last executing test programs: 3.623588445s ago: executing program 0 (id=4888): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000003c0)=0x8002, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1, 0x9}, 0x1c) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xe5}], 0x1, 0x40000002, 0x0) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000140)={{0x3a, @empty, 0x4e21, 0x2, 'wlc\x00', 0x4, 0x0, 0x51}, {@broadcast, 0x4e23, 0x10000, 0x2, 0x7, 0x1}}, 0x44) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.647121095s ago: executing program 0 (id=4896): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff00000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0xb6, 0x0, 0x8, 0x2dbc, 0x2, 0x800}, {0x3, 0x3, 0x3ff, 0x80, 0x5c, 0x4}], ['\x00', '\x00', '\x00']}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.539844536s ago: executing program 3 (id=4899): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet6(r2, &(0x7f0000004dc0)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000540)="a69c7e", 0x3}], 0x1}}], 0x2, 0x4000090) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.508518458s ago: executing program 1 (id=4902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x9, 0x801}, 0x14}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa8}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd29}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400002700000000000a0000010900010073797a310000000054000480500001800b00010074617267657411004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 1.41190137s ago: executing program 0 (id=4903): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x4, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffffdd7, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.226433142s ago: executing program 0 (id=4905): socket(0x10, 0x803, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) getsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000000040)=""/202, &(0x7f0000000400)=0xca) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000082018cc8377b307adf1059d77e6fc7391c0e000000009b"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, &(0x7f00000022c0)="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", 0x1000, 0x24048000, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800ffff35823a99ecbafc6c668194d24d6e97786aede6bd77069bad2223b123b0642c55c0bc3057a6a32448c172600599d9d7cba273ac213fc8cdaa173da654b50fc3da0c2ad3ee2ab4ace28981db57c16e869809500110115d2914b7a1ff7ed13396fdbaced494d7e9a923ddfcb82f45a6797577cfdebbae501a01f19aab313d9ba3c73bca581ae0dee9ad585c29043bd78c00bb04f4be7a8fd19ce6999b244bb94ffca7aa2a622406fcb7bc4b9e858827f02cfcf8f3c0a212c2317890e83c76aac4e9e046025d9b825ffbaabb882c2d2e95f67c6c7269369dd2cae7523d38fb27f196d17a3ff1f4d5fbd6a7e0", @ANYRES16=r9, @ANYRESOCT=r9], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xda8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xfff8, 0x7, 0x8, 0x200}, {0x22, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.151885831s ago: executing program 3 (id=4906): bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x10, 0x100800) accept4$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000240)=0xffffffffffffff6a, 0x0) r3 = socket(0xb, 0x803, 0x3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6800000010001ffffcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000400012800e0001006970366772657461700000002c00028014000700fc00000000000000000000000000000014000600fc02000000000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.013025239s ago: executing program 2 (id=4907): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 986.037416ms ago: executing program 1 (id=4908): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000000000000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 870.645252ms ago: executing program 3 (id=4909): syz_init_net_socket$ax25(0x3, 0x5, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x44011) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd811000000140012800c0001006d6163767461700014000380080001"], 0x3c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r7, r8, 0x37, 0xce2d3afaee44ac6a, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 869.763556ms ago: executing program 1 (id=4910): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x6) clock_gettime(0x0, &(0x7f0000004180)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004000)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/117, 0x75}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000180)=""/26, 0x1a}], 0x3, &(0x7f00000002c0)=""/21, 0x15}, 0x8}, {{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/65, 0x41}], 0x1, &(0x7f0000000440)=""/168, 0xa8}, 0x3ff}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/131, 0x83}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f00000005c0)=""/80, 0x50}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000004200)=""/237, 0xed}, {&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a00)=""/158, 0x9e}, {&(0x7f0000000ac0)}], 0x8, &(0x7f0000000b80)=""/142, 0x8e}, 0x6}, {{&(0x7f0000000c40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)=""/100, 0x64}, {&(0x7f0000000d40)=""/241, 0xf1}, {&(0x7f0000000e40)=""/212, 0xd4}, {&(0x7f0000000f40)=""/73, 0x49}], 0x4, &(0x7f0000001000)=""/248, 0xf8}, 0x9}, {{&(0x7f0000001100)=@can, 0x80, &(0x7f0000003780)=[{&(0x7f0000001180)=""/228, 0xe4}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/241, 0xf1}, {&(0x7f0000002380)=""/117, 0x75}, {&(0x7f0000002400)=""/217, 0xd9}, {&(0x7f0000002500)=""/166, 0xa6}, {&(0x7f00000025c0)=""/181, 0xb5}, {&(0x7f0000002680)=""/206, 0xce}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x9, &(0x7f0000003840)=""/104, 0x68}, 0x9}, {{&(0x7f00000038c0)=@xdp, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/196, 0xc4}, {&(0x7f0000003b40)=""/180, 0xb4}, {&(0x7f0000003c00)=""/143, 0x8f}, {&(0x7f0000003cc0)=""/234, 0xea}, {&(0x7f0000003dc0)=""/24, 0x18}, {&(0x7f0000003e00)=""/127, 0x7f}, {&(0x7f0000003ec0)=""/95, 0x5f}], 0x8, &(0x7f0000003fc0)=""/4, 0x4}}], 0x6, 0x10100, &(0x7f00000041c0)={r3, r4+60000000}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 845.694411ms ago: executing program 4 (id=4911): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140a, 0x1f95844b79e8a54d, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24000880) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000016b, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd714100027d003b11"}]}}}}}}}, 0x0) 806.968299ms ago: executing program 2 (id=4912): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) 679.82908ms ago: executing program 4 (id=4913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@local, @loopback, 0xff7e, "66c5aff8a7eb3af1f6cec2e7420000008c84ae8c170000c4ffff00", 0x3, 0x0, 0x80, 0x4f04}, 0x92) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) 679.181867ms ago: executing program 3 (id=4914): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket(0x28, 0x80000, 0x5) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) listen(r1, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r8 = syz_open_procfs$namespace(r6, &(0x7f00000000c0)='ns/user\x00') ioctl$FIBMAP(r8, 0x1, &(0x7f0000000800)=0x6d) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x24000080) 635.885465ms ago: executing program 2 (id=4915): syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb089078001090780200"/50], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="df4c6354dda79b266ac5f1056794eb8e0ecd75db33b52ce71f0927b26c05d56745b73b357b543671fee788b3c3cff16b78d7a2fdfffc06624591539211af76a53c9d42", 0x43}, {&(0x7f00000000c0)="05e40d445aeb82186adc6a1f34a8ce7b34c623d96e3bc29c1b553dad298d84d5f30c105744b6d7e87145ce94b61f25c9fdd773e1d7febfc9dad7f1f4a593be8b0b29e36b8a8759b83ca6e8c39ca53450534470f56e9977665b181e8e0cc620633fabb9f9d96c3dd12596e4c9facb34563f57c256dbe568f7dc86fe", 0x7b}, {&(0x7f0000000140)="e177f354e1a3b6d8a240f6810022dbfa0c9982d17ea6100dea913edd140d9e89cf5c7ca892177ddbe592aa3afa250d5910596870cf44b148b27ade9593", 0x3d}, {&(0x7f0000000180)="75216c21ca6e4d01faed640398a1197017b9ead7387c6335ea39e6099ad2762b801cd400f7192802438e3b79da9cfbfce3461fbd0f0534e74060c85040502adfcd0c8ee5f4e9378a5e0e87b9295c2e0373c3e0883465f79d29c3e11a7d6f82fa4ced977d9da5da098acf43be4c4a8109e3901ecc63c263c208412f3f09", 0x7d}, {&(0x7f0000000200)="9f949ac2760bf544adad3098ad3ee49f3fd20341374483b6c36daa465ad6cd8c481fbd", 0x23}, {&(0x7f0000000240)="071becfd178f4a5c29e5110b0ca006eea486e6658709c408ee80b5bbf55677ac76e6ac7c9737e52c7abf7fe231e5b2563086b22da1e7e2a4cefb44c8871e9d8dfd9deb185ef67030500249984fd6f2a4be9b6e7355825664be6c1f3fb65957b84b41a5a085c86775ca066628e40012a91754106e972cb3bf34f7d73eb17dae89b43f8e28a4ec08e1f87d1676394b359189cf66445d838c053a1c0932fc48110cfc7de222b1283a34e043376038f2c91cd4938cb35266068cb10caa0ee94b4d256b5f311451f0e8f24a", 0xc9}], 0x6}, 0xc0) 615.90145ms ago: executing program 1 (id=4916): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) (async) sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) 511.782269ms ago: executing program 4 (id=4917): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x81c3, 0x0, 0x0, 0x41100, 0xa}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r4, 0x25, 0x4, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd6000020000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000f90780000ea23fc6b"], 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2}, 0x1}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x400ee) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000440), &(0x7f0000000480)=0x4) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 510.635291ms ago: executing program 3 (id=4918): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1404, 0x1, 0x70bd26, 0x34, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4011) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1412, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240)="d293029031f4836b210183a6361dcd1e", 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001400)={'pim6reg\x00', 0x0}) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000001640)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x114, 0x15, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x3f, 0x8, "10feeb96a1978b0f0c4f2f51185ff01aeab344c683185cbb61ed6f6708e0c31920b89c87ccd1bd37f0a488fd4297693cc896519314e7c9a75da635"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x6a, 0x8, "07beefb881c564bd4d33b3a7a80954c4ec75769a90b9ea7dfe52d9eafac60807c26d535d3fe93ec00c95e94d462838217cece2372aeaf1a49eada98930dff6e011792f17fcd07360f0ec0a4d0f15ee1218acf08c17401e461ff3d89b407d3d47ab5ee578f385"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x40, r7, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendto$packet(r5, &(0x7f00000017c0)="fcb252c8d3cc061c64bb9d8aad51e2cfc009c0f72d00d91baebbda45cb0a399bdca98cff186973b3fa0318d3ee32cfa67869fb031dba07be235f528ec67d739b3216f2c593a06c9fc56b9ed1ae32ca167fe6fc9abbbfe2b69d28c0c476c0c556abff276de22c1afe1e0228c6eb410400c8bf7ecfe77c70856db58646b3940132992188979f33f5d708c432eed6d47e8781", 0x91, 0x854, &(0x7f0000001880)={0x11, 0x9b307c6cf200ce76, r4, 0x1, 0x4, 0x6, @remote}, 0x14) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r6) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000001c00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001940)={0x254, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x99}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ef3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x932a}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2ad}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe9a9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb39}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56634d81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93bd}]}]}]}, 0x254}}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000002000)=@broute={'broute\x00', 0x20, 0x2, 0x35c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001c80], 0x0, &(0x7f0000001c40), &(0x7f0000001c80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x11, 0x19, 0x200, 'veth0_to_bond\x00', 'syzkaller0\x00', 'veth1_virt_wifi\x00', 'pimreg0\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0xce, 0xfe, 0x22e, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x1}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7}}}], [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x3, 0x1, 0x11, 'macsec0\x00', 'gretap0\x00', 'pimreg0\x00', 'dvmrp0\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x95}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x3d4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000002080)={0x0, 0x80000000}, &(0x7f00000020c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000002100)={r9, 0x2}, &(0x7f0000002140)=0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r10, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4040011) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0xbc, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x505c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x577393ad}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20044881) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r12, 0x11, 0x1, &(0x7f0000002400)=0x7, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000002440)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000002480)={r9, 0x5}, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000009, 0x10010, 0xffffffffffffffff, 0x79eaa000) 501.79227ms ago: executing program 1 (id=4919): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x10, 0x2, 0x17f9, 0x7, 0x8, 0xc4, 0x1, 0x5, 0x9, 0x8, 0x3f4d3730, 0x8, 0x3, 0x4, 0x1, 0x7, [0x8000, 0x8]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r1], 0x44}}, 0x8000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0xfdfd, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r5, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0xc000) 480.572141ms ago: executing program 2 (id=4920): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x7, 0x2, 0x5, 0x9, 0x7, 0x1, 0xc0, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in={{0x2, 0x4e20, @remote}}}, 0x84) (async) syz_emit_ethernet(0x100e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @multicast, @void, {@generic={0x11, "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"}}}, &(0x7f0000001180)={0x1, 0x2, [0x490, 0xdf0, 0x294, 0x21]}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000001240)=0x18) (async) bind$inet(r0, &(0x7f0000001280)={0x2, 0x4e20, @private=0xa010102}, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4080) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001680), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000016c0)={'team0\x00', 0x0}) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x58, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000017c0)={'bridge0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001800)={'wg0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001840)=0x0, &(0x7f0000001880)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001900)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001980)={'wg0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0x1, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001b00)={'syztnl0\x00', &(0x7f0000001a80)={'syztnl0\x00', 0x0, 0x4, 0xdf, 0xf4, 0x1, 0x22, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x10, 0x67, 0x9}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001bc0)={'syztnl1\x00', &(0x7f0000001b40)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x9, 0x7, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x64, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, {[@end, @ssrr={0x89, 0x7, 0xbc, [@remote]}, @end, @ssrr={0x89, 0x17, 0x4b, [@local, @private=0xa010102, @multicast1, @multicast1, @rand_addr=0x64010102]}]}}}}}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001c00)={'ip6gre0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001c40)=0x0, &(0x7f0000001c80)=0x4) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000023c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002380)={&(0x7f0000001cc0)={0x6c0, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0xe2, 0xe0, 0xfffffff8}]}}}]}}, {{0x8, 0x1, r12}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000}}, {0x8, 0x6, r13}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x4, 0x5, 0xa}, {0xfffa, 0x8, 0x2}, {0x1, 0x9, 0x7f, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r15}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x400, 0x0, 0x7, 0x7}, {0x6, 0x4, 0x4, 0x2}, {0x6, 0x2, 0xfa, 0x6}, {0x100, 0x8, 0x3, 0xdb6}, {0x9, 0x7d, 0xb, 0x1000}, {0x1, 0x79, 0x29, 0xcab6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe7c7}}, {0x8}}}]}}]}, 0x6c0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) (async, rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x80) (rerun: 32) 331.578366ms ago: executing program 4 (id=4921): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000001180000001800000004000000020000000000000c02000000000000000000000d0000000000005f00"], 0x0, 0x34}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000001180000001800000004000000020000000000000c02000000000000000000000d0000000000005f00"], 0x0, 0x34}, 0x20) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x90) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) bind$bt_l2cap(r7, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r7, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000012c0)=0xe) accept4(r7, 0x0, 0x0, 0x80000) 330.446418ms ago: executing program 2 (id=4922): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) shutdown(r1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) listen(r2, 0x8) listen(r1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r3, &(0x7f0000000200)=""/163, 0xa3, 0x0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) accept(r1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="a801000010000100000000000000000000000000000000000000000000000000fe80000000000000000000bf8638dabb0000fff720009fdc000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r6], 0x1a8}, 0x1, 0x0, 0x0, 0x8804}, 0x4810) 312.052936ms ago: executing program 3 (id=4923): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x26, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 260.013648ms ago: executing program 1 (id=4924): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x6}, &(0x7f0000000b80)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000c00)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x7, @remote, 0x7ff}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000180)="3f1af859b3171a2a6276045cf57715f65f647be8e27c2c990eef18714b464c29d0032c76a5791e4fec5b7cee272a5ba3cb77a50ed81850789ccdc9e62432cb3b5b34523b6bceab75559c81e68946ec6d3fc737b2e0cc203b45", 0x59}, {&(0x7f0000000500)="b3ef657e5b50a9948c85cb54754b7f739cafe44d9efb7860ed999da5041e60c8376e013c2f3b50c26ebb386a0805672f956c6ba1a250daed94bb9c771754a3532992c5ceedb1a3a1d716a58d328c1e44a96c21fccb32083bb33100fdef458ab322afab0d4d5862fdfe1ab16bcba9524b0cf46522d833452ebc22187b53a5dd7e661c5b24b148fbb3ad5b959c6723b8b5626a1b1b68c2a2aa25daf59a0f7ccb17145dd8eaf28f16f7b11184f370ef5bf32a37af38d4ed505ea55258e3ee994bf2a21bac", 