last executing test programs: 7.680008848s ago: executing program 0 (id=5577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000480)=0x8) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="200027bd7000fbdbdf25010000000800010000000000080001000200000008000100000000000800010000000000080001000200000008000100010000000800020002000000080001000000000008000200020000000800020002000000"], 0x64}, 0x1, 0x0, 0x0, 0xfb08db3c480fbc82}, 0x24000880) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000010c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000001200)=0xe8) r14 = getpid() syz_open_procfs$namespace(r14, &(0x7f0000000040)='ns/time_for_children\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001300)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000001240)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0, 0x0}, &(0x7f0000001400)=0xc) sendmsg$netlink(r3, &(0x7f0000001500)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f00000006c0)=[{&(0x7f0000001e80)={0x280, 0x1f, 0x200, 0x70bd28, 0x25dfdbfc, "", [@nested={0x4, 0x5b}, @nested={0x16e, 0x14e, 0x0, 0x1, [@typed={0x4, 0x8, 0x0, 0x0, @binary}, @nested={0x4, 0x115}, @generic="99f3192f00a6891e94f1bb5e11c9bc4a789191a12dd7da5f7e3ef4225992a8a2aed9864c9a5c29103886f065eaeb4c217753f404510350782291765d2831f6bb5774497dcd9eedeac9b43b5093ebd7fe64801913d68a097289d86317c0b7dcaee6a45c27b09e88f3caf33eb43430912a138d059efebdf8ccce02837708dfc08bf9eb2156e4a40af44ec4aaf5b2c51d1e852cd54509991ecd4f4e3b2e1ed83b840c88d29afc8828ebd517e010465b5ee39e9d6d", @generic="b8be1be09fd3e9be77123005880a4de40427f06dfd88e43b03b28f8a9b3af7a08dc485831b180ec968c974fb500da17ca1f2de13b7134c53af3dcc4374a4b7b6abc7f10dc15f7db0f6789e9e1ca4442147299070c36d06333d4f7395a597928c54479a4584ac8b294066d91fb7da406cf00f99e5327245540c92374b207df8f1639162404ce747bb0d79b7b1cf4947ea2121031b5ec2928112d809c01d196e7ea7d0ec746263f42d22b0d63e18f2a6"]}, @nested={0xe4, 0x106, 0x0, 0x1, [@generic="dfb532b6d0cfbda60df7bbe0fa9a3174cdb657c88291cce8914723a9b581109d3b528cf2a2d7665b3615f82b1ebe9196af6bfb5bf4accf48936c8c7fb0ee11492dc2007c492d71fb786dc1444ffba1f074e52a21656720515f30ae0b9f66c446bfe67b9572bdf978115d3db45ccef75b4dcd2385312fb2cb60816daa16bd5c058d7ad81545f03006980fae5a1eb90104cd55451aaa6330a5d211fb1e30d3badb88a0d37ecf7cadb3eeff8cda098f5a1a794e9009b20e2dca8b1b6f7668a03474e4403653d9d95b0ded7e4bc24123a451c11955a6f135b4b08fd2324bbed8b176"]}, @typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x143, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x280}, {&(0x7f0000000b00)=ANY=[@ANYRES16=r13, @ANYRES64=r15, @ANYBLOB="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", @ANYRES8=r9, @ANYBLOB="0008a9c504d0454dbc54503606c151ae08caf9120cff86aa8a922a8d0821a0c9c7a62c507e46b6a98a08a942186763dd0a992fbb8b9638c36b06e6ae181e573b09cbc59dfbfef2f3ec518db755619ab80e573d743b7e2b71dc155fd84a1a408f52d1b41eab176666fa4c0767902bd05b6294182f1174bebf3a248d23ccb1b27055c90c44484b4f8d832c1400fc0020010000000000000000000000000001f77f87eb09e9ecf9a7aa6e5886847913808d18bec669079fda486a7f4fae54eab73d8b398bfb0844941427c3ea31730c5cd39db0eaaf18b149207463950631ebd97e709763442e573e7e246bcc1b96965412e7b5ffdc1ceb7d488f2bed82421bdbf41f2020e10273178214fd57aafd4161362e4e660b751eb8cc8a7ee554ce4c96c9ba375db1786d77d12b8d4d006e8ab82c6899a122a6dc49009f8ab42df8686fd1be2e814e79ea29425ea04ab37eb6dedd7a65c83415dd99ff9f48d3adcabfa07d3d35c852ecd40c184a"], 0x3e0}, {&(0x7f0000001540)={0x334, 0x1d, 0x0, 0x70bd28, 0x25dfdbfd, "", [@generic="805124073d451760d96056bd6236e9fb987cc199d13aa4e219580b92b83d1453833558b39d4b55c50d5535be1fabd4a95d9de3af79ac086479af3bf83c76138deb941fe6da2b2cbe372f6beb11de36731c4f9422f6e00826869f7aba8415f378f17a4448e4f653e3a73f5404c86d9ceb4bb0debeda1e511812f04c15ea4213eb9cb473a4417a82343b76cd44a1baee0b1438c133b857c68758f5c679453f1b0fa457f327c4f2505eb884b35ecc78268aa6584e7f54b912ebaf908bf0c6d1878afac096c83c0495228d373ad06562218f03c550dc815b6d6f6b80180ef199c5aee1426dbbdfed6d028325", @typed={0x8, 0x109, 0x0, 0x0, @pid}, @typed={0xf0, 0xab, 0x0, 0x0, @binary="496902260d2ec030632bda97e2c0dd8d3597fde040951ef214ccd02e38c58398175cf1e19cb89c7fc379d3122731bfbc977177635865ad8a08af7cd0ce355a11ed24dd4b869fc17ef0f7ffd4406aab7b389fdd535c1d621f614dff62de9faf347c5b3dd2ca285c6fbacab4d73d28de1d391e4359f0e7d56d039e8bdccc428b417b548fd166e272d191046e71fa19addf4c5b9c23e4d180f12b4500c264f8d493c3d4068727945117ceb921f09fbb6b38b21d8f703b44434429188dbda02521c067bb4c617885ca7866afc4713c60ba13ea81a3cf34375c7fa7ffeb251dcaef7dd81eda19a2a0221aa3d98800"}, @nested={0x135, 0x6e, 0x0, 0x1, [@typed={0xa8, 0x5f, 0x0, 0x0, @binary="f1858fb02e61fe05fb438d1b337ccfe128e29301173c6eb016f01dd1f6fb9d4d23bbf4ff8d6ccf5616cd1c4f31131d7d810f2ad3cf63cbf73b01ab8b36025ad9bfa39f0aa72e10042f9cd035401862465a9fe9d3496a67c28ec983232bd84026c71b7af5e7112447e4fbe1fc47770f51a15d2d54e4cdca959133cbd3dc8ceaa9cd06b78c7e290a3791f4af46caab9fd73c5fd31955704a478a8a680928c91eabf42d9b81"}, @generic="6c6be49bb8a281d9b4cecb10e486a45f6f7cff6b95e636493de91a178938868bdcb07b6fd71f7fecfdbb0f23771d8c575f97fabb1c83aa6319c36e999b4c5eeaa0db68bd6faf078237fc7be71299dd679beb2e07ef56ce670a4f74cfa573fc86ee29f756755b24cd6ddf401f9a36b961bf690949de517f6dcd05ed57c48948f8046b62a5fe5d6dd3b3"]}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r8}]}, 0x334}, {&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x338}, {&(0x7f0000004500)=ANY=[@ANYBLOB="282300003600000126bd7000ffdbdf257700298004002c00f6210728ef54e7c3f5d99c330a90d03b017d46cffbfc2125113ac354ae17ba78c156485121eb39dfdc9333dd32e843e2058811750ec6d2787ce66817e4ef1ad24f7cca899fcc36a477df9e04a138ad1dd6f62f2f726ce1c096f056db2547b6b043fea1b2221eea08001600", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="4f171808740475145e7944fb47c2125763108002fb73b44f42c9f80d0c57ee31ee64fa4fc0a795a1b2384c6fb539d93e63f7d59a1c02d0f84305c4a1ba0f1c7afb245f7464113a32bf6a9dd5ad8050fb3bc7d3458cc25d0a40832c27b436f44b009602a9b88db39cbe6f30b9563e03f206e8df8bf4f76fd701f380a655e663575396f763e7a0efe0bc6c62a3424ece64f01d74d72fd24143a7fa873831230fc0f51a39bd833186873daa1d259501c4800400bf804d1527629232d5c689575b0d60ea9b5522eb307bcadb5fa4f448a44a360092096426bfed8cfa93c7f6a099a3440b4757a2547204283ad260123b8a5dbe5783994133357e26eede4a76dee624d0e15edf300ce3177d51f6e27b3eb60d8dbeead255add8acdd36682d0af0dea4a5763f02de808c5467f8fe23f8a8fdcb60b55fb7683689b8fa28b8d3c66c831afdb955bc88b28328930eeebd48d847098e6108722dfff20cafe0f6cfe5d3e194e73cb57f544466bd1e26e0ef75d8a68ddbb807a2571c7c25135bcdf79c862e042ec8d7228522afcb9330fa75a7c8845095ae5c1761558607a204006b800800ae00", @ANYRES32=0x0, @ANYBLOB="abe1518e2f6069d38b5c087d8f330180f4668b2120e47e096a7e666c7e751299808fd61c4d08e6eb66b0ac37662dd1190b342d8d2841356ebb9bdc5cf862f6254500473f089b9d283665493391a6d8d6ebc7ca145ad5916999c7a8dbeb7fbbc73ee3aae01335a4d8545298027e7eb908176d5090d410e136e0d03587574e64ffeebf8d6422dd858b8e012f6a1b01f77e6f5621462158594905021558b4f7f8"], 0x2328}], 0x5, &(0x7f0000001440)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000000c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x10}, 0x4) r18 = gettid() pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r18, r19, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000580004002bbd7000fedbdf250008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r18, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.504230194s ago: executing program 0 (id=5579): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 7.268213037s ago: executing program 0 (id=5583): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x140b, 0xa0b, 0x170bd28, 0xa5dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x140b, 0xa0b, 0x170bd28, 0xa5dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) 7.035383494s ago: executing program 0 (id=5588): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2c385aa3d49108bc436a", 0x20) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)={0x0, {{0x2, 0x4e22, @broadcast}}}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) 6.993161424s ago: executing program 0 (id=5589): syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001600)={{0xa, 0x0, 0x2018ee68, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x0, {[0x6e4, 0xad, 0x99, 0x25a57970, 0x7, 0x20, 0x327, 0xadbf]}}, 0x5c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r4, 0x4}, 0x38) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa140, 0x0) write$tun(r5, &(0x7f0000000300)={@void, @void, @ipv6=@tipc_packet={0x7, 0x6, "01ce36", 0x12b9, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[@routing={0x87, 0x4, 0x0, 0x7, 0x0, [@private0, @remote]}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x66}, @hopopts={0x3b, 0x21f, '\x00', [@generic={0x40, 0x1000, "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"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x8, 0x97, "40ef38fc88b0d931cdbbf1d9aad42a564fa5fd5883e56c3132b11318cb0abac18079316de946ca6f1dc93838a9ffbe97487558f2faea96ccf5caae716340b2ba70514520fc2bd18d5235320dfbd102d1e1ffb7580812cc106f7b6a77fef702b8d292a46ae605d8579f6d09dbe9c23f64c06978dc5a270fca1437df17c52afa0475fab5172888d260299207099bc010ed16ec2c2669e502"}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x2}, @generic={0xfa, 0x21, "4b988d7144f2734d59e39a87a8d99263fb7955b4f6138f48e691e1a34b9f55d285"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x3a, 0x12, 0x4, 0x9, 0x5, 0xb4d4763db91e7def, 0x2, [@private0, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @routing={0x2b, 0x2, 0x2, 0x9f, 0x0, [@mcast2]}, @routing={0x3a, 0x8, 0x1, 0x4, 0x0, [@mcast2, @private2, @remote, @remote]}, @routing={0x0, 0x8, 0x0, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x13}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x1d, 0x2, 0x1, 0x4, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_named={{{{{0x29, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x9, 0x0, 0x2, 0xb, 0x3, 0x2, 0x7, 0x8000, 0x0, 0x4e24, 0x4e20}, 0x2, 0x4}, 0x3}}, [0x0]}}}}, 0x12e1) 6.201353408s ago: executing program 0 (id=5601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x4000800) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229bd7000fddbdf2510000000080001007063690011000200303030303a30303a31302e300000006c435daa69715f4400f44e995c562b25ef5c4854ee72060011000600000008001300010000000500140001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000011}, 0x4001) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x78, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4c}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a34951bc2473fb9de5bb04150bfbe00e87e9f218c911a0ed96585baa8dafc5abb81a9be2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.508226666s ago: executing program 3 (id=5630): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) syz_emit_ethernet(0xdd2, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd9c, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 3.45624391s ago: executing program 4 (id=5633): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000080)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1, 0x1}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/194, 0xc2}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4082, 0xff2}, {&(0x7f0000000a00)=""/229, 0xe5}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x40010020, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@empty, @in6=@loopback, 0x4e21, 0xaa78, 0x8, 0x8, 0x2, 0x80, 0xa0, 0xfa, 0x0, r1}, {0xd24, 0x1000, 0x3, 0xfffffffffffffff7, 0x1, 0xfffffffffffffff6, 0x100000000, 0x2}, {0x1, 0x58cf, 0x1, 0x28}, 0x8, 0x6e6bbd, 0x1, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x6c}, 0x2, @in6=@private2, 0x0, 0x3, 0x3, 0x7, 0x7, 0x59d2, 0xffff8001}}, 0xe8) 3.226261916s ago: executing program 1 (id=5636): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x140, 0x24, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x8}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9a01}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3a38}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4af7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2a}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x140}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) socket$inet6(0xa, 0x80000, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.026700429s ago: executing program 1 (id=5637): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xb, 0x3, 0x200}, {0x81, 0x5, 0x58, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040044) sendmmsg(r0, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0, 0x700}, {&(0x7f0000000200)="97ff70f871", 0x5}], 0x2}}], 0x1, 0x0) 1.98417829s ago: executing program 3 (id=5638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r4}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@empty}, 0x0, @in6=@private1}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.983638322s ago: executing program 4 (id=5639): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x8}) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) (async) r1 = socket(0x1e, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) listen(r1, 0x0) (async) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.941727398s ago: executing program 2 (id=5640): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r7 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x75, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0x12, "7434954373561de584b703c873459fc9"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x8, 0x0, [{0x1, 0x2}]}]}}}}}}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x6b}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x10) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xa8, @empty, 0x4}, 0x19) 1.91120785s ago: executing program 3 (id=5641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2400c051}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'rose0\x00', @random="e95a62bae9d1"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000000)=0x7f) syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e2200f79078b6"], 0x0) 1.77630007s ago: executing program 1 (id=5642): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r3, 0x3}, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x24000000, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x10) 1.709762626s ago: executing program 2 (id=5643): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'cpuset'}, {0x2b, 'devices'}, {0x2d, 'pids'}, {0x2d, 'rlimit'}, {0x2d, 'memory'}]}, 0x27) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) 1.593826463s ago: executing program 3 (id=5644): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="d9", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="d9", 0x1}], 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) close(r0) 1.524178291s ago: executing program 2 (id=5645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x6) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) write(r4, &(0x7f00000001c0)="b4", 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x20000080) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "b791c8", 0x88, 0x6, 0xff, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x5e, 0x4, 0x4, 0x2, 0x6, 0x20, 0x6c1, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}], @name_distributor={{0x60, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x200, 0x0, 0x1, 0xffff, 0x8, 0x2, 0x4e23, 0x4e20, 0x3, 0x1}, [{0x6, 0x4, 0x9, 0x5, 0x9, 0x6, 0x5, 0x3}, {0x7, 0x58, 0x6, 0x4, 0x30, 0x8001, 0x8, 0xb64}]}}}}}}, 0x0) 1.481789745s ago: executing program 1 (id=5646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$inet6(0xa, 0x0, 0xe256e000) sendto$inet6(r0, 0x0, 0x0, 0x30058880, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}, 0x1c) 1.443390093s ago: executing program 3 (id=5647): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b04000000000000000002000000640004"], 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28ffff00"/20, @ANYRES32=0x0, @ANYBLOB="070d000041c0000008000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.332063015s ago: executing program 2 (id=5648): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r9 = openat$cgroup_ro(r6, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000200)=""/15, 0x211000, 0x0, 0x6}, 0xffffffffffffffe2) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r10, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x10) 1.063136255s ago: executing program 4 (id=5649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200"], 0x390) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, 0x0, &(0x7f00000000c0)=""/85}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:75'], 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) 876.684852ms ago: executing program 4 (id=5650): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x40000000, 0x2, 0x1}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 728.057471ms ago: executing program 2 (id=5651): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000005540)=""/4093, 0xffd}, {&(0x7f0000000440)=""/207, 0xcf}], 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000000095f7ff0b9c4d1679"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x3, 0x3, 0x2, {0xa, 0x4e24, 0xfffffff7, @mcast2, 0x9}}}, 0x32) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa08004600002c00000029d00690430a210104ac1414aa9404010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x62}, 0x14) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000006440)={{0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, {0xa, 0x4e24, 0x17ef, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1, {[0xf, 0x7ff, 0x9, 0x5, 0xffffffff, 0xe4, 0x7, 0x7]}}, 0x5c) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r7, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2102, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffdb8, &(0x7f0000000280)={&(0x7f0000000380)=@delqdisc={0x0, 0x25, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd, 0x10}, {0x10, 0x5}, {0x3, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x519}, @qdisc_kind_options=@q_clsact, @qdisc_kind_options=@q_fq_pie={{}, {0x0, 0x2, [@TCA_FQ_PIE_ECN, @TCA_FQ_PIE_ECN]}}, @qdisc_kind_options=@q_tbf={{}, {0x0, 0x2, [@TCA_TBF_BURST={0x0, 0x6, 0x2}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0xfff}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r11, @ANYBLOB="01002dbd7000fbdbdf2501000000140002007767310000000000000000000000000004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) sendmsg$nl_generic(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x1138}, 0x1, 0x0, 0x0, 0x4091}, 0x4040) 602.845944ms ago: executing program 4 (id=5652): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'team_slave_0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x20, 