last executing test programs: 5.89055398s ago: executing program 0 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 5.637155582s ago: executing program 0 (id=1973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910857c2725dd5795f705a444b9d4308000000000000081c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "62fbd100", "03200332f9fa4952a9485e5aa3252300", "b050d136", "e30b166ac163d6e1"}, 0x28) 5.517955438s ago: executing program 0 (id=1976): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 5.358759681s ago: executing program 0 (id=1980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 5.151205135s ago: executing program 0 (id=1985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4.638578444s ago: executing program 0 (id=1996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.246880166s ago: executing program 32 (id=1996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.500855328s ago: executing program 2 (id=2020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x4, 0xf}, &(0x7f00000001c0)=0x8) 2.439286269s ago: executing program 4 (id=2021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4079, 0xfef, 0x0, 0x0}, &(0x7f0000000000)=0x40) 2.356617721s ago: executing program 4 (id=2023): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) 2.292993743s ago: executing program 2 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) 2.269590196s ago: executing program 1 (id=2025): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.248940135s ago: executing program 4 (id=2026): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffe49, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.130656325s ago: executing program 1 (id=2029): sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000280)={0xa, 0xfffe, 0x7, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.041331606s ago: executing program 1 (id=2031): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.896057642s ago: executing program 4 (id=2032): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.886439617s ago: executing program 2 (id=2033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xaa, 0xa, 0x10, 0x0, 0x1ff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x6, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x0) 1.842377706s ago: executing program 3 (id=2034): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x38, r3, 0x1, 0x1, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x38}}, 0x20000004) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 1.692584678s ago: executing program 3 (id=2035): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 1.597320494s ago: executing program 3 (id=2036): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000, 0x0) 1.501728925s ago: executing program 3 (id=2037): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.433480182s ago: executing program 3 (id=2038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 486.848004ms ago: executing program 4 (id=2039): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close(r0) 481.899975ms ago: executing program 2 (id=2040): sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x8c4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 397.037741ms ago: executing program 3 (id=2041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000340)="ddbb59c9ec", 0x5}], 0x1) 313.498054ms ago: executing program 1 (id=2042): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000000000000000100fffd0900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800054000000000080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408"], 0x100}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) 293.606738ms ago: executing program 4 (id=2043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x4}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 185.568254ms ago: executing program 1 (id=2044): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 179.002838ms ago: executing program 2 (id=2045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="2cae1b", 0x3}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 42.621098ms ago: executing program 1 (id=2046): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 2 (id=2047): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 84.763312][ T5852] cgroup: Unknown subsys name 'net' [ 84.916280][ T5852] cgroup: Unknown subsys name 'cpuset' [ 84.925674][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.571210][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.167909][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.179133][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.192053][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.201314][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.209712][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.217689][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.218960][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.226438][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.232726][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.239994][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.248686][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.260635][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.263842][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.273623][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.283295][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.291267][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.298668][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.307607][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.316618][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.318280][ T5882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.324746][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.333586][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.344869][ T5185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.373278][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.391733][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.001242][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 90.107615][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 90.284284][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 90.321630][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 90.410268][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.417659][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.425897][ T5878] bridge_slave_0: entered allmulticast mode [ 90.433492][ T5878] bridge_slave_0: entered promiscuous mode [ 90.443452][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 90.454917][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.462074][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.470136][ T5874] bridge_slave_0: entered allmulticast mode [ 90.477760][ T5874] bridge_slave_0: entered promiscuous mode [ 90.512082][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.519377][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.527436][ T5878] bridge_slave_1: entered allmulticast mode [ 90.536207][ T5878] bridge_slave_1: entered promiscuous mode [ 90.564054][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.571211][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.579019][ T5874] bridge_slave_1: entered allmulticast mode [ 90.586802][ T5874] bridge_slave_1: entered promiscuous mode [ 90.672591][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.700528][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.725715][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.762524][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.848032][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.855739][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.863468][ T5862] bridge_slave_0: entered allmulticast mode [ 90.870694][ T5862] bridge_slave_0: entered promiscuous mode [ 90.893767][ T5878] team0: Port device team_slave_0 added [ 90.899936][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.907645][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.915134][ T5863] bridge_slave_0: entered allmulticast mode [ 90.922782][ T5863] bridge_slave_0: entered promiscuous mode [ 90.962042][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.969391][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.976826][ T5862] bridge_slave_1: entered allmulticast mode [ 90.984237][ T5862] bridge_slave_1: entered promiscuous mode [ 90.992973][ T5878] team0: Port device team_slave_1 added [ 90.999032][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.006551][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.014030][ T5863] bridge_slave_1: entered allmulticast mode [ 91.021272][ T5863] bridge_slave_1: entered promiscuous mode [ 91.058417][ T5874] team0: Port device team_slave_0 added [ 91.121920][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.129578][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.137439][ T5864] bridge_slave_0: entered allmulticast mode [ 91.145438][ T5864] bridge_slave_0: entered promiscuous mode [ 91.155098][ T5874] team0: Port device team_slave_1 added [ 91.161172][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.168410][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.176232][ T5864] bridge_slave_1: entered allmulticast mode [ 91.184211][ T5864] bridge_slave_1: entered promiscuous mode [ 91.203449][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.210441][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.236625][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.251354][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.294866][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.307967][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.318070][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.326084][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.352143][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.366282][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.407094][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.413364][ T5870] Bluetooth: hci4: command tx timeout [ 91.416565][ T5882] Bluetooth: hci3: command tx timeout [ 91.426741][ T51] Bluetooth: hci1: command tx timeout [ 91.427354][ T5185] Bluetooth: hci0: command tx