last executing test programs: 9.251553573s ago: executing program 2 (id=3932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000025d000000000000003000000240001800c00028007000200"/50], 0x38}}, 0x0) 8.878835964s ago: executing program 2 (id=3935): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="18110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffff50d1f3c6b0224933b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYBLOB="e79ca899082ed186e3e09269595b", @ANYBLOB="7d9ee01c605249460c7bd8f981eb374e7a064a1aef9659776c633da3fa4fcb19da79627e5f01ade5610854067473a1dbed357e50d3", @ANYRES64=r2, @ANYBLOB="d5b237836572b775b354e1342859b1229df1d68f03f1c5f1f27942b2097587a140a762ebdd25636bb599a778d096957d5219f2781505e2ed6e92b66b54f6186ab96217c052a1e9cdbfa69a314fb9e19e493044e36473885caef12808b8fc191a6cfc9612ba178c3b6f2287fecd8f4d40a223784c9fb764e9fdcee7a28b6d5694ccc49971ad4b6954cd404b07ed12d77e393a01db473422e449088b2e5a0f1430327306501b9f448490b00dfbd15e95b7a82233e0337319868e68e8cb468356f8"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x7) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x41840}, 0x40090) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000600)={r1, 0x0, 0x25, 0x11, @void}, 0x10) 8.587112145s ago: executing program 2 (id=3938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x6, 0x8d) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@getsadinfo={0x12c, 0x23, 0x800, 0x70bd2d, 0x25dfdbfd, 0x0, [@srcaddr={0x14, 0xd, @in6=@remote}, @srcaddr={0x14, 0xd, @in=@local}, @mark={0xc, 0x15, {0x350759, 0x454a}}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e22, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0xa0, 0x4, r1, r2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0xff}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x4, 0x8, 0x80000000, 0x5, 0x3, 0x7fffffff, 0x893, 0x61}, {0x4, 0xffee, 0x5, 0xffffffffffffffff}, {0x80000001, 0x3ff, 0xe}, 0x70bd25, 0x3500, 0x2, 0x1, 0x10, 0x8}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001400e99900000000fcdbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff0400000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000bdc5204d966c1bed3627fcd7b6869fd65b320c51157acb8edf38e6936dbdc107cbba25d8"], 0xb8}}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000f00)="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", 0x185}], 0x1}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) socket(0x23, 0xa, 0x5) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 6.323441347s ago: executing program 0 (id=3952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20040014) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8954, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, r3, 0x1, 0x400000, 0x25dfdbfe}, 0x14}}, 0x2000c050) 6.059731968s ago: executing program 0 (id=3953): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000300)=""/190, &(0x7f00000003c0)=0xbe) bind$alg(r1, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000140), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f00000003c0)=@framed={{}, [@generic={0x17, 0x4, 0xd, 0x9, 0x4}]}, &(0x7f0000000400)='syzkaller\x00', 0x2}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@deltclass={0xf0, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0xe, 0xe}, {0xfff2, 0xfff3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_atm={{0x8}, {0xa0, 0x2, [@TCA_ATM_HDR={0x3d, 0x3, "a2244ad0f641131cfbe7591434616085cae117dc1c18a4e830773b44ea4354efa9806630c57a60bda37b7cc8351b5a861a58ad24627bfc18a8"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x2d, 0x3, "58eddaeb503e33a5a04c362da4e06af46e554affdd06babdf5d7ecec79ef438ec787e1b6d23aaf9e39"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xfff1}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0x9, 0x3, "f9f933648e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24040840}, 0x4) 2.583696702s ago: executing program 0 (id=3956): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0xf8ec) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.562003022s ago: executing program 2 (id=3957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000000000008000340000000d50800044000000001080006400000000408000140000000130900010073797a3000af59000900020073797a32"], 0x94}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0xe, 0x8, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, 0x8, 0x7, 0x3, 0x2}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r8, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r8, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r11, @ANYBLOB="08000200ac14"], 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r11}}, 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x40, 0x700, 0xd0dc, 0xfb1e, {{0x29, 0x4, 0x0, 0x4, 0xa4, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@noop, @timestamp_prespec={0x44, 0x4c, 0x79, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x6}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x3}, {@multicast1, 0x6}, {@multicast1, 0x9}]}, @ssrr={0x89, 0x27, 0x46, [@private=0xa010102, @local, @private=0xa010102, @private=0xa010102, @empty, @remote, @remote, @empty, @empty]}, @lsrr={0x83, 0x1b, 0x1c, [@local, @local, @broadcast, @empty, @local, @rand_addr=0x64010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="94020000", @ANYRES16=0x0, @ANYBLOB="092e2dbd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="680102803c000100240001006270665f686173685f66756e63001ce419892f7140830000000000000000000000000000050003000b0000000c00040007008002020000003c000100240001006c625f74785f6d6574686f6400000000000000000000020000000000000000000500030005000000090004006861736800000000400001002400010071756575655f69640000006d363a0628563d3d000000000000002500030003000000080004008b990000000000000000", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="bc00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000600800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040094b30000"], 0x294}, 0x1, 0x0, 0x0, 0x8000}, 0x24048040) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xffffffffffffff75, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}, @m_nat={0x0, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0xffff0000, 0x4, 0xd, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x0, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0x0, 0x7, {0x1, 0x1}}}}]}]}, 0x98}}, 0x0) 2.420972028s ago: executing program 0 (id=3959): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x718, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x22, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 2.227016786s ago: executing program 4 (id=3962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000030000c5f0c3f6b337c576fcc15c131b10fccfa47f0c4afd5335f148c1dd118f1b48025802dd9c8d9da25c5b0c96287ec90a66b649f40acb1bd1a0de2611d9445496ba8a8d2c55d259d833b97097720051fffd842143d780536a6993a55df97fa981020b0c4ca20957fabdca89290024720965187593b302466322a5acf84cc38c972f5c72e97d30d2e2d5c89e9471bd936d32c9917f39b55790d5044d3817a167"], 0x48) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000240)={0x16}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0xfffffffc, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x20000084) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r0, 0xa684000) 2.023467454s ago: executing program 3 (id=3963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x80000, 0x40000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf8, 0x0, 0x600, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9c34c6c374a779f4fefbbcc34138e3d89808f04ea21fa400"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6d60e9ebaa0ab13eecf8ee3d646ec78a642441100a9a888f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "06f35da895783c3d81a5ab43e03a1fa62b394082163db06f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.983415481s ago: executing program 1 (id=3964): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xc4ea760049c17f33, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x154}}, 0x49080) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x80a4) 1.935343287s ago: executing program 4 (id=3965): r0 = socket(0x9, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) close(0x3) 1.744045133s ago: executing program 4 (id=3966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600780ea8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40052) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) r3 = accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) 1.730170922s ago: executing program 2 (id=3967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x70, 0x6001}, @void, @eth={@broadcast, @random="8cfb7fafe188", @void, {@mpls_mc={0x8848, {[], @ipv4=@udp={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x65, 0x0, 0x20, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @local}, {0x4e21, 0x4e22, 0x8}}}}}}}, 0x2e) (async, rerun: 64) syz_emit_ethernet(0xb2, &(0x7f00000000c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @udp={0x7, 0x6, "f57357", 0x78, 0x11, 0x1, @empty, @local, {[@hopopts={0xff, 0x1, '\x00', [@pad1, @ra, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff9}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {0x4e22, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "d5d7c75c6e01ed925409008378a0bb8956a68dbdba10d972", "f15593eaf30e5a1e8a6c93a89f6304037428497d9a39e1b1fa98d9d03ca9fa7e"}}}}}}}, 0x0) (rerun: 64) 1.575691234s ago: executing program 3 (id=3968): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006301edff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x7742, 0x6, 0x3, 0x20010, 0xffffffffffffffff, 0xf7eb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00', 0x6) socket(0x2, 0x80805, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.390855905s ago: executing program 0 (id=3969): socket(0x1d, 0x2, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1d, 0x2, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.288286455s ago: executing program 3 (id=3970): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_PROTOCOL={0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.123267933s ago: executing program 3 (id=3971): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="140020000400000008000000000000ffffffff00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r4}, 0x20) close(r4) 1.098784374s ago: executing program 0 (id=3972): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_emit_ethernet(0x6a, &(0x7f0000000700)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x6, 0x54, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x28, 0x2, [{0x0, 0x6, "00479c0f"}, {0x7, 0xa, "91705fbed77a6c81"}, {0x2, 0x12, "78cc589027f67822a4875ceb76d4db1c"}]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x1, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7", 0x3f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab5", 0x6d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}], 0x2}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, 0xff, 0x3}, 0x90) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003b00010324bd7002fadbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r7, @ANYRES16=r1], 0x48) 1.078598634s ago: executing program 2 (id=3973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf251d00000008000100", @ANYRES32=r7, @ANYBLOB="08001e00f8ffffffdb001f003b6e927cd238ed0ad36c2cd1c37f8e3c369856aa5065ae1303147cf88d02202bb257b09154a84b4df55b4b7c856ee6bdbcd6d113329627b4758e3b26bec1c462d6f9898b5291eb0ea8ef907cd00529ac1feed7168bc564d77efa324a2cd20fb342ed6c9a4c744225ff4927954e084f76d1dfac276ead6c1f90d4af5f60794f61f44c3cc26c6523feafc5f635d60a6a7df2d9413395e35bd9286c895879b08b1aba76282742097297200dba24767e24d110304e6fb3f52ddd07111e6df3c39df3ed04c2461bf2c9ea66dedbf0bc48c28c0bdc9dd4e34f4e0008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="70aefeb16f2133937582210209a2ea1b"], 0x110}, 0x1, 0x0, 0x0, 0x88d0}, 0x4004000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf250600000008000500ac14142214000300fc02000000000000000000000000000005000100000000000500010001000000080004000a01010114000300fc00000000000000000000000000000008000400ac1414bb"], 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c048) 894.630971ms ago: executing program 1 (id=3974): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x140f, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f0000080041007278650014003300776732"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan0\x00', @broadcast}) 894.193597ms ago: executing program 3 (id=3975): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000040)="95", &(0x7f0000000080)=@tcp6, 0x2}, 0x20) close(r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x3, 0x4, 0x4, 0x2, 0x1, 0x2a9, 0x8a10, 0x0, 0x2, 0x8, 0xfffffffa, 0x8, 0x800, 0x8, 0xc, 0x4, 0x9, 0x3, 0x8, 0x101, 0x5, 0x1}}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4, 0x405}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x240cc080) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_RULE_USERDATA={0xba, 0x7, 0x1, 0x0, "5bac73cd79da418d3b35fc2287def6ef072980841be2f7e2d988c9104872714a9a09843cc273845b4e4a848b5167ef6a10b72164f59ec77c9697181d47c079b7429629615d864ffe93a7c66a92b88693edabf1f9a9bdc3777bd1af82d9c3c5de4c60d543844095b093bf1abbc6720ed94e882c1300f5e987cd4a0546496003b3c3ae7a30f0bfcb00830f0d8ba7ff6318335cada020b7e41cb4306966993daeee35b7e3edfd8128fbf7f207db7fef8507bcfc50e7c1e9"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x18, 0xb0, 0x264, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr=0x64010102}, {0x8, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffd, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 769.216162ms ago: executing program 1 (id=3976): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x8, 0x40, @mcast2, @local, 0x7, 0x700, 0x6, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b7000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 730.761196ms ago: executing program 4 (id=3977): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005", 0x2b}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRESOCT, @ANYBLOB="4000ac0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x61}, 0x48088) 607.431663ms ago: executing program 1 (id=3978): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) r1 = socket$unix(0x1, 0x5, 0x0) listen(r1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xd, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000000)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) (async) socket$unix(0x1, 0x5, 0x0) (async) listen(r1, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xd, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000000)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 591.168548ms ago: executing program 4 (id=3979): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000a00000005000100060000000c0007800800064000"], 0x58}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) 458.0274ms ago: executing program 1 (id=3980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 395.665713ms ago: executing program 3 (id=3981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630000dd000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c16000008000640"], 0x6c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0xffffffffffffff29}], 0x1}, 0x8000) 302.459437ms ago: executing program 4 (id=3982): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x1) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)='X', 0x1}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3400000013000100000000000000000807000000", @ANYRES32=r2, @ANYBLOB="000000030000000014001a80100005800c000880080001"], 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x840) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r1], 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0x36, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r5, 0x215eb000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xb, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x800, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffb}, 0xaa) socket$inet6_sctp(0xa, 0x801, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) 0s ago: executing program 1 (id=3983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2400c8c4) kernel console output (not intermixed with test programs): multicast mode [ 378.190285][T15168] bond_slave_1: entered allmulticast mode [ 378.708057][T15194] syzkaller0: entered promiscuous mode [ 378.721764][T15194] syzkaller0: entered allmulticast mode [ 378.895978][T15205] netlink: 'syz.2.2535': attribute type 9 has an invalid length. [ 378.979025][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.987539][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.218586][T15217] ip6tnl3: entered allmulticast mode [ 379.997827][T15267] __nla_validate_parse: 12 callbacks suppressed [ 379.997851][T15267] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2551'. [ 