0xf0, "9659071dcb7626e4d47ce3724921a780db11137343bdd180c894fa6a24704df6a65043e8dbf49de9a368807b69b10d5a708820429c734ce150405b569d98129cf9fec4438d3d3910bb17d2d94ec56abc2f96ec190cb57be126261048b1a94e49309f16552be21a0c54e009c1ff5e5092b1dc98b4be68266361a102113976a0584b09899aa6c6ce7cc9e40acf20a90f3e1a0855c096d0b3c72edd5563e22300175c3661b3914f3f5cc55c1958afc298243847b847d5d76754916159e131bae67ad2c7e1193e188e413225f72ab177100c900af0f741b27fb952ecba5343d3674e731b57ddc4ae4c4d72f58a24c448afaa"}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7}, 0x50) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x8000, 0x4}) write$cgroup_devices(r0, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) 513.581664ms ago: executing program 1 (id=5653): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000140)={0x2}, 0x8) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x800) getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000ff00000000000c0016800800020006000000060015000a"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) 231.460168ms ago: executing program 1 (id=5654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf3a2700000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x1, 0x0, 0x0, "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", 0x1, "2353a2ad8f792337b3610a014feea22617c1ecea"}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e292ac39b9d3382f"}, 0xb}}]}, 0x154}}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xfffffffe}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r9, 0x1, 0x62}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x7cc, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2c}}}]}}, {{0x8, 0x1, r8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcdf}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x31, 0xc, 0x4}, {0x100, 0x4, 0x5}, {0x2, 0x7, 0x36, 0x5}, {0x5, 0x5, 0x81, 0x1ff}, {0x9, 0x7, 0xe}, {0x7, 0x7f, 0x7, 0x4000000}, {0x4d0, 0x94, 0x2, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x73}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}]}}]}, 0x7cc}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) accept$ax25(r6, &(0x7f0000000340)={{0x3, @netrom}, [@null, @remote, @default, @null, @default, @null, @bcast, @netrom]}, &(0x7f0000000280)=0x48) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="06000000", @ANYRES16=r11, @ANYBLOB="00002dbd7000fbdbdf25070000002400028008000200d70000000800010009000000080001009b0300000400040004000400ac00048024000780080001001d00000008000300090000000800020008000000080001001e0000004c000780080003000004000008000100130000000800030001000100080002000000000008000200060000000800020004000000080001001c0000000800030000000000080003000900000014000780080003000700000008000200010000000c00078008000300020000000900010073797a30000000000c0007800800020000006826"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x40e0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r12, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000240)) shutdown(r12, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x8, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0xfffffffc}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0x800bad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x4, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x8, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xe, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0x7, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x20000, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffefc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x4}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x401, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x4430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xa7, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacb}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x1, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0x20dc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x4, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5f, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x3, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 230.767322ms ago: executing program 4 (id=5655): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x18103, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x5, 0x0, @void}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x800}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x200}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 152.12194ms ago: executing program 3 (id=5656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x80000001, 0x8}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0xd, 0x3, "a1784b8550b226b7ef"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 0s ago: executing program 2 (id=5657): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x1, 0x20, 0x4, 0x1, {{0x41, 0x4, 0x1, 0x4, 0x104, 0x66, 0x0, 0xb7, 0x4, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x73, 0x0, [{0x1, 0x5, "a166a8"}, {0x0, 0x6, "14ae6598"}, {0x6, 0xf, "e2383a4191ef826526ad5c253e"}, {0x5, 0x9, "adff2356b8d7ae"}, {0x1, 0x9, "a42511f5b313dd"}, {0x1, 0xf, "4b93817ee9a48e959c04d518ea"}, {0x6, 0xd, "000b2b4377b988b0cde37e"}, {0x0, 0xf, "2adafac97c11729f21d10e4fcc"}, {0x2, 0x7, "1c607ae8e0"}, {0x6, 0xf, "17bd9e41e7e4964fcf82d27e1f"}]}, @ssrr={0x89, 0x1f, 0xa4, [@remote, @multicast2, @loopback, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010100, @multicast1]}, @timestamp={0x44, 0xc, 0x64, 0x0, 0x0, [0x6, 0x5]}, @lsrr={0x83, 0x27, 0xd2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @loopback, @private=0xa010101, @private=0xa010100]}, @lsrr={0x83, 0x2b, 0xbd, [@rand_addr=0x64010101, @broadcast, @broadcast, @remote, @empty, @broadcast, @private=0xa010102, @broadcast, @multicast1, @loopback]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="50409d030e3bebc40e1080553ca233669b95b6d0cba443e58cca8be35f04df5a146eee2d074e91de0be695020d803c60ab9417df62bd6bee87bb5ca6033c84ef5f71120a479b17aeefa06525014a20e0821506a01b9cd54a0ebb6c039c84efec5bd87d1bad335c61354c20f45f100db2bbcf4959c3b9fe09100f8d8e1559625407fc90934d7a1056a158b59f4337c261e3612d315e02dfb94ec287915bb03be83d4adad828d9c60c0f487197b935c156ccc3bcf5bb0d460ee255eaffbea19281ba1d75f557ea3be80e699fe2a0", @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 477': attribute type 12 has an invalid length. [ 366.061607][T18341] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 366.287992][T18354] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 366.323891][T18357] sctp: [Deprecated]: syz.2.3483 (pid 18357) Use of int in max_burst socket option. [ 366.323891][T18357] Use struct sctp_assoc_value instead [ 366.423654][T18358] tipc: Enabled bearer , priority 0 [ 366.432145][T18358] syzkaller0: entered promiscuous mode [ 366.439174][T18358] syzkaller0: entered allmulticast mode [ 366.506091][ T55] block nbd0: Possible stuck request ffff888024ec0000: control (read@0,1024B). Runtime 180 seconds [ 366.517097][ T55] block nbd0: Possible stuck request ffff888024ec01c0: control (read@1024,1024B). Runtime 180 seconds [ 366.528908][ T55] block nbd0: Possible stuck request ffff888024ec0380: control (read@2048,1024B). Runtime 180 seconds [ 366.541319][ T55] block nbd0: Possible stuck request ffff888024ec0540: control (read@3072,1024B). Runtime 180 seconds [ 366.592061][T18361] tipc: Resetting bearer [ 366.736385][T18356] tipc: Resetting bearer [ 366.822621][T18356] tipc: Disabling bearer [ 366.841692][T18374] __nla_validate_parse: 3 callbacks suppressed [ 366.841709][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 366.904309][T18370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.079380][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3488'. [ 367.094600][T18391] netlink: 'syz.0.3489': attribute type 21 has an invalid length. [ 367.118935][T18391] netlink: 'syz.0.3489': attribute type 21 has an invalid length. [ 367.272013][T18404] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 367.441926][ T5935] IPVS: starting estimator thread 0... [ 367.470713][T18409] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 367.520797][T18416] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3497'. [ 367.529728][T18415] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 367.557736][T18410] IPVS: using max 29 ests per chain, 69600 per kthread [ 367.572233][T18416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3497'. [ 367.830520][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3503'. [ 367.884786][T18433] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3504'. [ 368.110250][T18445] netlink: 'syz.2.3506': attribute type 10 has an invalid length. [ 368.272252][T18445] batman_adv: batadv0: Adding interface: team0 [ 368.293976][T18445] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.369112][T18445] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 368.573541][T18459] syzkaller0: entered allmulticast mode [ 368.634761][T18468] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 368.662979][T18472] x_tables: ip_tables: udp match: only valid for protocol 17 [ 368.673289][T18462] tipc: Resetting bearer [ 368.684887][T18476] netlink: 'syz.4.3514': attribute type 21 has an invalid length. [ 368.751233][T18462] tipc: Resetting bearer [ 368.764131][T18476] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3514'. [ 368.774100][T18462] tipc: Resetting bearer [ 368.995373][T18473] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3515'. [ 369.017849][T18473] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3515'. [ 369.027756][T18475] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3515'. [ 369.171054][T18462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 369.177280][T18462] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 369.340829][T18462] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 369.356344][T18462] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 369.502652][T18462] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.523986][T18462] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 369.615744][T18520] netlink: 'syz.2.3528': attribute type 3 has an invalid length. [ 369.634467][T18522] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 369.664971][T18462] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.671726][T18522] netlink: 'syz.4.3529': attribute type 2 has an invalid length. [ 369.681632][T18462] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 369.809189][T18462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 369.822791][T18462] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 369.982083][T18533] tipc: Enabling of bearer rejected, failed to enable media [ 370.216881][T18554] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 370.304099][T18533] netlink: 'syz.2.3533': attribute type 143 has an invalid length. [ 370.527943][T18572] netlink: 'syz.1.3541': attribute type 21 has an invalid length. [ 371.421391][T18627] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 371.444837][T18627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.492853][T18627] team0: Device gtp0 is of different type [ 371.544538][T18626] syzkaller0: entered promiscuous mode [ 371.552700][T18626] syzkaller0: entered allmulticast mode [ 371.573551][T18629] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 371.854335][T18629] tipc: Enabled bearer , priority 0 [ 371.861847][T18633] syzkaller0: entered promiscuous mode [ 371.868507][T18633] syzkaller0: entered allmulticast mode [ 371.933444][T18639] __nla_validate_parse: 9 callbacks suppressed [ 371.933462][T18639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3564'. [ 372.056256][T18643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3566'. [ 372.169598][T18628] tipc: Resetting bearer [ 372.233818][T18628] tipc: Disabling bearer [ 372.283202][T18647] validate_nla: 1 callbacks suppressed [ 372.283225][T18647] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 372.311591][T18646] tipc: Enabled bearer , priority 0 [ 372.348457][T18641] tipc: Enabling of bearer rejected, already enabled [ 372.367615][T18650] syzkaller0: entered promiscuous mode [ 372.387091][T18650] syzkaller0: entered allmulticast mode [ 372.551027][T18650] tipc: Resetting bearer [ 372.646090][T18650] tipc: Disabling bearer [ 372.682306][T18669] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3572'. [ 372.806995][T18672] netlink: 'syz.0.3573': attribute type 33 has an invalid length. [ 372.809024][T18675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'. [ 372.826104][T18675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'. [ 372.836409][T18672] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 373.390879][T18703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 373.429264][T18703] chnl_net:caif_netlink_parms(): no params data found [ 373.457959][T18710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3582'. [ 373.487217][T18700] can: request_module (can-proto-0) failed. [ 373.753751][T18720] syz.2.3588: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 373.799561][T18720] CPU: 1 UID: 0 PID: 18720 Comm: syz.2.3588 Not tainted syzkaller #0 PREEMPT(full) [ 373.799590][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.799605][T18720] Call Trace: [ 373.799613][T18720] [ 373.799622][T18720] dump_stack_lvl+0x189/0x250 [ 373.799652][T18720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.799673][T18720] ? __pfx__printk+0x10/0x10 [ 373.799697][T18720] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.799726][T18720] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.799748][T18720] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 373.799771][T18720] warn_alloc+0x214/0x310 [ 373.799797][T18720] ? stack_depot_save_flags+0x40/0x860 [ 373.799823][T18720] ? __pfx_warn_alloc+0x10/0x10 [ 373.799848][T18720] ? kasan_save_track+0x4f/0x80 [ 373.799871][T18720] ? xskq_create+0x56/0x170 [ 373.799885][T18720] ? xsk_init_queue+0xb0/0x110 [ 373.799899][T18720] ? xsk_setsockopt+0x4dc/0x8d0 [ 373.799921][T18720] ? do_sock_setsockopt+0x17c/0x1b0 [ 373.799940][T18720] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 373.799957][T18720] ? do_syscall_64+0xfa/0x3b0 [ 373.799973][T18720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.800000][T18720] __vmalloc_node_range_noprof+0x125/0x12f0 [ 373.800053][T18720] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 373.800083][T18720] ? __kasan_kmalloc+0x93/0xb0 [ 373.800108][T18720] vmalloc_user_noprof+0xad/0xf0 [ 373.800131][T18720] ? xskq_create+0xbf/0x170 [ 373.800148][T18720] xskq_create+0xbf/0x170 [ 373.800169][T18720] xsk_init_queue+0xb0/0x110 [ 373.800187][T18720] xsk_setsockopt+0x4dc/0x8d0 [ 373.800213][T18720] ? __pfx_xsk_setsockopt+0x10/0x10 [ 373.800237][T18720] ? __pfx_aa_sk_perm+0x10/0x10 [ 373.800264][T18720] ? aa_sock_opt_perm+0xff/0x1b0 [ 373.800284][T18720] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 373.800301][T18720] ? __pfx_xsk_setsockopt+0x10/0x10 [ 373.800327][T18720] do_sock_setsockopt+0x17c/0x1b0 [ 373.800352][T18720] __x64_sys_setsockopt+0x13f/0x1b0 [ 373.800375][T18720] do_syscall_64+0xfa/0x3b0 [ 373.800392][T18720] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.800407][T18720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.800422][T18720] ? clear_bhb_loop+0x60/0xb0 [ 373.800442][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.800467][T18720] RIP: 0033:0x7fce9cb8eec9 [ 373.800486][T18720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.800501][T18720] RSP: 002b:00007fce9da2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 373.800520][T18720] RAX: ffffffffffffffda RBX: 00007fce9cde5fa0 RCX: 00007fce9cb8eec9 [ 373.800534][T18720] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 373.800546][T18720] RBP: 00007fce9cc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 373.800557][T18720] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.800567][T18720] R13: 00007fce9cde6038 R14: 00007fce9cde5fa0 R15: 00007ffc96384ce8 [ 373.800595][T18720] [ 373.805094][T18720] Mem-Info: [ 374.150862][T18720] active_anon:4793 inactive_anon:0 isolated_anon:0 [ 374.150862][T18720] active_file:3269 inactive_file:40003 isolated_file:0 [ 374.150862][T18720] unevictable:768 dirty:139 writeback:0 [ 374.150862][T18720] slab_reclaimable:13232 slab_unreclaimable:127765 [ 374.150862][T18720] mapped:29236 shmem:1375 pagetables:1401 [ 374.150862][T18720] sec_pagetables:0 bounce:0 [ 374.150862][T18720] kernel_misc_reclaimable:0 [ 374.150862][T18720] free:1298659 free_pcp:14199 free_cma:0 [ 374.234486][T18720] Node 0 active_anon:19372kB inactive_anon:0kB active_file:13076kB inactive_file:159808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116944kB dirty:556kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14848kB pagetables:5068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.311630][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3599'. [ 374.328679][T18720] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.366998][T18739] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3595'. [ 374.384525][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3599'. [ 374.399978][T18720] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.524162][T18720] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 374.549661][T18720] Node 0 DMA32 free:1284452kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19324kB inactive_anon:0kB active_file:13076kB inactive_file:158252kB unevictable:1536kB writepending:256kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:44768kB local_pcp:20220kB free_cma:0kB [ 374.625000][T18720] lowmem_reserve[]: 0 0 1 1 1 [ 374.665501][T18720] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1556kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 374.724985][T18720] lowmem_reserve[]: 0 0 0 0 0 [ 374.754371][T18720] Node 1 Normal free:3893584kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12928kB local_pcp:5504kB free_cma:0kB [ 374.830148][T18720] lowmem_reserve[]: 0 0 0 0 0 [ 374.835023][T18720] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.861135][T18720] Node 0 DMA32: 852*4kB (UM) 519*8kB (UM) 210*16kB (UM) 68*32kB (UME) 26*64kB (ME) 417*128kB (UME) 505*256kB (UM) 270*512kB (UM) 100*1024kB (UME) 3*2048kB (ME) 205*4096kB (UM) = 1283880kB [ 374.880185][T18720] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 374.987580][T18720] Node 1 Normal: 192*4kB (UME) 46*8kB (UME) 40*16kB (UME) 167*32kB (UME) 40*64kB (UME) 9*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3893584kB [ 375.058084][T18720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.077590][T18720] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 375.079188][T18786] xt_l2tp: missing protocol rule (udp|l2tpip) [ 375.086923][T18720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.086945][T18720] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 