timeout [ 91.471460][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.478713][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.505182][ T5185] Bluetooth: hci2: command tx timeout [ 91.510702][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.525384][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.551040][ T5862] team0: Port device team_slave_0 added [ 91.559732][ T5862] team0: Port device team_slave_1 added [ 91.579643][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.587413][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.613526][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.668251][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.675321][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.702147][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.715323][ T5863] team0: Port device team_slave_0 added [ 91.757107][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.764183][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.790655][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.803968][ T5863] team0: Port device team_slave_1 added [ 91.812774][ T5864] team0: Port device team_slave_0 added [ 91.871103][ T5864] team0: Port device team_slave_1 added [ 91.884822][ T5878] hsr_slave_0: entered promiscuous mode [ 91.891337][ T5878] hsr_slave_1: entered promiscuous mode [ 91.916296][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.923782][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.950686][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.012591][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.019606][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.048647][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.127964][ T5874] hsr_slave_0: entered promiscuous mode [ 92.136499][ T5874] hsr_slave_1: entered promiscuous mode [ 92.143039][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 92.148908][ T5874] Cannot create hsr debugfs directory [ 92.181540][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.188769][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.214788][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.228063][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.235172][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.261194][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.283717][ T5862] hsr_slave_0: entered promiscuous mode [ 92.290580][ T5862] hsr_slave_1: entered promiscuous mode [ 92.297605][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 92.303742][ T5862] Cannot create hsr debugfs directory [ 92.463621][ T5863] hsr_slave_0: entered promiscuous mode [ 92.470425][ T5863] hsr_slave_1: entered promiscuous mode [ 92.477181][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 92.483482][ T5863] Cannot create hsr debugfs directory [ 92.607259][ T5864] hsr_slave_0: entered promiscuous mode [ 92.614499][ T5864] hsr_slave_1: entered promiscuous mode [ 92.620903][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 92.627345][ T5864] Cannot create hsr debugfs directory [ 93.124523][ T5878] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.166213][ T5878] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.178684][ T5878] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.215648][ T5878] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.299454][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.309883][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.345344][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.359435][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.445023][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.463541][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.488807][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.496303][ T5185] Bluetooth: hci1: command tx timeout [ 93.496781][ T51] Bluetooth: hci4: command tx timeout [ 93.501746][ T5185] Bluetooth: hci0: command tx timeout [ 93.507988][ T51] Bluetooth: hci3: command tx timeout [ 93.537862][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.573583][ T51] Bluetooth: hci2: command tx timeout [ 93.589297][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.614671][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.629230][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.655360][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.748759][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.784110][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.798286][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.811222][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.832893][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.846472][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.925743][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.933101][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.969174][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.976349][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.077150][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.139951][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.169007][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.176225][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.190216][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.207028][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.226930][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.234210][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.279584][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.307062][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.354164][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.361349][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.389525][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.396754][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.408287][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.415544][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.464694][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.471899][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.570767][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.641053][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.670272][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.717384][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.724645][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.786614][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.793886][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.948448][ T5878] veth0_vlan: entered promiscuous mode [ 95.061994][ T5878] veth1_vlan: entered promiscuous mode [ 95.130512][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.251603][ T5878] veth0_macvtap: entered promiscuous mode [ 95.297345][ T5878] veth1_macvtap: entered promiscuous mode [ 95.425319][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.446482][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.470384][ T5874] veth0_vlan: entered promiscuous mode [ 95.486606][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.501985][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.533394][ T5874] veth1_vlan: entered promiscuous mode [ 95.555787][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.573866][ T51] Bluetooth: hci0: command tx timeout [ 95.576842][ T5882] Bluetooth: hci3: command tx timeout [ 95.579324][ T51] Bluetooth: hci4: command tx timeout [ 95.585534][ T5185] Bluetooth: hci1: command tx timeout [ 95.614072][ T1083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.628240][ T1083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.638814][ T1083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.652658][ T5882] Bluetooth: hci2: command tx timeout [ 95.671121][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.799232][ T5874] veth0_macvtap: entered promiscuous mode [ 95.811804][ T5874] veth1_macvtap: entered promiscuous mode [ 95.891335][ T5862] veth0_vlan: entered promiscuous mode [ 95.906132][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.924004][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.000117][ T5862] veth1_vlan: entered promiscuous mode [ 96.011160][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.029405][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.032635][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.040910][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.081338][ T5864] veth0_vlan: entered promiscuous mode [ 96.116668][ T1101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.144568][ T1101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.144818][ T5878] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.170581][ T1101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.180658][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.205127][ T5862] veth0_macvtap: entered promiscuous mode [ 96.235122][ T5864] veth1_vlan: entered promiscuous mode [ 96.267722][ T5862] veth1_macvtap: entered promiscuous mode [ 96.326630][ T5863] veth0_vlan: entered promiscuous mode [ 96.399809][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.416395][ T5863] veth1_vlan: entered promiscuous mode [ 96.488285][ T5989] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.496259][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.521484][ T5989] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.534559][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.548617][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.571093][ T5864] veth0_macvtap: entered promiscuous mode [ 96.609518][ T5864] veth1_macvtap: entered promiscuous mode [ 96.667548][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.705530][ T5863] veth0_macvtap: entered promiscuous mode [ 96.714938][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.723890][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.732312][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.735939][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.775084][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.804404][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.837997][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.856071][ T5863] veth1_macvtap: entered promiscuous mode [ 