last executing test programs: 13.085127887s ago: executing program 1 (id=9127): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES64=r0], 0x3c}}, 0x0) close(r0) 12.993045865s ago: executing program 1 (id=9129): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000007110b800f0ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000da8500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000852000000300000018400000ffffffff00000000000000009500000000000000c7c7bdd889728de264fa2531d8d502df8323ded0897c72624bf7c6a8d7c17f1fa10b2e67f5eb2d5dd0299eafdd6a2414b894f520dccb6139d253d5a0fb5341b5a34c9fc7df95e624ca"], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r2}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=[0x13c, 0x95, 0x0, 0xffffffffffffffff], &(0x7f0000000740)=[0x3, 0x1, 0x5, 0x0], 0x7fffffff, 0x4, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f00000007c0)=r4, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000540)) unshare(0x20000400) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, 0x0, 0x2) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r7, &(0x7f0000000600)=""/144, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r8 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) setsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @local}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x6, 0xd, {{0x36, 0x4, 0x3, 0x1e, 0xd8, 0x68, 0x0, 0x5c, 0x0, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x44, 0x9f, 0x1, 0x7, [{@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@loopback, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x2ef}, {@multicast1, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x33, 0x1, 0x7, [{@loopback, 0x7fff}, {@loopback, 0x9}, {@rand_addr=0x64010102, 0x9}]}, @cipso={0x86, 0x43, 0x0, [{0x7, 0xe, "2510672819d29ed88971f08e"}, {0x1, 0xd, "2d8cdd70c6ef4668bf14e1"}, {0x5, 0xa, "abfe1e79da745e6a"}, {0x5, 0x6, "b8acc4f5"}, {0x1, 0xf, "bee38b8dcfc16bcf9a2d04b190"}, {0x1, 0x3, "ff"}]}, @timestamp={0x44, 0x8, 0x9a, 0x0, 0x9, [0x4]}, @timestamp={0x44, 0xc, 0x97, 0x0, 0x9, [0xb, 0x2cfd]}, @rr={0x7, 0x7, 0xd5, [@multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="800000001005e13f6b0000000000060000000000", @ANYRES32=0x0, @ANYBLOB="0c00040000000000600012800b0001006970367674690000500002800800060000800000080003008000000008000200070000000800060000000000080006000700000008000300060000000800020000f0ffff14000400fc0200"/104], 0x80}}, 0x20004890) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', r9, 0x40, 0x7800, 0x6, 0x9, {{0x18, 0x4, 0x2, 0x3e, 0x60, 0x64, 0x0, 0x2d, 0x4, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x49, 0x3, [{0x5, 0x6, '>\vK;'}, {0x5, 0xc, "18fd510c1f43fa30c0d7"}, {0x7, 0x4, "9ca1"}, {0x6, 0x5, "5b9bae"}, {0x1, 0x7, "37a62737ce"}, {0x1, 0xe, "4ba1b1ef9f5f74ef08960953"}, {0x2, 0x2}, {0x7, 0x11, "2b8b03d3237233cbe3d13e8ca973f3"}]}]}}}}}) 12.857995692s ago: executing program 1 (id=9131): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x43924, 0x20404}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 12.668454511s ago: executing program 1 (id=9133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) (async) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x5, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @private=0xa010102}}}}}}, 0x0) (async) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r5, 0xffffffff, 0xfffffffd}, 0x10) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) 12.300494743s ago: executing program 1 (id=9139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f0000000a80)=""/172, 0x3e, 0xac, 0x9}, 0x28) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x4}, {0x8100, 0x0, 0x1, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @random="cb716a232496", @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) 12.18666916s ago: executing program 1 (id=9142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x400c5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0xc0c4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) write$cgroup_pid(r5, 0x0, 0x0) 6.044912765s ago: executing program 2 (id=9189): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48a41, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="04000000ffffffffffff0000aaaaaaaa86dd60b79a56004c2900fe8000000000000000000000000000aaff0300000000000000000000000000010420880b000000000000081c007f000086dd000500070007080088be000000001000007f0100000000000000080022eb000000002000000004"], 0x86) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, r5, 0x200, 0x70bd28, 0x3, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x40080c0) (async) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000540)={{0x1, 0x8}, 0x100, './file0\x00'}) (async) close(r0) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x75487ccf20328586) (async) socket$unix(0x1, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x4, 0x1, 0x4, 0xbb, 0x8}}}}}, 0x0) 6.009297392s ago: executing program 3 (id=9190): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x49, 0x4c0, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0xe0, 0x1, 0x7, 0x2, 0x5, 0x9, 0x6293cabf}}], 0x50, 0x24048082}, 0x0) unshare(0x400) socket(0x15, 0x5, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e1c, 0x80000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000002900ae9d00003e00000087a805a26e1d40a6"], 0x18}, 0x440e0) (async) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e1c, 0x80000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000002900ae9d00003e00000087a805a26e1d40a6"], 0x18}, 0x440e0) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0xfffffffffffffc18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000047c0000040042801c0001800600060088a80000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r9 = socket(0x10, 0x803, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r10, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) (async) recvmmsg(r10, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x9, 0x80}, 0xfffffffc}, [@tmpl={0x184, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x3501, 0x0, 0x2, 0x4, 0x0, 0xabb}, {{@in6=@empty, 0x4d4, 0x33}, 0x0, @in=@local, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x33}, 0xa, @in6=@local, 0x0, 0x4, 0x2, 0x0, 0x10000}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 5.472692457s ago: executing program 2 (id=9194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x20) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x17, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 5.296286773s ago: executing program 3 (id=9196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'macvtap0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x3b, 0x5, 0x0, 0x25}, 0x0, 0xd8, 0xf8, 0x60030000, {0x0, 0xff000000}, [@common=@frag={{0x30}, {[0x800, 0x1], 0x3, 0x10, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x208, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x4, 0x2, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x4}, {0x0, 0xb, 0x6}, {0xffffffffffffffff, 0x1, 0x6}, 0xce, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYRES8=r0], 0x40}}, 0x20000840) 4.983376627s ago: executing program 3 (id=9199): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x6, 0x3}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 4.735188349s ago: executing program 4 (id=9200): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x400, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xe}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x22, 0x6, 0x2, 0x8, 0x2, 0x0, 0x9, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x8, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0xfe00, 0x4, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @local}, 0x14) (async) r13 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r13, &(0x7f0000000100), 0xa, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r16], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r14) 4.431863848s ago: executing program 2 (id=9201): bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002540)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100", @ANYRESOCT], 0x1c}}, 0x20000040) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000f8ff08440000240012800b00010067656e65766500001400028008000800ffffffff060005004e24000008000a00", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.368880163s ago: executing program 4 (id=9202): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%-5lx \x00'}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2b, 0x3, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80082, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x3, 0x6, 0x86}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000440)="3acbda450dad368d3d8acb22f776040ce6dec397ac7f243e8b08d1ab9c6620fc2dc188b4cbdfda141c1ee276dd66fe37d1b853dc2e781dcf8f94938d0e16ed76caf316b90cf4c402768d3a127a24948b720e48beeba9f16ba2727e4380c7aa06ffc0ebfd07e1e326f08f6291c5486a2f979afb760c55f0b07258d0d9920e6760136cf97effe1add5f7e9f77d2cdd3a8aabcbcd4fb80b451466357b8d4bec4b58d47c55ade7d210229313b843a9193942aa3ed0006c03bfd447bde9bf6f68d427d642ebeef314a427a351", 0xca) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x27}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00113c0ff000000000ff8400000066e4532cc10200000003125ce882cbf490d90812533f00000000a4edf8c076dffa7edea2e427edff792a803c9e8eb420c4", 0x48}, {&(0x7f0000002380)="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", 0xd79}, {&(0x7f0000000640)="c91d588b87bd12b736780a766e3ebca34836bf87f460802751090000001a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad42744633ba2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9f32f0ce78bca83048caf47fedf4f4df5863e2f849b5fc6ef0b49bf7a26954143da754b6b156413c154ecddca46193ae14a797d07608f040ee5c3502457c034ad0436c07e16670bf95859e00000000000001c0000000044508ca8d360667d07ffa667e6ce8c862276f1e38814c8908171659631e23570104c2e76584be234ed6d9856eeb3172b91867f91f8aebb81f7e0ec2a879c43b054d911a28f2e255d805d1b48c5c0adbd22f0e15b1609dceb2cbcdc5bb30128abc390b64dac0374cff082e4cc0e0ac0f212e73bcd277e795472af08295a588a43f6d2ca08e02c59ff1a43", 0x165}, {&(0x7f0000000a00)="a5ca8683d601768d303ca112b53e7aa9b7692478467c2525cc9ceb426e1c40e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce6fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0eda7a68ba7", 0xdb}], 0x4}, 0x45) (async) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x27}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00113c0ff000000000ff8400000066e4532cc10200000003125ce882cbf490d90812533f00000000a4edf8c076dffa7edea2e427edff792a803c9e8eb420c4", 0x48}, {&(0x7f0000002380)="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", 0xd79}, {&(0x7f0000000640)="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", 0x165}, {&(0x7f0000000a00)="a5ca8683d601768d303ca112b53e7aa9b7692478467c2525cc9ceb426e1c40e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce6fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0eda7a68ba7", 0xdb}], 0x4}, 0x45) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x78bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15, 0x30}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 4.071559506s ago: executing program 2 (id=9204): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0xfffffdfd) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251b00000010002e800c000400000000000000000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x404c080) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000240)={r5, 0x1, 0x6, @random="1fd4b6442e8a"}, 0x10) 3.397889915s ago: executing program 0 (id=9205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0xda}, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x1005, &(0x7f0000002500)=""/4101, 0x0, 0xc}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x20, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x2, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100008}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 3.189594119s ago: executing program 0 (id=9206): socketpair(0x15, 0x6, 0x28, &(0x7f0000001400)) 3.133411561s ago: executing program 0 (id=9207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000000)={'pimreg1\x00', @ifru_ivalue=0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0xe, 0x0, &(0x7f0000001240)="dd8000ff600000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.334101649s ago: executing program 3 (id=9208): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x15, 0x4, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "18040a00edc79ded5baf17b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e880626d21967b5f9bd6b2ca299da7e933b9de68b10c358ceb836b1269874d68178d5ca2a60691b8b8e54035c75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b552ae3ab78abf8be2fc63130f4387fb8c00ce678ba03763da61a574abbc59b728aa3c02eedb176afb984194f31696e2b3357c57578ce6ac6e3d2a149abd76a0fe9a44165ad7ea8d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef000008000000000000001f00"}]}}]}, 0x14c}}, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)=""/17, &(0x7f0000000140)=0x11) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0xfff7, 0x5, 0x1}, {0x9, 0x1d, 0x7, 0xd3}, {0x95, 0x8, 0x5, 0x2}, {0xfffc, 0xf, 0x9, 0x6}, {0x0, 0x2, 0x1, 0x401}, {0x9, 0x2, 0x8, 0x884c}, {0x9, 0xfe, 0x4, 0x7f}, {0x7, 0x8, 0x9, 0x7ff}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x1d, 0x0, 0x1, 0xfffff034}, {0xb1}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) 960.748222ms ago: executing program 3 (id=9209): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r3, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r5, 0x6}, 0x8) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000001080006402000000208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xfbffffff}, 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = getpid() write$cgroup_pid(r9, &(0x7f0000000180)=r11, 0x12) 959.816987ms ago: executing program 0 (id=9210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x18, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 867.59146ms ago: executing program 0 (id=9211): syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000616ec653ffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e2200649078020000000000000000000000eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fc68d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b00000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0xc6db, @dev={0xfe, 0x80, '\x00', 0x37}, 0x2}], 0x2c) write(r2, &(0x7f0000000340)="07000000010000", 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r6, @ANYBLOB="410328bd7000fedbdf250700000004000280f40002802c"], 0x1b4}, 0x1, 0x0, 0x0, 0x8810}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 855.061664ms ago: executing program 4 (id=9212): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x40010, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x0, 0x4, 0x1}]}]}}, &(0x7f0000000f40)=""/4079, 0x32, 0xfef, 0x8}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x0, 0x4, 0x1}]}]}}, &(0x7f0000000f40)=""/4079, 0x32, 0xfef, 0x8}, 0x28) 737.702928ms ago: executing program 2 (id=9213): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x4, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x14, 0x0, 0x4, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x880}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r4, 0x1) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0xc800) 693.534466ms ago: executing program 4 (id=9214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'team_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6(0xa, 0x2, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) accept4(r2, 0x0, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000340)="e7ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0xc03, 0x0, 0x25dfdbfe, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xfffc, 0xf804, 0x2, 0x0, 0x0, 0x3e}, {0xfffffffffffffffc, 0x100000000007, 0x0, 0x8001, 0x2, 0x2}, {0xfffffffffffffffe, 0xfffffeffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000180)=0x548, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r5, &(0x7f0000000000), 0x0, 0x8000) 385.532726ms ago: executing program 4 (id=9215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000480)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7, 0x2, 0x3, 0x2, 0x1, 0x4}, 0x20) r3 = accept4(r2, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x200, @remote, 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60010100001011fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e2200f690780203000000000000"], 0x0) 193.520608ms ago: executing program 4 (id=9216): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400a685bf5621a12b760000003b000080", @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 8.163498ms ago: executing program 2 (id=9217): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x6, 0x3}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 6.825364ms ago: executing program 3 (id=9218): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38160c40", @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="1c005e80080002000000000110000100ffffffef000000000d000000"], 0x38}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x8, 0x903, 0x0, 0x0, {0x6, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x58051}, 0x40000) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x2, 0x6}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x2, 0x6}, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@RTM_NEWMDB={0x78, 0x54, 0x1, 0x70bd2a, 0x25dfdbfc, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x2, 0x4, {@ip4=@private=0xa010100, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x13}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x3, 0x4, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000)='o', 0x12, 0x4, &(0x7f0000000180)={0x11, 0x8100, r7, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 0s ago: executing program 0 (id=9219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x7f, 0xa, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x68, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@ssrr={0x89, 