last executing test programs: 4.732475113s ago: executing program 4 (id=10598): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x4000004, 0x900, 0x5, 0x28, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3, r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xf8, 0xe1, &(0x7f0000000000)="856398f448018651cab0c899da02fac2834b047abf0c55eaa895c145f6b499ad63ddaf2340adc094c2c5e8acf9f55a8e584ac55c531ce3b0d9d62031cbdb99d19ad556ddbbb60f1ab8c3fb161b4d41cc03d8a58fb88f71acdcb1defb6da68fd1e4ef9ac27b519d9ba9e4e8a712ac182894d1d31385f4e46957a684df26a221008da1098f55e6ace6797018856c1d75e4698b25c4fcf9b82db8d662fb6d9bab76b3b37565f877e89ae8900bd2bceda7416df74e864b46702bc51d109438d02f8b850dc16185171cc4eb6df60a458774e0b13a7f10228539a40964837e675590a3682f0a01037eb2e286c72d3bd3bbdfa485469222104a9b14", &(0x7f00000001c0)=""/225, 0xc, 0x0, 0x6b, 0xfc, &(0x7f0000000100)="606bf6e5409d3dccc805c7b070126b79364b0bc48f4188a531f2fadcba74eed133a6545f9ffb00d354cd267bafb48656c218e8444acc8c8fd576843da703bcfe0208d5d8f272e90fac354a5bb9fe1b0be1f19bea08bc9c92d2a5d486082a7e17f77552f77d3e478bc49ca1", &(0x7f00000002c0)="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", 0x0, 0x0, 0x590}, 0x50) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 4.676718645s ago: executing program 2 (id=10600): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x2, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000002a40), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x14, r3, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x20004094) 4.514243371s ago: executing program 2 (id=10602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x6}, 0x8) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 4.507265238s ago: executing program 1 (id=10603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={{0xe, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 4.310051519s ago: executing program 1 (id=10605): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd27, 0x3501}]}, 0x68}, 0x1, 0x7}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000420000000000000000000009010000010000"], 0x0, 0x26}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20008000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) r9 = socket(0x11, 0xa, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x4}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.077673069s ago: executing program 2 (id=10608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x27, 0x1, 0x70bd27, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x8000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x422c, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4055, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf, 0x0, 0x20000001, 0x8, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 4.01705875s ago: executing program 3 (id=10609): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x2, 0x6, 0x500, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 3.968686688s ago: executing program 3 (id=10610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x1, 0x3}) r1 = accept4(r0, &(0x7f0000000040)=@caif=@dbg, &(0x7f00000000c0)=0x80, 0x80800) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r1, 0x2, 0x99, "c7f5cac3d79e18fa5be04ff40fa16df20a4977ecb1dc49cda7f2497f958d23537bd5bf2fb724a69fdc7a45cdf966c9cb5e1a4d199cfa6e6f16e8d88893c233d69ad6dd0408a85f4460d813546eb4f634837500687a07730e9d5fc21f279727b12ba1041cee07dce849beea9c4d9bc090cc8819fffa9e966040991b5852124d401be7501a4482a69aae71c19381"}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000200)={0x5, 0x10, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x10) r3 = accept4$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80000) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400)) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000440)={@none, 0x2}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x3, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x2, 0xfffffffb}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8001}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10020010}, 0x95) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000640)=@generic={0x3, 0x2, 0xbaf6}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000680)={0x4, 0x9, 0x8, 0x0, 0x6, 0x5, 0x5, 0x3}, 0x20) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x2f, 0x39, 0x40, 0x7, 0x3, @loopback, @local, 0x7800, 0x8, 0x9, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x174, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x800) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d40)={&(0x7f0000000a80)="919c7edca048de8fa6147400dc8bc84f9b32e2f78769afab6a5c373cef6abd8ac9a2962fa1175718efdd5776b006cfb44519cf263229854fb0b6d67761091331fd4bc72048b30ac429f7c849f4d253697d67ab26d8d5b8a7fa747e277fb83ab2813a974959ed6c2d0cd8ea2c7b015e96a50a360b8651be8dc9b94c9e2d778375ef9ecc8842bdbec23cc5f71780b0b42f6e37bcf5e14cb54a5551bc8b3f685526b82c2de14b58a6fd", &(0x7f0000000b40)=""/228, &(0x7f0000000c40)="d016ee0e8df57df71df8b05e8d2a942ab1a72c93ae60d2536712ea3483ca0df911427ab602b004073c748f3b9bc104e5f96ca108dfa1caa2a1", &(0x7f0000000c80), 0x6e5307e7, r9, 0x4}, 0x38) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000d80)={0x6, 'veth1\x00', {0xf375}, 0x2}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2) accept(r3, &(0x7f0000000ec0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000f40)=0x80) r10 = socket(0x25, 0x4, 0xc126) getsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000000f80)=0xb8, &(0x7f0000000fc0)=0x1) r11 = accept(r3, &(0x7f0000001000)=@phonet, &(0x7f0000001080)=0x80) setsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, &(0x7f00000010c0)=0x6, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000001100), r1) 3.901112622s ago: executing program 0 (id=10611): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r3, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x0, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x10}, @TIPC_NLA_CON_NODE, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL]}]}, 0x20}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000005c0)={&(0x7f0000000180), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "d3e637772565d4358df5c23b943a5849c656d5bbc6af1afbdd67b6dcd4d438dd4f77ac6e"}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000000040)) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f00000000c0)=""/108, &(0x7f0000000140)=0x6c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x2bc, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xa6, 0x0, 0x0, 0x0, @binary="f21fb3e9bb2da1c4b166488c74b60ace40ecb08303502f00562ab122befe600526ac15d135de94c85870672845939e93dea4c5e8a1437e2f3379c3933d529b55f3d98c421183b944204f70d64ca341ef003452dc561a5f2007738bdb3255e67560d5ca67cab7feb7f46a25896ab43748f602db6332d940ad8d9cf0589fa6f9c4e6bf48f7af7d88a230524969d8122d598080b50387a398d11d5878025c6659b8ad20"}, @nested={0x203, 0x0, 0x0, 0x1, [@generic="976b6408686030", @nested={0x1f5, 0x127, 0x0, 0x1, [@generic="e44338b52b3f896aa8ac460cef9b6a20c9307737a0c1fefa1e87e0db4bf2a6b2576340979d748ed862c4e60d806caf4fe3ea8e5049126dea862b920cb0dd1f16ff18f04436b35f41c79a62631c01134b60df286afe3babb7af72529b6607ba2ea2f633dc8acf9d6610ffd6cca3bd3b6fd22b469d128cd6db16f5e122fad25e1b55a51c688f37c28d9900e8d1cb70a89451dab7bcfb5ca9fa2071d4520ed0acbde48a6bc6ebf29904b9ec7ca2d6afe5f50564c37116cb1475b43ebddc5f7ff9cabf8829d4f804bd5b5ec122e8c7bed4332aef39e21377166fa5f8bd4ebd3e1a1d325de81af609864956f400278ee6119c2255444e3b3e", @generic="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"]}]}]}, 0x2bc}], 0x1}, 0x40004) 3.772325632s ago: executing program 4 (id=10612): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xfffffeeb, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x20007, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000120001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x28c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140100004300000325bd7000fbdbdf2507000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000003c0)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="01005fe4332bcb92da29bd7000fedbdf2502", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 3.736452349s ago: executing program 0 (id=10613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff80000}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x6485e2a, 0x4000000000ffff}) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000400)=0x539, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 3.706644111s ago: executing program 4 (id=10614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9c501}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0xfc, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe3d}, 0x48) syz_emit_ethernet(0x2b, &(0x7f00000003c0)={@local, @dev, @void, {@arp={0x806, @generic={0x6, 0x6004, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'EzVL', @multicast, "5c917b8e44"}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 3.575579766s ago: executing program 4 (id=10615): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000209c", @ANYRES16, @ANYBLOB="070627bd7000fcdbdf252d0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000220) 958.294021ms ago: executing program 3 (id=10616): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe9f, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d735aa86e51e9e361851f6c03ae6ef9d40e68a14c199f02cb394729ec8cc08fc35f678d14520045a8b3fcc6b448402f416ca558890fc92064cdeb390544a4ea43c0abcdaa37df105aba9b1c98ab65129cee4281162521058795823b0cf87a7fe3de38c580554f210298505525c0fb8637a5f44dc59d6804930d0bf71884b12eaaf449081e3292aadf9bd9db4808bc7594e5f2560b9ac9cb6492442fb1bac6adad8eb40f0", @ANYRES8, @ANYBLOB="7b13000000000000200012800b0001006272696467650000100002800c0020000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 942.346192ms ago: executing program 1 (id=10617): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000740)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2, 0x300}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) 865.03472ms ago: executing program 4 (id=10618): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x60, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000140)={'bridge_slave_1\x00', @ifru_map={0x6, 0x9, 0x8, 0x2, 0x5, 0x9}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x8, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4c80) 864.516136ms ago: executing program 0 (id=10619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4000000) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) writev(r1, &(0x7f0000000140), 0x0) 834.437484ms ago: executing program 2 (id=10620): r0 = socket(0x28, 0x5, 0x0) socket(0x10, 0x80003, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) (async, rerun: 32) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x2a0, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg$alg(r2, 0x0, 0x0, 0x20) (async) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="0b549a581110ccea71d88658d1c9e71fb518ead61d", 0x15}], 0x1}}], 0x1, 0x2404c090) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) (async) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000880)="75b2941d51ae5c808a909f7937bd0f873b301ccaaeee5d25b6", 0x6c, r5}, 0x38) (async, rerun: 32) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) close(r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) 820.954041ms ago: executing program 3 (id=10621): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000acafb3d14d82c1d97579ef762ebc8c41eb6d21152644443af2cec55ace6455550dc172f5dd98def18b199beb13fafddb23abefc663f4a1fb4a2e1cd6ef10db0f6268a323dce7ff4b28fa4fc92f58d7a3941595077b5ec43e53c66bc5e6cccf4c938b7c33c9a7ab972f5844ba2d127c5cfd7fd7e9bf32045b3f38daf0b160a28e453a2cfba47dd0be1ca6b6a73ae65548cefd0866780b0447bee9a222af6da5c5cb50e0f1d9e1375b39e3b10520750f3378b968969dcb47876c1e97e4c3a5889270a15ae2a47690d7c15780eae70ad2ebf06a63f7eeebb0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x2, @private2, 0x10}}, 0xb, 0x7}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340)=0x1000, 0x4) (async) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000001c0)={'pimreg\x00', {0x2, 0x0, @loopback}}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) (async) connect$packet(r2, &(0x7f0000000040)={0x11, 0x16, r3, 0x1, 0x6, 0x6, @remote}, 0x14) 788.601228ms ago: executing program 1 (id=10622): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000280), 0x4) sendmmsg$unix(r1, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61157300000000006113770000000000bfa000000000000007050000080013002d15010000000000950017b8000000006916000000000000bf6700000000000035060200c0ff3f006706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3f00004d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402275fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7db0825e9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 612.554845ms ago: executing program 3 (id=10623): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0xc0, &(0x7f0000000180)={@align=0x4, {0x0, 0x0, 0x7, 0xf84}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xa}, {[0x1, 0x9, 0x4cd6, 0x7ff]}, 0x1, 0x75, &(0x7f0000000240)=""/117}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @alu={0x4, 0x1, 0x4, 0x7, 0xa, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r2, 0x6}, 0x94) 612.343176ms ago: executing program 0 (id=10624): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@empty}, 0x14) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004700)=ANY=[@ANYBLOB="a04400005200010000000000000000001c0000008b4409"], 0x44a0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4001) close(r0) 611.632075ms ago: executing program 2 (id=10625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x2}, {0x3, 0x1, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0x4) pipe(&(0x7f0000000000)) 508.441289ms ago: executing program 4 (id=10626): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000002c0)={0x7, 'xfrm0\x00', {0xd}, 0x73ff}) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000000114242"], 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90) 484.178839ms ago: executing program 1 (id=10627): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x7, {0x1, 0x3, 0x2}}, 0x10) 294.872959ms ago: executing program 0 (id=10628): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_out(r5, 0x0, &(0x7f0000000040)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) (async) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000003400)={0x0, {{0xa, 0x4e23, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x1, @local, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r8, 0x0, 0xa, 0x40054, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={r9, 0x6}, 0x8) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 294.375318ms ago: executing program 3 (id=10629): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@isdn, &(0x7f0000000000)=0x80) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280), 