaves [ 731.304717][T27581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5495'. [ 731.343530][T27583] netlink: 'syz.1.5496': attribute type 1 has an invalid length. [ 731.466710][T27597] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5497'. [ 732.272487][T27635] sock: sock_timestamping_bind_phc: sock not bind to device [ 732.422201][T27638] bond6: (slave bond_slave_1): Device is not our slave [ 732.430661][T27638] bond6: option active_slave: invalid value (bond_slave_1) [ 732.441246][T27638] bond6 (unregistering): Released all slaves [ 732.467483][T27646] tipc: Enabled bearer , priority 0 [ 732.479530][T27639] syzkaller0: entered promiscuous mode [ 732.485263][T27639] syzkaller0: entered allmulticast mode [ 732.732510][T27657] netlink: 'syz.4.5518': attribute type 2 has an invalid length. [ 732.834714][T27657] : entered promiscuous mode [ 733.009271][T27660] netlink: set zone limit has 4 unknown bytes [ 733.193922][T27636] tipc: Resetting bearer [ 733.363641][T27636] tipc: Disabling bearer [ 733.980785][T27732] netlink: 'syz.1.5532': attribute type 1 has an invalid length. [ 734.001091][T27735] netlink: 'syz.0.5533': attribute type 21 has an invalid length. [ 734.024125][T27735] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.044539][T27735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.051895][T27735] IPv6: NLM_F_CREATE should be set when creating new route [ 734.059410][T27735] IPv6: NLM_F_CREATE should be set when creating new route [ 734.066688][T27735] IPv6: NLM_F_CREATE should be set when creating new route [ 734.080129][T27732] 8021q: adding VLAN 0 to HW filter on device bond8 [ 734.770519][T27781] x_tables: duplicate underflow at hook 1 [ 735.010715][T27789] syzkaller0: entered promiscuous mode [ 735.016345][T27789] syzkaller0: entered allmulticast mode [ 735.028054][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 735.036205][ C0] lec:lec_tx_timeout: lec0 [ 735.043675][T27789] macsec1: entered promiscuous mode [ 735.226455][T27796] __nla_validate_parse: 8 callbacks suppressed [ 735.226474][T27796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5549'. [ 735.455739][T27805] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5553'. [ 735.465296][T27807] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5553'. [ 735.673210][T27820] netlink: 584 bytes leftover after parsing attributes in process `syz.5.5552'. [ 735.945255][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5561'. [ 736.039000][T27844] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5562'. [ 736.079314][T27844] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 736.110662][T27846] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5562'. [ 736.135870][T27846] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 736.227101][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5566'. [ 736.237610][T27852] team0: Device gtp1 is of different type [ 736.303866][T27854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5566'. [ 736.335330][T27855] sctp: [Deprecated]: syz.0.5565 (pid 27855) Use of int in max_burst socket option. [ 736.335330][T27855] Use struct sctp_assoc_value instead [ 736.584397][T27866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5568'. [ 736.950114][T27891] ip6tnl3: entered promiscuous mode [ 736.965759][T27891] ip6tnl3: entered allmulticast mode [ 737.334524][T27899] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.449870][T27902] tipc: Enabled bearer , priority 0 [ 737.526165][T27899] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.582186][T27917] syzkaller0: entered promiscuous mode [ 737.587902][T27917] syzkaller0: entered allmulticast mode [ 737.623181][T27914] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 737.646222][T27899] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.844065][T27899] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.865329][T27928] netlink: 'syz.5.5585': attribute type 3 has an invalid length. [ 738.061462][ T6475] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.103492][ T6475] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.129077][T27900] tipc: Disabling bearer [ 738.200116][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.261712][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.010759][T27975] veth5: entered promiscuous mode [ 739.268184][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 739.626436][T28010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 739.675805][T28016] netlink: 'syz.0.5607': attribute type 10 has an invalid length. [ 739.867705][T28014] lo speed is unknown, defaulting to 1000 [ 739.880056][T28014] lo speed is unknown, defaulting to 1000 [ 739.897084][T28014] lo speed is unknown, defaulting to 1000 [ 739.962104][T28014] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 740.079078][T28014] lo speed is unknown, defaulting to 1000 [ 740.090869][T28014] lo speed is unknown, defaulting to 1000 [ 740.099789][T28014] lo speed is unknown, defaulting to 1000 [ 740.108284][T28014] lo speed is unknown, defaulting to 1000 [ 740.129446][T28014] lo speed is unknown, defaulting to 1000 [ 740.141392][T28014] lo speed is unknown, defaulting to 1000 [ 740.164757][T28014] lo speed is unknown, defaulting to 1000 [ 740.182399][T28014] lo speed is unknown, defaulting to 1000 [ 740.212777][T28014] lo speed is unknown, defaulting to 1000 [ 740.451723][T28034] __nla_validate_parse: 10 callbacks suppressed [ 740.451746][T28034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5612'. [ 740.479761][T28035] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.5612'. [ 740.514054][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5613'. [ 740.665239][T28046] netlink: 'syz.5.5618': attribute type 1 has an invalid length. [ 740.691504][T28050] netlink: 'syz.0.5616': attribute type 6 has an invalid length. [ 740.693943][T28047] tipc: Enabled bearer , priority 0 [ 740.714973][T28056] netlink: 'syz.1.5619': attribute type 1 has an invalid length. [ 740.723848][T28052] No such timeout policy "syz1" [ 740.756130][T28047] syzkaller0: entered promiscuous mode [ 740.762411][T28047] syzkaller0: entered allmulticast mode [ 740.781486][T28057] gretap1: entered allmulticast mode [ 740.810691][T28056] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 740.813573][T28047] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 740.927703][T28065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5620'. [ 740.945388][T28047] tipc: Resetting bearer [ 740.965310][T28068] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5622'. [ 740.984536][T28068] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5622'. [ 740.998858][T28045] tipc: Resetting bearer [ 741.049156][T28045] tipc: Disabling bearer [ 741.259077][T28085] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5626'. [ 741.681416][T28114] netlink: 'syz.5.5634': attribute type 10 has an invalid length. [ 741.835504][T28121] Cannot find set identified by id 0 to match [ 741.862815][T28124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5637'. [ 741.899300][T28120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5636'. [ 742.054496][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5640'. [ 742.063209][T28134] netlink: 'syz.3.5641': attribute type 32 has an invalid length. [ 742.094852][T28134] IPv6: Can't replace route, no match found [ 742.174676][T28137] bond0: (slave rose0): Enslaving as an active interface with an up link [ 742.213934][T28141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.353981][T28143] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 742.546327][T28157] syzkaller1: entered promiscuous mode [ 742.555178][T28157] syzkaller1: entered allmulticast mode [ 742.586533][T28160] tipc: Enabled bearer , priority 0 [ 742.695153][T28160] syzkaller0: entered promiscuous mode [ 742.701033][T28160] syzkaller0: entered allmulticast mode [ 742.707432][T28160] tipc: Resetting bearer [ 742.734114][T28169] netlink: 'syz.3.5651': attribute type 39 has an invalid length. [ 742.773522][T28169] .70·: left allmulticast mode [ 742.778762][T28169] hsr_slave_0: left allmulticast mode [ 742.784615][T28169] hsr_slave_1: left allmulticast mode [ 742.806688][T28169] geneve1: left promiscuous mode [ 742.812621][T28169] geneve1: left allmulticast mode [ 742.943596][T28169] geneve2: left promiscuous mode [ 742.979827][T28169] geneve2: left allmulticast mode [ 743.056784][T28169] tipc: Resetting bearer [ 743.086380][T28169] syzkaller0: left promiscuous mode [ 743.097489][T28169] syzkaller0: left allmulticast mode [ 743.154588][T28169] bond5: left allmulticast mode [ 743.236763][T28169] syzkaller1: left promiscuous mode [ 743.250991][T28169] syzkaller1: left allmulticast mode [ 743.284080][T28169] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 743.292344][T28169] macsec1: left promiscuous mode [ 743.332235][T28169] ip6tnl3: left promiscuous mode [ 743.341767][T28169] ip6tnl3: left allmulticast mode [ 744.953324][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 744.961492][ C0] lec:lec_tx_timeout: lec0 [ 744.966242][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 745.069352][T12061] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.079222][T12061] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.099796][T22839] tipc: Resetting bearer [ 745.139922][T28159] tipc: Resetting bearer [ 745.219957][T28159] tipc: Disabling bearer [ 745.246290][T12061] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.265867][T12061] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.282781][T12061] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.318120][T12061] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.396274][T12061] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.409406][T12061] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.506815][T28196] syzkaller0: entered promiscuous mode [ 745.513715][T28196] syzkaller0: entered allmulticast mode [ 748.037211][T22857] vlan2: left allmulticast mode [ 748.042347][T22857] vlan2: left promiscuous mode [ 748.047541][T22857] bridge0: port 4(vlan2) entered disabled state [ 748.086071][T22857] bond0: left allmulticast mode [ 748.091436][T22857] bond_slave_0: left allmulticast mode [ 748.096957][T22857] bond_slave_1: left allmulticast mode [ 748.136611][T22857] dummy0: left allmulticast mode [ 748.149084][T22857] bridge0: port 3(bond0) entered disabled state [ 748.169746][T22857] bridge_slave_0: left allmulticast mode [ 748.175652][T22857] bridge_slave_0: left promiscuous mode [ 748.184699][T22857] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.209507][T28250] __nla_validate_parse: 2 callbacks suppressed [ 748.209527][T28250] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5671'. [ 748.487643][T28267] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5674'. [ 748.665372][T22857] dvmrp6 (unregistering): left allmulticast mode [ 748.769597][T27653] udevd[27653]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 749.043915][T22857] team0: Port device bridge8 removed [ 749.085004][T22857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.094976][T22857] bond_slave_0: left promiscuous mode [ 749.102570][T22857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.112012][T22857] bond_slave_1: left promiscuous mode [ 749.121234][T22857] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 749.130581][T22857] dummy0: left promiscuous mode [ 749.144226][T22857] bond0 (unregistering): Released all slaves [ 749.155020][T22857] bond1 (unregistering): Released all slaves [ 749.170407][T22857] bond2 (unregistering): Released all slaves [ 749.185098][T22857] bond3 (unregistering): Released all slaves [ 749.204847][T22857] bond4 (unregistering): Released all slaves [ 749.224390][T22857] bond5 (unregistering): (slave veth9): Releasing active interface [ 749.238194][T22857] bond5 (unregistering): Released all slaves [ 749.254841][T28239] lo speed is unknown, defaulting to 1000 [ 749.277493][T28264] bridge_slave_1: left allmulticast mode [ 749.287070][T28264] bridge_slave_1: left promiscuous mode [ 749.304257][T28264] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.319449][T28264] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 