0xb, 0xd0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x2, 0x3, "14"}]}, @lsrr={0x83, 0x7, 0xb, [@rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x14, 0x17, 0x1, 0x0, [{@local, 0xab}, {@empty, 0xd706}]}, @end]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x9c, r1, 0x1, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x0) kernel console output (not intermixed with test programs): s committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1017.052299][ T4849] syzkaller0: entered promiscuous mode [ 1017.066615][ T4849] syzkaller0: entered allmulticast mode [ 1017.085925][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1017.101914][ T4870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1017.109373][ T4862] netem: incorrect ge model size [ 1017.117555][ T4860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7840'. [ 1017.118825][ T4862] netem: change failed [ 1017.132145][ T4858] syzkaller1: entered promiscuous mode [ 1017.146650][ T4858] syzkaller1: entered allmulticast mode [ 1017.201325][ T4874] tipc: Resetting bearer [ 1017.266976][ T4848] tipc: Resetting bearer [ 1017.322366][ T4848] tipc: Disabling bearer [ 1017.414310][ T4880] bridge0: port 4(erspan0) entered blocking state [ 1017.434577][ T4880] bridge0: port 4(erspan0) entered disabled state [ 1017.458469][ T4880] erspan0: entered allmulticast mode [ 1017.474262][ T4880] erspan0: entered promiscuous mode [ 1017.487371][ T4880] bridge0: port 4(erspan0) entered blocking state [ 1017.493911][ T4880] bridge0: port 4(erspan0) entered forwarding state [ 1017.697004][ T4899] bridge1: entered promiscuous mode [ 1017.739854][ T4904] netlink: 'syz.0.7853': attribute type 9 has an invalid length. [ 1017.759717][ T4904] bridge4: entered allmulticast mode [ 1017.793686][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1018.000009][ T4921] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1018.024784][ T4924] netlink: 'syz.1.7860': attribute type 11 has an invalid length. [ 1018.077186][ T4929] dvmrp0: entered allmulticast mode [ 1018.376207][ T4950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.464147][ T4950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1018.475337][ T4950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1018.491226][ T4950] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1018.529255][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.536478][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.568415][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.575623][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.625405][ T1010] bridge7: port 2(veth0_to_bond) entered blocking state [ 1018.632527][ T1010] bridge7: port 2(veth0_to_bond) entered forwarding state [ 1018.682378][ T4967] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7869'. [ 1018.793733][ T4966] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7871'. [ 1019.246101][ T5005] tipc: Enabled bearer , priority 0 [ 1019.264445][ T5005] syzkaller0: entered promiscuous mode [ 1019.285233][ T5005] syzkaller0: entered allmulticast mode [ 1019.343947][ T5004] tipc: Resetting bearer [ 1019.372089][ T5004] tipc: Disabling bearer [ 1019.400353][ T5014] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1019.442504][ T5015] __nla_validate_parse: 1 callbacks suppressed [ 1019.442531][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7880'. [ 1019.622482][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7885'. [ 1019.759060][ T5038] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7889'. [ 1019.788432][ T29] audit: type=1800 audit(1777747977.201:21): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7885" name="memory.events" dev="tmpfs" ino=2265 res=0 errno=0 [ 1019.967323][ T5050] netlink: 'syz.4.7893': attribute type 61 has an invalid length. [ 1019.989168][ T5050] netlink: 'syz.4.7893': attribute type 62 has an invalid length. [ 1020.036149][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7891'. [ 1020.092971][ T5054] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7895'. [ 1020.234468][ T5056] tipc: Enabling of bearer rejected, failed to enable media [ 1020.253738][ T5058] netlink: 'syz.0.7891': attribute type 38 has an invalid length. [ 1020.633759][ T5078] netlink: 'syz.2.7900': attribute type 1 has an invalid length. [ 1020.641701][ T5078] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7900'. [ 1020.653706][ T5078] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7900'. [ 1020.814241][ T5092] xt_TCPMSS: Only works on TCP SYN packets [ 1021.038092][ T5108] netlink: 'syz.3.7907': attribute type 41 has an invalid length. [ 1021.429651][ T5119] netlink: 'syz.3.7910': attribute type 1 has an invalid length. [ 1021.450162][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7905'. [ 1021.470400][ T5122] IPv6: NLM_F_CREATE should be specified when creating new route [ 1021.501233][ T5122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1021.508491][ T5122] IPv6: NLM_F_CREATE should be set when creating new route [ 1021.515706][ T5122] IPv6: NLM_F_CREATE should be set when creating new route [ 1021.522908][ T5122] IPv6: NLM_F_CREATE should be set when creating new route [ 1021.530236][ T5123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1021.580853][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7912'. [ 1021.724130][ T5130] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 1021.983571][ T5137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7915'. [ 1022.162789][ T5146] : entered promiscuous mode [ 1022.199113][ T5146] openvswitch: : Dropping previously announced user features [ 1022.273298][ T5151] 5nè: entered promiscuous mode [ 1022.302555][ T5153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1022.411315][ T5157] openvswitch: netlink: Missing valid actions attribute. [ 1022.419360][ T5157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.217197][ T5213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.789937][ T5230] bond8: Removing last arp target with arp_interval on [ 1024.007520][ T5253] openvswitch: netlink: Message has 8 unknown bytes. [ 1024.713488][ T5265] __nla_validate_parse: 8 callbacks suppressed [ 1024.713507][ T5265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7950'. [ 1024.998002][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7952'. [ 1025.102012][ T5275] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1025.343466][ T5294] netlink: 'syz.0.7956': attribute type 3 has an invalid length. [ 1025.653092][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7957'. [ 1025.776107][ T5311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7959'. [ 1026.322998][ T5317] syzkaller1: entered promiscuous mode [ 1026.333066][ T5317] syzkaller1: entered allmulticast mode [ 1026.688921][ T5340] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1026.762252][ T5343] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7967'. [ 1026.902744][ T5358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7971'. [ 1026.965350][ T5358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7971'. [ 1027.595207][ T5403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.604672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.731201][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7983'. [ 1027.792080][ T5403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.801149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.819015][ T5403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.065164][ T5417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7984'. [ 1028.434389][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.447161][T27005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.481903][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.491355][T27005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.681270][ T5463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7995'. [ 1028.891292][ T5476] netlink: 'syz.1.7998': attribute type 6 has an invalid length. [ 1028.925342][ T5476] IPv6: NLM_F_CREATE should be specified when creating new route [ 1029.079062][ C1] net_ratelimit: 4 callbacks suppressed [ 1029.079084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1029.173186][ T5487] sctp: [Deprecated]: syz.2.8002 (pid 5487) Use of int in max_burst socket option deprecated. [ 1029.173186][ T5487] Use struct sctp_assoc_value instead [ 1029.237540][ T1010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.320388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1029.694421][ T5508] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 1029.803475][ T5515] syzkaller0: entered promiscuous mode [ 1029.823382][ T5515] syzkaller0: entered allmulticast mode [ 1029.958805][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.969354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.090304][ T5531] netlink: 'syz.4.8014': attribute type 1 has an invalid length. [ 1030.178043][ T5531] netlink: 'syz.4.8014': attribute type 8 has an invalid length. [ 1030.199220][ T5531] __nla_validate_parse: 2 callbacks suppressed [ 1030.199237][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1030.242087][ T5531] veth1_to_team: entered promiscuous mode [ 1030.252540][ T5531] veth1_to_team: left promiscuous mode [ 1030.417527][ T5547] FAULT_INJECTION: forcing a failure. [ 1030.417527][ T5547] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.439624][ T5547] CPU: 1 UID: 0 PID: 5547 Comm: syz.2.8020 Not tainted syzkaller #0 PREEMPT(full) [ 1030.439647][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1030.439659][ T5547] Call Trace: [ 1030.439666][ T5547] [ 1030.439674][ T5547] dump_stack_lvl+0xe8/0x150 [ 1030.439701][ T5547] should_fail_ex+0x412/0x560 [ 1030.439730][ T5547] should_failslab+0xa8/0x100 [ 1030.439757][ T5547] ? skb_clone+0x212/0x3a0 [ 1030.439782][ T5547] kmem_cache_alloc_noprof+0x87/0x650 [ 1030.439814][ T5547] skb_clone+0x212/0x3a0 [ 1030.439842][ T5547] __netlink_deliver_tap+0x404/0x850 [ 1030.439876][ T5547] ? netlink_deliver_tap+0x2e/0x1b0 [ 1030.439900][ T5547] netlink_deliver_tap+0x19c/0x1b0 [ 1030.439924][ T5547] netlink_sendskb+0x68/0x140 [ 1030.439947][ T5547] netlink_rcv_skb+0x2b6/0x4b0 [ 1030.439970][ T5547] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1030.439993][ T5547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1030.440028][ T5547] ? netlink_deliver_tap+0x2e/0x1b0 [ 1030.440050][ T5547] ? netlink_deliver_tap+0x2e/0x1b0 [ 1030.440077][ T5547] netlink_unicast+0x75c/0x8e0 [ 1030.440109][ T5547] netlink_sendmsg+0x813/0xb40 [ 1030.440140][ T5547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.440170][ T5547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1030.440195][ T5547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1030.440222][ T5547] ____sys_sendmsg+0x972/0x9f0 [ 1030.440245][ T5547] ? __might_fault+0xaf/0x130 [ 1030.440274][ T5547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1030.440307][ T5547] ? import_iovec+0x73/0xa0 [ 1030.440335][ T5547] ___sys_sendmsg+0x2a5/0x360 [ 1030.440364][ T5547] ? __lock_acquire+0x6b5/0x2cf0 [ 1030.440389][ T5547] ? __pfx____sys_sendmsg+0x10/0x10 [ 1030.440450][ T5547] ? __fget_files+0x2a/0x420 [ 1030.440470][ T5547] ? __fget_files+0x3a0/0x420 [ 1030.440503][ T5547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1030.440530][ T5547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1030.440564][ T5547] ? __pfx_ksys_write+0x10/0x10 [ 1030.440598][ T5547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.440618][ T5547] do_syscall_64+0x15f/0xf80 [ 1030.440638][ T5547] ? trace_irq_disable+0x3b/0x140 [ 1030.440663][ T5547] ? clear_bhb_loop+0x40/0x90 [ 1030.440686][ T5547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.440704][ T5547] RIP: 0033:0x7fc97bd9cdd9 [ 1030.440723][ T5547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.440738][ T5547] RSP: 002b:00007fc97cbbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1030.440757][ T5547] RAX: ffffffffffffffda RBX: 00007fc97c016090 RCX: 00007fc97bd9cdd9 [ 1030.440770][ T5547] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000003 [ 1030.440783][ T5547] RBP: 00007fc97cbbc090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.440795][ T5547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.440806][ T5547] R13: 00007fc97c016128 R14: 00007fc97c016090 R15: 00007ffdba44a858 [ 1030.440837][ T5547] [ 1030.833826][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8021'. [ 1030.844817][ T5553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8021'. [ 1030.961171][ T5560] wg2: entered allmulticast mode [ 1030.992622][ T5560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8026'. [ 1031.072539][ T5571] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.8029'. [ 1031.093069][ T5571] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1031.136030][ T5573] openvswitch: netlink: Key type 310 is out of range max 32 [ 1031.229762][ T5578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8032'. [ 1031.289155][ T5580] lo speed is unknown, defaulting to 1000 [ 1031.318936][ T5580] lo speed is unknown, defaulting to 1000 [ 1031.330192][ T5580] lo speed is unknown, defaulting to 1000 [ 1031.444962][ T5599] FAULT_INJECTION: forcing a failure. [ 1031.444962][ T5599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.468443][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: syz.0.8036 Not tainted syzkaller #0 PREEMPT(full) [ 1031.468468][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1031.468479][ T5599] Call Trace: [ 1031.468487][ T5599] [ 1031.468495][ T5599] dump_stack_lvl+0xe8/0x150 [ 1031.468530][ T5599] should_fail_ex+0x412/0x560 [ 1031.468559][ T5599] _copy_to_user+0x31/0xb0 [ 1031.468588][ T5599] simple_read_from_buffer+0xe1/0x170 [ 1031.468616][ T5599] proc_fail_nth_read+0x1bb/0x230 [ 1031.468642][ T5599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1031.468668][ T5599] ? rw_verify_area+0x2a6/0x4d0 [ 1031.468691][ T5599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1031.468714][ T5599] vfs_read+0x20c/0xa70 [ 1031.468743][ T5599] ? __pfx___mutex_lock+0x10/0x10 [ 1031.468766][ T5599] ? __pfx_vfs_read+0x10/0x10 [ 1031.468791][ T5599] ? __fget_files+0x2a/0x420 [ 1031.468817][ T5599] ? __fget_files+0x3a0/0x420 [ 1031.468837][ T5599] ? __fget_files+0x2a/0x420 [ 1031.468867][ T5599] ksys_read+0x150/0x270 [ 1031.468894][ T5599] ? __pfx_ksys_read+0x10/0x10 [ 1031.468926][ T5599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.468948][ T5599] do_syscall_64+0x15f/0xf80 [ 1031.468968][ T5599] ? trace_irq_disable+0x3b/0x140 [ 1031.468994][ T5599] ? clear_bhb_loop+0x40/0x90 [ 1031.469017][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.469035][ T5599] RIP: 0033:0x7fc7f875d60e [ 1031.469053][ T5599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1031.469068][ T5599] RSP: 002b:00007fc7f69d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1031.469088][ T5599] RAX: ffffffffffffffda RBX: 00007fc7f69d56c0 RCX: 00007fc7f875d60e [ 1031.469102][ T5599] RDX: 000000000000000f RSI: 00007fc7f69d50a0 RDI: 0000000000000004 [ 1031.469113][ T5599] RBP: 00007fc7f69d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.469125][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.469136][ T5599] R13: 00007fc7f8a16218 R14: 00007fc7f8a16180 R15: 00007ffd66dce8f8 [ 1031.469167][ T5599] [ 1031.646784][ T5580] infiniband sqz0: set active [ 1031.687511][T16111] lo speed is unknown, defaulting to 1000 [ 1031.708496][ T5580] infiniband sqz0: added lo [ 1031.733518][ T5580] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1031.749720][ T5580] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1031.751921][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8039'. [ 1031.767366][ T5580] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1031.776017][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8039'. [ 1031.776036][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8039'. [ 1031.801907][ T5601] netlink: 'syz.4.8038': attribute type 4 has an invalid length. [ 1031.804555][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8039'. [ 1031.895566][ T5580] RDS/IB: sqz0: added [ 1031.900322][ T5580] smc: adding ib device sqz0 with port count 1 [ 1031.941138][ T5580] smc: ib device sqz0 port 1 has no pnetid [ 1031.955669][T16111] lo speed is unknown, defaulting to 1000 [ 1031.965184][ T5580] lo speed is unknown, defaulting to 1000 [ 1032.050101][ T5624] dvmrp0: entered allmulticast mode [ 1032.659556][ T5638] tipc: Enabled bearer , priority 0 [ 1032.671798][ T5580] lo speed is unknown, defaulting to 1000 [ 1032.691444][ T5643] syzkaller0: entered promiscuous mode [ 1032.718229][ T5643] syzkaller0: entered allmulticast mode [ 1032.782908][ T5645] tipc: Resetting bearer [ 1032.828836][ T5631] tipc: Resetting bearer [ 1032.869561][ T5631] tipc: Disabling bearer [ 1033.086283][ T5580] lo speed is unknown, defaulting to 1000 [ 1033.342930][ T5677] netlink: 'syz.1.8054': attribute type 21 has an invalid length. [ 1033.356607][ T5677] netlink: 'syz.1.8054': attribute type 5 has an invalid length. [ 1033.369218][ T5677] netlink: 'syz.1.8054': attribute type 6 has an invalid length. [ 1033.459816][ T5680] netlink: 'syz.1.8054': attribute type 21 has an invalid length. [ 1033.492245][ T5680] netlink: 'syz.1.8054': attribute type 5 has an invalid length. [ 1033.519432][ T5680] netlink: 'syz.1.8054': attribute type 6 has an invalid length. [ 1033.602758][ T5580] lo speed is unknown, defaulting to 1000 [ 1034.012931][ T5580] lo speed is unknown, defaulting to 1000 [ 1034.021605][ T5719] xt_hashlimit: size too large, truncated to 1048576 [ 1034.461314][ T5580] lo speed is unknown, defaulting to 1000 [ 1034.674880][ T5750] netlink: 'syz.3.8071': attribute type 21 has an invalid length. [ 1034.751425][ T5580] lo speed is unknown, defaulting to 1000 [ 1035.461966][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.485631][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.494444][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.503823][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.513162][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.521932][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.531397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.543212][ T5779] netlink: 'syz.1.8080': attribute type 1 has an invalid length. [ 1035.623947][ T5779] bond7: entered promiscuous mode [ 1035.629682][ T5779] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1035.728859][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.737090][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.745666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.869872][ T5798] __nla_validate_parse: 23 callbacks suppressed [ 1035.869892][ T5798] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8087'. [ 1035.908973][ T29] audit: type=1800 audit(1777747993.321:22): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8083" name="r" dev="tmpfs" ino=1796 res=0 errno=0 [ 1036.066853][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8089'. [ 1036.245354][ T5777] hsr0: entered promiscuous mode [ 1036.259906][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8096'. [ 1036.324959][ T5827] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8097'. [ 1036.434829][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8099'. [ 1036.476830][ T5834] erspan0: left allmulticast mode [ 1036.486540][ T5834] erspan0: left promiscuous mode [ 1036.499744][ T5834] bridge0: port 4(erspan0) entered disabled state [ 1036.532977][ T5834] vlan2: left allmulticast mode [ 1036.546173][ T5834] geneve0: left allmulticast mode [ 1036.560051][ T5834] vlan2: left promiscuous mode [ 1036.573749][ T5834] geneve0: left promiscuous mode [ 1036.581832][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8100'. [ 1036.586629][ T5834] bridge0: port 3(vlan2) entered disabled state [ 1036.629266][ T5834] bridge_slave_1: left allmulticast mode [ 1036.646252][ T5834] bridge_slave_1: left promiscuous mode [ 1036.662304][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.729787][ T5834] bridge_slave_0: left allmulticast mode [ 1036.741730][ T5834] bridge_slave_0: left promiscuous mode [ 1036.764697][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.125875][ T5830] lo speed is unknown, defaulting to 1000 [ 1037.162736][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1037.355689][ T5876] syzkaller1: entered promiscuous mode [ 1037.369488][ T5876] syzkaller1: entered allmulticast mode [ 1037.380472][ T5880] xt_hashlimit: size too large, truncated to 1048576 [ 1037.763565][ T5897] erspan1: entered promiscuous mode [ 1037.774702][ T5897] erspan1: entered allmulticast mode [ 1037.783534][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8114'. [ 1037.835867][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8114'. [ 1038.916617][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1039.025837][ T5970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8127'. [ 1041.229140][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8129'. [ 1041.419781][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8132'. [ 1041.479024][ T79] net_ratelimit: 11 callbacks suppressed [ 1041.479043][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.492922][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.502065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.564734][ T6004] netlink: 'syz.1.8133': attribute type 83 has an invalid length. [ 1041.803560][ T6019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8139'. [ 1042.025894][ T6023] netlink: 'syz.4.8142': attribute type 1 has an invalid length. [ 1042.038923][ T6023] netlink: 'syz.4.8142': attribute type 1 has an invalid length. [ 1042.772587][ T6065] netlink: 'syz.2.8150': attribute type 298 has an invalid length. [ 1042.990125][ T6070] tipc: Failed to remove unknown binding: 66,1,1/3521536114:3236122709/3236122711 [ 1043.290298][ T6088] x_tables: duplicate underflow at hook 2 [ 1043.293647][ T6062] lo speed is unknown, defaulting to 1000 [ 1043.305588][ T6088] netlink: 632 bytes leftover after parsing attributes in process `syz.2.8156'. [ 1043.755907][ T6113] netlink: 'syz.4.8162': attribute type 30 has an invalid length. [ 1043.800975][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8162'. [ 1043.871960][ T6113] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1043.914687][ T6113] bond9 (unregistering): Released all slaves [ 1043.923792][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8164'. [ 1043.983711][ T6118] netlink: 'syz.3.8164': attribute type 1 has an invalid length. [ 1043.996513][ T6118] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8164'. [ 1044.047042][ T6122] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8165'. [ 1044.186895][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8168'. [ 1044.210836][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8168'. [ 1044.231803][ T6126] vlan0: entered promiscuous mode [ 1044.863666][ T6120] lo speed is unknown, defaulting to 1000 [ 1045.286910][ T6121] lo speed is unknown, defaulting to 1000 [ 1045.618440][ T6134] lo speed is unknown, defaulting to 1000 [ 1046.405752][ T6142] lo speed is unknown, defaulting to 1000 [ 1046.516153][ T6163] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1046.784052][ T6173] netlink: 'syz.1.8177': attribute type 39 has an invalid length. [ 1046.995371][ T6132] lo speed is unknown, defaulting to 1000 [ 1047.242683][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.250885][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.260130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.365582][ T6184] netlink: 'syz.1.8179': attribute type 89 has an invalid length. [ 1047.758429][ T6138] lo speed is unknown, defaulting to 1000 [ 1049.617513][ T6206] __nla_validate_parse: 1 callbacks suppressed [ 1049.617530][ T6206] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8183'. [ 1049.761509][ T6210] netlink: 'syz.1.8184': attribute type 89 has an invalid length. [ 1049.880110][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1049.880110][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1049.880155][ T6212] netlink: 'syz.0.8185': attribute type 5 has an invalid length. [ 1049.906790][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1049.917003][ T6213] netlink: 'syz.0.8185': attribute type 5 has an invalid length. [ 1049.939899][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1049.943342][ T6212] geneve4: entered promiscuous mode [ 1049.955843][ T6212] geneve4: entered allmulticast mode [ 1049.976316][ T1113] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1049.985044][ T1113] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1050.006932][ T1113] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1050.022439][ T1113] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1050.364687][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8192'. [ 1050.440379][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8191'. [ 1050.473498][ T6245] netlink: 'syz.0.8191': attribute type 1 has an invalid length. [ 1050.485710][ T6245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8191'. [ 1050.794026][ T6268] netlink: 'syz.0.8200': attribute type 1 has an invalid length. [ 1050.910676][ T6268] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1051.305853][ T6264] lo speed is unknown, defaulting to 1000 [ 1051.906121][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8211'. [ 1051.918347][ T6311] openvswitch: netlink: Invalid VLAN frame [ 1051.925840][ T6311] team0: entered promiscuous mode [ 1051.931579][ T6311] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1052.244143][ T6286] lo speed is unknown, defaulting to 1000 [ 1052.805465][ T6287] lo speed is unknown, defaulting to 1000 [ 1052.997858][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.006052][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.014683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.377973][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8219'. [ 1053.436582][ T6348] netlink: 'syz.4.8220': attribute type 13 has an invalid length. [ 1053.464819][ T6348] netlink: 'syz.4.8220': attribute type 17 has an invalid length. [ 1053.673369][ T6353] netlink: 'syz.2.8221': attribute type 9 has an invalid length. [ 1053.750502][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.768511][ T6348] team0: left promiscuous mode [ 1053.781899][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.818184][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.957701][ T6348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1053.979689][ T6348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1054.019932][ T6348] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1054.208050][ T6353] bridge11: entered allmulticast mode [ 1054.840153][ T6357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8222'. [ 1055.982476][ T6361] lo speed is unknown, defaulting to 1000 [ 1056.267757][ T6382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1056.307062][ T6421] netlink: 'syz.0.8240': attribute type 1 has an invalid length. [ 1056.439466][ T6421] bond13: entered promiscuous mode [ 1056.451665][ T6421] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1056.468989][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8230'. [ 1056.631732][ T6431] netlink: 'syz.0.8242': attribute type 1 has an invalid length. [ 1056.693145][ T6431] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1056.820104][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8244'. [ 1057.162362][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8246'. [ 1057.727153][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8251'. [ 1057.922348][ T6468] tipc: Enabled bearer , priority 0 [ 1057.943065][ T6468] syzkaller0: entered promiscuous mode [ 1057.953966][ T6468] syzkaller0: entered allmulticast mode [ 1058.033993][ T6468] tipc: Resetting bearer [ 1058.050405][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8254'. [ 1058.072627][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8255'. [ 1058.081664][ T6475] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8254'. [ 1058.091326][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8254'. [ 1058.102056][ T6475] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8254'. [ 1058.112077][ T6467] tipc: Resetting bearer [ 1058.127988][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.136190][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.144721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.171834][ T6467] tipc: Disabling bearer [ 1058.182484][ T6443] lo speed is unknown, defaulting to 1000 [ 1059.069845][ T6503] netlink: 'syz.2.8264': attribute type 1 has an invalid length. [ 1059.096525][ T6503] netlink: 'syz.2.8264': attribute type 2 has an invalid length. [ 1059.372021][ T6509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.573513][ T6515] netlink: 'syz.3.8267': attribute type 21 has an invalid length. [ 1059.587126][ T6515] netlink: 'syz.3.8267': attribute type 5 has an invalid length. [ 1059.605682][ T6515] netlink: 'syz.3.8267': attribute type 6 has an invalid length. [ 1059.964751][ T6532] netlink: 'syz.3.8274': attribute type 30 has an invalid length. [ 1059.989221][ T6532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1060.118948][ T6537] __nla_validate_parse: 6 callbacks suppressed [ 1060.118966][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1060.924905][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8282'. [ 1061.017458][ T6774] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.022758][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8282'. [ 1061.036581][ T6774] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1061.187681][ T6549] lo speed is unknown, defaulting to 1000 [ 1061.487019][ T6583] wg2: left allmulticast mode [ 1061.510391][ T6583] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1061.536792][ T807] lo speed is unknown, defaulting to 1000 [ 1061.740393][ T6585] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8290'. [ 1062.481021][ T6595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.514194][ T6595] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.547155][ T6595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.259340][ T6595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1063.272049][ T6595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1063.287867][ T6595] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1063.393253][T17645] syz0: Port: 1 Link ACTIVE [ 1063.442928][ T5777] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1063.511341][ T29] audit: type=1107 audit(1777748020.931:23): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1063.633963][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1063.667935][ T6618] netlink: 'syz.0.8300': attribute type 13 has an invalid length. [ 1063.697197][ T6618] netlink: 'syz.0.8300': attribute type 17 has an invalid length. [ 1063.723648][ T6624] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8303'. [ 1063.781257][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1063.848698][T16112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1063.877999][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.886213][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.895319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.902470][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1064.019348][ T6618] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1064.061329][ T6623] macsec1: entered promiscuous mode [ 1064.068010][ T6623] macsec1: entered allmulticast mode [ 1064.141898][ T6645] netlink: 'syz.3.8308': attribute type 1 has an invalid length. [ 1064.171485][ T6770] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1064.181479][ T6770] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1064.280742][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1064.312139][T16112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1064.377421][ T6651] bond8: option lacp_active: invalid value (8) [ 1064.507650][ T6651] bond8 (unregistering): Released all slaves [ 1064.696222][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8313'. [ 1064.716639][ T5777] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1064.930600][ T6652] batadv1: entered promiscuous mode [ 1064.941254][ T6652] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1065.252215][ T6684] netlink: 'syz.1.8319': attribute type 5 has an invalid length. [ 1065.491423][ T6695] IPv6: addrconf: prefix option has invalid lifetime [ 1065.588033][ T6705] netlink: 'syz.0.8326': attribute type 4 has an invalid length. [ 1065.883792][ T6717] __nla_validate_parse: 12 callbacks suppressed [ 1065.883813][ T6717] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.8330'. [ 1066.125289][ T6730] batman_adv: batadv0: Adding interface: ipvlan3 [ 1066.134033][ T6728] nbd0: detected capacity change from 0 to 63 [ 1066.143114][ T5642] block nbd0: Receive control failed (result -32) [ 1066.144154][ T6730] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.178881][ T5524] block nbd0: Dead connection, failed to find a fallback [ 1066.196097][ T5524] block nbd0: shutting down sockets [ 1066.212051][ T5524] blk_print_req_error: 138 callbacks suppressed [ 1066.212067][ T5524] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.233236][ T6730] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 1066.260210][ T5524] buffer_io_error: 138 callbacks suppressed [ 1066.260226][ T5524] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1066.300386][ T6740] netlink: 'syz.1.8339': attribute type 3 has an invalid length. [ 1066.311127][ T5524] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.337727][ T5524] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1066.359275][ T5524] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.391033][ T5524] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1066.408525][ T5524] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.430233][ T5524] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1066.443948][ T5524] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.486559][ T5524] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1066.519520][ T5524] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.550599][ T5524] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1066.566648][ T5524] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.588053][ T5524] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1066.612416][ T5524] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.633349][ T5524] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1066.647876][ T5524] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.668838][ T5524] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1066.685821][ T5524] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1066.708985][ T5524] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1066.742678][ T5524] ldm_validate_partition_table(): Disk read failed. [ 1066.778063][ T5524] Dev nbd0: unable to read RDB block 0 [ 1066.807858][ T5524] nbd0: unable to read partition table [ 1066.819912][ T6787] netlink: 'syz.0.8348': attribute type 3 has an invalid length. [ 1066.845093][ T5524] ldm_validate_partition_table(): Disk read failed. [ 1066.888799][ T5524] Dev nbd0: unable to read RDB block 0 [ 1066.919526][ T5524] nbd0: unable to read partition table [ 1067.165412][ T6804] sctp: [Deprecated]: syz.3.8352 (pid 6804) Use of int in max_burst socket option deprecated. [ 1067.165412][ T6804] Use struct sctp_assoc_value instead [ 1067.195783][ T6754] lo speed is unknown, defaulting to 1000 [ 1067.214227][ T6800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8351'. [ 1067.449495][ T6811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8354'. [ 1067.541093][ T807] syz0: Port: 1 Link DOWN [ 1067.577018][ T6774] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.605779][ T6774] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1067.635230][ T6774] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.654651][ T6774] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1067.672407][ T6774] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.691053][ T6774] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1067.760199][ T6819] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 1067.945838][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1068.361502][ T6860] netlink: 'syz.4.8368': attribute type 10 has an invalid length. [ 1068.941372][ T6888] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8377'. [ 1068.959630][ T6885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8376'. [ 1069.034837][ T6892] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8377'. [ 1069.052557][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8380'. [ 1069.085149][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8380'. [ 1069.089399][ T6898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8377'. [ 1069.643932][ T1010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.652137][ T1010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.660672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.044758][ T6899] lo speed is unknown, defaulting to 1000 [ 1070.135601][ T6947] netlink: 'syz.1.8387': attribute type 1 has an invalid length. [ 1070.184371][ T6947] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1070.562634][ T6965] netlink: 'syz.4.8390': attribute type 16 has an invalid length. [ 1070.638293][ T6965] netlink: 'syz.4.8390': attribute type 17 has an invalid length. [ 1070.771622][ T6965] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1070.995941][ T6986] netlink: 'syz.3.8398': attribute type 1 has an invalid length. [ 1071.104897][ T6996] bond6: (slave veth7): Enslaving as an active interface with a down link [ 1071.246753][ T7002] __nla_validate_parse: 1 callbacks suppressed [ 1071.246772][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8398'. [ 1071.315866][ T7004] rdma_rxe: rxe_newlink: failed to add gre0 [ 1071.344462][ T6986] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1071.617969][ T7008] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8402'. [ 1071.641815][ T7008] x_tables: duplicate underflow at hook 1 [ 1071.974302][ T7018] tipc: Enabled bearer , priority 0 [ 1072.022011][ T7027] netlink: 'syz.4.8407': attribute type 5 has an invalid length. [ 1072.103346][ T7018] syzkaller0: entered promiscuous mode [ 1072.109065][ T7018] syzkaller0: entered allmulticast mode [ 1072.115433][ T7018] tipc: Resetting bearer [ 1072.146639][ T7017] tipc: Resetting bearer [ 1074.340626][ T7017] tipc: Disabling bearer [ 1074.388282][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.395964][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.410825][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.470415][ T7039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1074.481169][ T7039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1074.494645][ T7039] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1074.520437][ T7044] tipc: Enabling of bearer rejected, failed to enable media [ 1074.529782][ T7045] hsr0: entered promiscuous mode [ 1074.535987][ T7045] hsr0: left promiscuous mode [ 1074.644007][ T24] tipc: Node number set to 4000276521 [ 1074.723139][ T4992] udevd[4992]: worker [3551] /devices/virtual/block/nbd2 is taking a long time [ 1074.737419][T27003] syz0: Port: 1 Link ACTIVE [ 1074.753496][ T7066] netlink: 'syz.4.8417': attribute type 11 has an invalid length. [ 1075.289751][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8430'. [ 1075.397202][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.405393][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.413973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.493068][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8433'. [ 1075.509568][ T7123] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8435'. [ 1075.523794][ T7123] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8435'. [ 1075.524287][ T7119] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8433'. [ 1075.578476][ T7128] tipc: Enabling of bearer rejected, failed to enable media [ 1075.809277][ T7095] lo speed is unknown, defaulting to 1000 [ 1075.837235][ T7141] netlink: 'syz.4.8439': attribute type 21 has an invalid length. [ 1075.900785][ T7143] tipc: Enabled bearer , priority 0 [ 1076.072068][ T7142] tipc: Disabling bearer [ 1076.220721][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8442'. [ 1076.291360][ T7160] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8442'. [ 1076.292580][ T7159] netlink: 'syz.3.8443': attribute type 21 has an invalid length. [ 1076.670469][ T7179] sctp: [Deprecated]: syz.1.8448 (pid 7179) Use of int in max_burst socket option. [ 1076.670469][ T7179] Use struct sctp_assoc_value instead [ 1076.799457][ T7186] netlink: 484 bytes leftover after parsing attributes in process `syz.0.8450'. [ 1076.869637][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8452'. [ 1076.875266][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8451'. [ 1076.918940][ T7193] veth1_to_team: entered promiscuous mode [ 1076.926580][ T7193] gretap0: entered promiscuous mode [ 1076.934559][ T7193] debugfs: 'hsr1' already exists in 'hsr' [ 1076.950592][ T7193] Cannot create hsr debugfs directory [ 1076.966782][ T7193] hsr1: entered promiscuous mode [ 1077.185206][ T7211] netlink: 'syz.2.8454': attribute type 4 has an invalid length. [ 1077.213145][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8456'. [ 1077.244397][ T7199] netlink: 288 bytes leftover after parsing attributes in process `syz.2.8454'. [ 1077.343644][ T7211] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1077.460672][ T7222] netlink: 'syz.1.8458': attribute type 1 has an invalid length. [ 1077.477810][ T7223] netlink: 'syz.1.8458': attribute type 1 has an invalid length. [ 1077.914121][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ca29800: rx timeout, send abort [ 1077.924628][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ca29800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1078.004031][ T7222] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1078.006146][ T7223] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1078.115813][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8459'. [ 1078.150154][ T7239] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8463'. [ 1078.283603][ T7240] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8462'. [ 1078.770109][ T7280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.916156][ T7285] syz_tun: entered promiscuous mode [ 1078.933153][ T7285] macvtap1: entered promiscuous mode [ 1078.951426][ T7285] syz_tun: left promiscuous mode [ 1079.224884][ T7306] netlink: 'syz.3.8478': attribute type 3 has an invalid length. [ 1079.258799][ T7306] netlink: 'syz.3.8478': attribute type 3 has an invalid length. [ 1079.443522][ T7319] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1079.929110][ T7352] netlink: 'syz.0.8484': attribute type 3 has an invalid length. [ 1079.958274][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8484'. [ 1080.101046][ T7352] tipc: Enabling of bearer rejected, failed to enable media [ 1080.256150][ T7381] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 1080.391818][ T7389] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1081.048420][ T7429] syzkaller0: entered promiscuous mode [ 1081.062124][ T7429] syzkaller0: entered allmulticast mode [ 1081.143441][ T7440] netlink: 'syz.3.8508': attribute type 1 has an invalid length. [ 1081.161851][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.170050][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.178600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.241233][ T7447] tipc: Enabling of bearer rejected, failed to enable media [ 1081.494986][ T7459] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1081.573353][ T7459] macsec1: entered allmulticast mode [ 1081.579860][ T7459] macsec0: entered allmulticast mode [ 1081.615470][ T7459] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1081.934452][ T7457] lo speed is unknown, defaulting to 1000 [ 1082.037011][ T7487] __nla_validate_parse: 4 callbacks suppressed [ 1082.037030][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8521'. [ 1082.244015][ T7487] bond8: entered promiscuous mode [ 1082.282092][ T7487] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1082.354069][ T7492] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1082.366191][ T7492] bond8: (slave sit2): The slave device specified does not support setting the MAC address [ 1082.377376][ T7492] bond8: (slave sit2): Error -95 calling set_mac_address [ 1082.420664][ T7483] lo speed is unknown, defaulting to 1000 [ 1082.693086][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8526'. [ 1083.539725][ T7520] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 1084.129564][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8536'. [ 1084.310241][ T7550] bond9: Invalid ad_actor_system MAC address. [ 1084.338186][ T7550] bond9: option ad_actor_system: invalid value (7) [ 1084.368879][ T7550] bond9 (unregistering): Released all slaves [ 1084.468470][ T7522] lo speed is unknown, defaulting to 1000 [ 1084.471451][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8539'. [ 1084.519533][ T7560] vlan0: entered promiscuous mode [ 1084.541129][ T7560] bridge0: entered promiscuous mode [ 1085.307875][ T7592] bond15: option lacp_active: invalid value (8) [ 1085.323306][ T7592] bond15 (unregistering): Released all slaves [ 1085.414770][ T7597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.487833][ T7605] macsec1: entered promiscuous mode [ 1085.509826][ T7605] macsec1: entered allmulticast mode [ 1085.516166][ T7597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.592730][ T7609] syzkaller1: entered promiscuous mode [ 1085.621916][ T7609] syzkaller1: entered allmulticast mode [ 1085.907364][ T7629] gtp1: entered promiscuous mode [ 1085.923051][ T7629] gtp1: entered allmulticast mode [ 1086.022605][ T7632] tipc: Enabled bearer , priority 0 [ 1086.055561][ T7632] syzkaller0: entered promiscuous mode [ 1086.070687][ T7632] syzkaller0: entered allmulticast mode [ 1086.084286][ T7632] tipc: Resetting bearer [ 1086.096889][ T7632] tipc: Resetting bearer [ 1086.147463][ T7632] tipc: Disabling bearer [ 1086.436642][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8563'. [ 1086.628852][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8564'. [ 1086.665710][T31931] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.676243][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8564'. [ 1086.688131][T31931] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.697496][T31931] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.716616][T31931] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.773512][ T7654] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1086.833143][ T7643] bond9: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1086.854875][ T7643] bond9 (unregistering): Released all slaves [ 1086.885641][ T7666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.894690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.931472][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.939802][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.948669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.950408][ T7665] bond0: entered promiscuous mode [ 1086.981400][ T7665] batadv0: entered promiscuous mode [ 1086.987715][ T7665] debugfs: 'hsr1' already exists in 'hsr' [ 1086.993653][ T7665] Cannot create hsr debugfs directory [ 1087.009695][ T7665] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1087.021912][ T7665] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1087.056156][ T7665] bond0: left promiscuous mode [ 1087.069120][ T7665] batadv0: left promiscuous mode [ 1087.148004][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.921193][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8584'. [ 1088.266744][ T7689] lo speed is unknown, defaulting to 1000 [ 1088.442229][ T7754] netlink: 'syz.2.8590': attribute type 1 has an invalid length. [ 1088.459377][ T7754] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8590'. [ 1088.476492][ T7754] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8590'. [ 1088.491486][ T7754] netlink: 'syz.2.8590': attribute type 1 has an invalid length. [ 1088.499523][ T7754] netlink: 'syz.2.8590': attribute type 8 has an invalid length. [ 1088.502353][ T7755] sctp: [Deprecated]: syz.1.8589 (pid 7755) Use of int in maxseg socket option. [ 1088.502353][ T7755] Use struct sctp_assoc_value instead [ 1088.507528][ T7754] netlink: 606 bytes leftover after parsing attributes in process `syz.2.8590'. [ 1088.606816][ T7751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1088.853563][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8594'. [ 1088.894982][ T7773] netlink: 'syz.2.8594': attribute type 1 has an invalid length. [ 1088.993720][ T7773] bond9: entered promiscuous mode [ 1088.999382][ T7773] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1089.042765][ T7779] tipc: Started in network mode [ 1089.062778][ T7779] tipc: Node identity 080211000001, cluster identity 4711 [ 1089.091189][ T7779] tipc: Enabled bearer , priority 0 [ 1089.119409][ T7779] mac80211_hwsim hwsim95 syzkaller0: entered promiscuous mode [ 1089.127136][ T7779] mac80211_hwsim hwsim95 syzkaller0: entered allmulticast mode [ 1089.148492][ T7779] tipc: Resetting bearer [ 1089.348249][ T7804] netlink: 'syz.3.8602': attribute type 13 has an invalid length. [ 1089.386444][ T7804] netlink: 'syz.3.8602': attribute type 17 has an invalid length. [ 1089.492975][ T7795] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1089.593220][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8602'. [ 1089.844681][ T7795] macsec0: left allmulticast mode [ 1090.002470][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.011523][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.039735][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.194416][ T7804] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1090.201765][ T7804] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 1090.238391][ T7804] veth1_vlan: left promiscuous mode [ 1090.249923][ T7804] vlan0: left promiscuous mode [ 1090.256303][ T7804] veth1_vlan: entered promiscuous mode [ 1090.270286][ T7804] veth1_macvtap: left promiscuous mode [ 1090.283019][ T7804] veth0_macvtap: left promiscuous mode [ 1090.290128][ T7804] veth0_macvtap: entered promiscuous mode [ 1090.304989][ T7804] veth1_macvtap: entered promiscuous mode [ 1090.318884][ T7804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1090.333444][ T7804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1090.346046][ T7804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1090.359255][ T7804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1090.371582][ T7804] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1090.433556][ T6764] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.453475][ T6764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.474259][ T6764] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.493464][ T6764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.513178][ T6764] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.532860][ T6764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.555377][ T7334] tipc: Node number set to 134418688 [ 1090.561961][ T7803] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8603'. [ 1090.600316][ T6764] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.609738][ T6764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.736270][ T7831] netlink: 484 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1091.216592][ T7853] ip6gre2: entered promiscuous mode [ 1091.228724][ T7853] ip6gre2: entered allmulticast mode [ 1091.259885][ T7825] lo speed is unknown, defaulting to 1000 [ 1091.365878][ T7863] netlink: 'syz.0.8615': attribute type 1 has an invalid length. [ 1091.790926][ T7877] syzkaller0: entered promiscuous mode [ 1091.816212][ T7877] syzkaller0: entered allmulticast mode [ 1092.044895][ T6770] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1092.072626][ T6770] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1092.081167][T27003] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1092.227894][T27003] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1092.688502][T31931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.696738][T31931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.705285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.819670][ T7918] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8629'. [ 1092.837543][T17645] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1093.207034][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8630'. [ 1093.726032][ T7912] lo speed is unknown, defaulting to 1000 [ 1093.944245][ T7934] netlink: 'syz.1.8634': attribute type 9 has an invalid length. [ 1093.982933][ T7934] netlink: 'syz.1.8634': attribute type 7 has an invalid length. [ 1094.011028][ T7934] netlink: 'syz.1.8634': attribute type 8 has an invalid length. [ 1094.081969][ T7934] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8634'. [ 1094.423362][ T7959] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1094.691945][ T7977] netlink: 'syz.1.8645': attribute type 1 has an invalid length. [ 1094.774787][ T7977] bond8: entered promiscuous mode [ 1094.780859][ T7977] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1095.138488][ T7989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8649'. [ 1095.178411][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8650'. [ 1095.957160][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1096.038615][ T8029] netlink: 'syz.2.8661': attribute type 8 has an invalid length. [ 1096.061925][ T8029] netlink: 'syz.2.8661': attribute type 9 has an invalid length. [ 1096.204642][ T8035] ip6gretap0: entered promiscuous mode [ 1096.431974][ T8053] netlink: 'syz.3.8666': attribute type 13 has an invalid length. [ 1096.458285][ T8053] netlink: 'syz.3.8666': attribute type 17 has an invalid length. [ 1096.506242][ T8057] Cannot find add_set index 3 as target [ 1096.549696][ T8053] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1096.578757][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1096.844404][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8674'. [ 1097.184562][ T8091] netlink: 392 bytes leftover after parsing attributes in process `syz.3.8677'. [ 1097.206863][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8679'. [ 1097.370160][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8678'. [ 1097.379805][ T8097] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1097.581736][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8683'. [ 1097.629204][T25947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1097.648728][T25947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1097.659498][T25947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1097.671060][T25947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1097.679991][T25947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1097.731568][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1097.741645][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1097.751104][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1097.761068][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1097.769323][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1097.993913][ T8120] netlink: 'syz.3.8686': attribute type 2 has an invalid length. [ 1098.006292][ T8120] netlink: 'syz.3.8686': attribute type 11 has an invalid length. [ 1098.439234][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.447456][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.455947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.790769][ T8105] lo speed is unknown, defaulting to 1000 [ 1099.076349][ T8165] netlink: 'syz.3.8699': attribute type 1 has an invalid length. [ 1099.100088][ T8165] __nla_validate_parse: 4 callbacks suppressed [ 1099.100106][ T8165] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1099.295004][ T8177] netlink: 'syz.0.8701': attribute type 10 has an invalid length. [ 1099.339050][ T8177] netlink: 'syz.0.8701': attribute type 10 has an invalid length. [ 1099.465251][ T8188] syzkaller0: entered promiscuous mode [ 1099.472016][ T8188] syzkaller0: entered allmulticast mode [ 1099.591428][ T8195] netlink: 'syz.1.8706': attribute type 13 has an invalid length. [ 1099.617778][ T8195] netlink: 'syz.1.8706': attribute type 17 has an invalid length. [ 1099.876726][ T5642] Bluetooth: hci0: command tx timeout [ 1099.902298][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.924793][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.364734][ T8195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.437586][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.450288][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.477959][ T8195] veth1_vlan: left promiscuous mode [ 1100.489079][ T8195] veth1_vlan: entered promiscuous mode [ 1100.501458][ T8195] veth1_macvtap: left promiscuous mode [ 1100.508764][ T8195] veth0_macvtap: left promiscuous mode [ 1100.515579][ T8195] veth0_macvtap: entered promiscuous mode [ 1100.531585][ T8195] veth1_macvtap: entered promiscuous mode [ 1100.546766][ T8195] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1100.560501][ T8195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1100.568731][ T8195] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1100.579999][ T8195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1100.604328][ T8195] team1: left promiscuous mode [ 1100.609489][ T8195] team1: left allmulticast mode [ 1100.614733][ T8195] 8021q: adding VLAN 0 to HW filter on device team1 [ 1100.638012][ T8195] bond3: left promiscuous mode [ 1100.643036][ T8195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1100.651607][ T8195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1100.664821][ T8195] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1100.674939][ T8195] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 1100.698159][ T8200] ipip1: entered promiscuous mode [ 1100.720054][ T8202] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1100.731926][ T8202] gretap2: entered promiscuous mode [ 1100.738282][ T8202] gretap2: entered allmulticast mode [ 1100.910450][ T35] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 16389 - 0 [ 1100.928774][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.948133][ T35] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 16389 - 0 [ 1100.963505][ T35] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.978112][ T8212] syzkaller1: entered promiscuous mode [ 1100.983660][ T8212] syzkaller1: entered allmulticast mode [ 1101.003923][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8713'. [ 1101.024531][ T6770] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.044616][ T35] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 16389 - 0 [ 1101.053256][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.108761][ T35] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 16389 - 0 [ 1101.123876][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.253993][ T6770] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.505444][ T6770] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.532077][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.550927][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.560191][ T8105] bridge_slave_0: entered allmulticast mode [ 1101.571203][ T8105] bridge_slave_0: entered promiscuous mode [ 1101.589443][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8719'. [ 1101.592730][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.630476][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.652459][ T8105] bridge_slave_1: entered allmulticast mode [ 1101.669656][ T8105] bridge_slave_1: entered promiscuous mode [ 1101.678459][ T8250] Unsupported ieee802154 address type: 0 [ 1101.764155][ T6770] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.865396][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.900870][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.967409][ T5642] Bluetooth: hci0: command tx timeout [ 1102.045894][ T4211] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.089332][ T4211] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.110694][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8724'. [ 1102.111708][ T8105] team0: Port device team_slave_0 added [ 1102.130097][ T8105] team0: Port device team_slave_1 added [ 1102.137339][ T1113] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1102.146056][ T8258] openvswitch: netlink: Actions may not be safe on all matching packets [ 1102.178355][ T4211] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.254600][ T8270] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8726'. [ 1102.263694][ T8269] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8726'. [ 1102.299625][ T4211] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.313670][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.327929][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.395116][ T8105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.901772][ T6770] erspan0 (unregistering): left promiscuous mode [ 1102.927807][ T6770] gretap0 (unregistering): left promiscuous mode [ 1102.950180][ T6770] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1103.292360][ T6770] bond0 (unregistering): Released all slaves [ 1103.302196][ T6770] bond1 (unregistering): Released all slaves [ 1103.315815][ T6770] bond2 (unregistering): Released all slaves [ 1103.332685][ T6770] bond3 (unregistering): Released all slaves [ 1103.356300][ T6770] bond4 (unregistering): Released all slaves [ 1103.370406][ T6770] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1103.379079][ T6770] bond5 (unregistering): Released all slaves [ 1103.393213][ T6770] bond6 (unregistering): Released all slaves [ 1103.415421][ T6770] bond7 (unregistering): Released all slaves [ 1103.429082][ T6770] bond8 (unregistering): Released all slaves [ 1103.442253][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.449473][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.475886][ T8105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.551290][ T8292] geneve0: entered promiscuous mode [ 1103.562802][ T8292] geneve0: entered allmulticast mode [ 1103.794792][ T1113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.804762][ T1113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.831406][ T6770] tipc: Disabling bearer [ 1103.837446][ T6770] tipc: Left network mode [ 1103.917811][ T1113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.943622][ T1113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.039878][ T5642] Bluetooth: hci0: command tx timeout [ 1104.046099][ T6770] IPVS: stopping backup sync thread 6819 ... [ 1104.048758][ T8105] hsr_slave_0: entered promiscuous mode [ 1104.067840][ T8105] hsr_slave_1: entered promiscuous mode [ 1104.090337][ T8105] debugfs: 'hsr0' already exists in 'hsr' [ 1104.096136][ T8105] Cannot create hsr debugfs directory [ 1104.200205][ T8331] netlink: 'syz.2.8736': attribute type 5 has an invalid length. [ 1104.208556][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.216750][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.225255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.630733][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1104.798231][ T8105] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.818315][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8741'. [ 1104.922980][ T8360] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1104.969926][ T8105] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.119736][ T8105] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.287940][ T8376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8746'. [ 1105.309581][ T8382] siw: device registration error -23 [ 1105.326767][ T8376] netlink: 'syz.2.8746': attribute type 7 has an invalid length. [ 1105.358522][ T8376] netlink: 'syz.2.8746': attribute type 8 has an invalid length. [ 1105.387303][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8746'. [ 1105.407183][ T8105] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.496311][ T8394] netlink: 'syz.1.8749': attribute type 21 has an invalid length. [ 1105.591781][ T8394] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8749'. [ 1105.801451][ T8394] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1105.979802][ T8411] tipc: Enabled bearer , priority 0 [ 1105.988483][ T8406] syzkaller0: entered promiscuous mode [ 1106.000593][ T8406] syzkaller0: entered allmulticast mode [ 1106.024708][ T8414] bridge7: port 2(veth0_to_bond) entered disabled state [ 1106.033235][ T8414] veth0_to_bond: left allmulticast mode [ 1106.039684][ T8414] veth0_to_bond: left promiscuous mode [ 1106.046070][ T8414] bridge7: port 2(veth0_to_bond) entered disabled state [ 1106.117744][ T5642] Bluetooth: hci0: command tx timeout [ 1106.221479][ T8406] tipc: Resetting bearer [ 1106.268428][ T8404] tipc: Resetting bearer [ 1106.303332][ T8404] tipc: Disabling bearer [ 1106.366242][ T8429] netlink: 'syz.2.8756': attribute type 1 has an invalid length. [ 1106.467002][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1106.476953][ T8431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8756'. [ 1106.507096][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8758'. [ 1106.516958][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1106.588933][ T8430] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1106.600417][ T8430] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 1106.658203][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8761'. [ 1106.683456][ T8431] bond10: (slave bridge12): Enslaving as an active interface with a down link [ 1106.754263][ T8455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1106.982457][ T8105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1107.028190][ T8105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1107.046653][ T8105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1107.081457][ T8105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1107.143148][ T8105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1107.182197][ T8105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1107.239878][ T8105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1107.261581][ T8105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1107.531848][ T6770] hsr_slave_0: left promiscuous mode [ 1107.562688][ T6770] hsr_slave_1: left promiscuous mode [ 1107.618336][ T8496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.661625][ T8496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.695833][ T8496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.760851][ T8509] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8772'. [ 1107.780929][ T8511] netlink: 'syz.1.8773': attribute type 1 has an invalid length. [ 1107.807387][ T8479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.826719][ T8479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.560591][ T8487] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1108.573715][ T8487] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1108.584093][ T8487] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1108.778237][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.852772][ T8105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.921830][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.929059][ T6764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.027279][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.034488][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.755177][ T6770] IPVS: stop unused estimator thread 0... [ 1109.961405][ T3300] net_ratelimit: 1598 callbacks suppressed [ 1109.961425][ T3300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.975487][ T3300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.984097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.074131][ T8585] IPv6: NLM_F_CREATE should be specified when creating new route [ 1110.108779][ T8585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.116049][ T8585] IPv6: NLM_F_CREATE should be set when creating new route [ 1110.123344][ T8585] IPv6: NLM_F_CREATE should be set when creating new route [ 1110.130610][ T8585] IPv6: NLM_F_CREATE should be set when creating new route [ 1110.191826][ T8595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.293737][ T8600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1110.309956][ T8585] syzkaller1: entered promiscuous mode [ 1110.521020][ T8617] __nla_validate_parse: 2 callbacks suppressed [ 1110.521041][ T8617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8790'. [ 1110.596643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.626993][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8792'. [ 1110.636067][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8792'. [ 1110.649342][ T8623] netlink: 'syz.2.8792': attribute type 18 has an invalid length. [ 1110.742698][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.873202][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059083c00: rx timeout, send abort [ 1111.185378][ T8655] netlink: zone id is out of range [ 1111.208950][ T8655] netlink: zone id is out of range [ 1111.240800][ T8655] netlink: zone id is out of range [ 1111.261353][ T8655] netlink: zone id is out of range [ 1111.282267][ T8655] netlink: zone id is out of range [ 1111.296552][ T8655] netlink: zone id is out of range [ 1111.316818][ T8665] netlink: 'syz.1.8801': attribute type 3 has an invalid length. [ 1111.373328][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059082c00: rx timeout, send abort [ 1111.381780][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059083c00: abort rx timeout. Force session deactivation [ 1111.391683][ T8105] veth0_vlan: entered promiscuous mode [ 1111.449040][ T8105] veth1_vlan: entered promiscuous mode [ 1111.555189][ T8105] veth0_macvtap: entered promiscuous mode [ 1111.584233][ T8680] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8805'. [ 1111.595830][ T8105] veth1_macvtap: entered promiscuous mode [ 1111.658887][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.698387][ T6764] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.734089][ T6764] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.812206][ T6764] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.835675][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.869343][ T79] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.881647][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059082c00: abort rx timeout. Force session deactivation [ 1111.959313][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.992589][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.022137][ T8701] tipc: Enabled bearer , priority 0 [ 1112.062367][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.092197][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.215027][ T8702] tipc: Disabling bearer [ 1112.311721][ T3300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.332305][ T3300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.441562][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.468946][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.671639][ T8737] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8819'. [ 1112.710994][ T8737] unsupported nlmsg_type 40 [ 1112.859813][ T8731] tipc: Enabling of bearer rejected, failed to enable media [ 1112.921130][ T8743] tipc: Enabling of bearer rejected, already enabled [ 1113.194881][ T8751] netlink: 'syz.0.8821': attribute type 309 has an invalid length. [ 1113.336013][ T8763] xt_TCPMSS: Only works on TCP SYN packets [ 1113.376322][ T8766] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8824'. [ 1113.650292][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8826'. [ 1113.906933][ T8776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.914649][ T8776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.201949][ T8776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.225363][ T8776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.390295][ T8801] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 1114.409696][ T6764] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.433849][ T6764] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.465413][ T6764] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.653929][ T6764] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.355596][ T8805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1115.369541][ T8838] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.8841'. [ 1115.400501][ T8839] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.8841'. [ 1115.519629][ T8843] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8843'. [ 1115.566813][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8845'. [ 1115.579841][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8845'. [ 1115.718269][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1115.729046][ T1113] net_ratelimit: 26 callbacks suppressed [ 1115.729061][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.742890][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.751469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.908775][ T8880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8853'. [ 1116.110756][ T8891] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1116.193902][ T8891] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1116.258050][ T8891] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1116.314568][ T8899] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1116.410287][ T8891] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1116.488732][ T8891] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1116.555765][ T8891] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1116.622280][ T8891] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1116.657070][ T8891] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1116.680055][ T8891] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1116.716050][ T8891] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1116.738837][ T8891] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1116.768393][ T8891] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1116.791150][ T8891] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1116.829677][ T8891] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1116.855068][ T8891] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1116.887805][ T8891] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1118.967842][ T8884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1119.166015][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8867'. [ 1119.217938][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8866'. [ 1119.237318][ T8951] netlink: 304 bytes leftover after parsing attributes in process `syz.2.8866'. [ 1119.360399][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8871'. [ 1119.402502][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8871'. [ 1119.431574][ T8967] netlink: 'syz.1.8869': attribute type 1 has an invalid length. [ 1119.529299][ T8967] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1119.665269][ T8987] netlink: 'syz.3.8874': attribute type 2 has an invalid length. [ 1119.679534][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8875'. [ 1119.708295][ T8958] bond25: (slave veth9): Enslaving as an active interface with an up link [ 1119.737863][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8874'. [ 1119.892900][ T8995] netlink: 'syz.4.8876': attribute type 10 has an invalid length. [ 1119.924330][ T8995] team0: Port device dummy0 added [ 1119.944971][ T8992] netlink: 'syz.4.8876': attribute type 10 has an invalid length. [ 1119.987361][ T8992] team0: Port device dummy0 removed [ 1120.025601][ T8992] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1120.359007][ T8964] lo speed is unknown, defaulting to 1000 [ 1120.447651][ T9028] block nbd0: NBD_DISCONNECT [ 1120.458042][ T9028] block nbd0: Send disconnect failed -32 [ 1120.511196][ T9034] bond9: option all_slaves_active: invalid value (167) [ 1120.532465][ T9034] bond9 (unregistering): Released all slaves [ 1120.683208][ T9041] bond1 (unregistering): Released all slaves [ 1120.957368][ T9057] __nla_validate_parse: 1 callbacks suppressed [ 1120.957385][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8889'. [ 1120.967804][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8889'. [ 1121.003281][ T9058] ip6gre3: entered promiscuous mode [ 1121.029089][ T9058] ip6gre3: entered allmulticast mode [ 1121.041534][ T9057] bond0: option resend_igmp: invalid value (41663) [ 1121.067355][ T9057] bond0: option resend_igmp: allowed values 0 - 255 [ 1121.111856][ T9054] bond0: option resend_igmp: invalid value (41663) [ 1121.116136][ T9064] x_tables: duplicate underflow at hook 3 [ 1121.118726][ T9054] bond0: option resend_igmp: allowed values 0 - 255 [ 1121.126261][ T9064] x_tables: duplicate underflow at hook 1 [ 1121.327007][ T9083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8897'. [ 1121.412093][ T9069] pim6reg99999991: entered allmulticast mode [ 1121.479111][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.487307][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.496016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.714899][ T9097] netlink: 'syz.1.8900': attribute type 16 has an invalid length. [ 1121.738589][ T9097] netlink: 'syz.1.8900': attribute type 17 has an invalid length. [ 1121.759771][ T9104] netlink: 'syz.0.8902': attribute type 1 has an invalid length. [ 1121.774588][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8902'. [ 1121.793702][ T9104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8902'. [ 1122.209561][ T9097] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 1122.247025][ T9104] 8021q: VLANs not supported on ip6_vti0 [ 1122.396250][ T9128] x_tables: unsorted underflow at hook 2 [ 1122.412408][ T9129] tipc: Enabling of bearer rejected, failed to enable media [ 1122.634940][ T9138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8912'. [ 1122.895940][ T9146] netlink: 'syz.3.8913': attribute type 7 has an invalid length. [ 1123.093834][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8918'. [ 1123.292758][ T9162] netlink: 'syz.2.8917': attribute type 1 has an invalid length. [ 1123.344286][ T9165] netlink: 'syz.4.8920': attribute type 16 has an invalid length. [ 1123.354537][ T9162] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8917'. [ 1123.475404][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.493177][ T9165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.505479][ T9165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.605551][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.614315][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.626839][ T9165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1123.638071][ T9165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1123.654083][ T9165] veth1_vlan: left promiscuous mode [ 1123.660149][ T9165] veth0_vlan: left promiscuous mode [ 1123.665919][ T9165] veth0_vlan: entered promiscuous mode [ 1123.674030][ T9165] veth1_vlan: entered promiscuous mode [ 1123.683056][ T9165] veth1_macvtap: left promiscuous mode [ 1123.689656][ T9165] veth0_macvtap: left promiscuous mode [ 1123.695951][ T9165] veth0_macvtap: entered promiscuous mode [ 1123.702714][ T9165] veth1_macvtap: entered promiscuous mode [ 1123.713383][ T9165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1123.721708][ T9165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1123.730199][ T9165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1123.738104][ T9165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1123.863007][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.870211][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.888049][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.895205][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.993355][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.016551][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.030897][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8929'. [ 1124.058626][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.080365][ T9200] syzkaller0: entered promiscuous mode [ 1124.085924][ T9200] syzkaller0: entered allmulticast mode [ 1124.120303][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.153761][ T9189] tipc: Enabled bearer , priority 0 [ 1124.175883][ T9210] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1124.191444][ T9188] tipc: Resetting bearer [ 1124.212500][ T9188] tipc: Disabling bearer [ 1124.242475][ T9207] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1124.528964][ T9227] syzkaller1: entered promiscuous mode [ 1124.534684][ T9227] syzkaller1: entered allmulticast mode [ 1124.734628][ T9242] xt_hashlimit: size too large, truncated to 1048576 [ 1124.789802][ T9242] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1124.797796][ T9254] openvswitch: netlink: Key type 1052 is out of range max 32 [ 1124.859877][ T9254] validate_nla: 2 callbacks suppressed [ 1124.859895][ T9254] netlink: 'syz.0.8939': attribute type 6 has an invalid length. [ 1125.373247][ T9279] netlink: 'syz.2.8948': attribute type 3 has an invalid length. [ 1126.345400][ T9352] __nla_validate_parse: 9 callbacks suppressed [ 1126.345419][ T9352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8963'. [ 1126.523514][ T9357] tipc: Enabled bearer , priority 0 [ 1126.548085][ T9357] syzkaller0: entered promiscuous mode [ 1126.570606][ T9357] syzkaller0: entered allmulticast mode [ 1126.662101][ T9369] sctp: [Deprecated]: syz.4.8967 (pid 9369) Use of int in max_burst socket option. [ 1126.662101][ T9369] Use struct sctp_assoc_value instead [ 1126.667005][ T9357] tipc: Resetting bearer [ 1126.753365][ T9355] tipc: Resetting bearer [ 1126.884356][ T9355] tipc: Disabling bearer [ 1126.925290][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8971'. [ 1126.942307][ T9385] netlink: 'syz.4.8970': attribute type 1 has an invalid length. [ 1126.979234][ T9385] netlink: 212400 bytes leftover after parsing attributes in process `syz.4.8970'. [ 1127.511577][ T9349] netlink: 'syz.3.8962': attribute type 12 has an invalid length. [ 1127.521415][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8978'. [ 1127.552844][ T9349] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1127.875234][ T9444] tipc: New replicast peer: 255.255.255.255 [ 1127.892083][ T9446] sctp: [Deprecated]: syz.1.8984 (pid 9446) Use of int in max_burst socket option deprecated. [ 1127.892083][ T9446] Use struct sctp_assoc_value instead [ 1127.910142][ T9444] tipc: Enabled bearer , priority 10 [ 1128.058255][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8987'. [ 1128.119388][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8986'. [ 1128.301643][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8994'. [ 1128.429829][ T9490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1128.916514][ T7337] tipc: Node number set to 2320367573 [ 1131.169790][ T9465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1131.390787][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8998'. [ 1131.400688][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9000'. [ 1131.414879][ T9502] sctp: [Deprecated]: syz.4.9002 (pid 9502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1131.414879][ T9502] Use struct sctp_sack_info instead [ 1131.489669][ T9502] netlink: 'syz.4.9002': attribute type 1 has an invalid length. [ 1131.493094][ T9511] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1131.524892][ T9511] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1131.612126][ T9502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1131.765720][ T9519] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1131.769389][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9004'. [ 1132.097166][ T9533] netlink: 'syz.2.9007': attribute type 2 has an invalid length. [ 1132.105120][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9007'. [ 1132.350673][ T9548] netlink: 34 bytes leftover after parsing attributes in process `syz.0.9011'. [ 1132.366097][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9011'. [ 1132.390310][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9010'. [ 1132.398858][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9012'. [ 1132.415923][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9010'. [ 1132.422035][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9012'. [ 1132.428048][ T9548] netlink: 'syz.0.9011': attribute type 1 has an invalid length. [ 1132.443528][ T9549] netlink: 'syz.3.9010': attribute type 18 has an invalid length. [ 1132.576291][ T9560] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1132.680981][ T9571] sock: sock_timestamping_bind_phc: sock not bind to device [ 1132.702194][ T9566] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1132.733020][ T9571] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1132.977158][T25947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1132.989920][T25947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1132.996702][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1133.008614][T25947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1133.016757][T25947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1133.024396][T25947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1133.884503][ T9638] netlink: 'syz.3.9033': attribute type 8 has an invalid length. [ 1134.091398][ T9583] lo speed is unknown, defaulting to 1000 [ 1134.255215][ T9661] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1134.796059][ T9678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1135.091043][T25947] Bluetooth: hci3: command tx timeout [ 1135.187858][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.195305][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.215597][ T9583] bridge_slave_0: entered allmulticast mode [ 1135.227724][ T9583] bridge_slave_0: entered promiscuous mode [ 1135.249924][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.265809][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.276317][ T9583] bridge_slave_1: entered allmulticast mode [ 1135.286893][ T9583] bridge_slave_1: entered promiscuous mode [ 1135.338210][ T9583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.376206][ T9583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.438395][ T9583] team0: Port device team_slave_0 added [ 1135.452943][ T9583] team0: Port device team_slave_1 added [ 1135.525652][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.543459][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.574037][ T9583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.601926][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.619744][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.685319][ T9583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.758723][ T9583] hsr_slave_0: entered promiscuous mode [ 1135.765481][ T9583] hsr_slave_1: entered promiscuous mode [ 1135.774863][ T9583] debugfs: 'hsr0' already exists in 'hsr' [ 1135.786545][ T9583] Cannot create hsr debugfs directory [ 1136.018597][ T9736] Bluetooth: MGMT ver 1.23 [ 1136.334299][ T9719] lo speed is unknown, defaulting to 1000 [ 1136.510193][ T9583] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.741927][ T9583] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.772234][ T9769] hsr0: entered promiscuous mode [ 1136.787493][ T9769] __nla_validate_parse: 7 callbacks suppressed [ 1136.787511][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9067'. [ 1136.859299][ T9583] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.034675][ T9583] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.054843][ T9775] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9070'. [ 1137.157629][T25947] Bluetooth: hci3: command tx timeout [ 1137.304672][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9071'. [ 1137.339862][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9072'. [ 1137.382196][ T9778] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9071'. [ 1137.409704][ T9785] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9072'. [ 1137.577458][ T9787] bond27: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1137.593787][ T9787] bond27 (unregistering): Released all slaves [ 1137.684443][ T9795] gre5: entered promiscuous mode [ 1137.837047][ T9583] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1137.862101][ T9583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.870145][ T9583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1137.881792][ T9583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.901766][ T9583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1137.927436][ T9583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1137.941833][ T9583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1137.952484][ T9583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1138.033802][ T9821] netlink: 'syz.3.9080': attribute type 29 has an invalid length. [ 1138.048133][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9080'. [ 1138.160786][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.222982][ T9829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9081'. [ 1138.236547][ T9828] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2368 [ 1138.260712][ T9829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9081'. [ 1138.280194][ T9829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9081'. [ 1138.537705][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.545250][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.890969][ T9829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.929344][ T9829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1139.237202][T25947] Bluetooth: hci3: command tx timeout [ 