96.906465][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.917334][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.974368][ T5995] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 97.007015][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.021132][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.109104][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.119358][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.148764][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.162027][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.254990][ T9] cfg80211: failed to load regulatory.db [ 97.313794][ T1101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.344991][ T1101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.398777][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.408648][ T6004] macvtap1: entered promiscuous mode [ 97.416206][ T6004] macvtap1: entered allmulticast mode [ 97.433414][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.434153][ T6004] bond_slave_0: entered promiscuous mode [ 97.446708][ T6004] bond_slave_1: entered promiscuous mode [ 97.457506][ T6004] bond0: entered allmulticast mode [ 97.466122][ T6004] bond_slave_0: entered allmulticast mode [ 97.472042][ T6004] bond_slave_1: entered allmulticast mode [ 97.479000][ T6004] bond0: entered promiscuous mode [ 97.505874][ T6004] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 97.514810][ T6004] team0: Device macvtap1 failed to register rx_handler [ 97.525718][ T6004] bond0: left allmulticast mode [ 97.539583][ T6004] bond_slave_0: left allmulticast mode [ 97.550096][ T6004] bond_slave_1: left allmulticast mode [ 97.556821][ T6004] bond0: left promiscuous mode [ 97.563559][ T6004] bond_slave_0: left promiscuous mode [ 97.569069][ T6004] bond_slave_1: left promiscuous mode [ 97.605452][ T1101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.615037][ T1101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.653075][ T5882] Bluetooth: hci4: command tx timeout [ 97.653094][ T5185] Bluetooth: hci0: command tx timeout [ 97.653131][ T5185] Bluetooth: hci3: command tx timeout [ 97.658578][ T5882] Bluetooth: hci1: command tx timeout [ 97.685635][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.707882][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.734468][ T5185] Bluetooth: hci2: command tx timeout [ 97.842844][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.880432][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.999938][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.033687][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.198295][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.234933][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.925845][ T5956] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 98.988848][ T5956] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 99.361842][ T6059] netlink: 236 bytes leftover after parsing attributes in process `syz.3.28'. [ 99.380748][ T6048] fido_id[6048]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 100.043899][ T6078] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.34'. [ 103.118452][ T6175] netlink: 500 bytes leftover after parsing attributes in process `syz.0.69'. [ 103.245210][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 103.955383][ T6203] syz.4.80 uses obsolete (PF_INET,SOCK_PACKET) [ 104.328429][ T6219] warning: `syz.4.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.554801][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'. [ 104.775636][ T6239] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 105.071312][ T6249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.078847][ T6249] IPv6: NLM_F_CREATE should be set when creating new route [ 106.907594][ T6324] sock: sock_set_timeout: `syz.3.131' (pid 6324) tries to set negative timeout [ 107.324250][ T6339] netlink: 7 bytes leftover after parsing attributes in process `syz.3.140'. [ 107.558037][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 107.632428][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 107.675235][ T6348] netlink: 'syz.4.143': attribute type 11 has an invalid length. [ 108.114360][ T6373] netlink: 360 bytes leftover after parsing attributes in process `syz.4.154'. [ 108.130712][ T6371] syzkaller1: entered promiscuous mode [ 108.169739][ T6371] syzkaller1: entered allmulticast mode [ 108.950584][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 109.845843][ T6440] netlink: 'syz.2.184': attribute type 1 has an invalid length. [ 110.047283][ T6447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 110.310603][ T6455] Illegal XDP return value 2893535896 on prog (id 16) dev syz_tun, expect packet loss! [ 110.666202][ T6470] syzkaller1: entered promiscuous mode [ 110.681440][ T6470] syzkaller1: entered allmulticast mode [ 110.730865][ T6472] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 110.870914][ T6478] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 111.424619][ T6502] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 111.713562][ T6513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.217'. [ 111.726094][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 112.864208][ T6551] netlink: 348 bytes leftover after parsing attributes in process `syz.3.231'. [ 114.290799][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 114.320845][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 114.418722][ T6598] Zero length message leads to an empty skb [ 114.425420][ T3007] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.451133][ T3007] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.451221][ T6602] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.462629][ T3007] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.543162][ T3007] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.264393][ T6626] syzkaller1: entered promiscuous mode [ 115.295827][ T6626] syzkaller1: entered allmulticast mode [ 115.479188][ T6634] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 116.616019][ T6675] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.694945][ T6717] sctp: [Deprecated]: syz.0.294 (pid 6717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.694945][ T6717] Use struct sctp_sack_info instead [ 117.834893][ T6724] netlink: 84 bytes leftover after parsing attributes in process `syz.3.296'. [ 118.473410][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.306'. [ 119.444041][ T6784] netlink: 'syz.3.324': attribute type 4 has an invalid length. [ 120.246175][ T6815] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 120.403509][ T6819] syzkaller1: entered promiscuous mode [ 120.409058][ T6819] syzkaller1: entered allmulticast mode [ 120.948928][ T6841] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.350'. [ 122.052299][ T5185] Bluetooth: hci4: command tx timeout [ 122.056081][ T6890] hsr0 speed is unknown, defaulting to 1000 [ 122.120474][ T6890] hsr0 speed is unknown, defaulting to 1000 [ 122.155377][ T6890] hsr0 speed is unknown, defaulting to 1000 [ 122.228262][ T6890] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.271884][ T6890] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 122.447753][ T6890] hsr0 speed is unknown, defaulting to 1000 [ 122.508379][ T6890] hsr0 speed is unknown, defaulting to 1000 [ 122.588221][ T6890] hsr0 speed is unknown, defaulting to 1000 [ 122.639495][ T6909] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 122.659681][ T6890] hsr0 speed is unknown, defaulting to 1000 [ 122.680434][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 122.717982][ T6890] hsr0 speed is unknown, defaulting to 1000 [ 122.780405][ T6907] hsr0 speed is unknown, defaulting to 1000 [ 123.038760][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 123.159677][ T6925] block nbd0: not configured, cannot reconfigure [ 123.207505][ T6927] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 123.317603][ T6927] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 123.348197][ T6927] gretap1: entered promiscuous mode [ 123.365889][ T6927] gretap1: entered allmulticast mode [ 123.444559][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 123.916680][ T6949] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 124.092755][ T6952] netlink: 68 bytes leftover after parsing attributes in process `syz.3.401'. [ 124.101777][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 125.195109][ T6999] netlink: 'syz.2.421': attribute type 17 has an invalid length. [ 125.204401][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.222610][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 125.233674][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.248525][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'. [ 125.585589][ T7011] pim6reg1: entered promiscuous mode [ 125.601211][ T7011] pim6reg1: entered allmulticast mode [ 125.900114][ T7027] sctp: [Deprecated]: syz.4.432 (pid 7027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.900114][ T7027] Use struct sctp_sack_info instead [ 126.413492][ T7049] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 126.730688][ T7060] netlink: 'syz.4.449': attribute type 11 has an invalid length. [ 126.771935][ T7062] netlink: 'syz.3.448': attribute type 4 has an invalid length. [ 127.143457][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 127.182992][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 127.730792][ T7105] geneve2: entered promiscuous mode [ 127.736642][ T7105] geneve2: entered allmulticast mode [ 127.751605][ T1083] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 128.028644][ T7105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.097782][ T1083] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 128.162739][ T1083] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 128.283413][ T7117] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.475'. [ 128.363518][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 128.381337][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 128.967475][ T7146] IPv6: sit1: Disabled Multicast RS [ 128.974370][ T7146] sit1: entered allmulticast mode [ 129.007913][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 129.017478][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 