749.499829][T22857] : left promiscuous mode [ 749.649450][T28282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5678'. [ 749.663878][T28279] bond6: option mode: invalid value (254) [ 749.674064][T28279] bond6 (unregistering): Released all slaves [ 749.706719][T22857] tipc: Left network mode [ 749.828387][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 749.899383][T22857] IPVS: stopping backup sync thread 6908 ... [ 749.978075][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 749.986141][ C0] lec:lec_tx_timeout: lec0 [ 750.409945][ T9063] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 750.438548][ T9063] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 750.463523][ T24] lo speed is unknown, defaulting to 1000 [ 750.470835][T14297] lo speed is unknown, defaulting to 1000 [ 750.600707][T14293] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 750.740254][T14293] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 750.856701][T28334] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5692'. [ 751.012997][T28349] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5691'. [ 751.156664][T22857] pim6reg (unregistering): left allmulticast mode [ 751.699188][T22857] team_slave_1 (unregistering): left promiscuous mode [ 751.707242][T22857] team0 (unregistering): Port device team_slave_1 removed [ 751.728297][T22857] team_slave_0 (unregistering): left promiscuous mode [ 751.736062][T22857] team0 (unregistering): Port device team_slave_0 removed [ 751.771469][T28340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.222207][T28391] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5700'. [ 752.310041][T22837] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 752.398026][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 752.517548][T28411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5703'. [ 752.593500][T28416] bridge_slave_1: left allmulticast mode [ 752.614444][T28416] bridge_slave_1: left promiscuous mode [ 752.628433][T28416] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.636701][T28412] delete_channel: no stack [ 752.734928][T28416] bridge_slave_1: entered promiscuous mode [ 752.742588][T28416] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 752.842989][T28419] netlink: 'syz.3.5707': attribute type 15 has an invalid length. [ 752.912360][T28426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5708'. [ 752.923401][T28429] lo speed is unknown, defaulting to 1000 [ 752.943656][T28426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5708'. [ 752.988742][T28426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5708'. [ 753.143879][T28445] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 753.172449][T28446] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 753.211035][T22857] IPVS: stop unused estimator thread 0... [ 753.549593][T28470] veth1_to_hsr: mtu less than device minimum [ 753.581854][T28469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5718'. [ 753.863208][T28479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5720'. [ 754.785404][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 754.796986][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 754.814842][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 754.826574][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 754.839867][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 754.909978][T28545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5732'. [ 754.914409][T28540] lo speed is unknown, defaulting to 1000 [ 755.563980][T28569] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.5737'. [ 755.580611][T28569] openvswitch: netlink: Message has 16 unknown bytes. [ 755.873449][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5741'. [ 755.925288][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5741'. [ 756.321667][T28610] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5744'. [ 756.393620][T28540] chnl_net:caif_netlink_parms(): no params data found [ 756.515634][T28616] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5746'. [ 756.733957][T28631] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5751'. [ 756.743629][T28631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5751'. [ 756.810774][T28635] netlink: 'syz.4.5752': attribute type 1 has an invalid length. [ 756.820418][T28635] NCSI netlink: No device for ifindex 0 [ 756.826096][T28637] netlink: 'syz.4.5752': attribute type 1 has an invalid length. [ 756.841882][T12061] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 756.885873][T17532] Bluetooth: hci6: command tx timeout [ 756.893997][T28637] NCSI netlink: No device for ifindex 0 [ 756.995850][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 757.051315][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 757.120763][T28645] xfrm0: entered promiscuous mode [ 757.125964][T28645] xfrm0: entered allmulticast mode [ 757.268820][T12059] bridge_slave_0: left allmulticast mode [ 757.275201][T12059] bridge_slave_0: left promiscuous mode [ 757.290436][T12059] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.763317][T12059] bridge0 (unregistering): left promiscuous mode [ 757.857402][T12059] bond2 (unregistering): (slave bridge2): Releasing active interface [ 757.908120][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 757.916193][ C0] lec:lec_tx_timeout: lec0 [ 757.921292][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 758.068800][T12059] tipc: Disabling bearer [ 758.245468][T12059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.263417][T12059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.274589][T12059] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 758.284777][T12059] bond0 (unregistering): Released all slaves [ 758.298279][T12059] bond1 (unregistering): Released all slaves [ 758.317181][T12059] bond2 (unregistering): Released all slaves [ 758.349695][T12059] bond3 (unregistering): Released all slaves [ 758.370737][T12059] bond4 (unregistering): Released all slaves [ 758.406375][T12059] bond5 (unregistering): (slave veth11): Releasing active interface [ 758.416580][T12059] bond5 (unregistering): (slave veth13): Releasing active interface [ 758.426351][T12059] bond5 (unregistering): Released all slaves [ 758.444150][T12059] bond6 (unregistering): Released all slaves [ 758.466007][T22857] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 758.477721][T28540] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.494555][T28540] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.519412][T28540] bridge_slave_0: entered allmulticast mode [ 758.530593][T28540] bridge_slave_0: entered promiscuous mode [ 758.652002][T28692] kthread_run failed with err -4 [ 758.660759][T28540] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.670519][T28540] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.677878][T28540] bridge_slave_1: entered allmulticast mode [ 758.704595][T28540] bridge_slave_1: entered promiscuous mode [ 758.743407][T12059] mÿ5nè‹Ò: left promiscuous mode [ 758.949435][T17532] Bluetooth: hci6: command tx timeout [ 759.000607][T28540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.014136][T28540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.037949][T12059] tipc: Left network mode [ 759.103961][T28540] team0: Port device team_slave_0 added [ 759.144894][T28540] team0: Port device team_slave_1 added [ 759.299778][T28540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.328621][T28540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.406243][T28540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.488622][T28540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.495853][T28540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.597736][T28540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.815869][T28746] __nla_validate_parse: 4 callbacks suppressed [ 759.815891][T28746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5767'. [ 759.920706][T28540] hsr_slave_0: entered promiscuous mode [ 759.957954][T28540] hsr_slave_1: entered promiscuous mode [ 759.964857][T28540] debugfs: 'hsr0' already exists in 'hsr' [ 759.978862][T28540] Cannot create hsr debugfs directory [ 760.642431][T28777] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5776'. [ 761.028238][T17532] Bluetooth: hci6: command tx timeout [ 761.071406][T28540] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 761.162374][T28540] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 761.243584][T12059] batadv0: left promiscuous mode [ 761.260910][T12059] hsr_slave_0: left promiscuous mode [ 761.318250][T12059] hsr_slave_1: left promiscuous mode [ 761.334756][T12059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.378991][T12059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.423081][T12059] pim6reg (unregistering): left allmulticast mode [ 762.463225][T28540] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 762.816296][T28540] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 762.875181][T28857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5790'. [ 762.900042][T28859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5790'. [ 762.948554][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 762.956699][ C0] lec:lec_tx_timeout: lec0 [ 763.108117][T17532] Bluetooth: hci6: command tx timeout [ 763.146438][T12059] IPVS: stop unused estimator thread 0... [ 763.424577][T28879] netlink: 'syz.4.5795': attribute type 10 has an invalid length. [ 763.477623][T28879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5795'. [ 763.619402][T28540] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 763.647663][T28540] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 763.704302][T28540] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 763.737659][T28540] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 763.933975][T28911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5798'. [ 764.110675][T28540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.171937][T28540] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.200705][T22857] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.207903][T22857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.244167][T12061] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.251377][T12061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.316561][T28926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5803'. [ 764.468948][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 764.586457][T28936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5805'. [ 764.634748][T28944] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 4, id = 0 [ 764.641433][T28936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5805'. [ 764.654887][T28930] lo speed is unknown, defaulting to 1000 [ 764.723112][T28947] netlink: 'syz.4.5809': attribute type 1 has an invalid length. [ 764.735804][T28947] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5809'. [ 764.822508][T28951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5810'. [ 764.841244][T28955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5810'. [ 764.973121][T28958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5811'. [ 765.011443][T28958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5811'. [ 765.015540][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.027397][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5811'. [ 765.039150][T28962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5811'. [ 765.048920][T28959] openvswitch: netlink: nsh attr 8556 is out of range max 3 [ 765.051688][T28961] 8021q: VLANs not supported on caif0 [ 765.056651][T28962] openvswitch: netlink: nsh attr 8556 is out of range max 3 [ 765.087125][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.125806][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.135747][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.204876][T28540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.258601][T28967] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5814'. [ 765.332255][T28540] veth0_vlan: entered promiscuous mode [ 765.349855][T28540] veth1_vlan: entered promiscuous mode [ 