1139.458627][T31931] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.467847][T31931] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.508550][T31931] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.525489][T31931] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.536775][ T9845] nicvf0: tun_chr_ioctl cmd 2148553947 [ 1139.547655][ T9845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1139.563391][ T9583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.583613][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.590780][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.605682][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.612835][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.669769][ T9583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1140.420256][ T9850] lo speed is unknown, defaulting to 1000 [ 1140.469301][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.665714][ T9583] veth0_vlan: entered promiscuous mode [ 1140.698033][ T9583] veth1_vlan: entered promiscuous mode [ 1140.777362][ T9583] veth0_macvtap: entered promiscuous mode [ 1140.800648][ T9583] veth1_macvtap: entered promiscuous mode [ 1140.849360][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.887754][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.947114][ T6770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.961526][ T6770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.048119][ T6770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.059142][ T6770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.318285][T25947] Bluetooth: hci3: command tx timeout [ 1141.442540][ T3300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.475368][ T3300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.680322][ T6764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.713829][ T6764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.005723][ T9943] netlink: 'syz.1.9106': attribute type 1 has an invalid length. [ 1142.213548][ T9948] bond28: (slave veth13): Enslaving as an active interface with a down link [ 1142.285037][ T9943] __nla_validate_parse: 157 callbacks suppressed [ 1142.285055][ T9943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9106'. [ 1142.314280][ T9955] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1142.316250][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1142.333893][ T9951] bond28: (slave veth15): Enslaving as an active interface with a down link [ 1142.344025][ T9955] IPVS: set_ctl: invalid protocol: 30768 102.102.102.102:26214 [ 1142.355007][ T9943] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1142.411699][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1142.484564][ T9971] syzkaller0: entered promiscuous mode [ 1142.496958][ T9971] syzkaller0: entered allmulticast mode [ 1142.724112][ T9981] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9114'. [ 1142.824396][ T5287] veth0_macvtap: left promiscuous mode [ 1142.948888][ T9987] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1142.953958][ T9961] lo speed is unknown, defaulting to 1000 [ 1143.092465][ T9998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9119'. [ 1143.950377][T10041] ipip0: entered promiscuous mode [ 1144.250884][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9131'. [ 1144.714686][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9137'. [ 1144.736978][T10084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9137'. [ 1144.754784][T10092] x_tables: unsorted underflow at hook 2 [ 1144.818183][T10094] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1144.874369][T10094] bond10: (slave lo): Enslaving as an active interface with an up link [ 1144.886273][T10094] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1144.989520][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9143'. [ 1145.239943][T10121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.372339][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1145.384630][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1145.398087][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1145.415563][T10131] sctp: [Deprecated]: syz.4.9151 (pid 10131) Use of int in maxseg socket option. [ 1145.415563][T10131] Use struct sctp_assoc_value instead [ 1145.438453][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1145.467114][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1145.656094][T10141] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9153'. [ 1145.743159][T10145] FAULT_INJECTION: forcing a failure. [ 1145.743159][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.813177][T10145] CPU: 1 UID: 0 PID: 10145 Comm: syz.4.9155 Not tainted syzkaller #0 PREEMPT(full) [ 1145.813203][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1145.813213][T10145] Call Trace: [ 1145.813221][T10145] [ 1145.813230][T10145] dump_stack_lvl+0xe8/0x150 [ 1145.813258][T10145] should_fail_ex+0x412/0x560 [ 1145.813287][T10145] should_failslab+0xa8/0x100 [ 1145.813317][T10145] __kmalloc_noprof+0xe8/0x760 [ 1145.813343][T10145] ? kernfs_fop_write_iter+0x158/0x540 [ 1145.813377][T10145] kernfs_fop_write_iter+0x158/0x540 [ 1145.813412][T10145] vfs_write+0x61d/0xb90 [ 1145.813446][T10145] ? __pfx_vfs_write+0x10/0x10 [ 1145.813487][T10145] ? __fget_files+0x2a/0x420 [ 1145.813519][T10145] ksys_write+0x150/0x270 [ 1145.813547][T10145] ? __pfx_ksys_write+0x10/0x10 [ 1145.813581][T10145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.813601][T10145] do_syscall_64+0x15f/0xf80 [ 1145.813622][T10145] ? trace_irq_disable+0x3b/0x140 [ 1145.813648][T10145] ? clear_bhb_loop+0x40/0x90 [ 1145.813672][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.813690][T10145] RIP: 0033:0x7f580219cdd9 [ 1145.813708][T10145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.813723][T10145] RSP: 002b:00007f5802feb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1145.813743][T10145] RAX: ffffffffffffffda RBX: 00007f5802415fa0 RCX: 00007f580219cdd9 [ 1145.813756][T10145] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 000000000000000a [ 1145.813768][T10145] RBP: 00007f5802feb090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.813780][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.813791][T10145] R13: 00007f5802416038 R14: 00007f5802415fa0 R15: 00007ffe3fa95888 [ 1145.813823][T10145] [ 1146.124409][ T6770] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.166326][ T6770] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 16389 - 0 [ 1146.193099][ T6770] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.433099][ T6770] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.472810][ T6770] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 16389 - 0 [ 1146.483771][ T6770] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.619985][ T6770] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.637347][ T6770] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 16389 - 0 [ 1146.654937][ T6770] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.721850][T10187] syzkaller0: entered promiscuous mode [ 1146.727778][T10187] syzkaller0: entered allmulticast mode [ 1146.765559][ T6770] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.777139][ T6770] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 16389 - 0 [ 1146.787796][ T6770] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.935769][T10196] FAULT_INJECTION: forcing a failure. [ 1146.935769][T10196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.951656][T10196] CPU: 1 UID: 0 PID: 10196 Comm: syz.2.9168 Not tainted syzkaller #0 PREEMPT(full) [ 1146.951679][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1146.951691][T10196] Call Trace: [ 1146.951698][T10196] [ 1146.951706][T10196] dump_stack_lvl+0xe8/0x150 [ 1146.951733][T10196] should_fail_ex+0x412/0x560 [ 1146.951761][T10196] _copy_from_iter+0x1d3/0x1670 [ 1146.951798][T10196] ? __pfx__copy_from_iter+0x10/0x10 [ 1146.951821][T10196] ? trace_kmalloc+0x2a/0xf0 [ 1146.951849][T10196] ? __kmalloc_noprof+0x37d/0x760 [ 1146.951873][T10196] ? kernfs_fop_write_iter+0x158/0x540 [ 1146.951899][T10196] ? __kmalloc_noprof+0x1b8/0x760 [ 1146.951927][T10196] kernfs_fop_write_iter+0x19b/0x540 [ 1146.951961][T10196] vfs_write+0x61d/0xb90 [ 1146.951995][T10196] ? __pfx_vfs_write+0x10/0x10 [ 1146.952030][T10196] ? __fget_files+0x2a/0x420 [ 1146.952060][T10196] ksys_write+0x150/0x270 [ 1146.952094][T10196] ? __pfx_ksys_write+0x10/0x10 [ 1146.952126][T10196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.952149][T10196] do_syscall_64+0x15f/0xf80 [ 1146.952171][T10196] ? trace_irq_disable+0x3b/0x140 [ 1146.952196][T10196] ? clear_bhb_loop+0x40/0x90 [ 1146.952219][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.952238][T10196] RIP: 0033:0x7f6cd739cdd9 [ 1146.952255][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.952271][T10196] RSP: 002b:00007f6cd824a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1146.952291][T10196] RAX: ffffffffffffffda RBX: 00007f6cd7615fa0 RCX: 00007f6cd739cdd9 [ 1146.952305][T10196] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 000000000000000a [ 1146.952316][T10196] RBP: 00007f6cd824a090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.952328][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.952338][T10196] R13: 00007f6cd7616038 R14: 00007f6cd7615fa0 R15: 00007ffe28d70dd8 [ 1146.952370][T10196] [ 1147.374293][T10206] __nla_validate_parse: 4 callbacks suppressed [ 1147.374312][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9170'. [ 1147.557517][ T5642] Bluetooth: hci4: command tx timeout [ 1147.564840][T10206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1147.774385][T10214] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1147.793326][T10214] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1147.821965][T10127] lo speed is unknown, defaulting to 1000 [ 1147.891868][ T1010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.909763][ T1010] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.002946][T10240] No such timeout policy "syz0" [ 1148.040399][ T6764] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.063798][T10243] FAULT_INJECTION: forcing a failure. [ 1148.063798][T10243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.097927][ T1010] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.124528][T10243] CPU: 0 UID: 0 PID: 10243 Comm: syz.3.9178 Not tainted syzkaller #0 PREEMPT(full) [ 1148.124552][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1148.124563][T10243] Call Trace: [ 1148.124571][T10243] [ 1148.124579][T10243] dump_stack_lvl+0xe8/0x150 [ 1148.124605][T10243] should_fail_ex+0x412/0x560 [ 1148.124634][T10243] _copy_to_user+0x31/0xb0 [ 1148.124660][T10243] simple_read_from_buffer+0xe1/0x170 [ 1148.124686][T10243] proc_fail_nth_read+0x1bb/0x230 [ 1148.124712][T10243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1148.124738][T10243] ? rw_verify_area+0x2a6/0x4d0 [ 1148.124761][T10243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1148.124785][T10243] vfs_read+0x20c/0xa70 [ 1148.124815][T10243] ? __pfx___mutex_lock+0x10/0x10 [ 1148.124839][T10243] ? __pfx_vfs_read+0x10/0x10 [ 1148.124864][T10243] ? __fget_files+0x2a/0x420 [ 1148.124890][T10243] ? __fget_files+0x3a0/0x420 [ 1148.124911][T10243] ? __fget_files+0x2a/0x420 [ 1148.124941][T10243] ksys_read+0x150/0x270 [ 1148.124968][T10243] ? __pfx_ksys_read+0x10/0x10 [ 1148.125001][T10243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.125021][T10243] do_syscall_64+0x15f/0xf80 [ 1148.125041][T10243] ? trace_irq_disable+0x3b/0x140 [ 1148.125066][T10243] ? clear_bhb_loop+0x40/0x90 [ 1148.125089][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.125108][T10243] RIP: 0033:0x7f530275d60e [ 1148.125126][T10243] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1148.125140][T10243] RSP: 002b:00007f5303730fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1148.125159][T10243] RAX: ffffffffffffffda RBX: 00007f53037316c0 RCX: 00007f530275d60e [ 1148.125173][T10243] RDX: 000000000000000f RSI: 00007f53037310a0 RDI: 000000000000000e [ 1148.125184][T10243] RBP: 00007f5303731090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.125194][T10243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.125204][T10243] R13: 00007f5302a16038 R14: 00007f5302a15fa0 R15: 00007ffff6841f08 [ 1148.125239][T10243] [ 1148.435864][ T6770] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1148.793053][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9182'. [ 1149.082442][ T6770] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1149.593878][ T6770] bond0 (unregistering): left promiscuous mode [ 1149.600167][ T6770] bond_slave_0: left promiscuous mode [ 1149.605744][ T6770] bond_slave_1: left promiscuous mode [ 1149.619779][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.631559][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.644590][ T6770] bond0 (unregistering): Released all slaves [ 1149.646917][ T5642] Bluetooth: hci4: command tx timeout [ 1149.666212][ T6770] bond1 (unregistering): Released all slaves [ 1149.692087][ T6770] bond2 (unregistering): Released all slaves [ 1149.712678][ T6770] bond3 (unregistering): Released all slaves [ 1149.741101][ T6770] bond4 (unregistering): Released all slaves [ 1149.760101][ T6770] bond5 (unregistering): Released all slaves [ 1149.786643][ T6770] bond6 (unregistering): (slave wireguard0): Releasing backup interface [ 1149.795102][ T6770] wireguard0: left promiscuous mode [ 1149.805078][ T6770] bond6 (unregistering): Released all slaves [ 1149.824456][ T6770] bond7 (unregistering): Released all slaves [ 1149.844549][ T6770] bond8 (unregistering): Released all slaves [ 1149.875332][ T6770] bond9 (unregistering): Released all slaves [ 1149.890201][ T6770] bond10 (unregistering): Released all slaves [ 1149.904742][ T6770] bond11 (unregistering): Released all slaves [ 1149.919964][ T6770] bond12 (unregistering): Released all slaves [ 1149.944361][ T6770] bond13 (unregistering): Released all slaves [ 1149.961063][ T6770] bond14 (unregistering): Released all slaves [ 1149.975811][ T6770] bond15 (unregistering): Released all slaves [ 1149.991297][ T6770] bond16 (unregistering): Released all slaves [ 1150.013247][ T6770] bond17 (unregistering): Released all slaves [ 1150.029948][ T6770] bond18 (unregistering): Released all slaves [ 1150.053154][ T6770] bond19 (unregistering): Released all slaves [ 1150.067893][ T6770] bond20 (unregistering): Released all slaves [ 1150.082404][ T6770] bond21 (unregistering): Released all slaves [ 1150.097091][ T6770] bond22 (unregistering): Released all slaves [ 1150.120462][ T6770] bond23 (unregistering): Released all slaves [ 1150.135012][ T6770] bond24 (unregistering): Released all slaves [ 1150.152350][ T6770] bond25 (unregistering): (slave veth9): Releasing backup interface [ 1150.167943][ T6770] bond25 (unregistering): Released all slaves [ 1150.186787][ T6770] bond26 (unregistering): Released all slaves [ 1150.205716][ T6770] bond27 (unregistering): Released all slaves [ 1150.238091][ T6770] bond28 (unregistering): (slave veth13): Releasing active interface [ 1150.252144][ T6770] bond28 (unregistering): (slave veth15): Releasing active interface [ 1150.263713][ T6770] bond28 (unregistering): Released all slaves [ 1150.655441][ T6770] 5Ò: left promiscuous mode [ 1150.882407][T10299] netlink: 'syz.0.9187': attribute type 1 has an invalid length. [ 1150.935756][T10298] netlink: 'syz.0.9187': attribute type 1 has an invalid length. [ 1150.964981][T10304] netlink: 'syz.0.9187': attribute type 1 has an invalid length. [ 1151.002081][ T6770] tipc: Left network mode [ 1151.040840][T10298] bond15: entered promiscuous mode [ 1151.046698][T10298] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1151.103327][T10299] bond15: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1151.117336][T10299] bond15: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1151.128674][T10299] bond15: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1151.175385][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9190'. [ 1151.210898][T10315] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1151.325894][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9190'. [ 1151.719384][ T5642] Bluetooth: hci4: command tx timeout [ 1151.850826][T10347] SET target dimension over the limit! [ 1151.880923][T10347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9196'. [ 1151.993012][T10353] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 1152.048323][T10353] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1152.148752][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.156032][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.165816][T10127] bridge_slave_0: entered allmulticast mode [ 1152.174206][T10127] bridge_slave_0: entered promiscuous mode [ 1152.186333][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1152.231691][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.246113][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.260727][T10127] bridge_slave_1: entered allmulticast mode [ 1152.280223][T10127] bridge_slave_1: entered promiscuous mode [ 1152.434573][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.564723][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.675842][T10373] netlink: 'syz.2.9201': attribute type 1 has an invalid length. [ 1152.753347][T10127] team0: Port device team_slave_0 added [ 1152.774443][T10379] netlink: 'syz.0.9203': attribute type 1 has an invalid length. [ 1152.783873][T10382] netlink: 'syz.2.9201': attribute type 8 has an invalid length. [ 1152.793330][T10376] netlink: 292 bytes leftover after parsing attributes in process `syz.4.9202'. [ 1152.811307][T10127] team0: Port device team_slave_1 added [ 1153.068599][T10381] syzkaller0: entered promiscuous mode [ 1153.080898][T10381] syzkaller0: entered allmulticast mode [ 1153.796744][ T5642] Bluetooth: hci4: command tx timeout [ 