last executing test programs: 17.692151639s ago: executing program 3 (id=2820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0000000170a03090000000000000000000000040c00054000000000000000050900020073797a320000000074000380080002400000000520681a0380140001007663616e30000000000000000000000014000100776731000000000000000000000000001400010071797a6b616c6c6572310000000000001400010070696d726567310000000000000000001400010062726964676530000000000000000000cfda046615b5815a098288b12493d1f41b13f899b870e75e3332f2b6d6279bf6524daa3fd470feb8b21df868836108de4f0083f3537d1c7f3f65cae11bd35dc2a29699bb29077bc92b460c51"], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}]}], {0x14, 0x10}}, 0x88}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r1 = socket(0x1, 0x6, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x3b, @multicast1, 0x4e22, 0x1, 'fo\x00', 0x20, 0x400, 0xe}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x3a, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x12, 0xffffa9b3, 0x75}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5911f0600002300000000000000", 0x11) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x6, @multicast2, 0x4e20, 0x4, 'sh\x00', 0x19, 0x5, 0x80}, {@loopback, 0x4e21, 0x10000, 0x10, 0x0, 0xdf3a}}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150007000000000000120800040043430000a80016000a0001407c6f94007134cf6ee08000a0e408e8a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3adfe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee0000000000000000a48156a65908145da1062ff2b44ac6a5", 0xd8}], 0x1}, 0x0) 17.629728894s ago: executing program 3 (id=2822): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x1) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) 17.558510228s ago: executing program 3 (id=2825): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0)=0x899, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17.488002349s ago: executing program 1 (id=2826): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) sendmsg$802154_dgram(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="ad0f3a87ae2e"}) 17.478987472s ago: executing program 1 (id=2828): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = accept$packet(r0, 0x0, &(0x7f0000000080)) close(r2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0xfffffffe, 0x5, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x2, 0x20}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) close(r0) 17.395165427s ago: executing program 3 (id=2829): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/53, &(0x7f0000000080)=0x35) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/53, &(0x7f0000000080)=0x35) socket$phonet(0x23, 0x2, 0x1) (async) r1 = socket$phonet(0x23, 0x2, 0x1) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'cpuacct'}, {0x2b, 'blkio'}]}, 0x10) (async) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'cpuacct'}, {0x2b, 'blkio'}]}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r2 = socket(0x8, 0xa, 0x3) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x400a4}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0xffff8001}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0xffff8001}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879316000000005002000050000000c0005"], 0x34}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879316000000005002000050000000c0005"], 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000ac0)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x9, 0x1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x0, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x800, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x284, 0x4, 0x7, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82d, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20000, 0x9, 0x9e, 0xb, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x40000, 0xfff, 0xce, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x101, 0x17f, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000ac0)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x9, 0x1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x0, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x800, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x284, 0x4, 0x7, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82d, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20000, 0x9, 0x9e, 0xb, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x40000, 0xfff, 0xce, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x101, 0x17f, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}]}, 0x58}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r10, &(0x7f0000003040)={&(0x7f0000001a00)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, 0x0}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000040)=0x10000) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000040)=0x10000) 17.32888434s ago: executing program 1 (id=2831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3ff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0xc0a}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3}]}]}, 0xfc}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) close(r4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000280)=0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000012000103"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r8, 0x37}, 0x20) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 17.175945406s ago: executing program 3 (id=2834): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="08000000010000", 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x80302102}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x2, 0x4) 17.105106414s ago: executing program 4 (id=2836): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x230, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x6}}, @common=@inet=@socket3={{0x28}, 0x2}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x7, 0x0, 0x2, 0x1, 0x5], 0x6, 0x4}, {0xffffffffffffffff, [0x5, 0x0, 0x2, 0x0, 0x0, 0x1], 0x3, 0x5}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'netpci0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x4, 0x2, 0x88}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x4, 0x4, 0x5, 0x1, 0x6], 0x3}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 0xd, 0x5, [0x18, 0x2b, 0x32, 0x2d, 0x39, 0x6, 0x29, 0x3, 0x29, 0xf, 0x38, 0x32, 0x31, 0x31, 0x12, 0x1b], 0x1, 0x5, 0x7fffffffffffffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x5, [0x26, 0x27, 0x3f, 0x32, 0x26, 0x15, 0x3b, 0x3c, 0x1f, 0xc, 0xf, 0x3a, 0x28, 0x40, 0xd, 0x2a], 0x1, 0x4, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x230, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x6}}, @common=@inet=@socket3={{0x28}, 0x2}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x7, 0x0, 0x2, 0x1, 0x5], 0x6, 0x4}, {0xffffffffffffffff, [0x5, 0x0, 0x2, 0x0, 0x0, 0x1], 0x3, 0x5}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'netpci0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x4, 0x2, 0x88}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x4, 0x4, 0x5, 0x1, 0x6], 0x3}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 0xd, 0x5, [0x18, 0x2b, 0x32, 0x2d, 0x39, 0x6, 0x29, 0x3, 0x29, 0xf, 0x38, 0x32, 0x31, 0x31, 0x12, 0x1b], 0x1, 0x5, 0x7fffffffffffffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x5, [0x26, 0x27, 0x3f, 0x32, 0x26, 0x15, 0x3b, 0x3c, 0x1f, 0xc, 0xf, 0x3a, 0x28, 0x40, 0xd, 0x2a], 0x1, 0x4, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) 17.017867595s ago: executing program 4 (id=2837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000006301e0ff000000009500000000000000f168c8d99852a75c637b97159b040000005405023967e027c543481fa4ce68dc812910712fa977d2158c0a127906db394f2bc0626f13dcce59c107ec6867e50230237379bf186db99da1745830e52a6895308d1be1d95e1175bbd820c5ebb87f5b7b7b0472"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000006301e0ff000000009500000000000000f168c8d99852a75c637b97159b040000005405023967e027c543481fa4ce68dc812910712fa977d2158c0a127906db394f2bc0626f13dcce59c107ec6867e50230237379bf186db99da1745830e52a6895308d1be1d95e1175bbd820c5ebb87f5b7b7b0472"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x7800, 0x4482173780f9b7c3, 0x626d, 0xfffffffa, {{0x1e, 0x4, 0x0, 0x1, 0x78, 0x66, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @remote, {[@lsrr={0x83, 0x23, 0x81, [@multicast2, @loopback, @private=0xa010102, @remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, @remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x9e, 0x0, 0x4, [0x8, 0x8]}, @timestamp={0x44, 0x20, 0x86, 0x0, 0x5, [0x3, 