765.445105][T28540] veth0_macvtap: entered promiscuous mode [ 765.476613][T28540] veth1_macvtap: entered promiscuous mode [ 765.520604][T28540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.566598][T28540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.602051][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.626690][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.667862][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.685415][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.940774][T22857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.958815][T28979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5818'. [ 765.989893][T22857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.062079][T28996] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5822'. [ 766.098741][T12061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.100259][T28996] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5822'. [ 766.129444][T12061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.267248][T29050] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 767.497331][T29062] netlink: 'syz.1.5843': attribute type 1 has an invalid length. [ 767.636826][T29062] 8021q: adding VLAN 0 to HW filter on device bond9 [ 767.675841][T29062] bond9: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 769.908247][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5440 ms [ 769.916412][ C0] lec:lec_tx_timeout: lec0 [ 769.921568][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 770.799431][T29085] __nla_validate_parse: 4 callbacks suppressed [ 770.799453][T29085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5851'. [ 770.954128][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5856'. [ 770.974537][T29107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5855'. [ 771.215784][T29120] syzkaller0: entered promiscuous mode [ 771.230505][T29120] syzkaller0: entered allmulticast mode [ 771.247574][T29124] netlink: 'syz.1.5861': attribute type 2 has an invalid length. [ 771.612980][T29154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5870'. [ 771.624283][T29154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5870'. [ 771.684178][T29159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5872'. [ 771.897244][T29171] netlink: 'syz.0.5876': attribute type 10 has an invalid length. [ 771.926765][T29171] wlan1: mtu less than device minimum [ 771.936433][T29171] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 772.089030][T29182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5879'. [ 772.099213][T29182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5879'. [ 772.187657][T29189] x_tables: ip_tables: ah match: only valid for protocol 51 [ 772.293258][T29202] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 772.390459][T29206] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5885'. [ 772.450463][T29209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5887'. [ 772.559967][T29209] syzkaller1: entered promiscuous mode [ 772.565851][T29209] syzkaller1: entered allmulticast mode [ 772.753985][T12061] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.763916][T12061] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.772985][T12061] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.782324][T12061] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.920096][T29225] netlink: 'syz.5.5892': attribute type 64 has an invalid length. [ 773.191517][T29234] lo speed is unknown, defaulting to 1000 [ 773.445861][T29236] lo speed is unknown, defaulting to 1000 [ 774.025629][T29269] x_tables: duplicate underflow at hook 1 [ 774.280819][T29278] veth0_to_team: entered promiscuous mode [ 774.306060][T29278] veth0_to_team: left promiscuous mode [ 774.418852][T29281] žÿ: renamed from team_slave_1 [ 774.481274][T29283] veth0_to_team: entered promiscuous mode [ 774.498362][T29283] veth0_to_team: left promiscuous mode [ 774.674729][T29288] pim6reg1: entered promiscuous mode [ 774.705250][T29288] pim6reg1: entered allmulticast mode [ 774.883204][T29312] bridge0: port 2(macvlan4) entered blocking state [ 774.891346][T29312] bridge0: port 2(macvlan4) entered disabled state [ 774.901024][T29312] macvlan4: entered allmulticast mode [ 774.906550][T29312] bridge0: entered allmulticast mode [ 774.916447][T29312] macvlan4: left allmulticast mode [ 774.948068][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 774.952231][T29312] bridge0: left allmulticast mode [ 774.956255][ C0] lec:lec_tx_timeout: lec0 [ 775.194319][T29326] lo speed is unknown, defaulting to 1000 [ 775.599011][T29332] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 775.655654][T29332] batman_adv: batadv0: Adding interface: gretap2 [ 775.662550][T29332] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.718704][T29332] batman_adv: batadv0: Interface activated: gretap2 [ 775.780192][T29357] netlink: 'syz.5.5927': attribute type 4 has an invalid length. [ 775.793382][T29354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.828427][T29357] __nla_validate_parse: 14 callbacks suppressed [ 775.828448][T29357] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5927'. [ 775.893677][T29358] lo speed is unknown, defaulting to 1000 [ 775.900960][T29359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5927'. [ 775.960407][T29357] .`: renamed from bond0 [ 776.077840][T29367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5931'. [ 776.089977][T29352] lo speed is unknown, defaulting to 1000 [ 776.281256][T29378] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5934'. [ 776.329696][T29378] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 776.428230][T29383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5936'. [ 776.628194][T29399] netpci0: tun_chr_ioctl cmd 1074025678 [ 776.633853][T29399] netpci0: group set to 0 [ 776.654625][T29399] netpci0: tun_chr_ioctl cmd 1074025673 [ 776.843951][T29406] syzkaller1: entered promiscuous mode [ 776.855834][T29406] syzkaller1: entered allmulticast mode [ 777.013934][T29420] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5946'. [ 777.079293][T29420] nbd0: detected capacity change from 0 to 63 [ 777.089020][T29095] block nbd0: Dead connection, failed to find a fallback [ 777.098674][T29095] block nbd0: shutting down sockets [ 777.102764][T29420] block nbd0: reconnected socket [ 777.114614][T29424] block nbd0: NBD_DISCONNECT [ 777.122459][T29095] blk_print_req_error: 138 callbacks suppressed [ 777.122478][T29095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.148837][T29424] block nbd0: Disconnected due to user request. [ 777.155175][T29424] block nbd0: shutting down sockets [ 777.164285][T29095] buffer_io_error: 138 callbacks suppressed [ 777.164304][T29095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 777.181131][T29427] netlink: 'syz.4.5947': attribute type 4 has an invalid length. [ 777.230225][ T95] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 777.247389][ T95] Buffer I/O error on dev nbd0, logical block 1, async page read [ 777.255731][ T95] Buffer I/O error on dev nbd0, logical block 2, async page read [ 777.263897][ T95] Buffer I/O error on dev nbd0, logical block 3, async page read [ 777.274327][T29095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.285661][T29095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 777.294054][T29095] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.304030][T29095] Buffer I/O error on dev nbd0, logical block 1, async page read [ 777.312238][T29095] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.322351][T29095] Buffer I/O error on dev nbd0, logical block 2, async page read [ 777.331278][T29095] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.342435][T29095] Buffer I/O error on dev nbd0, logical block 3, async page read [ 777.353586][T29095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.363792][T29095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 777.371990][T29095] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.382237][T29095] Buffer I/O error on dev nbd0, logical block 1, async page read [ 777.390561][T29095] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.400646][T29095] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.411537][T29095] ldm_validate_partition_table(): Disk read failed. [ 777.419285][T29095] Dev nbd0: unable to read RDB block 0 [ 777.425783][T29095] nbd0: unable to read partition table [ 777.438872][T29095] ldm_validate_partition_table(): Disk read failed. [ 777.455274][T29095] Dev nbd0: unable to read RDB block 0 [ 777.469039][T29095] nbd0: unable to read partition table [ 777.713481][T29437] tipc: Enabled bearer , priority 0 [ 777.772397][T29437] syzkaller0: entered promiscuous mode [ 777.798119][T29437] syzkaller0: entered allmulticast mode [ 777.899704][T29442] lo speed is unknown, defaulting to 1000 [ 777.970011][T29446] tipc: Resetting bearer [ 778.007115][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 778.027926][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 778.038684][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 778.047472][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 778.055380][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 778.129412][T29436] tipc: Resetting bearer [ 778.217295][T29436] tipc: Disabling bearer [ 778.490014][T29473] tipc: Enabled bearer , priority 0 [ 778.516077][T29451] lo speed is unknown, defaulting to 1000 [ 778.525678][T29473] tipc: Disabling bearer [ 778.540189][T29479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5961'. [ 778.813555][T29488] lo speed is unknown, defaulting to 1000 [ 778.931513][T29501] netlink: 'syz.5.5964': attribute type 1 has an invalid length. [ 779.042554][T29501] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5964'. [ 779.533832][T29451] chnl_net:caif_netlink_parms(): no params data found [ 779.588796][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 779.678923][T29518] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5967'. [ 779.870224][T29451] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.906764][T29451] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.938840][T29451] bridge_slave_0: entered allmulticast mode [ 779.946894][T29451] bridge_slave_0: entered promiscuous mode [ 779.963046][T29537] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5972'. [ 779.975748][T29451] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.985172][T29451] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.993189][T29451] bridge_slave_1: entered allmulticast mode [ 780.001904][T29451] bridge_slave_1: entered promiscuous mode [ 780.059118][T29451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.074114][T29451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.148367][ T5830] Bluetooth: hci3: command tx timeout [ 780.175490][T29451] team0: Port device team_slave_0 added [ 780.195289][T29451] team0: Port device team_slave_1 added [ 780.237030][T29451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.244449][T29451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.317701][T29451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.353957][T29451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.418680][T29451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.481726][T29451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.490066][T29554] openvswitch: netlink: Message has 4 unknown bytes. [ 780.528232][T29559] netlink: 'syz.3.5979': attribute type 1 has an invalid length. [ 780.540988][T29557] geneve5: entered promiscuous mode [ 780.635019][T29562] bond1: (slave geneve2): making interface the new active one [ 780.666116][T29562] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 780.752741][T22839] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.767741][T22839] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.848545][T22839] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.904265][T29451] hsr_slave_0: entered promiscuous mode [ 780.912915][T29451] hsr_slave_1: entered promiscuous mode [ 780.920506][T29451] debugfs: 'hsr0' already exists in 'hsr' [ 780.926377][T29451] Cannot create hsr debugfs directory [ 