375.086958][T18720] 44644 total pagecache pages [ 375.086979][T18720] 0 pages in swap cache [ 375.162471][T18720] Free swap = 124996kB [ 375.165196][T18786] batadv_slave_1: entered promiscuous mode [ 375.166662][T18720] Total swap = 124996kB [ 375.166677][T18720] 2097051 pages RAM [ 375.166685][T18720] 0 pages HighMem/MovableOnly [ 375.166693][T18720] 425672 pages reserved [ 375.200433][T18720] 0 pages cma reserved [ 375.349486][T18785] batadv_slave_1: left promiscuous mode [ 375.410253][T18800] netlink: 'syz.2.3611': attribute type 11 has an invalid length. [ 375.509943][T18804] IPVS: set_ctl: invalid protocol: 98 172.20.20.10:20003 [ 376.019414][T18827] netlink: 'syz.1.3618': attribute type 1 has an invalid length. [ 376.038266][T18824] netlink: 'syz.0.3615': attribute type 1 has an invalid length. [ 376.047801][T18824] nbd: illegal input index 1048576 [ 376.313968][T18841] vlan2: entered allmulticast mode [ 376.323213][T18841] bond0: entered allmulticast mode [ 376.331836][T18841] bond_slave_0: entered allmulticast mode [ 376.338036][T18841] bond_slave_1: entered allmulticast mode [ 376.808558][T18864] smc: net device erspan0 erased user defined pnetid SYZ0 [ 377.156734][T18879] netlink: 'syz.4.3634': attribute type 10 has an invalid length. [ 377.192928][T18879] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.221695][T18879] bond0: (slave team0): Enslaving as an active interface with an up link [ 377.283780][T18890] __nla_validate_parse: 12 callbacks suppressed [ 377.283801][T18890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3636'. [ 377.328073][T18891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3636'. [ 377.544924][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3642'. [ 377.652479][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'. [ 377.713018][T18912] sctp: [Deprecated]: syz.3.3643 (pid 18912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.713018][T18912] Use struct sctp_sack_info instead [ 377.761248][T18926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'. [ 377.790648][T18921] team0: Device ip6gre2 is of different type [ 377.833328][T18926] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 377.997381][T18939] netlink: 'syz.3.3652': attribute type 21 has an invalid length. [ 378.012832][T18940] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 378.041047][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3652'. [ 378.042526][T18940] netlink: 'syz.2.3650': attribute type 11 has an invalid length. [ 378.210738][T18950] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 378.294026][T18960] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 378.318944][T18958] syzkaller0: entered promiscuous mode [ 378.334419][T18958] syzkaller0: entered allmulticast mode [ 378.353404][T18956] tipc: Enabled bearer , priority 0 [ 378.401791][T18965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3658'. [ 378.433632][T18956] tipc: Resetting bearer [ 378.480358][T18956] tipc: Disabling bearer [ 378.506632][T18970] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3661'. [ 378.662845][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 379.142823][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'. [ 379.541758][T19014] bond0: (slave team0): Releasing backup interface [ 379.554658][T19014] team0 (unregistering): Port device team_slave_0 removed [ 379.564593][T19014] team0 (unregistering): Port device team_slave_1 removed [ 379.612888][T19015] sysfs: cannot create duplicate filename '/class/ieee80211/!瀵$蘒L賤y岗噕褒賉D寃漽R3怆p(@O>评朠凼aG' [ 379.635309][T19015] CPU: 0 UID: 0 PID: 19015 Comm: syz.4.3673 Not tainted syzkaller #0 PREEMPT(full) [ 379.635336][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.635347][T19015] Call Trace: [ 379.635354][T19015] [ 379.635362][T19015] dump_stack_lvl+0x189/0x250 [ 379.635392][T19015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.635413][T19015] ? __pfx__printk+0x10/0x10 [ 379.635448][T19015] ? kernfs_path_from_node+0x2f/0x290 [ 379.635467][T19015] ? kernfs_path_from_node+0x250/0x290 [ 379.635484][T19015] ? kernfs_path_from_node+0x2f/0x290 [ 379.635507][T19015] sysfs_warn_dup+0x8e/0xa0 [ 379.635527][T19015] sysfs_do_create_link_sd+0xc0/0x110 [ 379.635548][T19015] device_add_class_symlinks+0x1cf/0x240 [ 379.635574][T19015] device_add+0x475/0xb50 [ 379.635599][T19015] wiphy_register+0x1ba6/0x28d0 [ 379.635638][T19015] ? __pfx_wiphy_register+0x10/0x10 [ 379.635656][T19015] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 379.635687][T19015] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 379.635714][T19015] ieee80211_register_hw+0x3484/0x4100 [ 379.635753][T19015] ? ieee80211_register_hw+0x1411/0x4100 [ 379.635786][T19015] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 379.635813][T19015] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.635846][T19015] ? __hrtimer_setup+0x187/0x210 [ 379.635862][T19015] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 379.635883][T19015] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 379.635942][T19015] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 379.635963][T19015] ? trace_kmalloc+0x1f/0xd0 [ 379.635987][T19015] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 379.636008][T19015] ? kstrndup+0xbf/0x160 [ 379.636038][T19015] hwsim_new_radio_nl+0xea4/0x1b10 [ 379.636064][T19015] ? __pfx___nla_validate_parse+0x10/0x10 [ 379.636100][T19015] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 379.636160][T19015] ? __nla_parse+0x40/0x60 [ 379.636182][T19015] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 379.636214][T19015] genl_family_rcv_msg_doit+0x215/0x300 [ 379.636244][T19015] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 379.636281][T19015] ? bpf_lsm_capable+0x9/0x20 [ 379.636301][T19015] ? security_capable+0x7e/0x2e0 [ 379.636332][T19015] genl_rcv_msg+0x60e/0x790 [ 379.636363][T19015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.636383][T19015] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 379.636437][T19015] netlink_rcv_skb+0x205/0x470 [ 379.636453][T19015] ? __lock_acquire+0xab9/0xd20 [ 379.636476][T19015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.636500][T19015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.636541][T19015] ? down_read+0x1ad/0x2e0 [ 379.636564][T19015] genl_rcv+0x28/0x40 [ 379.636583][T19015] netlink_unicast+0x82f/0x9e0 [ 379.636618][T19015] ? __pfx_netlink_unicast+0x10/0x10 [ 379.636643][T19015] ? netlink_sendmsg+0x642/0xb30 [ 379.636659][T19015] ? skb_put+0x11b/0x210 [ 379.636683][T19015] netlink_sendmsg+0x805/0xb30 [ 379.636713][T19015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.636736][T19015] ? aa_sock_msg_perm+0xf1/0x1d0 [ 379.636757][T19015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.636775][T19015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.636794][T19015] __sock_sendmsg+0x219/0x270 [ 379.636822][T19015] ____sys_sendmsg+0x505/0x830 [ 379.636850][T19015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.636883][T19015] ? import_iovec+0x74/0xa0 [ 379.636908][T19015] ___sys_sendmsg+0x21f/0x2a0 [ 379.636932][T19015] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.636997][T19015] ? __fget_files+0x2a/0x420 [ 379.637013][T19015] ? __fget_files+0x3a0/0x420 [ 379.637042][T19015] __x64_sys_sendmsg+0x19b/0x260 [ 379.637066][T19015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.637098][T19015] ? rcu_is_watching+0x15/0xb0 [ 379.637122][T19015] ? do_syscall_64+0xbe/0x3b0 [ 379.637146][T19015] do_syscall_64+0xfa/0x3b0 [ 379.637162][T19015] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.637180][T19015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.637196][T19015] ? clear_bhb_loop+0x60/0xb0 [ 379.637217][T19015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.637232][T19015] RIP: 0033:0x7f3c3a98eec9 [ 379.637248][T19015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.637261][T19015] RSP: 002b:00007f3c3b893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.637280][T19015] RAX: ffffffffffffffda RBX: 00007f3c3abe6090 RCX: 00007f3c3a98eec9 [ 379.637296][T19015] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 379.637307][T19015] RBP: 00007f3c3aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 379.637318][T19015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.637328][T19015] R13: 00007f3c3abe6128 R14: 00007f3c3abe6090 R15: 00007ffde0512138 [ 379.637360][T19015] [ 380.151466][T19033] pim6reg: entered allmulticast mode [ 380.180468][T19021] sysfs: cannot create duplicate filename '/class/ieee80211/!瀵$蘒L賤y岗噕褒賉D寃漽R3怆p(@O>评朠凼aG' [ 380.193610][T19021] CPU: 0 UID: 0 PID: 19021 Comm: syz.4.3673 Not tainted syzkaller #0 PREEMPT(full) [ 380.193634][T19021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.193645][T19021] Call Trace: [ 380.193652][T19021] [ 380.193660][T19021] dump_stack_lvl+0x189/0x250 [ 380.193689][T19021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.193709][T19021] ? __pfx__printk+0x10/0x10 [ 380.193737][T19021] ? kernfs_path_from_node+0x2f/0x290 [ 380.193756][T19021] ? kernfs_path_from_node+0x250/0x290 [ 380.193773][T19021] ? kernfs_path_from_node+0x2f/0x290 [ 380.193796][T19021] sysfs_warn_dup+0x8e/0xa0 [ 380.193814][T19021] sysfs_do_create_link_sd+0xc0/0x110 [ 380.193835][T19021] device_add_class_symlinks+0x1cf/0x240 [ 380.193861][T19021] device_add+0x475/0xb50 [ 380.193884][T19021] wiphy_register+0x1ba6/0x28d0 [ 380.193920][T19021] ? __pfx_wiphy_register+0x10/0x10 [ 380.193936][T19021] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 380.193967][T19021] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 380.193993][T19021] ieee80211_register_hw+0x3484/0x4100 [ 380.194032][T19021] ? ieee80211_register_hw+0x1411/0x4100 [ 380.194070][T19021] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 380.194096][T19021] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.194129][T19021] ? __hrtimer_setup+0x187/0x210 [ 380.194145][T19021] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 380.194175][T19021] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 380.194233][T19021] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 380.194254][T19021] ? trace_kmalloc+0x1f/0xd0 [ 380.194272][T19021] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 380.194293][T19021] ? kstrndup+0xbf/0x160 [ 380.194322][T19021] hwsim_new_radio_nl+0xea4/0x1b10 [ 380.194349][T19021] ? __pfx___nla_validate_parse+0x10/0x10 [ 380.194383][T19021] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.194420][T19021] ? __nla_parse+0x40/0x60 [ 380.194441][T19021] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 380.194469][T19021] genl_family_rcv_msg_doit+0x215/0x300 [ 380.194498][T19021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 380.194534][T19021] ? bpf_lsm_capable+0x9/0x20 [ 380.194553][T19021] ? security_capable+0x7e/0x2e0 [ 380.194584][T19021] genl_rcv_msg+0x60e/0x790 [ 380.194611][T19021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.194630][T19021] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.194669][T19021] netlink_rcv_skb+0x205/0x470 [ 380.194685][T19021] ? __lock_acquire+0xab9/0xd20 [ 380.194707][T19021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.194729][T19021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.194770][T19021] ? down_read+0x1ad/0x2e0 [ 380.194792][T19021] genl_rcv+0x28/0x40 [ 380.194810][T19021] netlink_unicast+0x82f/0x9e0 [ 380.194844][T19021] ? __pfx_netlink_unicast+0x10/0x10 [ 380.194869][T19021] ? netlink_sendmsg+0x642/0xb30 [ 380.194884][T19021] ? skb_put+0x11b/0x210 [ 380.194908][T19021] netlink_sendmsg+0x805/0xb30 [ 380.194937][T19021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.194959][T19021] ? aa_sock_msg_perm+0xf1/0x1d0 [ 380.194978][T19021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.194995][T19021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.195013][T19021] __sock_sendmsg+0x219/0x270 [ 380.195039][T19021] ____sys_sendmsg+0x505/0x830 [ 380.195063][T19021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.195091][T19021] ? import_iovec+0x74/0xa0 [ 380.195117][T19021] ___sys_sendmsg+0x21f/0x2a0 [ 380.195140][T19021] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.195213][T19021] ? __fget_files+0x2a/0x420 [ 380.195228][T19021] ? __fget_files+0x3a0/0x420 [ 380.195257][T19021] __x64_sys_sendmsg+0x19b/0x260 [ 380.195280][T19021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.195315][T19021] ? do_user_addr_fault+0xc8a/0x1390 [ 380.195345][T19021] ? do_syscall_64+0xbe/0x3b0 [ 380.195369][T19021] do_syscall_64+0xfa/0x3b0 [ 380.195385][T19021] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.195403][T19021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.195419][T19021] ? clear_bhb_loop+0x60/0xb0 [ 380.195440][T19021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.195456][T19021] RIP: 0033:0x7f3c3a98eec9 [ 380.195473][T19021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.195487][T19021] RSP: 002b:00007f3c3b872038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.195505][T19021] RAX: ffffffffffffffda RBX: 00007f3c3abe6180 RCX: 00007f3c3a98eec9 [ 380.195517][T19021] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 380.195528][T19021] RBP: 00007f3c3aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 380.195538][T19021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.195549][T19021] R13: 00007f3c3abe6218 R14: 00007f3c3abe6180 R15: 00007ffde0512138 [ 380.195581][T19021] [ 380.694335][T19035] pim6reg: left allmulticast mode [ 380.763421][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3679'. [ 380.850248][T19041] tipc: Enabled bearer , priority 0 [ 380.868605][T19044] tipc: Enabling of bearer rejected, already enabled [ 380.883156][T19041] syzkaller0: entered promiscuous mode [ 380.888752][T19041] syzkaller0: entered allmulticast mode [ 381.076325][T19065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.146571][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.160028][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.173177][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.184764][T19058] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 381.203892][T19058] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 381.237886][T19040] tipc: Resetting bearer [ 381.279300][T19040] tipc: Disabling bearer [ 381.308736][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.317162][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.325490][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.344886][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.381508][T19076] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 381.464674][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.536555][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.579768][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.604250][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.623610][T19093] netlink: 'syz.1.3696': attribute type 13 has an invalid length. [ 381.705190][T19102] netlink: 'syz.0.3699': attribute type 1 has an invalid length. [ 381.732384][T19093] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.739698][T19093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.747289][T19093] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.754474][T19093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.815887][T19093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.835582][T19058] wg1 speed is unknown, defaulting to 1000 [ 381.874728][T19112] : renamed from vlan1 (while UP) [ 382.146699][T19128] netlink: 'syz.3.3707': attribute type 1 has an invalid length. [ 382.172262][T19126] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 382.203014][T19133] netlink: 'syz.2.3706': attribute type 2 has an invalid length. [ 382.213542][T19138] netlink: 'syz.3.3707': attribute type 9 has an invalid length. [ 382.237969][T19133] netlink: 'syz.2.3706': attribute type 1 has an invalid length. [ 382.247528][T19138] netlink: 'syz.3.3707': attribute type 6 has an invalid length. [ 382.271832][T19138] netlink: 'syz.3.3707': attribute type 7 has an invalid length. [ 382.287400][T19128] bond2: entered promiscuous mode [ 382.298656][T19128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.341867][T19141] __nla_validate_parse: 6 callbacks suppressed [ 382.341913][T19141] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3703'. [ 382.420733][T19128] bond2: (slave bridge2): making interface the new active one [ 382.428889][T19128] bridge2: entered promiscuous mode [ 382.435524][T19128] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 382.541257][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'. [ 382.565418][T19147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3710'. [ 382.582532][T19147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3710'. [ 382.603249][T19156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3710'. [ 382.629216][T19157] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3713'. [ 382.685983][T19150] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3712'. [ 382.906686][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3716'. [ 383.052888][T19179] validate_nla: 2 callbacks suppressed [ 383.052908][T19179] netlink: 'syz.4.3718': attribute type 30 has an invalid length. [ 383.149921][T19192] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3723'. [ 383.210733][T19188] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 383.247827][T19188] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 383.281884][T19188] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 383.391793][T19206] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3727'. [ 383.742123][T19235] netlink: 'syz.3.3733': attribute type 4 has an invalid length. [ 384.029420][T19245] sock: sock_set_timeout: `syz.1.3736' (pid 19245) tries to set negative timeout [ 384.459163][T19276] netlink: 'syz.4.3748': attribute type 1 has an invalid length. [ 384.556915][T19291] syzkaller0: entered promiscuous mode [ 384.568632][T19291] syzkaller0: entered allmulticast mode [ 384.653385][T19297] netlink: 'syz.1.3755': attribute type 16 has an invalid length. [ 384.663447][T19297] netlink: 'syz.1.3755': attribute type 17 has an invalid length. [ 384.686822][T19297] netlink: 'syz.1.3755': attribute type 27 has an invalid length. [ 384.708503][T19297] lo: entered promiscuous mode [ 384.713320][T19297] lo: entered allmulticast mode [ 384.768218][T19297] tunl0: entered promiscuous mode [ 384.773302][T19297] tunl0: entered allmulticast mode [ 384.791586][T19297] gre0: entered promiscuous mode [ 384.796767][T19297] gre0: entered allmulticast mode [ 384.813612][T19297] gretap0: entered promiscuous mode [ 384.830986][T19297] gretap0: entered