0x47, 0x5, 0x0, 0x3, 0x9, 0x9]}, @lsrr={0x83, 0xb, 0xda, [@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x7800, 0x4482173780f9b7c3, 0x626d, 0xfffffffa, {{0x1e, 0x4, 0x0, 0x1, 0x78, 0x66, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @remote, {[@lsrr={0x83, 0x23, 0x81, [@multicast2, @loopback, @private=0xa010102, @remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, @remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x9e, 0x0, 0x4, [0x8, 0x8]}, @timestamp={0x44, 0x20, 0x86, 0x0, 0x5, [0x3, 0x47, 0x5, 0x0, 0x3, 0x9, 0x9]}, @lsrr={0x83, 0xb, 0xda, [@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) recvfrom(r0, &(0x7f00000004c0)=""/22, 0x16, 0x40010020, &(0x7f0000000500)=@in={0x2, 0x4e23, @remote}, 0x80) write(0xffffffffffffffff, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r3, 0x0, r6, 0x0, 0x1000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFINDEX(r7, 0x400454da, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) write$tun(0xffffffffffffffff, &(0x7f0000000780)={@void, @val={0x0, 0x0, 0x12, 0x0, 0x1}, @eth={@empty, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @dccp={{0x12, 0x4, 0x2, 0x9, 0x75, 0x65, 0x0, 0x2, 0x21, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, {[@rr={0x7, 0x1f, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @loopback, @broadcast, @remote, @local]}, @ssrr={0x89, 0xf, 0xd, [@multicast2, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, "b1ebdc", 0x5, "60ab47"}, "42b85fafbf305851eb34339c5bd32275ef8cbf4bb9bb3bbb63f4cdae5d"}}}}}}, 0x91) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x582}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18000100070000000000000005000000186400000f00000000000000000000001811000037b669fad3a3a9ac0bdb5fb448a992946b279f6fb77cbd0940b80dedbbdf9fca0a148f3824c5579e2dedc1771fee7e3f879e1ac62f5c85011c6d839757f8e5a26578fac34c55299c901609ca27e090c987327568306994437decdace858cf32424e497ed882b603dfabd5ebbd074dccaa1d7e21425761a859711fdea976b153c2597b2d2462790acf2514440a3cebba3283033cc36c4e3930ebbe90a67be161c5e7890", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000c2880001000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x2d, &(0x7f0000000200)=""/45, 0x41000, 0x17, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x6, 0x692, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000003c0)=[{0x1, 0x4, 0x8, 0xb}, {0x0, 0x4, 0x2, 0x7}, {0x3, 0x2, 0x0, 0x6}], 0x10, 0x6}, 0x94) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="090b0000000000000000050000000800030089"], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="090b0000000000000000050000000800030089"], 0x1c}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev}, &(0x7f0000000840)=0xc) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev, 0x0}, &(0x7f0000000840)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200040d0}, 0x42000) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200040d0}, 0x42000) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000640)={'macvlan0\x00', 0x7}) (async) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000640)={'macvlan0\x00', 0x7}) 16.959787676s ago: executing program 2 (id=2838): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e00000008000500d4183b074b5542d5f483a29815650500e16935227c5bed61342f800f05d47a9228839a3f373b55288e4c496ea196cea3e736fa29e2f30e52987c41b2ad37e2b6c8bb1606020aa3e20bf57138e7d0a49028ed6b72347f7e380fdb3fad43e3524e00"/136, @ANYRES32=r1, @ANYRES32=r1], 0x4c}, 0x1, 0xba01, 0x0, 0x4004010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(0x3) (async) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000001180)={0x1, &(0x7f00000010c0)=[{0x2, 0x10, 0x80, 0x80000001}]}, 0x10) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x0, 0xff, 0x4}, 0x2}, 0x18) (async) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x0, 0xff, 0x4}, 0x2}, 0x18) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000400)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_emit_ethernet(0x0, 0x0, 0x0) 16.923463178s ago: executing program 4 (id=2840): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r3}) sendto$packet(r2, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r3, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3650f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6984ce10c2c4dfc838d0f405d6242efc2dc7a20e306a6d66af8aeda5a05a923abfa76c1acfa48ac70407fc25762c3eea7df35b7489194b77079512a170fbef7e64116b6b4cceaa01df9000000000000000000", 0xac}, {0x0}, {&(0x7f00000000c0)="55179b51d635ab8e400f47214b4e74010b625b050236728928afc2077a0a9082450fa0d8883a022489a5"}, {&(0x7f0000000100)="f0db586ffacb7d031d832eada5f8d8ff66e740101454cb04c09727f066e3958f3e0604af809b1358bf87bee593ec64f2c94080c22a5cdf48f0114e66921c549e6f3e449a708c874e8f0de256355282abbdf8486f901dc72ddfa11df22898cc6deb13a4696be9c11e3f4e0b36a9935cb6e79b065f7db164974ac6f8f1cbeb7787ee3fc7ea09fa2e6bbfbddf3b7503d6ecd60e8d5f033eed61a5d7a3501220228fc56019e2518aaf3d0162d4c771a97674fe38db5e1806609869901ae010c8c033fc881ad4cce8065c8fb4f5"}], 0x2, 0x0, 0x64, 0x1f000801}, 0x0) 16.911742609s ago: executing program 0 (id=2841): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x80800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xc0, "68f4351e73f897a841d85c0ef1168e8a480a74f2088e9cb14daeb9f6bfc989a499efd296058c133fe4fe0c5dd43f6c9b632dc26aa3cc2e9be6acc3faf1a03a3d9f4d1073973a97d45d1e19a1e77d4a603694927de0ba5265afe5648894db5456907f0f809b8a8b3f402e87d9525b4a9e1cc9d218bf4f289f694e660fc7f27bab0c5c57e73d653338665e9fd6725e511618340320bdcde98326fba773547fbbd16f78395bfb91384c1b80e19eb6e89557505d74405d3f4fbcd9d69bf689797272"}, &(0x7f0000000200)=0xc8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={r1, 0xc0, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x4, @private0, 0x4}, @in={0x2, 0x4e23, @private}, @in6={0xa, 0x4e24, 0x4, @local, 0x10000}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x10, @rand_addr=' \x01\x00', 0x1}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0xee5a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000340)=0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r4, 0x1, {0x1, 0xff, 0x3}, 0xfe}, 0x18) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000380)=""/110, &(0x7f0000000400)=0x6e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000fc02000000000000000000000000000020010000000000000000000000000000000000004e240000020000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f00000100000000000000000000000000000000320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000300000000000000000400000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) 16.804016909s ago: executing program 0 (id=2842): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x0, 0x0, 0x0, 0xf}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x13, r1, 0xe9d89000) 16.803114745s ago: executing program 4 (id=2843): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1000000000000251, 0x0, 0x0, 0x4008080}, 0x24000000) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x101, 0x1, 0x40}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001c00)={r5, @in, 0x0, 0x0, 0xffffffff, 0x874}, &(0x7f0000001cc0)=0x9c) (async) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16.710206249s ago: executing program 1 (id=2844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x81b21000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x4a, 0x51, &(0x7f0000000440)="705a8880b37166ceb8ad14467f55b3a7b07b3a4f09c938f19d920580415e9aac5658cfbd3044d5ab802d6f0f1e704870afae1ce8607c186418ba8e4ae67ed03c153dd2014c6f882a5299", &(0x7f00000004c0)=""/81, 0x4, 0x0, 0xb8, 0x4e, &(0x7f0000000540)="d7577a8bc852845097f91deaa2a241b8c61acc34c51ab1bd16f284983c8b1e29335b41b413c35b539fb5c37f586bd721661b62ac97f35164a2851243250948e8d97be58631f52dcf84c4dd1b5f70da4380ddfd60ae4201854b34dbb7221a44b4c7aa0ba9ce4266fbbb8a9148c74a2a68c27b07447099937dddf625e6619555994eeff12aa8081a614633ce287dff7befd903c52afe5113196e96e9989995a6b8c8dad29fcde4cbcda0cb9ce436fe352cdae30e578087e8c9", &(0x7f0000000600)="1a525a7f57c9c56854465cecca653e78ab8d94e7d9b9afc10687305939d6736704401b8c2736c9357a6d097d6404beb067c91b06a29bbc85b89d22a4e4ac3184603aa1dd32d7857c3f82fa2f8382", 0x1, 0x0, 0x10000}, 0x50) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x91, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.692391206s ago: executing program 2 (id=2845): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 16.644034555s ago: executing program 0 (id=2846): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000008a56000061117c000000000026000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) socket$inet6(0xa, 