780.934330][T22839] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.978220][T29569] lo speed is unknown, defaulting to 1000 [ 781.523041][T29603] __nla_validate_parse: 3 callbacks suppressed [ 781.523062][T29603] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5993'. [ 781.535248][T29451] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.553262][T29451] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 781.594445][T29588] netlink: 'syz.4.5988': attribute type 89 has an invalid length. [ 781.689618][T29609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5994'. [ 781.716383][T29451] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.734338][T29609] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5994'. [ 781.778182][T29451] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 781.805551][T29607] lo speed is unknown, defaulting to 1000 [ 781.840163][T29618] lo speed is unknown, defaulting to 1000 [ 781.875645][T29620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5997'. [ 781.890703][T29451] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.901334][T29451] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 781.940354][T29614] syzkaller1: entered promiscuous mode [ 781.946245][T29614] syzkaller1: entered allmulticast mode [ 782.046374][T29451] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.059106][T29451] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 782.130204][T29625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5998'. [ 782.153623][T29625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5998'. [ 782.229171][ T5830] Bluetooth: hci3: command tx timeout [ 782.291305][T29626] 8021q: VLANs not supported on caif0 [ 782.393939][T29632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6000'. [ 782.459259][T29628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5999'. [ 782.472727][T29628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5999'. [ 782.596291][T29451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 782.637643][T29451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 782.672532][T29451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 782.759617][T29451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 783.062389][T29667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6009'. [ 783.118634][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 783.182143][T29451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.238389][T29673] x_tables: duplicate underflow at hook 1 [ 783.262414][T29451] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.339761][T22839] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.347099][T22839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.377291][T22839] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.384530][T22839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.465522][T29451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 783.586451][T29694] netlink: 'syz.5.6016': attribute type 14 has an invalid length. [ 783.600113][T29696] xt_hashlimit: size too large, truncated to 1048576 [ 784.136548][T29451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.271113][T29451] veth0_vlan: entered promiscuous mode [ 784.308303][ T5830] Bluetooth: hci3: command tx timeout [ 784.324640][T29451] veth1_vlan: entered promiscuous mode [ 784.469879][T29451] veth0_macvtap: entered promiscuous mode [ 784.504014][T29451] veth1_macvtap: entered promiscuous mode [ 784.562372][T29451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.595407][T29451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.638085][T22837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.666305][T22837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.677154][T22837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.691514][T29738] netlink: 'syz.1.6028': attribute type 4 has an invalid length. [ 784.729880][T22837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.743590][T29738] netlink: 'syz.1.6028': attribute type 4 has an invalid length. [ 784.753864][ T24] lo speed is unknown, defaulting to 1000 [ 784.778839][ T24] syz2: Port: 1 Link DOWN [ 784.822663][T29740] syzkaller0: entered promiscuous mode [ 784.830385][T29740] syzkaller0: entered allmulticast mode [ 784.861044][ T24] lo speed is unknown, defaulting to 1000 [ 784.866948][ T24] syz2: Port: 1 Link ACTIVE [ 784.959635][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5370 ms [ 784.967942][ C0] lec:lec_tx_timeout: lec0 [ 784.972947][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 785.945652][T29775] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 786.389838][ T5830] Bluetooth: hci3: command tx timeout [ 787.626640][T22837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.647469][T22837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.743503][T29793] __nla_validate_parse: 6 callbacks suppressed [ 787.743523][T29793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6038'. [ 787.761456][T22837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.780819][T29795] netlink: 'syz.3.6039': attribute type 1 has an invalid length. [ 787.791476][T22837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.968383][T29800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6040'. [ 787.992788][T29803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6041'. [ 788.002789][T29800] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6040'. [ 788.053139][T29803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6041'. [ 788.090476][T29807] netlink: 'syz.3.6041': attribute type 4 has an invalid length. [ 788.105221][T29816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6040'. [ 788.142231][T29816] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6040'. [ 788.295619][T29824] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6044'. [ 788.310150][T29779] udevd[29779]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 788.326557][T29824] openvswitch: netlink: Missing key (keys=40, expected=100) [ 788.475496][T29827] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 788.516792][T29840] bridge_slave_1: left allmulticast mode [ 788.542811][T29840] bridge_slave_1: left promiscuous mode [ 788.564884][T29840] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.614636][T29840] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 788.648256][T29834] lo speed is unknown, defaulting to 1000 [ 788.725057][ T2151] IPVS: starting estimator thread 0... [ 788.838244][T29849] IPVS: using max 32 ests per chain, 76800 per kthread [ 789.028654][T29865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6056'. [ 789.270681][T29876] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6053'. [ 789.933792][T29904] bridge_slave_0: left allmulticast mode [ 789.988828][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 789.996939][ C0] lec:lec_tx_timeout: lec0 [ 790.023675][T29904] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.083667][T29904] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 790.347577][T29923] syzkaller0: entered promiscuous mode [ 790.379183][T29923] syzkaller0: entered allmulticast mode [ 790.447177][T29933] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 790.974937][T29959] syzkaller0: entered promiscuous mode [ 790.981007][T29959] syzkaller0: entered allmulticast mode [ 791.795333][T29984] netlink: del zone limit has 4 unknown bytes [ 792.048386][T29999] netlink: 'syz.0.6088': attribute type 39 has an invalid length. [ 792.330169][T30013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.358477][T30002] netlink: 'syz.1.6087': attribute type 10 has an invalid length. [ 792.545560][T30003] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.553689][T30003] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.846287][T30003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.875234][T30003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.121691][T12061] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.163498][T12061] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.277560][T12061] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.287349][T12061] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.529678][T30045] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 794.132164][T30075] netlink: 'syz.4.6109': attribute type 39 has an invalid length. [ 794.196686][T30077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.226599][T30079] __nla_validate_parse: 3 callbacks suppressed [ 794.226623][T30079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6111'. [ 794.270657][T30081] x_tables: unsorted underflow at hook 4 [ 794.518276][T30097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6116'. [ 794.668699][T30106] syzkaller0: entered promiscuous mode [ 794.674526][T30106] syzkaller0: entered allmulticast mode [ 794.690134][T30106] netlink: 'syz.1.6120': attribute type 1 has an invalid length. [ 794.699149][T30106] netlink: 'syz.1.6120': attribute type 2 has an invalid length. [ 794.707105][T30106] netlink: 'syz.1.6120': attribute type 1 has an invalid length. [ 794.716010][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 794.735845][T30106] netlink: 'syz.1.6120': attribute type 3 has an invalid length. [ 795.004835][T30123] netlink: 'syz.3.6123': attribute type 1 has an invalid length. [ 795.022666][T30121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6124'. [ 795.161879][T30123] gretap3: entered allmulticast mode [ 795.174107][T30123] bond2: (slave gretap3): making interface the new active one [ 795.210957][T30123] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 795.452274][T30142] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6130'. [ 795.608696][T30151] bond0: option packets_per_slave: invalid value (18446744073709551608) [ 795.617126][T30151] bond0: option packets_per_slave: allowed values 0 - 65535 [ 795.697385][T30154] syzkaller0: entered promiscuous mode [ 795.715589][T30154] syzkaller0: entered allmulticast mode [ 796.300882][T30136] syzkaller0: entered promiscuous mode [ 796.306501][T30136] syzkaller0: entered allmulticast mode [ 796.437085][T30189] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6141'. [ 798.693030][T30135] lec:lec_atm_close: lec0: Shut down! [ 798.833880][T12061] veth0_to_bond: left allmulticast mode [ 798.860829][T12061] veth0_to_bond: left promiscuous mode [ 798.879928][T12061] bridge5: port 1(veth0_to_bond) entered disabled state [ 799.024840][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6147'. [ 799.081321][T12061] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 799.362350][T12061] dvmrp6 (unregistering): left allmulticast mode [ 799.376709][T12061] batman_adv: batadv0: Removing interface: geneve2 [ 799.504578][T12061] team0: Port device bridge0 removed [ 799.893823][T12061] bond0 (unregistering): (slave bridge11): Releasing active interface [ 800.014688][T12061] team0: Port device macvlan2 removed [ 800.025191][T12061] bond1 (unregistering): Released all slaves [ 800.041060][T12061] bond2 (unregistering): Released all slaves [ 800.060850][T12061] bond3 (unregistering): Released all slaves [ 800.076424][T12061] bond4 (unregistering): Released all slaves [ 800.091223][T12061] bond5 (unregistering): Released all slaves [ 800.107865][T12061] bond6 (unregistering): (slave bond7): Releasing backup interface [ 800.123829][T12061] bond6 (unregistering): Released all slaves [ 800.138924][T12061] bond7 (unregistering): Released all slaves [ 800.153585][T12061] bond8 (unregistering): Released all slaves [ 800.168743][T12061] bond0 (unregistering): Released all slaves [ 800.188491][T12061] bond9 (unregistering): Released all slaves [ 800.203473][T30195] lo speed is unknown, defaulting to 1000 [ 800.227692][T30219] hsr0: entered promiscuous mode [ 800.250457][T30219] hsr0: left promiscuous mode [ 800.270339][T30221] hsr_slave_0: left promiscuous mode [ 800.314181][T30221] hsr_slave_1: left promiscuous mode [ 800.492472][T30231] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6151'. [ 800.563289][T30237] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6153'. [ 800.573371][T30238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6152'. [ 800.741668][T30234] lo speed is