allmulticast mode [ 384.839361][T19297] erspan0: entered promiscuous mode [ 384.847320][T19297] erspan0: entered allmulticast mode [ 384.848730][ T5240] udevd[5240]: worker [10450] /devices/virtual/block/nbd0 timeout; kill it [ 384.854111][T19297] ip_vti0: entered promiscuous mode [ 384.867092][T19297] ip_vti0: entered allmulticast mode [ 384.874126][T19297] ip6_vti0: entered promiscuous mode [ 384.880478][T19297] ip6_vti0: entered allmulticast mode [ 384.882370][ T5240] udevd[5240]: seq 14596 '/devices/virtual/block/nbd0' killed [ 384.893437][T19297] sit0: entered promiscuous mode [ 384.893458][T19297] sit0: entered allmulticast mode [ 384.894284][T19297] ip6tnl0: entered promiscuous mode [ 384.910734][T19297] ip6tnl0: entered allmulticast mode [ 384.919720][T19297] ip6gre0: entered promiscuous mode [ 384.925081][T19297] ip6gre0: entered allmulticast mode [ 384.932312][T19297] syz_tun: entered promiscuous mode [ 384.938274][T19297] syz_tun: entered allmulticast mode [ 384.946581][T19297] ip6gretap0: entered promiscuous mode [ 384.952603][T19297] ip6gretap0: entered allmulticast mode [ 384.960094][T19297] bridge0: entered promiscuous mode [ 384.965476][T19297] bridge0: entered allmulticast mode [ 384.973579][T19297] vcan0: entered promiscuous mode [ 384.979341][T19297] vcan0: entered allmulticast mode [ 384.986589][T19297] bond0: entered promiscuous mode [ 384.992170][T19297] bond_slave_0: entered promiscuous mode [ 384.999656][T19297] bond_slave_1: entered promiscuous mode [ 385.006733][T19297] bond0: entered allmulticast mode [ 385.012054][T19297] bond_slave_0: entered allmulticast mode [ 385.018270][T19297] bond_slave_1: entered allmulticast mode [ 385.031369][T19297] team0: entered promiscuous mode [ 385.044086][T19321] netlink: 'syz.0.3757': attribute type 1 has an invalid length. [ 385.052719][T19297] team_slave_0: entered promiscuous mode [ 385.059711][T19321] nbd: illegal input index 393222 [ 385.066657][T19297] team_slave_1: entered promiscuous mode [ 385.073965][T19297] team0: entered allmulticast mode [ 385.079533][T19297] team_slave_0: entered allmulticast mode [ 385.085457][T19297] team_slave_1: entered allmulticast mode [ 385.093190][T19297] dummy0: entered promiscuous mode [ 385.099249][T19297] dummy0: entered allmulticast mode [ 385.105929][T19297] nlmon0: entered promiscuous mode [ 385.111659][T19297] nlmon0: entered allmulticast mode [ 385.123012][T19297] caif0: entered promiscuous mode [ 385.135134][T19297] caif0: entered allmulticast mode [ 385.146650][T19297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.186720][T19307] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 385.201458][T19307] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 385.658850][T19351] netlink: 'syz.3.3770': attribute type 58 has an invalid length. [ 385.703361][T19352] netlink: 'syz.3.3770': attribute type 58 has an invalid length. [ 386.174762][T19388] bridge_slave_1: left allmulticast mode [ 386.183756][T19388] bridge_slave_1: left promiscuous mode [ 386.190401][T19388] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.202904][T19388] bridge_slave_0: left allmulticast mode [ 386.209295][T19388] bridge_slave_0: left promiscuous mode [ 386.215035][T19388] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.456792][T19407] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 386.898431][T19433] : renamed from vlan0 (while UP) [ 387.098543][T19444] Bluetooth: MGMT ver 1.23 [ 387.774350][T19459] tipc: Enabling of bearer rejected, failed to enable media [ 388.046082][T19471] netlink: 'syz.0.3805': attribute type 83 has an invalid length. [ 388.086834][T19471] __nla_validate_parse: 18 callbacks suppressed [ 388.086851][T19471] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3805'. [ 388.126961][T19474] openvswitch: netlink: EtherType 50a is less than min 600 [ 388.238076][T19476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3807'. [ 388.448198][T19483] netlink: 'syz.0.3809': attribute type 29 has an invalid length. [ 388.508052][T19483] netlink: 'syz.0.3809': attribute type 29 has an invalid length. [ 388.544247][T19483] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3809'. [ 388.768974][T19494] IPv6: sit2: Disabled Multicast RS [ 388.775299][T19494] sit2: entered allmulticast mode [ 388.846075][T19504] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 388.877754][T19505] netlink: 'syz.1.3812': attribute type 1 has an invalid length. [ 388.888783][T19504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3815'. [ 389.108070][T19505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.144640][T19515] netlink: 'syz.2.3817': attribute type 10 has an invalid length. [ 389.150461][T19504] ip_vti0: entered promiscuous mode [ 389.152787][T19515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3817'. [ 389.190347][T19504] ip_vti0: entered allmulticast mode [ 389.251357][T19511] bond1: (slave gretap1): making interface the new active one [ 389.261604][T19511] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 389.351818][T19515] team0: Port device geneve0 added [ 389.447180][T19525] netlink: 'syz.1.3819': attribute type 1 has an invalid length. [ 389.696044][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3820'. [ 389.801491][T19538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3824'. [ 390.411977][T19501] wg1 speed is unknown, defaulting to 1000 [ 390.503263][T19564] netlink: 'syz.3.3834': attribute type 8 has an invalid length. [ 390.537202][T19568] openvswitch: netlink: Flow actions attr not present in new flow. [ 390.549429][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3837'. [ 390.553890][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'. [ 390.569587][T19564] netlink: 'syz.3.3834': attribute type 1 has an invalid length. [ 390.644926][T19564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.043326][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3843'. [ 392.207709][T19645] sock: sock_timestamping_bind_phc: sock not bind to device [ 392.247206][T19651] netlink: 'syz.1.3858': attribute type 4 has an invalid length. [ 392.285416][T19651] `: renamed from bond0 (while UP) [ 392.340104][T19656] syz.0.3860 (19656) used obsolete PPPIOCDETACH ioctl [ 392.394614][T19656] macvtap1: entered promiscuous mode [ 392.425743][T19656] macvtap1: entered allmulticast mode [ 392.467194][T19656] dummy0: entered promiscuous mode [ 392.467955][T19668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.481128][T19656] dummy0: entered allmulticast mode [ 392.530883][T19656] team0: Device macvtap1 failed to register rx_handler [ 392.548804][T19656] dummy0: left allmulticast mode [ 392.557479][T19656] dummy0: left promiscuous mode [ 392.604118][T19670] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 393.138537][T19704] __nla_validate_parse: 8 callbacks suppressed [ 393.138557][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3874'. [ 393.704427][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3881'. [ 393.766755][T19747] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0 [ 394.747104][T19810] netlink: 'syz.0.3902': attribute type 1 has an invalid length. [ 394.777615][T19810] netlink: 'syz.0.3902': attribute type 1 has an invalid length. [ 395.060239][T19824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3908'. [ 395.191551][T19831] syzkaller0: entered promiscuous mode [ 395.207346][T19831] syzkaller0: entered allmulticast mode [ 395.216330][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'. [ 395.225828][T19836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'. [ 395.377238][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.423034][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.444082][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.454182][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.485920][T19852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3914'. [ 395.495099][T19852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3914'. [ 395.512860][T19851] pim6reg1: entered promiscuous mode [ 395.536471][T19851] pim6reg1: entered allmulticast mode [ 395.788153][T19869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3923'. [ 395.888671][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3925'. [ 395.925756][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3925'. [ 396.049755][T19887] netlink: 'syz.1.3927': attribute type 1 has an invalid length. [ 396.069619][T19887] netlink: 'syz.1.3927': attribute type 2 has an invalid length. [ 396.087832][T19887] netlink: 'syz.1.3927': attribute type 1 has an invalid length. [ 396.585796][T19920] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 396.594729][ T55] block nbd0: Possible stuck request ffff888024ec0000: control (read@0,1024B). Runtime 210 seconds [ 396.595673][T19915] macvtap2: entered promiscuous mode [ 396.606045][ T55] block nbd0: Possible stuck request ffff888024ec01c0: control (read@1024,1024B). Runtime 210 seconds [ 396.624413][ T55] block nbd0: Possible stuck request ffff888024ec0380: control (read@2048,1024B). Runtime 210 seconds [ 396.635795][ T55] block nbd0: Possible stuck request ffff888024ec0540: control (read@3072,1024B). Runtime 210 seconds [ 396.674758][T19915] macvtap2: entered allmulticast mode [ 396.681013][T19915] bond_slave_0: entered promiscuous mode [ 396.686718][T19915] bond_slave_1: entered promiscuous mode [ 396.692607][T19915] bond0: entered allmulticast mode [ 396.698166][T19915] bond_slave_0: entered allmulticast mode [ 396.704023][T19915] bond_slave_1: entered allmulticast mode [ 396.714514][T19915] bond0: entered promiscuous mode [ 396.722145][T19915] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 396.729468][T19915] team0: Device macvtap2 failed to register rx_handler [ 396.738508][T19915] bond0: left allmulticast mode [ 396.743513][T19915] bond_slave_0: left allmulticast mode [ 396.749591][T19915] bond_slave_1: left allmulticast mode [ 396.755190][T19915] bond0: left promiscuous mode [ 396.761471][T19915] bond_slave_0: left promiscuous mode [ 396.767005][T19915] bond_slave_1: left promiscuous mode [ 396.904273][T19935] netlink: 'syz.4.3939': attribute type 7 has an invalid length. [ 397.048173][T19944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.168322][T19956] netlink: 'syz.3.3948': attribute type 2 has an invalid length. [ 397.176578][T19956] nbd: must specify at least one socket [ 397.416028][T19962] nbd1: detected capacity change from 0 to 127 [ 397.486197][T19983] netlink: 'syz.0.3957': attribute type 10 has an invalid length. [ 397.593032][ T51] block nbd1: Receive control failed (result -104) [ 397.609606][T19983] team0: Port device dummy0 added [ 397.746609][T19986] syzkaller1: entered promiscuous mode [ 397.753935][T19986] syzkaller1: entered allmulticast mode [ 397.987087][T20016] netlink: 'syz.2.3964': attribute type 8 has an invalid length. [ 398.225643][T20024] __nla_validate_parse: 76 callbacks suppressed [ 398.225664][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'. [ 398.366978][T20033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3970'. [ 398.387586][T20036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3971'. [ 398.402528][T20038] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3972'. [ 398.404506][T20033] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3970'. [ 398.483935][T20038] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3972'. [ 398.515975][T20036] netlink: 'syz.0.3971': attribute type 1 has an invalid length. [ 398.532067][T20036] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 398.559278][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3974'. [ 398.630532][T20048] xt_l2tp: v2 sid > 0xffff: 1114112 [ 398.810121][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3977'. [ 398.951444][T20062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3981'. [ 398.975711][T20063] tipc: Enabling of bearer rejected, already enabled [ 399.221547][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3987'. [ 399.396514][T20093] siw: device registration error -23 [ 400.085813][T20138] delete_channel: no stack [ 400.280352][T20150] syzkaller1: entered promiscuous mode [ 400.291604][T20150] syzkaller1: entered allmulticast mode [ 400.431475][T20161] rdma_rxe: rxe_newlink: failed to add lo [ 400.886614][T20186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.624505][T20223] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 401.636590][T20223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.766475][T20235] netlink: 'syz.2.4036': attribute type 11 has an invalid length. [ 401.842917][T20238] netlink: 'syz.0.4037': attribute type 1 has an invalid length. [ 401.873000][T20238] nbd: illegal input index 1048576 [ 401.910226][T20249] netlink: 'syz.4.4034': attribute type 24 has an invalid length. [ 403.099197][T19396] IPVS: starting estimator thread 0... [ 403.166909][T20310] tipc: Enabling of bearer rejected, failed to enable media [ 403.197812][T20308] IPVS: using max 28 ests per chain, 67200 per kthread [ 403.640766][T20320] __nla_validate_parse: 25 callbacks suppressed [ 403.640790][T20320] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4063'. [ 403.742761][T20329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4065'. [ 403.884765][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4067'. [ 403.912591][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4067'. [ 404.049167][T20348] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4070'. [ 404.499916][T20381] netlink: 'syz.2.4075': attribute type 21 has an invalid length. [ 404.566964][T20381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4075'. [ 405.422582][T20430] netlink: 'syz.3.4090': attribute type 21 has an invalid length. [ 405.464382][T20430] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4090'. [ 405.829937][T20462] sch_fq: defrate 0 ignored. [ 406.063057][T20473] tipc: Enabling of bearer rejected, media not registered [ 406.106815][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4104'. [ 406.124665][T20478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4102'. [ 406.370216][T20491] netlink: 'syz.2.4110': attribute type 1 has an invalid length. [ 406.400975][T20491] netlink: 'syz.2.4110': attribute type 2 has an invalid length. [ 406.439535][T20491] netlink: 'syz.2.4110': attribute type 1 has an invalid length. [ 406.447310][T20491] netlink: 'syz.2.4110': attribute type 2 has an invalid length. [ 406.483801][T20491] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 406.682338][T20519] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.4118'. [ 406.901651][T20530] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20003 [ 407.124035][T20546] netem: change failed [ 407.503794][ T30] audit: type=1800 audit(1758584585.210:11): pid=20574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4133" name="memory.events" dev="tmpfs" ino=879 res=0 errno=0 [ 407.568796][ T30] audit: type=1804 audit(1758584585.210:12): pid=20574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4133" name="/newroot/169/memory.events" dev="tmpfs" ino=879 res=1 errno=0 [ 407.657286][T20586] netlink: 'syz.3.4135': attribute type 1 has an invalid length. [ 407.758335][T20586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.183734][T20611] netlink: 'syz.1.4145': attribute type 1 has an invalid length. [ 408.205989][T20613] team0: Device gtp0 is of different type [ 408.276233][T20617] geneve2: entered promiscuous mode [ 408.298897][T20617] geneve2: entered allmulticast mode [ 408.327602][ T6495] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 408.339933][ T6495] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 408.361066][ T6495] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 408.393819][ T6495] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 408.503298][T20617] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.642966][T20638] netlink: 'syz.1.4152': attribute type 18 has an invalid length. [ 408.658940][T20638] __nla_validate_parse: 7 callbacks suppressed [ 408.658968][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4152'. [ 408.706140][T20617] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.765600][T20638] netlink: 'syz.1.4152': attribute type 18 has an invalid length. [ 408.774843][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4152'. [ 408.826286][T20617] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.911825][T20651] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4154'. [ 408.942261][T20617] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.977027][T20652] tipc: Enabling of bearer rejected, failed to enable media [ 409.072575][ T6495] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 409.211922][ T6512] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 409.254770][ T6493] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 409.326250][ T6493] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 409.419053][T20675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4161'. [ 409.486774][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4160'. [ 409.528867][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4160'. [ 409.566034][T20687] netlink: 'syz.4.4162': attribute type 1 has an invalid length. [ 409.583498][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4160'. [ 409.598910][T20687] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4162'. [ 409.686282][T20669] netlink: 18 bytes leftover after parsing attributes in process `syz.3.4160'. [ 409.714112][T20693] netlink: 'syz.1.4166': attribute type 29 has an invalid length. [ 409.735881][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4166'. [ 410.470691][T20734] netlink: 'syz.2.4175': attribute type 7 has an invalid length. [ 410.498326][T20734] netlink: 'syz.2.4175': attribute type 8 has an invalid length. [ 410.685757][T20753] netlink: 'syz.2.4179': attribute type 1 has an invalid length. [ 410.696658][T20753] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 410.891438][T20769] netlink: 'syz.1.4182': attribute type 24 has an invalid length. [ 411.299441][T20783] bond1: entered promiscuous mode [ 411.318143][T20783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.454887][T20783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.464105][T20783] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 411.474978][T20783] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 411.500984][T20783] bond1: (slave wireguard0): making interface the new active one [ 411.509243][T20783] wireguard0: entered promiscuous mode [ 411.517220][T20783] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 412.044331][T20826] tipc: Cannot configure node identity twice [ 412.743341][T20851] 0{X功: renamed from gretap0 (while UP) [ 412.824123][T20851] 0{X功: left promiscuous mode [ 412.838328][T20851] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 412.886323][T20790] wg1 speed is unknown, defaulting to 1000 [ 413.433887][T20885] validate_nla: 5 callbacks suppressed [ 413.433908][T20885] netlink: 'syz.1.4216': attribute type 6 has an invalid length. [ 413.640490][T20892] netlink: 'syz.1.4219': attribute type 1 has an invalid length. [ 413.792878][T20899] __nla_validate_parse: 20 callbacks suppressed [ 413.792901][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4220'. [ 413.957774][T20892] bond0: entered promiscuous mode [ 413.964847][T20892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.106782][T20896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.127654][T20896] bond0: (slave bond2): making interface the new active one [ 414.136231][T20896] bond2: entered promiscuous mode [ 414.142844][T20896] bond0: (slave bond2): Enslaving as an active interface with an up link [ 414.367382][T20920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4225'. [ 414.459231][T20919] tipc: Enabled bearer , priority 0 [ 414.499650][T20919] syzkaller0: entered promiscuous mode [ 414.505176][T20919] syzkaller0: entered allmulticast mode [ 414.626756][T20927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4223'. [ 414.659128][T20919] tipc: Resetting bearer [ 414.670646][T20917] tipc: Resetting bearer [ 414.758924][T20917] tipc: Disabling bearer [ 414.914821][T20946] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.4234'. [ 414.944857][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4236'. [ 415.132267][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4238'. [ 415.238430][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4239'. [ 415.266425][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4239'. [ 415.411301][T20979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4241'. [ 416.290074][T21016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4252'. [ 416.532145][T21016] bridge_slave_1 (unregistering): left allmulticast mode [ 416.567948][T21016] bridge_slave_1 (unregistering): left promiscuous mode [ 416.590946][T21016] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.732458][T21039] syzkaller1: entered promiscuous mode [ 416.752279][T21039] syzkaller1: entered allmulticast mode [ 417.407077][T21077] syzkaller1: entered promiscuous mode [ 417.414771][T21077] syzkaller1: entered allmulticast mode [ 417.434349][T21077] tipc: Enabling of bearer rejected, already enabled [ 417.666746][T21096] netlink: 'syz.3.4276': attribute type 10 has an invalid length. [ 417.769595][T21096] team0: Port device geneve0 added [ 418.108533][T21119] netlink: 'syz.3.4283': attribute type 29 has an invalid length. [ 418.202883][T21128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.855654][T21171] macvtap1: entered promiscuous mode [ 418.868088][T21171] macvtap1: entered allmulticast mode [ 418.874204][T21171] bond_slave_0: entered promiscuous mode [ 418.880000][T21171] bond_slave_1: entered promiscuous mode [ 418.885938][T21171] bond0: entered allmulticast mode [ 418.892079][T21171] bond_slave_0: entered allmulticast mode [ 418.899932][T21171] bond_slave_1: entered allmulticast mode [ 418.905803][T21171] bond0: entered promiscuous mode [ 418.912665][T21171] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 418.921512][T21171] team0: Device macvtap1 failed to register rx_handler [ 418.932888][T21171] bond0: left allmulticast mode [ 418.939257][T21171] bond_slave_0: left allmulticast mode [ 418.945017][T21171] bond_slave_1: left allmulticast mode [ 418.951161][T21171] bond0: left promiscuous mode [ 418.956723][T21171] bond_slave_0: left promiscuous mode [ 418.962296][T21171] bond_slave_1: left promiscuous mode [ 419.188788][T21186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.301726][T21193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.333949][T21194] netlink: 'syz.4.4303': attribute type 2 has an invalid length. [ 419.364541][T21194] __nla_validate_parse: 3 callbacks suppressed [ 419.364559][T21194] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4303'. [ 419.399610][T21194] nbd: must specify at least one socket [ 419.443012][T21199] unknown channel width for channel at 909000KHz? [ 419.451844][T21199] unknown channel width for channel at 909000KHz? [ 419.543496][T21202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4307'. [ 419.905164][T21224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.984744][T21234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4318'. [ 420.001744][T21233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4318'. [ 420.170150][T21250] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 420.176160][T21243] netlink: 'syz.1.4321': attribute type 27 has an invalid length. [ 420.508102][T21268] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4331'. [ 420.539307][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'. [ 420.563137][T21277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4334'. [ 420.610211][T21281] netlink: 'syz.3.4333': attribute type 1 has an invalid length. [ 420.644714][T21281] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4333'. [ 420.661057][T21281] netlink: 'syz.3.4333': attribute type 1 has an invalid length. [ 420.672402][T21281] netlink: 'syz.3.4333': attribute type 2 has an invalid length. [ 420.821324][T21288] netlink: 'syz.1.4336': attribute type 1 has an invalid length. [ 420.893269][T21295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4337'. [ 420.907343][T21288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.946364][T21296] bond3: (slave geneve2): making interface the new active one [ 420.963753][T21296] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 420.989646][T21303] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4340'. [ 421.020339][T21303] gretap0: entered promiscuous mode [ 421.291605][T21320] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 421.300273][T21320] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 421.309834][T21320] tipc: Enabled bearer , priority 0 [ 421.321332][T21320] tipc: Resetting bearer [ 421.483891][T21334] sock: sock_timestamping_bind_phc: sock not bind to device [ 421.620158][T21347] sit1: entered promiscuous mode [ 421.628895][T21347] sit1: entered allmulticast mode [ 422.275931][T21368] syzkaller1: entered promiscuous mode [ 422.304833][T21368] syzkaller1: entered allmulticast mode [ 422.427937][T21375] tipc: Enabling of bearer rejected, already enabled [ 422.456505][T19396] tipc: Node number set to 3289920527 [ 422.527687][T21389] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 422.672145][T21397] syzkaller1: entered promiscuous mode [ 422.681572][T21397] syzkaller1: entered allmulticast mode [ 422.704530][T21397] netlink: 'syz.0.4368': attribute type 1 has an invalid length. [ 422.717818][T21398] netlink: 'syz.3.4367': attribute type 1 has an invalid length. [ 422.740056][T21397] netlink: 'syz.0.4368': attribute type 1 has an invalid length. [ 422.755348][T21397] netlink: 'syz.0.4368': attribute type 4 has an invalid length. [ 422.777772][T21397] NCSI netlink: No device for ifindex 830110067 [ 423.110248][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.110248][T21419] Use struct sctp_assoc_value instead [ 423.182522][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.182522][T21419] Use struct sctp_assoc_value instead [ 423.228565][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.228565][T21419] Use struct sctp_assoc_value instead [ 423.243972][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.243972][T21419] Use struct sctp_assoc_value instead [ 423.259976][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.259976][T21419] Use struct sctp_assoc_value instead [ 423.274701][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.274701][T21419] Use struct sctp_assoc_value instead [ 423.290101][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.290101][T21419] Use struct sctp_assoc_value instead [ 423.305098][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.305098][T21419] Use struct sctp_assoc_value instead [ 423.326549][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.326549][T21419] Use struct sctp_assoc_value instead [ 423.343156][T21419] sctp: [Deprecated]: syz.0.4375 (pid 21419) Use of int in maxseg socket option. [ 423.343156][T21419] Use struct sctp_assoc_value instead [ 423.811187][T21462] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 424.841990][T21519] __nla_validate_parse: 14 callbacks suppressed [ 424.842008][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'. [ 425.681956][T21548] tipc: Enabled bearer , priority 10 [ 425.944271][T21566] tipc: Enabling of bearer rejected, already enabled [ 425.969496][T21569] syzkaller1: entered promiscuous mode [ 425.975017][T21569] syzkaller1: entered allmulticast mode [ 426.126273][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4425'. [ 426.570741][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4434'. [ 426.609057][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4436'. [ 426.656219][T21617] xfrm1: entered promiscuous mode [ 426.668307][ T55] block nbd0: Possible stuck request ffff888024ec0000: control (read@0,1024B). Runtime 240 seconds [ 426.679249][ T55] block nbd0: Possible stuck request ffff888024ec01c0: control (read@1024,1024B). Runtime 240 seconds [ 426.680765][T21623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4436'. [ 426.690527][ T55] block nbd0: Possible stuck request ffff888024ec0380: control (read@2048,1024B). Runtime 240 seconds [ 426.690565][ T55] block nbd0: Possible stuck request ffff888024ec0540: control (read@3072,1024B). Runtime 240 seconds [ 426.720924][T21617] xfrm1: entered allmulticast mode [ 426.730044][T21626] wireguard: wg2: Could not create IPv4 socket [ 426.795947][T21632] wireguard: wg2: Could not create IPv4 socket [ 426.803317][ T24] tipc: Node number set to 1379478887 [ 426.904976][T21637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4441'. [ 427.063594][T21646] netlink: 'syz.2.4444': attribute type 10 has an invalid length. [ 427.107883][T21646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4444'. [ 427.180540][ T6495] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.213803][ T6495] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.244310][ T6495] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.264417][ T6495] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.367067][T21666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4452'. [ 427.465401][T21666] veth1_macvtap: left promiscuous mode [ 427.473355][T21666] macsec0: entered promiscuous mode [ 427.481447][T21666] macsec0: entered allmulticast mode [ 427.521188][T21676] netlink: 'syz.4.4454': attribute type 5 has an invalid length. [ 427.544314][T21666] veth1_macvtap: entered promiscuous mode [ 427.552994][T21666] veth1_macvtap: entered allmulticast mode [ 427.560379][T21666] macsec0: left promiscuous mode [ 427.565473][T21666] macsec0: left allmulticast mode [ 427.570642][T21666] veth1_macvtap: left allmulticast mode [ 427.578493][T21672] tipc: Enabling of bearer rejected, already enabled [ 427.593000][T21672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.705185][T21688] netlink: 'syz.4.4460': attribute type 8 has an invalid length. [ 427.933362][T21699] netlink: 'syz.2.4463': attribute type 1 has an invalid length. [ 427.956263][T21699] netlink: 15 bytes leftover after parsing attributes in process `syz.2.4463'. [ 427.957149][ T55] block nbd1: Possible stuck request ffff888024efe000: control (read@0,1024B). Runtime 30 seconds [ 427.977386][ T55] block nbd1: Possible stuck request ffff888024efe1c0: control (read@1024,1024B). Runtime 30 seconds [ 427.988895][ T55] block nbd1: Possible stuck request ffff888024efe380: control (read@2048,1024B). Runtime 30 seconds [ 428.000628][ T55] block nbd1: Possible stuck request ffff888024efe540: control (read@3072,1024B). Runtime 30 seconds [ 428.396723][T21735] mac80211_hwsim hwsim35 : renamed from wlan1 [ 428.850225][T21759] Bluetooth: MGMT ver 1.23 [ 428.870184][T21759] netlink: 'syz.2.4477': attribute type 12 has an invalid length. [ 429.128051][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4484'. [ 429.148853][T21782] netlink: 'syz.4.4486': attribute type 3 has an invalid length. [ 429.620902][T21820] netlink: 'syz.0.4496': attribute type 1 has an invalid length. [ 429.647314][T21815] tipc: Enabled bearer , priority 0 [ 429.709028][T21815] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode [ 429.716699][T21815] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode [ 429.728640][T21815] tipc: Resetting bearer [ 430.088229][T21805] wg1 speed is unknown, defaulting to 1000 [ 430.165069][T21839] team0: No ports can be present during mode change [ 430.268209][T21845] rdma_op ffff888054b0b1f0 conn xmit_rdma 0000000000000000 [ 430.484149][T21856] netlink: 'syz.2.4508': attribute type 4 has an invalid length. [ 430.694286][T21867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.708883][ T24] tipc: Node number set to 521228340 [ 431.035711][T21877] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 431.112476][T21891] __nla_validate_parse: 8 callbacks suppressed [ 431.112495][T21891] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4516'. [ 431.263839][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4517'. [ 431.378055][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4519'. [ 431.390300][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4519'. [ 431.782817][T21929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4530'. [ 431.792695][T21929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4530'. [ 431.822880][T21929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4530'. [ 431.838813][T21928] syzkaller1: entered promiscuous mode [ 431.845175][T21928] syzkaller1: entered allmulticast mode [ 431.926832][T21932] ip6gre2: entered allmulticast mode [ 432.016841][T21935] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4533'. [ 432.437181][T21962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4536'. [ 432.643272][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4541'. [ 434.248261][T22039] lo: left promiscuous mode [ 434.252838][T22039] lo: left allmulticast mode [ 434.308352][T22048] batadv_slave_1: entered promiscuous mode [ 434.387772][T22048] batman_adv: batadv0: Adding interface: macsec1 [ 434.394227][T22048] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.463645][T22017] infiniband !yz!: set active [ 434.513963][T22017] infiniband !yz!: added team_slave_0 [ 434.531832][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.553218][T22017] !yz!: rxe_create_cq: returned err = -12 [ 434.572665][T22017] infiniband !yz!: Couldn't create ib_mad CQ [ 434.592196][T22017] infiniband !yz!: Couldn't open port 1 [ 434.607791][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.681486][T22048] batman_adv: batadv0: Interface activated: macsec1 [ 434.685933][T22017] RDS/IB: !yz!: added [ 434.700103][T22017] smc: adding ib device !yz! with port count 1 [ 434.709246][T22050] netlink: 'syz.2.4564': attribute type 4 has an invalid length. [ 434.713257][T22017] smc: ib device !yz! port 1 has pnetid [ 435.495287][T22106] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 435.521668][T22103] IPVS: stopping master sync thread 22106 ... [ 435.650919][T22108] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 435.945390][T22110] "syz.2.4577" (22110) uses obsolete ecb(arc4) skcipher [ 436.163632][T22134] tipc: Enabled bearer , priority 0 [ 436.174009][T22135] syzkaller0: entered promiscuous mode [ 436.180548][T22135] syzkaller0: entered allmulticast mode [ 436.250591][T22135] tipc: Resetting bearer [ 436.298557][T22135] tipc: Disabling bearer [ 436.434999][T22147] __nla_validate_parse: 7 callbacks suppressed [ 436.435020][T22147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4584'. [ 436.627823][T22154] netlink: 'syz.0.4587': attribute type 1 has an invalid length. [ 436.636231][T22154] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4587'. [ 436.825246][T22167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4592'. [ 436.860296][T22171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4593'. [ 436.880792][T22167] hsr_slave_0: left promiscuous mode [ 436.904840][T22167] hsr_slave_1: left promiscuous mode [ 437.359306][T22188] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4599'. [ 437.392623][T22188] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4599'. [ 437.420306][T22188] netlink: 'syz.0.4599': attribute type 6 has an invalid length. [ 437.450927][T22188] netlink: 'syz.0.4599': attribute type 5 has an invalid length. [ 437.460874][T22188] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4599'. [ 437.743669][T22203] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4604'. [ 437.765470][T22197] tipc: Started in network mode [ 437.778373][T22197] tipc: Node identity 6ed51961481e, cluster identity 4711 [ 437.785916][T22197] tipc: Enabled bearer , priority 0 [ 437.804545][T22203] xt_socket: unknown flags 0xd0 [ 437.818319][T22197] syzkaller0: entered promiscuous mode [ 437.824019][T22197] syzkaller0: entered allmulticast mode [ 438.408599][T22196] tipc: Resetting bearer [ 438.656261][T22234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4608'. [ 438.694082][T22196] tipc: Disabling bearer [ 439.146547][T22242] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4611'. [ 439.316457][T22247] netlink: 'syz.0.4613': attribute type 12 has an invalid length. [ 439.666559][T22199] wg1 speed is unknown, defaulting to 1000 [ 440.105393][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.609843][T22302] netlink: 'syz.2.4627': attribute type 1 has an invalid length. [ 440.633408][T22302] netlink: 'syz.2.4627': attribute type 1 has an invalid length. [ 440.654218][T22302] netlink: 'syz.2.4627': attribute type 2 has an invalid length. [ 441.472464][T22343] veth0: entered promiscuous mode [ 441.531936][T22343] veth0: left promiscuous mode [ 441.670133][T22356] bridge: RTM_NEWNEIGH with invalid ether address [ 441.810334][T22360] __nla_validate_parse: 6 callbacks suppressed [ 441.810352][T22360] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4645'. [ 441.873176][T22360] netlink: 'syz.1.4645': attribute type 1 has an invalid length. [ 441.894731][T22360] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4645'. [ 442.027086][T22362] syzkaller1: entered promiscuous mode [ 442.037804][T22362] syzkaller1: entered allmulticast mode [ 442.078401][T22367] netlink: 'syz.1.4648': attribute type 10 has an invalid length. [ 442.157831][T22367] team0: Device veth1_macvtap