0x3, 0x5) 16.640614574s ago: executing program 1 (id=2847): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) r2 = socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x24, r3, 0x1, 0x2, 0x25dfdbf7, {0x36}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x1e4, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4040940}, 0x4008010) setsockopt$CAIFSO_REQ_PARAM(r2, 0x84, 0x80, 0x0, 0x0) close(r1) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c746572"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) getsockopt(r4, 0x1, 0x45, 0x0, &(0x7f0000000300)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x200, @remote, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40500000000000061103400000000006301980000000000950000000000000099589b8aead83064c9dd2af3b8ac5718d13143a8e832f430f63107669121cb81b89f4bbf9f14677eeb7c38c4508861a434b0bf9587917a8f6c5ebbb3649915e4a5902fb15d320bc938c9b49351316f58a95050a8abcecef26b5d0a6f560f079de44f3518855415d86f398040d882b7d3f2cbc59529e0182834239f78d2ee0e3649"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 16.626353774s ago: executing program 2 (id=2848): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.608916903s ago: executing program 0 (id=2849): syz_emit_ethernet(0x36, &(0x7f0000000800)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "82d2f3", 0x0, 0x2c, 0x0, @remote, @mcast2}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069106b0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 16.516230181s ago: executing program 0 (id=2850): r0 = socket$netlink(0x10, 0x3, 0x13) (async) r1 = socket(0x8, 0x6, 0x100) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000000) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) r9 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x89e1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x4c}}, 0x0) 16.51346591s ago: executing program 2 (id=2851): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x509, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, 0x0}}], 0x1, 0x20004808) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) (async) r0 = socket$kcm(0x10, 0x2, 0x10) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000140)=0x80, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x10) (async) read$alg(r1, &(0x7f0000000380)=""/175, 0xaf) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000538959848b6e57cb09b314b0df11f53e396862521f6d312013b66133538703e6354f34c9a7a312369f68cfcac48abaaec83f2906cf0f1c38e0a16a81574b3bf83e9ee447ab3e20cc91324d6df0aa1c5100b1896fbf116a7e037ad61317f8642df87cfd9d6b95a16d0e9da47b39224d"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) close(r5) (async) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 16.51149572s ago: executing program 1 (id=2852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) bind$packet(r1, 0xfffffffffffffffc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="d0f204f69f1a07df3483746615b77984494629c4cd6fa1b8", 0x18, 0x8000, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @mcast2, 0x1000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80000}, {0xfbfffffa, 0xa23e}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003001000000008000500", @ANYRES32=r4, @ANYBLOB="770c0104bf4beb418329cd3b4013b5a626"], 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 16.469679459s ago: executing program 0 (id=2853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ee112de}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000200)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x81) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x5, 0xb1aa}, &(0x7f0000000300)=0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x324) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2600880}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20004001) 16.408030092s ago: executing program 2 (id=2854): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004001200000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000002f0c3d4441535c6b85b4334d24ad10001fff00f600000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000002001800128008000100677470000c000280050005000100000008000a00", @ANYRES32=r3, @ANYBLOB="0a000200ffffffffffff00000a000200ffffffffffff000008000500", @ANYRES32=r3, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16.396954473s ago: executing program 2 (id=2855): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x19, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fff}, 0x10}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) recvfrom(r1, &(0x7f0000000080)=""/160, 0xa0, 0x10122, &(0x7f0000000140)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) 16.341242158s ago: executing program 3 (id=2856): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x1], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r4, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15.962762915s ago: executing program 4 (id=2857): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000), 0x6e) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)='a', 0x1}], 0x1}}], 0x2, 0x400c404) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x100000001, 0x5}) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000), 0x4) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000c14}, 0x0) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r5], 0x50}}, 0x40) socket$inet6(0xa, 0x80000, 0x6) 15.839817394s ago: executing program 4 (id=2858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6, 0x80000}}, {0x4}}]}]}, 0x7c}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$alg(r4, &(0x7f0000000100)=""/68, 0x44) write(r6, &(0x7f0000000680)="4ede", 0x2) splice(r6, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) accept4$netrom(r9, &(0x7f0000001280)={{0x3, @netrom}, [@remote, @default, @default, @null, @bcast, @null, @null, @null]}, &(0x7f0000001300)=0x48, 0x800) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r10, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r12, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000180)={0x30, r12, 0x222, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7, 0x10, 0x10001, 0xffff502c}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="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", 0x1000) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xeed0b46ffaee1393, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x12010}}, 0x20}}, 0x0) 1.144829054s ago: executing program 32 (id=2853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ee112de}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000200)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x81) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x5, 0xb1aa}, &(0x7f0000000300)=0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x324) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2600880}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20004001) 1.117279285s ago: executing program 33 (id=2852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) bind$packet(r1, 0xfffffffffffffffc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="d0f204f69f1a07df3483746615b77984494629c4cd6fa1b8", 0x18, 0x8000, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @mcast2, 0x1000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80000}, {0xfbfffffa, 0xa23e}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003001000000008000500", @ANYRES32=r4, @ANYBLOB="770c0104bf4beb418329cd3b4013b5a626"], 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 1.085358101s ago: executing program 34 (id=2855): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x19, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fff}, 0x10}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) recvfrom(r1, &(0x7f0000000080)=""/160, 0xa0, 0x10122, &(0x7f0000000140)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) 1.032799007s ago: executing program 35 (id=2856): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x1], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r4, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 36 (id=2858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6, 0x80000}}, {0x4}}]}]}, 0x7c}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$alg(r4, &(0x7f0000000100)=""/68, 0x44) write(r6, &(0x7f0000000680)="4ede", 0x2) splice(r6, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) accept4$netrom(r9, &(0x7f0000001280)={{0x3, @netrom}, [@remote, @default, @default, @null, @bcast, @null, @null, @null]}, &(0x7f0000001300)=0x48, 