0xc3}, {&(0x7f00000002c0)}, {&(0x7f0000000740)="a111fb0bb14a4a7fe08b58e58ba686a88c9513418374791b4cfdfa42d35f0eb69bf171b2cb9b6094d1682550d9a264edd0af29d5f8f94ea2b662262183b2f84126de10a7c8a5ebffcb443aed0cbc50837fa844a657592bcb4ca8b40d68db9a5a120303b7a7e1dd1973e7a3c0f507469ac519a06c83572b2af1c77237f46bdab4c912127b958c6b780ad3be908188458dc56e455a37a5e5ad3b0ad5f88bf0cefd4945", 0xa2}, {&(0x7f0000000440)="7c87a5ba1c08a91c8eee59cf83282055ea7187bc24667b", 0x17}, {&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000000680)="f9defca9913a8c2e888580def35dc6b7561b18b57d6e08d613e0fcfaf9608620dbed3f9b76226e4919ca111a15cbcba9def0ccbadbc232b651d0469559d7b65ebc2fa0fb", 0x44}, {&(0x7f0000000900)="1e3a6975ddb6a447f5c10d5eb81e4f60ee586efd1dedc435c945cdaff664315006ea8d223c40627d16a13f0d6c826824f7354ffd3f163710ef34d29fadd098b0dd1e82d4846dbc009490a7d8a8d3ebeaabebccf70a71cc2dbff8800e368569cb9e4b0ab9d1bda3daa1e4a12aee60b51018149c61cc522132478bc02d4fa41c3d6b6ce122d7780aff1d7a771f43c46e1067363c0d96d43d818aec67e87285e5ac1fd542580b9f18", 0xa7}, {&(0x7f00000009c0)="8a9994739ec13bea05768e3d469611ac0b46f16b9ea6f17b1cf927de4ab7424b3f79c2c332a71085b3af71a56595bb2230d0e1c78fea9d637f5807cdb7f008a9207b050abc7da5efff774c25ebc4579aacee16ff56a04932d87600b26281d3ecaa886f7f075afd09acf031011c207579bbee55a8a0bfedc1c0a28fb75cfc8131ca9e4432212cd56e9881f13cb738332f2a1bd2aff32f411b1cfdc6a81b90419015006e894681ce4606d256f32f38df3626adadb51c66d942ec5e968ef21647c19350a31f699ba35e1d3001", 0xcb}], 0x9, &(0x7f0000000bc0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x8202, 0x81, 0xebd8, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8000, 0x7f39, 0xae, r4}}], 0x40, 0x24004001}, 0x4000840) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7) sendmsg$alg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x400c080) r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="344fc02de26822306d00", @ANYRES16=r8, @ANYBLOB="020026bd7000fddbdf250100000000000000094100000018001800006fd969623a76657468315f766c616e000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x28, r9, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x42000}, 0x4000054) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 207.80655ms ago: executing program 4 (id=4925): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 206.537749ms ago: executing program 0 (id=4926): r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2e4, r6, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe678}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb68}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2751}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91a4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f921806}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf725}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc3f}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4080004}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000000000000000076a3a0b0b507194bcfbf840cddb01ec85b34888107310a2b90ff033dba00920e63", @ANYRES32=r4, @ANYBLOB="0c00990009000000740000000800a0009e0900000800a1000f000000080026008009000008009f0004000000"], 0x48}}, 0x20000000) 165.775154ms ago: executing program 2 (id=4927): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110000000000ffffffdf0f000000080003007557f327b913b295a0ab93d9720d0950d64d0d67e18e2d91022ad0b3e7", @ANYRES32=r1, @ANYBLOB="0500370001000000"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110000000000ffffffdf0f000000080003007557f327b913b295a0ab93d9720d0950d64d0d67e18e2d91022ad0b3e7", @ANYRES32=r1, @ANYBLOB="0500370001000000"], 0x24}}, 0x0) (async) 79.001098ms ago: executing program 4 (id=4928): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r4, 0x100, 0x306c}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x70}}, 0xeb64d656001f6f32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r4, 0x25, 0x1, @void}, 0x10) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r5 = accept4(r0, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x0, 0x80000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) close(r0) socket(0x21, 0x6, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 0 (id=4929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x20801}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.1.3105'. [ 358.074212][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3107'. [ 358.085484][ T6781] IPVS: starting estimator thread 0... [ 358.156645][T17067] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.175847][T17195] IPVS: using max 25 ests per chain, 60000 per kthread [ 358.189954][T17067] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 358.200251][T17201] netlink: 'syz.0.3110': attribute type 1 has an invalid length. [ 358.208633][T17201] netlink: 'syz.0.3110': attribute type 1 has an invalid length. [ 358.216800][T17067] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.279625][T17205] netlink: 'syz.1.3112': attribute type 5 has an invalid length. [ 358.336143][T17067] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.349306][T17067] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 358.365630][T17067] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.410601][T17213] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3115'. [ 358.454021][T17067] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.465005][T17215] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 358.475268][T17067] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 358.501823][T17067] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.523958][T17215] netlink: 'syz.0.3116': attribute type 10 has an invalid length. [ 358.534533][ T6809] tipc: Node number set to 1063152438 [ 358.541218][T17215] veth0_virt_wifi: entered allmulticast mode [ 358.577849][T17215] team0: Port device veth0_virt_wifi added [ 358.593219][ T7035] tipc: Resetting bearer [ 358.643874][T17067] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.659495][T17067] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 358.690184][T17067] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.034980][T17067] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.097052][T17067] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.149247][T17067] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.175426][T17067] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.377705][T17269] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 359.430726][T17269] 8021q: adding VLAN 0 to HW filter on device bond10 [ 359.457064][T17269] bond10: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 359.521041][T17269] bond10: (slave ip6gretap1): making interface the new active one [ 359.564236][T17269] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 359.716860][ T5837] Bluetooth: hci4: command tx timeout [ 359.759523][T17067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.849791][T17067] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.870100][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.877347][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.944333][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.951642][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.974329][T17296] netlink: 'syz.3.3135': attribute type 1 has an invalid length. [ 360.057274][T17296] 8021q: adding VLAN 0 to HW filter on device bond11 [ 360.695817][T17067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.839750][T17067] veth0_vlan: entered promiscuous mode [ 360.861388][T17067] veth1_vlan: entered promiscuous mode [ 360.971282][T17067] veth0_macvtap: entered promiscuous mode [ 361.007983][T17067] veth1_macvtap: entered promiscuous mode [ 361.062595][T17067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.102128][T17354] __nla_validate_parse: 11 callbacks suppressed [ 361.102149][T17354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3151'. [ 361.120552][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3152'. [ 361.134405][T17067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.144846][T17354] netlink: 'syz.1.3151': attribute type 2 has an invalid length. [ 361.173642][ T7048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.176564][T17356] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3152'. [ 361.186291][T17359] netlink: 'syz.3.3153': attribute type 5 has an invalid length. [ 361.211831][ T7048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.239947][ T7048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.271685][ T7048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.335021][ T94] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 150 seconds [ 361.350227][ T94] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 150 seconds [ 361.361731][ T94] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 150 seconds [ 361.373076][ T94] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 150 seconds [ 361.510674][T17363] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 361.630256][ T7044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.649103][ T7044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.749840][ T7030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.772602][ T7030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.785886][ T5837] Bluetooth: hci4: command tx timeout [ 361.910548][T17396] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 361.987289][T17402] netlink: 'syz.1.3164': attribute type 10 has an invalid length. [ 362.350180][T17411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3167'. [ 362.828605][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.841460][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.850170][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.858646][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.866861][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.989530][T17440] lo speed is unknown, defaulting to 1000 [ 363.004629][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3180'. [ 363.026933][T17447] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3180'. [ 363.055755][T17447] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3180'. [ 363.078698][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3180'. [ 363.115760][T17457] netlink: 'syz.1.3181': attribute type 11 has an invalid length. [ 363.207334][T17459] netlink: 'syz.4.3179': attribute type 1 has an invalid length. [ 363.316445][T17465] bond4: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 363.329102][T17465] bond4: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 363.339700][T17465] bond4: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 363.411277][T17470] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.3184'. [ 363.426427][T17459] bond4: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 363.447988][T17459] bond4: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 363.601051][T17478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3186'. [ 363.682419][ T6781] IPVS: starting estimator thread 0... [ 363.794806][T17484] IPVS: using max 28 ests per chain, 67200 per kthread [ 363.864896][ T5837] Bluetooth: hci4: command tx timeout [ 363.888328][T17440] chnl_net:caif_netlink_parms(): no params data found [ 363.956142][T17493] netlink: 'syz.1.3189': attribute type 19 has an invalid length. [ 364.010229][T17493] netlink: 'syz.1.3189': attribute type 19 has an invalid length. [ 364.038582][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.091406][T17503] bond5: entered allmulticast mode [ 364.097633][T17503] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.107508][T17503] bridge0: port 1(bond5) entered blocking state [ 364.115004][T17503] bridge0: port 1(bond5) entered disabled state [ 364.127066][T17503] bond5: entered promiscuous mode [ 364.139930][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.150483][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.241638][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.250782][T17440] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.258342][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.268537][T17440] bridge_slave_0: entered allmulticast mode [ 364.278171][T17440] bridge_slave_0: entered promiscuous mode [ 364.287806][T17440] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.304694][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.311993][T17440] bridge_slave_1: entered allmulticast mode [ 364.321277][T17440] bridge_slave_1: entered promiscuous mode [ 364.381268][T17440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.396030][T17440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.457592][T17440] team0: Port device team_slave_0 added [ 364.467470][T17440] team0: Port device team_slave_1 added [ 364.527906][T17440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.538169][T17440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.564850][T17440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.608553][T17440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.625760][T17440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.686459][T17440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.698474][T17531] netlink: 'syz.0.3202': attribute type 8 has an invalid length. [ 364.802683][T17440] hsr_slave_0: entered promiscuous mode [ 364.812684][T17440] hsr_slave_1: entered promiscuous mode [ 364.829274][T17440] debugfs: 'hsr0' already exists in 'hsr' [ 364.835406][T17440] Cannot create hsr debugfs directory [ 364.994650][ T5837] Bluetooth: hci2: command tx timeout [ 365.045723][T17548] netlink: 'syz.2.3209': attribute type 2 has an invalid length. [ 365.246339][T17440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.364058][T17440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.404925][T17575] syzkaller0: entered promiscuous mode [ 365.410460][T17575] syzkaller0: entered allmulticast mode [ 365.457561][T17440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.501835][T17580] netlink: 'syz.2.3219': attribute type 1 has an invalid length. [ 365.541745][T17440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.863723][T17440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.879327][T17440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.924950][T17440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.956265][T17440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.027569][T17600] team0: Device vti1 is of different type [ 366.237947][T17618] netlink: 'syz.4.3227': attribute type 3 has an invalid length. [ 366.249541][T17616] __nla_validate_parse: 6 callbacks suppressed [ 366.249561][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 366.254134][T17619] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3228'. [ 366.335126][T17621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3229'. [ 366.344310][T17621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3229'. [ 367.068182][ T5837] Bluetooth: hci2: command tx timeout [ 367.741684][T17440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.785697][T17642] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3232'. [ 367.859247][T17440] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.878622][T17649] 8021q: VLANs not supported on ip6tnl0 [ 367.928426][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.935644][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.966940][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.974131][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.189086][T17659] syzkaller0: entered promiscuous mode [ 368.194745][T17659] syzkaller0: entered allmulticast mode [ 368.278182][T17678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3242'. [ 368.344179][T17682] sctp: [Deprecated]: syz.4.3244 (pid 17682) Use of int in maxseg socket option. [ 368.344179][T17682] Use struct sctp_assoc_value instead [ 369.154663][ T5837] Bluetooth: hci2: command tx timeout [ 369.591128][T17662] syzkaller0: left promiscuous mode [ 369.597198][T17662] syzkaller0: left allmulticast mode [ 369.978912][T17711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.000335][T17704] lo speed is unknown, defaulting to 1000 [ 370.001083][T17711] syzkaller1: entered promiscuous mode [ 370.013216][T17711] syzkaller1: entered allmulticast mode [ 370.024409][T17704] lo speed is unknown, defaulting to 1000 [ 370.110948][T17704] lo speed is unknown, defaulting to 1000 [ 370.276112][T17440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.406451][T17440] veth0_vlan: entered promiscuous mode [ 370.430273][T17440] veth1_vlan: entered promiscuous mode [ 370.517493][T17440] veth0_macvtap: entered promiscuous mode [ 370.543204][T17440] veth1_macvtap: entered promiscuous mode [ 370.592378][T17440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.640604][T17704] infiniband sz1: set active [ 370.647768][T17704] infiniband sz1: added lo [ 370.653633][T17704] sz1: rxe_create_cq: returned err = -12 [ 370.660280][T17704] infiniband sz1: Couldn't create ib_mad CQ [ 370.670126][T17704] infiniband sz1: Couldn't open port 1 [ 370.672924][T17440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.691540][ T6809] lo speed is unknown, defaulting to 1000 [ 370.698572][ T7035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.731381][ T7035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.750997][ T7035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.773214][T17704] RDS/IB: sz1: added [ 370.779499][T17704] smc: adding ib device sz1 with port count 1 [ 370.790168][T17704] smc: ib device sz1 port 1 has no pnetid [ 370.801648][ T7044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.812020][ T6809] lo speed is unknown, defaulting to 1000 [ 370.842858][T17704] lo speed is unknown, defaulting to 1000 [ 371.047536][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.084485][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.125982][T17753] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3263'. [ 371.190570][ T7044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.205921][ T7044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.225841][ T5837] Bluetooth: hci2: command tx timeout [ 372.149106][T17772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.188297][T17704] lo speed is unknown, defaulting to 1000 [ 372.370613][T17799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3268'. [ 372.494128][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.510493][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.520524][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.528966][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.537167][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.538898][T17804] xt_HMARK: spi-set and port-set can't be combined [ 372.648822][T17801] lo speed is unknown, defaulting to 1000 [ 373.277217][T17801] lo speed is unknown, defaulting to 1000 [ 