failed to register rx_handler [ 442.189637][T22369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4649'. [ 442.394065][T22378] tipc: Enabling of bearer rejected, already enabled [ 442.473993][T22379] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 442.511891][T22379] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 442.530644][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4654'. [ 442.545925][T22379] gretap1: entered promiscuous mode [ 442.555460][T22379] gretap1: entered allmulticast mode [ 442.825945][T22404] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4657'. [ 442.847064][T22403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4658'. [ 443.197686][T22421] netlink: 'syz.0.4661': attribute type 4 has an invalid length. [ 443.930306][T22464] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20002 [ 444.202462][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4677'. [ 444.337169][T22498] netlink: 'syz.1.4681': attribute type 1 has an invalid length. [ 444.358434][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4681'. [ 444.373214][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4681'. [ 444.374146][T22496] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4680'. [ 444.698214][T22515] pim6reg1: entered promiscuous mode [ 444.723959][T22515] pim6reg1: entered allmulticast mode [ 444.828566][T22523] C: renamed from lo (while UP) [ 444.873212][T22523] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 445.224411][T22550] netlink: 'syz.1.4698': attribute type 1 has an invalid length. [ 445.239055][T22546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.289831][T22547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.305724][T22547] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 445.322636][T22547] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 445.523673][T22550] 8021q: adding VLAN 0 to HW filter on device bond5 [ 446.099228][T22606] netlink: 'syz.0.4715': attribute type 10 has an invalid length. [ 446.269758][T22614] netlink: 'syz.4.4718': attribute type 1 has an invalid length. [ 446.279819][T22613] netlink: 'syz.4.4718': attribute type 1 has an invalid length. [ 446.354222][T22616] bond3: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 446.368973][T22616] bond3: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 446.380221][T22616] bond3: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 446.536932][T22628] nbd: must specify a size in bytes for the device [ 446.729825][T22644] netlink: 'syz.4.4725': attribute type 1 has an invalid length. [ 446.744012][T22644] netlink: 'syz.4.4725': attribute type 4 has an invalid length. [ 447.222134][T22679] : renamed from hsr0 (while UP) [ 447.606936][T22698] __nla_validate_parse: 15 callbacks suppressed [ 447.606958][T22698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4740'. [ 447.844924][T22715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4746'. [ 448.153550][T22730] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4752'. [ 448.220649][T22730] netlink: 'syz.1.4752': attribute type 1 has an invalid length. [ 448.234114][T22730] netlink: 'syz.1.4752': attribute type 10 has an invalid length. [ 448.262252][T22730] netlink: 'syz.1.4752': attribute type 4 has an invalid length. [ 448.293897][T22730] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4752'. [ 448.336719][T22748] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 448.449666][T22755] xt_l2tp: unknown flags: 10 [ 448.468951][T22758] macsec0: entered promiscuous mode [ 448.485970][T22758] macsec0: entered allmulticast mode [ 448.503130][T22759] veth1_macvtap: entered allmulticast mode [ 448.525481][T22759] macsec0: left promiscuous mode [ 448.532759][T22759] macsec0: left allmulticast mode [ 448.538445][T22759] veth1_macvtap: left allmulticast mode [ 448.545174][T22765] netem: change failed [ 448.650729][T22772] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 448.667296][T22772] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 448.781953][T22777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4767'. [ 448.848218][T22784] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4768'. [ 448.895826][T22787] vcan1: entered promiscuous mode [ 448.902295][T22787] vcan1: entered allmulticast mode [ 448.980751][T22793] IPv6: Can't replace route, no match found [ 449.421122][ T30] audit: type=1800 audit(1758584627.120:13): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4779" name="memory.events" dev="tmpfs" ino=1886 res=0 errno=0 [ 449.452007][T22815] netlink: 'syz.0.4780': attribute type 1 has an invalid length. [ 449.461155][ T30] audit: type=1804 audit(1758584627.130:14): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4779" name="/newroot/367/memory.events" dev="tmpfs" ino=1886 res=1 errno=0 [ 449.532192][T22815] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.544693][T22821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4781'. [ 449.584627][T22819] bond6: (slave veth0_to_bond): making interface the new active one [ 449.597229][T22819] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 449.742953][T22828] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4784'. [ 449.771722][T22828] openvswitch: netlink: Actions may not be safe on all matching packets [ 449.781916][T22831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.132830][T22853] netlink: 'syz.2.4792': attribute type 2 has an invalid length. [ 450.156587][T22852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4793'. [ 450.420066][T22871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4799'. [ 450.458357][T22877] delete_channel: no stack [ 450.481426][T22872] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 451.557092][T22932] xt_bpf: check failed: parse error [ 451.895006][T22950] sctp: [Deprecated]: syz.2.4822 (pid 22950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.895006][T22950] Use struct sctp_sack_info instead [ 452.207158][T22964] netlink: 'syz.4.4829': attribute type 21 has an invalid length. [ 452.240082][T22969] tipc: Enabling of bearer rejected, already enabled [ 452.473948][T22986] netlink: 'syz.3.4834': attribute type 1 has an invalid length. [ 452.754525][T23001] syz_tun: entered allmulticast mode [ 452.785722][T23005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.011228][T23011] __nla_validate_parse: 11 callbacks suppressed [ 453.011250][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4842'. [ 453.052438][T23011] sctp_getsockopt_maxseg: 23 callbacks suppressed [ 453.052460][T23011] sctp: [Deprecated]: syz.4.4842 (pid 23011) Use of int in maxseg socket option. [ 453.052460][T23011] Use struct sctp_assoc_value instead [ 453.137246][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4844'. [ 453.258215][T23025] can: request_module (can-proto-0) failed. [ 453.562039][T23039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4844'. [ 453.572504][T23039] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 454.268888][T23063] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4855'. [ 454.523013][T23060] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4854'. [ 454.779218][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4862'. [ 455.334653][T23118] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4872'. [ 455.398655][T23118] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 455.433735][T23118] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 455.490950][T23118] netlink: 184052 bytes leftover after parsing attributes in process `syz.4.4872'. [ 455.535561][T23118] netlink: zone id is out of range [ 455.574614][T23118] netlink: zone id is out of range [ 455.581764][T23118] netlink: zone id is out of range [ 455.586984][T23118] netlink: zone id is out of range [ 455.601470][T23118] netlink: zone id is out of range [ 455.606988][T23118] netlink: zone id is out of range [ 455.612407][T23118] netlink: zone id is out of range [ 455.624502][T23118] netlink: zone id is out of range [ 455.632766][T23118] netlink: get zone limit has 8 unknown bytes [ 455.960984][T23139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4878'. [ 456.315050][T23140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.338672][T23140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.632181][ T30] audit: type=1804 audit(1758584634.340:15): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4882" name="/newroot/389/cgroup.controllers" dev="tmpfs" ino=1999 res=1 errno=0 [ 456.663302][ T30] audit: type=1800 audit(1758584634.340:16): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4882" name="cgroup.controllers" dev="tmpfs" ino=1999 res=0 errno=0 [ 456.738465][ T55] block nbd0: Possible stuck request ffff888024ec0000: control (read@0,1024B). Runtime 270 seconds [ 456.749561][ T55] block nbd0: Possible stuck request ffff888024ec01c0: control (read@1024,1024B). Runtime 270 seconds [ 456.761498][ T55] block nbd0: Possible stuck request ffff888024ec0380: control (read@2048,1024B). Runtime 270 seconds [ 456.773321][ T55] block nbd0: Possible stuck request ffff888024ec0540: control (read@3072,1024B). Runtime 270 seconds [ 456.843324][T23140] batman_adv: batadv0: Interface deactivated: macsec1 [ 456.899813][ T1334] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.914645][ T1334] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.931466][ T1334] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.945524][ T1334] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.003240][ T1334] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.026046][ T1334] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.070108][ T1334] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.120774][ T1334] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.149358][T23167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4886'. [ 457.190045][T23163] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 457.673532][T23126] wg1 speed is unknown, defaulting to 1000 [ 457.985659][T23205] pimreg: entered allmulticast mode [ 458.018478][ T55] block nbd1: Possible stuck request ffff888024efe000: control (read@0,1024B). Runtime 60 seconds [ 458.029955][ T55] block nbd1: Possible stuck request ffff888024efe1c0: control (read@1024,1024B). Runtime 60 seconds [ 458.041015][ T55] block nbd1: Possible stuck request ffff888024efe380: control (read@2048,1024B). Runtime 60 seconds [ 458.053435][ T55] block nbd1: Possible stuck request ffff888024efe540: control (read@3072,1024B). Runtime 60 seconds [ 459.070651][T23260] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 459.200691][T23269] sctp: [Deprecated]: syz.2.4912 (pid 23269) Use of int in max_burst socket option. [ 459.200691][T23269] Use struct sctp_assoc_value instead [ 459.274141][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4914'. [ 459.319799][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4914'. [ 459.365471][T23272] bridge8: entered promiscuous mode [ 459.379191][T23272] bridge8: entered allmulticast mode [ 459.389919][T23272] team0: Port device bridge8 added [ 459.644778][T23281] netlink: 'syz.0.4917': attribute type 1 has an invalid length. [ 459.665595][T23284] netlink: 'syz.2.4920': attribute type 33 has an invalid length. [ 459.673950][T23284] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4920'. [ 459.862091][T23292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4921'. [ 460.031910][T23292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4921'. [ 460.067025][T23297] netlink: 'syz.1.4921': attribute type 1 has an invalid length. [ 460.105731][T23302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4925'. [ 460.132313][T23307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4926'. [ 460.153430][T23307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4926'. [ 460.402711][T23314] netlink: 'syz.1.4930': attribute type 10 has an invalid length. [ 460.424358][T23314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.458207][T23314] batadv0: entered promiscuous mode [ 460.463874][T23314] batadv0: entered allmulticast mode [ 460.474414][T23314] `: (slave batadv0): Enslaving as an active interface with an up link [ 460.517949][T23323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.525476][T23323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.599945][T23323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.646230][T23323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.734268][T23323] `: (slave batadv0): Releasing backup interface [ 460.747161][T23323] batadv0 (unregistering): left promiscuous mode [ 460.760369][T23323] batadv0 (unregistering): left allmulticast mode [ 460.863865][T23339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4935'. [ 461.018806][T23356] tipc: Enabling of bearer rejected, already enabled [ 461.179647][T23367] tipc: Enabling of bearer rejected, already enabled [ 461.198151][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4947'. [ 461.442135][T23386] netlink: 'syz.2.4949': attribute type 12 has an invalid length. [ 461.696269][T23402] bridge6: entered promiscuous mode [ 461.717573][T23402] bridge6: entered allmulticast mode [ 461.815481][T23407] bridge7: entered promiscuous mode [ 461.840542][T23407] bridge7: entered allmulticast mode [ 461.986443][T23416] netlink: 'syz.2.4959': attribute type 39 has an invalid length. [ 462.716317][T23370] wg1 speed is unknown, defaulting to 1000 [ 463.758453][T23430] wg1 speed is unknown, defaulting to 1000 [ 464.369998][T23496] netlink: 'syz.1.4984': attribute type 2 has an invalid length. [ 464.400064][T23496] __nla_validate_parse: 6 callbacks suppressed [ 464.400085][T23496] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4984'. [ 464.744126][ T6498] tipc: Subscription rejected, illegal request [ 465.535957][T23535] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4995'. [ 465.616484][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4996'. [ 465.735995][T23540] tipc: Enabling of bearer rejected, already enabled [ 465.761902][T23541] tipc: Enabling of bearer rejected, already enabled [ 466.204818][T23561] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5000'. [ 466.587859][T23569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5003'. [ 466.609985][T23527] wg1 speed is unknown, defaulting to 1000 [ 466.856268][T23574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5004'. [ 466.883999][T23574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5004'. [ 466.951773][T23574] bridge0: port 3(vlan2) entered blocking state [ 466.990994][T23574] bridge0: port 3(vlan2) entered disabled state [ 467.007951][T23574] vlan2: entered allmulticast mode [ 467.022188][T23574] bridge0: entered allmulticast mode [ 467.040741][T23582] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5006'. [ 467.061606][T23574] vlan2: left allmulticast mode [ 467.066550][T23574] bridge0: left allmulticast mode [ 467.093608][T23582] net_ratelimit: 1 callbacks suppressed [ 467.093632][T23582] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 467.313888][T23601] netlink: 'syz.4.5011': attribute type 1 has an invalid length. [ 467.324226][T23600] netlink: 'syz.1.5010': attribute type 1 has an invalid length. [ 467.436296][T23601] bond4: entered promiscuous mode [ 467.458456][T23601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.468257][T23606] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 467.659426][T23620] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5015'. [ 467.858685][T23627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5018'. [ 469.085541][T23693] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 469.104059][ T6495] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.115512][ T6495] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.125216][ T6495] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.151042][ T6495] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.353355][ T6497] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4a [ 469.439048][T23720] __nla_validate_parse: 4 callbacks suppressed [ 469.439069][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 470.264939][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5046'. [ 470.460809][T23741] netlink: 'syz.2.5048': attribute type 1 has an invalid length. [ 470.615797][T23746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5052'. [ 470.775904][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5058'. [ 470.821083][T23762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5056'. [ 470.850839][T23769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5060'. [ 470.891851][T23767] netlink: 'syz.0.5059': attribute type 1 has an invalid length. [ 470.926808][T23767] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5059'. [ 470.994073][T23767] netlink: 'syz.0.5059': attribute type 1 has an invalid length. [ 471.006795][T23775] netlink: 'syz.2.5062': attribute type 4 has an invalid length. [ 471.020632][T23775] netlink: 'syz.2.5062': attribute type 4 has an invalid length. [ 471.059685][T23771] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5060'. [ 471.091530][T23767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5059'. [ 471.409890][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5068'. [ 471.755586][T23813] nbd: nbd1 already in use [ 471.769551][T23813] block nbd1: NBD_DISCONNECT [ 471.782967][T23813] block nbd1: Send disconnect failed -32 [ 471.804953][T23813] block nbd1: shutting down sockets [ 471.838112][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.847632][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 471.860800][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.870004][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 471.878690][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.882506][T23821] netlink: 'syz.4.5076': attribute type 1 has an invalid length. [ 471.887805][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 471.887883][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.912691][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 471.927263][T23821] nbd: illegal input index 1048576 [ 471.936790][T11055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.962091][T11055] Buffer I/O error on dev nbd1, logical block 0, async page read [ 472.000280][T11055] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.014187][T11055] Buffer I/O error on dev nbd1, logical block 1, async page read [ 472.065383][T11055] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.101731][T11055] Buffer I/O error on dev nbd1, logical block 2, async page read [ 472.109972][T11055] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.119160][T11055] Buffer I/O error on dev nbd1, logical block 3, async page read [ 