380.081495][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 380.115213][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 380.139524][T15273] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2552'. [ 380.149335][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'. [ 380.159881][T15267] netlink: 'syz.4.2551': attribute type 12 has an invalid length. [ 380.169856][T15277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.185472][T15267] netlink: 'syz.4.2551': attribute type 11 has an invalid length. [ 380.391363][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'. [ 380.407920][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'. [ 380.448467][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2555'. [ 380.532695][T15292] sctp: [Deprecated]: syz.2.2559 (pid 15292) Use of int in maxseg socket option. [ 380.532695][T15292] Use struct sctp_assoc_value instead [ 380.563237][T15292] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 381.131218][T15281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.294646][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.301556][ T5785] wg2 speed is unknown, defaulting to 1000 [ 381.333180][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.348703][ T5785] syz2: Port: 1 Link DOWN [ 381.375431][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 381.432281][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.476731][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.511898][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 381.559224][ T5730] wg2 speed is unknown, defaulting to 1000 [ 381.560244][T15322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2564'. [ 381.708156][T15332] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 381.731812][T15338] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2566'. [ 381.799372][T15324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.818466][T15324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.866302][T15324] veth0_macvtap: left allmulticast mode [ 382.008344][T15324] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 382.047379][T15324] ip6gre1: left allmulticast mode [ 382.071272][T15324] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 382.081830][T15324] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 382.090189][T15324] vlan0: left allmulticast mode [ 382.098642][T15324] bond0: left allmulticast mode [ 382.104861][T15324] bond_slave_0: left allmulticast mode [ 382.110714][T15324] bond_slave_1: left allmulticast mode [ 382.144237][T15324] bond6: left promiscuous mode [ 382.149473][T15324] bond6: left allmulticast mode [ 382.175300][T15337] sit0: entered promiscuous mode [ 382.196742][T15337] netlink: 'syz.3.2567': attribute type 1 has an invalid length. [ 382.276818][T15340] bond0 (unregistering): Released all slaves [ 382.383190][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.427294][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.446996][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.485501][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.543655][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.578203][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.619789][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.661787][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.894433][T15365] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 382.933248][T15365] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 383.332491][T15393] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 383.377915][T15393] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 383.427068][T15403] netlink: 'syz.4.2584': attribute type 1 has an invalid length. [ 383.873401][T15425] tunl0: entered promiscuous mode [ 383.884049][T15425] netlink: 'syz.3.2590': attribute type 4 has an invalid length. [ 384.444873][T15458] bond8 (unregistering): Released all slaves [ 384.457683][T15468] sctp: [Deprecated]: syz.3.2601 (pid 15468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.457683][T15468] Use struct sctp_sack_info instead [ 384.787853][T15481] xt_l2tp: missing protocol rule (udp|l2tpip) [ 384.821574][T15483] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 384.879364][T15485] netlink: 'syz.4.2607': attribute type 14 has an invalid length. [ 384.897508][T15487] openvswitch: netlink: Missing key (keys=40, expected=100) [ 384.924297][T15485] netlink: 'syz.4.2607': attribute type 14 has an invalid length. [ 385.266054][T15511] SET target dimension over the limit! [ 385.382011][T15514] macvlan0: entered promiscuous mode [ 385.537240][T15524] veth0: entered promiscuous mode [ 385.563978][T15524] batadv_slave_1: entered promiscuous mode [ 385.586509][T15523] tipc: Enabling of bearer rejected, already enabled [ 385.688484][T15533] __nla_validate_parse: 10 callbacks suppressed [ 385.688507][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 385.725102][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 385.896628][T15527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2619'. [ 385.914377][T15522] batadv_slave_1: left promiscuous mode [ 385.927367][T15522] veth0: left promiscuous mode [ 386.143424][T15557] netlink: 'syz.3.2626': attribute type 10 has an invalid length. [ 386.167894][T15554] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 386.177935][T15554] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 386.187372][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'. [ 386.405521][T15568] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2630'. [ 386.692091][T15585] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2632'. [ 386.859844][T15594] netlink: 'syz.2.2638': attribute type 1 has an invalid length. [ 386.907761][T15594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2638'. [ 386.954296][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2640'. [ 386.990393][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2640'. [ 387.047623][T15614] netlink: 'syz.2.2642': attribute type 1 has an invalid length. [ 387.124636][T15614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.208201][T15614] vlan5: entered promiscuous mode [ 387.224286][T15621] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2643'. [ 387.235992][T15614] bond0: entered promiscuous mode [ 387.245026][T15614] vlan5: entered allmulticast mode [ 387.256518][T15614] bond0: entered allmulticast mode [ 387.481628][T15634] openvswitch: netlink: Missing key (keys=40, expected=100) [ 387.643598][T15645] netlink: 'syz.4.2652': attribute type 3 has an invalid length. [ 389.034035][T15721] x_tables: unsorted underflow at hook 2 [ 389.441560][T15751] tipc: Enabling of bearer rejected, failed to enable media [ 389.702622][T15760] bond7: option xmit_hash_policy: invalid value (64) [ 389.729378][T15760] bond7 (unregistering): Released all slaves [ 390.017224][T15787] validate_nla: 1 callbacks suppressed [ 390.017319][T15787] netlink: 'syz.0.2695': attribute type 2 has an invalid length. [ 390.628182][T15822] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 390.834639][T15835] xt_addrtype: ipv6 does not support BROADCAST matching [ 391.094008][T15845] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 391.166025][T15853] x_tables: duplicate underflow at hook 2 [ 391.251625][T15861] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 391.416601][T15873] __nla_validate_parse: 11 callbacks suppressed [ 391.416623][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2721'. [ 391.435994][T15871] netlink: 'syz.3.2719': attribute type 83 has an invalid length. [ 391.534892][T15884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.691442][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2723'. [ 391.810551][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 391.887761][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2723'. [ 391.904276][T15893] netlink: 'syz.2.2724': attribute type 4 has an invalid length. [ 391.917608][T15893] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2724'. [ 391.946255][T15897] syzkaller0: entered promiscuous mode [ 391.952088][T15897] syzkaller0: entered allmulticast mode [ 391.966033][T15893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.241907][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2729'. [ 392.288841][T15910] x_tables: unsorted entry at hook 2 [ 392.325233][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2729'. [ 392.326031][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.374856][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.375099][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2729'. [ 392.416960][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.444072][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.689122][T15925] netlink: 'syz.4.2735': attribute type 1 has an invalid length. [ 392.920099][T15939] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 393.005979][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 393.218203][T15953] x_tables: duplicate underflow at hook 2 [ 393.667539][T15972] xt_TPROXY: Can be used only with -p tcp or -p udp [ 393.712526][T15974] netlink: 'syz.3.2749': attribute type 27 has an invalid length. [ 393.740212][T15974] netlink: 'syz.3.2749': attribute type 4 has an invalid length. [ 393.766717][T15974] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2749'. [ 394.004552][T15991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.094313][T15998] netlink: 'syz.0.2753': attribute type 21 has an invalid length. [ 394.910481][T16017] netlink: 'syz.0.2759': attribute type 2 has an invalid length. [ 394.952799][T16017] netlink: 'syz.0.2759': attribute type 2 has an invalid length. [ 395.201631][ T4946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.225947][ T4946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.239089][ T4946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.257561][ T4946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.265629][ T4946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.308740][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.320951][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.330091][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.371698][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.387503][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.644965][T16022] 8021q: VLANs not supported on pim6reg0 [ 396.252251][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 396.259703][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 396.267042][ C0] bridge0: port 3(batadv1) entered learning state [ 396.451920][T16061] netlink: 'syz.1.2768': attribute type 1 has an invalid length. [ 396.609760][T16020] wg2 speed is unknown, defaulting to 1000 [ 397.076350][T16074] netlink: 'syz.0.2770': attribute type 5 has an invalid length. [ 397.084934][T16082] __nla_validate_parse: 2 callbacks suppressed [ 397.084953][T16082] netlink: 1608 bytes leftover after parsing attributes in process `syz.2.2774'. [ 397.290426][T16088] IPv6: sit2: Disabled Multicast RS [ 397.442793][ T50] Bluetooth: hci5: command tx timeout [ 397.456369][T16095] tipc: Enabling of bearer rejected, failed to enable media [ 397.541434][ T33] bridge_slave_1: left allmulticast mode [ 397.566857][ T33] bridge_slave_1: left promiscuous mode [ 397.575525][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.588082][ T33] bridge_slave_0: left allmulticast mode [ 397.594458][ T33] bridge_slave_0: left promiscuous mode [ 397.603406][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.638823][ T33] erspan0: left allmulticast mode [ 397.644112][ T33] erspan0: left promiscuous mode [ 397.649343][ T33] bridge5: port 1(erspan0) entered disabled state [ 397.679379][ T33] pimreg: left allmulticast mode [ 398.061239][ T33] bond11 (unregistering): (slave gretap0): Releasing active interface [ 398.154538][ T33] bond6 (unregistering): (slave geneve3): Releasing active interface [ 398.174183][ T33] bond5 (unregistering): (slave geneve2): Releasing active interface [ 398.205726][ T33] team0: Port device geneve1 removed [ 398.278693][ T33] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 398.287929][ T33] bridge2 (unregistering): left promiscuous mode [ 398.295009][ T33] bridge2 (unregistering): left allmulticast mode [ 398.395022][ T50] block nbd3: Receive control failed (result -32) [ 398.423085][ T33] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 398.469148][ T33] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.479593][ T33] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.498296][ T33] .` (unregistering): (slave bond10): Releasing backup interface [ 398.507979][ T33] .` (unregistering): (slave veth0_to_bond): Releasing backup interface [ 398.519874][ T33] .` (unregistering): Released all slaves [ 398.535611][ T33] bond1 (unregistering): Released all slaves [ 398.556423][ T33] bond2 (unregistering): Released all slaves [ 398.585089][ T33] bond3 (unregistering): Released all slaves [ 398.605835][ T33] bond4 (unregistering): Released all slaves [ 398.624774][ T33] bond5 (unregistering): Released all slaves [ 398.647744][ T33] bond6 (unregistering): Released all slaves [ 398.679957][ T33] bond7 (unregistering): Released all slaves [ 398.697291][ T33] bond8 (unregistering): Released all slaves [ 398.713104][ T33] bond9 (unregistering): Released all slaves [ 398.730787][ T33] bond10 (unregistering): Released all slaves [ 398.756117][ T33] bond11 (unregistering): Released all slaves [ 398.772988][ T33] bond0 (unregistering): (slave bond14): Releasing backup interface [ 398.782087][ T33] bond0 (unregistering): Released all slaves [ 398.802765][ T33] bond12 (unregistering): Released all slaves [ 398.819295][ T33] bond13 (unregistering): Released all slaves [ 398.835566][ T33] bond14 (unregistering): Released all slaves [ 398.851328][ T33] bond15 (unregistering): Released all slaves [ 398.902261][T16129] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2782'. [ 398.912088][T16129] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2782'. [ 398.923664][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2782'. [ 398.943884][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 399.215126][ T33] : left promiscuous mode [ 399.267010][T16144] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.291415][T16144] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.325011][T16144] bridge_slave_0: entered allmulticast mode [ 399.348473][T16144] bridge_slave_0: entered promiscuous mode [ 399.468668][T16160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2786'. [ 399.530226][ T50] Bluetooth: hci5: command tx timeout [ 399.597457][ T33] tipc: Left network mode [ 399.701085][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2786'. [ 399.712694][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880572b3800: rx timeout, send abort [ 399.788055][T16181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2792'. [ 399.829618][ T33] IPVS: stopping backup sync thread 8541 ... [ 400.170139][ T3345] nci: nci_ntf_packet: unknown ntf opcode 0x128 [ 400.396395][T16175] syzkaller1: entered promiscuous mode [ 400.406115][T16175] syzkaller1: entered allmulticast mode [ 400.654459][T16020] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.672691][T16020] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.690255][T16020] bridge_slave_0: entered allmulticast mode [ 400.713970][T16020] bridge_slave_0: entered promiscuous mode [ 400.773207][T16020] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.783623][T16020] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.791074][T16020] bridge_slave_1: entered allmulticast mode [ 400.800395][T16020] bridge_slave_1: entered promiscuous mode [ 400.924364][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 400.935998][T16020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.949276][T16020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.990278][T16020] team0: Port device team_slave_0 added [ 401.018987][T16020] team0: Port device team_slave_1 added [ 401.072894][T16020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.079963][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.106541][T16020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.120444][T16020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.128732][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.155462][T16020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.251326][T16020] hsr_slave_0: entered promiscuous mode [ 401.258587][T16020] hsr_slave_1: entered promiscuous mode [ 401.266187][T16020] debugfs: 'hsr0' already exists in 'hsr' [ 401.273183][T16020] Cannot create hsr debugfs directory [ 401.571469][ T33] hsr_slave_0: left promiscuous mode [ 401.577821][ T33] hsr_slave_1: left promiscuous mode [ 401.592319][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.600312][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.607806][ T50] Bluetooth: hci5: command tx timeout [ 401.739283][ T33] team0 (unregistering): Port device team_slave_1 removed [ 401.876038][ T33] smc: removing net device team0 with user defined pnetid SYZ2 [ 402.258631][ T33] IPVS: stop unused estimator thread 0... [ 402.647043][ T1708] block nbd2: Connection timed out, retrying (0/1 alive) [ 402.658301][ T1708] block nbd2: Connection timed out, retrying (0/1 alive) [ 402.665682][T14858] block nbd2: Dead connection, failed to find a fallback [ 402.727262][T16174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.799147][T16020] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.929848][T16020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.954712][T16233] netlink: 'syz.3.2799': attribute type 61 has an invalid length. [ 402.956898][T16020] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 403.015429][T16020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.024801][T16020] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 403.047789][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 403.060195][T16020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.075887][T16244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2801'. [ 403.086727][T16020] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 403.108780][T16020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.123542][T16234] netlink: 'syz.0.2798': attribute type 12 has an invalid length. [ 403.133231][T16234] netlink: 'syz.0.2798': attribute type 29 has an invalid length. [ 403.141234][T16234] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2798'. [ 403.153085][T16234] netlink: 'syz.0.2798': attribute type 3 has an invalid length. [ 403.162001][T16234] netlink: 'syz.0.2798': attribute type 2 has an invalid length. [ 403.171199][T16234] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2798'. [ 403.628496][T16020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.660619][T16020] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.683898][ T50] Bluetooth: hci5: command tx timeout [ 403.703666][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.710991][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.797389][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.804676][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.992603][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2810'. [ 404.311976][T16306] netlink: 'syz.1.2814': attribute type 39 has an invalid length. [ 404.713395][T16324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2818'. [ 404.748996][T16324] netlink: 'syz.1.2818': attribute type 11 has an invalid length. [ 404.783969][T16324] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2818'. [ 405.146526][T16346] syz_tun: entered promiscuous mode [ 405.179051][T16346] syz_tun: entered allmulticast mode [ 405.567451][T16020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.124749][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 406.159047][T16392] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.510611][T16020] veth0_vlan: entered promiscuous mode [ 406.548163][T16020] veth1_vlan: entered promiscuous mode [ 406.655472][T16020] veth0_macvtap: entered promiscuous mode [ 406.695172][T16020] veth1_macvtap: entered promiscuous mode [ 406.758327][T16020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.817226][T16020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.900995][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.932575][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.967797][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.011900][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.309241][ T3345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.338205][ T3345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.439542][ T3321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.471621][ T3321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.549088][T16431] netlink: 'syz.1.2836': attribute type 21 has an invalid length. [ 407.564126][T16431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2836'. [ 407.679412][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2758'. [ 407.735349][T16437] tipc: Started in network mode [ 407.745075][T16437] tipc: Node identity ac14140f, cluster identity 4711 [ 407.766639][T16437] tipc: Enabled bearer , priority 10 [ 408.097040][T16455] __nla_validate_parse: 2 callbacks suppressed [ 408.097062][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'. [ 408.434849][T16476] x_tables: unsorted entry at hook 1 [ 408.516299][T16477] x_tables: duplicate underflow at hook 3 [ 408.564748][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2849'. [ 408.762812][T11074] tipc: Node number set to 2886997007 [ 408.838510][T16493] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2851'. [ 408.872791][T16493] openvswitch: netlink: Message has 512 unknown bytes. [ 409.815219][T16559] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2869'. [ 410.601967][T16579] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2877'. [ 410.650756][T16581] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2877'. [ 411.668874][T16630] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2892'. [ 411.784962][ T4946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 411.800247][T16635] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2893'. [ 411.813698][ T4946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 411.822307][T16635] netlink: 'syz.4.2893': attribute type 6 has an invalid length. [ 411.855588][ T4946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 411.868936][ T4946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 411.873027][T16630] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2892'. [ 411.887194][T16635] netlink: 'syz.4.2893': attribute type 7 has an invalid length. [ 411.898784][ T4946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.920383][T16635] netlink: 'syz.4.2893': attribute type 5 has an invalid length. [ 411.929310][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'. [ 412.658846][T16668] netlink: 'syz.1.2902': attribute type 83 has an invalid length. [ 412.788732][T16673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.104525][T16688] __nla_validate_parse: 2 callbacks suppressed [ 413.104547][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'. [ 413.340255][T16634] wg2 speed is unknown, defaulting to 1000 [ 413.688442][T16715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2915'. [ 413.770578][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 414.003341][ T50] Bluetooth: hci4: command tx timeout [ 414.190386][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2919'. [ 414.220984][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'. [ 414.318752][T16740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2920'. [ 414.720752][ T3345] tipc: Resetting bearer [ 414.769935][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 414.813732][T16766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2926'. [ 414.925323][T16634] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.946580][T16634] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.961882][T16634] bridge_slave_0: entered allmulticast mode [ 414.977237][T16634] bridge_slave_0: entered promiscuous mode [ 414.987137][T16634] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.994848][T16634] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.003243][T16634] bridge_slave_1: entered allmulticast mode [ 415.011402][T16634] bridge_slave_1: entered promiscuous mode [ 415.021002][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2927'. [ 415.165014][T16634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.184230][T16634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.240841][T16634] team0: Port device team_slave_0 added [ 415.258317][T16634] team0: Port device team_slave_1 added [ 415.337833][T16634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.345405][T16634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.375421][T16634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.393446][T16634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.400914][T16634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.427881][T16634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.457771][T16785] netlink: 'syz.3.2930': attribute type 12 has an invalid length. [ 415.466155][T16785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2930'. [ 415.554521][T16634] hsr_slave_0: entered promiscuous mode [ 415.562047][T16634] hsr_slave_1: entered promiscuous mode [ 415.570013][T16634] debugfs: 'hsr0' already exists in 'hsr' [ 415.576719][T16634] Cannot create hsr debugfs directory [ 416.000818][T16634] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.012730][T16634] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 416.025801][T16634] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.083469][ T50] Bluetooth: hci4: command tx timeout [ 416.190489][T16634] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.200966][T16634] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 416.214878][T16634] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.315967][T16634] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.336189][T16634] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 416.347291][T16634] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.438133][T16634] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 416.455925][T16634] team0: Port device macvlan2 removed [ 416.482662][T16634] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.495678][T16634] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 416.508036][T16634] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.803829][T16768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.863439][T16634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.910148][T16634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.953892][T16634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.016449][T16634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.064960][T16634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.113123][T16634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.142777][T16634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.164659][ T50] Bluetooth: hci4: command tx timeout [ 418.210779][T16634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.258709][T16866] __nla_validate_parse: 4 callbacks suppressed [ 418.258731][T16866] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2941'. [ 418.593715][T14622] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.640516][T14622] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.679917][T14622] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.708899][T14622] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.870867][T16634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.951443][T16634] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.019659][T14622] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.027034][T14622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.096722][T14622] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.103995][T14622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.566549][T16932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2955'. [ 419.855837][T16946] netlink: 'syz.3.2958': attribute type 2 has an invalid length. [ 420.131717][T16959] netlink: 'syz.4.2960': attribute type 10 has an invalid length. [ 420.182586][T16959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2960'. [ 420.243988][ T50] Bluetooth: hci4: command tx timeout [ 420.284379][T16959] team0: Port device geneve1 added [ 420.503404][T16979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2964'. [ 420.710954][T16979] tipc: Resetting bearer [ 420.757780][T16979] tipc: Resetting bearer [ 420.858240][T16994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2968'. [ 420.996687][T16984] 8021q: adding VLAN 0 to HW filter on device bond9 [ 421.007992][T16984] bond8: (slave bond9): Enslaving as an active interface with an up link [ 421.227789][T17006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2971'. [ 421.275404][T17006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2971'. [ 421.310335][T17010] netlink: 'syz.4.2973': attribute type 1 has an invalid length. [ 421.329725][T16634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.330821][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2972'. [ 421.378688][T17011] netlink: 'syz.3.2972': attribute type 10 has an invalid length. [ 421.387049][T17011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2972'. [ 421.476776][T17010] bond1: entered promiscuous mode [ 421.482837][T17010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.498189][T17011] team0: entered allmulticast mode [ 421.514090][T17011] team_slave_0: entered allmulticast mode [ 421.528145][T17011] team_slave_1: entered allmulticast mode [ 421.534394][T17011] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 421.608081][T17012] bond1: (slave bridge2): making interface the new active one [ 421.629814][T17012] bridge2: entered promiscuous mode [ 421.644273][T17012] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 421.681271][T17023] tipc: MTU too low for tipc bearer [ 421.955127][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'. [ 422.014381][T17032] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 422.053891][T17032] bond2: option packets_per_slave: allowed values 0 - 65535 [ 422.087205][T17032] bond2 (unregistering): Released all slaves [ 422.374195][T16634] veth0_vlan: entered promiscuous mode [ 422.412015][T16634] veth1_vlan: entered promiscuous mode [ 422.507137][T16634] veth0_macvtap: entered promiscuous mode [ 422.607740][T16634] veth1_macvtap: entered promiscuous mode [ 422.699221][T16634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.781126][T16634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.848844][T14619] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.882922][T14619] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.910385][T14619] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.929460][T14619] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.959824][T17083] nbd: couldn't find a device at index 0 [ 423.432429][T17112] netlink: 'syz.3.2998': attribute type 1 has an invalid length. [ 423.444813][T17091] syzkaller0: entered promiscuous mode [ 423.458804][T17091] syzkaller0: entered allmulticast mode [ 423.864597][T17120] __nla_validate_parse: 4 callbacks suppressed [ 423.864621][T17120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2998'. [ 423.892441][T17126] netlink: 'syz.1.2999': attribute type 1 has an invalid length. [ 424.959926][T17134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3000'. [ 426.332250][ C0] bridge0: port 3(batadv1) entered forwarding state [ 426.338971][ C0] bridge0: topology change detected, propagating [ 426.346619][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.353892][ C0] bridge0: topology change detected, propagating [ 426.360398][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.367739][ C0] bridge0: topology change detected, propagating [ 426.569644][T17116] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 426.611573][T17123] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 426.629975][T17123] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 426.664603][T17129] tipc: Enabling of bearer rejected, already enabled [ 426.761731][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.793397][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.989831][T14619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.015174][T14619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.061440][T17146] blkio.reset_stats is deprecated [ 427.163117][T17153] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3005'. [ 427.219237][T17152] netlink: 'syz.4.3006': attribute type 1 has an invalid length. [ 427.258748][T17152] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3006'. [ 427.311192][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 427.323131][T17158] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 427.331992][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 427.355965][T17156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 427.542051][T17163] netlink: 'syz.2.3009': attribute type 1 has an invalid length. [ 427.557370][T17161] gtp0: entered promiscuous mode [ 427.587709][T17161] gtp0: entered allmulticast mode [ 427.612952][T17163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3009'. [ 427.679697][T17163] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 427.717951][T17163] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 