129.189470][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.472592][ T7171] netlink: 6052 bytes leftover after parsing attributes in process `syz.3.500'. [ 129.670000][ T7105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.688943][ T7105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 129.805527][ T7105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.847170][ T7105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 129.878880][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.507'. [ 129.888706][ T7188] netlink: 'syz.0.507': attribute type 7 has an invalid length. [ 129.901825][ T7188] netlink: 'syz.0.507': attribute type 8 has an invalid length. [ 129.910736][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 129.998485][ T7105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.030569][ T7105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 130.237833][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.249806][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 130.276417][ T7202] syzkaller1: entered promiscuous mode [ 130.286799][ T7202] syzkaller1: entered allmulticast mode [ 130.375476][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.385440][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 130.413433][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.436450][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 130.461535][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.470084][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.073420][ T7235] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 132.061968][ T7281] veth0: entered promiscuous mode [ 132.126915][ T7278] veth0: left promiscuous mode [ 132.232395][ T9] IPVS: starting estimator thread 0... [ 132.235376][ T7288] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 132.352371][ T7291] IPVS: using max 29 ests per chain, 69600 per kthread [ 132.380746][ T7296] __nla_validate_parse: 3 callbacks suppressed [ 132.380766][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 132.516644][ T7301] openvswitch: netlink: IPv4 tun info is not correct [ 132.570699][ T7303] netlink: 64 bytes leftover after parsing attributes in process `syz.3.559'. [ 133.841924][ T7356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.585'. [ 134.133961][ T7367] syzkaller1: entered promiscuous mode [ 134.139517][ T7367] syzkaller1: entered allmulticast mode [ 134.387712][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 135.619093][ T7417] syz.0.611 (7417) used greatest stack depth: 16472 bytes left [ 135.707565][ T7423] syzkaller1: entered promiscuous mode [ 135.735877][ T7423] syzkaller1: entered allmulticast mode [ 136.329053][ T7458] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 136.371534][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.385062][ T7458] bridge_slave_1: left allmulticast mode [ 136.390861][ T7458] bridge_slave_1: left promiscuous mode [ 136.412782][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.449528][ T7458] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 136.842061][ T7485] syzkaller1: entered promiscuous mode [ 136.848168][ T7485] syzkaller1: entered allmulticast mode [ 136.876511][ T7485] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 136.926052][ T2153] IPVS: starting estimator thread 0... [ 137.023574][ T7492] IPVS: using max 26 ests per chain, 62400 per kthread [ 137.117413][ T7500] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 137.134222][ T7497] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.142336][ T7500] netlink: 136 bytes leftover after parsing attributes in process `syz.4.648'. [ 137.159793][ T7500] netlink: 'syz.4.648': attribute type 2 has an invalid length. [ 137.184857][ T7500] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 137.412049][ T7513] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 137.609807][ T7520] syzkaller1: entered promiscuous mode [ 137.637696][ T7520] syzkaller1: entered allmulticast mode [ 137.937775][ T7546] netlink: 'syz.1.668': attribute type 29 has an invalid length. [ 137.949809][ T7546] netlink: 'syz.1.668': attribute type 29 has an invalid length. [ 137.971168][ T24] IPVS: starting estimator thread 0... [ 137.986232][ T7546] netlink: 500 bytes leftover after parsing attributes in process `syz.1.668'. [ 138.075039][ T7548] IPVS: using max 27 ests per chain, 64800 per kthread [ 138.218185][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.225369][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.326168][ T7565] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.676'. [ 138.445119][ T7572] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 138.453710][ T7572] netlink: 172 bytes leftover after parsing attributes in process `syz.3.680'. [ 138.723123][ T7586] netlink: 'syz.4.687': attribute type 11 has an invalid length. [ 138.762251][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 139.368904][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.705'. [ 139.402711][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.705'. [ 139.506373][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.706'. [ 139.567608][ T7629] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 140.133023][ T1083] wlan1: Trigger new scan to find an IBSS to join [ 140.326609][ T7668] netlink: 'syz.3.726': attribute type 17 has an invalid length. [ 140.340143][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 140.351829][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.726'. [ 140.387020][ T7668] gretap0: entered promiscuous mode [ 140.405091][ T7668] gretap0: left promiscuous mode [ 141.019396][ T7699] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.739'. [ 141.891158][ T7754] netlink: 'syz.3.751': attribute type 6 has an invalid length. [ 143.050079][ T7819] __nla_validate_parse: 10 callbacks suppressed [ 143.050100][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 143.092524][ T7738] wlan1: Trigger new scan to find an IBSS to join [ 143.112522][ T7819] gtp0: entered promiscuous mode [ 143.125628][ T7819] gtp0: entered allmulticast mode [ 143.384593][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 143.593029][ T7846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.208666][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'. [ 144.234126][ T7882] netlink: 'syz.4.807': attribute type 7 has an invalid length. [ 144.247919][ T7882] netlink: 'syz.4.807': attribute type 8 has an invalid length. [ 144.256156][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 144.294998][ T7882] gretap0: entered promiscuous mode [ 144.322280][ T7882] batadv_slave_1: entered promiscuous mode [ 144.329136][ T7882] erspan0: entered promiscuous mode [ 144.522959][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 144.556577][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 145.233779][ T7927] sctp: [Deprecated]: syz.0.827 (pid 7927) Use of int in max_burst socket option. [ 145.233779][ T7927] Use struct sctp_assoc_value instead [ 145.896647][ T7955] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.840'. [ 146.138853][ T1083] wlan1: Trigger new scan to find an IBSS to join [ 146.259805][ T7970] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 146.441904][ T7981] netlink: 'syz.2.852': attribute type 10 has an invalid length. [ 146.507097][ T7981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.528141][ T7985] netlink: 'syz.2.852': attribute type 10 has an invalid length. [ 146.538792][ T7981] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.550408][ T7985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.852'. [ 146.559986][ T7985] batadv0: entered promiscuous mode [ 146.567369][ T7985] batadv0: entered allmulticast mode [ 146.581068][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 146.605618][ T7985] bond0: (slave batadv0): Releasing backup interface [ 146.628078][ T7985] bridge0: port 3(batadv0) entered blocking state [ 146.646888][ T7985] bridge0: port 3(batadv0) entered disabled state [ 147.039735][ T1107] wlan1: Creating new IBSS network, BSSID 3a:48:f0:01:7a:a1 [ 147.183290][ T1101] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 147.192972][ T1101] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 147.418547][ T8028] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.870'. [ 147.595687][ T8016] syzkaller1: entered promiscuous mode [ 147.601313][ T8016] syzkaller1: entered allmulticast mode [ 147.798332][ T8038] hsr0 speed is unknown, defaulting to 1000 [ 148.177733][ T8056] __nla_validate_parse: 1 callbacks suppressed [ 148.177753][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.881'. [ 148.323855][ T8063] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.883'. [ 148.479216][ T8067] bridge_slave_0: left allmulticast mode [ 148.522850][ T8067] bridge_slave_0: left promiscuous mode [ 148.533920][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.565529][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 148.579383][ T8067] bond0: (slave bridge_slave_1): Releasing backup interface [ 148.611533][ T8067] bond0: (slave bond_slave_0): Releasing backup interface [ 148.657601][ T8067] bond0: (slave bond_slave_1): Releasing backup interface [ 148.702560][ T8067] team0: Port device team_slave_0 removed [ 148.728572][ T8067] team0: Port device team_slave_1 removed [ 148.753615][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.775651][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.787434][ T8078] netlink: 'syz.4.891': attribute type 4 has an invalid length. [ 148.798453][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.816171][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.907822][ T8071] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 148.922318][ T8071] netlink: 'syz.2.887': attribute type 2 has an invalid length. [ 148.968741][ T9] hsr0 speed is unknown, defaulting to 1000 [ 149.562620][ T8115] netlink: 36 bytes leftover after parsing attributes in process `syz.4.906'. [ 149.564802][ T5185] Bluetooth: hci4: link tx timeout [ 149.579080][ T5185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.649398][ T8118] dummy0: entered allmulticast mode [ 150.083521][ T8135] team0 (unregistering): Port device team_slave_0 removed [ 