0x4) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x35, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000240)=0x2c) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x4000) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 185.244023ms ago: executing program 2 (id=10630): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) 6.741675ms ago: executing program 1 (id=10631): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 64) r0 = socket(0x2, 0x80805, 0x0) (rerun: 64) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async, rerun: 64) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x4c, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x90e}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x4]}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0xe2d3234ffa690f19}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket$isdn(0x22, 0x2, 0x2) close(r5) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 0s ago: executing program 0 (id=10632): r0 = socket$inet(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5e}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @rand_addr=0x64010101}, {0x6, @broadcast}, 0x4a, {0x2, 0x0, @private=0xa010101}, 'syz_tun\x00'}) kernel console output (not intermixed with test programs): 7] bond0: (slave ip6erspan0): link status definitely down, disabling slave [ 1076.231177][T22987] bond0: now running without any active interface! [ 1076.277112][ T6640] Unsupported ieee802154 address type: 0 [ 1076.310044][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8980'. [ 1076.471374][ T6653] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1076.494449][ T6657] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8984'. [ 1076.529508][ T6657] openvswitch: netlink: Flow key attr not present in new flow. [ 1076.579816][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8983'. [ 1076.789389][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8989'. [ 1076.965091][ T6693] netlink: 'syz.4.8994': attribute type 1 has an invalid length. [ 1077.092193][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8996'. [ 1077.434632][ T6721] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9001'. [ 1077.509665][ T6724] vlan2: entered allmulticast mode [ 1077.542051][ T6726] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9003'. [ 1077.599443][ T6724] netlink: 'syz.0.9003': attribute type 1 has an invalid length. [ 1077.610417][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9006'. [ 1077.648871][ T6726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.660939][ T6726] bond_slave_0: left allmulticast mode [ 1077.675544][ T6726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.685817][ T6726] bond_slave_1: left allmulticast mode [ 1077.693783][ T6726] bond0 (unregistering): Released all slaves [ 1077.705941][ T6730] veth0: entered promiscuous mode [ 1077.770369][ T6724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.778337][ T6736] netlink: 'syz.4.9005': attribute type 33 has an invalid length. [ 1078.088404][ T6756] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1078.102419][ T6756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1078.427726][ T6769] netlink: 'syz.3.9016': attribute type 10 has an invalid length. [ 1078.528908][ T6773] __nla_validate_parse: 66 callbacks suppressed [ 1078.528933][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9015'. [ 1078.585987][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9015'. [ 1078.597235][ T6776] netlink: 'syz.1.9018': attribute type 178 has an invalid length. [ 1078.649946][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9015'. [ 1078.806094][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9022'. [ 1079.002674][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9028'. [ 1079.230333][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9033'. [ 1079.277069][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9033'. [ 1079.332858][ T6823] xt_hashlimit: size too large, truncated to 1048576 [ 1079.464604][ T6828] netlink: 'syz.3.9036': attribute type 11 has an invalid length. [ 1079.491605][ T6828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9036'. [ 1079.613608][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9038'. [ 1080.099415][ T6865] netlink: 'syz.0.9047': attribute type 1 has an invalid length. [ 1080.109847][ T6863] netlink: 'syz.0.9047': attribute type 1 has an invalid length. [ 1080.198431][ T6871] xt_hashlimit: size too large, truncated to 1048576 [ 1080.218732][ T6863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1080.252360][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9051'. [ 1080.613761][ T6891] netlink: 'syz.3.9057': attribute type 29 has an invalid length. [ 1080.622839][ T6891] netlink: 'syz.3.9057': attribute type 29 has an invalid length. [ 1080.784911][ T6905] netlink: 'syz.3.9061': attribute type 1 has an invalid length. [ 1080.848193][ T6905] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1080.930742][ T6912] tipc: Enabled bearer , priority 0 [ 1080.982508][ T6914] bond11: entered promiscuous mode [ 1080.990909][ T6914] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1081.047041][ T6912] syzkaller0: entered promiscuous mode [ 1081.052692][ T6912] syzkaller0: entered allmulticast mode [ 1081.127489][ T6914] bond11: (slave bridge11): making interface the new active one [ 1081.138398][ T6914] bridge11: entered promiscuous mode [ 1081.149841][ T6914] bridge11: left promiscuous mode [ 1081.179285][ T6926] netlink: ct family unspecified [ 1081.207878][ T6919] tipc: Resetting bearer [ 1081.216634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.225454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.233784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.241994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.267521][ T6911] tipc: Resetting bearer [ 1081.310606][ T6911] tipc: Disabling bearer [ 1082.002877][ T6970] validate_nla: 1 callbacks suppressed [ 1082.002898][ T6970] netlink: 'syz.1.9080': attribute type 32 has an invalid length. [ 1082.151915][ T6975] netlink: 'syz.1.9083': attribute type 1 has an invalid length. [ 1082.388548][ T6979] syzkaller0: entered promiscuous mode [ 1082.404163][ T6979] syzkaller0: entered allmulticast mode [ 1082.624453][ T6993] syzkaller0: entered promiscuous mode [ 1082.641026][ T6993] syzkaller0: entered allmulticast mode [ 1083.800950][ T7061] netlink: 'syz.0.9107': attribute type 4 has an invalid length. [ 1083.814845][ T7061] __nla_validate_parse: 11 callbacks suppressed [ 1083.814870][ T7061] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1084.174199][ T7094] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1084.284149][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.390708][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.408221][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.420259][ T7099] Bluetooth: MGMT ver 1.23 [ 1084.624664][T22985] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.642584][T22985] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.668727][T22985] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.704979][T22985] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.945815][ T7112] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1084.988410][ T7115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1085.056094][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9120'. [ 1085.161467][ T7119] netlink: 'syz.2.9122': attribute type 21 has an invalid length. [ 1085.179806][ T7119] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9122'. [ 1085.216704][ T7122] netlink: 'syz.4.9125': attribute type 30 has an invalid length. [ 1085.328388][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1085.370733][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1085.409553][ T7130] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1085.553994][ T7149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9131'. [ 1085.797545][ T7166] openvswitch: netlink: Unknown key attributes 2 [ 1085.804439][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9133'. [ 1086.037267][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1086.055959][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1089.695764][ T11] block nbd0: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 180 seconds [ 1089.707370][ T11] block nbd0: Possible stuck request ffff8880270a0200: control (read@1024,1024B). Runtime 180 seconds [ 1089.718845][ T11] block nbd0: Possible stuck request ffff8880270a0400: control (read@2048,1024B). Runtime 180 seconds [ 1089.732078][ T11] block nbd0: Possible stuck request ffff8880270a0600: control (read@3072,1024B). Runtime 180 seconds [ 1090.423567][ T7304] openvswitch: netlink: IP tunnel dst address not specified [ 1090.589259][ T7311] netlink: 'syz.3.9175': attribute type 8 has an invalid length. [ 1090.731333][ T7322] netlink: 'syz.2.9177': attribute type 1 has an invalid length. [ 1090.753226][ T7322] __nla_validate_parse: 4 callbacks suppressed [ 1090.753248][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9177'. [ 1090.784086][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9177'. [ 1091.105724][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1091.121003][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1091.129981][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1091.146156][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1091.155733][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1091.309487][ T7346] netlink: 'syz.4.9183': attribute type 16 has an invalid length. [ 1091.328825][ T7346] netlink: 'syz.4.9183': attribute type 17 has an invalid length. [ 1091.400783][ T7337] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1091.414101][ T7337] bond2 (unregistering): Released all slaves [ 1091.545958][ T7346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1091.565553][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9182'. [ 1091.653249][ T7332] wg1 speed is unknown, defaulting to 1000 [ 1092.049951][ T7332] lo speed is unknown, defaulting to 1000 [ 1092.256753][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9191'. [ 1092.292954][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9191'. [ 1093.202506][ T5830] Bluetooth: hci5: command tx timeout [ 1093.328091][ T7332] chnl_net:caif_netlink_parms(): no params data found [ 1093.383194][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9203'. [ 1093.431988][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.557800][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.809490][T22986] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.837742][T22986] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.188231][T22986] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.204751][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1094.214562][T22986] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.235878][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.243712][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.254989][ T7332] bridge_slave_0: entered allmulticast mode [ 1094.263583][ T7332] bridge_slave_0: entered promiscuous mode [ 1094.277971][ T7460] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1094.299387][T22986] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.322103][T22986] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.327561][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1094.357868][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.366629][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.374233][ T7332] bridge_slave_1: entered allmulticast mode [ 1094.375326][ T7467] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.9211'. [ 1094.390819][ T7332] bridge_slave_1: entered promiscuous mode [ 1094.541817][T22986] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.553832][T22986] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.618126][ T7332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.654520][ T7332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.668378][T22992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.676160][T22992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.709919][ T6207] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.746675][ T6208] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.831183][ T7332] team0: Port device team_slave_0 added [ 1094.868289][ T7495] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20004 [ 1094.903606][ T7332] team0: Port device team_slave_1 added [ 1095.028044][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.065467][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.109736][ T7332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.128378][ T6207] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1095.278759][ T5830] Bluetooth: hci5: command tx timeout [ 1095.302462][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.311634][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.353151][ T7332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.603488][ T7524] netlink: 'syz.2.9226': attribute type 2 has an invalid length. [ 1095.625125][ T7332] hsr_slave_0: entered promiscuous mode [ 1095.634236][ T7332] hsr_slave_1: entered promiscuous mode [ 1095.641896][ T7332] debugfs: 'hsr0' already exists in 'hsr' [ 1095.663953][ T7332] Cannot create hsr debugfs directory [ 1095.731581][T22986] gretap0: left allmulticast mode [ 1095.737785][T22986] gretap0: left promiscuous mode [ 1095.743107][T22986] bridge0: port 3(gretap0) entered disabled state [ 1095.788146][T22986] bridge_slave_1: left allmulticast mode [ 1095.796935][T22986] bridge_slave_1: left promiscuous mode [ 1095.810844][T22986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.836147][T22986] bridge_slave_0: left allmulticast mode [ 1095.847346][T22986] bridge_slave_0: left promiscuous mode [ 1095.853168][T22986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.908552][T22986] veth0_to_bond: left allmulticast mode [ 1095.944720][T22986] veth0_to_bond: left promiscuous mode [ 1095.955044][T22986] bridge6: port 1(veth0_to_bond) entered disabled state [ 1096.063252][ T7555] __nla_validate_parse: 4 callbacks suppressed [ 1096.063276][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1096.216782][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9233'. [ 1096.225688][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9233'. [ 1096.472216][T22986] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1096.481048][T22986] bridge2 (unregistering): left promiscuous mode [ 1096.487880][T22986] bridge2 (unregistering): left allmulticast mode [ 1096.751360][T22986] bond8 (unregistering): (slave bridge8): Releasing active interface [ 1096.908392][T22986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.921027][T22986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.930852][T22986] bond0 (unregistering): Released all slaves [ 1096.944104][T22986] bond1 (unregistering): Released all slaves [ 1096.973915][T22986] bond2 (unregistering): Released all slaves [ 1096.994976][T22986] bond3 (unregistering): Released all slaves [ 1097.023054][T22986] bond4 (unregistering): (slave lo): Releasing backup interface [ 1097.031758][T22986] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1097.044090][T22986] bond4 (unregistering): Released all slaves [ 1097.067777][T22986] bond5 (unregistering): Released all slaves [ 1097.094266][T22986] bond7 (unregistering): Released all slaves [ 1097.113245][T22986] bond6 (unregistering): Released all slaves [ 1097.132560][T22986] bond8 (unregistering): Released all slaves [ 1097.162479][T22986] bond9 (unregistering): Released all slaves [ 1097.181797][T22986] bond10 (unregistering): Released all slaves [ 1097.209990][T22986] bond11 (unregistering): Released all slaves [ 1097.349586][ T7548] bond3: option fail_over_mac: invalid value (16) [ 1097.359779][ T5830] Bluetooth: hci5: command tx timeout [ 1097.378806][ T7548] bond3 (unregistering): Released all slaves [ 1097.425950][ T7559] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1097.648253][ T7578] netlink: 'syz.0.9236': attribute type 1 has an invalid length. [ 1097.749777][ T7584] team0: Port device team_slave_0 removed [ 1097.800139][ T7578] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1098.346105][ T7616] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.9244'. [ 1098.451331][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9247'. [ 1098.476742][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1098.602388][ T7638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9250'. [ 1098.754654][ T7643] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9251'. [ 1099.099130][ T7659] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9253'. [ 1099.308248][ T7332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1099.399360][ T7332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1099.418188][ T7664] xt_hashlimit: size too large, truncated to 1048576 [ 1099.442240][ T5830] Bluetooth: hci5: command tx timeout [ 1099.487413][ T7332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1099.580198][ T7332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1100.213192][ T7716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9263'. [ 1100.285621][ T7718] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1100.474731][ T7721] nft_compat: unsupported protocol 0 [ 1100.660456][ T7332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.732824][T22986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.763119][T22986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.782838][T22986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.794491][T22986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.841725][T22986] veth0_macvtap: left allmulticast mode [ 1100.857661][T22986] veth1_macvtap: left promiscuous mode [ 1100.865646][T22986] veth0_macvtap: left promiscuous mode [ 1101.289484][T22986] pimreg (unregistering): left allmulticast mode [ 1101.634491][T22986] team0 (unregistering): Port device 26 removed [ 1101.805113][ T7743] netlink: 'syz.4.9270': attribute type 29 has an invalid length. [ 1101.901507][ T7332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.942525][T19788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.949793][T19788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.032276][T22992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.039510][T22992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.110925][ T7780] netlink: 284 bytes leftover after parsing attributes in process `syz.1.9275'. [ 1102.327250][ T7785] netlink: 'syz.2.9276': attribute type 1 has an invalid length. [ 1102.335676][ T7785] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9276'. [ 1102.530169][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9281'. [ 1102.594723][T22986] IPVS: stop unused estimator thread 0... [ 1102.650840][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9280'. [ 1102.891639][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.045399][ T7332] veth0_vlan: entered promiscuous mode [ 1103.055298][ T7821] wg1 speed is unknown, defaulting to 1000 [ 1103.066042][ T7332] veth1_vlan: entered promiscuous mode [ 1103.158792][ T7332] veth0_macvtap: entered promiscuous mode [ 1103.189585][ T7332] veth1_macvtap: entered promiscuous mode [ 1103.252364][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.274911][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.336636][T22986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.357004][T22986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.367426][T22992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.380801][T22992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.592701][T22992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.614904][T22992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.724847][ T7821] lo speed is unknown, defaulting to 1000 [ 1103.730501][T22992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.730657][T22992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.860068][ T7850] syzkaller0: entered promiscuous mode [ 1103.876739][ T7850] syzkaller0: entered allmulticast mode [ 1103.918688][ T7850] openvswitch: netlink: IP tunnel dst address not specified [ 1104.481136][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1104.496722][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1104.506886][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1104.525754][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1104.540635][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1104.631921][ T7873] sctp: [Deprecated]: syz.3.9300 (pid 7873) Use of int in maxseg socket option. [ 1104.631921][ T7873] Use struct sctp_assoc_value instead [ 1104.774852][ T7866] wg1 speed is unknown, defaulting to 1000 [ 1104.948068][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9303'. [ 1105.181952][T22986] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.380309][T22986] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.562886][T22986] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.578752][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9310'. [ 1105.658298][T22986] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.710880][ T7909] syz_tun: entered allmulticast mode [ 1105.727568][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9309'. [ 1105.751284][ T7909] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20003 [ 1105.775794][ T7866] lo speed is unknown, defaulting to 1000 [ 1105.803234][ T7907] IPv6: sit1: Disabled Multicast RS [ 1106.217116][ T7927] syzkaller0: entered promiscuous mode [ 1106.222673][ T7927] syzkaller0: entered allmulticast mode [ 1106.316677][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1106.438291][ T7939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9319'. [ 1106.464049][ T7939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9319'. [ 1106.518006][ T7944] netlink: 'syz.0.9321': attribute type 5 has an invalid length. [ 1106.543789][T22986] team0: left allmulticast mode [ 1106.549994][T22986] team_slave_0: left allmulticast mode [ 1106.564048][T22986] team_slave_1: left allmulticast mode [ 1106.577928][T22986] team0: left promiscuous mode [ 1106.593091][T22986] team_slave_0: left promiscuous mode [ 1106.602227][T22986] team_slave_1: left promiscuous mode [ 1106.620897][T22986] bridge0: port 3(team0) entered disabled state [ 1106.640794][ T51] Bluetooth: hci0: command tx timeout [ 1106.650490][T22986] bridge_slave_1: left allmulticast mode [ 1106.666618][T22986] bridge_slave_1: left promiscuous mode [ 1106.710705][T22986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.735936][T22986] bridge_slave_0: left allmulticast mode [ 1106.750007][T22986] bridge_slave_0: left promiscuous mode [ 1106.756081][T22986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.964342][ T7973] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1107.273869][T22986] bond4 (unregistering): (slave gretap2): Releasing active interface [ 1107.395150][T22986] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 1107.535989][T22986] bond4 (unregistering): (slave bridge4): Releasing active interface [ 1107.651832][T22986] team0: Port device bridge7 removed [ 1108.586324][T22986] bond1 (unregistering): Released all slaves [ 1108.601912][T22986] bond0 (unregistering): left promiscuous mode [ 1108.609010][T22986] bond0 (unregistering): Released all slaves [ 1108.625702][T22986] bond2 (unregistering): Released all slaves [ 1108.643053][T22986] bond3 (unregistering): Released all slaves [ 1108.659252][T22986] bond4 (unregistering): Released all slaves [ 1108.674451][T22986] bond5 (unregistering): Released all slaves [ 1108.692659][T22986] bond6 (unregistering): Released all slaves [ 1108.713997][T22986] bond7 (unregistering): Released all slaves [ 1108.721007][ T51] Bluetooth: hci0: command tx timeout [ 1108.736210][T22986] bond8 (unregistering): Released all slaves [ 1108.783882][ T7965] vlan2: entered promiscuous mode [ 1108.994203][T22986] tipc: Disabling bearer [ 1109.065777][T22986] tipc: Left network mode [ 1109.232509][ T7866] chnl_net:caif_netlink_parms(): no params data found [ 1109.346632][ T5193] udevd[5193]: worker [3483] /devices/virtual/block/nbd0 timeout; kill it [ 1109.391246][ T5193] udevd[5193]: seq 39890 '/devices/virtual/block/nbd0' killed [ 1109.477958][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9328'. [ 1109.483552][ T8012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9329'. [ 1109.535074][ T8016] tipc: Enabled bearer , priority 0 [ 1109.650059][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.658301][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.665685][ T7866] bridge_slave_0: entered allmulticast mode [ 1109.692791][ T7866] bridge_slave_0: entered promiscuous mode [ 1109.734014][ T8016] tipc: Disabling bearer [ 1109.798078][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.815710][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.848100][ T7866] bridge_slave_1: entered allmulticast mode [ 1109.862025][ T7866] bridge_slave_1: entered promiscuous mode [ 1109.971460][ T8030] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9332'. [ 1110.016031][ T8027] vlan0: entered allmulticast mode [ 1110.023054][ T8027] bond0: entered allmulticast mode [ 1110.069492][ T7866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.113258][ T7866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.140320][ T8029] wg1 speed is unknown, defaulting to 1000 [ 1110.315634][ T7866] team0: Port device team_slave_0 added [ 1110.419773][ T7866] team0: Port device team_slave_1 added [ 1110.484522][T22986] mac80211_hwsim hwsim65 wlan1 (unregistering): left promiscuous mode [ 1110.628377][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.635415][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.726528][ T7866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.798364][ T51] Bluetooth: hci0: command tx timeout [ 1110.824669][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.843705][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.874560][ T7866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.891444][ T8029] lo speed is unknown, defaulting to 1000 [ 1111.135947][ T7866] hsr_slave_0: entered promiscuous mode [ 1111.168428][ T7866] hsr_slave_1: entered promiscuous mode [ 1111.180881][ T7866] debugfs: 'hsr0' already exists in 'hsr' [ 1111.201947][ T7866] Cannot create hsr debugfs directory [ 1111.384193][ T8069] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9341'. [ 1111.593117][ T8079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9344'. [ 1111.794217][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9344'. [ 1111.804785][ T8082] netlink: 'syz.0.9343': attribute type 3 has an invalid length. [ 1111.887899][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9344'. [ 1111.905315][ T8079] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9344'. [ 1111.948270][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9344'. [ 1111.967042][ T8079] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9344'. [ 1112.362850][ T8101] veth0: entered promiscuous mode [ 1112.532920][ T8098] syzkaller0: entered promiscuous mode [ 1112.580831][ T8104] syzkaller1: entered promiscuous mode [ 1112.588833][ T8104] syzkaller1: entered allmulticast mode [ 1112.596194][ T8089] veth0: left promiscuous mode [ 1112.624234][T22986] hsr_slave_0: left promiscuous mode [ 1112.634868][T22986] hsr_slave_1: left promiscuous mode [ 1112.641641][T22986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.651495][T22986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.662382][T22986] veth1_vlan: left allmulticast mode [ 1112.881331][ T51] Bluetooth: hci0: command tx timeout [ 1113.034941][ T8126] netlink: 'syz.3.9351': attribute type 1 has an invalid length. [ 1113.054598][T22986] team0 (unregistering): Port device team_slave_1 removed [ 1113.072701][T22986] team0 (unregistering): Port device team_slave_0 removed [ 1113.171447][T22986] smc: removing net device team0 with user defined pnetid SYZ2 [ 1113.552381][ T8135] lo: entered allmulticast mode [ 1113.562546][ T8135] lo: left allmulticast mode [ 1114.143653][ T8158] x_tables: duplicate entry at hook 3 [ 1114.172326][ T8158] xt_addrtype: ipv6 does not support BROADCAST matching [ 1114.255073][T22986] IPVS: stop unused estimator thread 0... [ 1114.562443][ T7866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1114.602798][ T7866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1114.645611][ T7866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1114.682524][ T7866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1114.791417][ T8192] Bluetooth: MGMT ver 1.23 [ 1114.991496][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.069515][ T7866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.110188][T22985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.117411][T22985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.173326][ T8222] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1115.185271][T22985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.192536][T22985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.698592][ T8242] __nla_validate_parse: 2 callbacks suppressed [ 1115.698612][ T8242] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9368'. [ 1115.756532][ T8242] netlink: 'syz.4.9368': attribute type 1 has an invalid length. [ 1115.788634][ T8242] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9368'. [ 1115.817492][ T8245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.852386][ T8245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1115.939209][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1115.974530][ T8233] xt_hashlimit: size too large, truncated to 1048576 [ 1116.074319][ T8236] : renamed