427.770939][T17163] gretap1: entered promiscuous mode [ 427.806307][T17163] gretap1: entered allmulticast mode [ 427.843317][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3014'. [ 427.868984][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3014'. [ 430.995171][T17196] __nla_validate_parse: 3 callbacks suppressed [ 430.995197][T17196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3019'. [ 431.030508][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 431.116478][ T1158] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.126224][ T1158] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.221164][T17205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3021'. [ 431.298886][T17209] netlink: 'syz.4.3022': attribute type 126 has an invalid length. [ 431.307995][T17215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3024'. [ 431.523010][T17224] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 431.559524][T17219] veth11: entered allmulticast mode [ 431.583507][T17219] veth1_to_bond: entered allmulticast mode [ 431.605974][T17219] veth1_to_bond: entered promiscuous mode [ 431.638892][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 431.665288][T17219] veth1_to_bond (unregistering): left allmulticast mode [ 431.673405][T17219] veth1_to_bond (unregistering): left promiscuous mode [ 431.714932][T17219] bond0: (slave bond_slave_1): Releasing backup interface [ 432.001675][T17241] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3034'. [ 432.024519][T17241] tipc: Resetting bearer [ 432.043407][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3034'. [ 432.055962][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3034'. [ 432.200165][T17245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.787239][ T4946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.801887][ T4946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.814315][ T4946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.828859][ T4946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.838562][ T4946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.339897][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'. [ 433.410345][T17278] openvswitch: netlink: IP tunnel TTL not specified. [ 433.524014][T17256] wg2 speed is unknown, defaulting to 1000 [ 433.756372][T17295] netlink: 'syz.2.3048': attribute type 12 has an invalid length. [ 433.765047][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3048'. [ 433.785908][ T1158] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.786299][T17295] netlink: 'syz.2.3048': attribute type 12 has an invalid length. [ 433.822519][ T1158] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.855453][ T1158] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.884044][ T1158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.917769][ T50] block nbd4: Receive control failed (result -32) [ 434.606551][T17256] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.617700][T17256] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.626174][T17256] bridge_slave_0: entered allmulticast mode [ 434.634713][T17256] bridge_slave_0: entered promiscuous mode [ 434.661467][T17337] team0: Device gtp0 is up. Set it down before adding it as a team port [ 434.684580][T17256] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.692232][T17256] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.699717][T17256] bridge_slave_1: entered allmulticast mode [ 434.708390][T17256] bridge_slave_1: entered promiscuous mode [ 434.805298][T17256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.825171][T17256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.879295][T17256] team0: Port device team_slave_0 added [ 434.889835][T17256] team0: Port device team_slave_1 added [ 434.895501][ T50] Bluetooth: hci1: command tx timeout [ 434.940250][T17256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.955011][T17256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.982815][T17256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.006374][T17256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.023100][T17256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.061825][T17256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.199543][T17355] netlink: 'syz.3.3061': attribute type 6 has an invalid length. [ 435.218342][T17356] tipc: Failed to remove unknown binding: 66,1,1/294988174:2735246208/2735246210 [ 435.264207][T17256] hsr_slave_0: entered promiscuous mode [ 435.279608][T17256] hsr_slave_1: entered promiscuous mode [ 435.321358][T17256] debugfs: 'hsr0' already exists in 'hsr' [ 435.344652][T17256] Cannot create hsr debugfs directory [ 436.212733][T17395] __nla_validate_parse: 1 callbacks suppressed [ 436.212757][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3073'. [ 436.291559][T17256] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.364179][T17397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3073'. [ 436.395667][T17403] syzkaller1: entered promiscuous mode [ 436.401558][T17403] syzkaller1: entered allmulticast mode [ 436.726779][T17256] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.742987][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3078'. [ 436.932563][ T4996] udevd[4996]: worker [13330] /devices/virtual/block/nbd2 is taking a long time [ 436.962888][ T50] Bluetooth: hci1: command tx timeout [ 437.075451][T17426] netlink: 'syz.4.3082': attribute type 10 has an invalid length. [ 437.766457][T17256] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.042505][ T50] Bluetooth: hci1: command tx timeout [ 439.741239][T17421] netlink: 'syz.3.3081': attribute type 12 has an invalid length. [ 439.848337][T17256] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.298025][T17455] netlink: 'syz.0.3091': attribute type 12 has an invalid length. [ 440.322302][T17455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3091'. [ 440.389674][T17256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.406558][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.415259][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.448092][T17256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.468500][T17459] netlink: 'syz.3.3092': attribute type 11 has an invalid length. [ 440.480855][T17462] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 440.490991][T17256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.519856][T17256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.528250][T17256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.541886][T17256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.587066][T17256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.610083][T17256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.763643][T17468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3095'. [ 440.776311][T17477] ip6tnl4: entered allmulticast mode [ 440.965592][T17256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.998215][T17484] sock: sock_timestamping_bind_phc: sock not bind to device [ 441.055423][T17256] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.086045][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.093368][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.114883][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.122466][ T50] Bluetooth: hci1: command tx timeout [ 441.126336][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.264573][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 441.267691][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 441.448071][T17508] netlink: 'syz.4.3106': attribute type 21 has an invalid length. [ 441.475935][T17508] netlink: 'syz.4.3106': attribute type 1 has an invalid length. [ 441.807346][T17517] Cannot find set identified by id 0 to match [ 441.977897][T17531] veth0: entered promiscuous mode [ 441.997663][T17530] veth0: left promiscuous mode [ 442.126504][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3113'. [ 442.548805][T17558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3118'. [ 442.621927][T17563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'. [ 442.718771][T17256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.764293][T17563] syzkaller0: entered promiscuous mode [ 442.782627][T17563] syzkaller0: entered allmulticast mode [ 442.821098][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3119'. [ 442.923324][T17573] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 442.933090][ T1035] IPVS: starting estimator thread 0... [ 443.034014][T17574] IPVS: using max 25 ests per chain, 60000 per kthread [ 443.089501][T17256] veth0_vlan: entered promiscuous mode [ 443.136141][T17256] veth1_vlan: entered promiscuous mode [ 443.141777][T17577] netlink: 'syz.4.3123': attribute type 3 has an invalid length. [ 443.164947][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'. [ 443.284757][T17256] veth0_macvtap: entered promiscuous mode [ 443.316254][T17256] veth1_macvtap: entered promiscuous mode [ 443.384005][T17256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.422898][T17256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.461196][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'. [ 443.483530][ T3345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.503067][ T3345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.505415][T17584] openvswitch: netlink: Missing key (keys=40, expected=80) [ 443.537320][ T3345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.558440][ T3345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.703411][T17592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3129'. [ 443.824595][T17596] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 443.877525][T14619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.917742][T14619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.042592][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 444.065644][T14621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.087158][T14621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.435426][T17626] netlink: 'syz.0.3141': attribute type 27 has an invalid length. [ 444.455210][T17630] netlink: 'syz.1.3037': attribute type 9 has an invalid length. [ 444.473168][T17626] netlink: 'syz.0.3141': attribute type 4 has an invalid length. [ 444.923900][T17651] bridge_slave_1: left allmulticast mode [ 444.936702][T17651] bridge_slave_1: left promiscuous mode [ 444.953890][T17651] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.004588][T17651] bridge_slave_0: left allmulticast mode [ 445.025351][T17651] bridge_slave_0: left promiscuous mode [ 445.063294][T17651] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.095659][ T4946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.112888][ T4946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.125650][ T4946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.141151][ T4946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.154156][ T4946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.156864][T17657] netlink: 'syz.3.3148': attribute type 19 has an invalid length. [ 445.312739][T17657] netlink: 'syz.3.3148': attribute type 19 has an invalid length. [ 445.668758][T17677] wlan1 speed is unknown, defaulting to 1000 [ 445.683769][T17677] wlan1 speed is unknown, defaulting to 1000 [ 445.691932][T17677] wlan1 speed is unknown, defaulting to 1000 [ 445.707770][T17677] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 445.722810][T17677] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 445.742010][T17677] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 445.763326][T17655] wg2 speed is unknown, defaulting to 1000 [ 445.791184][T17677] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 445.840949][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804d6f0400: rx timeout, send abort [ 445.852141][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804d6f0400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 445.903075][T17677] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 445.995556][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888038a78000: rx timeout, send abort [ 446.005116][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888038a78000: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 446.080053][T17677] wlan1 speed is unknown, defaulting to 1000 [ 446.110028][T17677] wlan1 speed is unknown, defaulting to 1000 [ 446.149519][T17677] wlan1 speed is unknown, defaulting to 1000 [ 446.189638][T17677] wlan1 speed is unknown, defaulting to 1000 [ 446.229507][T17677] wlan1 speed is unknown, defaulting to 1000 [ 446.285638][T17677] wlan1 speed is unknown, defaulting to 1000 [ 446.305005][T17677] wlan1 speed is unknown, defaulting to 1000 [ 446.360043][T17677] wlan1 speed is unknown, defaulting to 1000 [ 446.439221][T17700] __nla_validate_parse: 9 callbacks suppressed [ 446.439242][T17700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3156'. [ 446.777109][T17715] bridge_slave_1: left allmulticast mode [ 446.794912][ T30] audit: type=1800 audit(1783952344.645:8): pid=17713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3159" name="memory.events" dev="tmpfs" ino=461 res=0 errno=0 [ 446.805901][T17715] bridge_slave_1: left promiscuous mode [ 446.821469][T17715] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.839247][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3160'. [ 446.936933][T17715] bridge_slave_0: left allmulticast mode [ 446.944179][T17715] bridge_slave_0: left promiscuous mode [ 446.950170][T17715] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.213585][ T4946] Bluetooth: hci2: command tx timeout [ 447.259242][T17732] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.267029][T17732] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.358243][T17732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.373650][T17732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.534279][T17736] geneve2: entered promiscuous mode [ 447.539651][T17736] geneve2: entered allmulticast mode [ 447.548623][ T33] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.559557][ T33] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 447.570487][ T33] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.580391][ T33] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 447.660103][ T33] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.679971][ T33] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 447.698226][T17747] xt_TCPMSS: Only works on TCP SYN packets [ 447.706100][ T33] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.717757][ T33] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 447.727252][T17749] xt_TCPMSS: Only works on TCP SYN packets [ 447.733159][T17655] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.733296][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.733629][T17655] bridge_slave_0: entered allmulticast mode [ 447.766494][T17655] bridge_slave_0: entered promiscuous mode [ 447.785862][T17655] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.793325][T17724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.811154][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.820176][T17655] bridge_slave_1: entered allmulticast mode [ 447.850138][T17655] bridge_slave_1: entered promiscuous mode [ 447.927093][T17753] netlink: 400 bytes leftover after parsing attributes in process `syz.4.3169'. [ 448.010771][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.031802][T17755] netlink: 'syz.1.3170': attribute type 10 has an invalid length. [ 448.051291][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.095749][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.110951][T17755] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 448.234572][T17655] team0: Port device team_slave_0 added [ 448.278008][T17655] team0: Port device team_slave_1 added [ 448.375551][T17765] xfrm2: entered allmulticast mode [ 448.438941][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.446967][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.490206][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.581168][T17782] netlink: 'syz.3.3179': attribute type 18 has an invalid length. [ 448.616476][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.626096][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.692221][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.706442][T17782] netlink: 'syz.3.3179': attribute type 18 has an invalid length. [ 448.872638][T17655] hsr_slave_0: entered promiscuous mode [ 448.885980][T17655] hsr_slave_1: entered promiscuous mode [ 448.909655][T17655] debugfs: 'hsr0' already exists in 'hsr' [ 448.929984][T17655] Cannot create hsr debugfs directory [ 449.005378][T17790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3180'. [ 449.112916][T17790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3180'. [ 449.304492][ T4946] Bluetooth: hci2: command tx timeout [ 449.815044][T17816] bond11: Unable to set up delay as MII monitoring is disabled [ 449.838029][T17816] bond11 (unregistering): Released all slaves [ 450.156613][T17836] tipc: Resetting bearer [ 450.455910][T11067] wlan1 speed is unknown, defaulting to 1000 [ 450.465167][T11067] syz1: Port: 1 Link DOWN [ 450.736947][T17848] netlink: 'syz.4.3195': attribute type 3 has an invalid length. [ 451.362513][ T4946] Bluetooth: hci2: command tx timeout [ 452.551877][T17817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.579150][T17655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 452.645426][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.680628][T17655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 452.746444][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.785792][T17655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 452.824237][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.827472][T17865] siw: device registration error -23 [ 452.868626][T17655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 452.913135][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.977154][T17875] netlink: 'syz.3.3201': attribute type 61 has an invalid length. [ 453.023968][T17879] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3204'. [ 453.159366][T17880] wg2 speed is unknown, defaulting to 1000 [ 453.250453][T17655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.331964][T17655] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.369347][T14621] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.376810][T14621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.398878][T17893] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 453.444287][ T4946] Bluetooth: hci2: command tx timeout [ 453.459464][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.466786][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.702017][T17903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3210'. [ 454.059211][T17924] IPv6: Can't replace route, no match found [ 454.085007][T17924] netlink: 'syz.3.3216': attribute type 8 has an invalid length. [ 454.099383][T17927] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3217'. [ 454.133141][T17880] wlan1 speed is unknown, defaulting to 1000 [ 454.323719][T17936] IPVS: set_ctl: invalid protocol: 96 0.0.0.0:20001 [ 454.945436][T17957] netlink: 'syz.1.3225': attribute type 1 has an invalid length. [ 454.955462][T17957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.962817][T17957] IPv6: NLM_F_CREATE should be set when creating new route [ 454.970421][T17957] IPv6: NLM_F_CREATE should be set when creating new route [ 454.985334][T17655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.041266][T17958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.081797][T17958] pim6reg1: entered promiscuous mode [ 455.088213][T17958] pim6reg1: entered allmulticast mode [ 455.167776][T17963] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3228'. [ 455.261089][T17965] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 455.280245][T17655] veth0_vlan: entered promiscuous mode [ 455.318904][T17655] veth1_vlan: entered promiscuous mode [ 455.386645][T17655] veth0_macvtap: entered promiscuous mode [ 455.413493][T17655] veth1_macvtap: entered promiscuous mode [ 455.455247][T17655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.475071][T17973] macvlan0: entered promiscuous mode [ 455.490510][T17655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.551062][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.572936][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.605083][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.630650][T17981] netlink: 'syz.2.3235': attribute type 10 has an invalid length. [ 455.651443][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.702604][T17981] team0: Port device dummy0 added [ 455.719339][T17987] netlink: 'syz.2.3235': attribute type 10 has an invalid length. [ 455.819544][T17987] team0: Port device dummy0 removed [ 455.873059][T17992] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20002 [ 456.000256][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 456.017524][T17992] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 456.046106][T18001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3238'. [ 456.157092][T18001] geneve3: entered promiscuous mode [ 456.170618][T17984] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.180904][T18001] geneve3: entered allmulticast mode [ 456.191203][ T5759] IPVS: starting estimator thread 0... [ 456.217608][T14621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.248774][T14621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.269511][T14621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.292337][T18006] IPVS: using max 26 ests per chain, 62400 per kthread [ 456.330357][T14621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.545115][T18015] Bluetooth: MGMT ver 1.23 [ 456.721384][T18022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3244'. [ 456.750494][ T3345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.782309][ T3345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.050698][T14622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.100360][T14622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.349941][T18037] syzkaller0: entered promiscuous mode [ 457.375802][T18037] syzkaller0: entered allmulticast mode [ 458.067828][T18056] team0: Device ipvlan2 is already an upper device of the team interface [ 458.205150][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.252276][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.279292][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.292793][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.311590][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.053203][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3260'. [ 459.110819][T18093] netlink: 'syz.4.3262': attribute type 1 has an invalid length. [ 459.121696][T18091] tls_set_device_offload_rx: netdev not found [ 459.133292][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3260'. [ 459.224968][T18093] bond2: entered promiscuous mode [ 459.238531][T18093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.344654][T18104] syzkaller0: entered promiscuous mode [ 459.350390][T18104] syzkaller0: entered allmulticast mode [ 459.390993][T18104] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 459.415461][T18104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.409590][ T50] Bluetooth: hci0: command tx timeout [ 462.482656][ T50] Bluetooth: hci0: command tx timeout [ 462.594180][T18058] wg2 speed is unknown, defaulting to 1000 [ 463.126401][T18166] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3281'. [ 463.246169][T18058] wlan1 speed is unknown, defaulting to 1000 [ 463.308475][T18175] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3283'. [ 463.421867][T18175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3283'. [ 463.821464][T18192] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.3288'. [ 463.835288][T18192] netlink: 'syz.0.3288': attribute type 2 has an invalid length. [ 463.849624][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'. [ 463.879098][T18192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3288'. [ 464.028777][T18200] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3290'. [ 464.071595][T18200] unsupported nlmsg_type 40 [ 464.078171][T18058] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.090684][T18202] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3290'. [ 464.110317][T18058] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.127103][T18058] bridge_slave_0: entered allmulticast mode [ 464.154284][T18058] bridge_slave_0: entered promiscuous mode [ 464.164732][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'. [ 464.184164][T18058] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.194609][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3291'. [ 464.209090][T18058] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.225993][T18058] bridge_slave_1: entered allmulticast mode [ 464.244778][T18058] bridge_slave_1: entered promiscuous mode [ 464.370705][T18058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.401046][T18058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.421227][T18207] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3291'. [ 464.509273][T18058] team0: Port device team_slave_0 added [ 464.542578][T18058] team0: Port device team_slave_1 added [ 464.562423][ T50] Bluetooth: hci0: command tx timeout [ 464.631758][T18217] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3294'. [ 464.730114][T18222] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3296'. [ 465.030162][T18058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.085100][T18058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.121502][T18058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.156526][T18058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.182887][T18058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.236691][T18234] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 465.308222][T18058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.433848][T18058] hsr_slave_0: entered promiscuous mode [ 465.440861][T18058] hsr_slave_1: entered promiscuous mode [ 465.457319][T18058] debugfs: 'hsr0' already exists in 'hsr' [ 465.464187][T18058] Cannot create hsr debugfs directory [ 465.490475][T18236] team0: Device gtp0 is up. Set it down before adding it as a team port [ 465.500507][T18242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3300'. [ 465.524869][T18242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3300'. [ 466.604405][T18283] syzkaller0: entered promiscuous mode [ 466.610200][T18283] syzkaller0: entered allmulticast mode [ 466.654207][ T50] Bluetooth: hci0: command tx timeout [ 466.800521][T18058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.904415][T18293] syz_tun: entered allmulticast mode [ 466.934843][T18287] syz_tun: left allmulticast mode [ 467.103946][T18058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.467736][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3323'. [ 467.604319][T18324] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 467.610791][T18324] syzkaller1: Refused to change device type [ 467.619699][T18324] Bluetooth: MGMT ver 1.23 [ 467.852478][T11067] syzkaller1: tun_net_xmit 90 [ 467.858133][ T807] syzkaller1: tun_net_xmit 90 [ 467.883583][ T154] syzkaller1: tun_net_xmit 86 [ 467.932016][T18058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.956488][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.965305][T18058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.977730][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.988508][T18058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.003021][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.016188][T18058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.030332][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.142733][ T5729] syzkaller1: tun_net_xmit 90 [ 468.190476][T18058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.218520][T18058] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.245461][T14619] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.253066][T14619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.288167][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.295482][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.536977][T18356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3329'. [ 468.618407][T18359] Cannot find set identified by id 0 to match [ 469.005675][T18378] tipc: Started in network mode [ 469.017677][T18378] tipc: Node identity 46f2356aeb4a, cluster identity 4711 [ 469.031633][T18378] tipc: Enabled bearer , priority 0 [ 469.105961][T18378] syzkaller0: entered promiscuous mode [ 469.111691][T18378] syzkaller0: entered allmulticast mode [ 469.118295][T18378] tipc: Resetting bearer [ 469.126950][T18384] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 469.184114][T18388] __nla_validate_parse: 3 callbacks suppressed [ 469.184139][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 469.200175][T18388] netlink: 'syz.4.3339': attribute type 10 has an invalid length. [ 469.217229][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3339'. [ 469.564597][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3341'. [ 472.221709][T18390] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 472.249631][T18391] tipc: Resetting bearer [ 472.376769][T18377] tipc: Resetting bearer [ 472.463278][T18377] tipc: Disabling bearer [ 472.472391][T18408] netlink: get zone limit has 4 unknown bytes [ 472.481124][ T1035] tipc: Node number set to 2914530666 [ 472.489027][T18410] netlink: get zone limit has 4 unknown bytes [ 472.514450][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 472.704114][T18414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3344'. [ 472.830523][T18420] siw: device registration error -23 [ 472.865847][T18422] netlink: 'syz.4.3347': attribute type 12 has an invalid length. [ 472.897309][T18424] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3348'. [ 472.992762][T18427] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 473.100571][T18427] bond1: entered promiscuous mode [ 473.106848][T18427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.131016][T18058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.173596][T18427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.181434][T18427] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 473.193863][T18427] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 473.237168][T18427] bond1: (slave ip6gre1): making interface the new active one [ 473.255178][T18427] ip6gre1: entered promiscuous mode [ 473.266827][T18427] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 473.315280][T18439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3353'. [ 473.495862][T18443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.630274][T18058] veth0_vlan: entered promiscuous mode [ 473.670371][T18058] veth1_vlan: entered promiscuous mode [ 473.785769][T18058] veth0_macvtap: entered promiscuous mode [ 473.796158][T14622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.812282][T14622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.825141][T18058] veth1_macvtap: entered promiscuous mode [ 473.975778][T18459] lo: entered allmulticast mode [ 473.990234][T18466] netlink: 808 bytes leftover after parsing attributes in process `syz.4.3362'. [ 474.011411][T18459] tunl0: entered allmulticast mode [ 474.045738][T18459] gre0: entered allmulticast mode [ 474.086187][T18459] gretap0: entered allmulticast mode [ 474.121948][T18459] erspan0: entered allmulticast mode [ 474.174641][T18459] ip_vti0: entered allmulticast mode [ 474.209011][T18459] ip6_vti0: entered allmulticast mode [ 474.233753][T18459] sit0: entered allmulticast mode [ 474.270170][T18459] ip6tnl0: entered allmulticast mode [ 474.286975][T18459] ip6gre0: entered allmulticast mode [ 474.326595][T18459] syz_tun: entered allmulticast mode [ 474.496311][T18484] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.306754][T18058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.345021][T18058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.436548][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.459222][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.498165][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.518698][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.580384][T18502] netlink: 4748 bytes leftover after parsing attributes in process `syz.4.3370'. [ 477.630405][T18502] openvswitch: netlink: Flow key attr not present in new flow. [ 477.874595][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.903001][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.047912][ T3345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.081979][ T3345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.100418][T18529] netlink: 'syz.1.3380': attribute type 1 has an invalid length. [ 478.226313][T18531] netlink: 'syz.2.3379': attribute type 30 has an invalid length. [ 478.389888][T18529] bond1: entered promiscuous mode [ 478.396274][T18529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.406625][T18528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.414233][T18528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.417827][T18535] xt_cgroup: xt_cgroup: no path or classid specified [ 478.430219][T18528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.437984][T18528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.472993][T18527] bond1: (slave bridge0): making interface the new active one [ 478.480815][T18527] bridge0: entered