373.777253][T17863] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3280'. [ 373.889021][T17866] syzkaller1: entered promiscuous mode [ 373.894973][T17866] syzkaller1: entered allmulticast mode [ 373.909900][T17866] tipc: Started in network mode [ 373.915840][T17866] tipc: Node identity , cluster identity 4711 [ 373.922045][T17866] tipc: Failed to set node id, please configure manually [ 373.967158][T17866] tipc: Enabling of bearer rejected, failed to enable media [ 373.997908][T17704] lo speed is unknown, defaulting to 1000 [ 374.404871][T17879] x_tables: duplicate underflow at hook 1 [ 374.665944][ T5837] Bluetooth: hci3: command tx timeout [ 374.699629][T17890] bond1: Unable to set up delay as MII monitoring is disabled [ 374.722689][T17890] bond1 (unregistering): Released all slaves [ 374.792527][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 374.812932][T17801] chnl_net:caif_netlink_parms(): no params data found [ 374.838753][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 374.880619][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 374.934130][T17704] lo speed is unknown, defaulting to 1000 [ 374.955385][T17902] Unsupported ieee802154 address type: 0 [ 375.234414][T17801] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.254734][T17801] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.262056][T17801] bridge_slave_0: entered allmulticast mode [ 375.287046][T17801] bridge_slave_0: entered promiscuous mode [ 375.308660][T17801] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.327770][T17801] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.367043][T17801] bridge_slave_1: entered allmulticast mode [ 375.384784][T17801] bridge_slave_1: entered promiscuous mode [ 375.601098][T17930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3295'. [ 375.610999][T17704] lo speed is unknown, defaulting to 1000 [ 375.617083][T17801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.642452][T17801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.777177][T17801] team0: Port device team_slave_0 added [ 375.793275][T17941] netlink: 'syz.3.3299': attribute type 1 has an invalid length. [ 375.802249][T17941] netlink: 'syz.3.3299': attribute type 7 has an invalid length. [ 375.813536][T17801] team0: Port device team_slave_1 added [ 375.819641][T17941] netlink: 'syz.3.3299': attribute type 8 has an invalid length. [ 375.831886][T17941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3299'. [ 375.859724][T17941] netlink: 'syz.3.3299': attribute type 6 has an invalid length. [ 375.914925][T17801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.929210][T17801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.993649][T17801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.050612][T17801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.063774][T17801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.096031][T17801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.109389][T17704] lo speed is unknown, defaulting to 1000 [ 376.208697][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3300'. [ 376.239931][T17801] hsr_slave_0: entered promiscuous mode [ 376.256355][T17801] hsr_slave_1: entered promiscuous mode [ 376.268770][T17801] debugfs: 'hsr0' already exists in 'hsr' [ 376.278109][T17801] Cannot create hsr debugfs directory [ 376.371041][T17953] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 376.499609][T17704] lo speed is unknown, defaulting to 1000 [ 376.547652][T17952] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 376.580727][T17952] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 376.626690][T17801] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 376.744776][ T5837] Bluetooth: hci3: command tx timeout [ 376.763366][T17961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3304'. [ 376.806575][T17801] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 377.002283][T17801] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 377.198486][T17801] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 377.231877][T17704] lo speed is unknown, defaulting to 1000 [ 377.243545][T17972] netlink: 'syz.0.3307': attribute type 7 has an invalid length. [ 377.463836][T17801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.494201][T17801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.519646][T17801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.552974][T17801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.657698][T17988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.672065][T17997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3311'. [ 377.688869][T17704] lo speed is unknown, defaulting to 1000 [ 377.797707][T17988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.993172][T17801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.067397][T17801] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.093697][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.100953][ T7035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.169850][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.177110][ T7035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.239828][T17988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.371626][T17988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.480245][T18012] netlink: 'syz.1.3317': attribute type 23 has an invalid length. [ 378.566975][ T7035] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.592146][ T7035] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.601270][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.614129][ T7035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.637945][ T7050] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.775565][T18022] sctp: [Deprecated]: syz.3.3319 (pid 18022) Use of int in maxseg socket option. [ 378.775565][T18022] Use struct sctp_assoc_value instead [ 378.824886][ T5828] Bluetooth: hci3: command tx timeout [ 378.830456][T18009] netlink: 'syz.0.3316': attribute type 23 has an invalid length. [ 378.870411][T17801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.113210][T18037] Unsupported ieee802154 address type: 0 [ 379.400929][T18047] No such timeout policy "syz1" [ 379.435853][T18048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3323'. [ 379.580627][T17801] veth0_vlan: entered promiscuous mode [ 379.624300][T17801] veth1_vlan: entered promiscuous mode [ 379.719959][T17801] veth0_macvtap: entered promiscuous mode [ 379.744718][T17801] veth1_macvtap: entered promiscuous mode [ 379.807015][T17801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.833081][T17801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.858667][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.886314][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.914358][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.941268][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.990014][T18067] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3330'. [ 380.024545][T18063] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.038876][T18063] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.046187][T18063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.112888][ T7035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.137411][ T7035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.205155][ T7035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.213294][ T7035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.286457][T18074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3332'. [ 380.302704][T18076] netlink: 'syz.2.3334': attribute type 5 has an invalid length. [ 380.361390][T18081] netlink: 696 bytes leftover after parsing attributes in process `syz.3.3335'. [ 380.480743][T18083] tipc: Started in network mode [ 380.485856][T18083] tipc: Node identity ea954f827a01, cluster identity 4711 [ 380.493742][T18083] tipc: Enabled bearer , priority 0 [ 380.526504][T18083] veth1_to_team: entered promiscuous mode [ 380.526573][T18088] netlink: 'syz.4.3267': attribute type 13 has an invalid length. [ 380.532304][T18083] veth1_to_team: entered allmulticast mode [ 380.577924][T18088] gretap0: refused to change device tx_queue_len [ 380.580371][T18093] IPVS: length: 33 != 24 [ 380.586659][T18088] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 380.632677][T18082] tipc: Disabling bearer [ 380.789449][T18105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3340'. [ 380.835293][T18105] bridge_slave_0: default FDB implementation only supports local addresses [ 380.878999][T18110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3343'. [ 380.888208][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3343'. [ 380.908767][ T5828] Bluetooth: hci3: command 0x0419 tx timeout [ 380.944956][T18114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3341'. [ 380.962796][T18113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3344'. [ 381.161419][T18116] bond1: option lp_interval: invalid value (0) [ 381.214600][T18116] bond1: option lp_interval: allowed values 1 - 2147483647 [ 381.289145][T18116] bond1 (unregistering): Released all slaves [ 381.452199][T18129] tipc: Enabled bearer , priority 0 [ 381.477069][T18128] tipc: Disabling bearer [ 381.627109][T18141] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 381.678754][T18141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.760434][T18141] veth3: entered promiscuous mode [ 381.775340][T18141] bond1: (slave veth3): Enslaving as an active interface with a down link [ 381.788215][T18153] sch_tbf: peakrate 4 is lower than or equals to rate 7 ! [ 381.871851][T18149] veth5: entered promiscuous mode [ 381.882404][T18149] bond1: (slave veth5): Enslaving as an active interface with a down link [ 381.896842][T18141] bond1: entered allmulticast mode [ 382.091646][T18174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.163048][T18177] netlink: 'syz.1.3363': attribute type 5 has an invalid length. [ 382.345474][T18186] netlink: 'syz.2.3368': attribute type 1 has an invalid length. [ 382.421624][T18193] tipc: Started in network mode [ 382.439384][T18193] tipc: Node identity ac14140f, cluster identity 4711 [ 382.448430][T18193] tipc: New replicast peer: 255.255.255.255 [ 382.455637][T18193] tipc: Enabled bearer , priority 10 [ 382.463853][T18193] netlink: 'syz.4.3369': attribute type 29 has an invalid length. [ 382.472880][T18193] netlink: 'syz.4.3369': attribute type 29 has an invalid length. [ 382.711727][T18210] netlink: 'syz.0.3374': attribute type 10 has an invalid length. [ 382.720545][T18210] __nla_validate_parse: 4 callbacks suppressed [ 382.720565][T18210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3374'. [ 382.762995][T18210] dummy0: entered promiscuous mode [ 382.763953][T18212] netlink: zone id is out of range [ 382.770391][T18210] bridge0: port 3(dummy0) entered blocking state [ 382.773586][T18212] netlink: zone id is out of range [ 382.780669][T18210] bridge0: port 3(dummy0) entered disabled state [ 382.787447][T18212] netlink: set zone limit has 8 unknown bytes [ 382.792426][T18210] dummy0: entered allmulticast mode [ 382.808075][T18210] bridge0: port 3(dummy0) entered blocking state [ 382.814695][T18210] bridge0: port 3(dummy0) entered forwarding state [ 382.896206][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 382.925044][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3377'. [ 382.986467][ T5837] Bluetooth: hci3: command 0x0419 tx timeout [ 383.016263][T18221] x_tables: unsorted underflow at hook 2 [ 383.202088][T18230] sctp: [Deprecated]: syz.4.3383 (pid 18230) Use of int in maxseg socket option. [ 383.202088][T18230] Use struct sctp_assoc_value instead [ 383.386822][T18239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.429746][T18245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3386'. [ 383.439528][T18245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3386'. [ 383.483115][ T9] tipc: Node number set to 2886997007 [ 383.513240][T18239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.552619][T18251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.632540][T18239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.742513][T18239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.780307][T18262] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20003 [ 383.811823][T18264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3392'. [ 383.915782][T18269] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3393'. [ 383.941197][T18269] netlink: 'syz.2.3393': attribute type 1 has an invalid length. [ 384.016309][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.054203][T18272] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 384.068369][T18272] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 384.081036][T18272] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 384.119300][T18277] netlink: 'syz.1.3395': attribute type 12 has an invalid length. [ 384.126769][T18275] sctp: [Deprecated]: syz.0.3394 (pid 18275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.126769][T18275] Use struct sctp_sack_info instead [ 384.128683][T18277] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3395'. [ 384.161343][T18274] netlink: 'syz.0.3394': attribute type 14 has an invalid length. [ 384.234776][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.258991][T18279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3396'. [ 384.271681][ T1152] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.323505][ T1152] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.339932][T18283] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3398'. [ 384.424240][T18291] veth0: entered promiscuous mode [ 384.426757][T18289] netlink: 'syz.0.3399': attribute type 21 has an invalid length. [ 384.436821][T18290] veth0: left promiscuous mode [ 384.735493][T18308] IPVS: sh: FWM 3 0x00000003 - no destination available [ 384.836486][T18312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.281349][T18296] tap0: tun_chr_ioctl cmd 1074025678 [ 385.290501][T18305] infiniband syz1: set active [ 385.296224][T18296] tap0: group set to 0 [ 385.309146][T18305] infiniband syz1: added team0 [ 385.426446][T18305] RDS/IB: syz1: added [ 385.430617][T18305] smc: adding ib device syz1 with port count 1 [ 385.439983][T18305] smc: ib device syz1 port 1 has no pnetid [ 385.544383][T18334] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 386.719511][T18389] sctp: [Deprecated]: syz.1.3425 (pid 18389) Use of int in max_burst socket option. [ 386.719511][T18389] Use struct sctp_assoc_value instead [ 387.037599][T18408] validate_nla: 1 callbacks suppressed [ 387.037618][T18408] netlink: 'syz.2.3429': attribute type 25 has an invalid length. [ 387.461262][T18432] netlink: 'syz.1.3436': attribute type 10 has an invalid length. [ 387.519700][T18432] team0: Port device dummy0 added [ 387.665841][T18439] delete_channel: no stack [ 387.711012][T18436] delete_channel: no stack [ 387.864259][T18456] __nla_validate_parse: 12 callbacks suppressed [ 387.864278][T18456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3443'. [ 387.913189][T18454] netlink: 'syz.1.3442': attribute type 4 has an invalid length. [ 387.933056][T18449] can: request_module (can-proto-0) failed. [ 387.966149][T18457] netlink: 'syz.1.3442': attribute type 4 has an invalid length. [ 388.031768][T18459] netem: change failed [ 388.305887][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 388.471289][T18482] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3452'. [ 388.736398][T18496] tipc: Enabling of bearer rejected, failed to enable media [ 388.794280][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3459'. [ 388.879899][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 389.112190][T18512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3461'. [ 389.132817][T18514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3463'. [ 389.461970][T18531] netlink: 'syz.2.3465': attribute type 10 has an invalid length. [ 389.475005][T18531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3465'. [ 389.545841][T18531] batadv0: entered promiscuous mode [ 389.551202][T18531] batadv0: entered allmulticast mode [ 389.628239][T18531] bridge0: port 3(batadv0) entered blocking state [ 389.652660][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3467'. [ 389.674778][T18531] bridge0: port 3(batadv0) entered disabled state [ 389.695184][T18531] bridge0: port 3(batadv0) entered blocking state [ 389.701803][T18531] bridge0: port 3(batadv0) entered forwarding state [ 389.726637][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.742782][T18545] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3467'. [ 389.790573][ T7032] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 389.800383][ T7032] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 389.982452][T18555] netlink: 'syz.0.3471': attribute type 6 has an invalid length. [ 389.996887][T18555] netlink: 'syz.0.3471': attribute type 6 has an invalid length. [ 390.041697][T18560] netlink: 'syz.0.3471': attribute type 6 has an invalid length. [ 390.072895][T18565] netlink: 'syz.2.3473': attribute type 26 has an invalid length. [ 390.086416][T18555] netlink: 'syz.0.3471': attribute type 6 has an invalid length. [ 390.219799][T18568] bond1: entered allmulticast mode [ 390.228543][T18568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.238059][T18568] bridge0: port 3(bond1) entered blocking state [ 390.244965][T18568] bridge0: port 3(bond1) entered disabled state [ 390.255441][T18568] bond1: entered promiscuous mode [ 390.261270][T18568] bridge0: port 3(bond1) entered blocking state [ 390.268045][T18568] bridge0: port 3(bond1) entered forwarding state [ 390.551554][T18588] veth0: entered promiscuous mode [ 390.562310][T18584] sctp: [Deprecated]: syz.2.3480 (pid 18584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.562310][T18584] Use struct sctp_sack_info instead [ 390.582581][T18586] veth0: left promiscuous mode [ 390.612798][ T7032] bridge0: port 3(bond1) entered disabled state [ 390.788436][T18594] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.796920][T18594] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.396617][ T94] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 180 seconds [ 391.407556][ T94] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 180 seconds [ 391.418780][ T94] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 180 seconds [ 391.429875][ T94] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 180 seconds [ 392.192042][T18678] xt_bpf: check failed: parse error [ 392.875158][T18733] Bluetooth: MGMT ver 1.23 [ 392.880504][T18718] validate_nla: 1 callbacks suppressed [ 392.880522][T18718] netlink: 'syz.3.3517': attribute type 1 has an invalid length. [ 393.056862][T18740] __nla_validate_parse: 13 callbacks suppressed [ 393.056886][T18740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3525'. [ 393.100393][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 393.187231][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'. [ 393.201172][T18740] xt_CT: No such helper "netbios-ns" [ 393.343987][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'. [ 393.639989][T18782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3533'. [ 393.717328][T18785] openvswitch: netlink: Message has 4 unknown bytes. [ 393.717992][T18786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3535'. [ 393.836322][T18739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 393.899398][T18788] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3536'. [ 394.453584][T18830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3550'. [ 394.560953][T18837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3549'. [ 394.653680][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3549'. [ 394.812664][T18850] netlink: 'syz.4.3554': attribute type 21 has an invalid length. [ 395.064626][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 395.086833][T18864] openvswitch: netlink: Flow actions attr not present in new flow. [ 395.183585][T18874] netlink: 'syz.0.3560': attribute type 11 has an invalid length. [ 395.463222][T18888] bond1: option all_slaves_active: invalid value (222) [ 395.498002][T18888] bond1 (unregistering): Released all slaves [ 395.558646][T18893] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 395.577435][T18893] bond1 (unregistering): Released all slaves [ 395.628526][T18904] bridge0: port 4(ipvlan2) entered blocking state [ 395.638564][T18904] bridge0: port 4(ipvlan2) entered disabled state [ 395.645326][T18904] ipvlan2: entered allmulticast mode [ 395.652196][T18904] bridge0: entered allmulticast mode [ 395.668587][T18904] ipvlan2: left allmulticast mode [ 395.675211][T18904] bridge0: left allmulticast mode [ 396.113451][T18937] netlink: 'syz.0.3577': attribute type 83 has an invalid length. [ 396.229891][T18942] netlink: 'syz.1.3579': attribute type 10 has an invalid length. [ 396.240782][T18942] bridge0: port 3(team0) entered blocking state [ 396.267680][T18942] bridge0: port 3(team0) entered disabled state [ 396.297765][T18942] team0: entered allmulticast mode [ 396.302974][T18942] team_slave_0: entered allmulticast mode [ 396.309853][ T5198] udevd[5198]: worker [12300] /devices/virtual/block/nbd0 timeout; kill it [ 396.333663][T18942] team_slave_1: entered allmulticast mode [ 396.338215][ T5198] udevd[5198]: seq 16572 '/devices/virtual/block/nbd0' killed [ 396.340768][T18942] dummy0: entered allmulticast mode [ 396.383806][T18942] team0: entered promiscuous mode [ 396.393906][T18942] team_slave_0: entered promiscuous mode [ 396.495865][T18942] team_slave_1: entered promiscuous mode [ 396.502348][T18942] dummy0: entered promiscuous mode [ 396.681504][ T5897] lo speed is unknown, defaulting to 1000 [ 397.196066][T18996] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 397.226327][T18996] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 397.241202][T18996] gretap1: entered promiscuous mode [ 397.247929][T18996] gretap1: entered allmulticast mode [ 397.326000][T18999] block nbd1: Unsupported socket: should be TCP or UNIX. [ 397.463430][T19015] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 398.031508][T19041] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 398.053556][T19041] bridge0: port 3(batadv0) entered disabled state [ 398.060446][T19041] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.067688][T19048] __nla_validate_parse: 16 callbacks suppressed [ 398.067706][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3606'. [ 398.068917][T19041] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.079903][T19048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3606'. [ 398.232883][T19057] netlink: 'syz.2.3609': attribute type 4 has an invalid length. [ 398.241455][T19057] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3609'. [ 398.589323][ T7050] batman_adv: batadv0: IGMP Querier appeared [ 398.595477][ T7050] batman_adv: batadv0: MLD Querier appeared [ 398.602200][T19077] netlink: 'syz.1.3615': attribute type 12 has an invalid length. [ 398.618179][T19077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.992981][T19105] sctp: [Deprecated]: syz.4.3623 (pid 19105) Use of int in max_burst socket option. [ 398.992981][T19105] Use struct sctp_assoc_value instead [ 399.026037][T19104] syzkaller0: entered promiscuous mode [ 399.034096][T19104] syzkaller0: entered allmulticast mode [ 399.284035][T19127] lo speed is unknown, defaulting to 1000 [ 399.315377][T19130] bpq0: left promiscuous mode [ 399.478749][T19127] lo speed is unknown, defaulting to 1000 [ 399.978436][T19143] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3632'. [ 400.040829][T19148] netlink: 'syz.3.3632': attribute type 10 has an invalid length. [ 400.083682][T19143] vlan2: entered allmulticast mode [ 400.093660][T19143] gretap0: entered allmulticast mode [ 400.145659][T19148] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 400.170978][T19148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.708258][T19178] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 400.759823][T19178] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3641'. [ 400.843582][T19179] lo speed is unknown, defaulting to 1000 [ 400.852051][T19181] syz_tun: entered allmulticast mode [ 400.920760][T19181] dvmrp8: entered allmulticast mode [ 401.026968][T19186] syzkaller0: entered promiscuous mode [ 401.032569][T19186] syzkaller0: entered allmulticast mode [ 401.048514][T19180] syz_tun: left allmulticast mode [ 401.221024][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'. [ 401.792452][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3647'. [ 402.480420][T19191] hsr_slave_0 (unregistering): left promiscuous mode [ 402.497916][T19179] lo speed is unknown, defaulting to 1000 [ 402.792220][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3651'. [ 402.859760][T19210] sctp: [Deprecated]: syz.2.3654 (pid 19210) Use of int in maxseg socket option. [ 402.859760][T19210] Use struct sctp_assoc_value instead [ 402.989649][T19215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3655'. [ 403.068407][T19218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3656'. [ 403.090198][T19218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.117543][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3657'. [ 403.181682][T19229] netlink: 'syz.2.3658': attribute type 2 has an invalid length. [ 403.251023][T19232] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 403.287954][T19232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.459253][T19241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3663'. [ 403.516304][T19245] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 403.594614][T19250] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3666'. [ 403.690192][T19259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3669'. [ 403.761056][T19262] set match dimension is over the limit! [ 404.749657][T19287] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3675'. [ 405.015189][T19299] netlink: 'syz.1.3679': attribute type 6 has an invalid length. [ 405.042285][T19299] netlink: 'syz.1.3679': attribute type 6 has an invalid length. [ 405.123480][T19307] tipc: Enabling not permitted [ 405.129791][T19307] tipc: Enabling of bearer rejected, failed to enable media [ 405.140150][T19307] tipc: Enabling of bearer rejected, media not registered [ 405.171188][T19306] netlink: 'syz.3.3682': attribute type 10 has an invalid length. [ 405.239613][T19306] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.273359][T19306] bond0: (slave team0): Enslaving as an active interface with an up link [ 405.655529][T19323] netlink: 'syz.1.3687': attribute type 11 has an invalid length. [ 405.663698][T19323] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3687'. [ 405.775915][T19326] netlink: 166 bytes leftover after parsing attributes in process `syz.1.3688'. [ 405.797509][T19326] syzkaller0: entered promiscuous mode [ 405.803305][T19326] syzkaller0: entered allmulticast mode [ 406.045557][T19337] bridge0: port 3(dummy0) entered disabled state [ 406.052217][T19337] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.059923][T19337] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.266968][T19266] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.396824][T19359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3697'. [ 406.434751][T19359] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3697'. [ 406.533817][T19371] IPVS: set_ctl: invalid protocol: 103 172.20.20.43:20002 [ 406.625609][T19377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3704'. [ 406.648854][T19378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.689496][T19380] netlink: 'syz.1.3706': attribute type 2 has an invalid length. [ 406.697546][T19380] netlink: 'syz.1.3706': attribute type 1 has an invalid length. [ 406.706531][T19377] bridge1: port 1(veth3) entered blocking state [ 406.707983][T19380] netlink: 'syz.1.3706': attribute type 2 has an invalid length. [ 406.716354][T19377] bridge1: port 1(veth3) entered disabled state [ 406.733354][T19377] veth3: entered allmulticast mode [ 406.742786][T19377] veth3: entered promiscuous mode [ 406.797084][T19382] bridge1: port 2(veth5) entered blocking state [ 406.803665][T19382] bridge1: port 2(veth5) entered disabled state [ 406.810530][T19382] veth5: entered allmulticast mode [ 406.821671][T19382] veth5: entered promiscuous mode [ 406.951816][T19397] netlink: 'syz.4.3709': attribute type 33 has an invalid length. [ 407.142189][T19411] netlink: 'syz.4.3713': attribute type 10 has an invalid length. [ 407.160105][T19411] bridge0: port 4(team0) entered blocking state [ 407.167804][T19411] bridge0: port 4(team0) entered disabled state [ 407.174773][T19411] team0: entered allmulticast mode [ 407.180136][T19411] team_slave_0: entered allmulticast mode [ 407.187952][T19411] team_slave_1: entered allmulticast mode [ 407.199489][T19411] team0: entered promiscuous mode [ 407.205161][T19411] team_slave_0: entered promiscuous mode [ 407.211157][T19411] team_slave_1: entered promiscuous mode [ 407.218010][T19411] bridge0: port 4(team0) entered blocking state [ 407.224565][T19411] bridge0: port 4(team0) entered forwarding state [ 407.370587][T19424] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 408.795827][T19502] __nla_validate_parse: 3 callbacks suppressed [ 408.795847][T19502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3734'. [ 408.863919][T19506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 408.921562][T19512] netlink: 'syz.2.3738': attribute type 11 has an invalid length. [ 409.210817][T19535] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 409.348779][T19546] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 409.452814][T19555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3749'. [ 409.454379][T19546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.528264][T19565] veth9: entered promiscuous mode [ 409.572857][T19565] bond2: (slave veth9): Enslaving as an active interface with a down link [ 409.612361][T19556] veth11: entered promiscuous mode [ 409.621486][T19556] bond2: (slave veth11): Enslaving as an active interface with a down link [ 409.648703][T19562] bond4 (unregistering): Released all slaves [ 409.685472][T19565] bond2: entered allmulticast mode [ 409.848005][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 409.857522][T19588] netlink: 'syz.1.3755': attribute type 3 has an invalid length. [ 409.871937][T19588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3755'. [ 409.881160][T19588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3755'. [ 409.893118][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 409.902308][T19588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3755'. [ 410.067371][T19594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3757'. [ 410.172408][T19599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3758'. [ 410.193034][ T7048] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.193055][T19599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3758'. [ 410.193265][ T7048] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.221057][ T7048] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.230271][ T7048] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.845252][T19637] netlink: 'syz.0.3770': attribute type 2 has an invalid length. [ 410.910932][T19631] netlink: 'syz.3.3769': attribute type 10 has an invalid length. [ 410.937436][T19631] syz_tun: entered promiscuous mode [ 410.978162][T19631] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 411.226153][T19643] syzkaller1: entered promiscuous mode [ 411.231762][T19643] syzkaller1: entered allmulticast mode [ 411.413535][T19662] lo speed is unknown, defaulting to 1000 [ 411.943964][T19685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.221643][T19662] lo speed is unknown, defaulting to 1000 [ 412.336808][T19704] netlink: 'syz.0.3785': attribute type 21 has an invalid length. [ 412.380704][T19704] netlink: 'syz.0.3785': attribute type 21 has an invalid length. [ 412.388879][ T7032] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.398549][ T7032] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.412788][ T7032] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.470281][T19710] tipc: Resetting bearer [ 412.532273][T19713] Cannot find add_set index 1 as target [ 412.557725][T19716] xt_hashlimit: size too large, truncated to 1048576 [ 412.613695][ T7032] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.817322][T19724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.257701][T19710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.276717][T19710] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 413.410445][T19710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.427260][T19710] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 413.540871][T19710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 413.564695][T19710] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 413.669868][T19710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.677019][T19710] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 413.849860][T19710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.877513][T19710] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 414.290585][T19755] netlink: 'syz.2.3799': attribute type 21 has an invalid length. [ 414.323944][T19755] __nla_validate_parse: 15 callbacks suppressed [ 414.323966][T19755] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3799'. [ 414.421554][T19766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3802'. [ 414.592027][T19773] netlink: 'syz.3.3804': attribute type 31 has an invalid length. [ 414.693098][T19776] netlink: zone id is out of range [ 414.721299][T19776] netlink: zone id is out of range [ 414.750427][T19776] netlink: zone id is out of range [ 414.756979][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3808'. [ 414.780751][T19776] netlink: get zone limit has 4 unknown bytes [ 414.787887][T19781] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 414.809272][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3807'. [ 414.858807][T19785] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3807'. [ 414.868243][T19787] netlink: 'syz.3.3808': attribute type 10 has an invalid length. [ 414.946922][T19784] macvtap1: entered promiscuous mode [ 414.952443][T19784] vlan0: entered promiscuous mode [ 414.958330][T19784] macvtap1: entered allmulticast mode [ 414.963901][T19784] vlan0: entered allmulticast mode [ 414.969357][T19784] veth0_vlan: entered allmulticast mode [ 414.978508][T19787] veth0_virt_wifi: entered allmulticast mode [ 415.001012][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3810'. [ 415.029255][T19787] team0: Port device veth0_virt_wifi added [ 415.334090][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3812'. [ 415.348394][T19810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.661829][T19810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.762483][T19836] lo speed is unknown, defaulting to 1000 [ 415.952249][T19847] xt_nat: multiple ranges no longer supported [ 416.021245][T19844] delete_channel: no stack [ 416.239874][T19859] sctp: [Deprecated]: syz.4.3822 (pid 19859) Use of int in max_burst socket option. [ 416.239874][T19859] Use struct sctp_assoc_value instead [ 416.458466][T19836] lo speed is unknown, defaulting to 1000 [ 416.705357][T19890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3831'. [ 416.771961][T19887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3829'. [ 417.076068][T19899] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3833'. [ 417.080299][T19903] netlink: 'syz.2.3834': attribute type 24 has an invalid length. [ 417.315506][T19914] bridge0: port 5(syz_tun) entered blocking state [ 417.322182][T19914] bridge0: port 5(syz_tun) entered disabled state [ 417.343690][T19914] syz_tun: entered allmulticast mode [ 417.359620][T19918] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.386707][T19914] syz_tun: entered promiscuous mode [ 417.392716][T19914] bridge0: port 5(syz_tun) entered blocking state [ 417.399394][T19914] bridge0: port 5(syz_tun) entered forwarding state [ 418.150767][T19968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.158080][T19968] IPv6: NLM_F_CREATE should be set when creating new route [ 418.165366][T19968] IPv6: NLM_F_CREATE should be set when creating new route [ 418.228851][T19968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.233321][T19974] IPVS: set_ctl: invalid protocol: 44 172.30.0.1:20003 [ 418.323028][T19976] netlink: 'syz.4.3852': attribute type 64 has an invalid length. [ 418.357696][T19985] pim6reg: entered allmulticast mode [ 418.373799][T19976] netlink: 'syz.4.3852': attribute type 64 has an invalid length. [ 418.406310][T19985] pim6reg: left allmulticast mode [ 418.576033][T19993] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.611961][T19993] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.920968][T20007] netlink: 'syz.1.3861': attribute type 12 has an invalid length. [ 418.952910][T20007] netlink: 'syz.1.3861': attribute type 29 has an invalid length. [ 418.981711][T20007] netlink: 'syz.1.3861': attribute type 2 has an invalid length. [ 419.585184][T20050] netlink: 'syz.1.3875': attribute type 2 has an invalid length. [ 419.963973][T20070] netlink: 'syz.1.3883': attribute type 6 has an invalid length. [ 420.004018][T20070] IPVS: length: 78 != 24 [ 420.065386][T20076] netlink: 'syz.3.3886': attribute type 28 has an invalid length. [ 420.089072][T20076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.373176][T20098] __nla_validate_parse: 11 callbacks suppressed [ 420.373196][T20098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3892'. [ 420.719148][T20120] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3899'. [ 420.729425][T20120] 8021q: VLANs not supported on ip_vti0 [ 420.747755][T20123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3900'. [ 420.791989][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 