1155.962257][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1155.971691][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.980239][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.009619][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.022533][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.029869][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.059681][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.273605][T10427] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9211'. [ 1156.288612][T10427] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9211'. [ 1156.340251][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9211'. [ 1156.385923][T10425] bond11: option lacp_rate: invalid value (128) [ 1156.401109][T10425] bond11 (unregistering): Released all slaves [ 1156.511169][T10127] hsr_slave_0: entered promiscuous mode [ 1156.522269][T10127] hsr_slave_1: entered promiscuous mode [ 1156.550561][T10127] debugfs: 'hsr0' already exists in 'hsr' [ 1156.560608][T10127] Cannot create hsr debugfs directory [ 1157.138802][ T6770] batadv0: left promiscuous mode [ 1157.170707][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.186836][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.208073][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1157.226265][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.268555][ T6770] veth1_macvtap: left promiscuous mode [ 1157.278229][ T6770] veth0_macvtap: left promiscuous mode [ 1157.292068][ T6770] veth1_vlan: left promiscuous mode [ 1157.318333][ T30] INFO: task udevd:3551 blocked for more than 143 seconds. [ 1157.325925][ T30] Not tainted syzkaller #0 [ 1157.335812][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1157.354614][ T30] task:udevd state:D stack:23400 pid:3551 tgid:3551 ppid:4992 task_flags:0x400140 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1157.376667][ T30] Call Trace: [ 1157.387198][ T30] [ 1157.393179][ T30] __schedule+0x17b4/0x5680 [ 1157.402989][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1157.416524][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 1157.437737][ T30] ? __pfx___schedule+0x10/0x10 [ 1157.454408][ T30] ? schedule+0x90/0x360 [ 1157.464882][ T30] schedule+0x164/0x360 [ 1157.473386][ T30] schedule_timeout+0x158/0x2c0 [ 1157.479920][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1157.493698][ T30] ? __pfx_process_timeout+0x10/0x10 [ 1157.513464][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1157.535088][ T30] ? prepare_to_wait_event+0x436/0x480 [ 1157.546858][ T30] nbd_queue_rq+0x857/0x1100 [ 1157.552174][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1157.557452][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.562780][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1157.569404][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1157.575039][ T30] ? sbitmap_get+0x229/0x390 [ 1157.580116][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1157.586169][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1157.592131][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1157.598868][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1157.605690][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 1157.611810][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1157.617460][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1157.623546][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1157.628996][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 1157.634173][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 1157.639851][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 1157.645179][ T30] ? blk_mq_dispatch_list+0x240/0xe10 [ 1157.650665][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1157.656646][ T30] ? rcu_is_watching+0x15/0xb0 [ 1157.661446][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 1157.667184][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 1157.672449][ T30] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 1157.678153][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1157.684111][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 1157.689067][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1157.694688][ T30] __submit_bio+0x28d/0x580 [ 1157.699538][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1157.704597][ T30] ? bio_associate_blkg+0x6d/0x230 [ 1157.709944][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1157.715613][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1157.722040][ T30] block_read_full_folio+0x7b7/0x830 [ 1157.728621][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1157.734028][ T30] filemap_read_folio+0x137/0x3b0 [ 1157.739210][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1157.744711][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1157.750422][ T30] ? filemap_add_folio+0x356/0x530 [ 1157.755570][ T30] do_read_cache_folio+0x358/0x590 [ 1157.760737][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1157.766223][ T30] read_part_sector+0xb6/0x2b0 [ 1157.771121][ T30] adfspart_check_ICS+0xb1/0x960 [ 1157.776101][ T30] ? seq_buf_printf+0x212/0x2d0 [ 1157.781051][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1157.787521][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1157.793094][ T30] bdev_disk_changed+0x817/0x1770 [ 1157.798371][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1157.803887][ T30] blkdev_get_whole+0x380/0x510 [ 1157.808884][ T30] bdev_open+0x31e/0xd30 [ 1157.813179][ T30] blkdev_open+0x470/0x610 [ 1157.817804][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1157.823161][ T30] do_dentry_open+0x785/0x14e0 [ 1157.828067][ T30] vfs_open+0x3b/0x340 [ 1157.832158][ T30] ? path_openat+0x2df0/0x3860 [ 1157.837145][ T30] path_openat+0x2e08/0x3860 [ 1157.841755][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1157.847237][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1157.852727][ T30] ? __pfx_path_openat+0x10/0x10 [ 1157.857793][ T30] ? __x64_sys_openat+0x138/0x170 [ 1157.862847][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.867864][ T30] do_file_open+0x23e/0x4a0 [ 1157.872425][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1157.879943][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1157.884835][ T30] ? alloc_fd+0x64b/0x6c0 [ 1157.889284][ T30] do_sys_openat2+0x113/0x200 [ 1157.894100][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1157.899694][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1157.904933][ T30] ? rcu_is_watching+0x15/0xb0 [ 1157.910067][ T30] __x64_sys_openat+0x138/0x170 [ 1157.914945][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.921348][ T30] do_syscall_64+0x15f/0xf80 [ 1157.926775][ T30] ? clear_bhb_loop+0x40/0x90 [ 1157.931493][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.937482][ T30] RIP: 0033:0x7f95eb4a7407 [ 1157.941917][ T30] RSP: 002b:00007ffe1ea46040 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1157.950478][ T30] RAX: ffffffffffffffda RBX: 00007f95ebb65880 RCX: 00007f95eb4a7407 [ 1157.959105][ T30] RDX: 00000000000a0800 RSI: 000055720d6e3570 RDI: ffffffffffffff9c [ 1157.967294][ T30] RBP: 000055720d6e2910 R08: 0000000000000000 R09: 0000000000000000 [ 1157.975295][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055720d718c30 [ 1157.983357][ T30] R13: 000055720d6f0190 R14: 0000000000000000 R15: 000055720d718c30 [ 1157.991483][ T30] [ 1157.994625][ T30] [ 1157.994625][ T30] Showing all locks held in the system: [ 1158.002751][ T30] 1 lock held by khungtaskd/30: [ 1158.007729][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1158.018537][ T30] 3 locks held by kworker/u8:5/79: [ 1158.023671][ T30] #0: ffff8880321fe140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1158.036205][ T30] #1: ffffc9000245fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1158.049976][ T30] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1158.060956][ T30] 5 locks held by kworker/u8:8/3300: [ 1158.066355][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1158.076609][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1158.085679][ T30] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 1158.094808][ T30] #3: ffffffff9a6a6158 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 1158.105385][ T30] #4: ffffffff8e801220 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1158.115958][ T30] 1 lock held by dhcpcd/5287: [ 1158.120834][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 1158.130527][ T30] 2 locks held by getty/5381: [ 1158.135219][ T30] #0: ffff8880365350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1158.144994][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1158.155162][ T30] 3 locks held by kworker/u9:9/5642: [ 1158.160690][ T30] #0: ffff88803f2ad940 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1158.171703][ T30] #1: ffffc90004767c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1158.185165][ T30] #2: ffff888038de4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1158.195179][ T30] 5 locks held by kworker/u8:13/6770: [ 1158.200653][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1158.211917][ T30] #1: ffffc90002647c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1158.222561][ T30] #2: ffffffff8fdc0328 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1158.232061][ T30] #3: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 1158.242433][ T30] #4: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1158.253385][ T30] 3 locks held by kworker/u8:15/6774: [ 1158.258841][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1158.270964][ T30] #1: ffffc9000249fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1158.282177][ T30] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1158.291258][ T30] 3 locks held by kworker/0:13/23821: [ 1158.293334][ T5642] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1158.296971][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1158.314015][ T30] #1: ffffc9000446fc40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1158.324449][ T30] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 1158.334555][ T30] 3 locks held by udevd/3551: [ 1158.339335][ T30] #0: ffff888027734350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1158.348688][ T30] #1: ffff888027500e98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1158.356797][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 1158.358227][ T30] #2: ffff888027870178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1158.373139][ T30] 2 locks held by syz-executor/10127: [ 1158.378794][ T30] #0: ffffffff9032a948 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1158.388381][ T30] #1: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1158.397483][ T30] 1 lock held by syz.4.9216/10454: [ 1158.402594][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 1158.412516][ T30] 1 lock held by syz.2.9217/10467: [ 1158.418001][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0 [ 1158.427188][ T30] 1 lock held by syz.0.9219/10470: [ 1158.432340][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x120/0x970 [ 1158.442613][ T30] 1 lock held by syz.3.9218/10463: [ 1158.447876][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1158.457046][ T30] 1 lock held by syz.3.9218/10466: [ 1158.462147][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1158.471423][ T30] [ 1158.491474][ T30] ============================================= [ 1158.491474][ T30] [ 1158.503076][ T30] NMI backtrace for cpu 1 [ 1158.503091][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1158.503111][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1158.503122][ T30] Call Trace: [ 1158.503130][ T30] [ 1158.503138][ T30] dump_stack_lvl+0xe8/0x150 [ 1158.503163][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1158.503191][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1158.503212][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1158.503241][ T30] sys_info+0x135/0x170 [ 1158.503264][ T30] watchdog+0xfd3/0x1030 [ 1158.503295][ T30] ? watchdog+0x1c9/0x1030 [ 1158.503325][ T30] kthread+0x388/0x470 [ 1158.503349][ T30] ? __pfx_watchdog+0x10/0x10 [ 1158.503370][ T30] ? __pfx_kthread+0x10/0x10 [ 1158.503393][ T30] ret_from_fork+0x514/0xb70 [ 1158.503414][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1158.503432][ T30] ? __switch_to+0xc79/0x1410 [ 1158.503459][ T30] ? __pfx_kthread+0x10/0x10 [ 1158.503482][ T30] ret_from_fork_asm+0x1a/0x30 [ 1158.503516][ T30] [ 1158.503523][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1158.614730][ C0] NMI backtrace for cpu 0 [ 1158.614746][ C0] CPU: 0 UID: 0 PID: 6770 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1158.614764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1158.614775][ C0] Workqueue: netns cleanup_net [ 1158.614796][ C0] RIP: 0010:unwind_next_frame+0x2ab/0x2550 [ 1158.614819][ C0] Code: 00 45 39 e8 48 bd 00 00 00 00 00 fc ff df 0f 84 17 04 00 00 4a 8d 14 ad 94 1f 43 90 45 29 e8 4a 8d 1c 82 48 83 c3 fc 49 89 d5 <48> 39 da 0f 86 1c 02 00 00 49 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 [ 1158.614832][ C0] RSP: 0018:ffffc90002646f98 EFLAGS: 00000297 [ 1158.614845][ C0] RAX: ffffffff90d81b4c RBX: ffffffff9055f1a0 RCX: 0000000080000000 [ 1158.614857][ C0] RDX: ffffffff9055f17c RSI: ffffffff90d81b10 RDI: ffffffff8c28ab80 [ 1158.614867][ C0] RBP: dffffc0000000000 R08: 000000000000000a R09: ffffffff8e95cd60 [ 1158.614879][ C0] R10: ffffc900026470b8 R11: ffffffff81b0d880 R12: ffffffff82714323 [ 1158.614890][ C0] R13: ffffffff9055f17c R14: ffffc90002647068 R15: 0000000000017143 [ 1158.614902][ C0] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 1158.614914][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1158.614926][ C0] CR2: 00007eff71d47e20 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 1158.614940][ C0] Call Trace: [ 1158.614946][ C0] [ 1158.614958][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1158.614977][ C0] ? sysfs_remove_groups+0x54/0xb0 [ 1158.614995][ C0] ? sysfs_remove_groups+0x54/0xb0 [ 1158.615015][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1158.615038][ C0] arch_stack_walk+0x11b/0x150 [ 1158.615059][ C0] ? sysfs_remove_groups+0x54/0xb0 [ 1158.615080][ C0] stack_trace_save+0xa9/0x100 [ 1158.615101][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1158.615129][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1158.615148][ C0] kasan_save_stack+0x3e/0x60 [ 1158.615167][ C0] ? kasan_save_stack+0x3e/0x60 [ 1158.615185][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 1158.615200][ C0] ? call_rcu+0xee/0x890 [ 1158.615218][ C0] ? kernfs_put+0x259/0x520 [ 1158.615235][ C0] ? kernfs_remove_by_name_ns+0xc8/0x140 [ 1158.615256][ C0] ? sysfs_remove_group+0xfc/0x2e0 [ 1158.615273][ C0] ? sysfs_remove_groups+0x54/0xb0 [ 1158.615316][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 1158.615332][ C0] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 1158.615350][ C0] call_rcu+0xee/0x890 [ 1158.615369][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1158.615393][ C0] kernfs_put+0x259/0x520 [ 1158.615415][ C0] kernfs_remove_by_name_ns+0xc8/0x140 [ 1158.615438][ C0] sysfs_remove_group+0xfc/0x2e0 [ 1158.615458][ C0] sysfs_remove_groups+0x54/0xb0 [ 1158.615478][ C0] netdev_queue_update_kobjects+0x5d3/0x6c0 [ 1158.615506][ C0] netdev_unregister_kobject+0x11f/0x450 [ 1158.615532][ C0] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 1158.615563][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1158.615586][ C0] ? unregister_netdevice_queue+0x19b/0x360 [ 1158.615608][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1158.615631][ C0] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 1158.615654][ C0] default_device_exit_batch+0x981/0xa00 [ 1158.615674][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 1158.615695][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1158.615719][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1158.615735][ C0] ops_undo_list+0x52b/0x940 [ 1158.615755][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1158.615773][ C0] ? idr_destroy+0x218/0x290 [ 1158.615788][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1158.615811][ C0] cleanup_net+0x56b/0x800 [ 1158.615829][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1158.615849][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1158.615864][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1158.615881][ C0] process_scheduled_works+0xb5d/0x1860 [ 1158.615913][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1158.615932][ C0] ? assign_work+0x3d5/0x5e0 [ 1158.615949][ C0] worker_thread+0xa53/0xfc0 [ 1158.615979][ C0] kthread+0x388/0x470 [ 1158.615998][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1158.616013][ C0] ? __pfx_kthread+0x10/0x10 [ 1158.616032][ C0] ret_from_fork+0x514/0xb70 [ 1158.616050][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1158.616066][ C0] ? __switch_to+0xc79/0x1410 [ 1158.616088][ C0] ? __pfx_kthread+0x10/0x10 [ 1158.616107][ C0] ret_from_fork_asm+0x1a/0x30 [ 1158.616138][ C0] [ 1158.617069][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1158.617090][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1158.617111][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1158.617121][ T30] Call Trace: [ 1158.617129][ T30] [ 1158.617138][ T30] vpanic+0x56c/0xa60 [ 1158.617161][ T30] ? __pfx___schedule+0x10/0x10 [ 1158.617182][ T30] ? __pfx_vpanic+0x10/0x10 [ 1158.617212][ T30] panic+0xc5/0xd0 [ 1158.617230][ T30] ? __pfx_panic+0x10/0x10 [ 1158.617251][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1158.617281][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1158.617311][ T30] watchdog+0x102c/0x1030 [ 1158.617342][ T30] ? watchdog+0x1c9/0x1030 [ 1158.617372][ T30] kthread+0x388/0x470 [ 1158.617395][ T30] ? __pfx_watchdog+0x10/0x10 [ 1158.617418][ T30] ? __pfx_kthread+0x10/0x10 [ 1158.617441][ T30] ret_from_fork+0x514/0xb70 [ 1158.617463][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1158.617482][ T30] ? __switch_to+0xc79/0x1410 [ 1158.617509][ T30] ? __pfx_kthread+0x10/0x10 [ 1158.617532][ T30] ret_from_fork_asm+0x1a/0x30 [ 1158.617566][ T30] [ 1159.149939][ T30] Kernel Offset: disabled [ 1159.154247][ T30] Rebooting in 86400 seconds..