promiscuous mode [ 478.489648][T18527] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 478.502831][T18531] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 479.091212][T18566] bridge1: entered promiscuous mode [ 479.134057][T18570] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3391'. [ 479.145638][T18570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3391'. [ 479.149394][T18566] bridge1: entered allmulticast mode [ 479.159232][T18570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3391'. [ 479.334277][T18577] netlink: 'syz.0.3394': attribute type 2 has an invalid length. [ 479.722298][T18593] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3398'. [ 479.943230][T18607] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3403'. [ 480.066941][T18618] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3405'. [ 480.328213][T18636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3406'. [ 480.369780][T18634] tipc: Started in network mode [ 480.396179][T18634] tipc: Node identity fe4f7469540f, cluster identity 4711 [ 480.431475][T18634] tipc: Enabled bearer , priority 0 [ 480.460654][T18644] syzkaller0: entered promiscuous mode [ 480.493137][T18644] syzkaller0: entered allmulticast mode [ 480.519538][T18634] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 480.541528][T18646] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3410'. [ 480.561879][T18646] xt_hashlimit: invalid rate [ 480.614307][T18634] tipc: Resetting bearer [ 480.661484][T18632] tipc: Resetting bearer [ 480.740654][T18632] tipc: Disabling bearer [ 480.807908][T18650] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 480.869546][T18661] netlink: 'syz.2.3414': attribute type 1 has an invalid length. [ 480.877616][T18661] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3414'. [ 480.904774][T18661] nbd: couldn't find a device at index 1 [ 480.939330][T18663] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 481.121232][T18673] nbd: couldn't find a device at index 0 [ 481.240754][T18681] Cannot find add_set index 0 as target [ 481.880629][T18719] sctp: [Deprecated]: syz.1.3434 (pid 18719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.880629][T18719] Use struct sctp_sack_info instead [ 482.038724][T18721] pimreg: entered allmulticast mode [ 482.087009][T18732] IPVS: set_ctl: invalid protocol: 2 4.0.0.0:2 [ 482.348844][T18751] syzkaller1: entered promiscuous mode [ 482.379402][T18751] syzkaller1: entered allmulticast mode [ 482.463870][T18746] ipvlan2: entered allmulticast mode [ 482.486130][T18746] veth1_to_batadv: entered allmulticast mode [ 482.701941][T18759] pim6reg: entered allmulticast mode [ 482.746830][T18759] bridge0: entered promiscuous mode [ 482.758519][T18759] bridge0: entered allmulticast mode [ 483.134435][T18788] netlink: 'syz.4.3450': attribute type 1 has an invalid length. [ 483.667183][T18811] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 483.689286][T18812] __nla_validate_parse: 45 callbacks suppressed [ 483.689317][T18812] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3460'. [ 483.845510][T18819] syzkaller0: entered promiscuous mode [ 483.856385][T18819] syzkaller0: entered allmulticast mode [ 483.897097][T18819] tipc: Enabled bearer , priority 0 [ 483.955703][T18816] tipc: Resetting bearer [ 484.060916][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 484.090483][T18816] tipc: Disabling bearer [ 484.101694][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 484.215653][T18830] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3468'. [ 484.353099][T18837] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 484.391646][T18838] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3470'. [ 484.600915][T18851] netlink: 'syz.0.3473': attribute type 1 has an invalid length. [ 484.761037][T18851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.925845][T18871] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3476'. [ 485.938065][T18903] netlink: 'syz.0.3484': attribute type 3 has an invalid length. [ 486.012687][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 486.507534][T18928] syzkaller0: entered promiscuous mode [ 486.519137][T18928] syzkaller0: entered allmulticast mode [ 486.604690][T18934] policy can only be matched on NF_INET_PRE_ROUTING [ 486.604709][T18934] unable to load match [ 486.905793][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3498'. [ 486.919187][T18941] wg2 speed is unknown, defaulting to 1000 [ 487.034935][T18944] bond2: entered promiscuous mode [ 487.047231][T18944] bond2: entered allmulticast mode [ 487.387061][T18963] sctp: [Deprecated]: syz.1.3503 (pid 18963) Use of int in maxseg socket option. [ 487.387061][T18963] Use struct sctp_assoc_value instead [ 487.416258][T18956] netlink: 'syz.0.3501': attribute type 1 has an invalid length. [ 487.514190][T18956] bond3: entered promiscuous mode [ 487.534845][T18956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 487.565617][T18941] wlan1 speed is unknown, defaulting to 1000 [ 487.594204][T18964] ipvlan2: entered allmulticast mode [ 487.599794][T18964] bond3: entered allmulticast mode [ 487.642478][T18972] bond3: (slave bridge2): making interface the new active one [ 487.650226][T18972] bridge2: entered promiscuous mode [ 487.656143][T18972] bridge2: entered allmulticast mode [ 487.664419][T18972] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 487.754450][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3505'. [ 488.229385][T18991] bridge_slave_0: invalid flags given to default FDB implementation [ 488.256499][T18993] netlink: 'syz.0.3512': attribute type 1 has an invalid length. [ 488.953235][T19021] sctp: [Deprecated]: syz.2.3519 (pid 19021) Use of int in maxseg socket option. [ 488.953235][T19021] Use struct sctp_assoc_value instead [ 489.863389][T19055] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3525'. [ 489.970563][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3526'. [ 490.092441][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3527'. [ 490.118208][T14619] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.128116][T14619] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.145114][T14619] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.167780][T14619] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.476545][T19046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.915602][T19100] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3539'. [ 490.939922][T19096] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3536'. [ 491.009323][T19103] syzkaller0: entered promiscuous mode [ 491.034180][T19103] syzkaller0: entered allmulticast mode [ 491.232008][T19115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3543'. [ 491.266554][T19116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3543'. [ 491.309156][T19115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3543'. [ 491.320245][T19116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3543'. [ 491.330475][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 491.915510][T19137] syzkaller0: entered promiscuous mode [ 491.932699][T19137] syzkaller0: entered allmulticast mode [ 492.206397][T19159] netlink: 'syz.1.3554': attribute type 1 has an invalid length. [ 492.797914][T19184] netlink: 'syz.1.3562': attribute type 10 has an invalid length. [ 492.848631][T19184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.905183][T19184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.933752][T19184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.984820][T19184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.303362][T19199] netlink: 'syz.2.3567': attribute type 1 has an invalid length. [ 493.328670][T19200] netlink: 'syz.4.3566': attribute type 4 has an invalid length. [ 493.383826][T19199] bond2 (unregistering): Released all slaves [ 493.623642][T19207] xt_TCPMSS: Only works on TCP SYN packets [ 493.855475][T19213] syzkaller0: entered promiscuous mode [ 493.868201][T19213] syzkaller0: entered allmulticast mode [ 493.904663][T19221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.906610][T19215] sctp: [Deprecated]: syz.3.3572 (pid 19215) Use of int in max_burst socket option deprecated. [ 493.906610][T19215] Use struct sctp_assoc_value instead [ 494.106541][T19231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.312955][T19242] Cannot find del_set index 3 as target [ 496.965708][T19237] dvmrp0: entered allmulticast mode [ 497.138715][T19247] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 497.217537][T19256] netlink: 'syz.3.3582': attribute type 2 has an invalid length. [ 497.218581][T19255] ip6gre2: entered allmulticast mode [ 497.506939][T19270] __nla_validate_parse: 3 callbacks suppressed [ 497.506960][T19270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3591'. [ 497.547261][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 498.049794][T19287] veth0_macvtap: left promiscuous mode [ 498.211763][T19295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3598'. [ 498.230917][T19292] IPVS: Error connecting to the multicast addr [ 498.543884][T19310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3603'. [ 498.818617][T19329] bond1: option resend_igmp: invalid value (32767) [ 498.825770][T19329] bond1: option resend_igmp: allowed values 0 - 255 [ 498.834617][T19329] bond1 (unregistering): Released all slaves [ 499.118562][T19345] syz.0.3610: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 499.141667][T19345] CPU: 0 UID: 0 PID: 19345 Comm: syz.0.3610 Not tainted syzkaller #0 PREEMPT(full) [ 499.141705][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.141730][T19345] Call Trace: [ 499.141810][T19345] [ 499.141876][T19345] dump_stack_lvl+0xe8/0x150 [ 499.142031][T19345] warn_alloc+0x24c/0x270 [ 499.142090][T19345] ? stack_depot_save_flags+0x33/0x800 [ 499.142197][T19345] ? __pfx_warn_alloc+0x10/0x10 [ 499.142227][T19345] ? kasan_save_track+0x3e/0x80 [ 499.142261][T19345] ? __kasan_kmalloc+0x93/0xb0 [ 499.142291][T19345] ? xsk_setsockopt+0x52a/0x960 [ 499.142383][T19345] ? do_sock_setsockopt+0x17c/0x1b0 [ 499.142489][T19345] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 499.142520][T19345] ? do_syscall_64+0x174/0x580 [ 499.142599][T19345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.142649][T19345] __vmalloc_node_range_noprof+0x12c/0x1730 [ 499.142711][T19345] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 499.142743][T19345] ? __kasan_kmalloc+0x93/0xb0 [ 499.142775][T19345] ? __kmalloc_cache_noprof+0x32d/0x660 [ 499.142811][T19345] ? __kmalloc_cache_noprof+0x150/0x660 [ 499.142841][T19345] vmalloc_user_noprof+0xad/0xe0 [ 499.142878][T19345] ? xskq_create+0xbf/0x170 [ 499.142932][T19345] xskq_create+0xbf/0x170 [ 499.142963][T19345] xsk_init_queue+0x8a/0xe0 [ 499.142995][T19345] xsk_setsockopt+0x52a/0x960 [ 499.143027][T19345] ? __fget_files+0x2a/0x420 [ 499.143088][T19345] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.143116][T19345] ? __pfx_aa_sk_perm+0x10/0x10 [ 499.143227][T19345] ? aa_sock_opt_perm+0xff/0x1a0 [ 499.143252][T19345] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 499.143301][T19345] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.143330][T19345] do_sock_setsockopt+0x17c/0x1b0 [ 499.143370][T19345] __x64_sys_setsockopt+0x13d/0x1b0 [ 499.143406][T19345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.143430][T19345] do_syscall_64+0x174/0x580 [ 499.143461][T19345] ? trace_irq_disable+0x3b/0x140 [ 499.143505][T19345] ? clear_bhb_loop+0x40/0x90 [ 499.143533][T19345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.143556][T19345] RIP: 0033:0x7f1acf39de59 [ 499.143608][T19345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.143628][T19345] RSP: 002b:00007f1ad0242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 499.143660][T19345] RAX: ffffffffffffffda RBX: 00007f1acf625fa0 RCX: 00007f1acf39de59 [ 499.143676][T19345] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 499.143689][T19345] RBP: 00007f1acf433e6f R08: 0000000000000004 R09: 0000000000000000 [ 499.143703][T19345] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.143717][T19345] R13: 00007f1acf626038 R14: 00007f1acf625fa0 R15: 00007ffccb63dd58 [ 499.143755][T19345] [ 499.441880][ T154] wlan1: Trigger new scan to find an IBSS to join [ 499.552934][T19345] Mem-Info: [ 499.577260][T19345] active_anon:5897 inactive_anon:0 isolated_anon:0 [ 499.577260][T19345] active_file:0 inactive_file:43164 isolated_file:0 [ 499.577260][T19345] unevictable:768 dirty:83 writeback:0 [ 499.577260][T19345] slab_reclaimable:12345 slab_unreclaimable:122963 [ 499.577260][T19345] mapped:29422 shmem:1287 pagetables:3451 [ 499.577260][T19345] sec_pagetables:0 bounce:0 [ 499.577260][T19345] kernel_misc_reclaimable:0 [ 499.577260][T19345] free:1298911 free_pcp:7912 free_cma:0 [ 499.649392][T19345] Node 0 active_anon:23588kB inactive_anon:0kB active_file:0kB inactive_file:172456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117688kB dirty:332kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16004kB pagetables:13468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 499.699950][T19345] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 499.776809][T19345] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.810840][T19345] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 499.817026][T19345] Node 0 DMA32 free:1238920kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23588kB inactive_anon:0kB active_file:0kB inactive_file:172456kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2548736kB mlocked:0kB bounce:0kB free_pcp:32896kB local_pcp:11876kB free_cma:0kB [ 499.874051][T19353] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 499.885582][T19345] lowmem_reserve[]: 0 0 0 0 0 [ 499.890458][T19345] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.946171][T19353] bond4 (unregistering): Released all slaves [ 499.968400][T19345] lowmem_reserve[]: 0 0 0 0 0 [ 499.978897][T19345] Node 1 Normal free:3941556kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.025812][T19345] lowmem_reserve[]: 0 0 0 0 0 [ 500.030784][T19345] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 500.050059][T19345] Node 0 DMA32: 1100*4kB (UME) 599*8kB (UME) 294*16kB (UME) 238*32kB (UME) 431*64kB (UM) 600*128kB (UM) 420*256kB (UME) 228*512kB (UM) 112*1024kB (UM) 12*2048kB (UME) 183*4096kB (UM) = 1238984kB [ 500.070653][T19345] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 500.100389][T19345] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 10*16kB (UM) 14*32kB (UM) 3*64kB (UM) 5*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941556kB [ 500.122480][T19345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.133080][T19345] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.146387][T19345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.161240][T19345] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.195612][T19345] 44447 total pagecache pages [ 500.200851][T19345] 0 pages in swap cache [ 500.231877][T19345] Free swap = 124996kB [ 500.239912][T19361] netlink: 'syz.2.3615': attribute type 1 has an invalid length. [ 500.244655][T19345] Total swap = 124996kB [ 500.275878][T19361] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3615'. [ 500.286799][T19345] 2097051 pages RAM [ 500.300259][T19345] 0 pages HighMem/MovableOnly [ 500.309129][T19345] 428186 pages reserved [ 500.316088][T19345] 0 pages cma reserved [ 500.495480][T19379] netlink: 'syz.3.3619': attribute type 64 has an invalid length. [ 500.576198][T19379] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3619'. [ 501.088688][T19397] nbd: couldn't find device at index 0 [ 501.094991][T19397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3620'. [ 501.105532][T19397] nbd: couldn't find a device at index 0 [ 501.277173][T19401] netlink: 'syz.4.3621': attribute type 1 has an invalid length. [ 501.426488][T19403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3621'. [ 501.854834][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.298421][ T154] wlan1: Trigger new scan to find an IBSS to join [ 504.345951][ T1158] wlan1: Creating new IBSS network, BSSID 96:bb:51:95:58:42 [ 505.249811][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'. [ 505.346652][T19405] macvtap1: entered allmulticast mode [ 505.377158][T19405] bond1: (slave vti0): refused to change device type [ 505.524952][T19423] netlink: 'syz.0.3626': attribute type 10 has an invalid length. [ 505.644846][T19423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.664693][T19412] ipt_REJECT: ECHOREPLY no longer supported. [ 505.690986][T19423] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 505.728732][T19422] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3626'. [ 505.744845][T19431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3627'. [ 