420.933750][T20137] tipc: Enabled bearer , priority 0 [ 420.996171][T20137] tipc: Disabling bearer [ 421.476924][ T94] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 210 seconds [ 421.488570][ T94] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 210 seconds [ 421.499754][ T94] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 210 seconds [ 421.524505][ T94] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 210 seconds [ 421.769675][T20194] netlink: 'syz.3.3921': attribute type 75 has an invalid length. [ 422.006534][T20208] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3924'. [ 422.054097][T20210] netlink: 'syz.2.3923': attribute type 24 has an invalid length. [ 422.169200][T20213] bond2: option mode: invalid value (133) [ 422.186419][T20213] bond2 (unregistering): Released all slaves [ 422.194267][T20221] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 422.205770][T20222] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 422.220708][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3925'. [ 422.347316][T20228] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3929'. [ 422.523397][T20238] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 422.559924][T20235] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 422.620108][T20235] bond2 (unregistering): Released all slaves [ 422.682633][T20238] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 423.036254][T20248] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3934'. [ 423.078667][T20248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.108830][T20249] vcan0: tx drop: invalid da for name 0x1000000000000000 [ 423.283427][T20268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3938'. [ 423.293729][T20268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3938'. [ 423.526806][T20283] netlink: 'syz.3.3946': attribute type 10 has an invalid length. [ 423.548756][T20283] team0: Port device dummy0 added [ 423.583515][T20285] Bluetooth: MGMT ver 1.23 [ 423.984079][T20310] xt_socket: unknown flags 0x50 [ 423.992698][T20310] xt_socket: unknown flags 0x50 [ 424.018705][T20310] xt_socket: unknown flags 0x50 [ 424.034918][T20310] xt_socket: unknown flags 0x50 [ 424.047867][T20310] xt_socket: unknown flags 0x50 [ 424.060766][T20310] xt_socket: unknown flags 0x50 [ 424.070090][T20310] xt_socket: unknown flags 0x50 [ 424.591158][T20334] sit1: entered promiscuous mode [ 424.608273][T20334] sit1: entered allmulticast mode [ 424.616863][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.637755][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.667819][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.697443][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.812205][T20349] netlink: 'syz.0.3968': attribute type 1 has an invalid length. [ 424.827470][T20349] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 425.032914][T20360] tipc: Enabled bearer , priority 0 [ 425.102555][T20367] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 425.186753][T20358] tipc: Disabling bearer [ 425.247503][T20374] netlink: 'syz.0.3976': attribute type 1 has an invalid length. [ 425.398181][T20389] __nla_validate_parse: 9 callbacks suppressed [ 425.398201][T20389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3978'. [ 425.425040][T20388] netlink: 'syz.0.3981': attribute type 83 has an invalid length. [ 426.015655][T20419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3988'. [ 426.040246][T20419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3988'. [ 426.069472][T20433] netlink: 'syz.3.3992': attribute type 2 has an invalid length. [ 426.188950][T20439] netlink: 'syz.3.3995': attribute type 2 has an invalid length. [ 426.237773][T20441] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3996'. [ 426.328519][T20443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3998'. [ 426.425600][T20451] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3999'. [ 426.755531][T20476] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 426.921076][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4011'. [ 427.030310][T20494] netlink: 'syz.4.4013': attribute type 21 has an invalid length. [ 427.041707][ T30] audit: type=1107 audit(1763002400.289:6): pid=20493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃuÅ3Ôµ/¡³8ž’ñËÙ ë0äñ&•¹ˆ#{™l' [ 427.313179][T20514] syzkaller1: entered promiscuous mode [ 427.318875][T20514] syzkaller1: entered allmulticast mode [ 427.331742][T20509] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4018'. [ 427.362146][T20509] TC_ACT_REPEAT abuse ? [ 427.489536][T20526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4023'. [ 427.608388][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4025'. [ 427.618898][T20524] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 427.656081][T20524] bond2 (unregistering): Released all slaves [ 427.798343][T20539] openvswitch: netlink: Flow key attr not present in new flow. [ 428.286462][T20590] netlink: 'syz.2.4039': attribute type 21 has an invalid length. [ 428.302227][T20590] netlink: 'syz.2.4039': attribute type 22 has an invalid length. [ 428.321092][T20592] : renamed from hsr0 (while UP) [ 428.325943][T20590] netlink: 'syz.2.4039': attribute type 23 has an invalid length. [ 428.351521][T20590] netlink: 'syz.2.4039': attribute type 25 has an invalid length. [ 428.688444][T20627] syzkaller0: entered promiscuous mode [ 428.693988][T20627] syzkaller0: entered allmulticast mode [ 428.702226][T20625] tipc: Enabled bearer , priority 0 [ 428.731921][T20625] tipc: Resetting bearer [ 428.758697][T20625] tipc: Disabling bearer [ 428.849639][T20634] netlink: 'syz.0.4054': attribute type 16 has an invalid length. [ 429.138883][T20646] erspan0: entered promiscuous mode [ 429.154860][T20646] macvtap1: entered promiscuous mode [ 429.177647][T20646] macvtap1: entered allmulticast mode [ 429.183101][T20646] erspan0: entered allmulticast mode [ 429.230192][T20647] macvtap1: left promiscuous mode [ 429.248001][T20647] macvtap1: left allmulticast mode [ 429.253973][T20647] erspan0: left allmulticast mode [ 429.366886][T20662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.514263][T20674] netlink: 'syz.2.4066': attribute type 11 has an invalid length. [ 429.730951][T20688] IPv6: sit2: Disabled Multicast RS [ 429.738201][T20688] sit2: entered allmulticast mode [ 430.310888][T20726] sctp: [Deprecated]: syz.2.4084 (pid 20726) Use of int in maxseg socket option. [ 430.310888][T20726] Use struct sctp_assoc_value instead [ 431.132023][T20779] __nla_validate_parse: 85 callbacks suppressed [ 431.132041][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'. [ 431.154159][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'. [ 431.452567][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4110'. [ 431.555017][T20809] validate_nla: 2 callbacks suppressed [ 431.555036][T20809] netlink: 'syz.2.4114': attribute type 1 has an invalid length. [ 431.590595][T20809] netlink: 'syz.2.4114': attribute type 1 has an invalid length. [ 431.598719][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4112'. [ 431.622285][T20811] batadv1: entered allmulticast mode [ 431.629363][T20807] tipc: New replicast peer: 255.255.255.255 [ 431.654887][T20807] tipc: Enabled bearer , priority 10 [ 431.675701][T20807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'. [ 431.810610][T20822] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4119'. [ 431.824913][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4119'. [ 431.872679][T20829] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4119'. [ 431.883460][T20829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4119'. [ 431.928587][T20833] netlink: 'syz.4.4122': attribute type 8 has an invalid length. [ 431.978065][T20833] netlink: 'syz.4.4122': attribute type 10 has an invalid length. [ 431.993570][T20833] veth0_virt_wifi: entered allmulticast mode [ 432.039513][T20833] veth0_virt_wifi: entered promiscuous mode [ 432.048529][T20833] team0: Port device veth0_virt_wifi added [ 432.169562][T20853] xt_ecn: cannot match TCP bits for non-tcp packets [ 432.201179][T20852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4128'. [ 432.466829][T20868] set match dimension is over the limit! [ 432.774586][ T5897] tipc: Node number set to 2322127072 [ 433.039474][T20909] No such timeout policy "syz0" [ 433.333964][T20924] IPVS: Error connecting to the multicast addr [ 433.763504][T20961] : renamed from bridge_slave_0 (while UP) [ 433.983709][T20974] netlink: 'syz.3.4169': attribute type 3 has an invalid length. [ 434.238929][T20989] netlink: 'syz.3.4174': attribute type 23 has an invalid length. [ 434.289760][T20990] netlink: 'syz.3.4174': attribute type 23 has an invalid length. [ 434.629463][T21004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.799076][T21014] netlink: 'syz.2.4183': attribute type 1 has an invalid length. [ 434.811649][T21019] netlink: 'syz.3.4184': attribute type 2 has an invalid length. [ 434.976636][T21014] IPVS: persistence engine module ip_vs_pe_À not found [ 435.038263][T21024] netlink: 'syz.2.4183': attribute type 11 has an invalid length. [ 435.069032][T21024] netlink: 'syz.2.4183': attribute type 11 has an invalid length. [ 435.272886][T21049] openvswitch: netlink: Actions may not be safe on all matching packets [ 435.650005][T21077] veth0: entered promiscuous mode [ 435.776113][T21089] netlink: 'syz.3.4205': attribute type 1 has an invalid length. [ 435.808759][T21089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.854184][T21089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.861708][T21089] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 435.877150][T21089] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 435.917217][T21094] veth5: entered promiscuous mode [ 435.927154][T21094] bond2: (slave veth5): Enslaving as an active interface with a down link [ 435.950314][T21089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.135410][T21100] __nla_validate_parse: 23 callbacks suppressed [ 436.135431][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4207'. [ 436.151252][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4207'. [ 436.372577][T21121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4213'. [ 436.436381][T21076] veth0: left promiscuous mode [ 436.614935][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4219'. [ 437.122021][T21176] tipc: Enabled bearer , priority 0 [ 437.165764][T21176] syzkaller0: entered promiscuous mode [ 437.171306][T21176] syzkaller0: entered allmulticast mode [ 437.213658][T21176] tipc: Resetting bearer [ 437.223397][T21175] tipc: Resetting bearer [ 437.268436][T21175] tipc: Disabling bearer [ 437.357250][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4235'. [ 437.367708][T21188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4235'. [ 437.405503][T21188] geneve2: entered promiscuous mode [ 437.410896][T21188] geneve2: entered allmulticast mode [ 437.444043][T21192] syzkaller0: entered promiscuous mode [ 437.453768][T21192] syzkaller0: entered allmulticast mode [ 437.466145][T21197] sctp: [Deprecated]: syz.1.4237 (pid 21197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.466145][T21197] Use struct sctp_sack_info instead [ 437.604296][T21203] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 437.614918][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4239'. [ 437.632821][T21200] syzkaller0: entered promiscuous mode [ 437.636222][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4239'. [ 437.638907][T21200] syzkaller0: entered allmulticast mode [ 437.775364][T21212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4240'. [ 437.954772][T21224] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4246'. [ 438.150142][T21233] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 438.412723][T21253] IPVS: length: 8 != 1152 [ 440.040956][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.467193][T21367] validate_nla: 2 callbacks suppressed [ 440.467213][T21367] netlink: 'syz.0.4287': attribute type 21 has an invalid length. [ 441.194177][T21406] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 441.281231][T21410] netlink: 'syz.3.4297': attribute type 1 has an invalid length. [ 441.289501][T21410] __nla_validate_parse: 13 callbacks suppressed [ 441.289518][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4297'. [ 441.733394][T21436] debugfs: '“&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} ŽæýàÅ ¸Þ}³£!' already exists in 'ieee80211' [ 441.866354][T21446] bridge0: port 4(veth0_to_bridge) entered blocking state [ 441.876908][T21446] bridge0: port 4(veth0_to_bridge) entered disabled state [ 441.888365][T21446] veth0_to_bridge: entered allmulticast mode [ 441.897019][T21446] veth0_to_bridge: entered promiscuous mode [ 441.915867][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4309'. [ 442.012957][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4312'. [ 442.022605][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4312'. [ 442.057817][T21456] No such timeout policy "syz0" [ 442.147063][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4313'. [ 442.166170][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4313'. [ 442.231764][T21462] syzkaller1: entered promiscuous mode [ 442.260294][T21462] syzkaller1: entered allmulticast mode [ 442.354625][T21470] syzkaller0: entered promiscuous mode [ 442.360430][T21470] syzkaller0: entered allmulticast mode [ 442.374205][T21471] SET target dimension over the limit! [ 442.417372][T21474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4316'. [ 442.426761][T21470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4316'. [ 442.537988][T21478] ip6gre2: entered promiscuous mode [ 442.543349][T21478] ip6gre2: entered allmulticast mode [ 442.553143][ T7035] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 442.571973][ T7035] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 442.580360][ T6781] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 442.772927][T21495] syzkaller1: entered promiscuous mode [ 442.785629][T21495] syzkaller1: entered allmulticast mode [ 442.905680][T21506] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4332'. [ 442.925547][T21506] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4332'. [ 442.975106][ T6781] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 443.157811][T21522] IPVS: Error connecting to the multicast addr [ 443.191453][T21524] IPVS: Error connecting to the multicast addr [ 443.387278][ T6781] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 443.444237][T21542] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 443.447338][T21545] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 443.469405][T21542] netlink: 'syz.4.4345': attribute type 7 has an invalid length. [ 443.489618][ T7048] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.502529][T21542] netlink: 'syz.4.4345': attribute type 7 has an invalid length. [ 443.511590][ T7048] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.542218][ T7048] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.593022][ T7048] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.620225][T21550] tipc: Enabling of bearer rejected, failed to enable media [ 443.902797][T21575] sctp: [Deprecated]: syz.0.4355 (pid 21575) Use of int in max_burst socket option deprecated. [ 443.902797][T21575] Use struct sctp_assoc_value instead [ 444.233184][T21593] syzkaller1: entered allmulticast mode [ 444.251962][T21595] netlink: 'syz.4.4361': attribute type 201 has an invalid length. [ 444.302323][T21597] syz_tun: left allmulticast mode [ 444.307868][T21597] syz_tun: left promiscuous mode [ 444.313146][T21597] bridge0: port 5(syz_tun) entered disabled state [ 444.322283][T21597] team0: left allmulticast mode [ 444.330242][T21597] team_slave_0: left allmulticast mode [ 444.336226][T21597] team_slave_1: left allmulticast mode [ 444.341989][T21597] team0: left promiscuous mode [ 444.348018][T21597] team_slave_0: left promiscuous mode [ 444.353763][T21597] team_slave_1: left promiscuous mode [ 444.361052][T21597] veth0_virt_wifi: left promiscuous mode [ 444.367415][T21597] bridge0: port 4(team0) entered disabled state [ 444.376688][T21597] bond1: left promiscuous mode [ 444.381707][T21597] bridge0: port 3(bond1) entered disabled state [ 444.390936][T21597] bridge_slave_1: left allmulticast mode [ 444.397080][T21597] bridge_slave_1: left promiscuous mode [ 444.402798][T21597] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.413772][T21597] bridge_slave_0: left allmulticast mode [ 444.420917][T21597] bridge_slave_0: left promiscuous mode [ 444.428213][T21597] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.085114][T21624] tipc: Started in network mode [ 445.095542][T21624] tipc: Node identity , cluster identity 4711 [ 445.113469][T21624] tipc: Failed to obtain node identity [ 445.134640][T21624] tipc: Enabling of bearer rejected, failed to enable media [ 445.570772][T11857] lo speed is unknown, defaulting to 1000 [ 445.577087][T11857] sz1: Port: 1 Link DOWN [ 445.583841][T11858] lo speed is unknown, defaulting to 1000 [ 445.810540][T21658] xt_TCPMSS: Only works on TCP SYN packets [ 445.968168][T21662] bond4: option mode: invalid value (133) [ 445.979078][T21662] bond4 (unregistering): Released all slaves [ 446.186057][T21673] bond4 (unregistering): Released all slaves [ 446.355100][T21686] __nla_validate_parse: 11 callbacks suppressed [ 446.355111][T21687] netlink: 'syz.3.4389': attribute type 83 has an invalid length. [ 446.355121][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4391'. [ 446.489105][T11857] IPVS: starting estimator thread 0... [ 446.599801][T21697] IPVS: using max 28 ests per chain, 67200 per kthread [ 446.655402][T21710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4397'. [ 446.841713][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4400'. [ 446.885743][T21725] netlink: 'syz.1.4401': attribute type 8 has an invalid length. [ 446.984624][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 446.997359][T21731] siw: device registration error -23 [ 447.031431][T21733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4405'. [ 447.180643][T21729] netlink: 'syz.3.4404': attribute type 1 has an invalid length. [ 447.199554][T21729] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.4404'. [ 447.389444][T21752] netlink: 'syz.4.4411': attribute type 1 has an invalid length. [ 447.429511][T21752] tipc: Enabled bearer , priority 0 [ 447.485518][T21751] tipc: Disabling bearer [ 447.520273][T21769] netlink: 'syz.3.4416': attribute type 1 has an invalid length. [ 447.534022][T21768] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4416'. [ 447.586126][T21768] netlink: 'syz.3.4416': attribute type 9 has an invalid length. [ 447.669714][T21781] netlink: 'syz.2.4419': attribute type 33 has an invalid length. [ 447.688708][T21781] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4419'. [ 447.710419][T21778] netlink: 'syz.4.4418': attribute type 1 has an invalid