150.097736][ T8135] team0 (unregistering): Port device team_slave_1 removed [ 151.095209][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.943'. [ 151.308010][ T8201] Bluetooth: MGMT ver 1.23 [ 151.657278][ T5185] Bluetooth: hci4: command 0x0406 tx timeout [ 152.451712][ T8255] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.972'. [ 153.269448][ T8292] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.990'. [ 153.315483][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 153.336070][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 153.356576][ T8298] netlink: 50 bytes leftover after parsing attributes in process `syz.3.993'. [ 154.064839][ T8335] syzkaller1: entered promiscuous mode [ 154.071558][ T8335] syzkaller1: entered allmulticast mode [ 154.396963][ T8343] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.536275][ T8343] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.667778][ T8343] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.814908][ T30] audit: type=1800 audit(1757729155.157:2): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1016" name="memory.events" dev="tmpfs" ino=1053 res=0 errno=0 [ 154.841866][ T8343] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.877712][ T8359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1021'. [ 155.199178][ T7738] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.228053][ T7738] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.267779][ T1107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.342328][ T1107] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.366992][ T8377] netlink: 'syz.0.1029': attribute type 4 has an invalid length. [ 155.642394][ T8391] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1037'. [ 155.644918][ T8393] openvswitch: netlink: IPv4 tun info is not correct [ 155.831685][ T8404] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1042'. [ 155.836333][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1043'. [ 155.865771][ T8403] netlink: 'syz.0.1043': attribute type 7 has an invalid length. [ 155.875209][ T8403] netlink: 'syz.0.1043': attribute type 8 has an invalid length. [ 155.883299][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 155.945206][ T8403] gretap0: entered promiscuous mode [ 155.959315][ T8403] batadv_slave_1: entered promiscuous mode [ 155.984787][ T8403] gretap0: left promiscuous mode [ 155.994867][ T8403] batadv_slave_1: left promiscuous mode [ 156.021965][ T8406] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 156.579387][ T8441] netlink: 'syz.4.1060': attribute type 29 has an invalid length. [ 156.627376][ T8441] netlink: 'syz.4.1060': attribute type 29 has an invalid length. [ 156.648035][ T8441] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1060'. [ 156.681022][ T8441] unsupported nla_type 58 [ 157.151793][ T8471] sctp: [Deprecated]: syz.1.1075 (pid 8471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.151793][ T8471] Use struct sctp_sack_info instead [ 157.794317][ T8503] vlan2: entered allmulticast mode [ 157.800674][ T8503] hsr0: entered allmulticast mode [ 157.805997][ T8503] hsr_slave_0: entered allmulticast mode [ 157.812544][ T8503] hsr_slave_1: entered allmulticast mode [ 157.987420][ T10] IPVS: starting estimator thread 0... [ 158.082311][ T8520] IPVS: using max 27 ests per chain, 64800 per kthread [ 158.347555][ T8518] tipc: Started in network mode [ 158.354895][ T8518] tipc: Node identity ac1414aa, cluster identity 4711 [ 158.377906][ T8518] tipc: Enabled bearer , priority 10 [ 159.493503][ T5954] tipc: Node number set to 2886997162 [ 159.522830][ T8587] netlink: 'syz.0.1129': attribute type 13 has an invalid length. [ 159.540982][ T8587] __nla_validate_parse: 2 callbacks suppressed [ 159.541002][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 159.618678][ T1083] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.632420][ T8587] netlink: 'syz.0.1129': attribute type 13 has an invalid length. [ 159.656009][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 159.684763][ T1083] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.721000][ T1083] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.740335][ T1083] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.240366][ T8625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1145'. [ 160.597786][ T8643] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 160.706928][ T8649] trusted_key: syz.3.1155 sent an empty control message without MSG_MORE. [ 160.728531][ T8643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.766851][ T8645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.778377][ T8645] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.811170][ T8645] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 160.855029][ T8654] syzkaller1: entered promiscuous mode [ 160.860664][ T8654] syzkaller1: entered allmulticast mode [ 161.276531][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 162.409126][ T8727] netlink: 'syz.1.1192': attribute type 22 has an invalid length. [ 162.423363][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 162.537248][ T8727] netlink: 'syz.1.1192': attribute type 22 has an invalid length. [ 162.568124][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 162.741289][ T8743] netlink: 'syz.2.1200': attribute type 16 has an invalid length. [ 162.771185][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1200'. [ 163.111113][ T8775] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 163.180915][ T12] wlan1: Trigger new scan to find an IBSS to join [ 163.344348][ T8781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.363119][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'. [ 164.226307][ T8809] sctp: [Deprecated]: syz.0.1223 (pid 8809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.226307][ T8809] Use struct sctp_sack_info instead [ 164.668029][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 164.681099][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'. [ 164.690847][ T8829] netlink: 'syz.4.1232': attribute type 7 has an invalid length. [ 164.835002][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1236'. [ 164.877699][ T8838] veth0_macvtap: left promiscuous mode [ 165.040509][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 165.316932][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 165.326707][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1247'. [ 165.338389][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 165.347710][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1247'. [ 165.919400][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1259'. [ 165.936326][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1259'. [ 166.241358][ T8918] netlink: 'syz.3.1265': attribute type 1 has an invalid length. [ 166.326423][ T8921] netlink: 'syz.2.1266': attribute type 4 has an invalid length. [ 166.385505][ T8923] netlink: 'syz.2.1266': attribute type 4 has an invalid length. [ 166.390012][ T8918] bond1: entered promiscuous mode [ 166.399372][ T8918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.478695][ T8920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.489837][ T8920] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 166.502337][ T8920] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 166.521096][ T8920] bond1: (slave wireguard0): making interface the new active one [ 166.535850][ T8920] wireguard0: entered promiscuous mode [ 166.549292][ T8920] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 166.570714][ T8926] netlink: 'syz.4.1268': attribute type 14 has an invalid length. [ 166.603795][ T8926] netlink: 'syz.4.1268': attribute type 14 has an invalid length. [ 167.087101][ T8958] netlink: 'syz.2.1280': attribute type 7 has an invalid length. [ 167.095712][ T12] wlan1: Trigger new scan to find an IBSS to join [ 167.142258][ T8958] netlink: 'syz.2.1280': attribute type 8 has an invalid length. [ 167.189881][ T1083] wlan1: Creating new IBSS network, BSSID 82:27:f9:fb:88:b5 [ 167.910884][ T8998] syzkaller1: entered promiscuous mode [ 167.931175][ T8998] syzkaller1: entered allmulticast mode [ 168.153467][ T9012] batadv_slave_1: entered promiscuous mode [ 168.160998][ T9011] batadv_slave_1: left promiscuous mode [ 169.430583][ T9092] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 169.471037][ T9092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.520440][ T9094] bond2: (slave geneve2): making interface the new active one [ 169.570572][ T9094] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 169.914394][ T9118] netlink: 'syz.4.1353': attribute type 11 has an invalid length. [ 170.170409][ T9130] __nla_validate_parse: 12 callbacks suppressed [ 170.170432][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 170.209131][ T9132] pim6reg1: entered promiscuous mode [ 170.215650][ T9132] pim6reg1: entered allmulticast mode [ 170.299304][ T9134] netlink: 'syz.4.1362': attribute type 30 has an invalid length. [ 170.330125][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 170.639199][ T9140] syzkaller1: entered promiscuous mode [ 170.644864][ T9140] syzkaller1: entered allmulticast mode [ 171.045092][ T9171] pim6reg1: entered promiscuous mode [ 171.062755][ T9171] pim6reg1: entered allmulticast mode [ 171.601789][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'. [ 171.603148][ T9207] veth0: entered promiscuous mode [ 171.628795][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 171.677066][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'. [ 171.681115][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 171.689724][ T1101] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.717605][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 171.738636][ T1101] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.914551][ T9219] netlink: 'syz.2.1396': attribute type 12 has an invalid length. [ 171.922605][ T9219] netlink: 'syz.2.1396': attribute type 29 has an invalid length. [ 171.930817][ T9219] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1396'. [ 171.953361][ T9219] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 171.974761][ T9219] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1396'. [ 171.997829][ T1101] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.019544][ T1101] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.372751][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 172.454479][ T9237] hsr0 speed is unknown, defaulting to 1000 [ 173.451135][ T9279] syzkaller1: entered promiscuous mode [ 173.469167][ T9279] syzkaller1: entered allmulticast mode [ 174.218762][ T9319] netlink: 'syz.4.1441': attribute type 15 has an invalid length. [ 175.236939][ T9357] syzkaller1: entered promiscuous mode [ 175.254467][ T9357] syzkaller1: entered allmulticast mode [ 175.301546][ T9366] __nla_validate_parse: 10 callbacks suppressed [ 175.301569][ T9366] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.1463'. [ 175.550370][ T9376] syzkaller1: entered promiscuous mode [ 175.562373][ T9376] syzkaller1: entered allmulticast mode [ 175.661432][ T9380] syzkaller1: entered promiscuous mode [ 175.672303][ T9380] syzkaller1: entered allmulticast mode [ 175.999693][ T9401] openvswitch: netlink: IPv4 tun info is not correct [ 176.036583][ T9394] syzkaller1: entered promiscuous mode [ 176.042560][ T9394] syzkaller1: entered allmulticast mode [ 176.763308][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1498'. [ 177.293434][ T7738] nci: nci_rsp_packet: unsupported rsp opcode 0xf21 [ 178.331631][ T9509] netlink: 'syz.1.1522': attribute type 18 has an invalid length. [ 178.341525][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 178.413771][ T9509] netlink: 'syz.1.1522': attribute type 18 has an invalid length. [ 178.426489][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 178.451843][ T9515] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 178.465632][ T9515] netlink: 'syz.2.1525': attribute type 2 has an invalid length. [ 178.507275][ T9515] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 178.519346][ T9515] netlink: 'syz.2.1525': attribute type 2 has an invalid length. [ 178.678716][ T9524] syzkaller1: entered promiscuous mode [ 178.687129][ T9524] syzkaller1: entered allmulticast mode [ 179.364600][ T9558] netlink: 'syz.0.1545': attribute type 29 has an invalid length. [ 179.376754][ T9558] netlink: 'syz.0.1545': attribute type 29 has an invalid length. [ 179.405197][ T9558] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1545'. [ 179.627931][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 180.678314][ T9621] openvswitch: netlink: IP tunnel TTL not specified. [ 180.998767][ T9637] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 181.030795][ T9637] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 181.109850][ T9639] netlink: 'syz.0.1584': attribute type 4 has an invalid length. [ 181.592361][ T9659] bond1: entered allmulticast mode [ 181.598346][ T9659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.606911][ T9659] bridge0: port 4(bond1) entered blocking state [ 181.613729][ T9659] bridge0: port 4(bond1) entered disabled state [ 181.628572][ T9659] bond1: entered promiscuous mode [ 181.635089][ T9659] bridge0: port 4(bond1) entered blocking state [ 181.642465][ T9659] bridge0: port 4(bond1) entered forwarding state [ 181.853706][ T7738] bridge0: port 4(bond1) entered disabled state [ 182.609894][ T9716] ip6gre2: entered allmulticast mode [ 182.901251][ T9726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.141554][ T9735] pim6reg1: entered promiscuous mode [ 183.146960][ T9735] pim6reg1: entered allmulticast mode [ 183.191802][ T9740] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 183.200156][ T9740] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1626'. [ 184.070227][ T9766] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.1637'. [ 184.122832][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 184.570085][ T9722] syz.4.1618: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 184.625138][ T9722] CPU: 1 UID: 0 PID: 9722 Comm: syz.4.1618 Not tainted syzkaller #0 PREEMPT(full) [ 184.625176][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.625198][ T9722] Call Trace: [ 184.625207][ T9722] [ 184.625217][ T9722] dump_stack_lvl+0x189/0x250 [ 184.625257][ T9722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.625284][ T9722] ? __pfx__printk+0x10/0x10 [ 184.625316][ T9722] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 184.625343][ T9722] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 184.625370][ T9722] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 184.625398][ T9722] warn_alloc+0x214/0x310 [ 184.625442][ T9722] ? __pfx_warn_alloc+0x10/0x10 [ 184.625488][ T9722] ? __get_vm_area_node+0x28f/0x300 [ 184.625521][ T9722] ? hash_netport4_resize+0x235/0x1b60 [ 184.625556][ T9722] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 184.625623][ T9722] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 184.625665][ T9722] ? rcu_is_watching+0x15/0xb0 [ 184.625690][ T9722] ? hash_netport4_resize+0x235/0x1b60 [ 184.625718][ T9722] ? hash_netport4_resize+0x235/0x1b60 [ 184.625743][ T9722] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 184.625778][ T9722] ? hash_netport4_resize+0x235/0x1b60 [ 184.625815][ T9722] hash_netport4_resize+0x235/0x1b60 [ 184.625844][ T9722] ? hash_netport4_uadt+0xc97/0xf30 [ 184.625879][ T9722] ? __pfx_hash_netport4_add+0x10/0x10 [ 184.625907][ T9722] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 184.625948][ T9722] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 184.625992][ T9722] call_ad+0x44b/0xb00 [ 184.626037][ T9722] ? __pfx_call_ad+0x10/0x10 [ 184.626090][ T9722] ? __nla_parse+0x40/0x60 [ 184.626120][ T9722] ip_set_ad+0x791/0x930 [ 184.626175][ T9722] ? __pfx_ip_set_ad+0x10/0x10 [ 184.626255][ T9722] nfnetlink_rcv_msg+0xb4d/0x1130 [ 184.626292][ T9722] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 184.626350][ T9722] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 184.626449][ T9722] netlink_rcv_skb+0x208/0x470 [ 184.626474][ T9722] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 184.626517][ T9722] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.626553][ T9722] ? bpf_lsm_capable+0x9/0x20 [ 184.626582][ T9722] ? security_capable+0x7e/0x2e0 [ 184.626625][ T9722] nfnetlink_rcv+0x26a/0x2520 [ 184.626662][ T9722] ? __dev_queue_xmit+0x1d79/0x3b50 [ 184.626709][ T9722] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 184.626744][ T9722] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.626767][ T9722] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 184.626802][ T9722] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.626864][ T9722] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 184.626906][ T9722] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 184.626954][ T9722] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 184.626995][ T9722] ? rcu_is_watching+0x15/0xb0 [ 184.627028][ T9722] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 184.627063][ T9722] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 184.627094][ T9722] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.627125][ T9722] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.627164][ T9722] netlink_unicast+0x82f/0x9e0 [ 184.627210][ T9722] ? __pfx_netlink_unicast+0x10/0x10 [ 184.627248][ T9722] ? netlink_sendmsg+0x642/0xb30 [ 184.627270][ T9722] ? skb_put+0x11b/0x210 [ 184.627300][ T9722] netlink_sendmsg+0x805/0xb30 [ 184.627334][ T9722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.627361][ T9722] ? aa_sock_msg_perm+0xf1/0x1d0 [ 184.627387][ T9722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.627412][ T9722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.627438][ T9722] __sock_sendmsg+0x21c/0x270 [ 184.627478][ T9722] ____sys_sendmsg+0x505/0x830 [ 184.627514][ T9722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.627553][ T9722] ? import_iovec+0x74/0xa0 [ 184.627588][ T9722] ___sys_sendmsg+0x21f/0x2a0 [ 184.627619][ T9722] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.627691][ T9722] ? __fget_files+0x2a/0x420 [ 184.627712][ T9722] ? __fget_files+0x3a0/0x420 [ 184.627744][ T9722] __x64_sys_sendmsg+0x19b/0x260 [ 184.627776][ T9722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.627824][ T9722] ? do_syscall_64+0xbe/0x3b0 [ 184.627853][ T9722] do_syscall_64+0xfa/0x3b0 [ 184.627875][ T9722] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.627897][ T9722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.627919][ T9722] ? clear_bhb_loop+0x60/0xb0 [ 184.627946][ T9722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.627967][ T9722] RIP: 0033:0x7f00cb98eba9 [ 184.627988][ T9722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.628015][ T9722] RSP: 002b:00007f00c9bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.628039][ T9722] RAX: ffffffffffffffda RBX: 00007f00cbbd5fa0 RCX: 00007f00cb98eba9 [ 184.628055][ T9722] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 184.628069][ T9722] RBP: 00007f00cba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 184.628082][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.628095][ T9722] R13: 00007f00cbbd6038 R14: 00007f00cbbd5fa0 R15: 00007ffe17f8fd58 [ 184.628130][ T9722] [ 185.123383][ T9722] Mem-Info: [ 185.126556][ T9722] active_anon:4704 inactive_anon:0 isolated_anon:0 [ 185.126556][ T9722] active_file:3076 inactive_file:39922 isolated_file:0 [ 185.126556][ T9722] unevictable:768 dirty:199 writeback:0 [ 185.126556][ T9722] slab_reclaimable:11313 slab_unreclaimable:97455 [ 185.126556][ T9722] mapped:28983 shmem:1360 pagetables:1127 [ 185.126556][ T9722] sec_pagetables:0 bounce:0 [ 185.126556][ T9722] kernel_misc_reclaimable:0 [ 185.126556][ T9722] free:1330655 free_pcp:14419 free_cma:0 [ 185.179198][ T9722] Node 0 active_anon:18720kB inactive_anon:0kB active_file:12304kB inactive_file:159488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115944kB dirty:820kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12048kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 185.211093][ T9722] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 185.242170][ T9722] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.243705][ T9793] validate_nla: 2 callbacks suppressed [ 185.243724][ T9793] netlink: 'syz.0.1649': attribute type 5 has an invalid length. [ 185.272205][ T9722] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 