0x800) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r10, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r12, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000180)={0x30, r12, 0x222, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7, 0x10, 0x10001, 0xffff502c}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="f039f80f631e26d03c26db985b42e3894665a8c6f82f17beda750000357fde1e1facdab72e8fca4b2bc7f095f0daea6f121d843c2d242a31b13ae6d816d03dd4621ca66b4d215d30a38406da78abfe2bc7d0b21b74cb99a658462a1cfae79c1a28bec0f86e1b44f6608859fba6d6c5444173c5aeac0a4a811fd0dbcb220bc109fc28aab8596ef7f605ebf5f1f319ebaa2b61810955df85bbf9a1f03817ae31e43e9db1fdbbef0cd3f18f868de8d6cf19b4e1e661ee77502348ed28c502a53233be5c957eedebf52bc9ced498e0ed59a95e501357762687dcd1ac892f5e1f9f88faeae7eabd6fd85e0187086b6ca5a91c352939f38a97aed1d9c17521e68e132e8b2e856ce64189bfe6891745fe8f74954e08b79b71195dd2135a64589ac4d2cf497d786ba5ad29871d6a80b50fe6dca65de8560e54e72d14ec77efdad21aa7d6e941789fa96dad74481dfed8694e0f49d688087f5f1b4aac2ad482e3fea8a6d53dc94df2aa6e1cf560f1ff743c914e04a8551a2e5dd8b48cc425b61ffc6fb68ad6e1f3b91bc923243d141b0308d9742e1a9d0d51edfc5b7d17097a73464deff9d1b13c45e3d2c27f744984e3ce3096361012d4e4034cf693ad3c11fad0e1e3cf07741755f1129d0e57bb944d39e00e3a2e24d41efa52c0d0957f09e4321ee5b2c6e96ceba183b610a67b3a68e0a67b297d1eea7a88a32f8e2f6e9acecf02cc114dbda0b81d509e5758f59d26dcd7e6bb86fee995eba72a84c9e863cd930db156c0c2def67c59685dfbda7008c832f9d51ad89d3e6155aa88a522036d15e0dc15109b9b0102f9612eb3c916569e8743d88671c81288fd59d1b6bab033964c79ff83cf986c9d86ec86d2056cde26e231ec3ae68f4621c12df66a60f135f41bb06db0830c48bd2723e054b5bba6f9e7dec9a85a1e20de45fad45f24ec32d446aed74ac0085a734b2dff011de4f21e4579b7c983cdb1117c781ac59e667ecb6a4abef5d10a43004743571c0638b8d195252542cd23c35f3c93bcdf3286b659fbe90b63d8dd2e8df148c5bb8a71fdfd1ec8111447f2c2ca263eb0b196b35217128bbac62e1ca66a9476211eb6fb83a59f1b81f3341e8f2f6d73e74581bba0cb0e0aa5181b7cd680e1d2f3539e8144baedb70fa6d31a541c03363a0a850acf2767bbf3bf01c35bae39b3ab0fae8d6f13befc123f498e2699b0ca3bef28ebfde4b2b5cf060cddaf5412bd405aceffafc30be2c7083a6a0a85fb59ffe1375e06a2f9b27b6ab25135f34b494a61eb15011bd0c20d560791612fea3b105743908ec1a1bdc70b21fac88e8bba43f25dfc5680e38f8460533f6776bdf757d48401e29bc51ab680177677202e72d80cc513a2101a6ef31410ff671bb4d4077cd22634288820fc0736863f8c8361d0d1fa368f90ce2a04a8702aca2ae96e60ce35fdb84aec1799c2518dd5948da5b3fa367a8282ad499bcd9b131ff26028245d2fb1cb64896e23f60a8910a1cc7ccba2d9cef580da4939caec3a772841b167735d82b463a0a07df913bebcd7d313dcb645edea75a3913812aa7c4bffdec8e31aaa7d5c72e0d04acfdf01ac76380722308c4fc7d5cb6d3bcdefa1c9567e978728be9b93bc7461a28ae630e664ed5854da523f26399bcecc5407f1b28a9ed3ef6d64582ae2f8e6d2a8f209945a9118eed96e992e1505794439d43483c5e85c70fda29193a3f9e31254f9bfdcee6243ca5d406227c5cdb2549d105d97394d24dd39fefa07bec0881f762158bd8e3f9428bd37791f1b0751c856255664858758c1f4be2c0ad53fa575c4b0cb9d1657e8707eb2281cfec3a3e11d8f039f520da86b5260b446eccd6c3e6dd7de136735b8442a95e8826189afb1f01acee94d34885bfe299027f06ae5ac12a71ac76871066df2e55a7fd22bb2b5c5ebd589e21684c5736a9705fd005d58672f50e6e076ffe69a152d22fc8d61c37fee6e301aea204da3eb2c1bd5df7085574ac522aa2872ea25a903568073840876a53a4de99a2863d9e421668ef48f8dcd17639fec3e4ae39dfad46ce9de0a251c3718a24525cc0717c46b7ee0cad48050178388958328b73efd51559e85c1eb4dbe0345d847622501bb47052077481c06ee4651e3829885c84e0016d881cede26088388a7ca4fec6c4dc63ac1d9cf5dea50ede5f03fca4a1ef114acee64c406c90418425a0dafbcf47f95c4e2187a24f8930724cdc4e5b4306503c5605bc1804e6c3ffac83b3d341650ca110a8185b7e777595b6daf05595634b820f51b6f8e1d3c7245b0d7d1d5a3f09da56ceac5740652c06a1688c97efbedec1ab2469c2af47a4e4347089a5d164be191ac6ab158ce08ff10fd96b5c22672e0adf51e193a7291c1ee635c90e648a85e66f721f17d1b34611120fd77dfa8c7cf970a202da2374a62637db422648d1a57464cb928d9051de48fdb4d47fd94668b404a4d06a270f2e1d9072d0a5176da900ec9ff274cd17ea56733309b3c7841e180a0ef449c24f8a1d1f0b77205ea2179e20ebf5476d1309cde1ac0b9285a067bdb403a1e09311fd3b3cd4cafc8edb084b7a6d17718ff89e106a49ed70cfd57a75a91946d1734552b4072f2a11eb32b6dc285e87b37a2a729cd395d63fb6c9070e6185c4adcdd3edcdee2c570fa17823f8d5f9b91333fe9d9889d99475087cc0d9b690fcbe2040af21377bff41bdfb033d9e81f850902d28eb679ff4dc5f2fece431b5b1ba2729df24c4485f2b4ecb69ad118dbcb2be28d59295f6aca83cba2273092a9d6b669f1be4428a5c2ea4940cccc98677894d1883143d97d9bbd7aba3d53d4ae7ca7c8734efe7afb9aebe9c1816120bad35ded36158c017a1830fb793111824e079ef10bcb8f025b94742199a87074307c12b387978d0f3a9a1000be8d62c018e470aeead2e203e7c8d1ecc6845ca515bb6f20b4a76936f604eec53f05233c68bcc4d602ceb94d07c3d9c7445cc8d1d9b074067ba70ec30b786a6db341464353c7a1402530d1988849d04832ca31c0e7b9352dcb23cc1dad108fec2c2f2df223a15a38572c33964c563ccf1c90efb4e334c3750c2ebfd75d732581e2759434a9a0d37641cd56f1b6346416bd0fd8c4a1120319cbf860fb4adf48e9a5d690ed8869e96754d20a00313f6e736948941b581edd082a5bd4ccf123bdd7355a7f1334926c0f20cb794c74dab1085c4be9bd85064bb0c7834b9530bec05eca6f77803af546efae2479e8926060d859e0283373cb23d2521dec8c793a3c3bf131b290a2d2b45c16ea1542329f282b5704d91be9f2e98e9279ae2f4be45d377807cfaaacb72b61018daf9641477ac9564dcf2264b48d427c6a01eae9433b1aa9c4fdb71575d56ca74c97c53510628be6954f0597ca99d2dd034a9151b1a4d6c40d0b6cdef0ea54017ef119cd75fd3f71e3d6fe693ca0e4195ed0d26e5853937777218321fb6919a04ca1b1797c2750eea4fa7db0e1427ba00f07b355b2a0f487a328340f7def41f5aada256b44f7cb2832362b7ebca8d340dd6fa34881c63a8005b1a4e63b23e7fb3dd393c10d026d0b0e439e983e953f9dd645799939cdb0d69f6644d92778e8a313c8d188e4ab76f89c88524b65d8d348d884e3b3152c03008a73d209293514919645914e63847c08bec91a0937a33d8d59c492ddef1ae268aad8889891ba5ddc91f3aac936ce1eb9d9288a7d0aa461778d8f2aae7142f4fb68cf1d2a02a6990e0b6c5d7e5d65d5c219392e3427295c03345bd26045112018485567ea087983a5bf07315a229e6a5b21b320274d119efc6ab5e71dbc3b3d4594203ebb2e13a3b3d3acd796472098f03f48fb349501e4c0af0fac29e3e9da9235e84e44522167ab71a78ffd26fbd3bfb8640fee44aaba65c1c78736fa3023fb56255accd9f400ff7473bbfa8451e3cb6fba94d8aab02f16ba143007e68ee5e29f43ec3e6cb4d60df4c8fbadfe508ac0af630757dd4144e0040f12b1d1cd504d888910bc35cc2da552d9b6222188964b94a5cbf0e7325f70656337b50c3bb9d787d1feac7546c30906a6386c8ef8762e52685e8ee34281e1282623688995988e31596280c3f95386f076228b0e499bd4249b43e94ed5f9b6fb97e698bb99560774aadc00e884404719768e7188706825f2643f59d3960cfd53ee5216b75a16722acb5fd853af132cac01f62e9886928b14b785f348718f0eb5be951bd262c95dedf75e710901a830577545bd8c6ed06fe13a7f19dd24fe6bf603f940a1fcc0e0ca254200d898ac3957db95fd343aa107d1558e966dbd0e5fd046e1144d18c95aedf3db8f41c3517cb76c8ead2e377d89dd1df3ce80e754e614a81dae4ef2d72ee8e47385461e37eebb2a7b57a89cf58383b407cc65090d0a15f62137e95b099bfc388b0613ce2d9c43f92444b87946c81a256a3c42b5e49a4e7f3f723a3ece159597428607cce695a9f9af0813008d341784a5c75897422b0ad32937b7124a2547f6a56c1e626690fc8ce6491c37a115d08fb313a42611990cab537d8b6bd913fe7bfcd01431729df0fdb789e4d614f09ab449697db426a1bbd6af67708c81fb5b32e1889ae27f9a7a133cf380a724e3961b2b869a6605dd8c29d58bcead8719c54925879261c9bd73285d1cde0c57e194eb4d9011779416ee3ef85239717f35281010bca91071e20ba8dc2934e60809a3e82871912583008c6396719709c9b2722c6145efe893c68ea4a543a921b29092f8d2b7300184f9b643607687cc984ca8de81e1c16508827ed0f0a689cd277956911136b743e5e8b174010bd29d5ce60b0763d6f019c2d9624a2c3ec3c4fe7e799dee1fc74cadeaa5bcab80d5634d16be2740db94853c9505c0f64bc04e5edfca13e68c9f7dd3ccf33342f385d60f28e6ce3b2959672f18404418e27502992b7b5c09e01396129bc41466411e7d64454afc340c63d03b1717de61beb10c60a5969e1b305e93987b3261abf78cd7ae998e721c140adaae1e531a9b5efc36d27a7d04a3f81e9f5e1cacc53e1577f57e82acf3c3a03f24a34018e46d90d8ccfc94ecae04592d391e26a0a0c3ae8bfe43f600025932733955db75d12022e06878aaedf1453f69ee5489ca87e5474069027db6d5f8ab50dc3adbd44c4194b029d46aa13674ee9fcfc4d9c860e53ebe5328146d312152f909bf9d543f22304250273a03ffd5e4be45ffd78180f87b319bf3e762ec22353efe3b68142013531dcbe6d1cac6f4a5e4a290518c26f8e0a6c9e95a18561afa5bcc1a16c61877fa6dcc9e2a4e500b7edf3e027d9780b7522044172ec2bee311acf92bbc94731d7941acb27bc9f0c48da4a5fc45ea411519d1fc31a89b3c0b3a92c523940719abc82f2eec7f284286c03a1c74bacaa79827c9d549d1f57ad5b72a903d4f1a644e23eb8be61837f55d405566c55f17c74cde1d59c757c6ce369e3badd49939dd944456b0e2d9122b89f4997816e1054b5ceecf67813ef41279d8a132acc7b127a4c453974a966803650a22e4f3291acd9e7a06305ffc7ab1f31eff10b1d081a58a1924c75cccfc95a3b2787d094b01eab1b9390b0299676545c5cd510c8d7b27c3a19ce32c85df35a45236c2f7f2ab74969b20b5178faf4ba7b50bed240f227ccd82aecd433fec298cd13d40b4cb8bc7234a97c9b3aa32b127fb97a11764c7c4be7a171fc391cbb1ddaa5e5ae3d1783ff4f2dd8ec270a30acb5912e03b0105e18cd6672fdbfcbc82c8aab8669117c84a0c309f3f57d34e646be0286934b4ffe3890e296301c52eff5ae84d3c", 