505.769348][T19422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3626'. [ 505.807096][T19422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3626'. [ 505.836605][T19422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3626'. [ 505.940619][T19438] netlink: 'syz.2.3628': attribute type 2 has an invalid length. [ 505.950859][T19431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3627'. [ 505.961469][T19436] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 505.983195][T19426] syzkaller1: entered promiscuous mode [ 506.013271][T19426] syzkaller1: entered allmulticast mode [ 506.061575][T19442] netlink: 'syz.0.3630': attribute type 2 has an invalid length. [ 506.224342][T19447] team0: Device xfrm0 is of different type [ 506.248403][T19453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3634'. [ 506.264576][T19454] netlink: 'syz.0.3632': attribute type 64 has an invalid length. [ 506.335363][T19455] netlink: 'syz.0.3632': attribute type 64 has an invalid length. [ 506.349046][T19457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3634'. [ 506.470650][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3635'. [ 506.492922][T19459] : renamed from ip6_vti0 (while UP) [ 506.534824][T19459] Cannot find del_set index 4 as target [ 506.870204][T19471] x_tables: unsorted underflow at hook 2 [ 507.120332][T19485] x_tables: duplicate underflow at hook 2 [ 507.253882][T19488] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.261736][T19488] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.482218][ T5816] hid-generic 0005:11C2:0009.0002: item fetching failed at offset 0/1 [ 507.524004][ T5816] hid-generic 0005:11C2:0009.0002: probe with driver hid-generic failed with error -22 [ 508.238654][T19534] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 508.592536][T19551] netlink: 'syz.0.3665': attribute type 6 has an invalid length. [ 508.618542][T19551] netlink: 'syz.0.3665': attribute type 7 has an invalid length. [ 508.636725][T19551] netlink: 'syz.0.3665': attribute type 5 has an invalid length. [ 508.693964][T19551] netlink: 'syz.0.3665': attribute type 12 has an invalid length. [ 508.712331][T19551] netlink: 'syz.0.3665': attribute type 29 has an invalid length. [ 509.004752][T19567] openvswitch: netlink: Multiple metadata blocks provided [ 509.013409][T19568] tipc: Trying to set illegal importance in message [ 509.161934][T19576] bridge_slave_0: left allmulticast mode [ 509.171278][T19576] bridge_slave_0: left promiscuous mode [ 509.178112][T19576] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.192456][T19576] bridge_slave_1: left allmulticast mode [ 509.198343][T19576] bridge_slave_1: left promiscuous mode [ 509.217394][T19576] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.231560][T19576] bond0: (slave bond_slave_0): Releasing backup interface [ 509.246120][T19576] bond0: (slave bond_slave_1): Releasing backup interface [ 509.256891][T19576] team0: Port device team_slave_0 removed [ 509.265563][T19576] team0: Port device team_slave_1 removed [ 509.271963][T19576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.284908][T19576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.295757][T19576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.316610][T19581] tipc: Enabling of bearer rejected, media not registered [ 509.376353][T19579] gtp0: entered promiscuous mode [ 509.381507][T19579] gtp0: entered allmulticast mode [ 509.389091][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057b91400: rx timeout, send abort [ 509.398417][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057b91400: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 509.427279][T19579] Unknown options in mask b7f2 [ 509.627404][T19595] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 509.731299][T19598] IPv6: NLM_F_CREATE should be specified when creating new route [ 509.765453][T19598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 509.772846][T19598] IPv6: NLM_F_CREATE should be set when creating new route [ 510.000930][T19614] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.011555][T19610] x_tables: duplicate underflow at hook 3 [ 510.048385][T19608] "syz.3.3681" (19608) uses obsolete ecb(arc4) skcipher [ 510.128339][T19617] syzkaller0: entered promiscuous mode [ 510.143762][T19617] syzkaller0: entered allmulticast mode [ 510.325505][T19626] __nla_validate_parse: 21 callbacks suppressed [ 510.325521][T19626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3687'. [ 510.454659][T19640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.615979][T19626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3687'. [ 510.655328][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3687'. [ 510.667463][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3687'. [ 510.830904][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3690'. [ 510.840230][T19652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3690'. [ 510.933150][T19653] bridge_slave_0: left allmulticast mode [ 510.943988][T19653] bridge_slave_0: left promiscuous mode [ 510.956314][T19653] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.993606][T19657] validate_nla: 1 callbacks suppressed [ 510.993629][T19657] netlink: 'syz.2.3691': attribute type 12 has an invalid length. [ 511.022987][T19653] bridge_slave_1: left allmulticast mode [ 511.060726][T19653] bridge_slave_1: left promiscuous mode [ 511.073295][T19653] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.090605][T19653] bond0: (slave bond_slave_0): Releasing backup interface [ 511.098353][T19667] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3692'. [ 511.116402][T19653] bond0: (slave bond_slave_1): Releasing backup interface [ 511.177803][T19653] team0: Port device team_slave_0 removed [ 511.197677][T19653] team0: Port device team_slave_1 removed [ 511.205517][T19653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.216511][T19653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.227457][T19653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.238424][T19653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.259071][T19653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 511.388613][T19668] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3692'. [ 511.413859][T19668] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3692'. [ 511.487792][T19674] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3695'. [ 511.694759][T19679] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 511.772656][T19679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 512.190840][T19703] wg2 speed is unknown, defaulting to 1000 [ 512.229851][T19712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.646733][T19700] wg2 speed is unknown, defaulting to 1000 [ 512.666305][T19703] wlan1 speed is unknown, defaulting to 1000 [ 512.705480][T19726] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.734463][T19726] bridge_slave_1: default FDB implementation only supports local addresses [ 513.309097][T19746] syzkaller0: entered promiscuous mode [ 513.328661][T19746] syzkaller0: entered allmulticast mode [ 513.652795][T19762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.741122][T19700] wlan1 speed is unknown, defaulting to 1000 [ 513.857929][T19767] openvswitch: netlink: IP tunnel dst address not specified [ 513.917693][T19770] netlink: 'syz.0.3724': attribute type 4 has an invalid length. [ 514.437850][T19794] openvswitch: netlink: Flow key attr not present in new flow. [ 514.524051][T19790] syzkaller1: entered promiscuous mode [ 514.555886][T19790] syzkaller1: entered allmulticast mode [ 515.061334][T19813] netlink: 'syz.2.3737': attribute type 1 has an invalid length. [ 515.089425][T19814] netlink: 'syz.2.3737': attribute type 1 has an invalid length. [ 515.414392][T19826] __nla_validate_parse: 8 callbacks suppressed [ 515.414414][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'. [ 515.484577][T19813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.506070][T19826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3740'. [ 515.556300][T19832] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3742'. [ 515.833630][T19843] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 515.885533][T19848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3749'. [ 515.935495][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 516.141386][T19861] netlink: 'syz.1.3752': attribute type 10 has an invalid length. [ 516.230580][T19861] veth1_macvtap: left promiscuous mode [ 516.281496][T19861] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 516.346918][T19868] netlink: 'syz.4.3753': attribute type 2 has an invalid length. [ 516.423033][T19870] netlink: 'syz.2.3755': attribute type 61 has an invalid length. [ 517.185559][T19905] x_tables: duplicate underflow at hook 2 [ 517.654059][T19913] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 517.702278][ T5759] IPVS: starting estimator thread 0... [ 517.803060][T19917] IPVS: using max 24 ests per chain, 57600 per kthread [ 517.885737][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3773'. [ 518.003585][T19925] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 518.066866][T19925] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 518.103187][T19925] gretap1: entered promiscuous mode [ 518.141515][T19925] gretap1: entered allmulticast mode [ 518.151659][T19933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3775'. [ 518.200941][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 518.225958][T19933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3775'. [ 518.879902][T19940] veth1_macvtap: entered promiscuous mode [ 518.941542][T19958] xt_addrtype: ipv6 does not support BROADCAST matching [ 519.085293][T19940] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 519.160365][T19940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.180245][ T5759] bond_slave_0: entered promiscuous mode [ 519.190160][ T5759] bond_slave_1: entered promiscuous mode [ 519.235433][ T5759] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 519.295994][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 519.549575][T19955] syzkaller0: entered promiscuous mode [ 519.608006][T19955] syzkaller0: entered allmulticast mode [ 520.015898][T19983] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3784'. [ 520.219972][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.266863][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.777756][T19999] 8021q: VLANs not supported on syzkaller1 [ 520.911696][T19998] macvtap2: entered promiscuous mode [ 520.944283][T19998] macvtap2: entered allmulticast mode [ 521.003895][T19998] veth1_vlan: entered allmulticast mode [ 521.156596][T19999] macvtap3: entered promiscuous mode [ 521.182458][T19999] macvtap3: entered allmulticast mode [ 522.013969][T20036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3803'. [ 522.054034][T20037] syzkaller0: entered promiscuous mode [ 522.075318][T20037] syzkaller0: entered allmulticast mode [ 522.508301][T20050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3807'. [ 522.543872][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3806'. [ 522.610231][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3806'. [ 522.677510][T20048] tipc: Enabling of bearer rejected, failed to enable media [ 522.686217][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3806'. [ 522.781377][T20058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3809'. [ 522.857792][T20060] netlink: 'syz.0.3810': attribute type 2 has an invalid length. [ 522.894628][T20060] netlink: 'syz.0.3810': attribute type 2 has an invalid length. [ 522.930415][T20060] netlink: 'syz.0.3810': attribute type 2 has an invalid length. [ 522.947592][T20060] netlink: 'syz.0.3810': attribute type 1 has an invalid length. [ 522.956702][T20060] netlink: 'syz.0.3810': attribute type 2 has an invalid length. [ 522.997347][T20060] netlink: 'syz.0.3810': attribute type 1 has an invalid length. [ 523.275305][T20076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3816'. [ 523.340283][T20080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3818'. [ 523.380998][T20080] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3818'. [ 523.955841][T20100] bridge5: entered promiscuous mode [ 523.973240][T20100] bridge5: entered allmulticast mode [ 524.120784][T20109] bridge_slave_0: default FDB implementation only supports local addresses [ 524.199564][T20109] netlink: 'syz.1.3825': attribute type 11 has an invalid length. [ 524.228977][T20106] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 524.827543][T20133] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 524.904256][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3833'. [ 524.917466][T20133] openvswitch: netlink: Multiple metadata blocks provided [ 524.968388][T20136] openvswitch: netlink: Message has 4 unknown bytes. [ 525.005550][T20142] netlink: 'syz.3.3834': attribute type 10 has an invalid length. [ 525.086650][T20142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 525.131069][T20142] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 526.141312][ T30] audit: type=1107 audit(1783952423.985:9): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 526.190282][ T30] audit: type=1107 audit(1783952424.025:10): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 526.348884][T20187] bond0: option miimon: invalid value (18446744071829782528) [ 526.497463][T20187] bond0: option miimon: allowed values 0 - 2147483647 [ 526.750349][T20198] Unsupported ieee802154 address type: 0 [ 526.783616][T20198] xt_hashlimit: invalid rate [ 526.854616][T20203] tipc: Enabling of bearer rejected, failed to enable media [ 526.942883][T20209] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 526.984001][T20209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.071906][T20215] __nla_validate_parse: 4 callbacks suppressed [ 527.071950][T20215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3850'. [ 527.124517][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'. [ 527.168643][T20216] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 527.275385][T20216] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3850'. [ 527.604454][T20228] netlink: 'syz.3.3856': attribute type 83 has an invalid length. [ 527.640477][T20228] sctp: [Deprecated]: syz.3.3856 (pid 20228) Use of int in max_burst socket option. [ 527.640477][T20228] Use struct sctp_assoc_value instead [ 527.660789][T20229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3857'. [ 527.749953][T20207] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 527.767708][T20207] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 527.837858][T20232] xfrm0: entered allmulticast mode [ 527.899936][T20236] veth1_to_bond: entered allmulticast mode [ 527.921546][T20237] veth1_to_bond: entered promiscuous mode [ 527.950778][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3859'. [ 527.980367][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3859'. [ 528.020069][T20239] netlink: 'syz.1.3860': attribute type 21 has an invalid length. [ 528.121774][T20236] veth1_to_bond (unregistering): left allmulticast mode [ 528.131734][T20236] veth1_to_bond (unregistering): left promiscuous mode [ 528.183061][T20236] bond0: (slave bond_slave_1): Releasing backup interface [ 528.411309][T20229] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 528.422816][T20239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3860'. [ 529.171127][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3867'. [ 529.210083][T20273] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3869'. [ 529.379889][T20275] syzkaller1: entered promiscuous mode [ 529.391916][T20275] syzkaller1: entered allmulticast mode [ 529.763827][ T4946] Bluetooth: hci1: command 0x0401 tx timeout [ 530.006553][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3879'. [ 530.091149][T20307] syzkaller0: entered promiscuous mode [ 530.099737][T20307] syzkaller0: entered allmulticast mode [ 530.356955][T20318] veth0: entered promiscuous mode [ 530.364191][T20317] veth0: left promiscuous mode [ 530.721922][T20327] netlink: 'syz.1.3886': attribute type 13 has an invalid length. [ 530.807151][T20327] gretap0: refused to change device tx_queue_len [ 530.840796][T20327] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 531.779437][T20362] bond6: option ad_user_port_key: invalid value (65535) [ 531.787165][T20362] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 531.847402][T20362] bond6 (unregistering): Released all slaves [ 532.087840][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.190114][T20374] tipc: Enabled bearer , priority 0 [ 532.415454][T20387] __nla_validate_parse: 4 callbacks suppressed [ 532.415488][T20387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3901'. [ 532.448915][T20380] syzkaller0: entered promiscuous