length. [ 447.751382][T21778] bond4: entered promiscuous mode [ 447.757456][T21778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 447.799174][T21778] bond4: (slave bridge0): making interface the new active one [ 447.813624][T21778] bridge0: entered promiscuous mode [ 447.819525][T21789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4421'. [ 447.832418][T21778] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 447.839989][T21791] netlink: 'syz.1.4422': attribute type 1 has an invalid length. [ 447.857392][T21778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.861856][T21792] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4420'. [ 447.940429][T21791] bond3: entered promiscuous mode [ 447.952545][T21791] bond3: entered allmulticast mode [ 447.991749][T21791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.111102][T21791] macvlan2: entered promiscuous mode [ 448.117990][T21791] macvlan2: entered allmulticast mode [ 448.127035][T21791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.186339][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4426'. [ 448.197963][T21820] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 448.207819][T21820] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 448.450212][T21837] netlink: 'syz.1.4432': attribute type 1 has an invalid length. [ 448.519143][T21838] bond4: (slave bridge3): making interface the new active one [ 448.527910][T21838] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 448.550384][T21838] bond4: (slave bridge4): Enslaving as an active interface with a down link [ 448.559733][T21844] team0: No ports can be present during mode change [ 448.589650][T21838] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 448.603278][T21840] team0: No ports can be present during mode change [ 448.624758][T21838] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 448.633886][T21844] syzkaller1: entered promiscuous mode [ 448.640070][T21844] syzkaller1: entered allmulticast mode [ 448.667759][T21838] bond4: (slave bridge7): Enslaving as an active interface with a down link [ 448.729020][T21838] bond4: (slave bridge8): Enslaving as an active interface with a down link [ 448.750613][T21838] bond4: (slave bridge9): Enslaving as an active interface with a down link [ 448.777165][T21838] bond4: (slave bridge10): Enslaving as an active interface with a down link [ 448.806721][T21838] bond4: (slave bridge11): Enslaving as an active interface with a down link [ 448.864194][T21838] bond4: (slave bridge12): Enslaving as an active interface with a down link [ 448.888146][T21850] tipc: Started in network mode [ 448.894883][T21850] tipc: Node identity 92df3dc22483, cluster identity 4711 [ 448.902278][T21850] tipc: Enabled bearer , priority 0 [ 448.924366][T21838] bond4: (slave bridge13): Enslaving as an active interface with a down link [ 448.936151][T21850] syzkaller0: entered promiscuous mode [ 448.941676][T21850] syzkaller0: entered allmulticast mode [ 448.962346][T21838] bond4: (slave bridge14): Enslaving as an active interface with a down link [ 448.980282][T21852] ip6erspan0: entered promiscuous mode [ 448.987033][T21852] ip6erspan0: entered allmulticast mode [ 449.003347][T21850] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 449.040597][T21838] bond4: (slave bridge15): Enslaving as an active interface with a down link [ 449.071038][T21838] bond4: (slave bridge16): Enslaving as an active interface with a down link [ 449.081792][T21850] tipc: Resetting bearer [ 449.091487][T21849] tipc: Resetting bearer [ 449.149164][T21849] tipc: Disabling bearer [ 449.187086][T21838] bond4: (slave bridge17): Enslaving as an active interface with a down link [ 449.253054][T21838] bond4: (slave bridge18): Enslaving as an active interface with a down link [ 449.772782][T21886] 8021q: adding VLAN 0 to HW filter on device bond5 [ 449.787624][T21886] bond4: (slave bond5): making interface the new active one [ 449.803133][T21886] bond4: (slave bond5): Enslaving as an active interface with an up link [ 449.833722][T21887] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 449.846671][T21887] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 449.885484][T21898] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 449.899431][T21898] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 450.070161][T21912] syzkaller0: entered promiscuous mode [ 450.075766][T21912] syzkaller0: entered allmulticast mode [ 450.181289][T21914] bond6: entered promiscuous mode [ 450.187749][T21914] bond6: entered allmulticast mode [ 450.193874][T21914] 8021q: adding VLAN 0 to HW filter on device bond6 [ 450.219981][T21917] bond0: entered promiscuous mode [ 450.225300][T21917] bond_slave_0: entered promiscuous mode [ 450.245232][T21917] bond_slave_1: entered promiscuous mode [ 450.253593][T21917] team0: entered promiscuous mode [ 450.268939][T21917] team_slave_0: entered promiscuous mode [ 450.306785][T21917] team_slave_1: entered promiscuous mode [ 450.338926][T21917] veth0_virt_wifi: entered promiscuous mode [ 450.361738][T21917] dummy0: entered promiscuous mode [ 450.408835][T21917] batadv0: entered promiscuous mode [ 450.452674][T21917] debugfs: 'hsr0' already exists in 'hsr' [ 450.482216][T21917] Cannot create hsr debugfs directory [ 450.516873][T21917] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 450.546233][T21917] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 450.595595][T21917] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 450.732172][T21927] vlan2: entered promiscuous mode [ 450.772285][T21927] geneve1: entered promiscuous mode [ 450.808114][T21927] vlan2: entered allmulticast mode [ 450.830134][T21927] geneve1: entered allmulticast mode [ 451.330359][T21960] team0: Device veth1_macvtap failed to register rx_handler [ 451.555587][ T94] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 240 seconds [ 451.566508][ T94] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 240 seconds [ 451.577987][ T94] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 240 seconds [ 451.589285][ T94] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 240 seconds [ 451.613927][T21977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.947422][T21995] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.958592][T21995] bond0: (slave bond4): Enslaving as an active interface with an up link [ 452.187309][T22012] validate_nla: 3 callbacks suppressed [ 452.187329][T22012] netlink: 'syz.0.4489': attribute type 142 has an invalid length. [ 452.223152][T22013] netlink: 'syz.0.4489': attribute type 2 has an invalid length. [ 452.515759][T22018] nbd1: detected capacity change from 0 to 127 [ 452.534518][ T5837] block nbd1: Receive control failed (result -32) [ 452.540130][T19715] block nbd1: Send control failed (result -32) [ 452.577689][T22022] ipt_ECN: cannot use operation on non-tcp rule [ 452.592556][T19715] block nbd1: Request send failed, requeueing [ 452.643576][ T94] block nbd1: Dead connection, failed to find a fallback [ 452.651558][ T94] block nbd1: shutting down sockets [ 452.657706][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.669145][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 452.686081][T19715] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.697573][T19715] Buffer I/O error on dev nbd1, logical block 1, async page read [ 452.709335][T19715] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.719156][T19715] Buffer I/O error on dev nbd1, logical block 2, async page read [ 452.727518][T19715] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.737022][T19715] Buffer I/O error on dev nbd1, logical block 3, async page read [ 452.752145][T19715] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.770566][T19715] Buffer I/O error on dev nbd1, logical block 0, async page read [ 452.792317][T19715] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.805782][T19715] Buffer I/O error on dev nbd1, logical block 1, async page read [ 452.827505][T19715] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.861108][T19715] Buffer I/O error on dev nbd1, logical block 2, async page read [ 452.869582][T19715] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.879823][T19715] Buffer I/O error on dev nbd1, logical block 3, async page read [ 452.895559][T22034] __nla_validate_parse: 9 callbacks suppressed [ 452.895577][T22034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4495'. [ 452.918068][T19715] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.938746][T19715] Buffer I/O error on dev nbd1, logical block 0, async page read [ 452.953917][T19715] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.964837][T19715] Buffer I/O error on dev nbd1, logical block 1, async page read [ 452.976391][T22034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4495'. [ 452.980034][T19715] ldm_validate_partition_table(): Disk read failed. [ 452.998519][T19715] Dev nbd1: unable to read RDB block 0 [ 453.007466][T19715] nbd1: unable to read partition table [ 453.022462][T19715] ldm_validate_partition_table(): Disk read failed. [ 453.032996][T19715] Dev nbd1: unable to read RDB block 0 [ 453.042762][T19715] nbd1: unable to read partition table [ 453.354866][T22042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4496'. [ 453.433257][T22047] netlink: 'syz.4.4499': attribute type 13 has an invalid length. [ 453.495173][T22047] erspan0: refused to change device tx_queue_len [ 453.502210][T22047] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 453.887779][T22072] netlink: 'syz.4.4508': attribute type 1 has an invalid length. [ 453.935490][T22070] nbd2: detected capacity change from 0 to 127 [ 453.964600][ T5837] block nbd2: Receive control failed (result -32) [ 453.967535][T22072] bond5: entered promiscuous mode [ 453.975190][T19715] block nbd2: Dead connection, failed to find a fallback [ 453.983542][T19715] block nbd2: shutting down sockets [ 453.993548][T19715] ldm_validate_partition_table(): Disk read failed. [ 454.002674][T19715] Dev nbd2: unable to read RDB block 0 [ 454.012181][T19715] nbd2: unable to read partition table [ 454.030062][T19715] ldm_validate_partition_table(): Disk read failed. [ 454.038149][T22072] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.047406][T19715] Dev nbd2: unable to read RDB block 0 [ 454.055674][T19715] nbd2: unable to read partition table [ 454.138357][T22082] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4510'. [ 454.178095][T22082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4510'. [ 454.204675][T22082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4510'. [ 454.251832][T22086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4512'. [ 454.399101][T22095] netlink: 'syz.1.4513': attribute type 1 has an invalid length. [ 454.415117][T22095] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4513'. [ 454.445394][T22098] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4517'. [ 454.564699][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4518'. [ 454.840155][T22113] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 454.852525][T22113] bond4 (unregistering): Released all slaves [ 454.930564][T22112] netlink: 'syz.4.4520': attribute type 1 has an invalid length. [ 455.039936][T22123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.753518][T22165] netlink: 'syz.2.4533': attribute type 4 has an invalid length. [ 456.024622][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 456.126446][T22188] netlink: 'syz.1.4540': attribute type 13 has an invalid length. [ 456.162568][T22188] netlink: 'syz.1.4540': attribute type 58 has an invalid length. [ 456.254839][T22183] syzkaller0: entered promiscuous mode [ 456.260384][T22183] syzkaller0: entered allmulticast mode [ 456.496567][T22213] x_tables: unsorted entry at hook 3 [ 457.134940][T22262] netlink: 'syz.0.4559': attribute type 1 has an invalid length. [ 458.332897][T22262] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 458.716607][T22301] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 460.113236][T22306] bond4 (unregistering): Released all slaves [ 460.143714][T22317] netlink: 'syz.4.4571': attribute type 1 has an invalid length. [ 460.178948][T22312] tipc: Enabled bearer , priority 0 [ 460.192030][T22319] __nla_validate_parse: 46 callbacks suppressed [ 460.192048][T22319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4572'. [ 460.254734][T22322] openvswitch: netlink: IP tunnel dst address not specified [ 460.546761][T22341] netlink: 'syz.3.4579': attribute type 1 has an invalid length. [ 460.597601][T22347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4582'. [ 460.605507][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4581'. [ 460.607046][T22347] block nbd3: Unsupported socket: should be TCP or UNIX. [ 460.629280][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4582'. [ 460.653357][T22346] block nbd3: Unsupported socket: should be TCP or UNIX. [ 460.855602][T22363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4587'. [ 460.860537][T22362] netlink: 'syz.2.4586': attribute type 1 has an invalid length. [ 460.982893][T22367] netlink: 'syz.3.4589': attribute type 1 has an invalid length. [ 461.028296][T22367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.100369][T22373] bond5: (slave veth7): Enslaving as an active interface with a down link [ 461.132126][T22367] bond5: (slave veth0_to_bond): making interface the new active one [ 461.148398][T22367] veth0_to_bond: entered promiscuous mode [ 461.156761][T22367] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 461.163756][T22377] netlink: 'syz.1.4594': attribute type 29 has an invalid length. [ 461.166881][T22375] netlink: 'syz.2.4592': attribute type 1 has an invalid length. [ 461.386049][T22393] netlink: 'syz.3.4597': attribute type 1 has an invalid length. [ 461.433840][T22393] bond6: entered promiscuous mode [ 461.486226][T22393] bond6: entered allmulticast mode [ 461.492797][T22393] 8021q: adding VLAN 0 to HW filter on device bond6 [ 461.863715][T22423] netlink: 'syz.2.4604': attribute type 1 has an invalid length. [ 461.912176][T22423] netlink: 'syz.2.4604': attribute type 3 has an invalid length. [ 461.931783][T22423] netlink: 'syz.2.4604': attribute type 7 has an invalid length. [ 461.940614][T22423] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4604'. [ 461.953786][T22423] NCSI netlink: No device for ifindex 131092 [ 461.986346][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 462.031471][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'. [ 462.122037][T22434] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 462.161839][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 462.190758][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'. [ 462.276327][T22446] syzkaller1: entered promiscuous mode [ 462.289570][T22446] syzkaller1: entered allmulticast mode [ 462.475925][T22458] Bluetooth: MGMT ver 1.23 [ 462.964676][T22475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.152982][T22486] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20004 [ 463.382123][T22502] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 463.527934][T22505] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 463.570339][T22516] warn_alloc: 1 callbacks suppressed [ 463.570359][T22516] syz.3.4633: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 463.600229][T22505] bond7 (unregistering): Released all slaves [ 463.618780][T22516] CPU: 1 UID: 0 PID: 22516 Comm: syz.3.4633 Not tainted syzkaller #0 PREEMPT(full) [ 463.618823][T22516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.618843][T22516] Call Trace: [ 463.618852][T22516] [ 463.618861][T22516] dump_stack_lvl+0x189/0x250 [ 463.618898][T22516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.618926][T22516] ? __pfx__printk+0x10/0x10 [ 463.618947][T22516] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 463.618974][T22516] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 463.619004][T22516] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 463.619034][T22516] warn_alloc+0x214/0x310 [ 463.619065][T22516] ? stack_depot_save_flags+0x40/0x860 [ 463.619110][T22516] ? __pfx_warn_alloc+0x10/0x10 [ 463.619142][T22516] ? kasan_save_track+0x3e/0x80 [ 463.619168][T22516] ? __kasan_kmalloc+0x93/0xb0 [ 463.619197][T22516] ? xsk_setsockopt+0x4dc/0x8d0 [ 463.619220][T22516] ? do_sock_setsockopt+0x17c/0x1b0 [ 463.619238][T22516] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 463.619256][T22516] ? do_syscall_64+0xfa/0xfa0 [ 463.619281][T22516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.619311][T22516] __vmalloc_node_range_noprof+0x125/0x12d0 [ 463.619373][T22516] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 463.619408][T22516] ? __kasan_kmalloc+0x93/0xb0 [ 463.619443][T22516] vmalloc_user_noprof+0xad/0xf0 [ 463.619473][T22516] ? xskq_create+0xbf/0x170 [ 463.619500][T22516] xskq_create+0xbf/0x170 [ 463.619529][T22516] xsk_init_queue+0xb0/0x110 [ 463.619559][T22516] xsk_setsockopt+0x4dc/0x8d0 [ 463.619587][T22516] ? __pfx_xsk_setsockopt+0x10/0x10 [ 463.619621][T22516] ? __pfx_aa_sk_perm+0x10/0x10 [ 463.619651][T22516] ? aa_sock_opt_perm+0xff/0x1b0 [ 463.619686][T22516] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 463.619709][T22516] ? __pfx_xsk_setsockopt+0x10/0x10 [ 463.619734][T22516] do_sock_setsockopt+0x17c/0x1b0 [ 463.619760][T22516] __x64_sys_setsockopt+0x13f/0x1b0 [ 463.619788][T22516] do_syscall_64+0xfa/0xfa0 [ 463.619814][T22516] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.619844][T22516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.619863][T22516] ? clear_bhb_loop+0x60/0xb0 [ 463.619887][T22516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.619913][T22516] RIP: 0033:0x7f6bf318f6c9 [ 463.619931][T22516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.619948][T22516] RSP: 002b:00007f6bf3f4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 463.619969][T22516] RAX: ffffffffffffffda RBX: 00007f6bf33e5fa0 RCX: 00007f6bf318f6c9 [ 463.619984][T22516] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 463.619996][T22516] RBP: 00007f6bf3211f91 R08: 0000000000000004 R09: 0000000000000000 [ 463.620008][T22516] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.620020][T22516] R13: 00007f6bf33e6038 R14: 00007f6bf33e5fa0 R15: 00007fffee8e17a8 [ 463.620054][T22516] [ 463.620067][T22516] Mem-Info: [ 463.917822][T22516] active_anon:6945 inactive_anon:0 isolated_anon:0 [ 463.917822][T22516] active_file:3013 inactive_file:40012 isolated_file:0 [ 463.917822][T22516] unevictable:768 dirty:102 writeback:0 [ 463.917822][T22516] slab_reclaimable:13552 slab_unreclaimable:140386 [ 463.917822][T22516] mapped:31473 shmem:1365 pagetables:1326 [ 463.917822][T22516] sec_pagetables:0 bounce:0 [ 463.917822][T22516] kernel_misc_reclaimable:0 [ 463.917822][T22516] free:1280863 free_pcp:13363 free_cma:0 [ 463.948964][T22520] 8021q: adding VLAN 0 to HW filter on device bond6 [ 463.971700][T22516] Node 0 active_anon:27804kB inactive_anon:0kB