from vxcan1 [ 1116.248341][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.308175][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9371'. [ 1116.441550][ T7866] veth0_vlan: entered promiscuous mode [ 1116.489285][ T7866] veth1_vlan: entered promiscuous mode [ 1116.600170][ T7866] veth0_macvtap: entered promiscuous mode [ 1116.633566][ T7866] veth1_macvtap: entered promiscuous mode [ 1116.784259][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.845104][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.893118][T22985] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.937537][T22985] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.946339][T22985] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.989183][T22985] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.453548][T23003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.463261][T23003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.574974][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9385'. [ 1117.602876][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9386'. [ 1117.653618][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9385'. [ 1117.755427][T22991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.765858][ T8321] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9385'. [ 1117.776860][T22991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.071682][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9295'. [ 1118.159559][ T8354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9395'. [ 1118.354149][ T8358] syzkaller0: entered promiscuous mode [ 1118.362357][ T8358] syzkaller0: entered allmulticast mode [ 1118.520138][ T8363] syzkaller0: entered promiscuous mode [ 1118.570163][ T8363] syzkaller0: entered allmulticast mode [ 1118.639749][ T8363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1119.015957][ T8384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1119.098805][ T8405] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.9405'. [ 1119.270267][ T8419] dvmrp6: entered allmulticast mode [ 1119.582198][ T8436] erspan1: entered allmulticast mode [ 1119.758238][ T11] block nbd0: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 210 seconds [ 1119.770255][ T11] block nbd0: Possible stuck request ffff8880270a0200: control (read@1024,1024B). Runtime 210 seconds [ 1119.781770][ T11] block nbd0: Possible stuck request ffff8880270a0400: control (read@2048,1024B). Runtime 210 seconds [ 1119.793190][ T11] block nbd0: Possible stuck request ffff8880270a0600: control (read@3072,1024B). Runtime 210 seconds [ 1120.136063][ T8472] netlink: 'syz.4.9422': attribute type 64 has an invalid length. [ 1120.459948][ T8489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1120.749097][ T8505] netlink: 'syz.3.9435': attribute type 142 has an invalid length. [ 1120.946468][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1120.954638][ C1] lec:lec_tx_timeout: lec0 [ 1120.971881][ T8518] Unsupported ieee802154 address type: 0 [ 1120.991115][ T8515] syzkaller0: entered promiscuous mode [ 1121.007336][ T8515] syzkaller0: entered allmulticast mode [ 1121.188266][ T8525] __nla_validate_parse: 6 callbacks suppressed [ 1121.188288][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9440'. [ 1121.257628][ T8525] : entered promiscuous mode [ 1121.320338][ T8522] wg1 speed is unknown, defaulting to 1000 [ 1121.406802][ T8528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9439'. [ 1121.583902][ T8534] syzkaller0: entered promiscuous mode [ 1121.597036][ T8534] syzkaller0: entered allmulticast mode [ 1121.613393][ T8539] gtp0: entered promiscuous mode [ 1121.619172][ T8539] gtp0: entered allmulticast mode [ 1121.915163][ T8543] netlink: 'syz.0.9445': attribute type 13 has an invalid length. [ 1121.983432][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9445'. [ 1122.189932][ T8547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1123.156261][ T8549] netlink: 'syz.2.9446': attribute type 1 has an invalid length. [ 1123.992287][ T8543] macvtap0: entered allmulticast mode [ 1123.998786][ T8543] macvtap0: refused to change device tx_queue_len [ 1124.022753][ T8522] lo speed is unknown, defaulting to 1000 [ 1124.160229][ T8554] netlink: 280 bytes leftover after parsing attributes in process `syz.1.9447'. [ 1124.182101][ T8554] openvswitch: netlink: Flow key attr not present in new flow. [ 1124.277718][ T8560] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9450'. [ 1124.310550][ T8560] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9450'. [ 1124.361617][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.915842][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9457'. [ 1125.444423][ T8584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1125.490721][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9460'. [ 1125.676608][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9462'. [ 1125.735068][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1125.789128][ T8618] team0: Port device batadv1 added [ 1126.095165][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9468'. [ 1126.133422][ T8641] syzkaller0: entered promiscuous mode [ 1126.139792][ T8641] syzkaller0: entered allmulticast mode [ 1126.168367][ T8641] netlink: 'syz.2.9469': attribute type 1 has an invalid length. [ 1126.309697][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9471'. [ 1126.333407][ T8652] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1126.668153][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9478'. [ 1126.862777][ T8684] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9483'. [ 1126.907989][ T8689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1126.924677][ T8684] netlink: 'syz.0.9483': attribute type 1 has an invalid length. [ 1126.934192][ T8684] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9483'. [ 1127.134578][ T8700] xt_hashlimit: size too large, truncated to 1048576 [ 1127.204313][ T8709] : renamed from vxcan1 (while UP) [ 1127.443871][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9493'. [ 1127.664533][ T8727] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1127.720949][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9495'. [ 1127.869228][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9498'. [ 1127.880568][ T8738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9498'. [ 1128.069819][ T8754] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9503'. [ 1128.084112][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9502'. [ 1128.104323][ T8750] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1128.180338][ T8750] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1128.206613][ T8750] gretap1: entered promiscuous mode [ 1128.227923][ T8750] gretap1: entered allmulticast mode [ 1128.270636][ T8769] xt_ecn: cannot match TCP bits for non-tcp packets [ 1128.281876][ T8769] xt_ecn: cannot match TCP bits for non-tcp packets [ 1128.457407][ T8779] vlan1: entered allmulticast mode [ 1128.473566][ T8779] gretap0: entered allmulticast mode [ 1128.484585][ T8784] netlink: 'syz.2.9512': attribute type 1 has an invalid length. [ 1128.963954][ T8815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.331969][ T8837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1129.532040][ T8845] netlink: 'syz.1.9531': attribute type 1 has an invalid length. [ 1130.205968][ T8879] wireguard0: entered promiscuous mode [ 1130.226718][ T8879] wireguard0: entered allmulticast mode [ 1130.249539][ T8879] team0: Device wireguard0 is of different type [ 1130.314941][ T8891] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1130.321486][ T8891] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1130.432344][ T8904] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1130.473516][ T8904] bond3 (unregistering): Released all slaves [ 1130.558711][ T8913] Cannot find set identified by id 1 to match [ 1130.569969][ T8889] tipc: Failed to remove unknown binding: 66,1,1/0:1930849927/1930849929 [ 1130.704791][ T8919] netlink: 'syz.3.9551': attribute type 2 has an invalid length. [ 1130.893578][ T8929] sch_tbf: burst 127 is lower than device veth0_virt_wifi mtu (1514) ! [ 1130.942633][ T8933] bond1: Unable to set up delay as MII monitoring is disabled [ 1130.952863][ T8933] bond1 (unregistering): Released all slaves [ 1130.984297][ T8935] syzkaller0: entered promiscuous mode [ 1130.996815][ T8935] syzkaller0: entered allmulticast mode [ 1131.068734][T32218] lec:lec_start_xmit: lec0:No lecd attached [ 1133.136038][ T8884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1133.421347][ T8952] __nla_validate_parse: 80 callbacks suppressed [ 1133.421371][ T8952] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9561'. [ 1133.440959][ T8948] bridge3: entered promiscuous mode [ 1133.446234][ T8948] bridge3: entered allmulticast mode [ 1133.472453][ T8948] team0: Port device bridge3 added [ 1133.491595][ T8953] bridge0: port 3(team0) entered blocking state [ 1133.522119][ T8953] bridge0: port 3(team0) entered disabled state [ 1133.530571][ T8953] team0: entered allmulticast mode [ 1133.592484][ T8953] team_slave_0: entered allmulticast mode [ 1133.625763][ T8953] team_slave_1: entered allmulticast mode [ 1133.643980][ T8953] team0: entered promiscuous mode [ 1133.650475][ T8953] team_slave_0: entered promiscuous mode [ 1133.657424][ T8953] team_slave_1: entered promiscuous mode [ 1133.663313][ T8965] netlink: 'syz.4.9565': attribute type 6 has an invalid length. [ 1133.672261][ T8953] bridge0: port 3(team0) entered blocking state [ 1133.679205][ T8953] bridge0: port 3(team0) entered forwarding state [ 1133.693964][ T8963] netlink: 'syz.0.9564': attribute type 1 has an invalid length. [ 1133.723250][ T8963] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.9564'. [ 1133.752067][ T8963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9564'. [ 1133.969262][ T8982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9572'. [ 1134.017436][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9572'. [ 1134.091700][ T8988] netlink: 'syz.1.9573': attribute type 61 has an invalid length. [ 1134.116689][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9573'. [ 1134.454064][ T9005] wg1 speed is unknown, defaulting to 1000 [ 1134.499780][ T9003] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9577'. [ 1134.813505][ T9005] lo speed is unknown, defaulting to 1000 [ 1134.939633][ T9010] netlink: 'syz.4.9579': attribute type 1 has an invalid length. [ 1135.300329][ T9024] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9581'. [ 1135.389826][ T9028] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 1135.399959][ T9028] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 1135.891544][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1135.903804][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1135.918330][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1135.928597][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1135.949112][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1135.992817][ T9048] batman_adv: batadv0: Adding interface: dummy0 [ 1136.073439][ T9048] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.099337][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1136.099371][ C1] lec:lec_tx_timeout: lec0 [ 1136.223617][ T9048] batman_adv: batadv0: Interface activated: dummy0 [ 1136.351771][ T9050] batadv0: mtu less than device minimum [ 1136.405535][ T9050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.417948][ T9050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.429776][ T9050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.441641][ T9050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.453519][ T9050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.465364][ T9050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.477232][ T9050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.489074][ T9050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.500917][ T9050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1136.536719][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9590'. [ 1136.743948][ T9043] wg1 speed is unknown, defaulting to 1000 [ 1136.909787][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1137.319953][ T9084] xt_policy: neither incoming nor outgoing policy selected [ 1137.716274][ T9043] lo speed is unknown, defaulting to 1000 [ 1137.920577][ T8202] IPVS: starting estimator thread 0... [ 1138.016571][ T9108] IPVS: using max 29 ests per chain, 69600 per kthread [ 1138.077555][ T5830] Bluetooth: hci2: command tx timeout [ 1138.152663][ T9116] ip6gre1: entered allmulticast mode [ 1138.363891][T22991] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.407560][T22991] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.430295][T22991] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.452618][T22991] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.510433][ T9043] chnl_net:caif_netlink_parms(): no params data found [ 1138.521924][ T9139] __nla_validate_parse: 7 callbacks suppressed [ 1138.521944][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9611'. [ 1138.614962][ T9145] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1138.684110][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.692281][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.703020][ T9043] bridge_slave_0: entered allmulticast mode [ 1138.710873][ T9043] bridge_slave_0: entered promiscuous mode [ 1138.720433][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.727956][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.735308][ T9043] bridge_slave_1: entered allmulticast mode [ 1138.743677][ T9043] bridge_slave_1: entered promiscuous mode [ 1138.788538][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.801928][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.846507][ T9043] team0: Port device team_slave_0 added [ 1138.855780][ T9043] team0: Port device team_slave_1 added [ 1138.896033][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.904341][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.931452][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.944449][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.951717][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.985732][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.013629][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9614'. [ 1139.024006][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9614'. [ 1139.045147][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9614'. [ 1139.067373][ T9043] hsr_slave_0: entered promiscuous mode [ 1139.079991][ T9043] hsr_slave_1: entered promiscuous mode [ 1139.094536][ T9043] debugfs: 'hsr0' already exists in 'hsr' [ 1139.111719][ T9043] Cannot create hsr debugfs directory [ 1140.156696][ T5830] Bluetooth: hci2: command tx timeout [ 1141.153365][ T9120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1141.169704][ T9135] nbd: must specify at least one socket [ 1141.197980][ T9043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1141.265929][ T9043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1141.358156][ T9043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1141.425409][ T9043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1141.441367][ T9163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9620'. [ 1141.498070][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.554110][ T9163] bridge_slave_0 (unregistering): left allmulticast mode [ 1141.579742][ T9163] bridge_slave_0 (unregistering): left promiscuous mode [ 1141.590033][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.790176][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.837606][ T9043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.868060][T22991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.875348][T22991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.901819][ T9190] netlink: 'syz.1.9626': attribute type 1 has an invalid length. [ 1141.922661][T22992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.929953][T22992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.222600][ T9203] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9629'. [ 1142.238282][ T5830] Bluetooth: hci2: command tx timeout [ 1142.296924][ T9204] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1142.595397][ T9218] netlink: 'syz.1.9633': attribute type 21 has an invalid length. [ 1142.604831][ T9218] IPv6: NLM_F_CREATE should be specified when creating new route [ 1142.612918][ T9218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1142.620213][ T9218] IPv6: NLM_F_CREATE should be set when creating new route [ 1142.627529][ T9218] IPv6: NLM_F_CREATE should be set when creating new route [ 1142.634783][ T9218] IPv6: NLM_F_CREATE should be set when creating new route [ 1142.644948][ T9219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1142.761508][ T9043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.861862][ T9226] netlink: 'syz.0.9635': attribute type 8 has an invalid length. [ 1142.977432][ T9228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.195547][ T9230] syzkaller0: entered promiscuous mode [ 1143.216029][ T9230] syzkaller0: entered allmulticast mode [ 1143.282434][ T9228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.327752][ T5830] Bluetooth: hci2: command tx timeout [ 1145.445418][ T9228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.514957][ T9228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.585163][ T9043] veth0_vlan: entered promiscuous mode [ 1145.600162][ T9043] veth1_vlan: entered promiscuous mode [ 1145.655308][ T9043] veth0_macvtap: entered promiscuous mode [ 1145.664287][T22992] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.685184][T22992] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.705154][T23003] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.715205][ T9043] veth1_macvtap: entered promiscuous mode [ 1145.732421][T23003] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.753034][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.775608][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.805907][T23003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.820746][T23003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.832570][T23003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.843268][T23003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.913230][T22991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.928087][T22991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.960357][T22996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.968492][T22996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.125666][ T9244] net_ratelimit: 12 callbacks suppressed [ 1146.125680][ T9244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1149.843809][ T11] block nbd0: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 240 seconds [ 1149.854788][ T11] block nbd0: Possible stuck request ffff8880270a0200: control (read@1024,1024B). Runtime 240 seconds [ 1149.866127][ T11] block nbd0: Possible stuck request ffff8880270a0400: control (read@2048,1024B). Runtime 240 seconds [ 1149.878044][ T11] block nbd0: Possible stuck request ffff8880270a0600: control (read@3072,1024B). Runtime 240 seconds [ 1164.078793][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1177.363964][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1178.956853][ T9256] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9641'. [ 1179.058348][ T9266] netlink: 'syz.4.9642': attribute type 21 has an invalid length. [ 1179.078170][ T9266] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9642'. [ 1179.309554][ T9280] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9647'. [ 1179.327908][ T9283] netlink: 'syz.2.9648': attribute type 83 has an invalid length. [ 1179.582404][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1179.631248][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1179.660551][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1179.709987][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1179.732609][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1179.768596][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1179.784389][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1179.784783][ T9303] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1179.864451][ T9302] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1179.925012][ T11] block nbd0: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 270 seconds [ 1179.940734][ T11] block nbd0: Possible stuck request ffff8880270a0200: control (read@1024,1024B). Runtime 270 seconds [ 1179.952729][ T11] block nbd0: Possible stuck request ffff8880270a0400: control (read@2048,1024B). Runtime 270 seconds [ 1179.963976][ T11] block nbd0: Possible stuck request ffff8880270a0600: control (read@3072,1024B). Runtime 270 seconds [ 1180.050883][ T9309] syzkaller0: entered promiscuous mode [ 1180.057154][ T9309] syzkaller0: entered allmulticast mode [ 1180.728681][ T9363] netlink: 'syz.3.9669': attribute type 1 has an invalid length. [ 1180.825062][ T9363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1180.860957][ T9364] bond3 (unregistering): Released all slaves [ 1180.869747][ T9374] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1181.027651][ T9380] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1181.051265][ T9383] bridge_slave_1: left allmulticast mode [ 1181.068479][ T9383] bridge_slave_1: left promiscuous mode [ 1181.082548][ T9383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.173088][ T9389] sctp: [Deprecated]: syz.4.9674 (pid 9389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1181.173088][ T9389] Use struct sctp_sack_info instead [ 1181.844575][ T9433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1182.045846][ T9440] wg1 speed is unknown, defaulting to 1000 [ 1182.190778][ T9456] xt_connbytes: Forcing CT accounting to be enabled [ 1182.300378][ T9460] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1182.353495][ T9460] bond1: (slave lo): Enslaving as an active interface with an up link [ 1182.369892][ T9460] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1182.389560][ T9464] tipc: Enabling of bearer rejected, failed to enable media [ 1182.606039][ T9475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1182.627649][ T9440] lo speed is unknown, defaulting to 1000 [ 1182.756179][ T9482] netlink: 'syz.4.9705': attribute type 21 has an invalid length. [ 1182.785696][ T9482] netlink: 'syz.4.9705': attribute type 22 has an invalid length. [ 1182.820948][ T9482] netlink: 'syz.4.9705': attribute type 23 has an invalid length. [ 1182.842874][ T9482] netlink: 'syz.4.9705': attribute type 25 has an invalid length. [ 1182.874056][ T9492] netlink: 'syz.1.9707': attribute type 1 has an invalid length. [ 1182.886425][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 1182.894533][ C1] lec:lec_tx_timeout: lec0 [ 1182.936116][ T9492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1182.978564][ T9492] bond1: (slave geneve2): making interface the new active one [ 1183.030648][ T9492] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1183.093477][ T9498] openvswitch: netlink: Flow key attr not present in new flow. [ 1183.223906][ T9504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.353608][ T9509] netlink: 'syz.4.9712': attribute type 11 has an invalid length. [ 1183.385529][T22985] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.385569][ T9509] netlink: 'syz.4.9712': attribute type 11 has an invalid length. [ 1183.395571][T22985] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.414634][T22985] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.424116][T22985] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.772220][ T9520] Cannot find del_set index 0 as target [ 1184.142068][ T9539] netlink: 'syz.3.9719': attribute type 2 has an invalid length. [ 1184.152051][ T9538] syzkaller0: entered promiscuous mode [ 1184.178276][ T9538] syzkaller0: entered allmulticast mode [ 1184.282790][ T9550] __nla_validate_parse: 133 callbacks suppressed [ 1184.282813][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9722'. [ 1184.498175][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9725'. [ 1184.564809][ T9559] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9726'. [ 1184.576111][ T9559] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9726'. [ 1184.638190][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9729'. [ 1184.705978][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9730'. [ 1184.736011][ T9572] netlink: 'syz.3.9729': attribute type 56 has an invalid length. [ 1185.094407][ T9595] netlink: 576 bytes leftover after parsing attributes in process `syz.0.9736'. [ 1185.202916][ T9600] ipt_REJECT: ECHOREPLY no longer supported. [ 1185.209561][ T9601] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9739'. [ 1185.452332][ T9616] netlink: 'syz.1.9746': attribute type 1 has an invalid length. [ 1185.470922][ T9616] netlink: 'syz.1.9746': attribute type 1 has an invalid length. [ 1185.482971][ T9616] netlink: 'syz.1.9746': attribute type 2 has an invalid length. [ 1185.554196][ T9619] gtp0: entered promiscuous mode [ 1185.561637][ T9619] gtp0: entered allmulticast mode [ 1185.580117][ T9622] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9748'. [ 1185.791996][T25099] IPVS: starting estimator thread 0... [ 1185.886650][ T9637] IPVS: using max 25 ests per chain, 60000 per kthread [ 1186.119041][ T9651] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9757'. [ 1186.507577][ T9668] netlink: get zone limit has 4 unknown bytes [ 1186.528395][ T9666] ip6t_srh: unknown srh match flags 4000 [ 1186.750323][ T9677] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1186.759122][T22991] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.779085][T22991] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.835033][T22991] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.861909][ T9682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1186.884116][T22991] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.139984][ T9700] netlink: 'syz.0.9774': attribute type 4 has an invalid length. [ 1189.300233][ T9711] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1189.472873][ T9709] wg1 speed is unknown, defaulting to 1000 [ 1189.560185][ T9724] __nla_validate_parse: 3 callbacks suppressed [ 1189.560211][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9780'. [ 1189.601155][ T9730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9783'. [ 1189.632173][ T8193] IPVS: starting estimator thread 0... [ 1189.678308][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 1189.736591][ T9734] IPVS: using max 27 ests per chain, 64800 per kthread [ 1189.806991][ T9743] IPv6: NLM_F_CREATE should be specified when creating new route [ 1189.814871][ T9743] netlink: 'syz.2.9785': attribute type 1 has an invalid length. [ 1189.932428][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9786'. [ 1189.963058][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9786'. [ 1189.963680][ T9736] netlink: 'syz.2.9785': attribute type 10 has an invalid length. [ 1190.024428][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9786'. [ 1190.057506][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9786'. [ 1190.152603][ T9749] openvswitch: netlink: Missing valid actions attribute. [ 1190.201269][ T9749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.213243][ T9749] netlink: 'syz.3.9788': attribute type 11 has an invalid length. [ 1190.259078][ T9709] lo speed is unknown, defaulting to 1000 [ 1190.391545][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9791'. [ 1190.456736][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9791'. [ 1190.487027][ T9764] netlink: 'syz.1.9793': attribute type 4 has an invalid length. [ 1190.505143][ T9764] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9793'. [ 1190.519738][ T9757] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9791'. [ 1190.542456][ T9764] .