mode [ 532.469497][T20380] syzkaller0: entered allmulticast mode [ 532.473010][T20392] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3902'. [ 532.497359][T20380] tipc: Resetting bearer [ 532.536237][T20373] tipc: Resetting bearer [ 533.125994][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.204512][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.253938][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.268838][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.866339][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.956583][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.015232][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.170466][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.376004][ T1097] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 534.660660][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 536.331064][T11074] net_ratelimit: 2 callbacks suppressed [ 536.331089][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.346053][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.105807][T20373] tipc: Disabling bearer [ 537.120500][T20387] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 537.121810][ T5759] tipc: Node number set to 2856350825 [ 537.364703][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.378811][T20414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3908'. [ 537.435277][T20414] netlink: 'syz.4.3908': attribute type 1 has an invalid length. [ 537.483252][T20414] netlink: 'syz.4.3908': attribute type 3 has an invalid length. [ 537.515343][T20423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3908'. [ 537.525414][T20414] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3908'. [ 537.540114][T20414] NCSI netlink: No device for ifindex 813332851 [ 537.970276][T20440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3917'. [ 538.175057][T20444] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3916'. [ 538.276626][T20438] team0 (unregistering): Port device team_slave_0 removed [ 538.379317][T20438] team0 (unregistering): Port device team_slave_1 removed [ 538.405434][T20455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3919'. [ 538.479995][T20453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3919'. [ 538.501028][T20455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3919'. [ 538.516398][T20453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3919'. [ 538.535980][T20463] rdma_rxe: rxe_newlink: failed to add wg2 [ 538.775373][T20435] syzkaller0: entered promiscuous mode [ 538.783772][T20435] syzkaller0: entered allmulticast mode [ 539.179967][T20471] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 539.190238][T20471] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3923'. [ 539.360621][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3925'. [ 540.247197][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.899673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.860883][T20503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3930'. [ 544.174548][T20506] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3931'. [ 544.238263][T20510] IPv6: sit1: Disabled Multicast RS [ 544.265782][T20510] sit1: entered allmulticast mode [ 544.382407][T20506] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 544.397004][T20511] IPv6: sit1: Disabled Multicast RS [ 544.415712][T20511] sit1: entered allmulticast mode [ 544.806232][T20527] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3937'. [ 544.827838][T20515] veth0_macvtap: entered promiscuous mode [ 544.854014][T20515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.866660][T20515] bond1: entered allmulticast mode [ 544.890382][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.903915][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.916950][T20515] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 545.091313][T20528] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3938'. [ 545.143065][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.153833][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.279623][T20549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3938'. [ 545.720471][T20539] syzkaller0: entered promiscuous mode [ 545.749062][T20539] syzkaller0: entered allmulticast mode [ 549.846078][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.455428][T20558] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 550.489365][T11074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.942482][T20610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3957'. [ 551.127985][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 551.139009][T20619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.160520][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 551.187278][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 551.380380][T20630] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 551.390686][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 551.400614][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'. [ 551.448743][T20631] netlink: 'syz.3.3963': attribute type 12 has an invalid length. [ 551.480591][T20631] netlink: 'syz.3.3963': attribute type 11 has an invalid length. [ 551.656818][T20640] netlink: 'syz.4.3966': attribute type 21 has an invalid length. [ 551.687919][T20640] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3966'. [ 551.725673][T20640] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3966'. [ 552.050362][T20652] netlink: 'syz.3.3970': attribute type 1 has an invalid length. [ 552.230772][T20658] tunl0: entered promiscuous mode [ 552.241740][T20658] tunl0: left allmulticast mode [ 552.262741][T20658] netlink: 'syz.0.3972': attribute type 3 has an invalid length. [ 552.280716][T20658] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3972'. [ 552.442673][T20667] rdma_rxe: rxe_newlink: failed to add wg2 [ 552.615459][T20674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3977'. [ 553.683071][ T31] INFO: task kworker/1:2H:14858 blocked for more than 143 seconds. [ 553.691063][ T31] Not tainted syzkaller #0 [ 553.700195][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.711443][ T31] task:kworker/1:2H state:D stack:26568 pid:14858 tgid:14858 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 553.726272][ T31] Workqueue: kblockd blk_mq_requeue_work [ 553.732321][ T31] Call Trace: [ 553.735657][ T31] [ 553.743450][ T31] __schedule+0x17d9/0x56c0 [ 553.749385][ T31] ? __pfx_clockevents_program_event+0x10/0x10 [ 553.758172][ T31] ? __pfx___schedule+0x10/0x10 [ 553.764683][ T31] ? __pfx___schedule+0x10/0x10 [ 553.771150][ T31] ? schedule+0x90/0x2b0 [ 553.777462][ T31] schedule+0x164/0x2b0 [ 553.785296][ T31] schedule_timeout+0x152/0x2c0 [ 553.791124][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 553.796638][ T31] ? __pfx_process_timeout+0x10/0x10 [ 553.806252][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 553.812188][ T31] ? prepare_to_wait_event+0x436/0x480 [ 553.830070][ T31] nbd_queue_rq+0x889/0x1150 [ 553.838746][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 553.848472][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 553.854640][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 553.863084][ T31] ? sbitmap_get+0x229/0x390 [ 553.867827][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 553.875940][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 553.881835][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 553.888632][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 553.896027][ T31] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 553.901785][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 553.907489][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 553.913021][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 553.919178][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 553.925307][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 553.942810][ T31] blk_mq_run_hw_queues+0x268/0x3f0 [ 553.948142][ T31] blk_mq_requeue_work+0x703/0x760 [ 553.955416][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 553.961208][ T31] ? rcu_is_watching+0x15/0xb0 [ 553.968242][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 553.974484][ T31] process_scheduled_works+0xa8e/0x14e0 [ 553.980224][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 553.988212][ T31] ? assign_work+0x3cf/0x5d0 [ 553.993247][ T31] worker_thread+0xa47/0xfb0 [ 553.998061][ T31] ? __kthread_parkme+0x71/0x1f0 [ 554.005188][ T31] kthread+0x388/0x470 [ 554.009420][ T31] ? __pfx_worker_thread+0x10/0x10 [ 554.014576][ T31] ? __pfx_kthread+0x10/0x10 [ 554.020873][ T31] ret_from_fork+0x514/0xb70 [ 554.025796][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 554.030950][ T31] ? __switch_to+0xc89/0x1420 [ 554.040960][ T31] ? __pfx_kthread+0x10/0x10 [ 554.046539][ T31] ret_from_fork_asm+0x1a/0x30 [ 554.051997][ T31] [ 554.055975][ T31] [ 554.055975][ T31] Showing all locks held in the system: [ 554.066101][ T31] 1 lock held by khungtaskd/31: [ 554.072195][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 554.084523][ T31] 4 locks held by kworker/u8:2/33: [ 554.089788][ T31] 3 locks held by kworker/u9:0/50: [ 554.099754][ T31] #0: ffff8880679cc940 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 554.112308][ T31] #1: ffffc90000ba7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 554.127174][ T31] #2: ffff88808249cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 554.137283][ T31] 2 locks held by getty/5386: [ 554.146127][ T31] #0: ffff8880368af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 554.157921][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 554.169588][ T31] 2 locks held by kworker/0:8/5759: [ 554.175018][ T31] 1 lock held by udevd/13330: [ 554.179740][ T31] #0: ffff888028509350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 554.191953][ T31] 4 locks held by kworker/1:2H/14858: [ 554.198132][ T31] #0: ffff88801fedbd40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 554.210843][ T31] #1: ffffc90003adfc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 554.225911][ T31] #2: ffff888027df2318 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 554.236691][ T31] #3: ffff888028570178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 554.249765][ T31] 2 locks held by syz.0.3972/20658: [ 554.256387][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.266122][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 554.276876][ T31] 2 locks held by syz.0.3972/20665: [ 554.282377][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.293421][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 554.302788][ T31] 1 lock held by syz.2.3973/20659: [ 554.310133][ T31] #0: ffff888067997140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 554.320266][ T31] 4 locks held by syz.2.3973/20660: [ 554.335546][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.346366][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 554.357094][ T31] #2: ffff888067997140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 554.365968][ T31] #3: ffff888027084348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 554.377367][ T31] 2 locks held by syz.3.3981/20692: [ 554.383824][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.392122][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 554.404737][ T31] 2 locks held by syz.1.3983/20694: [ 554.411189][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.421775][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 554.432745][ T31] [ 554.435472][ T31] ============================================= [ 554.435472][ T31] [ 554.444069][ T31] NMI backtrace for cpu 1 [ 554.444092][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 554.444115][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.444127][ T31] Call Trace: [ 554.444136][ T31] [ 554.444144][ T31] dump_stack_lvl+0xe8/0x150 [ 554.444182][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 554.444304][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 554.444347][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 554.444376][ T31] sys_info+0x135/0x170 [ 554.444398][ T31] watchdog+0xfd7/0x1030 [ 554.444442][ T31] ? watchdog+0x1c7/0x1030 [ 554.444476][ T31] kthread+0x388/0x470 [ 554.444506][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.444528][ T31] ? __pfx_kthread+0x10/0x10 [ 554.444559][ T31] ret_from_fork+0x514/0xb70 [ 554.444593][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 554.444623][ T31] ? __switch_to+0xc89/0x1420 [ 554.444652][ T31] ? __pfx_kthread+0x10/0x10 [ 554.444683][ T31] ret_from_fork_asm+0x1a/0x30 [ 554.444720][ T31] [ 554.444728][ T31] Sending NMI from CPU 1 to CPUs 0: [ 554.575868][ C0] NMI backtrace for cpu 0 [ 554.575891][ C0] CPU: 0 UID: 0 PID: 1158 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 554.575916][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.575930][ C0] Workqueue: krds_cp_wq#5/4 rds_connect_worker [ 554.576066][ C0] RIP: 0010:mark_lock+0x9/0x190 [ 554.576114][ C0] Code: 89 df 48 8b 2c 24 e9 b6 fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 <53> 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 01 bb 09 00 00 00 83 db [ 554.576133][ C0] RSP: 0018:ffffc90005827700 EFLAGS: 00000002 [ 554.576151][ C0] RAX: 0000000000000000 RBX: ffff888027835d00 RCX: 0000000000000046 [ 554.576166][ C0] RDX: 0000000000000002 RSI: ffff8880278368a0 RDI: ffff888027835d00 [ 554.576180][ C0] RBP: dffffc0000000000 R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 554.576195][ C0] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: ffff8880278368a0 [ 554.576211][ C0] R13: 0000000000000002 R14: ffff8880278368a0 R15: 0000000000000000 [ 554.576224][ C0] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 554.576242][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.576255][ C0] CR2: 00007f5e55d1ee9c CR3: 0000000026aee000 CR4: 00000000003526f0 [ 554.576275][ C0] Call Trace: [ 554.576282][ C0] [ 554.576294][ C0] lockdep_hardirqs_on_prepare+0x111/0x270 [ 554.576324][ C0] ? __inet6_bind+0x301/0xf30 [ 554.576419][ C0] trace_hardirqs_on+0x28/0x40 [ 554.576445][ C0] __local_bh_enable_ip+0xd0/0x130 [ 554.576499][ C0] __inet6_bind+0x301/0xf30 [ 554.576537][ C0] kernel_bind+0x13e/0x1c0 [ 554.576560][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 554.576588][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 554.576665][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 554.576695][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 554.576716][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 554.576741][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 554.576766][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 554.576793][ C0] rds_connect_worker+0x1d8/0x290 [ 554.576822][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 554.576843][ C0] process_scheduled_works+0xa8e/0x14e0 [ 554.576882][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.576908][ C0] ? assign_work+0x3cf/0x5d0 [ 554.576934][ C0] worker_thread+0xa47/0xfb0 [ 554.576972][ C0] kthread+0x388/0x470 [ 554.577001][ C0] ? __pfx_worker_thread+0x10/0x10 [ 554.577023][ C0] ? __pfx_kthread+0x10/0x10 [ 554.577051][ C0] ret_from_fork+0x514/0xb70 [ 554.577082][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 554.577110][ C0] ? __switch_to+0xc89/0x1420 [ 554.577143][ C0] ? __pfx_kthread+0x10/0x10 [ 554.577172][ C0] ret_from_fork_asm+0x1a/0x30 [ 554.577209][ C0] [ 554.937965][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 554.944885][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 554.954134][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.964249][ T31] Call Trace: [ 554.967585][ T31] [ 554.970655][ T31] vpanic+0x56c/0xa60 [ 554.974711][ T31] ? __pfx___schedule+0x10/0x10 [ 554.979627][ T31] ? __pfx_vpanic+0x10/0x10 [ 554.984177][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 554.990413][ T31] panic+0xc5/0xd0 [ 554.994198][ T31] ? __pfx_panic+0x10/0x10 [ 554.998673][ T31] ? preempt_schedule_common+0x82/0xd0 [ 555.004199][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 555.009634][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 555.015851][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 555.022069][ T31] watchdog+0x1030/0x1030 [ 555.026475][ T31] ? watchdog+0x1c7/0x1030 [ 555.030956][ T31] kthread+0x388/0x470 [ 555.035084][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.039812][ T31] ? __pfx_kthread+0x10/0x10 [ 555.044460][ T31] ret_from_fork+0x514/0xb70 [ 555.049111][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.054267][ T31] ? __switch_to+0xc89/0x1420 [ 555.059078][ T31] ? __pfx_kthread+0x10/0x10 [ 555.063711][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.068647][ T31] [ 555.072342][ T31] Kernel Offset: disabled [ 555.076753][ T31] Rebooting in 86400 seconds..