unknown, defaulting to 1000 [ 801.020159][T30250] openvswitch: netlink: IP tunnel dst address not specified [ 801.262774][T30262] lo speed is unknown, defaulting to 1000 [ 801.390525][T30271] : renamed from veth0_to_bond [ 801.423006][T30271] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6161'. [ 801.635962][T30258] lo speed is unknown, defaulting to 1000 [ 802.118927][T12061] tipc: Disabling bearer [ 802.138193][T12061] tipc: Left network mode [ 802.199628][T30291] tipc: Started in network mode [ 802.204661][T30291] tipc: Node identity 8eeac14aa35, cluster identity 4711 [ 802.240294][T30291] tipc: Enabled bearer , priority 0 [ 802.430905][T30291] syzkaller0: entered promiscuous mode [ 802.438495][T30291] syzkaller0: entered allmulticast mode [ 802.445421][T30291] tipc: Resetting bearer [ 802.527062][T30287] tipc: Resetting bearer [ 803.911461][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms [ 803.920567][ C0] lec:lec_tx_timeout: lec0 [ 803.925813][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 804.922581][T30287] tipc: Disabling bearer [ 804.982205][T30314] tipc: Enabled bearer , priority 0 [ 805.000909][T30316] syzkaller0: entered promiscuous mode [ 805.018161][T30316] syzkaller0: entered allmulticast mode [ 805.046032][T30323] syzkaller0: entered promiscuous mode [ 805.060283][T30323] syzkaller0: entered allmulticast mode [ 805.110795][T30319] tipc: Resetting bearer [ 805.122104][ T24] tipc: Node number set to 767213898 [ 805.257828][T30319] tipc: Resetting bearer [ 805.264842][T30343] netlink: 'syz.1.6180': attribute type 1 has an invalid length. [ 805.274940][T30343] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6180'. [ 805.336836][T30319] tipc: Disabling bearer [ 805.434076][T30348] SET target dimension over the limit! [ 805.590678][T30355] tipc: Started in network mode [ 805.596273][T30355] tipc: Node identity 6ea5e736b61, cluster identity 4711 [ 805.618489][T30355] tipc: Enabled bearer , priority 0 [ 805.649351][T30352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6185'. [ 805.802800][T30355] syzkaller0: entered promiscuous mode [ 805.809290][T30355] syzkaller0: entered allmulticast mode [ 805.815634][T30355] tipc: Resetting bearer [ 805.864898][T12061] hsr_slave_0: left promiscuous mode [ 805.886582][T12061] hsr_slave_1: left promiscuous mode [ 805.982891][T12061] pim6reg (unregistering): left allmulticast mode [ 806.013103][T12061] pimreg3 (unregistering): left allmulticast mode [ 806.392387][T30364] 8021q: VLANs not supported on ip_vti0 [ 806.403352][T30352] tipc: Resetting bearer [ 808.295203][T30352] tipc: Disabling bearer [ 808.304596][T30372] netlink: 'syz.4.6190': attribute type 4 has an invalid length. [ 808.338143][T14293] tipc: Node number set to 3635799862 [ 808.802109][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6197'. [ 808.815636][T12061] IPVS: stop unused estimator thread 0... [ 808.902151][T30406] netlink: 'syz.1.6199': attribute type 1 has an invalid length. [ 808.942685][T30406] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6199'. [ 808.948404][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6199'. [ 808.960774][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 808.960807][ C0] lec:lec_tx_timeout: lec0 [ 809.151251][T17532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 809.161495][T17532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 809.173981][T17532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 809.187196][T17532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 809.202268][T17532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 809.259217][T30409] lo speed is unknown, defaulting to 1000 [ 809.498961][T30423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6200'. [ 809.537101][T18292] bond0: (slave syz_tun): Releasing backup interface [ 809.645950][T30435] sctp: [Deprecated]: syz.5.6200 (pid 30435) Use of int in max_burst socket option. [ 809.645950][T30435] Use struct sctp_assoc_value instead [ 809.680150][T30436] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 809.787719][T30438] IPv6: NLM_F_CREATE should be specified when creating new route [ 809.805349][T30438] netlink: 'syz.0.6206': attribute type 1 has an invalid length. [ 809.959715][T30409] chnl_net:caif_netlink_parms(): no params data found [ 810.157323][T30454] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6211'. [ 810.198874][T30456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6212'. [ 810.270127][T30409] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.297294][T30409] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.340253][T30409] bridge_slave_0: entered allmulticast mode [ 810.368691][T30409] bridge_slave_0: entered promiscuous mode [ 810.411903][T30459] pim6reg: entered allmulticast mode [ 810.421559][T30409] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.448265][T30409] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.455890][T30409] bridge_slave_1: entered allmulticast mode [ 810.520270][T30409] bridge_slave_1: entered promiscuous mode [ 810.646430][T30454] pim6reg: left allmulticast mode [ 810.675048][T30409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.712620][T30409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.837896][T30409] team0: Port device team_slave_0 added [ 810.864357][T12061] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.879585][T12061] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.904238][T30409] team0: Port device team_slave_1 added [ 810.954320][T30409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.961653][T30409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.998600][T30470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6215'. [ 811.021575][T30409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.075152][T12061] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.105422][T12061] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.175559][T30409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.208104][T30409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.269018][T17532] Bluetooth: hci0: command tx timeout [ 811.281649][T30409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.355707][T12061] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.384321][T12061] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.544863][T12061] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.565616][T12061] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.606088][T30409] hsr_slave_0: entered promiscuous mode [ 811.614081][T30409] hsr_slave_1: entered promiscuous mode [ 811.622336][T30409] debugfs: 'hsr0' already exists in 'hsr' [ 811.630202][T30409] Cannot create hsr debugfs directory [ 811.921775][T22839] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 811.953858][T22839] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 812.162530][T12059] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 812.576224][T22857] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 813.200555][T30558] openvswitch: netlink: Missing key (keys=40, expected=80) [ 813.355312][T17532] Bluetooth: hci0: command tx timeout [ 813.494915][T12061] bond1 (unregistering): (slave gre1): Releasing backup interface [ 813.778653][T12061] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 813.845602][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 814.159685][T12061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.170252][T12061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.181179][T12061] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 814.195928][T12061] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 814.211982][T12061] bond0 (unregistering): Released all slaves [ 814.223296][T12061] bond1 (unregistering): Released all slaves [ 814.240422][T12061] bond2 (unregistering): Released all slaves [ 814.258714][T12061] bond3 (unregistering): Released all slaves [ 814.276737][T12061] bond4 (unregistering): Released all slaves [ 814.299365][T12061] bond5 (unregistering): Released all slaves [ 814.314117][T12061] bond6 (unregistering): Released all slaves [ 814.568447][T30586] tipc: Enabling of bearer rejected, failed to enable media [ 814.600828][T12061] : left promiscuous mode [ 814.716439][T30409] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 814.860053][T12061] tipc: Disabling bearer [ 814.872451][T12061] tipc: Disabling bearer [ 814.920559][T12061] tipc: Left network mode [ 814.965488][T30409] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 815.148709][T30409] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 815.415139][T30628] FAULT_INJECTION: forcing a failure. [ 815.415139][T30628] name failslab, interval 1, probability 0, space 0, times 0 [ 815.428631][T17532] Bluetooth: hci0: command tx timeout [ 815.450435][T30625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.498515][T30628] CPU: 0 UID: 0 PID: 30628 Comm: syz.0.6248 Not tainted syzkaller #0 PREEMPT(full) [ 815.498546][T30628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 815.498560][T30628] Call Trace: [ 815.498569][T30628] [ 815.498579][T30628] dump_stack_lvl+0xe8/0x150 [ 815.498614][T30628] should_fail_ex+0x412/0x560 [ 815.498646][T30628] should_failslab+0xa8/0x100 [ 815.498674][T30628] __kmalloc_noprof+0xde/0x7e0 [ 815.498694][T30628] ? bpf_test_init+0x9f/0x150 [ 815.498724][T30628] bpf_test_init+0x9f/0x150 [ 815.498750][T30628] bpf_prog_test_run_skb+0x36f/0x1c90 [ 815.498788][T30628] ? __fget_files+0x2a/0x420 [ 815.498812][T30628] ? __fget_files+0x3a0/0x420 [ 815.498835][T30628] ? __fget_files+0x2a/0x420 [ 815.498864][T30628] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 815.498889][T30628] bpf_prog_test_run+0x2c7/0x340 [ 815.498918][T30628] __sys_bpf+0x5cb/0x920 [ 815.498943][T30628] ? __pfx___sys_bpf+0x10/0x10 [ 815.498983][T30628] ? ksys_write+0x242/0x270 [ 815.499016][T30628] ? __pfx_ksys_write+0x10/0x10 [ 815.499056][T30628] __x64_sys_bpf+0x7c/0x90 [ 815.499089][T30628] do_syscall_64+0xe2/0xf80 [ 815.499119][T30628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.499141][T30628] ? trace_irq_disable+0x37/0x100 [ 815.499162][T30628] ? clear_bhb_loop+0x60/0xb0 [ 815.499188][T30628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.499216][T30628] RIP: 0033:0x7f8660b9aeb9 [ 815.499236][T30628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.499254][T30628] RSP: 002b:00007f8661a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 815.499277][T30628] RAX: ffffffffffffffda RBX: 00007f8660e15fa0 RCX: 00007f8660b9aeb9 [ 815.499293][T30628] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 815.499307][T30628] RBP: 00007f8661a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 815.499320][T30628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.499333][T30628] R13: 00007f8660e16038 R14: 00007f8660e15fa0 R15: 00007ffc17068ef8 [ 815.499367][T30628] [ 815.773481][T30409] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 815.859956][T30632] siw: device registration error -23 [ 815.938407][T30620] delete_channel: no stack [ 816.124329][T30655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6252'. [ 816.286645][T12061] mac80211_hwsim hwsim38 wlan1 (unregistering): left promiscuous mode [ 816.309700][T30658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6253'. [ 816.329339][T30658] netlink: 'syz.3.6253': attribute type 83 has an invalid length. [ 816.390217][T30660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6254'. [ 816.574228][T30669] FAULT_INJECTION: forcing a failure. [ 816.574228][T30669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.588786][T30669] CPU: 0 UID: 0 PID: 30669 Comm: syz.5.6259 Not tainted syzkaller #0 PREEMPT(full) [ 816.588815][T30669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 816.588830][T30669] Call Trace: [ 816.588838][T30669] [ 816.588848][T30669] dump_stack_lvl+0xe8/0x150 [ 816.588881][T30669] should_fail_ex+0x412/0x560 [ 816.588912][T30669] _copy_from_user+0x2d/0xb0 [ 816.588964][T30669] bpf_test_init+0xd8/0x150 [ 816.588992][T30669] bpf_prog_test_run_skb+0x36f/0x1c90 [ 816.589030][T30669] ? __fget_files+0x2a/0x420 [ 816.589054][T30669] ? __fget_files+0x3a0/0x420 [ 816.589088][T30669] ? __fget_files+0x2a/0x420 [ 816.589118][T30669] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 816.589143][T30669] bpf_prog_test_run+0x2c7/0x340 [ 816.589172][T30669] __sys_bpf+0x5cb/0x920 [ 816.589196][T30669] ? __pfx___sys_bpf+0x10/0x10 [ 816.589235][T30669] ? ksys_write+0x242/0x270 [ 816.589269][T30669] ? __pfx_ksys_write+0x10/0x10 [ 816.589310][T30669] __x64_sys_bpf+0x7c/0x90 [ 816.589344][T30669] do_syscall_64+0xe2/0xf80 [ 816.589373][T30669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.589394][T30669] ? trace_irq_disable+0x37/0x100 [ 816.589414][T30669] ? clear_bhb_loop+0x60/0xb0 [ 816.589446][T30669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.589467][T30669] RIP: 0033:0x7f0109d9aeb9 [ 816.589492][T30669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.589510][T30669] RSP: 002b:00007f0107fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.589533][T30669] RAX: ffffffffffffffda RBX: 00007f010a015fa0 RCX: 00007f0109d9aeb9 [ 816.589549][T30669] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 816.589563][T30669] RBP: 00007f0107fee090 R08: 0000000000000000 R09: 0000000000000000 [ 816.589576][T30669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.589589][T30669] R13: 00007f010a016038 R14: 00007f010a015fa0 R15: 00007ffcc929bdb8 [ 816.589625][T30669] [ 816.842774][T30409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 816.894085][T30671] vlan3: entered allmulticast mode [ 817.055757][T12061] hsr_slave_0: left promiscuous mode [ 817.114126][T12061] hsr_slave_1: left promiscuous mode [ 817.133754][T12061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.149235][T12061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.202886][T30687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6263'. [ 817.226880][T30687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6263'. [ 817.508529][T17532] Bluetooth: hci0: command tx timeout [ 817.576051][T12061] team0 (unregistering): Port device team_slave_1 removed [ 817.596533][T12061] team0 (unregistering): Port device team_slave_0 removed [ 817.719339][T30409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 817.731700][T30409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 817.771517][T30409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 817.844334][T30701] lo speed is unknown, defaulting to 1000 [ 817.958632][T30720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6268'. [ 817.960035][T30721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6269'. [ 817.992818][T30723] FAULT_INJECTION: forcing a failure. [ 817.992818][T30723] name failslab, interval 1, probability 0, space 0, times 0 [ 818.057495][T30723] CPU: 0 UID: 0 PID: 30723 Comm: syz.0.6270 Not tainted syzkaller #0 PREEMPT(full) [ 818.057524][T30723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 818.057536][T30723] Call Trace: [ 818.057544][T30723] [ 818.057553][T30723] dump_stack_lvl+0xe8/0x150 [ 818.057583][T30723] should_fail_ex+0x412/0x560 [ 818.057611][T30723] should_failslab+0xa8/0x100 [ 818.057635][T30723] __kmalloc_noprof+0xde/0x7e0 [ 818.057654][T30723] ? sk_prot_alloc+0xe7/0x210 [ 818.057683][T30723] sk_prot_alloc+0xe7/0x210 [ 818.057705][T30723] ? sk_alloc+0x27/0x390 [ 818.057731][T30723] sk_alloc+0x3a/0x390 [ 818.057758][T30723] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 818.057792][T30723] ? __fget_files+0x2a/0x420 [ 818.057812][T30723] ? __fget_files+0x3a0/0x420 [ 818.057831][T30723] ? __fget_files+0x2a/0x420 [ 818.057856][T30723] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 818.057878][T30723] bpf_prog_test_run+0x2c7/0x340 [ 818.057903][T30723] __sys_bpf+0x5cb/0x920 [ 818.057924][T30723] ? __pfx___sys_bpf+0x10/0x10 [ 818.057964][T30723] ? ksys_write+0x242/0x270 [ 818.057995][T30723] ? __pfx_ksys_write+0x10/0x10 [ 818.058030][T30723] __x64_sys_bpf+0x7c/0x90 [ 818.058059][T30723] do_syscall_64+0xe2/0xf80 [ 818.058085][T30723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.058103][T30723] ? trace_irq_disable+0x37/0x100 [ 818.058121][T30723] ? clear_bhb_loop+0x60/0xb0 [ 818.058143][T30723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.058161][T30723] RIP: 0033:0x7f8660b9aeb9 [ 818.058180][T30723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.058196][T30723] RSP: 002b:00007f8661a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 818.058225][T30723] RAX: ffffffffffffffda RBX: 00007f8660e15fa0 RCX: 00007f8660b9aeb9 [ 818.058239][T30723] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 818.058251][T30723] RBP: 00007f8661a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 818.058263][T30723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.058274][T30723] R13: 00007f8660e16038 R14: 00007f8660e15fa0 R15: 00007ffc17068ef8 [ 818.058306][T30723] [ 818.556676][T12061] IPVS: stop unused estimator thread 0... [ 818.689524][T30409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.754234][T30409] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.796296][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.803659][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.843810][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.851254][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.944896][T30750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6275'. [ 818.949156][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 818.959485][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 818.970140][ C0] lec:lec_tx_timeout: lec0 [ 819.084262][T30409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 819.225523][T30760] syzkaller1: entered promiscuous mode [ 819.242595][T30760] syzkaller1: entered allmulticast mode [ 819.263434][T30764] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 819.471954][T30771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6280'. [ 819.789569][T30786] netlink: 'syz.1.6283': attribute type 4 has an invalid length. [ 819.799871][T30409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.839166][T30787] netlink: 'syz.1.6283': attribute type 4 has an invalid length. [ 819.880087][T14293] lo speed is unknown, defaulting to 1000 [ 819.885898][T14293] syz2: Port: 1 Link DOWN [ 819.891900][ T9079] lo speed is unknown, defaulting to 1000 [ 819.897687][ T9079] syz2: Port: 1 Link ACTIVE [ 820.060634][T30797] lo speed is unknown, defaulting to 1000 [ 820.117115][T30798] lo speed is unknown, defaulting to 1000 [ 820.385839][T30818] ipvlan2: entered allmulticast mode [ 820.392026][T30818] veth0_vlan: entered allmulticast mode [ 820.817245][T30832] xt_CONNSECMARK: invalid mode: 0 [ 820.951828][T30409] veth0_vlan: entered promiscuous mode [ 820.989702][T30409] veth1_vlan: entered promiscuous mode [ 821.044466][ T5830] Bluetooth: hci2: command 0x0405 tx timeout [ 821.129328][T30409] veth0_macvtap: entered promiscuous mode [ 821.140456][T30409] veth1_macvtap: entered promiscuous mode [ 821.164506][T30409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.180045][T30409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.212767][T22839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.241026][T22839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.268908][T22839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.368584][T22839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.578660][T30866] netlink: 'syz.0.6296': attribute type 3 has an invalid length. [ 821.649748][T22858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.657655][T22858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.667640][T30870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6296'. [ 821.714171][T30870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6296'. [ 821.750269][T30870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6296'. [ 821.862783][T22858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.877369][T22858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.308286][T30882] bond0: (slave sit0): Error: Device type is different from other slaves [ 822.669185][T30901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6306'. [ 822.813186][T30903] netlink: 'syz.5.6307': attribute type 7 has an invalid length. [ 822.843852][T30904] netlink: 'syz.5.6307': attribute type 7 has an invalid length. [ 822.979781][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 822.995208][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 823.005409][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 823.037727][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 823.046440][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 823.100425][T30906] lo speed is unknown, defaulting to 1000 [ 823.410149][T30920] netlink: 15382 bytes leftover after parsing attributes in process `syz.0.6311'. [ 823.656382][T30935] batadv_slave_0: entered promiscuous mode [ 823.675730][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6315'. [ 823.686414][T30935] bridge_slave_1: left allmulticast mode [ 823.696057][T30935] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.772222][T30931] FAULT_INJECTION: forcing a failure. [ 823.772222][T30931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.792369][T30931] CPU: 1 UID: 0 PID: 30931 Comm: syz.0.6314 Not tainted syzkaller #0 PREEMPT(full) [ 823.792401][T30931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 823.792415][T30931] Call Trace: [ 823.792424][T30931] [ 823.792433][T30931] dump_stack_lvl+0xe8/0x150 [ 823.792467][T30931] should_fail_ex+0x412/0x560 [ 823.792499][T30931] _copy_to_user+0x31/0xb0 [ 823.792534][T30931] bpf_test_finish+0x22c/0x6b0 [ 823.792569][T30931] ? __pfx_bpf_test_finish+0x10/0x10 [ 823.792591][T30931] ? eth_type_trans+0x35e/0x6d0 [ 823.792624][T30931] ? bpf_prog_test_run_skb+0x889/0x1c90 [ 823.792651][T30931] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 823.792690][T30931] ? __fget_files+0x2a/0x420 [ 823.792720][T30931] ? __fget_files+0x3a0/0x420 [ 823.792743][T30931] ? __fget_files+0x2a/0x420 [ 823.792770][T30931] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 823.792793][T30931] bpf_prog_test_run+0x2c7/0x340 [ 823.792820][T30931] __sys_bpf+0x5cb/0x920 [ 823.792843][T30931] ? __pfx___sys_bpf+0x10/0x10 [ 823.792879][T30931] ? ksys_write+0x242/0x270 [ 823.792913][T30931] ? __pfx_ksys_write+0x10/0x10 [ 823.792951][T30931] __x64_sys_bpf+0x7c/0x90 [ 823.792981][T30931] do_syscall_64+0xe2/0xf80 [ 823.793009][T30931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.793029][T30931] ? trace_irq_disable+0x37/0x100 [ 823.793049][T30931] ? clear_bhb_loop+0x60/0xb0 [ 823.793074][T30931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.793095][T30931] RIP: 0033:0x7f8660b9aeb9 [ 823.793114][T30931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.793132][T30931] RSP: 002b:00007f8661a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 823.793155][T30931] RAX: ffffffffffffffda RBX: 00007f8660e15fa0 RCX: 00007f8660b9aeb9 [ 823.793169][T30931] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 823.793183][T30931] RBP: 00007f8661a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 823.793197][T30931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.793209][T30931] R13: 00007f8660e16038 R14: 00007f8660e15fa0 R15: 00007ffc17068ef8 [ 823.793244][T30931] [ 824.112796][T30906] chnl_net:caif_netlink_parms(): no params data found [ 824.353792][T30918] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.361621][T30918] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.377358][T30946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6318'. [ 824.386967][T30946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6318'. [ 824.605300][T30918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.635942][T30918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.849935][ T30] audit: type=1800 audit(1770575086.592:49): pid=30952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6319" name="memory.events" dev="tmpfs" ino=620 res=0 errno=0 [ 824.875281][ T30] audit: type=1804 audit(1770575086.602:50): pid=30952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6319" name="/newroot/118/memory.events" dev="tmpfs" ino=620 res=1 errno=0 [ 824.966295][T30933] batadv_slave_0: left promiscuous mode [ 