472.136372][T11055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.168809][T11055] Buffer I/O error on dev nbd1, logical block 0, async page read [ 472.176806][T11055] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.200717][T11055] Buffer I/O error on dev nbd1, logical block 1, async page read [ 472.226211][T11055] ldm_validate_partition_table(): Disk read failed. [ 472.255190][T11055] Dev nbd1: unable to read RDB block 0 [ 472.306868][T11055] nbd1: unable to read partition table [ 472.339184][ C1] mroute: pending queue full, dropping entries [ 472.381841][T11055] ldm_validate_partition_table(): Disk read failed. [ 472.394917][T11055] Dev nbd1: unable to read RDB block 0 [ 472.403072][T11055] nbd1: unable to read partition table [ 472.556736][T23853] netlink: 'syz.4.5085': attribute type 1 has an invalid length. [ 472.644442][T23853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 472.659086][T23862] netlink: 'syz.0.5088': attribute type 12 has an invalid length. [ 472.671204][T23862] netlink: 'syz.0.5088': attribute type 29 has an invalid length. [ 472.744961][T23862] IPVS: length: 157 != 24 [ 473.120422][T23902] netlink: 'syz.4.5096': attribute type 7 has an invalid length. [ 473.138239][T23902] netlink: 'syz.4.5096': attribute type 8 has an invalid length. [ 473.171737][T23903] netlink: 'syz.4.5096': attribute type 11 has an invalid length. [ 473.730175][T23929] can: request_module (can-proto-3) failed. [ 474.130842][T23957] netlink: 'syz.4.5115': attribute type 11 has an invalid length. [ 474.170335][T23957] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 474.185069][T23957] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 474.283706][T23967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.291051][T23967] IPv6: NLM_F_CREATE should be set when creating new route [ 474.298301][T23967] IPv6: NLM_F_CREATE should be set when creating new route [ 474.305490][T23967] IPv6: NLM_F_CREATE should be set when creating new route [ 474.312930][T23969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.361054][T23957] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 474.374692][T23957] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 474.453129][T23957] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 474.463612][T23957] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 474.598784][T23957] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 474.612881][T23957] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 474.633193][T23988] openvswitch: netlink: IPv4 tun info is not correct [ 474.646191][T23988] __nla_validate_parse: 20 callbacks suppressed [ 474.646209][T23988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5123'. [ 474.743347][ T6497] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 474.752488][ T6497] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.834352][ T6497] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 474.846035][ T6497] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.854841][T23995] tipc: Enabling of bearer rejected, failed to enable media [ 474.873979][ T6498] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 474.882920][ T6498] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.921234][ T6497] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 474.944332][ T6497] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 475.059791][T24002] tipc: Enabling of bearer rejected, already enabled [ 475.088979][T24007] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5127'. [ 475.262595][T24014] netlink: 'syz.1.5130': attribute type 13 has an invalid length. [ 475.271457][T24014] netlink: 'syz.1.5130': attribute type 58 has an invalid length. [ 475.280006][T24014] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5130'. [ 475.413311][T24006] geneve1: mtu less than device minimum [ 475.425201][T24002] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5128'. [ 475.687910][T24024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5133'. [ 475.704039][T24021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5131'. [ 475.717692][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5133'. [ 475.852632][T24030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5134'. [ 476.419800][T24060] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20003 [ 476.533466][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5144'. [ 476.543403][T24072] siw: device registration error -23 [ 476.559087][T24072] siw: device registration error -23 [ 476.651796][T24080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5146'. [ 477.512651][T24121] tipc: Enabling of bearer rejected, failed to enable media [ 477.587205][T24123] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 477.593930][T24121] veth5: entered promiscuous mode [ 477.606433][T24121] veth5: entered allmulticast mode [ 477.745011][T24084] wg1 speed is unknown, defaulting to 1000 [ 477.802241][T24129] netlink: 'syz.1.5160': attribute type 25 has an invalid length. [ 478.228979][T24148] siw: device registration error -23 [ 478.361042][T24152] netlink: 'syz.2.5168': attribute type 4 has an invalid length. [ 478.627257][T24159] netlink: 'syz.2.5170': attribute type 1 has an invalid length. [ 478.635858][T24159] netlink: 'syz.2.5170': attribute type 2 has an invalid length. [ 478.644161][T24159] netlink: 'syz.2.5170': attribute type 1 has an invalid length. [ 479.037926][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806059f400: rx timeout, send abort [ 479.046890][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806059f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 479.457307][T24207] netlink: 'syz.3.5187': attribute type 11 has an invalid length. [ 479.542706][T24213] netlink: 'syz.1.5189': attribute type 1 has an invalid length. [ 479.772963][T24231] __nla_validate_parse: 5 callbacks suppressed [ 479.772984][T24231] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5193'. [ 479.829341][T24233] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 479.851599][T24233] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 480.142387][T24245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.352059][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5204'. [ 480.366275][T24253] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 480.403188][T24253] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5204'. [ 480.638918][T24267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5209'. [ 480.662955][T24270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5210'. [ 480.696109][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5209'. [ 480.793223][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5209'. [ 481.330957][T24306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5221'. [ 481.414778][T24306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5221'. [ 481.442698][T24310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5221'. [ 481.796405][T24333] netlink: 'syz.0.5229': attribute type 1 has an invalid length. [ 481.829570][T24336] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 481.895444][T24342] xt_limit: Overflow, try lower: 271964/0 [ 482.271346][T24343] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.279201][T24343] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.544750][T24343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.606632][T24343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.821900][T24343] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 482.862009][T24343] veth0_macvtap: left allmulticast mode [ 482.893359][T24343] bond2: left promiscuous mode [ 482.898668][T24343] bridge2: left promiscuous mode [ 483.126529][T24361] wg1 speed is unknown, defaulting to 1000 [ 483.140634][ T6497] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.166809][T24361] syz1: Port: 1 Link DOWN [ 483.182607][ T6497] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.232615][T24383] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 483.345855][ T6497] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.367003][ T6497] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.376579][ T6497] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.386852][ T6497] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.401371][ T6497] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.411634][ T6497] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.028105][T24417] 8021q: adding VLAN 0 to HW filter on device bond8 [ 484.252249][T24434] nbd: must specify a size in bytes for the device [ 484.611833][T24462] sctp: [Deprecated]: syz.1.5257 (pid 24462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.611833][T24462] Use struct sctp_sack_info instead [ 484.689873][T24462] sctp: [Deprecated]: syz.1.5257 (pid 24462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.689873][T24462] Use struct sctp_sack_info instead [ 484.856540][T24472] openvswitch: netlink: IPv4 tunnel dst address is zero [ 484.858586][T24470] netlink: 'syz.2.5262': attribute type 30 has an invalid length. [ 484.912182][T24466] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 484.952123][T24470] __nla_validate_parse: 9 callbacks suppressed [ 484.952143][T24470] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5262'. [ 485.137822][T24488] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5268'. [ 485.153842][T24488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.183717][T24486] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5267'. [ 485.249503][T24490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5269'. [ 485.303167][T24500] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5272'. [ 485.322521][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5271'. [ 485.343615][T24500] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5272'. [ 485.382295][T24502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5273'. [ 485.426274][T24500] 0{X功: renamed from gretap0 [ 485.435098][T24500] 0{X功: left promiscuous mode [ 485.443978][T24500] 0{X功: entered allmulticast mode [ 485.475484][T24500] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 485.975529][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5282'. [ 485.995641][T24539] Unsupported xt match [ 485.995662][T24539] unable to load match [ 486.273190][T24551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5285'. [ 486.604136][T24567] netlink: 'syz.2.5291': attribute type 11 has an invalid length. [ 486.616218][T24567] netlink: 'syz.2.5291': attribute type 11 has an invalid length. [ 486.632101][T24567] netlink: 'syz.2.5291': attribute type 11 has an invalid length. [ 486.653002][T24567] netlink: 'syz.2.5291': attribute type 11 has an invalid length. [ 486.823092][ T55] block nbd0: Possible stuck request ffff888024ec0000: control (read@0,1024B). Runtime 300 seconds [ 486.834188][ T55] block nbd0: Possible stuck request ffff888024ec01c0: control (read@1024,1024B). Runtime 300 seconds [ 486.845693][ T55] block nbd0: Possible stuck request ffff888024ec0380: control (read@2048,1024B). Runtime 300 seconds [ 486.857326][ T55] block nbd0: Possible stuck request ffff888024ec0540: control (read@3072,1024B). Runtime 300 seconds [ 487.174191][T24599] netlink: 'syz.0.5300': attribute type 1 has an invalid length. [ 487.339508][T24608] bridge4: entered promiscuous mode [ 487.365153][T24608] bridge4: entered allmulticast mode [ 487.732360][T24626] 0{X功: entered promiscuous mode [ 487.747705][T24626] 0{X功: left allmulticast mode [ 487.786028][T24626] netlink: 'syz.2.5304': attribute type 12 has an invalid length. [ 488.317066][T24669] netlink: 'syz.2.5317': attribute type 33 has an invalid length. [ 488.336026][T24674] netlink: 'syz.1.5319': attribute type 2 has an invalid length. [ 488.346238][T24673] tipc: Enabling not permitted [ 488.370179][T24673] tipc: Enabling of bearer rejected, failed to enable media [ 488.694805][T24696] netlink: 'syz.2.5327': attribute type 13 has an invalid length. [ 488.789348][T24700] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 488.796790][T24700] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 488.913001][T24705] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 489.469980][T24745] IPVS: Unknown mcast interface: veth1_to_bridge [ 489.486683][T24744] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 489.684502][T24762] tipc: Enabling of bearer rejected, already enabled [ 489.706858][T24761] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 489.765582][T24761] bond6: entered promiscuous mode [ 489.770988][T24761] bond6: entered allmulticast mode [ 489.777160][T24761] 8021q: adding VLAN 0 to HW filter on device bond6 [ 490.003739][T24773] __nla_validate_parse: 19 callbacks suppressed [ 490.003758][T24773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5349'. [ 501.540532][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 514.501065][T24779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5351'. [ 514.528036][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5354'. [ 514.557737][T24781] validate_nla: 3 callbacks suppressed [ 514.557755][T24781] netlink: 'syz.4.5355': attribute type 5 has an invalid length. [ 514.924345][T24808] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5362'. [ 515.486742][T24843] netlink: 'syz.2.5372': attribute type 5 has an invalid length. [ 515.771504][T24866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5380'. [ 515.814044][T24866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5380'. [ 516.063138][T24886] netlink: 'syz.4.5384': attribute type 1 has an invalid length. [ 516.328258][T24902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5388'. [ 516.594161][T24919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5393'. [ 516.616993][T24923] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5394'. [ 516.827181][T24937] netlink: 'syz.1.5397': attribute type 1 has an invalid length. [ 516.848096][T24937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.910849][ T55] block nbd0: Possible stuck request ffff888024ec0000: control (read@0,1024B). Runtime 330 seconds [ 516.922055][ T55] block nbd0: Possible stuck request ffff888024ec01c0: control (read@1024,1024B). Runtime 330 seconds [ 516.933218][ T55] block nbd0: Possible stuck request ffff888024ec0380: control (read@2048,1024B). Runtime 330 seconds [ 516.944515][ T55] block nbd0: Possible stuck request ffff888024ec0540: control (read@3072,1024B). Runtime 330 seconds [ 517.281718][T24971] netem: change failed [ 517.343628][T24974] netem: change failed [ 517.411788][T24978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5409'. [ 517.436834][T24978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5409'. [ 517.464634][T24988] netlink: 'syz.2.5412': attribute type 2 has an invalid length. [ 517.477020][T24989] syzkaller0: entered promiscuous mode [ 517.482829][T24989] syzkaller0: entered allmulticast mode [ 517.916970][T25018] netlink: 'syz.2.5423': attribute type 1 has an invalid length. [ 517.960087][T25018] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 517.981882][T25028] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 518.148476][T25040] netlink: 'syz.1.5422': attribute type 10 has an invalid length. [ 518.188362][T25040] : mtu less than device minimum [ 518.193532][T25040] `: (slave ): Error -22 calling dev_set_mtu [ 518.443200][T25055] : entered promiscuous mode [ 518.642088][T25075] tipc: Enabling of bearer rejected, already enabled [ 518.972830][T25092] : renamed from veth1_vlan [ 519.004740][T25096] xt_bpf: check failed: parse error [ 519.013100][T25097] syzkaller1: entered promiscuous mode [ 519.023778][T25097] syzkaller1: entered allmulticast mode [ 519.501891][T25123] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 519.670580][T25131] netlink: 'syz.0.5455': attribute type 83 has an invalid length. [ 519.757601][T25135] __nla_validate_parse: 13 callbacks suppressed [ 519.757679][T25135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5456'. [ 519.793725][T25140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5457'. [ 520.160297][T25163] erspan0: entered allmulticast mode [ 520.282022][T25169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5466'. [ 520.318184][T25167] netlink: 'syz.1.5464': attribute type 10 has an invalid length. [ 520.326152][T25167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5464'. [ 520.339793][T25172] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20002 [ 520.476398][T25167] geneve0: entered promiscuous mode [ 520.482062][T25167] geneve0: entered allmulticast mode [ 520.490554][T25167] team0: Port device geneve0 added [ 520.552785][T25167] syzkaller0: create flow: hash 2338729631 index 2 [ 520.590753][T25121] wg1 speed is unknown, defaulting to 1000 [ 520.724728][ T6497] syzkaller0: tun_net_xmit 76 [ 520.730375][ T6497] syzkaller0: tun_net_xmit 48 [ 520.735846][T25173] syzkaller0: delete flow: hash 2338729631 index 2 [ 520.747948][T24373] syzkaller0: tun_net_xmit 76 [ 520.788214][T24373] syzkaller0: tun_net_xmit 76 [ 520.958944][T25202] netlink: 'syz.0.5475': attribute type 6 has an invalid length. [ 523.091649][T25228] IPVS: Error connecting to the multicast addr [ 523.256868][T25238] ip6gre1: entered allmulticast mode [ 523.356710][T25240] bridge11: entered promiscuous mode [ 523.726531][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5494'. [ 524.108514][T25277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.227077][T25297] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 526.336189][T25302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5507'. [ 526.377668][T25302] hsr_slave_0: left promiscuous mode [ 526.393610][T25302] hsr_slave_1: left promiscuous mode [ 526.484693][T25312] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5508'. [ 526.575149][T25302] syzkaller0: entered promiscuous mode [ 526.583927][T25302] syzkaller0: entered allmulticast mode [ 526.759200][T25328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5514'. [ 526.876219][T25335] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5516'. [ 526.952079][T25340] C: renamed from team_slave_0 (while UP) [ 526.975882][T25340] netlink: 'syz.2.5518': attribute type 1 has an invalid length. [ 526.988313][T25340] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 527.007121][T25332] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5515'. [ 527.019559][T25346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5518'. [ 527.185712][T25353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5517'. [ 527.305116][T25344] team0 (unregistering): Port device team_slave_0 removed [ 527.316319][T25344] team0 (unregistering): Port device team_slave_1 removed [ 527.325643][T25344] team0 (unregistering): Port device dummy0 removed [ 