0x1000) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xeed0b46ffaee1393, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x12010}}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): netlink: 'syz.0.591': attribute type 18 has an invalid length. [ 105.930206][ T8081] veth7: entered allmulticast mode [ 106.103744][ T8088] netlink: 'syz.0.591': attribute type 18 has an invalid length. [ 106.161448][ T8104] sctp: [Deprecated]: syz.4.595 (pid 8104) Use of int in max_burst socket option. [ 106.161448][ T8104] Use struct sctp_assoc_value instead [ 106.178547][ T8099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.238373][ T8099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.246860][ T8099] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 106.266745][ T8099] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 106.476873][ T8126] dvmrp1: left allmulticast mode [ 106.609684][ T8131] syzkaller1: entered promiscuous mode [ 106.615906][ T8131] syzkaller1: entered allmulticast mode [ 106.921358][ T8163] __nla_validate_parse: 48 callbacks suppressed [ 106.921378][ T8163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 106.940277][ T8160] tipc: Started in network mode [ 106.945241][ T8160] tipc: Node identity , cluster identity 4711 [ 106.951405][ T8160] tipc: Failed to obtain node identity [ 106.959293][ T8160] tipc: Enabling of bearer rejected, failed to enable media [ 107.165787][ T8180] tipc: Enabled bearer , priority 0 [ 107.250000][ T8180] tipc: Disabling bearer [ 107.335350][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'. [ 107.540257][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 107.564570][ T8205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.679495][ T8209] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.695750][ T8209] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 107.874266][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 107.888496][ T8223] vlan2: entered allmulticast mode [ 107.894920][ T8223] veth1_vlan: entered allmulticast mode [ 107.952615][ T8226] tipc: Enabled bearer , priority 0 [ 107.976235][ T8226] syzkaller0: entered promiscuous mode [ 107.992551][ T8226] syzkaller0: entered allmulticast mode [ 108.019672][ T8226] tipc: Resetting bearer [ 108.027059][ T8225] tipc: Resetting bearer [ 108.056256][ T8225] tipc: Disabling bearer [ 108.124666][ T8241] netem: unknown loss type 0 [ 108.137200][ T8241] netem: change failed [ 108.252105][ T8246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.642'. [ 108.312804][ T8251] bond3 (unregistering): Released all slaves [ 108.604227][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 109.057883][ T8313] veth1_to_bond: entered allmulticast mode [ 109.084049][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 109.157542][ T8310] veth1_to_bond: left allmulticast mode [ 109.614931][ T8344] netlink: 80 bytes leftover after parsing attributes in process `syz.1.670'. [ 110.053352][ T8365] ip6_tunnel: non-ECT from fc00:0000:006b:0000:0000:0000:0000:0000 with DS=0x5 [ 110.091556][ T8368] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20004 [ 110.233453][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 110.383487][ T8389] validate_nla: 5 callbacks suppressed [ 110.383506][ T8389] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 110.488006][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 110.677787][ T8411] netlink: 'syz.2.689': attribute type 25 has an invalid length. [ 110.721640][ T8377] infiniband syz0: set active [ 110.792561][ T8377] infiniband syz0: added veth0_virt_wifi [ 110.813745][ T8419] 8021q: VLANs not supported on ip6gre0 [ 110.852760][ T8377] RDS/IB: syz0: added [ 110.861958][ T8420] pim6reg: entered allmulticast mode [ 110.867564][ T8377] smc: adding ib device syz0 with port count 1 [ 110.889012][ T8377] smc: ib device syz0 port 1 has pnetid [ 110.903556][ T8420] pim6reg: left allmulticast mode [ 110.928704][ T8428] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.976618][ T8420] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.090635][ T8438] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 111.131305][ T8438] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 111.151916][ T8439] netlink: 'syz.4.699': attribute type 13 has an invalid length. [ 111.424133][ T8462] team0: Device vti0 is of different type [ 111.846353][ T8471] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 111.921250][ T8471] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 111.949599][ T8471] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.985553][ T8476] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 111.995622][ T8473] sctp: [Deprecated]: syz.3.707 (pid 8473) Use of int in maxseg socket option. [ 111.995622][ T8473] Use struct sctp_assoc_value instead [ 112.012603][ T8476] __nla_validate_parse: 5 callbacks suppressed [ 112.012620][ T8476] netlink: 140 bytes leftover after parsing attributes in process `syz.0.708'. [ 112.070704][ T8476] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 112.175767][ T8491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.712'. [ 112.490085][ T8520] netlink: 76 bytes leftover after parsing attributes in process `syz.2.718'. [ 112.561980][ T8529] netlink: 'syz.4.722': attribute type 3 has an invalid length. [ 112.897185][ T8559] openvswitch: netlink: Unknown key attributes 2 [ 112.940723][ T8562] netlink: 'syz.2.733': attribute type 11 has an invalid length. [ 112.962551][ T8562] netlink: 'syz.2.733': attribute type 11 has an invalid length. [ 112.990882][ T8562] netlink: 152 bytes leftover after parsing attributes in process `syz.2.733'. [ 113.145361][ T8575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.206685][ T8582] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 113.324577][ T8589] tipc: Enabled bearer , priority 0 [ 113.350966][ T8589] syzkaller0: entered promiscuous mode [ 113.380836][ T8589] syzkaller0: entered allmulticast mode [ 113.437542][ T8589] tipc: Resetting bearer [ 113.464454][ T8588] tipc: Resetting bearer [ 113.494429][ T8588] tipc: Disabling bearer [ 113.849691][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 113.883179][ T8632] xfrm2: entered promiscuous mode [ 113.896712][ T8632] xfrm2: entered allmulticast mode [ 113.940141][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 113.960098][ T8638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.748'. [ 114.117793][ T8645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.750'. [ 114.315704][ T8656] nbd: must specify at least one socket [ 114.341045][ T8657] nbd: must specify at least one socket [ 114.351116][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 114.408158][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.757'. [ 114.660030][ T8667] tipc: Enabling of bearer rejected, failed to enable media [ 114.933201][ T8710] team0: Device hsr_slave_0 failed to register rx_handler [ 115.084537][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.247887][ T8748] nbd: must specify at least one socket [ 115.264190][ T8742] bond3: (slave bridge4): making interface the new active one [ 115.289783][ T8742] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 115.481784][ T8765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.627092][ T8771] validate_nla: 4 callbacks suppressed [ 115.627110][ T8771] netlink: 'syz.4.780': attribute type 7 has an invalid length. [ 115.650702][ T8771] netlink: 'syz.4.780': attribute type 8 has an invalid length. [ 115.688992][ T8771] gretap0: entered promiscuous mode [ 115.715926][ T8771] batadv_slave_1: entered promiscuous mode [ 115.741620][ T8771] erspan0: entered promiscuous mode [ 115.749442][ T8771] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.817170][ T8780] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 115.894668][ T8796] netlink: 'syz.4.787': attribute type 16 has an invalid length. [ 115.905111][ T8796] netlink: 'syz.4.787': attribute type 17 has an invalid length. [ 116.015732][ T8796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.223008][ T8813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.251201][ T8813] bond_slave_0: left allmulticast mode [ 116.274270][ T8813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.296275][ T8813] bond_slave_1: left allmulticast mode [ 116.324119][ T8813] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 116.335151][ T8813] bridge_slave_1: left allmulticast mode [ 116.348724][ T8813] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 116.357579][ T8813] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 116.370706][ T8813] bond0 (unregistering): Released all slaves [ 116.442471][ T8831] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 116.557410][ T8840] can: request_module (can-proto-0) failed. [ 116.577251][ T8846] lo: entered allmulticast mode [ 116.612022][ T8849] syzkaller1: entered promiscuous mode [ 116.628162][ T8849] syzkaller1: entered allmulticast mode [ 116.699041][ T8858] ipvlan0: entered promiscuous mode [ 116.706115][ T8858] ipvlan0: entered allmulticast mode [ 116.711785][ T8858] veth0_vlan: entered allmulticast mode [ 116.720098][ T8845] lo: left allmulticast mode [ 116.737528][ T8847] "syz.4.798" (8847) uses obsolete ecb(arc4) skcipher [ 116.857830][ T8867] team0: Device gtp0 is of different type [ 116.941473][ T8877] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 117.054060][ T8877] team0: Port device geneve0 added [ 117.178910][ T8884] __nla_validate_parse: 15 callbacks suppressed [ 117.178930][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 117.392075][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 117.516782][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'. [ 117.898232][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.832'. [ 117.931257][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.832'. [ 117.973656][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.832'. [ 117.985646][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.832'. [ 117.998138][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.832'. [ 118.010119][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 118.016487][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.832'. [ 118.154776][ T8966] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20001 [ 118.168674][ T8966] IPVS: sed: FWM 3 0x00000003 - no destination available [ 118.211467][ T8966] bond3: entered allmulticast mode [ 118.249765][ T8966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.271087][ T8966] bridge0: port 3(bond3) entered blocking state [ 118.289595][ T8966] bridge0: port 3(bond3) entered disabled state [ 118.316119][ T8966] bond3: entered promiscuous mode [ 118.352515][ T8987] smc: net device bond0 applied user defined pnetid SYZ2 [ 118.417785][ T8995] netlink: 'syz.1.845': attribute type 5 has an invalid length. [ 118.494403][ T8966] smc: removing net device bond0 with user defined pnetid SYZ2 [ 118.515492][ T8966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.537077][ T8966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.546752][ T8966] bond0 (unregistering): Released all slaves [ 118.560716][ T9000] 8021q: VLANs not supported on wg1 [ 119.023306][ T9047] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 119.197735][ T9060] IPVS: Unknown mcast interface: vcan0 [ 119.535791][ T9097] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 119.603672][ T9097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.612859][ T9097] bond0: (slave bond2): making interface the new active one [ 119.620864][ T9097] bond0: (slave bond2): Enslaving as an active interface with an up link [ 119.634821][ T9097] wg2: Master is either lo or non-ether device [ 120.391020][ T9163] netlink: 'syz.3.896': attribute type 5 has an invalid length. [ 120.440058][ T9164] xfrm1: entered promiscuous mode [ 120.462252][ T9164] xfrm1: entered allmulticast mode [ 120.473764][ T9170] netlink: 'syz.3.896': attribute type 5 has an invalid length. [ 120.506676][ T9163] geneve2: entered promiscuous mode [ 120.512360][ T9163] geneve2: entered allmulticast mode [ 120.521248][ T59] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 120.531926][ T59] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 120.552506][ T59] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 120.581599][ T59] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 120.659496][ T9181] rdma_rxe: rxe_newlink: failed to add lo [ 120.757529][ T9181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.794463][ T9186] netlink: 'syz.4.902': attribute type 21 has an invalid length. [ 120.811806][ T9191] pim6reg527: entered allmulticast mode [ 120.830200][ T9189] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.109181][ T9212] netlink: 'syz.2.906': attribute type 2 has an invalid length. [ 121.390300][ T9243] gretap2: entered promiscuous mode [ 121.568694][ T9254] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 121.666390][ T9265] IPv6: sit1: Disabled Multicast RS [ 121.686512][ T9265] sit1: entered allmulticast mode [ 122.019436][ T9285] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 122.113684][ T9285] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:0 [ 122.210274][ T9306] lo: entered promiscuous mode [ 122.217795][ T9306] netlink: 'syz.4.938': attribute type 2 has an invalid length. [ 122.232239][ T9306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.364499][ T9318] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 122.404211][ T9318] tipc: Enabled bearer , priority 0 [ 122.427895][ T9318] syzkaller0: entered promiscuous mode [ 122.447377][ T9318] syzkaller0: entered allmulticast mode [ 122.493739][ T9329] smc: net device lo erased user defined pnetid SYZ0 [ 122.528335][ T9330] tipc: Resetting bearer [ 122.600642][ T9332] tipc: Enabled bearer , priority 0 [ 122.608544][ T9332] syzkaller0: entered promiscuous mode [ 122.618071][ T9332] syzkaller0: entered allmulticast mode [ 122.628152][ T9332] tipc: Enabling of bearer rejected, media not registered [ 122.656343][ T9332] tipc: Resetting bearer [ 122.682455][ T9331] tipc: Resetting bearer [ 122.734808][ T9331] tipc: Disabling bearer [ 122.855612][ T9347] tipc: Enabled bearer , priority 0 [ 122.864285][ T9347] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 122.871727][ T9347] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 122.901116][ T9347] netlink: 'syz.1.951': attribute type 83 has an invalid length. [ 122.925329][ T9349] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 122.972466][ T9356] __nla_validate_parse: 82 callbacks suppressed [ 122.972485][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 123.000178][ T9358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.954'. [ 123.009597][ T9358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.954'. [ 123.024837][ T9358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.954'. [ 123.034059][ T9358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.954'. [ 123.069528][ T9365] netlink: 'syz.0.956': attribute type 4 has an invalid length. [ 123.077419][ T9365] netlink: 17 bytes leftover after parsing attributes in process `syz.0.956'. [ 123.094157][ T9364] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.957'. [ 123.106912][ T9364] sch_fq: defrate 0 ignored. [ 123.107143][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 123.122928][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 123.230885][ T9317] tipc: Resetting bearer [ 123.255204][ T9317] tipc: Disabling bearer [ 123.264023][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 123.582397][ T5867] Bluetooth: hci0: command 0x0c20 tx timeout [ 123.655402][ T9381] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 123.663928][ T9382] bridge_slave_0: left allmulticast mode [ 123.669594][ T9382] bridge_slave_0: left promiscuous mode [ 123.682452][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.794330][ T9382] bridge_slave_1: left allmulticast mode [ 123.805195][ T9382] bridge_slave_1: left promiscuous mode [ 123.822469][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.852467][ T1211] tipc: Node number set to 3780184996 [ 123.866239][ T9382] team0: Port device team_slave_0 removed [ 123.888452][ T9382] team0: Port device team_slave_1 removed [ 123.898341][ T9382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.904797][ T9392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.918054][ T9382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.934829][ T9382] bond3: left promiscuous mode [ 123.939956][ T9382] bridge0: port 3(bond3) entered disabled state [ 123.949373][ T9381] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 123.956921][ T9394] tipc: New replicast peer: 0.0.0.0 [ 123.976969][ T9394] tipc: Enabled bearer , priority 10 [ 124.007435][ T9394] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 124.299628][ T9429] netlink: 'syz.1.971': attribute type 75 has an invalid length. [ 124.514205][ T9451] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 124.654075][ T9464] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 124.759404][ T9475] netlink: 'syz.2.986': attribute type 18 has an invalid length. [ 124.945389][ T9495] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 