824.993304][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.003035][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.031579][T30961] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6320'. [ 825.083515][T22857] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.109091][T17532] Bluetooth: hci4: command tx timeout [ 825.119903][T22857] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.259316][T30906] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.266770][T30906] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.275091][T30906] bridge_slave_0: entered allmulticast mode [ 825.284094][T30906] bridge_slave_0: entered promiscuous mode [ 825.295211][T30906] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.329027][T30906] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.344593][T30906] bridge_slave_1: entered allmulticast mode [ 825.366036][T30906] bridge_slave_1: entered promiscuous mode [ 825.410318][T30980] FAULT_INJECTION: forcing a failure. [ 825.410318][T30980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.424473][T30980] CPU: 0 UID: 0 PID: 30980 Comm: syz.3.6325 Not tainted syzkaller #0 PREEMPT(full) [ 825.424502][T30980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 825.424516][T30980] Call Trace: [ 825.424526][T30980] [ 825.424536][T30980] dump_stack_lvl+0xe8/0x150 [ 825.424581][T30980] should_fail_ex+0x412/0x560 [ 825.424614][T30980] _copy_to_user+0x31/0xb0 [ 825.424649][T30980] bpf_test_finish+0x53c/0x6b0 [ 825.424683][T30980] ? __pfx_bpf_test_finish+0x10/0x10 [ 825.424707][T30980] ? eth_type_trans+0x35e/0x6d0 [ 825.424742][T30980] ? bpf_prog_test_run_skb+0x889/0x1c90 [ 825.424769][T30980] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 825.424809][T30980] ? __fget_files+0x2a/0x420 [ 825.424833][T30980] ? __fget_files+0x3a0/0x420 [ 825.424855][T30980] ? __fget_files+0x2a/0x420 [ 825.424884][T30980] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 825.424909][T30980] bpf_prog_test_run+0x2c7/0x340 [ 825.424938][T30980] __sys_bpf+0x5cb/0x920 [ 825.424963][T30980] ? __pfx___sys_bpf+0x10/0x10 [ 825.425002][T30980] ? ksys_write+0x242/0x270 [ 825.425036][T30980] ? __pfx_ksys_write+0x10/0x10 [ 825.425076][T30980] __x64_sys_bpf+0x7c/0x90 [ 825.425110][T30980] do_syscall_64+0xe2/0xf80 [ 825.425140][T30980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.425161][T30980] ? trace_irq_disable+0x37/0x100 [ 825.425181][T30980] ? clear_bhb_loop+0x60/0xb0 [ 825.425208][T30980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.425229][T30980] RIP: 0033:0x7fd0c379aeb9 [ 825.425248][T30980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.425267][T30980] RSP: 002b:00007fd0c4604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 825.425289][T30980] RAX: ffffffffffffffda RBX: 00007fd0c3a15fa0 RCX: 00007fd0c379aeb9 [ 825.425306][T30980] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 825.425320][T30980] RBP: 00007fd0c4604090 R08: 0000000000000000 R09: 0000000000000000 [ 825.425334][T30980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.425347][T30980] R13: 00007fd0c3a16038 R14: 00007fd0c3a15fa0 R15: 00007fff7981a648 [ 825.425391][T30980] [ 825.600209][T30906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.694979][T30906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.786382][T30906] team0: Port device team_slave_0 added [ 825.796394][T30906] team0: Port device team_slave_1 added [ 825.803864][T30990] x_tables: ip_tables: osf match: only valid for protocol 6 [ 825.831251][T30992] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6329'. [ 825.858938][T30990] openvswitch: netlink: Missing valid actions attribute. [ 825.866154][T30990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.867785][T30906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.894931][T30906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.952585][T30906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.984088][T30906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.000068][T30906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.026797][T30906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.369621][T30906] hsr_slave_0: entered promiscuous mode [ 826.981921][T30906] hsr_slave_1: entered promiscuous mode [ 826.997239][T30906] debugfs: 'hsr0' already exists in 'hsr' [ 827.009988][T30906] Cannot create hsr debugfs directory [ 827.025441][T31011] tipc: Enabling of bearer rejected, failed to enable media [ 827.191453][T17532] Bluetooth: hci4: command tx timeout [ 827.363751][T30906] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.388753][T31021] __nla_validate_parse: 3 callbacks suppressed [ 827.388771][T31021] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6338'. [ 827.495534][T30906] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.575387][T30906] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.669470][T30906] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.047043][T31040] lo speed is unknown, defaulting to 1000 [ 828.166306][T30906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 828.360616][T30906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 828.624576][T31054] netlink: 'syz.5.6346': attribute type 64 has an invalid length. [ 828.778140][T30906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 828.827176][T30906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 828.905333][T31047] lo speed is unknown, defaulting to 1000 [ 829.008738][T31068] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 829.277117][T31043] lo speed is unknown, defaulting to 1000 [ 829.283447][T17532] Bluetooth: hci4: command tx timeout [ 829.474587][T30906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.745929][T31080] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6353'. [ 829.748993][T30906] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.791139][T22858] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.799006][T22858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.841587][T31084] syzkaller0: entered promiscuous mode [ 829.847296][T31084] syzkaller0: entered allmulticast mode [ 829.887784][T22858] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.895065][T22858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.137583][T31092] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 830.201497][T31095] openvswitch: netlink: IP tunnel dst address not specified [ 830.536775][T30906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.568771][T31109] netlink: 'syz.4.6358': attribute type 39 has an invalid length. [ 830.691949][T30906] veth0_vlan: entered promiscuous mode [ 830.746769][T30906] veth1_vlan: entered promiscuous mode [ 830.859948][T30906] veth0_macvtap: entered promiscuous mode [ 830.922443][T30906] veth1_macvtap: entered promiscuous mode [ 830.977778][T30906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.001648][T30906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.059615][T22857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.100287][T22857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.129585][T22857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.201269][T22857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.348176][T17532] Bluetooth: hci4: command tx timeout [ 831.370194][T22856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.384991][T22856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.452568][T22839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.488185][T22839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.581090][T31143] netlink: 'syz.4.6369': attribute type 3 has an invalid length. [ 831.646550][T31144] syz_tun: entered allmulticast mode [ 831.686668][T31143] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 831.854918][T31152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.876252][T31152] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.908989][T31152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 831.944336][T31157] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6370'. [ 831.965063][T31144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 832.166833][T31156] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 832.323058][T31143] syz_tun: left allmulticast mode [ 832.432266][T31167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6374'. [ 832.680721][T31167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6374'. [ 832.999815][T31184] netlink: 'syz.4.6379': attribute type 12 has an invalid length. [ 833.018472][T31184] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6379'. [ 833.082724][T31176] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 833.121336][T31176] batman_adv: batadv0: Adding interface: gretap2 [ 833.138302][T31176] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.173799][T31176] batman_adv: batadv0: Interface activated: gretap2 [ 833.453689][T31200] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6385'. [ 833.718075][T31206] lo speed is unknown, defaulting to 1000 [ 833.931147][T31211] geneve2: entered promiscuous mode [ 833.981865][T31211] geneve2: entered allmulticast mode [ 834.394339][T31223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6389'. [ 834.395019][T31222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6389'. [ 834.498474][T31224] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 834.572336][T31224] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 834.600909][T31224] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 834.714298][T31224] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 834.753719][T31224] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 834.768657][T31224] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 834.776979][T31224] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 834.828530][T31224] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 835.001839][T31235] lo speed is unknown, defaulting to 1000 [ 835.327530][T31247] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6395'. [ 835.336914][T31246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6395'. [ 835.479697][T31252] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6396'. [ 835.499706][T31252] netlink: 'syz.5.6396': attribute type 1 has an invalid length. [ 838.517124][T31208] net_ratelimit: 57 callbacks suppressed [ 838.517147][T31208] Set syz1 is full, maxelem 65536 reached [ 838.688482][T31266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6400'. [ 838.862075][T31273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6402'. [ 839.334450][T31252] ¾x9ÿ: left promiscuous mode [ 839.560339][T31285] lo speed is unknown, defaulting to 1000 [ 839.571065][T31282] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 839.652417][T31257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 840.283279][T31319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6417'. [ 840.283279][T31318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6417'. [ 840.315229][T31319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6417'. [ 840.711949][ T31] INFO: task syz.2.4974:25611 blocked for more than 143 seconds. [ 840.726840][ T31] Not tainted syzkaller #0 [ 840.747482][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 840.767284][ T31] task:syz.2.4974 state:D stack:26600 pid:25611 tgid:25609 ppid:17528 task_flags:0x400140 flags:0x00080002 [ 840.798095][ T31] Call Trace: [ 840.801491][ T31] [ 840.804471][ T31] __schedule+0x14ea/0x5050 [ 840.818529][ T31] ? __pfx___schedule+0x10/0x10 [ 840.828296][ T31] ? schedule+0x90/0x360 [ 840.832626][ T31] schedule+0x164/0x360 [ 840.847011][ T31] schedule_preempt_disabled+0x13/0x30 [ 840.858101][ T31] __mutex_lock+0x7fe/0x1300 [ 840.862812][ T31] ? __mutex_lock+0x5ac/0x1300 [ 840.877903][ T31] ? nfsd_nl_listener_set_doit+0x141/0x16c0 [ 840.884442][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 840.908408][ T31] ? __asan_memset+0x22/0x50 [ 840.918135][ T31] ? do_syscall_64+0xe2/0xf80 [ 840.922893][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.938319][ T31] nfsd_nl_listener_set_doit+0x141/0x16c0 [ 840.948072][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 840.953893][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 840.978113][ T31] ? rcu_is_watching+0x15/0xb0 [ 840.988068][ T31] ? __nla_parse+0x40/0x60 [ 840.992579][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 841.008165][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 841.024436][ T31] ? __asan_memcpy+0x40/0x70 [ 841.029771][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 841.035930][ T31] ? bpf_lsm_capable+0x9/0x20 [ 841.058410][ T31] ? security_capable+0x7e/0x2c0 [ 841.068156][ T31] genl_rcv_msg+0x61c/0x7a0 [ 841.072751][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.088438][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 841.094698][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 841.108116][ T31] netlink_rcv_skb+0x232/0x4b0 [ 841.113336][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.123491][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 841.133666][ T31] ? genl_rcv+0x19/0x40 [ 841.144656][ T31] ? down_read+0x272/0x2e0 [ 841.156455][ T31] ? genl_rcv+0xd/0x40 [ 841.166554][ T31] genl_rcv+0x28/0x40 [ 841.176588][ T31] netlink_unicast+0x80f/0x9b0 [ 841.189731][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 841.201634][ T31] ? netlink_sendmsg+0x650/0xb40 [ 841.217009][ T31] ? skb_put+0x11b/0x210 [ 841.221555][ T31] netlink_sendmsg+0x813/0xb40 [ 841.232091][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.248703][ T31] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 841.254258][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 841.268386][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 841.273857][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.283992][ T31] ____sys_sendmsg+0xa68/0xad0 [ 841.294143][ T31] ? __might_fault+0xaf/0x130 [ 841.308077][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.318066][ T31] ? import_iovec+0x73/0xa0 [ 841.322686][ T31] ___sys_sendmsg+0x2a5/0x360 [ 841.338855][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 841.343898][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.368239][ T31] ? __fget_files+0x2a/0x420 [ 841.375394][ T31] ? __fget_files+0x3a0/0x420 [ 841.380498][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 841.385619][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.391510][ T31] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 841.397364][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 841.407482][ T31] do_syscall_64+0xe2/0xf80 [ 841.415916][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.423150][ T31] ? trace_irq_disable+0x37/0x100 [ 841.430945][ T31] ? clear_bhb_loop+0x60/0xb0 [ 841.435775][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.441859][ T31] RIP: 0033:0x7f59c659aeb9 [ 841.446613][ T31] RSP: 002b:00007f59c7411028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.455518][ T31] RAX: ffffffffffffffda RBX: 00007f59c6816090 RCX: 00007f59c659aeb9 [ 841.463913][ T31] RDX: 0000000000048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 841.472041][ T31] RBP: 00007f59c6608c1f R08: 0000000000000000 R09: 0000000000000000 [ 841.480689][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.489002][ T31] R13: 00007f59c6816128 R14: 00007f59c6816090 R15: 00007fffd9ffd468 [ 841.497115][ T31] [ 841.500439][ T31] [ 841.500439][ T31] Showing all locks held in the system: [ 841.510455][ T31] 1 lock held by khungtaskd/31: [ 841.515360][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 841.548081][ T31] 3 locks held by kworker/1:1/43: [ 841.553242][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 841.578111][ T31] #1: ffffc90000b47bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 841.589741][ T31] #2: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 841.600139][ T31] 2 locks held by getty/5576: [ 841.605139][ T31] #0: ffff88814e95b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 841.615368][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 841.626295][ T31] 3 locks held by kworker/u8:11/6475: [ 841.632022][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 841.644325][ T31] #1: ffffc9000eed7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 841.655767][ T31] #2: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 841.665302][ T31] 5 locks held by kworker/u8:27/12061: [ 841.671366][ T31] 3 locks held by kworker/u8:32/22857: [ 841.676952][ T31] #0: ffff88802f758948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 841.688948][ T31] #1: ffffc9000b9f7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 841.702166][ T31] #2: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 841.711870][ T31] 2 locks held by syz.2.4974/25610: [ 841.717358][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 841.725845][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 841.736724][ T31] 2 locks held by syz.2.4974/25611: [ 841.742098][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 841.751240][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 841.761910][ T31] 1 lock held by syz.1.6413/31302: [ 841.767071][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 841.776344][ T31] 2 locks held by syz.0.6422/31329: [ 841.782180][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 841.793673][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 841.804961][ T31] [ 841.807436][ T31] ============================================= [ 841.807436][ T31] [ 841.820699][ T31] NMI backtrace for cpu 0 [ 841.820721][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 841.820744][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 841.820758][ T31] Call Trace: [ 841.820767][ T31] [ 841.820776][ T31] dump_stack_lvl+0xe8/0x150 [ 841.820810][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 841.820835][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 841.820867][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 841.820895][ T31] sys_info+0x135/0x170 [ 841.820910][ T31] watchdog+0xf90/0xfe0 [ 841.820933][ T31] ? watchdog+0x209/0xfe0 [ 841.820961][ T31] kthread+0x726/0x8b0 [ 841.820987][ T31] ? __pfx_watchdog+0x10/0x10 [ 841.821008][ T31] ? __pfx_kthread+0x10/0x10 [ 841.821036][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 841.821062][ T31] ? __pfx_kthread+0x10/0x10 [ 841.821087][ T31] ret_from_fork+0x51b/0xa40 [ 841.821110][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 841.821139][ T31] ? __switch_to+0xc82/0x1410 [ 841.821173][ T31] ? __pfx_kthread+0x10/0x10 [ 841.821197][ T31] ret_from_fork_asm+0x1a/0x30 [ 841.821240][ T31] [ 841.821247][ T31] Sending NMI from CPU 0 to CPUs 1: [ 841.942462][ C1] NMI backtrace for cpu 1 [ 841.942482][ C1] CPU: 1 UID: 0 PID: 22839 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 841.942503][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 841.942516][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 841.942544][ C1] RIP: 0010:unwind_next_frame+0x2c6/0x23c0 [ 841.942567][ C1] Code: 90 45 29 e8 4a 8d 1c 82 48 83 c3 fc 49 89 d5 48 39 da 0f 86 21 02 00 00 49 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 <48> 8d 14 46 48 bd 00 00 00 00 00 fc ff df e9 8f 01 00 00 31 db e9 [ 841.942583][ C1] RSP: 0018:ffffc9000bb86f98 EFLAGS: 00000246 [ 841.942598][ C1] RAX: 0000000000000000 RBX: ffffffff900859b0 RCX: ffffffff900859b4 [ 841.942612][ C1] RDX: ffffffff900859b0 RSI: ffffffff90842db6 RDI: ffffffff8c0739a0 [ 841.942625][ C1] RBP: ffffffff900859b4 R08: 0000000000000001 R09: ffffffff8e55a360 [ 841.942638][ C1] R10: ffffc9000bb870b8 R11: ffffffff81af9170 R12: ffffffff818df1b5 [ 841.942652][ C1] R13: 0000000000000000 R14: ffffc9000bb87068 R15: ffffffff900859b0 [ 841.942664][ C1] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 841.942679][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 841.942692][ C1] CR2: 00007f0109fe4198 CR3: 000000007588a000 CR4: 00000000003526f0 [ 841.942709][ C1] Call Trace: [ 841.942716][ C1] [ 841.942730][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 841.942750][ C1] ? worker_thread+0xda6/0x1360 [ 841.942777][ C1] ? worker_thread+0xda6/0x1360 [ 841.942804][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 841.942827][ C1] arch_stack_walk+0x11b/0x150 [ 841.942850][ C1] ? worker_thread+0xda6/0x1360 [ 841.942879][ C1] stack_trace_save+0xa9/0x100 [ 841.942901][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 841.942924][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 841.942946][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 841.942965][ C1] kasan_save_track+0x3e/0x80 [ 841.942981][ C1] ? kasan_save_track+0x3e/0x80 [ 841.942996][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 841.943013][ C1] ? __kmalloc_noprof+0x40c/0x7e0 [ 841.943029][ C1] ? ieee802_11_parse_elems_full+0x159/0x2ab0 [ 841.943051][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2c80 [ 841.943070][ C1] ? ieee80211_iface_work+0x84e/0x1340 [ 841.943090][ C1] ? cfg80211_wiphy_work+0x2ab/0x450 [ 841.943110][ C1] ? process_scheduled_works+0xaec/0x17a0 [ 841.943135][ C1] ? worker_thread+0xda6/0x1360 [ 841.943189][ C1] __kasan_kmalloc+0x93/0xb0 [ 841.943207][ C1] __kmalloc_noprof+0x40c/0x7e0 [ 841.943224][ C1] ? ieee802_11_parse_elems_full+0x159/0x2ab0 [ 841.943251][ C1] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 841.943273][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 841.943294][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 841.943317][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 841.943344][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 841.943376][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 841.943405][ C1] ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2c80 [ 841.943431][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 841.943462][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 841.943487][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 841.943508][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 841.943531][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 841.943559][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 841.943586][ C1] ? kcov_remote_start+0x17f/0x7a0 [ 841.943609][ C1] ieee80211_iface_work+0x84e/0x1340 [ 841.943635][ C1] cfg80211_wiphy_work+0x2ab/0x450 [ 841.943656][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 841.943683][ C1] process_scheduled_works+0xaec/0x17a0 [ 841.943724][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 841.943749][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 841.943769][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 841.943788][ C1] ? schedule+0x90/0x360 [ 841.943815][ C1] worker_thread+0xda6/0x1360 [ 841.943856][ C1] kthread+0x726/0x8b0 [ 841.943877][ C1] ? __pfx_worker_thread+0x10/0x10 [ 841.943902][ C1] ? __pfx_kthread+0x10/0x10 [ 841.943923][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 841.943945][ C1] ? __pfx_kthread+0x10/0x10 [ 841.943964][ C1] ret_from_fork+0x51b/0xa40 [ 841.943982][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 841.944008][ C1] ? __switch_to+0xc82/0x1410 [ 841.944034][ C1] ? __pfx_kthread+0x10/0x10 [ 841.944053][ C1] ret_from_fork_asm+0x1a/0x30 [ 841.944087][ C1] [ 842.384557][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 842.391463][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 842.400711][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 842.410810][ T31] Call Trace: [ 842.414121][ T31] [ 842.417073][ T31] vpanic+0x1e0/0x670 [ 842.421095][ T31] panic+0xc5/0xd0 [ 842.424847][ T31] ? __pfx_panic+0x10/0x10 [ 842.429435][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 842.434856][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 842.441049][ T31] watchdog+0xfda/0xfe0 [ 842.445246][ T31] ? watchdog+0x209/0xfe0 [ 842.449619][ T31] kthread+0x726/0x8b0 [ 842.453722][ T31] ? __pfx_watchdog+0x10/0x10 [ 842.458424][ T31] ? __pfx_kthread+0x10/0x10 [ 842.463103][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.468351][ T31] ? __pfx_kthread+0x10/0x10 [ 842.472999][ T31] ret_from_fork+0x51b/0xa40 [ 842.477635][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 842.482880][ T31] ? __switch_to+0xc82/0x1410 [ 842.487599][ T31] ? __pfx_kthread+0x10/0x10 [ 842.492258][ T31] ret_from_fork_asm+0x1a/0x30 [ 842.497253][ T31] [ 842.500921][ T31] Kernel Offset: disabled [ 842.505275][ T31] Rebooting in 86400 seconds..