527.344489][T25343] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5519'. [ 527.474234][T25368] tipc: Enabling of bearer rejected, already enabled [ 527.800970][T25376] tipc: Enabling of bearer rejected, already enabled [ 527.833623][T25376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5528'. [ 527.843249][T25376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5528'. [ 527.943484][T25380] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 528.018035][T25385] bridge: RTM_NEWNEIGH with invalid ether address [ 528.024628][T25384] bridge: RTM_NEWNEIGH with invalid ether address [ 528.036916][T25356] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 528.048603][T25356] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 528.301086][T25403] netlink: 'syz.0.5537': attribute type 4 has an invalid length. [ 528.631024][T25430] netlink: 'syz.2.5546': attribute type 4 has an invalid length. [ 528.716446][T25442] team0: No ports can be present during mode change [ 528.746084][T25441] team0: No ports can be present during mode change [ 528.891534][T25448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.949255][T25457] syzkaller1: entered promiscuous mode [ 528.958605][T25457] syzkaller1: entered allmulticast mode [ 529.822510][T25509] netlink: 'syz.0.5564': attribute type 3 has an invalid length. [ 529.830516][T25509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.902171][T25512] netlink: 'syz.2.5566': attribute type 2 has an invalid length. [ 530.119621][T25528] tipc: Enabling of bearer rejected, already enabled [ 530.143727][T25528] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 530.214100][T25532] : entered promiscuous mode [ 530.495912][T25554] batadv1: entered allmulticast mode [ 530.581509][T25559] netlink: 'syz.4.5580': attribute type 1 has an invalid length. [ 530.982446][T25583] netlink: 'syz.4.5587': attribute type 1 has an invalid length. [ 531.204840][T25599] tipc: New replicast peer: 255.255.255.255 [ 531.213116][T25599] tipc: Enabled bearer , priority 10 [ 531.455018][T25616] __nla_validate_parse: 15 callbacks suppressed [ 531.455037][T25616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5596'. [ 531.465371][T25617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5596'. [ 531.493359][T25617] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5596'. [ 531.507262][T25617] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5596'. [ 531.536141][T25616] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 532.165999][T25646] tipc: MTU too low for tipc bearer [ 532.477891][T25651] wg2: entered promiscuous mode [ 532.487145][T25651] wg2: entered allmulticast mode [ 532.521353][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.532103][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 532.544069][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 532.553591][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.568571][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.693092][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.706032][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 532.713845][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 532.723296][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.731190][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.846785][T25663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5609'. [ 533.161092][T25675] netlink: 'syz.4.5613': attribute type 83 has an invalid length. [ 533.253213][T25675] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5613'. [ 533.285317][T25675] nbd: must specify at least one socket [ 533.385158][T25690] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5618'. [ 533.399773][T25690] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5618'. [ 533.417344][T25690] netlink: 'syz.4.5618': attribute type 5 has an invalid length. [ 533.433853][T25690] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5618'. [ 533.770984][T25696] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5619'. [ 533.862576][T25652] wg1 speed is unknown, defaulting to 1000 [ 534.260104][ T6512] bridge_slave_0: left allmulticast mode [ 534.283230][ T6512] bridge_slave_0: left promiscuous mode [ 534.301995][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.543763][T25737] netlink: 'syz.3.5630': attribute type 5 has an invalid length. [ 534.719550][T25747] ksmbd: Unknown IPC event: 3, ignore. [ 534.818429][ T5871] Bluetooth: hci2: command tx timeout [ 535.516719][ T6512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.528064][ T6512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.538974][ T6512] bond0 (unregistering): Released all slaves [ 535.554500][ T6512] bond1 (unregistering): Released all slaves [ 535.567090][ T6512] bond2 (unregistering): Released all slaves [ 535.694207][ T6512] bond3 (unregistering): Released all slaves [ 535.707354][ T6512] bond4 (unregistering): Released all slaves [ 535.722669][ T6512] bond5 (unregistering): Released all slaves [ 535.846664][ T6512] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 535.856304][ T6512] bond6 (unregistering): Released all slaves [ 535.869479][ T6512] bond7 (unregistering): Released all slaves [ 535.882409][ T6512] bond8 (unregistering): Released all slaves [ 536.099450][ T6512] : left promiscuous mode [ 536.169135][T25766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.311938][ T6512] tipc: Disabling bearer [ 536.325860][ T6512] tipc: Disabling bearer [ 536.364155][ T6512] tipc: Left network mode [ 536.387093][T25780] dvmrp0: entered allmulticast mode [ 536.439977][ T6512] IPVS: stopping backup sync thread 19747 ... [ 536.644162][T25797] netlink: 'syz.3.5647': attribute type 1 has an invalid length. [ 536.663057][T25797] netlink: 'syz.3.5647': attribute type 10 has an invalid length. [ 536.676556][T25797] netlink: 'syz.3.5647': attribute type 4 has an invalid length. [ 536.686749][T25797] __nla_validate_parse: 5 callbacks suppressed [ 536.686767][T25797] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5647'. [ 536.734641][T25652] chnl_net:caif_netlink_parms(): no params data found [ 536.768352][T25801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5648'. [ 536.899749][ T5871] Bluetooth: hci2: command tx timeout [ 537.321510][T25652] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.351388][T25652] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.387514][T25652] bridge_slave_0: entered allmulticast mode [ 537.402566][T25652] bridge_slave_0: entered promiscuous mode [ 537.442114][T25652] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.486528][T25652] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.504496][T25652] bridge_slave_1: entered allmulticast mode [ 537.583876][T25652] bridge_slave_1: entered promiscuous mode [ 537.960272][T25652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.000796][T25832] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 538.020106][ T31] INFO: task udevd:10450 blocked for more than 143 seconds. [ 538.054282][T25652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.087084][ T31] Not tainted syzkaller #0 [ 538.100442][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.142135][ T31] task:udevd state:D stack:21896 pid:10450 tgid:10450 ppid:1 task_flags:0x400140 flags:0x00004006 [ 538.178037][ T31] Call Trace: [ 538.185938][ T31] [ 538.199511][ T31] __schedule+0x1798/0x4cc0 [ 538.217895][ T31] ? __pfx___schedule+0x10/0x10 [ 538.234070][ T31] ? schedule+0x91/0x360 [ 538.250051][ T31] schedule+0x165/0x360 [ 538.258754][ T31] io_schedule+0x80/0xd0 [ 538.271246][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 538.276824][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 538.285150][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 538.296007][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 538.303986][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 538.309704][ T31] do_read_cache_folio+0x1aa/0x590 [ 538.315035][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 538.321018][ T31] read_part_sector+0xb6/0x2b0 [ 538.326013][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 538.332124][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 538.338313][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 538.344450][ T31] bdev_disk_changed+0x75f/0x14b0 [ 538.350096][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 538.355686][ T31] ? wait_on_inode+0xc0/0x230 [ 538.361512][ T31] blkdev_get_whole+0x380/0x510 [ 538.366506][ T31] bdev_open+0x31e/0xd30 [ 538.371245][ T31] blkdev_open+0x457/0x600 [ 538.375885][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 538.381679][ T31] do_dentry_open+0x950/0x13f0 [ 538.386960][ T31] vfs_open+0x3b/0x340 [ 538.391292][ T31] ? path_openat+0x2ecd/0x3830 [ 538.396195][ T31] path_openat+0x2ee5/0x3830 [ 538.401370][ T31] ? arch_stack_walk+0xfc/0x150 [ 538.406374][ T31] ? stack_depot_save_flags+0x40/0x860 [ 538.412440][ T31] ? __pfx_path_openat+0x10/0x10 [ 538.418155][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.424461][ T31] do_filp_open+0x1fa/0x410 [ 538.429865][ T31] ? __lock_acquire+0xab9/0xd20 [ 538.434940][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 538.440747][ T31] ? _raw_spin_unlock+0x28/0x50 [ 538.445834][ T31] ? alloc_fd+0x64c/0x6c0 [ 538.450440][ T31] do_sys_openat2+0x121/0x1c0 [ 538.455297][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 538.461251][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 538.466598][ T31] ? rcu_is_watching+0x15/0xb0 [ 538.472959][ T31] __x64_sys_openat+0x138/0x170 [ 538.478115][ T31] do_syscall_64+0xfa/0x3b0 [ 538.482788][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.488725][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.494973][ T31] ? clear_bhb_loop+0x60/0xb0 [ 538.499945][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.505985][ T31] RIP: 0033:0x7f47f4aa7407 [ 538.510702][ T31] RSP: 002b:00007ffd123baad0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 538.519607][ T31] RAX: ffffffffffffffda RBX: 00007f47f5294880 RCX: 00007f47f4aa7407 [ 538.527795][ T31] RDX: 00000000000a0800 RSI: 000055732e092250 RDI: ffffffffffffff9c [ 538.535926][ T31] RBP: 000055732e07e910 R08: 0000000000000000 R09: 0000000000000000 [ 538.544063][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055732e0a56d0 [ 538.552743][ T31] R13: 000055732e08c190 R14: 0000000000000000 R15: 000055732e0a56d0 [ 538.561103][ T31] [ 538.576700][ T31] [ 538.576700][ T31] Showing all locks held in the system: [ 538.611587][ T31] 1 lock held by ksoftirqd/0/15: [ 538.616684][ T31] 1 lock held by khungtaskd/31: [ 538.626515][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 538.639008][ T31] 3 locks held by kworker/u8:2/36: [ 538.644466][ T31] #0: ffff88814cd69148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 538.670730][ T31] #1: ffffc90000ac7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 538.691957][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 538.704087][ T31] 2 locks held by getty/5635: [ 538.715078][ T31] #0: ffff8880340b70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 538.727299][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 538.738406][ T31] 3 locks held by kworker/u8:15/6492: [ 538.743804][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 538.756333][ T31] #1: ffffc900045dfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 538.768594][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 538.778121][ T31] 4 locks held by kworker/u8:33/6512: [ 538.783618][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 538.794882][ T31] #1: ffffc900046efbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 538.805762][ T31] #2: ffffffff8f52d1d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 538.815441][ T31] #3: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 538.827012][ T31] 1 lock held by udevd/10450: [ 538.833423][ T31] #0: ffff888143b63358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 538.842889][ T31] 3 locks held by kworker/u8:36/10454: [ 538.848654][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 538.861047][ T31] #1: ffffc90003597bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 538.873010][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 538.884197][ T31] 3 locks held by syz-executor/25652: [ 538.889720][ T31] #0: ffffffff8eca95e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 538.900878][ T31] #1: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 538.910054][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 538.921040][ T31] 1 lock held by syz.4.5655/25828: [ 538.926193][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 538.935378][ T31] 1 lock held by syz.4.5655/25830: [ 538.940878][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 538.950132][ T31] 3 locks held by syz.3.5656/25831: [ 538.955368][ T31] #0: ffff88808018c408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 538.965871][ T31] #1: ffffffff8f59db30 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 538.977088][ T31] #2: ffff88803da00cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 538.988007][ T5871] Bluetooth: hci2: command tx timeout [ 538.991858][ T31] [ 538.995809][ T31] ============================================= [ 538.995809][ T31] [ 539.008237][ T31] NMI backtrace for cpu 0 [ 539.008257][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 539.008277][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.008287][ T31] Call Trace: [ 539.008295][ T31] [ 539.008303][ T31] dump_stack_lvl+0x189/0x250 [ 539.008330][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.008350][ T31] ? __pfx__printk+0x10/0x10 [ 539.008385][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 539.008412][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 539.008438][ T31] ? __pfx__printk+0x10/0x10 [ 539.008464][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 539.008490][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 539.008515][ T31] watchdog+0xf93/0xfe0 [ 539.008542][ T31] ? watchdog+0x1de/0xfe0 [ 539.008569][ T31] kthread+0x70e/0x8a0 [ 539.008593][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.008613][ T31] ? __pfx_kthread+0x10/0x10 [ 539.008634][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.008650][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.008666][ T31] ? __pfx_kthread+0x10/0x10 [ 539.008686][ T31] ret_from_fork+0x439/0x7d0 [ 539.008707][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 539.008731][ T31] ? __switch_to_asm+0x39/0x70 [ 539.008749][ T31] ? __switch_to_asm+0x33/0x70 [ 539.008767][ T31] ? __pfx_kthread+0x10/0x10 [ 539.008788][ T31] ret_from_fork_asm+0x1a/0x30 [ 539.008824][ T31] [ 539.008836][ T31] Sending NMI from CPU 0 to CPUs 1: [ 539.159551][ C1] NMI backtrace for cpu 1 [ 539.159568][ C1] CPU: 1 UID: 0 PID: 6497 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 539.159592][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.159602][ C1] Workqueue: bat_events batadv_nc_worker [ 539.159628][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 539.159647][ C1] Code: e8 1b 21 d4 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 2d be 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 cc ca 7c 00 48 c7 c3 98 0f a2 92 49 03 1e 48 89 [ 539.159660][ C1] RSP: 0018:ffffc9000b9ff990 EFLAGS: 00000246 [ 539.159673][ C1] RAX: 1ffffffff1b7c5a3 RBX: 0000000000000001 RCX: d45eea03cd6e5200 [ 539.159684][ C1] RDX: ffff888030d51e00 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0 [ 539.159695][ C1] RBP: ffff88807c0cfaf0 R08: 0000000000000000 R09: ffffffff8b4857ea [ 539.159706][ C1] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: dffffc0000000000 [ 539.159718][ C1] R13: 1ffff1100fafa313 R14: ffffffff8dbe2d18 R15: dffffc0000000000 [ 539.159729][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 539.159742][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.159753][ C1] CR2: 00007ffd35fe7fa8 CR3: 0000000075c8c000 CR4: 00000000003526f0 [ 539.159767][ C1] Call Trace: [ 539.159773][ C1] [ 539.159779][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 539.159797][ C1] batadv_nc_process_nc_paths+0xfa/0x3a0 [ 539.159813][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 539.159830][ C1] batadv_nc_worker+0x429/0x610 [ 539.159850][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 539.159868][ C1] process_scheduled_works+0xae1/0x17b0 [ 539.159897][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.159921][ C1] worker_thread+0x8a0/0xda0 [ 539.159950][ C1] kthread+0x70e/0x8a0 [ 539.159968][ C1] ? __pfx_worker_thread+0x10/0x10 [ 539.159983][ C1] ? __pfx_kthread+0x10/0x10 [ 539.160000][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.160014][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.160029][ C1] ? __pfx_kthread+0x10/0x10 [ 539.160046][ C1] ret_from_fork+0x439/0x7d0 [ 539.160063][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 539.160081][ C1] ? __switch_to_asm+0x39/0x70 [ 539.160098][ C1] ? __switch_to_asm+0x33/0x70 [ 539.160115][ C1] ? __pfx_kthread+0x10/0x10 [ 539.160132][ C1] ret_from_fork_asm+0x1a/0x30 [ 539.160158][ C1] [ 539.161096][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 539.405189][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 539.414378][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.424432][ T31] Call Trace: [ 539.427709][ T31] [ 539.430638][ T31] dump_stack_lvl+0x99/0x250 [ 539.435300][ T31] ? __asan_memcpy+0x40/0x70 [ 539.439893][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.445085][ T31] ? __pfx__printk+0x10/0x10 [ 539.449667][ T31] vpanic+0x281/0x750 [ 539.454157][ T31] ? __pfx_vpanic+0x10/0x10 [ 539.458647][ T31] ? preempt_schedule+0xae/0xc0 [ 539.463481][ T31] ? preempt_schedule_common+0x83/0xd0 [ 539.468927][ T31] panic+0xb9/0xc0 [ 539.472633][ T31] ? __pfx_panic+0x10/0x10 [ 539.477042][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 539.482415][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 539.488580][ T31] watchdog+0xfd2/0xfe0 [ 539.492736][ T31] ? watchdog+0x1de/0xfe0 [ 539.497052][ T31] kthread+0x70e/0x8a0 [ 539.501108][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.505769][ T31] ? __pfx_kthread+0x10/0x10 [ 539.510342][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.515616][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.520801][ T31] ? __pfx_kthread+0x10/0x10 [ 539.525380][ T31] ret_from_fork+0x439/0x7d0 [ 539.529988][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 539.535082][ T31] ? __switch_to_asm+0x39/0x70 [ 539.540015][ T31] ? __switch_to_asm+0x33/0x70 [ 539.544774][ T31] ? __pfx_kthread+0x10/0x10 [ 539.549355][ T31] ret_from_fork_asm+0x1a/0x30 [ 539.554126][ T31] [ 539.557441][ T31] Kernel Offset: disabled [ 539.561775][ T31] Rebooting in 86400 seconds..