active_file:12052kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125892kB dirty:432kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17772kB pagetables:5184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 464.003750][T22516] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 464.062197][T22516] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.094074][T22522] vlan2: entered allmulticast mode [ 464.094099][T22522] bond6: entered allmulticast mode [ 464.113276][T22516] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 464.138012][T22516] Node 0 DMA32 free:1217064kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27504kB inactive_anon:0kB active_file:12052kB inactive_file:159844kB unevictable:1536kB writepending:432kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:35172kB local_pcp:18252kB free_cma:0kB [ 464.225079][T22516] lowmem_reserve[]: 0 0 0 0 0 [ 464.229881][T22516] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.290051][T22516] lowmem_reserve[]: 0 0 0 0 0 [ 464.307188][T22516] Node 1 Normal free:3888836kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21188kB local_pcp:8904kB free_cma:0kB [ 464.337694][T22540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.347381][T22516] lowmem_reserve[]: 0 0 0 0 0 [ 464.361369][T22516] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 464.376743][T22516] Node 0 DMA32: 121*4kB (UM) 297*8kB (UM) 473*16kB (UM) 263*32kB (UM) 80*64kB (UME) 37*128kB (UM) 18*256kB (UME) 2*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 286*4096kB (M) = 1217052kB [ 464.419780][T22516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 464.460420][T22516] Node 1 Normal: 3*4kB (E) 3*8kB (ME) 13*16kB (UME) 96*32kB (UME) 23*64kB (UME) 10*128kB (UME) 3*256kB (UM) 6*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3888820kB [ 464.519091][T22516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.594534][T22516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.619141][T22516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.644922][T22516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.668631][T22516] 44386 total pagecache pages [ 464.673373][T22516] 0 pages in swap cache [ 464.705597][T22516] Free swap = 124996kB [ 464.709833][T22516] Total swap = 124996kB [ 464.734278][T22558] xt_hashlimit: size too large, truncated to 1048576 [ 464.740670][T22516] 2097051 pages RAM [ 464.746862][T22516] 0 pages HighMem/MovableOnly [ 464.751605][T22516] 424119 pages reserved [ 464.768030][T22516] 0 pages cma reserved [ 465.274772][T22592] lo: entered allmulticast mode [ 465.387072][T22600] syzkaller1: entered promiscuous mode [ 465.392862][T22600] syzkaller1: entered allmulticast mode [ 465.414039][T22607] validate_nla: 9 callbacks suppressed [ 465.414057][T22607] netlink: 'syz.4.4658': attribute type 1 has an invalid length. [ 465.565232][T22607] 8021q: adding VLAN 0 to HW filter on device bond8 [ 465.574873][T22607] bond7: (slave bond8): making interface the new active one [ 465.584267][T22607] bond7: (slave bond8): Enslaving as an active interface with an up link [ 465.655695][T22608] 8021q: adding VLAN 0 to HW filter on device bond9 [ 465.665639][T22608] bond7: (slave bond9): Enslaving as a backup interface with an up link [ 465.715126][T22625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.989649][T22637] bond10 (unregistering): Released all slaves [ 466.031947][T22644] __nla_validate_parse: 7 callbacks suppressed [ 466.031969][T22644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4668'. [ 466.318452][T22636] bond10 (unregistering): Released all slaves [ 466.906232][T22674] netlink: 'syz.4.4675': attribute type 1 has an invalid length. [ 466.973383][T22681] netlink: 'syz.3.4677': attribute type 1 has an invalid length. [ 466.985728][T22674] 8021q: adding VLAN 0 to HW filter on device bond10 [ 467.023311][T22684] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4678'. [ 467.097559][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4675'. [ 467.117122][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4675'. [ 467.131209][T22693] openvswitch: netlink: Flow key attribute not present in set flow. [ 467.145786][T22674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 467.223274][T22696] lo speed is unknown, defaulting to 1000 [ 467.279766][T22682] syzkaller0: entered promiscuous mode [ 467.303345][T22682] syzkaller0: entered allmulticast mode [ 467.493638][T22703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.527528][T22708] syzkaller0: entered promiscuous mode [ 467.545329][T22713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4683'. [ 467.547226][T22708] syzkaller0: entered allmulticast mode [ 468.057485][T22708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.076192][T22708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.398948][T22717] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4684'. [ 468.424236][ T7048] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.433384][T22696] lo speed is unknown, defaulting to 1000 [ 468.443235][ T7048] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.462343][ T7048] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.497167][ T7048] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.611553][ T7048] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.630353][ T7048] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.650031][ T7048] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.666831][ T7048] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.674920][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4690'. [ 468.686328][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4690'. [ 468.700136][T22742] netlink: 'syz.1.4690': attribute type 12 has an invalid length. [ 468.713764][T22742] netlink: 'syz.1.4690': attribute type 11 has an invalid length. [ 468.819369][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4691'. [ 469.480784][T22783] netlink: 'syz.0.4705': attribute type 12 has an invalid length. [ 469.755121][T22798] netlink: 'syz.1.4709': attribute type 7 has an invalid length. [ 469.763109][T22798] netlink: 'syz.1.4709': attribute type 8 has an invalid length. [ 470.020382][T22805] veth0: entered promiscuous mode [ 470.167623][T22810] team0: Device vti0 is of different type [ 470.221410][T22802] veth0: left promiscuous mode [ 470.610671][T22832] netlink: 'syz.4.4719': attribute type 1 has an invalid length. [ 470.977833][T22847] netlink: 'syz.1.4722': attribute type 13 has an invalid length. [ 470.986437][T22847] netlink: 'syz.1.4722': attribute type 27 has an invalid length. [ 471.204870][T22873] dvmrp0: entered allmulticast mode [ 471.423937][T22887] 8021q: VLANs not supported on ip6tnl0 [ 472.042108][T22923] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 472.052610][T22923] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 472.103622][T22923] __nla_validate_parse: 11 callbacks suppressed [ 472.103642][T22923] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.4747'. [ 472.442237][T22939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4752'. [ 472.485853][ T7032] veth0_to_bond: left promiscuous mode [ 472.662408][T22952] bond0: (slave syz_tun): Releasing backup interface [ 472.677189][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 472.710844][T22956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4755'. [ 472.858042][T22952] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 473.028436][T22962] openvswitch: netlink: nsh attr 4 is out of range max 3 [ 473.045726][T22962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.328476][T22984] Cannot find map_set index 0 as target [ 473.340443][T22986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4765'. [ 473.351147][T22981] netlink: 'syz.1.4766': attribute type 2 has an invalid length. [ 473.377115][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4766'. [ 473.390596][T22991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4765'. [ 473.618403][T23007] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 473.626489][T23007] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 473.634528][T23007] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 473.642483][T23007] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 473.650482][T23007] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 473.658472][T23007] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 473.666481][T23007] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 473.710040][T22994] gretap2: entered promiscuous mode [ 473.741977][T22999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4770'. [ 473.803939][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4770'. [ 474.079701][T23039] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 474.167653][T23042] netlink: 'syz.3.4783': attribute type 12 has an invalid length. [ 474.210442][T23042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4783'. [ 474.298026][T23056] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 474.517926][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4791'. [ 474.656416][ T9] IPVS: starting estimator thread 0... [ 474.775232][T23081] IPVS: using max 26 ests per chain, 62400 per kthread [ 474.795904][T23080] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 474.811549][T23080] bond7 (unregistering): Released all slaves [ 474.995787][T23096] lo: entered promiscuous mode [ 475.014362][T23096] netlink: 'syz.0.4800': attribute type 2 has an invalid length. [ 475.065484][T23111] netlink: 'syz.0.4800': attribute type 2 has an invalid length. [ 475.341377][T23120] macvtap1: entered promiscuous mode [ 475.354612][T23120] vlan0: entered promiscuous mode [ 475.360598][T23120] macvtap1: entered allmulticast mode [ 475.388183][T23120] vlan0: entered allmulticast mode [ 475.395232][T23120] veth0_vlan: entered allmulticast mode [ 475.423303][T23124] macvtap2: entered promiscuous mode [ 475.428795][T23124] macvtap2: entered allmulticast mode [ 475.539891][T23135] netlink: 'syz.0.4810': attribute type 1 has an invalid length. [ 475.682459][T23145] netlink: 'syz.4.4815': attribute type 1 has an invalid length. [ 475.758673][T23145] 8021q: adding VLAN 0 to HW filter on device bond11 [ 476.151757][T23165] bridge4: entered promiscuous mode [ 476.161463][T23165] bridge4: entered allmulticast mode [ 476.242953][T23186] team0: Device vti0 is of different type [ 476.500527][T23200] netlink: 'syz.4.4829': attribute type 1 has an invalid length. [ 476.619276][T23210] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 476.830556][T23207] netlink: 'syz.0.4831': attribute type 1 has an invalid length. [ 477.503983][T23240] tipc: Enabled bearer , priority 0 [ 477.540818][T23240] syzkaller0: entered promiscuous mode [ 477.561033][T23240] syzkaller0: entered allmulticast mode [ 477.661057][T23240] tipc: Resetting bearer [ 477.679329][T23240] netlink: 'syz.4.4842': attribute type 11 has an invalid length. [ 477.700564][T23239] tipc: Resetting bearer [ 477.735924][T23260] __nla_validate_parse: 4 callbacks suppressed [ 477.735943][T23260] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4847'. [ 477.785720][T23239] tipc: Disabling bearer [ 477.792144][T23261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4847'. [ 478.463667][T23295] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4857'. [ 478.473687][T23295] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 478.514674][T23295] 0ªî{X¹¦: entered allmulticast mode [ 478.525203][T23295] net_ratelimit: 49 callbacks suppressed [ 478.525221][T23295] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 478.639309][T23298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4859'. [ 478.655854][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 478.680601][T23304] netlink: 'syz.3.4860': attribute type 10 has an invalid length. [ 478.693421][T23304] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 478.906677][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4866'. [ 478.929213][T23329] tipc: Enabling of bearer rejected, failed to enable media [ 478.960009][T23324] : entered promiscuous mode [ 479.091879][T23339] netlink: 404 bytes leftover after parsing attributes in process `syz.4.4869'. [ 479.126466][T23339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4869'. [ 479.164691][T23339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4869'. [ 479.174100][T23339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4869'. [ 479.322051][T23350] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4871'. [ 479.423970][T23355] syzkaller0: entered promiscuous mode [ 479.429999][T23355] syzkaller0: entered allmulticast mode [ 479.457206][T23360] lo: Caught tx_queue_len zero misconfig [ 479.627284][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 481.020963][T23375] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 481.043996][T23375] bridge_slave_0: invalid flags given to default FDB implementation [ 481.208300][T23390] geneve1: entered promiscuous mode [ 481.314302][T23398] delete_channel: no stack [ 481.346503][T23398] netlink: 'syz.1.4886': attribute type 142 has an invalid length. [ 481.371190][T23400] netlink: 'syz.1.4886': attribute type 142 has an invalid length. [ 481.579794][T23415] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 481.626967][ T94] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 270 seconds [ 481.638604][ T94] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 270 seconds [ 481.649926][ T94] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 270 seconds [ 481.661742][ T94] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 270 seconds [ 482.287559][T23425] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 482.737714][T23433] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 483.495371][T23453] lo: entered allmulticast mode [ 483.503970][T23448] netlink: 'syz.3.4899': attribute type 8 has an invalid length. [ 483.515355][T23448] __nla_validate_parse: 4 callbacks suppressed [ 483.515374][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4899'. [ 483.541199][T23452] ip6tnl3: entered promiscuous mode [ 483.599393][T23456] ipvlan2: entered promiscuous mode [ 483.618599][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4900'. [ 483.652142][T23461] IPv6: sit1: Disabled Multicast RS [ 483.676631][T23461] sit1: entered allmulticast mode [ 483.789769][T23466] netlink: 'syz.4.4904': attribute type 2 has an invalid length. [ 483.853615][T23466] syzkaller0: entered promiscuous mode [ 483.859684][T23466] syzkaller0: entered allmulticast mode [ 483.894146][T23471] netlink: 'syz.3.4906': attribute type 1 has an invalid length. [ 483.959949][T23474] netlink: 'syz.2.4907': attribute type 13 has an invalid length. [ 484.001466][T23474] veth0_macvtap: left promiscuous mode [ 484.021416][T23474] macvtap0: entered allmulticast mode [ 484.052174][T23474] macvtap0: refused to change device tx_queue_len [ 484.109460][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4909'. [ 484.210265][T23488] netlink: 'syz.2.4912': attribute type 2 has an invalid length. [ 484.230515][T23488] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4912'. [ 484.436013][T23503] netlink: 'syz.4.4917': attribute type 29 has an invalid length. [ 484.458918][T23503] netlink: 'syz.4.4917': attribute type 29 has an invalid length. [ 484.477309][T23503] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4917'. [ 484.541778][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4919'. [ 484.696711][T23520] netlink: 'syz.2.4922': attribute type 32 has an invalid length. [ 484.832434][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4927'. [ 485.000674][T23544] dummy0: left promiscuous mode [ 485.013113][T23544] dummy0: left allmulticast mode [ 485.033789][T23544] team0: Port device dummy0 removed [ 485.046061][T23544] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 485.083176][T23554] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4933'. [ 485.161657][T23546] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4928'. [ 485.250649][T23561] pim6reg1: entered promiscuous mode [ 485.256054][T23561] pim6reg1: entered allmulticast mode [ 485.278689][T23563] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4938'. [ 485.301391][T23561] nbd: must specify a size in bytes for the device [ 486.365339][ T7032] bond6 (unregistering): (slave gretap1): Releasing active interface [ 486.421682][ T7032] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 486.463009][ T7032] team0: Port device geneve0 removed [ 486.772703][ T7032] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.781955][ T7032] bond_slave_0: left promiscuous mode [ 486.789971][ T7032] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.799490][ T7032] bond_slave_1: left promiscuous mode [ 486.805433][ T7032] $Hÿ (unregistering): Released all slaves [ 486.821137][ T7032] bond0 (unregistering): (slave veth3): Releasing active interface [ 486.830521][ T7032] bond0 (unregistering): Released all slaves [ 486.849196][ T7032] bond1 (unregistering): Released all slaves [ 486.863201][ T7032] bond2 (unregistering): Released all slaves [ 486.881956][ T7032] bond3 (unregistering): Released all slaves [ 486.901698][ T7032] bond4 (unregistering): (slave bond5): Releasing backup interface [ 486.911246][ T7032] bond4 (unregistering): Released all slaves [ 487.010375][ T7032] bond5 (unregistering): Released all slaves [ 487.024306][ T7032] bond6 (unregistering): Released all slaves [ 487.038564][ T7032] bond7 (unregistering): Released all slaves [ 487.137472][ T7032] bond8 (unregistering): (slave veth9): Releasing active interface [ 487.148569][ T7032] bond8 (unregistering): (slave veth11): Releasing active interface [ 487.158992][ T7032] bond8 (unregistering): Released all slaves [ 488.656369][ T7032] tipc: Left network mode [ 489.422992][ T7032] hsr_slave_0: left promiscuous mode [ 489.436183][ T7032] hsr_slave_1: left promiscuous mode [ 489.506494][ T7032] pimreg (unregistering): left allmulticast mode [ 489.561397][ T7032] pim6reg527 (unregistering): left allmulticast mode [ 489.891393][ T7032] team0 (unregistering): Port device team_slave_1 removed [ 489.929084][ T7032] team0 (unregistering): Port device team_slave_0 removed [ 490.159749][ T7032] team0 (unregistering): Port device dummy0 removed [ 490.479582][ T7032] IPVS: stop unused estimator thread 0... [ 504.664682][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 506.638147][ T7035] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 506.821096][ T7035] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 507.250712][ T7035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.260994][ T7035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.270819][ T7035] bond0 (unregistering): Released all slaves [ 507.285318][ T7035] bond1 (unregistering): Released all slaves [ 507.378011][ T7035] bond2 (unregistering): Released all slaves [ 507.472480][ T7035] bond3 (unregistering): (slave bond4): Releasing backup interface [ 507.481224][ T7035] bond3 (unregistering): Released