`: renamed from bond0 (while UP) [ 1190.910335][ T9772] : renamed from team_slave_1 (while UP) [ 1193.982847][ T9836] netlink: 'syz.4.9807': attribute type 7 has an invalid length. [ 1194.010512][ T9836] netlink: 'syz.4.9807': attribute type 8 has an invalid length. [ 1194.123021][ T9844] veth0_virt_wifi: entered promiscuous mode [ 1194.142732][ T9846] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1194.419378][ T9855] syzkaller0: entered promiscuous mode [ 1194.440245][ T9855] syzkaller0: entered allmulticast mode [ 1194.514040][T32218] lec:lec_start_xmit: lec0:No lecd attached [ 1194.727620][ T9878] __nla_validate_parse: 6 callbacks suppressed [ 1194.727733][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9819'. [ 1195.030868][ T9889] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9821'. [ 1195.153511][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9822'. [ 1195.397962][ T9911] openvswitch: netlink: Message has 8 unknown bytes. [ 1195.411898][ T9911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.508734][ T9917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9831'. [ 1195.526133][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9831'. [ 1195.594084][ T9924] netlink: 'syz.0.9833': attribute type 1 has an invalid length. [ 1195.609261][ T9924] netlink: 280 bytes leftover after parsing attributes in process `syz.0.9833'. [ 1195.804691][ T9938] gre0: entered promiscuous mode [ 1195.811605][ T9938] gre0: entered allmulticast mode [ 1195.822156][ T9936] syzkaller0: entered promiscuous mode [ 1195.828419][ T9936] syzkaller0: entered allmulticast mode [ 1195.835288][ T9940] SET target dimension over the limit! [ 1196.080072][ T9954] tipc: Enabling of bearer rejected, failed to enable media [ 1196.124105][ T9960] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9844'. [ 1196.172497][ T9962] netlink: 'syz.3.9842': attribute type 4 has an invalid length. [ 1196.441090][ T9975] netlink: 'syz.1.9847': attribute type 1 has an invalid length. [ 1196.459621][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9848'. [ 1196.488712][ T9975] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1196.492530][ T9972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9849'. [ 1196.555463][ T9983] batman_adv: batadv0: Interface deactivated: dummy0 [ 1196.578197][ T9983] batman_adv: batadv0: Removing interface: dummy0 [ 1196.657596][ T9983] bond0: (slave bond_slave_0): Releasing backup interface [ 1196.667480][ T9986] netlink: 'syz.1.9853': attribute type 1 has an invalid length. [ 1196.701261][ T9983] bond0: (slave bond_slave_1): Releasing backup interface [ 1196.872981][ T9983] team0: Port device team_slave_0 removed [ 1196.904878][ T9983] team0: Port device 26 removed [ 1196.915692][ T9983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.931058][ T9983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.941598][ T9983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1196.960162][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9850'. [ 1197.157115][T10002] netlink: 'syz.2.9857': attribute type 1 has an invalid length. [ 1197.243746][T10009] IPVS: set_ctl: invalid protocol: 98 172.20.20.58:20003 [ 1197.403896][T10017] sctp: [Deprecated]: syz.4.9864 (pid 10017) Use of int in maxseg socket option. [ 1197.403896][T10017] Use struct sctp_assoc_value instead [ 1197.558953][T10025] delete_channel: no stack [ 1197.842248][T10039] bond0: entered promiscuous mode [ 1197.851591][T10039] bond0: left promiscuous mode [ 1197.885610][T10041] netlink: 'syz.2.9874': attribute type 11 has an invalid length. [ 1198.173546][T10051] syzkaller0: entered promiscuous mode [ 1198.179187][T10051] syzkaller0: entered allmulticast mode [ 1198.211967][T10051] netlink: 'syz.4.9878': attribute type 2 has an invalid length. [ 1198.280509][T10053] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1199.197918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.214280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.919329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 1199.927432][ C1] lec:lec_tx_timeout: lec0 [ 1200.534252][T10074] __nla_validate_parse: 7 callbacks suppressed [ 1200.534272][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9884'. [ 1200.966838][T10109] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.9891'. [ 1200.992353][T10109] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1201.013329][T10108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9891'. [ 1201.024687][T10115] tipc: MTU too low for tipc bearer [ 1201.119573][T10120] netlink: 'syz.3.9895': attribute type 25 has an invalid length. [ 1201.185167][T10125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9898'. [ 1201.469846][T10148] netlink: 'syz.0.9904': attribute type 142 has an invalid length. [ 1202.095805][T10187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1202.177883][T10191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1202.406886][T10202] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9918'. [ 1202.862967][T10223] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1202.882146][T10223] netlink: 'syz.4.9924': attribute type 10 has an invalid length. [ 1202.929301][T10223] team0: Port device dummy0 added [ 1203.099560][T10237] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9929'. [ 1203.262143][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.287678][T10239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.307818][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.335756][T10239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.415351][T10260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9935'. [ 1203.430183][T10263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9936'. [ 1203.458065][T10261] bridge_slave_0: left allmulticast mode [ 1203.464625][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.481145][T10261] bridge_slave_1: left promiscuous mode [ 1203.488456][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.514917][T10261] bond0: (slave bond_slave_0): Releasing backup interface [ 1203.540022][T10261] bond0: (slave bond_slave_1): Releasing backup interface [ 1203.577444][T10261] team0: Port device team_slave_0 removed [ 1203.593678][T10261] team0: Port device team_slave_1 removed [ 1203.603956][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.612337][T10261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.624838][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.633834][T10261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.643193][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9938'. [ 1203.647179][T10261] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1203.809734][T10272] policy can only be matched on NF_INET_PRE_ROUTING [ 1203.809759][T10272] unable to load match [ 1203.843710][T10274] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9941'. [ 1203.950570][T10276] vlan2: entered allmulticast mode [ 1203.976252][T10276] bridge4: entered allmulticast mode [ 1204.059404][T10276] bridge4: port 1(veth5) entered blocking state [ 1204.074077][T10276] bridge4: port 1(veth5) entered disabled state [ 1204.105037][T10276] veth5: entered allmulticast mode [ 1204.130044][T10276] veth5: entered promiscuous mode [ 1204.137388][T10296] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1204.163816][T10282] geneve3: entered promiscuous mode [ 1204.187093][T10282] geneve3: entered allmulticast mode [ 1204.197711][T22991] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1204.211335][T22991] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1204.251428][T22991] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1204.283115][T22991] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1204.385568][T10306] sctp: [Deprecated]: syz.2.9949 (pid 10306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1204.385568][T10306] Use struct sctp_sack_info instead [ 1204.437492][T10306] sit1: entered promiscuous mode [ 1204.442514][T10306] sit1: entered allmulticast mode [ 1204.615633][T10326] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 65536, id = 0 [ 1204.627738][T10325] netlink: 'syz.3.9957': attribute type 1 has an invalid length. [ 1204.692560][T10325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1204.749333][T10333] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1204.781108][T10330] netlink: 'syz.4.9958': attribute type 11 has an invalid length. [ 1204.794354][T10325] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1204.843811][T10325] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1205.013451][T10344] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1205.480296][T10366] syzkaller0: entered promiscuous mode [ 1205.485905][T10366] syzkaller0: entered allmulticast mode [ 1205.817415][T10383] __nla_validate_parse: 4 callbacks suppressed [ 1205.817441][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9976'. [ 1205.861604][T10382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1205.995305][T10394] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1206.002585][T10394] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1206.057706][ T29] audit: type=1107 audit(1772608872.045:16): pid=10395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='7FZK |wZ=#W 4HsCRHA fXI%v:gZQ[K/fA'S-p#ZOJV9ѽjC2C4RUD jt, priority 10 [ 1243.094868][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10344'. [ 1243.337898][T11753] netlink: 240 bytes leftover after parsing attributes in process `syz.2.10351'. [ 1243.380815][T11759] netlink: 'syz.3.10353': attribute type 1 has an invalid length. [ 1243.435290][T11759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1243.454910][T11759] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.481091][T11759] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.565587][T11759] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.584336][T11759] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.615802][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10356'. [ 1243.645360][T11768] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1243.688191][T11768] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10356'. [ 1243.704874][T11759] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.737204][T11759] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.777224][ T6209] tipc: Node number set to 2886997057 [ 1243.815100][T11759] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.846794][T11759] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.919585][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1243.927814][ C1] lec:lec_tx_timeout: lec0 [ 1243.975907][T11792] netlink: 'syz.2.10362': attribute type 1 has an invalid length. [ 1243.989213][T11792] netlink: 'syz.2.10362': attribute type 4 has an invalid length. [ 1243.997670][T11792] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.10362'. [ 1244.077268][ T5830] Bluetooth: hci2: command 0x0405 tx timeout [ 1244.112485][T22985] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.121327][T22985] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.146255][T22985] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.167620][T22985] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.195127][T22989] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.203694][T22989] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.240190][T22989] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.250641][T22989] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.356461][T11805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1244.421626][T11810] netlink: 'syz.2.10368': attribute type 1 has an invalid length. [ 1244.482230][T11813] syzkaller0: entered promiscuous mode [ 1244.497284][T11813] syzkaller0: entered allmulticast mode [ 1244.514467][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10370'. [ 1244.910903][T11838] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20002 [ 1244.926963][T11836] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20002 [ 1245.100316][T11851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.295499][T11851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.410273][T11851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.519684][T11851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.727233][T22985] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.808247][T22985] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.868117][T22985] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.919348][T22985] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.085018][T11905] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 1246.215130][T11894] syzkaller0: entered promiscuous mode [ 1246.221688][T11894] syzkaller0: entered allmulticast mode [ 1246.233300][T11902] tipc: Enabling of bearer rejected, already enabled [ 1246.474854][T11915] IPv6: sit2: Disabled Multicast RS [ 1246.676167][ T7332] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1246.747556][ T7332] CPU: 1 UID: 0 PID: 7332 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1246.747584][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1246.747597][ T7332] Call Trace: [ 1246.747674][ T7332] [ 1246.747684][ T7332] dump_stack_lvl+0xe8/0x150 [ 1246.747939][ T7332] dump_header+0xd3/0x4c0 [ 1246.747990][ T7332] oom_kill_process+0x3ab/0x970 [ 1246.748055][ T7332] out_of_memory+0x106c/0x1410 [ 1246.748078][ T7332] ? percpu_ref_put+0x19/0x180 [ 1246.748176][ T7332] ? __pfx___mutex_lock+0x10/0x10 [ 1246.748287][ T7332] ? __pfx_out_of_memory+0x10/0x10 [ 1246.748305][ T7332] ? do_raw_spin_unlock+0xf5/0x210 [ 1246.748352][ T7332] try_charge_memcg+0xc53/0x1560 [ 1246.748378][ T7332] ? __lock_acquire+0x6b5/0x2cf0 [ 1246.748420][ T7332] ? __pfx_try_charge_memcg+0x10/0x10 [ 1246.748440][ T7332] ? xa_load+0x60/0x210 [ 1246.748483][ T7332] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 1246.748511][ T7332] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 1246.748539][ T7332] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 1246.748564][ T7332] __swap_cache_prepare_and_add+0x52a/0x700 [ 1246.748631][ T7332] swap_cache_alloc_folio+0xf1/0x240 [ 1246.748667][ T7332] swap_cluster_readahead+0x369/0x690 [ 1246.748706][ T7332] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1246.748751][ T7332] ? get_vma_policy+0x27b/0x3c0 [ 1246.748779][ T7332] swapin_readahead+0x196/0xc50 [ 1246.748824][ T7332] ? __pfx_swapin_readahead+0x10/0x10 [ 1246.748856][ T7332] ? swap_table_get+0x1e/0x260 [ 1246.748894][ T7332] ? swap_table_get+0x1e/0x260 [ 1246.748919][ T7332] ? swap_table_get+0x1e/0x260 [ 1246.748947][ T7332] ? swap_table_get+0x216/0x260 [ 1246.748981][ T7332] ? swap_cache_get_folio+0x513/0x520 [ 1246.749016][ T7332] do_swap_page+0x54f/0x58d0 [ 1246.749058][ T7332] ? __lock_acquire+0x6b5/0x2cf0 [ 1246.749105][ T7332] ? do_swap_page+0x12c/0x58d0 [ 1246.749131][ T7332] ? __pfx_do_swap_page+0x10/0x10 [ 1246.749157][ T7332] ? __pte_offset_map+0x1ae/0x240 [ 1246.749191][ T7332] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1246.749225][ T7332] handle_mm_fault+0x12d2/0x3310 [ 1246.749271][ T7332] ? handle_mm_fault+0xee/0x3310 [ 1246.749309][ T7332] ? __pfx_handle_mm_fault+0x10/0x10 [ 1246.749337][ T7332] ? lock_vma_under_rcu+0x45a/0x500 [ 1246.749384][ T7332] do_user_addr_fault+0xa73/0x1340 [ 1246.749434][ T7332] ? rcu_is_watching+0x15/0xb0 [ 1246.749478][ T7332] ? trace_page_fault_user+0x84/0x210 [ 1246.749507][ T7332] exc_page_fault+0x6a/0xc0 [ 1246.749539][ T7332] asm_exc_page_fault+0x26/0x30 [ 1246.749558][ T7332] RIP: 0033:0x7f830db5cfce [ 1246.749577][ T7332] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1246.749595][ T7332] RSP: 002b:00007ffc0de50d88 EFLAGS: 00010246 [ 1246.749629][ T7332] RAX: 0000000000000000 RBX: 0000555566123500 RCX: 00007f830db5cfce [ 1246.749643][ T7332] RDX: 00007ffc0de50de0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1246.749656][ T7332] RBP: 00007ffc0de50e4c R08: 0000000000000000 R09: 0000000000000000 [ 1246.749668][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1246.749681][ T7332] R13: 00000000000927c0 R14: 0000000000130443 R15: 00007ffc0de50ea0 [ 1246.749714][ T7332] [ 1247.150098][ T7332] memory: usage 307200kB, limit 307200kB, failcnt 545 [ 1247.157261][ T7332] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 1247.165282][ T7332] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1247.174595][ T7332] Memory cgroup stats for /syz3: [ 1247.174723][ T7332] cache 0 [ 1247.184541][ T7332] rss 0 [ 1247.187939][ T7332] rss_huge 0 [ 1247.191240][ T7332] shmem 0 [ 1247.194258][ T7332] mapped_file 0 [ 1247.198292][ T7332] dirty 0 [ 1247.201365][ T7332] writeback 0 [ 1247.205420][ T7332] workingset_refault_anon 0 [ 1247.210616][ T7332] workingset_refault_file 0 [ 1247.215233][ T7332] swap 200704 [ 1247.219006][ T7332] swapcached 200704 [ 1247.223014][ T7332] pgpgin 170480 [ 1247.227588][ T7332] pgpgout 170480 [ 1247.231249][ T7332] pgfault 354648 [ 1247.234983][ T7332] pgmajfault 4 [ 1247.242793][ T7332] inactive_anon 0 [ 1247.248121][ T7332] active_anon 0 [ 1247.251691][ T7332] inactive_file 0 [ 1247.255413][ T7332] active_file 0 [ 1247.259600][ T7332] unevictable 0 [ 1247.263161][ T7332] hierarchical_memory_limit 314572800 [ 1247.269302][ T7332] hierarchical_memsw_limit 9223372036854771712 [ 1247.275550][ T7332] total_cache 0 [ 1247.280220][ T7332] total_rss 0 [ 1247.283625][ T7332] total_rss_huge 0 [ 1247.288775][ T7332] total_shmem 0 [ 1247.292443][ T7332] total_mapped_file 0 [ 1247.296909][ T7332] total_dirty 0 [ 1247.300471][ T7332] total_writeback 0 [ 1247.304465][ T7332] total_workingset_refault_anon 0 [ 1247.314641][ T7332] total_workingset_refault_file 0 [ 1247.326938][ T7332] total_swap 200704 [ 1247.330799][ T7332] total_swapcached 200704 [ 1247.335166][ T7332] total_pgpgin 170532 [ 1247.340116][ T7332] total_pgpgout 170532 [ 1247.344242][ T7332] total_pgfault 354699 [ 1247.348799][ T7332] total_pgmajfault 4 [ 1247.352914][ T7332] total_inactive_anon 0 [ 1247.358260][ T7332] total_active_anon 0 [ 1247.362282][ T7332] total_inactive_file 0 [ 1247.367737][ T7332] total_active_file 0 [ 1247.371755][ T7332] total_unevictable 0 [ 1247.375758][ T7332] anon_cost 0 [ 1247.379882][ T7332] file_cost 0 [ 1247.383211][ T7332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.10389,pid=11876,uid=0 [ 1247.428912][ T7332] Memory cgroup out of memory: Killed process 11876 (syz.3.10389) total-vm:102416kB, anon-rss:1244kB, file-rss:22916kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1248.916068][T11941] __nla_validate_parse: 2 callbacks suppressed [ 1248.916092][T11941] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10403'. [ 1250.636633][T11930] netlink: 'syz.4.10401': attribute type 3 has an invalid length. [ 1250.648447][T11939] netlink: 'syz.3.10403': attribute type 29 has an invalid length. [ 1250.771005][T11944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1250.836106][T11947] netlink: 'syz.2.10405': attribute type 13 has an invalid length. [ 1251.050162][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10409'. [ 1251.185896][T11969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10413'. [ 1251.314948][T11977] netlink: 'syz.2.10412': attribute type 2 has an invalid length. [ 1251.369857][T11977] netlink: 119 bytes leftover after parsing attributes in process `syz.2.10412'. [ 1251.411100][T11984] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.10416'. [ 1251.435488][T11984] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1251.911961][T12008] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10424'. [ 1252.118928][T12023] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10428'. [ 1252.132751][T12023] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10428'. [ 1252.390755][T11997] lec:lec_atm_close: lec0: Shut down! [ 1252.429220][T12039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10435'. [ 1252.515045][T12033] wg1 speed is unknown, defaulting to 1000 [ 1252.525972][T12045] sit0: entered promiscuous mode [ 1252.534099][T12045] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1252.780089][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10438'. [ 1252.833034][T12033] lo speed is unknown, defaulting to 1000 [ 1252.941018][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.000356][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.027395][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.094083][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.150984][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.195632][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.220384][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.251044][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.272930][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.384605][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.403712][T12067] xfrm1: entered promiscuous mode [ 1253.410203][T12067] xfrm1: entered allmulticast mode [ 1253.418977][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.431658][T12042] lec:lec_atm_close: lec0: Shut down! [ 1253.457077][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.485621][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.536729][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.561523][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.606678][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.633362][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.686784][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.718236][T12055] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.989558][T12094] __nla_validate_parse: 5 callbacks suppressed [ 1253.989581][T12094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10447'. [ 1254.023693][T12092] lo: entered promiscuous mode [ 1254.029830][T12092] tunl0: entered promiscuous mode [ 1254.035427][T12092] netlink: 'syz.4.10449': attribute type 3 has an invalid length. [ 1254.043790][T12092] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10449'. [ 1254.074210][T12102] IPv6: NLM_F_CREATE should be specified when creating new route [ 1254.095764][T12102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1254.238175][T12091] lo: left promiscuous mode [ 1254.458751][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10452'. [ 1254.740844][T12125] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1254.753074][T12125] bond2 (unregistering): Released all slaves [ 1255.169991][T12152] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10464'. [ 1255.255129][T12155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10465'. [ 1255.350963][T12159] netlink: 'syz.1.10466': attribute type 21 has an invalid length. [ 1255.419021][T12161] netlink: 'syz.1.10466': attribute type 4 has an invalid length. [ 1255.530622][T12165] bond6: invalid ARP target 0.0.0.0 specified for addition [ 1255.538357][T12165] bond6: option arp_ip_target: invalid value (0) [ 1255.558116][T12165] bond6 (unregistering): Released all slaves [ 1255.766345][T12186] netlink: 'syz.1.10474': attribute type 21 has an invalid length. [ 1255.774445][T12186] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10474'. [ 1255.812917][T12187] netlink: get zone limit has 4 unknown bytes [ 1255.834512][T12186] netlink: 'syz.1.10474': attribute type 4 has an invalid length. [ 1255.856154][T12186] netlink: 'syz.1.10474': attribute type 5 has an invalid length. [ 1255.882402][T12186] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10474'. [ 1256.102961][T12201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10481'. [ 1256.114358][T12201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1256.121711][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 1256.492902][T12229] ip6gre2: entered allmulticast mode [ 1256.616480][T12236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10488'. [ 1256.716026][T12249] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1256.767541][T12249] netlink: 'syz.0.10494': attribute type 1 has an invalid length. [ 1256.775976][T12247] netlink: 'syz.4.10493': attribute type 10 has an invalid length. [ 1256.865824][T12254] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1256.898088][T12254] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1256.996980][T12265] tipc: Enabling of bearer rejected, failed to enable media [ 1257.027695][T12265] syzkaller0: entered promiscuous mode [ 1257.057222][T12265] syzkaller0: entered allmulticast mode [ 1257.083690][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10500'. [ 1257.292052][T12275] bond0: entered promiscuous mode [ 1257.298659][T12275] bond_slave_0: entered promiscuous mode [ 1257.305854][T12275] bond_slave_1: entered promiscuous mode [ 1257.322766][T12275] bond0: left promiscuous mode [ 1257.333625][T12275] bond_slave_0: left promiscuous mode [ 1257.343223][T12275] bond_slave_1: left promiscuous mode [ 1257.361186][T12281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1257.590139][T12298] netlink: 'syz.1.10506': attribute type 21 has an invalid length. [ 1257.830889][T12302] sit0: entered promiscuous mode [ 1257.842583][T12302] netlink: 'syz.1.10509': attribute type 1 has an invalid length. [ 1258.202101][T12331] netlink: 'syz.2.10518': attribute type 5 has an invalid length. [ 1258.779966][T12366] syzkaller1: entered promiscuous mode [ 1258.785516][T12366] syzkaller1: entered allmulticast mode [ 1258.878713][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 1258.886817][ C1] lec:lec_tx_timeout: lec0 [ 1258.894175][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1258.972729][T12377] siw: device registration error -23 [ 1259.002183][T12376] __nla_validate_parse: 8 callbacks suppressed [ 1259.002197][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10529'. [ 1259.023171][T12376] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10529'. [ 1259.032466][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10529'. [ 1259.193931][T12385] netlink: 232 bytes leftover after parsing attributes in process `syz.1.10530'. [ 1259.288706][T12387] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10533'. [ 1259.549666][T12400] bond6: entered promiscuous mode [ 1259.554793][T12400] bond6: entered allmulticast mode [ 1259.567085][T12400] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1259.587774][T12407] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1259.858620][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10543'. [ 1260.009578][T12434] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1260.057275][T12434] bond0 (unregistering): Released all slaves [ 1260.139040][T12440] syzkaller0: entered promiscuous mode [ 1260.146214][T12440] syzkaller0: entered allmulticast mode [ 1260.349750][T12453] bond1: (slave lo): Releasing backup interface [ 1260.363094][T12453] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1260.424194][T12453] team0: Port device dummy0 removed [ 1260.476864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.495249][T12453] bridge_slave_0: left allmulticast mode [ 1260.524998][T12453] bridge_slave_0: left promiscuous mode [ 1260.561851][T12453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.654301][T12453] bridge_slave_1: left allmulticast mode [ 1260.669737][T12453] bridge_slave_1: left promiscuous mode [ 1260.679081][T12453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.721337][T12453] bond0: (slave bond_slave_0): Releasing backup interface [ 1260.757733][T12453] bond0: (slave bond_slave_1): Releasing backup interface [ 1260.804068][T12453] team0: Port device team_slave_0 removed [ 1260.822754][T12453] team0: Port device team_slave_1 removed [ 1260.844731][T12453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1260.910961][T12480] sctp: [Deprecated]: syz.0.10554 (pid 12480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1260.910961][T12480] Use struct sctp_sack_info instead [ 1260.933270][T12480] sctp: [Deprecated]: syz.0.10554 (pid 12480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1260.933270][T12480] Use struct sctp_sack_info instead [ 1261.074396][T12486] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1261.308671][T12502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10559'. [ 1261.446928][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10560'. [ 1261.581024][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10565'. [ 1261.639680][T12520] netlink: 'syz.3.10565': attribute type 1 has an invalid length. [ 1261.661576][T12520] netlink: 'syz.3.10565': attribute type 2 has an invalid length. [ 1261.819866][T22989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1261.829178][T12531] netlink: 'syz.0.10569': attribute type 1 has an invalid length. [ 1261.858830][T22989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1261.876684][T22989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1261.885827][T22989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1261.969957][T12538] sctp: [Deprecated]: syz.2.10571 (pid 12538) Use of int in maxseg socket option. [ 1261.969957][T12538] Use struct sctp_assoc_value instead [ 1262.448410][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1262.448431][ T29] audit: type=1800 audit(1772608928.435:81): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1262.536585][ T29] audit: type=1800 audit(1772608928.435:82): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1262.593846][ T29] audit: type=1800 audit(1772608928.435:83): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1262.618319][ T29] audit: type=1800 audit(1772608928.445:84): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1262.642820][ T29] audit: type=1800 audit(1772608928.445:85): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1262.706693][ T29] audit: type=1800 audit(1772608928.445:86): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1262.762198][ T29] audit: type=1800 audit(1772608928.445:87): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1262.844112][ T29] audit: type=1800 audit(1772608928.445:88): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1262.872803][ T29] audit: type=1800 audit(1772608928.445:89): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1262.906128][ T29] audit: type=1800 audit(1772608928.445:90): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10579" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 1263.471645][T12607] block nbd0: reconnected socket [ 1263.692534][T22992] bond0 (unregistering): (slave ip6erspan0): Releasing active interface [ 1263.916788][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1263.924899][ C1] lec:lec_tx_timeout: lec0 [ 1264.164193][ T6184] block nbd0: Receive control failed (result -32) [ 1264.980592][T22992] .