185.290411][ T9722] Node 0 DMA32 free:1421692kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18776kB inactive_anon:0kB active_file:12304kB inactive_file:157928kB unevictable:1536kB writepending:820kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:38444kB local_pcp:17808kB free_cma:0kB [ 185.322793][ T9722] lowmem_reserve[]: 0 0 1 1 1 [ 185.327575][ T9722] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 185.357543][ T9722] lowmem_reserve[]: 0 0 0 0 0 [ 185.362407][ T9722] Node 1 Normal free:3885296kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18520kB local_pcp:9920kB free_cma:0kB [ 185.393739][ T9722] lowmem_reserve[]: 0 0 0 0 0 [ 185.398521][ T9722] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 185.411297][ T9722] Node 0 DMA32: 348*4kB (ME) 73*8kB (UM) 71*16kB (M) 199*32kB (UME) 88*64kB (UM) 40*128kB (UM) 37*256kB (UME) 40*512kB (UME) 26*1024kB (UM) 3*2048kB (UE) 327*4096kB (M) = 1422344kB [ 185.429600][ T9722] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 185.442054][ T9722] Node 1 Normal: 178*4kB (UME) 53*8kB (UME) 60*16kB (UME) 102*32kB (UME) 26*64kB (UME) 11*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3885296kB [ 185.461088][ T9722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.471362][ T9722] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.480921][ T9722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.490578][ T9722] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.500045][ T9722] 44354 total pagecache pages [ 185.504830][ T9722] 0 pages in swap cache [ 185.509022][ T9722] Free swap = 124996kB [ 185.513242][ T9722] Total swap = 124996kB [ 185.517447][ T9722] 2097051 pages RAM [ 185.521299][ T9722] 0 pages HighMem/MovableOnly [ 185.526070][ T9722] 425671 pages reserved [ 185.530246][ T9722] 0 pages cma reserved [ 185.727472][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'. [ 186.233764][ T9838] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1670'. [ 186.572951][ T9855] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 186.619866][ T9855] bond1: entered promiscuous mode [ 186.625633][ T9855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.748973][ T9861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.777394][ T9861] bond1: (slave bond2): making interface the new active one [ 186.797378][ T9861] bond2: entered promiscuous mode [ 186.808918][ T9861] bond1: (slave bond2): Enslaving as an active interface with an up link [ 186.931190][ T7738] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 187.396484][ T9895] !: renamed from dummy0 (while UP) [ 187.770245][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 187.794741][ T9916] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1703'. [ 188.300832][ T9937] pim6reg1: entered promiscuous mode [ 188.308400][ T9937] pim6reg1: entered allmulticast mode [ 188.812942][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 189.978351][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'. [ 190.024328][T10026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.047863][T10026] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 190.437728][T10041] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 190.552440][T10045] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1755'. [ 190.781207][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 191.500979][T10092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.515106][ T1107] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 191.757205][T10108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 191.888821][T10112] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 192.247282][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 192.391559][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1794'. [ 192.954071][T10169] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1806'. [ 193.101004][T10179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1810'. [ 193.534145][T10201] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.613137][T10205] netlink: 'syz.4.1823': attribute type 4 has an invalid length. [ 193.679703][T10205] netlink: 'syz.4.1823': attribute type 4 has an invalid length. [ 193.807323][T10213] netlink: 'syz.0.1825': attribute type 4 has an invalid length. [ 193.860010][T10216] netlink: 'syz.0.1825': attribute type 4 has an invalid length. [ 193.918523][T10218] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1828'. [ 193.968832][T10218] gretap0: entered promiscuous mode [ 194.038334][T10218] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1828'. [ 194.056193][T10218] 0ªî{X¹¦: renamed from gretap0 [ 194.095681][T10218] 0ªî{X¹¦: left promiscuous mode [ 194.111050][T10218] 0ªî{X¹¦: entered allmulticast mode [ 194.136190][T10228] netlink: 212264 bytes leftover after parsing attributes in process `syz.3.1832'. [ 194.142510][T10218] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 194.628372][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 194.812280][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 195.039645][T10277] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1855'. [ 195.516232][T10299] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1866'. [ 195.669217][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'. [ 195.686647][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 195.689147][T10306] chnl_net:caif_netlink_parms(): no params data found [ 195.700260][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1869'. [ 196.210872][T10330] bond1: left promiscuous mode [ 196.216353][T10330] bridge0: port 4(bond1) entered disabled state [ 196.243713][T10330] bridge0: port 3(batadv0) entered disabled state [ 196.257755][T10330] bridge_slave_1: left allmulticast mode [ 196.277240][T10330] bridge_slave_1: left promiscuous mode [ 196.294729][T10330] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.320040][T10330] bridge_slave_0: left allmulticast mode [ 196.328663][T10330] bridge_slave_0: left promiscuous mode [ 196.336575][T10330] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.408063][T10336] netlink: 'syz.3.1883': attribute type 9 has an invalid length. [ 196.416625][T10341] syz_tun: entered allmulticast mode [ 196.426507][T10336] netlink: 'syz.3.1883': attribute type 9 has an invalid length. [ 196.439571][T10334] hsr0 speed is unknown, defaulting to 1000 [ 196.467857][T10340] syz_tun: left allmulticast mode [ 196.884834][T10352] hsr_slave_0 (unregistering): left promiscuous mode [ 197.337071][T10376] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 197.378223][T10376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.403027][T10376] bond2: (slave geneve3): making interface the new active one [ 197.413635][T10376] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 197.448662][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b23bc00: rx timeout, send abort [ 197.724349][T10393] unknown channel width for channel at 909000KHz? [ 197.731173][T10393] unknown channel width for channel at 909000KHz? [ 197.846959][T10397] netlink: 'syz.4.1909': attribute type 3 has an invalid length. [ 197.887010][T10399] syzkaller1: entered promiscuous mode [ 197.895357][T10399] syzkaller1: entered allmulticast mode [ 197.958137][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b23bc00: abort rx timeout. Force session deactivation [ 198.440464][ T1083] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.720689][T10439] netlink: 'syz.3.1926': attribute type 10 has an invalid length. [ 198.731961][T10439] !: entered promiscuous mode [ 198.748123][T10439] bridge0: port 3(0!) entered blocking state [ 198.759545][T10439] bridge0: port 3(0!) entered disabled state [ 198.768867][T10439] !: entered allmulticast mode [ 198.785321][T10439] bridge0: port 3(0!) entered blocking state [ 198.791703][T10439] bridge0: port 3(0!) entered forwarding state [ 199.123247][T10453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.274287][T10469] __nla_validate_parse: 12 callbacks suppressed [ 199.274307][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1938'. [ 199.508695][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1943'. [ 199.664272][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.670665][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.064833][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 200.081149][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 200.107633][T10511] netlink: 'syz.4.1958': attribute type 15 has an invalid length. [ 200.123462][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 200.161250][ T7738] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 200.161259][T10511] netlink: 'syz.4.1958': attribute type 15 has an invalid length. [ 200.161298][ T7738] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 200.178286][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 200.198347][ T7738] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 200.216567][ T7738] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 200.284159][T10521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1963'. [ 201.460701][T10583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.705887][ T1083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.736302][ T1083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.869118][ T1083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.881511][ T1083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.969534][ T1083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.986369][ T1083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.054305][T10600] netlink: 'syz.3.2001': attribute type 2 has an invalid length. [ 202.062571][T10600] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2001'. [ 202.077922][T10600] nbd: must specify a device to reconfigure [ 202.103499][ T1083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.120034][ T1083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.213911][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.291837][ T1083] bridge_slave_1: left allmulticast mode [ 202.298379][ T1083] bridge_slave_1: left promiscuous mode [ 202.306639][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.321415][ T1083] bridge_slave_0: left allmulticast mode [ 202.337725][ T1083] bridge_slave_0: left promiscuous mode [ 202.352603][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.538517][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.551674][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.560336][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.570000][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.578044][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.613937][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 203.064284][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.083275][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.098313][ T1083] bond0 (unregistering): Released all slaves [ 203.211598][ T1083] bond1 (unregistering): (slave bond2): Releasing backup interface [ 203.219833][ T1083] bond2 (unregistering): left promiscuous mode [ 203.234768][ T1083] bond1 (unregistering): Released all slaves [ 203.388725][ T1083] bond2 (unregistering): Released all slaves [ 203.417893][T10637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2014'. [ 203.526842][T10610] hsr0 speed is unknown, defaulting to 1000 [ 204.263414][T10674] netlink: 'syz.1.2031': attribute type 12 has an invalid length. [ 204.316868][T10674] __nla_validate_parse: 2 callbacks suppressed [ 204.316886][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'. [ 204.345385][ T1083] hsr_slave_0: left promiscuous mode [ 204.369528][ T1083] hsr_slave_1: left promiscuous mode [ 204.395605][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.396187][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2033'. [ 204.403708][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.423347][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.438623][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.471611][ T1083] veth1_macvtap: left promiscuous mode [ 204.477906][ T1083] veth0_macvtap: left promiscuous mode [ 204.484366][ T1083] veth1_vlan: left promiscuous mode [ 204.491109][ T1083] veth0_vlan: left promiscuous mode [ 204.500408][T10682] nbd: device at index 3 is going down [ 204.512906][T10684] netlink: 'syz.4.2032': attribute type 10 has an invalid length. [ 204.693515][ T5185] Bluetooth: hci3: command tx timeout [ 205.108866][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 205.145563][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 205.543806][T10680] bridge0: port 3(syz_tun) entered blocking state [ 205.550653][T10680] bridge0: port 3(syz_tun) entered disabled state [ 205.562049][T10680] syz_tun: entered allmulticast mode [ 205.570213][T10680] syz_tun: entered promiscuous mode [ 205.576898][T10680] bridge0: port 3(syz_tun) entered blocking state [ 205.583690][T10680] bridge0: port 3(syz_tun) entered forwarding state [ 205.593048][T10674] netlink: 'syz.1.2031': attribute type 12 has an invalid length. [ 205.600824][T10684] bridge0: port 3(syz_tun) entered disabled state [ 205.600931][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'. [ 205.607564][T10684] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.625148][T10684] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.648745][T10684] bridge0: port 3(syz_tun) entered blocking state [ 205.655631][T10684] bridge0: port 3(syz_tun) entered forwarding state [ 205.662625][T10684] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.669792][T10684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.677354][T10684] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.684575][T10684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.701105][T10684] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 205.869139][T10610] chnl_net:caif_netlink_parms(): no params data found [ 206.243817][ T1083] ------------[ cut here ]------------ [ 206.249573][ T1083] WARNING: CPU: 0 PID: 1083 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0 [ 206.259292][ T1083] Modules linked in: [ 206.263509][ T1083] CPU: 0 UID: 0 PID: 1083 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 206.270508][T10723] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 206.273144][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 206.273192][ T1083] Workqueue: netns cleanup_net [ 206.273224][ T1083] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 206.273260][ T1083] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3b 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 31 e1 f7 e8 84 04 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 76 04 9d f7 90 0f 0b 90 e9 60 fe ff ff [ 206.273281][ T1083] RSP: 0018:ffffc90003d7f898 EFLAGS: 00010293 [ 206.327906][ T1083] RAX: ffffffff8a22ba7c RBX: ffff888033768000 RCX: ffff888026d79e00 [ 206.336466][ T1083] RDX: 0000000000000000 RSI: ffffffff8dba91be RDI: ffff888026d79e00 [ 206.345082][ T1083] RBP: ffffc90003d7f9b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6 [ 206.353589][ T1083] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffffffff8f632d80 [ 206.361617][ T1083] R13: 1ffff920007aff40 R14: ffff888033769480 R15: dffffc0000000000 [ 206.369668][ T1083] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 206.378713][ T1083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.385366][ T1083] CR2: 00007f6ecca22fe8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 206.393445][ T1083] Call Trace: [ 206.396803][ T1083] [ 206.399764][ T1083] xfrm_net_exit+0x2d/0x70 [ 206.404282][ T1083] ops_undo_list+0x49a/0x990 [ 206.408913][ T1083] ? __pfx_ops_undo_list+0x10/0x10 [ 206.414137][ T1083] ? do_raw_spin_unlock+0x122/0x240 [ 206.420144][ T1083] cleanup_net+0x4c5/0x800 [ 206.425506][ T1083] ? __pfx_cleanup_net+0x10/0x10 [ 206.430495][ T1083] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.435813][ T1083] ? process_scheduled_works+0x9ef/0x17b0 [ 206.442487][ T1083] ? process_scheduled_works+0x9ef/0x17b0 [ 206.448243][ T1083] process_scheduled_works+0xae1/0x17b0 [ 206.453920][ T1083] ? __pfx_process_scheduled_works+0x10/0x10 [ 206.460507][ T1083] worker_thread+0x8a0/0xda0 [ 206.465219][ T1083] kthread+0x70e/0x8a0 [ 206.469344][ T1083] ? __pfx_worker_thread+0x10/0x10 [ 206.474852][ T1083] ? __pfx_kthread+0x10/0x10 [ 206.479488][ T1083] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.484913][ T1083] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.490134][ T1083] ? __pfx_kthread+0x10/0x10 [ 206.495068][ T1083] ret_from_fork+0x436/0x7d0 [ 206.499696][ T1083] ? __pfx_ret_from_fork+0x10/0x10 [ 206.504890][ T1083] ? __switch_to_asm+0x39/0x70 [ 206.509684][ T1083] ? __switch_to_asm+0x33/0x70 [ 206.514522][ T1083] ? __pfx_kthread+0x10/0x10 [ 206.519149][ T1083] ret_from_fork_asm+0x1a/0x30 [ 206.524051][ T1083] [ 206.527116][ T1083] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 206.534415][ T1083] CPU: 0 UID: 0 PID: 1083 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 206.543894][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.553974][ T1083] Workqueue: netns cleanup_net [ 206.558768][ T1083] Call Trace: [ 206.562061][ T1083] [ 206.565103][ T1083] dump_stack_lvl+0x99/0x250 [ 206.569726][ T1083] ? __asan_memcpy+0x40/0x70 [ 206.574329][ T1083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.579537][ T1083] ? __pfx__printk+0x10/0x10 [ 206.584186][ T1083] vpanic+0x281/0x750 [ 206.588280][ T1083] ? __pfx__printk+0x10/0x10 [ 206.592887][ T1083] ? __pfx_vpanic+0x10/0x10 [ 206.597405][ T1083] ? is_bpf_text_address+0x292/0x2b0 [ 206.602741][ T1083] panic+0xb9/0xc0 [ 206.606475][ T1083] ? __pfx_panic+0x10/0x10 [ 206.610926][ T1083] __warn+0x31b/0x4b0 [ 206.614920][ T1083] ? xfrm_state_fini+0x26d/0x2f0 [ 206.619880][ T1083] ? xfrm_state_fini+0x26d/0x2f0 [ 206.624829][ T1083] report_bug+0x2be/0x4f0 [ 206.629181][ T1083] ? xfrm_state_fini+0x26d/0x2f0 [ 206.634134][ T1083] ? xfrm_state_fini+0x26d/0x2f0 [ 206.639173][ T1083] ? xfrm_state_fini+0x26f/0x2f0 [ 206.644198][ T1083] handle_bug+0x84/0x160 [ 206.648471][ T1083] exc_invalid_op+0x1a/0x50 [ 206.652995][ T1083] asm_exc_invalid_op+0x1a/0x20 [ 206.657854][ T1083] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 206.663425][ T1083] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3b 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 31 e1 f7 e8 84 04 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 76 04 9d f7 90 0f 0b 90 e9 60 fe ff ff [ 206.683043][ T1083] RSP: 0018:ffffc90003d7f898 EFLAGS: 00010293 [ 206.689129][ T1083] RAX: ffffffff8a22ba7c RBX: ffff888033768000 RCX: ffff888026d79e00 [ 206.697108][ T1083] RDX: 0000000000000000 RSI: ffffffff8dba91be RDI: ffff888026d79e00 [ 206.705082][ T1083] RBP: ffffc90003d7f9b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6 [ 206.713233][ T1083] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffffffff8f632d80 [ 206.721213][ T1083] R13: 1ffff920007aff40 R14: ffff888033769480 R15: dffffc0000000000 [ 206.729198][ T1083] ? xfrm_state_fini+0x26c/0x2f0 [ 206.734159][ T1083] ? xfrm_state_fini+0x26c/0x2f0 [ 206.739115][ T1083] xfrm_net_exit+0x2d/0x70 [ 206.743536][ T1083] ops_undo_list+0x49a/0x990 [ 206.748154][ T1083] ? __pfx_ops_undo_list+0x10/0x10 [ 206.753274][ T1083] ? do_raw_spin_unlock+0x122/0x240 [ 206.758487][ T1083] cleanup_net+0x4c5/0x800 [ 206.762930][ T1083] ? __pfx_cleanup_net+0x10/0x10 [ 206.767896][ T1083] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.773114][ T1083] ? process_scheduled_works+0x9ef/0x17b0 [ 206.778838][ T1083] ? process_scheduled_works+0x9ef/0x17b0 [ 206.784566][ T1083] process_scheduled_works+0xae1/0x17b0 [ 206.790144][ T1083] ? __pfx_process_scheduled_works+0x10/0x10 [ 206.796145][ T1083] worker_thread+0x8a0/0xda0 [ 206.800795][ T1083] kthread+0x70e/0x8a0 [ 206.804892][ T1083] ? __pfx_worker_thread+0x10/0x10 [ 206.810029][ T1083] ? __pfx_kthread+0x10/0x10 [ 206.814640][ T1083] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.819871][ T1083] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.825079][ T1083] ? __pfx_kthread+0x10/0x10 [ 206.829684][ T1083] ret_from_fork+0x436/0x7d0 [ 206.834291][ T1083] ? __pfx_ret_from_fork+0x10/0x10 [ 206.839431][ T1083] ? __switch_to_asm+0x39/0x70 [ 206.844203][ T1083] ? __switch_to_asm+0x33/0x70 [ 206.848981][ T1083] ? __pfx_kthread+0x10/0x10 [ 206.853768][ T1083] ret_from_fork_asm+0x1a/0x30 [ 206.858562][ T1083] [ 206.861747][ T1083] Kernel Offset: disabled [ 206.866076][ T1083] Rebooting in 86400 seconds..