all slaves [ 507.574546][ T7035] bond4 (unregistering): Released all slaves [ 507.589133][ T7035] bond5 (unregistering): Released all slaves [ 507.603114][ T7035] bond6 (unregistering): Released all slaves [ 507.623836][ T7035] bond7 (unregistering): (slave lo): Releasing backup interface [ 507.635598][ T7035] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 507.647572][ T7035] bond7 (unregistering): Released all slaves [ 507.664093][ T7035] bond8 (unregistering): Released all slaves [ 507.678613][ T7035] bond9 (unregistering): Released all slaves [ 507.777828][ T7035] bond10 (unregistering): Released all slaves [ 507.916000][ T7035] tipc: Left network mode [ 508.474085][ T7035] hsr_slave_0: left promiscuous mode [ 508.480437][ T7035] hsr_slave_1: left promiscuous mode [ 508.494086][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.502943][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.520762][ T7035] pim6reg (unregistering): left allmulticast mode [ 508.886133][ T7035] team0 (unregistering): Port device team_slave_1 removed [ 508.925042][ T7035] team0 (unregistering): Port device team_slave_0 removed [ 509.143452][ T7035] lo (unregistering): left allmulticast mode [ 510.872958][ T7035] IPVS: stop unused estimator thread 0... [ 511.724968][ T94] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 300 seconds [ 511.736149][ T94] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 300 seconds [ 511.747470][ T94] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 300 seconds [ 511.758905][ T94] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 300 seconds [ 541.796197][ T94] block nbd0: Possible stuck request ffff8880250d7000: control (read@0,1024B). Runtime 330 seconds [ 541.807027][ T94] block nbd0: Possible stuck request ffff8880250d71c0: control (read@1024,1024B). Runtime 330 seconds [ 541.818281][ T94] block nbd0: Possible stuck request ffff8880250d7380: control (read@2048,1024B). Runtime 330 seconds [ 541.829602][ T94] block nbd0: Possible stuck request ffff8880250d7540: control (read@3072,1024B). Runtime 330 seconds [ 552.666469][ T31] INFO: task udevd:12300 blocked for more than 143 seconds. [ 552.673809][ T31] Not tainted syzkaller #0 [ 552.679086][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.688083][ T31] task:udevd state:D stack:21864 pid:12300 tgid:12300 ppid:5198 task_flags:0x400140 flags:0x00080003 [ 552.700750][ T31] Call Trace: [ 552.704066][ T31] [ 552.707325][ T31] __schedule+0x1798/0x4cc0 [ 552.711911][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 552.717321][ T31] ? schedule+0x91/0x360 [ 552.722214][ T31] schedule+0x165/0x360 [ 552.726605][ T31] io_schedule+0x80/0xd0 [ 552.730888][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 552.736327][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 552.742191][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 552.748361][ T31] ? __filemap_get_folio+0x6c0/0xaf0 [ 552.753695][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 552.804983][ T31] do_read_cache_folio+0x1aa/0x590 [ 552.810214][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 552.894586][ T31] read_part_sector+0xb6/0x2b0 [ 552.899462][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 552.913795][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 552.930911][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 552.938143][ T31] bdev_disk_changed+0x75f/0x14b0 [ 552.955521][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 552.961054][ T31] ? wait_on_inode+0xc0/0x230 [ 552.974522][ T31] blkdev_get_whole+0x380/0x510 [ 552.979452][ T31] bdev_open+0x31e/0xd30 [ 552.983748][ T31] blkdev_open+0x457/0x600 [ 553.014699][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 553.019715][ T31] do_dentry_open+0x953/0x13f0 [ 553.034488][ T31] vfs_open+0x3b/0x340 [ 553.038627][ T31] ? path_openat+0x2ecd/0x3830 [ 553.043429][ T31] path_openat+0x2ee5/0x3830 [ 553.055098][ T31] ? __pfx_path_openat+0x10/0x10 [ 553.060129][ T31] do_filp_open+0x1fa/0x410 [ 553.074484][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.079485][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 553.094593][ T31] ? _raw_spin_unlock+0x28/0x50 [ 553.099512][ T31] ? alloc_fd+0x64c/0x6c0 [ 553.103890][ T31] do_sys_openat2+0x121/0x1c0 [ 553.154543][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 553.159830][ T31] ? exc_page_fault+0x82/0x100 [ 553.184507][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 553.189870][ T31] __x64_sys_openat+0x138/0x170 [ 553.214563][ T31] do_syscall_64+0xfa/0xfa0 [ 553.219415][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.244586][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.250814][ T31] ? clear_bhb_loop+0x60/0xb0 [ 553.274514][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.280848][ T31] RIP: 0033:0x7f028e2a7407 [ 553.304645][ T31] RSP: 002b:00007ffd8cd3e9c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 553.313133][ T31] RAX: ffffffffffffffda RBX: 00007f028e979880 RCX: 00007f028e2a7407 [ 553.364963][ T31] RDX: 00000000000a0800 RSI: 000056100ddf76b0 RDI: ffffffffffffff9c [ 553.373092][ T31] RBP: 000056100ddcd910 R08: 0000000000000000 R09: 0000000000000000 [ 553.394469][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000056100dde0ad0 [ 553.402512][ T31] R13: 000056100dddb190 R14: 0000000000000000 R15: 000056100dde0ad0 [ 553.419609][ T31] [ 553.423156][ T31] [ 553.423156][ T31] Showing all locks held in the system: [ 553.461052][ T31] 1 lock held by khungtaskd/31: [ 553.475343][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 553.505064][ T31] 2 locks held by kworker/1:2/855: [ 553.510240][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 553.538520][ T31] #1: ffffc90003227ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 553.565097][ T31] 2 locks held by getty/5583: [ 553.569835][ T31] #0: ffff88802fd520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 553.595307][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 553.614522][ T31] 3 locks held by kworker/u8:11/7030: [ 553.619939][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 553.655102][ T31] #1: ffffc90003d5fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 553.674494][ T31] #2: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 553.683557][ T31] 1 lock held by udevd/12300: [ 553.704698][ T31] #0: ffff88802501f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 553.714121][ T31] 1 lock held by syz-executor/16666: [ 553.734552][ T31] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 553.743645][ T31] 1 lock held by syz-executor/16995: [ 553.764423][ T31] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 553.773500][ T31] 1 lock held by syz-executor/17067: [ 553.794925][ T31] 1 lock held by syz-executor/17440: [ 553.800286][ T31] 2 locks held by syz-executor/17801: [ 553.824498][ T31] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 553.833569][ T31] #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 553.883931][ T31] [ 553.887076][ T31] ============================================= [ 553.887076][ T31] [ 553.896909][ T31] NMI backtrace for cpu 0 [ 553.896928][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 553.896951][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.896964][ T31] Call Trace: [ 553.896972][ T31] [ 553.896981][ T31] dump_stack_lvl+0x189/0x250 [ 553.897017][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.897045][ T31] ? __pfx__printk+0x10/0x10 [ 553.897085][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 553.897110][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 553.897135][ T31] ? __pfx__printk+0x10/0x10 [ 553.897159][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 553.897192][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 553.897219][ T31] watchdog+0xf60/0xfa0 [ 553.897245][ T31] ? watchdog+0x1e2/0xfa0 [ 553.897272][ T31] kthread+0x711/0x8a0 [ 553.897303][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.897322][ T31] ? __pfx_kthread+0x10/0x10 [ 553.897352][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.897378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.897404][ T31] ? __pfx_kthread+0x10/0x10 [ 553.897431][ T31] ret_from_fork+0x4bc/0x870 [ 553.897454][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 553.897484][ T31] ? __switch_to_asm+0x39/0x70 [ 553.897500][ T31] ? __switch_to_asm+0x33/0x70 [ 553.897515][ T31] ? __pfx_kthread+0x10/0x10 [ 553.897543][ T31] ret_from_fork_asm+0x1a/0x30 [ 553.897580][ T31] [ 553.897587][ T31] Sending NMI from CPU 0 to CPUs 1: [ 554.046087][ C1] NMI backtrace for cpu 1 [ 554.046104][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 554.046123][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.046134][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 554.046163][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 554.046195][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 554.046210][ C1] RAX: 77168b968edae600 RBX: ffffffff81967bf7 RCX: 77168b968edae600 [ 554.046223][ C1] RDX: 0000000000000001 RSI: ffffffff8d70dd33 RDI: ffffffff8bbf0760 [ 554.046236][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 554.046248][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce470 [ 554.046261][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 554.046272][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 554.046286][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.046304][ C1] CR2: 0000559e80632000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 554.046320][ C1] Call Trace: [ 554.046326][ C1] [ 554.046332][ C1] default_idle+0x13/0x20 [ 554.046348][ C1] default_idle_call+0x73/0xb0 [ 554.046366][ C1] do_idle+0x1e7/0x510 [ 554.046388][ C1] ? __pfx_do_idle+0x10/0x10 [ 554.046416][ C1] cpu_startup_entry+0x44/0x60 [ 554.046434][ C1] start_secondary+0x101/0x110 [ 554.046460][ C1] common_startup_64+0x13e/0x147 [ 554.046492][ C1] [ 554.295192][T17440] bond0: (slave syz_tun): Releasing backup interface [ 554.473940][ T7035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.484919][ T7035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.571471][ T7035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.582348][ T7035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.651865][ T7035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.662809][ T7035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.754936][ T7035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.765761][ T7035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.889783][ T7035] dummy0: left allmulticast mode [ 554.896868][ T7035] bridge0: port 3(dummy0) entered disabled state [ 554.908114][ T7035] bridge_slave_1: left allmulticast mode [ 554.913791][ T7035] bridge_slave_1: left promiscuous mode [ 554.920596][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.930118][ T7035] bridge_slave_0: left allmulticast mode [ 554.937133][ T7035] bridge_slave_0: left promiscuous mode [ 554.942838][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.162915][ T7035] dvmrp0 (unregistering): left allmulticast mode [ 555.546172][ T7035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.558099][ T7035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.571781][ T7035] bond0 (unregistering): (slave bond4): Releasing backup interface [ 555.580882][ T7035] bond0 (unregistering): Released all slaves [ 555.596342][ T7035] bond1 (unregistering): Released all slaves [ 555.611034][ T7035] bond2 (unregistering): Released all slaves [ 555.625934][ T7035] bond3 (unregistering): Released all slaves [ 555.726243][ T7035] bond4 (unregistering): Released all slaves [ 555.837817][ T7035] tipc: Disabling bearer [ 555.853853][ T7035] tipc: Disabling bearer [ 555.870048][ T7035] tipc: Left network mode [ 556.882055][ T7035] hsr_slave_0: left promiscuous mode [ 556.888254][ T7035] hsr_slave_1: left promiscuous mode [ 556.894705][ T7035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.902171][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.912487][ T7035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.920285][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.949938][ T7035] veth1_macvtap: left promiscuous mode [ 556.955790][ T7035] veth0_macvtap: left promiscuous mode [ 556.963725][ T7035] veth1_vlan: left promiscuous mode [ 556.969602][ T7035] veth0_vlan: left promiscuous mode [ 557.269211][ T7035] team0 (unregistering): Port device veth0_virt_wifi removed [ 557.436782][ T7035] team0 (unregistering): Port device team_slave_1 removed [ 557.476335][ T7035] team0 (unregistering): Port device team_slave_0 removed [ 557.993563][ T7035] IPVS: stop unused estimator thread 0... [ 558.011339][ T7035] ------------[ cut here ]------------ [ 558.018310][ T7035] WARNING: CPU: 1 PID: 7035 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 558.028043][ T7035] Modules linked in: [ 558.032323][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 558.042038][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.052470][ T7035] Workqueue: netns cleanup_net [ 558.057395][ T7035] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 558.062986][ T7035] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb 90 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 29 7e 1a f8 e8 a4 db d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 db d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 558.083029][ T7035] RSP: 0018:ffffc90003c6f878 EFLAGS: 00010293 [ 558.089228][ T7035] RAX: ffffffff89eb2aec RBX: ffff888031912480 RCX: ffff88805536dac0 [ 558.097337][ T7035] RDX: 0000000000000000 RSI: ffffffff8d8f48bb RDI: ffff88805536dac0 [ 558.105762][ T7035] RBP: ffffc90003c6f990 R08: ffffffff8f7ce477 R09: 1ffffffff1ef9c8e [ 558.113779][ T7035] R10: dffffc0000000000 R11: fffffbfff1ef9c8f R12: ffffffff8f3c6880 [ 558.121954][ T7035] R13: 1ffff9200078df3c R14: ffff888031913940 R15: dffffc0000000000 [ 558.130055][ T7035] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 558.139410][ T7035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.146100][ T7035] CR2: 0000556402f21950 CR3: 0000000077232000 CR4: 00000000003526f0 [ 558.154106][ T7035] Call Trace: [ 558.157497][ T7035] [ 558.160461][ T7035] xfrm_net_exit+0x2d/0x70 [ 558.165646][ T7035] ops_undo_list+0x49a/0x990 [ 558.170288][ T7035] ? __pfx_ops_undo_list+0x10/0x10 [ 558.175923][ T7035] ? do_raw_spin_unlock+0x122/0x240 [ 558.181180][ T7035] cleanup_net+0x4d8/0x820 [ 558.186128][ T7035] ? __pfx_cleanup_net+0x10/0x10 [ 558.191114][ T7035] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.196998][ T7035] ? process_scheduled_works+0x9ef/0x17b0 [ 558.202778][ T7035] ? process_scheduled_works+0x9ef/0x17b0 [ 558.209057][ T7035] process_scheduled_works+0xae1/0x17b0 [ 558.215274][ T7035] ? __pfx_process_scheduled_works+0x10/0x10 [ 558.221316][ T7035] worker_thread+0x8a0/0xda0 [ 558.226704][ T7035] kthread+0x711/0x8a0 [ 558.231561][ T7035] ? __pfx_worker_thread+0x10/0x10 [ 558.236821][ T7035] ? __pfx_kthread+0x10/0x10 [ 558.241453][ T7035] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.246787][ T7035] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.252031][ T7035] ? __pfx_kthread+0x10/0x10 [ 558.257086][ T7035] ret_from_fork+0x4bc/0x870 [ 558.261717][ T7035] ? __pfx_ret_from_fork+0x10/0x10 [ 558.267008][ T7035] ? __switch_to_asm+0x39/0x70 [ 558.271804][ T7035] ? __switch_to_asm+0x33/0x70 [ 558.276781][ T7035] ? __pfx_kthread+0x10/0x10 [ 558.281413][ T7035] ret_from_fork_asm+0x1a/0x30 [ 558.286576][ T7035] [ 558.289642][ T7035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 558.296944][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 558.306518][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.316602][ T7035] Workqueue: netns cleanup_net [ 558.321401][ T7035] Call Trace: [ 558.324704][ T7035] [ 558.327664][ T7035] dump_stack_lvl+0x99/0x250 [ 558.332300][ T7035] ? __asan_memcpy+0x40/0x70 [ 558.336928][ T7035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.342170][ T7035] ? __pfx__printk+0x10/0x10 [ 558.346834][ T7035] vpanic+0x237/0x6d0 [ 558.350847][ T7035] ? __pfx_vpanic+0x10/0x10 [ 558.355375][ T7035] panic+0xb9/0xc0 [ 558.359198][ T7035] ? __pfx_panic+0x10/0x10 [ 558.363903][ T7035] __warn+0x31b/0x4b0 [ 558.367897][ T7035] ? xfrm_state_fini+0x26d/0x2f0 [ 558.372861][ T7035] ? xfrm_state_fini+0x26d/0x2f0 [ 558.377839][ T7035] report_bug+0x2be/0x4f0 [ 558.382209][ T7035] ? xfrm_state_fini+0x26d/0x2f0 [ 558.387169][ T7035] ? xfrm_state_fini+0x26d/0x2f0 [ 558.392119][ T7035] ? xfrm_state_fini+0x26f/0x2f0 [ 558.397066][ T7035] handle_bug+0x84/0x160 [ 558.401351][ T7035] exc_invalid_op+0x1a/0x50 [ 558.405861][ T7035] asm_exc_invalid_op+0x1a/0x20 [ 558.410715][ T7035] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 558.416291][ T7035] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb 90 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 29 7e 1a f8 e8 a4 db d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 db d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 558.435918][ T7035] RSP: 0018:ffffc90003c6f878 EFLAGS: 00010293 [ 558.441992][ T7035] RAX: ffffffff89eb2aec RBX: ffff888031912480 RCX: ffff88805536dac0 [ 558.449969][ T7035] RDX: 0000000000000000 RSI: ffffffff8d8f48bb RDI: ffff88805536dac0 [ 558.457945][ T7035] RBP: ffffc90003c6f990 R08: ffffffff8f7ce477 R09: 1ffffffff1ef9c8e [ 558.465932][ T7035] R10: dffffc0000000000 R11: fffffbfff1ef9c8f R12: ffffffff8f3c6880 [ 558.473909][ T7035] R13: 1ffff9200078df3c R14: ffff888031913940 R15: dffffc0000000000 [ 558.481897][ T7035] ? xfrm_state_fini+0x26c/0x2f0 [ 558.486858][ T7035] ? xfrm_state_fini+0x26c/0x2f0 [ 558.491811][ T7035] xfrm_net_exit+0x2d/0x70 [ 558.496243][ T7035] ops_undo_list+0x49a/0x990 [ 558.500880][ T7035] ? __pfx_ops_undo_list+0x10/0x10 [ 558.505998][ T7035] ? do_raw_spin_unlock+0x122/0x240 [ 558.511207][ T7035] cleanup_net+0x4d8/0x820 [ 558.515629][ T7035] ? __pfx_cleanup_net+0x10/0x10 [ 558.520571][ T7035] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.525809][ T7035] ? process_scheduled_works+0x9ef/0x17b0 [ 558.531531][ T7035] ? process_scheduled_works+0x9ef/0x17b0 [ 558.537262][ T7035] process_scheduled_works+0xae1/0x17b0 [ 558.542849][ T7035] ? __pfx_process_scheduled_works+0x10/0x10 [ 558.548854][ T7035] worker_thread+0x8a0/0xda0 [ 558.553487][ T7035] kthread+0x711/0x8a0 [ 558.557570][ T7035] ? __pfx_worker_thread+0x10/0x10 [ 558.562707][ T7035] ? __pfx_kthread+0x10/0x10 [ 558.567331][ T7035] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.572564][ T7035] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.577765][ T7035] ? __pfx_kthread+0x10/0x10 [ 558.582370][ T7035] ret_from_fork+0x4bc/0x870 [ 558.586996][ T7035] ? __pfx_ret_from_fork+0x10/0x10 [ 558.592154][ T7035] ? __switch_to_asm+0x39/0x70 [ 558.596920][ T7035] ? __switch_to_asm+0x33/0x70 [ 558.601687][ T7035] ? __pfx_kthread+0x10/0x10 [ 558.606285][ T7035] ret_from_fork_asm+0x1a/0x30 [ 558.611082][ T7035] [ 558.617150][ T7035] Kernel Offset: disabled [ 558.621483][ T7035] Rebooting in 86400 seconds..