` (unregistering): Released all slaves [ 1264.992527][T22992] bond0 (unregistering): Released all slaves [ 1265.008465][T22992] bond1 (unregistering): Released all slaves [ 1265.025489][T22992] bond2 (unregistering): Released all slaves [ 1265.055585][T22992] bond3 (unregistering): Released all slaves [ 1265.079016][T12612] netlink: 'syz.0.10590': attribute type 29 has an invalid length. [ 1265.125342][T12629] bridge4: entered promiscuous mode [ 1265.141800][T12629] bridge4: entered allmulticast mode [ 1265.185204][T12629] team0: Port device bridge4 added [ 1265.200580][T12631] bridge0: port 1(team0) entered blocking state [ 1265.207493][T12631] bridge0: port 1(team0) entered disabled state [ 1265.217976][T12631] team0: entered allmulticast mode [ 1265.271964][T12631] team0: entered promiscuous mode [ 1265.361541][T22992] 9: left promiscuous mode [ 1265.374519][T12647] __nla_validate_parse: 8 callbacks suppressed [ 1265.374538][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10596'. [ 1265.487176][T22992] tipc: Left network mode [ 1265.819450][T12664] syzkaller0: entered promiscuous mode [ 1265.825578][T12664] syzkaller0: entered allmulticast mode [ 1265.843501][T12667] syzkaller0: entered promiscuous mode [ 1265.852161][T12667] syzkaller0: entered allmulticast mode [ 1265.948255][T12681] openvswitch: netlink: Missing valid actions attribute. [ 1265.957544][T12681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1266.050131][T12676] tipc: Started in network mode [ 1266.055189][T12676] tipc: Node identity 8e346b6588ff, cluster identity 4711 [ 1266.063396][T12676] tipc: Enabled bearer , priority 0 [ 1266.119984][T12678] syzkaller0: entered promiscuous mode [ 1266.137133][T12678] syzkaller0: entered allmulticast mode [ 1266.148306][T12678] tipc: Resetting bearer [ 1266.258265][T12678] tipc: Resetting bearer [ 1266.414203][T12699] netlink: 664 bytes leftover after parsing attributes in process `syz.0.10611'. [ 1269.181899][T12678] tipc: Disabling bearer [ 1269.255342][ T6210] tipc: Node number set to 113994597 [ 1269.478690][T12733] netlink: 'syz.3.10621': attribute type 4 has an invalid length. [ 1269.740357][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10625'. [ 1269.886269][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1269.898781][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1269.930224][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1269.962875][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1269.982147][T12756] netlink: 'syz.0.10628': attribute type 11 has an invalid length. [ 1270.019818][T12756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10628'. [ 1270.160178][ T30] INFO: task udevd:3483 blocked for more than 143 seconds. [ 1270.178818][ T30] Not tainted syzkaller #0 [ 1270.179631][ T11] block nbd0: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 360 seconds [ 1270.184190][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1270.208091][ T11] block nbd0: Possible stuck request ffff8880270a0200: control (read@1024,1024B). Runtime 360 seconds [ 1270.219707][ T11] block nbd0: Possible stuck request ffff8880270a0400: control (read@2048,1024B). Runtime 360 seconds [ 1270.232592][ T11] block nbd0: Possible stuck request ffff8880270a0600: control (read@3072,1024B). Runtime 360 seconds [ 1270.246945][ T5162] block nbd0: Dead connection, failed to find a fallback [ 1270.254542][ T5162] block nbd0: shutting down sockets [ 1270.262274][ T5162] blk_print_req_error: 138 callbacks suppressed [ 1270.262309][ T5162] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.281883][ T5162] buffer_io_error: 138 callbacks suppressed [ 1270.281903][ T5162] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1270.297113][ T5162] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.306426][ T30] task:udevd state:D stack:22496 pid:3483 tgid:3483 ppid:5193 task_flags:0x400140 flags:0x00080802 [ 1270.307622][ T5162] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1270.327491][ T5162] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.337599][ T5162] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1270.346290][ T5162] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.355988][ T5162] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1270.367152][ T3483] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.393279][ T30] Call Trace: [ 1270.400674][ T30] [ 1270.403734][ T30] __schedule+0x1585/0x5340 [ 1270.408538][ T30] ? up+0xe6/0x170 [ 1270.412315][ T30] ? __pfx_up+0x10/0x10 [ 1270.417281][ T30] ? __pfx___schedule+0x10/0x10 [ 1270.422221][ T30] ? console_unlock+0x150/0x1c0 [ 1270.427540][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1270.432710][ T3483] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1270.432969][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1270.446137][ T30] preempt_schedule_common+0x82/0xd0 [ 1270.453115][ T30] preempt_schedule_thunk+0x16/0x30 [ 1270.458910][ T30] ? vprintk_emit+0x4c0/0x560 [ 1270.463671][ T30] vprintk_emit+0x4c5/0x560 [ 1270.468338][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1270.473480][ T30] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1270.480226][ T30] _printk+0xdd/0x130 [ 1270.484284][ T30] ? __pfx__printk+0x10/0x10 [ 1270.489369][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1270.495327][ T30] ? ___ratelimit+0x58c/0x8d0 [ 1270.500238][ T30] end_buffer_async_read+0x399/0x3b0 [ 1270.505657][ T30] ? end_buffer_async_read_io+0x31c/0x420 [ 1270.512212][ T30] ? __pfx_end_buffer_async_read_io+0x10/0x10 [ 1270.514460][ T3483] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.518949][ T30] ? blk_update_request+0xbcf/0xe60 [ 1270.519194][ T30] ? blk_queue_exit+0x26/0x240 [ 1270.519286][ T30] ? blk_mq_dispatch_rq_list+0xadd/0x1910 [ 1270.519365][ T30] ? sbitmap_get+0x229/0x390 [ 1270.519437][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1270.519475][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1270.519521][ T30] ? __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1270.572078][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1270.581734][ T30] ? blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1270.588427][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1270.597607][ T30] ? blk_mq_run_hw_queue+0x348/0x4f0 [ 1270.599308][ T3483] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1270.607730][ T30] ? blk_mq_dispatch_list+0xd16/0xe10 [ 1270.621702][ T30] ? blk_mq_dispatch_list+0x260/0xe10 [ 1270.629411][ T3483] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.638947][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1270.639002][ T30] ? rcu_is_watching+0x15/0xb0 [ 1270.639042][ T30] ? blk_mq_flush_plug_list+0x48d/0x570 [ 1270.639081][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 1270.639122][ T30] ? blk_mq_submit_bio+0xef8/0x2810 [ 1270.639160][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1270.639211][ T30] ? __blk_flush_plug+0x3ed/0x4d0 [ 1270.639256][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1270.639307][ T30] ? __submit_bio+0x28d/0x580 [ 1270.639333][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1270.639364][ T30] ? irqentry_exit+0x59e/0x620 [ 1270.639407][ T30] ? submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1270.639449][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1270.639490][ T30] ? __sanitizer_cov_trace_switch+0x7/0x130 [ 1270.639627][ T30] ? block_read_full_folio+0x599/0x830 [ 1270.639664][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1270.639739][ T30] ? filemap_read_folio+0x137/0x3b0 [ 1270.639769][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1270.639794][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1270.639820][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1270.639857][ T30] ? do_read_cache_folio+0x358/0x590 [ 1270.639886][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1270.639917][ T30] ? read_part_sector+0xb6/0x2b0 [ 1270.649414][ T30] ? adfspart_check_POWERTEC+0x92/0xef0 [ 1270.674690][ T3483] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1270.772309][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1270.777183][ T3483] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.799711][ T3483] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1270.807693][ T3483] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.833962][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1270.851425][ T30] ? bdev_disk_changed+0x7ba/0x1550 [ 1270.866162][ T30] ? bdev_open+0xe0/0xd30 [ 1270.872281][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1270.878774][ T30] ? blkdev_get_whole+0x380/0x510 [ 1270.883982][ T30] ? bdev_open+0x31e/0xd30 [ 1270.889060][ T30] ? blkdev_open+0x470/0x610 [ 1270.892355][ T3483] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1270.893721][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1270.893753][ T30] ? do_dentry_open+0x785/0x14e0 [ 1270.913274][ T3483] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1270.923380][ T30] ? vfs_open+0x3b/0x340 [ 1270.929225][ T30] ? path_openat+0x2df0/0x3860 [ 1270.934070][ T30] ? path_openat+0x2e08/0x3860 [ 1270.939387][ T3483] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1270.948625][ T3483] ldm_validate_partition_table(): Disk read failed. [ 1270.955857][ T3483] Dev nbd0: unable to read RDB block 0 [ 1270.963440][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1270.969895][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1270.975436][ T30] ? __pfx_path_openat+0x10/0x10 [ 1270.981744][ T3483] nbd0: unable to read partition table [ 1270.988143][ T30] ? __x64_sys_openat+0x138/0x170 [ 1270.993645][ T30] ? do_syscall_64+0x14d/0xf80 [ 1271.006548][ T30] ? do_exit+0x62e/0x2320 [ 1271.011054][ T30] ? __kasan_slab_free+0x5c/0x80 [ 1271.016119][ T30] ? kmem_cache_free+0x187/0x630 [ 1271.022350][ T30] ? __pfx_do_exit+0x10/0x10 [ 1271.023794][ T5193] udevd[5193]: worker [3483] terminated by signal 9 (Killed) [ 1271.028565][ T30] ? do_group_exit+0x21b/0x2d0 [ 1271.040418][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1271.045707][ T30] ? get_signal+0x1284/0x1330 [ 1271.051718][ T5193] udevd[5193]: worker [3483] failed while handling '/devices/virtual/block/nbd0' [ 1271.051723][ T30] ? arch_do_signal_or_restart+0xbc/0x830 [ 1271.069056][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1271.075282][ T30] ? do_sys_openat2+0x14c/0x200 [ 1271.080898][ T30] ? exit_to_user_mode_loop+0x86/0x480 [ 1271.087042][ T30] ? rcu_is_watching+0x15/0xb0 [ 1271.092394][ T30] ? do_syscall_64+0x32d/0xf80 [ 1271.097383][ T30] ? trace_irq_disable+0x3b/0x150 [ 1271.102491][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.109567][ T30] ? clear_bhb_loop+0x40/0x90 [ 1271.114320][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.121317][ T30] [ 1271.125233][ T30] [ 1271.125233][ T30] Showing all locks held in the system: [ 1271.135496][ T30] 1 lock held by khungtaskd/30: [ 1271.144722][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1271.155188][ T30] 2 locks held by getty/5579: [ 1271.160189][ T30] #0: ffff888037bd10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1271.172380][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1271.183378][ T30] 3 locks held by kworker/u8:20/22985: [ 1271.189133][ T30] 5 locks held by kworker/u8:25/22992: [ 1271.194761][ T30] #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1271.209689][ T30] #1: ffffc90015ed7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1271.220481][ T30] #2: ffffffff8fbbe0f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1271.230228][ T30] #3: ffffffff8fbcc908 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 1271.241158][ T30] #4: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1271.252551][ T30] 2 locks held by syz.2.10630/12767: [ 1271.258386][ T30] #0: ffffffff901373d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1271.269514][ T30] #1: ffffffff8fbcc908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1271.279222][ T30] [ 1271.281607][ T30] ============================================= [ 1271.281607][ T30] [ 1271.300175][ T30] NMI backtrace for cpu 0 [ 1271.300197][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1271.300220][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1271.300234][ T30] Call Trace: [ 1271.300243][ T30] [ 1271.300253][ T30] dump_stack_lvl+0xe8/0x150 [ 1271.300292][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1271.300321][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1271.300354][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1271.300385][ T30] sys_info+0x135/0x170 [ 1271.300407][ T30] watchdog+0xfd9/0x1030 [ 1271.300450][ T30] ? watchdog+0x21a/0x1030 [ 1271.300495][ T30] kthread+0x388/0x470 [ 1271.300517][ T30] ? __pfx_watchdog+0x10/0x10 [ 1271.300551][ T30] ? __pfx_kthread+0x10/0x10 [ 1271.300574][ T30] ret_from_fork+0x51e/0xb90 [ 1271.300669][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1271.300699][ T30] ? __switch_to+0xc7d/0x1450 [ 1271.300729][ T30] ? __pfx_kthread+0x10/0x10 [ 1271.300753][ T30] ret_from_fork_asm+0x1a/0x30 [ 1271.300801][ T30] [ 1271.300810][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1271.417462][ C1] NMI backtrace for cpu 1 [ 1271.417483][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1271.417504][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1271.417516][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1271.417550][ C1] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1271.417567][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1271.417585][ C1] RAX: 000000000041dba1 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1271.417598][ C1] RDX: 0000000000000001 RSI: ffffffff8def2c4d RDI: ffffffff8c27aa00 [ 1271.417612][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1271.417626][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901186b0 [ 1271.417639][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 1271.417652][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 1271.417672][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1271.417685][ C1] CR2: 000055bbcc87fff8 CR3: 0000000076bfe000 CR4: 00000000003526f0 [ 1271.417703][ C1] Call Trace: [ 1271.417712][ C1] [ 1271.417719][ C1] default_idle+0x9/0x20 [ 1271.417738][ C1] default_idle_call+0x72/0xb0 [ 1271.417759][ C1] do_idle+0x1bd/0x500 [ 1271.417855][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1271.417887][ C1] ? __pfx_do_idle+0x10/0x10 [ 1271.417920][ C1] cpu_startup_entry+0x43/0x60 [ 1271.417949][ C1] start_secondary+0x101/0x110 [ 1271.417972][ C1] common_startup_64+0x13e/0x147 [ 1271.418001][ C1] [ 1271.599257][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1271.606195][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1271.615357][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1271.625459][ T30] Call Trace: [ 1271.628785][ T30] [ 1271.631753][ T30] vpanic+0x56c/0xa60 [ 1271.635780][ T30] ? __pfx___schedule+0x10/0x10 [ 1271.640720][ T30] ? __pfx_vpanic+0x10/0x10 [ 1271.645263][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1271.650523][ T30] panic+0xc5/0xd0 [ 1271.654295][ T30] ? __pfx_panic+0x10/0x10 [ 1271.658765][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1271.664211][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1271.670434][ T30] watchdog+0x1023/0x1030 [ 1271.674816][ T30] ? watchdog+0x21a/0x1030 [ 1271.679279][ T30] kthread+0x388/0x470 [ 1271.683379][ T30] ? __pfx_watchdog+0x10/0x10 [ 1271.688095][ T30] ? __pfx_kthread+0x10/0x10 [ 1271.692719][ T30] ret_from_fork+0x51e/0xb90 [ 1271.697345][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1271.702503][ T30] ? __switch_to+0xc7d/0x1450 [ 1271.707239][ T30] ? __pfx_kthread+0x10/0x10 [ 1271.711857][ T30] ret_from_fork_asm+0x1a/0x30 [ 1271.716670][ T30] [ 1271.720328][ T30] Kernel Offset: disabled [ 1271.724664][ T30] Rebooting in 86400 seconds..