124.990490][ T9501] netlink: 'syz.3.995': attribute type 5 has an invalid length. [ 125.022312][ T1211] IPVS: starting estimator thread 0... [ 125.122239][ T9502] IPVS: using max 35 ests per chain, 84000 per kthread [ 125.230248][ T9531] sctp: [Deprecated]: syz.3.1003 (pid 9531) Use of int in max_burst socket option deprecated. [ 125.230248][ T9531] Use struct sctp_assoc_value instead [ 125.417070][ T9547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.556080][ T9561] netlink: 'syz.0.1010': attribute type 7 has an invalid length. [ 125.580483][ T9561] : entered promiscuous mode [ 125.879023][ T9577] tipc: Enabled bearer , priority 0 [ 125.887123][ T9577] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 125.896583][ T9577] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 125.907704][ T9577] tipc: Resetting bearer [ 126.080334][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.555712][ T9571] delete_channel: no stack [ 126.771842][ T9605] veth0: entered promiscuous mode [ 126.784964][ T9600] veth0: left promiscuous mode [ 126.825898][ T9604] syz.4.1024 (9604) used greatest stack depth: 17992 bytes left [ 126.901913][ T9609] syzkaller0: entered promiscuous mode [ 126.908621][ T9609] syzkaller0: entered allmulticast mode [ 126.944103][ T9609] tipc: Enabled bearer , priority 0 [ 126.971491][ T9609] tipc: Resetting bearer [ 126.988357][ T9607] tipc: Resetting bearer [ 127.035073][ T9607] tipc: Disabling bearer [ 127.106818][ T9623] syzkaller0: entered promiscuous mode [ 127.113780][ T9626] netlink: 'syz.3.1031': attribute type 1 has an invalid length. [ 127.130925][ T9623] syzkaller0: entered allmulticast mode [ 127.181126][ T9633] netlink: 'syz.2.1033': attribute type 4 has an invalid length. [ 127.184628][ T9623] bond3: (slave geneve3): making interface the new active one [ 127.196841][ T9623] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 127.207110][ T8716] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 127.231132][ T9634] netlink: 'syz.0.1032': attribute type 2 has an invalid length. [ 127.231769][ T8716] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 127.423930][ T8716] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 127.434984][ T8716] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 127.505817][ T9656] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.326042][ T9728] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 128.368623][ T9732] dvmrp0: entered allmulticast mode [ 128.403289][ T9737] Bluetooth: MGMT ver 1.23 [ 128.704024][ T9766] __nla_validate_parse: 26 callbacks suppressed [ 128.704043][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 128.726974][ T9769] netlink: 'syz.1.1082': attribute type 11 has an invalid length. [ 128.758490][ T9767] tipc: Started in network mode [ 128.772374][ T9767] tipc: Node identity 8a49ee07271d, cluster identity 4711 [ 128.779974][ T9767] tipc: Enabled bearer , priority 0 [ 128.789666][ T9767] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1080'. [ 128.819854][ T9767] syzkaller0: entered promiscuous mode [ 128.839359][ T9767] syzkaller0: entered allmulticast mode [ 128.854816][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 128.867581][ T9777] netlink: 'syz.0.1080': attribute type 3 has an invalid length. [ 128.882258][ T9765] tipc: Resetting bearer [ 128.899381][ T9765] tipc: Disabling bearer [ 128.989500][ T9779] tipc: Enabling of bearer rejected, media not registered [ 129.047465][ T9789] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 129.095222][ T9785] netlink: 'syz.2.1085': attribute type 64 has an invalid length. [ 129.103314][ T9785] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1085'. [ 129.413894][ T9815] netlink: 'syz.2.1092': attribute type 4 has an invalid length. [ 129.421685][ T9815] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1092'. [ 129.430904][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 129.520447][ T9828] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.1100'. [ 129.535910][ T9832] netlink: 'syz.0.1098': attribute type 13 has an invalid length. [ 129.544913][ T9828] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.558971][ T9832] lo: entered promiscuous mode [ 129.567853][ T9832] lo: entered allmulticast mode [ 129.578853][ T9834] netlink: 'syz.4.1101': attribute type 4 has an invalid length. [ 129.593821][ T9832] tunl0: entered promiscuous mode [ 129.609200][ T9832] tunl0: entered allmulticast mode [ 129.646382][ T9832] gre0: entered promiscuous mode [ 129.653398][ T9832] gre0: entered allmulticast mode [ 129.678501][ T9842] netlink: 'syz.4.1104': attribute type 11 has an invalid length. [ 129.683480][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 129.700498][ T9832] gretap0: entered promiscuous mode [ 129.706381][ T9832] gretap0: entered allmulticast mode [ 129.717194][ T9832] gretap0: refused to change device tx_queue_len [ 129.724224][ T9832] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 130.027902][ T9861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1110'. [ 130.126812][ T9869] vcan0: tx drop: invalid da for name 0x0000040000000000 [ 130.208259][ T9880] xt_HMARK: spi-set and port-set can't be combined [ 130.540275][ T9898] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 130.789951][ T9924] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 130.800241][ T9924] pim6reg1: entered promiscuous mode [ 130.805972][ T9924] pim6reg1: entered allmulticast mode [ 130.828033][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 130.837154][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.866936][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.964338][ T9930] syzkaller0: entered promiscuous mode [ 130.969933][ T9930] syzkaller0: entered allmulticast mode [ 131.076844][ T9933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.131892][ T9936] netlink: 'syz.0.1135': attribute type 21 has an invalid length. [ 131.421885][ T9958] netlink: 30 bytes leftover after parsing attributes in process `syz.2.1142'. [ 131.634144][ T9984] 8021q: VLANs not supported on ip6gre0 [ 131.650521][ T8716] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.669175][ T8716] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.688023][ T8716] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.698088][ T8716] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.052096][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.059460][T10022] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.338889][T10044] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 132.718880][T10069] sctp: [Deprecated]: syz.2.1170 (pid 10069) Use of int in maxseg socket option. [ 132.718880][T10069] Use struct sctp_assoc_value instead [ 133.206259][T10097] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.516169][T10111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.591866][T10114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.711868][T10132] tc_dump_action: action bad kind [ 133.843291][T10147] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.855255][T10147] bridge0: port 2(team0) entered disabled state [ 133.861769][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.961390][T10158] __nla_validate_parse: 8 callbacks suppressed [ 133.961408][T10158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1199'. [ 134.261633][T10191] validate_nla: 4 callbacks suppressed [ 134.261652][T10191] netlink: 'syz.4.1206': attribute type 15 has an invalid length. [ 134.277069][T10193] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1206'. [ 134.286440][T10191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1206'. [ 134.381440][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 134.535043][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 134.545526][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 134.587751][T10219] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1211'. [ 134.720810][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'. [ 134.745695][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 134.845643][T10247] xt_limit: Overflow, try lower: 604147548/4200216962 [ 134.860067][T10247] xt_limit: Overflow, try lower: 604147548/4200216962 [ 134.880391][T10253] netlink: 'syz.1.1223': attribute type 23 has an invalid length. [ 134.918420][T10252] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1223'. [ 134.935868][T10259] C: renamed from team_slave_0 (while UP) [ 134.951114][T10259] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 134.961782][T10259] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 135.154661][T10285] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 135.162625][T10285] netlink: 'syz.4.1235': attribute type 2 has an invalid length. [ 135.168027][T10284] batman_adv: batadv0: Adding interface: dummy0 [ 135.180477][T10284] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.187744][T10287] openvswitch: netlink: VXLAN extension 10 out of range max 1 [ 135.209683][T10284] batman_adv: batadv0: Interface activated: dummy0 [ 135.221870][T10285] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 135.240637][T10285] dummy0: entered promiscuous mode [ 135.246901][T10285] dummy0: left promiscuous mode [ 135.452914][T10305] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 135.741425][T10324] tipc: Enabled bearer , priority 10 [ 135.974342][T10349] 8021q: VLANs not supported on wg2 [ 136.007060][T10354] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 136.049080][T10360] netlink: 'syz.3.1260': attribute type 39 has an invalid length. [ 136.088528][T10358] macsec1: entered promiscuous mode [ 136.106352][T10358] bridge0: port 3(macsec1) entered blocking state [ 136.113465][T10358] bridge0: port 3(macsec1) entered disabled state [ 136.120107][T10358] macsec1: entered allmulticast mode [ 136.126947][T10358] macsec1: left allmulticast mode [ 136.139367][T10362] bridge_slave_0: invalid flags given to default FDB implementation [ 136.163509][T10362] vxcan0: entered allmulticast mode [ 136.406422][T10386] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 136.585455][T10402] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 137.210546][T10460] netlink: 'syz.2.1290': attribute type 1 has an invalid length. [ 137.439188][T10479] netlink: 'syz.2.1297': attribute type 4 has an invalid length. [ 137.940140][T10525] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 138.160527][T10543] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 138.189749][T10543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.217765][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.228302][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.256557][T10555] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 138.437207][T10570] openvswitch: netlink: Missing key (keys=40, expected=80) [ 138.847015][T10615] blkio.reset_stats is deprecated [ 138.865350][T10616] tipc: Enabling of bearer rejected, already enabled [ 138.909191][T10616] tipc: Resetting bearer [ 139.061941][T10629] dvmrp1: entered allmulticast mode [ 139.169456][T10643] __nla_validate_parse: 32 callbacks suppressed [ 139.169474][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 139.198951][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 139.214213][T10650] netlink: 'syz.2.1354': attribute type 11 has an invalid length. [ 139.228914][T10650] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1354'. [ 139.250375][T10647] bridge4: port 1(veth3) entered blocking state [ 139.258462][T10647] bridge4: port 1(veth3) entered disabled state [ 139.265662][T10647] veth3: entered allmulticast mode [ 139.273089][T10647] veth3: entered promiscuous mode [ 139.301634][T10654] bridge4: port 2(veth0_to_bond) entered blocking state [ 139.320162][T10654] bridge4: port 2(veth0_to_bond) entered disabled state [ 139.337254][T10654] veth0_to_bond: entered allmulticast mode [ 139.347835][T10654] veth0_to_bond: entered promiscuous mode [ 139.528886][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 139.647829][T10687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1364'. [ 139.862604][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 139.907698][T10698] macsec3: entered promiscuous mode [ 139.923740][T10698] bridge0: entered promiscuous mode [ 140.216752][T10727] pim6reg527: entered allmulticast mode [ 140.230635][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 140.437664][T10746] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 140.464915][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 140.484573][T10741] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1383'. [ 140.524553][T10746] bond3: entered promiscuous mode [ 140.530034][T10746] bond3: entered allmulticast mode [ 140.535957][T10746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.630521][T10771] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1391'. [ 140.657616][T10773] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 140.663514][ T8716] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xf6 [ 140.772766][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 141.312645][T10782] netlink: 'syz.0.1393': attribute type 11 has an invalid length. [ 141.488810][T10800] tipc: New replicast peer: 255.255.255.255 [ 141.529768][T10800] tipc: Enabled bearer , priority 10 [ 141.608472][T10814] tc_dump_action: action bad kind [ 141.628619][T10820] tc_dump_action: action bad kind [ 142.018556][T10854] geneve2: entered promiscuous mode [ 142.036878][T10854] geneve2: entered allmulticast mode [ 142.055547][ T8714] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 142.087625][ T8714] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 142.155121][T10872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.184690][T10872] team0: Port device batadv0 added [ 142.198571][ T8714] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 142.208652][ T8714] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 142.741734][T10897] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 143.159355][T10960] tipc: Enabling of bearer rejected, already enabled [ 143.637056][T10988] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 144.067479][T11039] Illegal XDP return value 4294967274 on prog (id 417) dev N/A, expect packet loss! [ 144.148364][T11049] xt_limit: Overflow, try lower: 271964/0 [ 144.347540][T11062] smc: adding net device bond0 with user defined pnetid SYZ2 [ 144.360776][T11062] bond0: entered promiscuous mode [ 144.366547][T11062] bond0: entered allmulticast mode [ 144.372023][T11062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.381683][T11079] __nla_validate_parse: 20 callbacks suppressed [ 144.381701][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 144.574602][T11096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1486'. [ 144.589310][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 144.602316][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'. [ 144.614072][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'. [ 144.727053][T11109] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.737907][T11109] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 144.972026][T11111] syzkaller1: entered promiscuous mode [ 144.978494][T11111] syzkaller1: entered allmulticast mode [ 145.589490][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 145.603376][T11140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1497'. [ 145.710023][T11149] veth0: entered promiscuous mode [ 145.717697][T11149] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1500'. [ 145.730764][T11148] veth0: left promiscuous mode [ 145.891849][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 145.901349][T11162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1504'. [ 146.041119][T11181] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 146.243728][T11204] validate_nla: 2 callbacks suppressed [ 146.243747][T11204] netlink: 'syz.3.1515': attribute type 1 has an invalid length. [ 146.277765][T11209] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 146.285291][T11209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.513978][T11229] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 146.529039][T11228] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 146.565337][T11232] netlink: 'syz.1.1522': attribute type 7 has an invalid length. [ 146.577360][T11232] : entered promiscuous mode [ 147.142889][T11284] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 147.205064][T11286] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 147.335435][T11302] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 147.340650][T11306] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.360597][T11305] openvswitch: netlink: EtherType 0 is less than min 600 [ 147.386178][T11302] netlink: 'syz.1.1543': attribute type 10 has an invalid length. [ 147.410153][T11302] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 147.435795][T11302] team0: left allmulticast mode [ 147.442108][T11302] team_slave_0: left allmulticast mode [ 147.448199][T11302] team_slave_1: left allmulticast mode [ 147.456263][T11302] geneve0: left allmulticast mode [ 147.464290][T11302] team0: left promiscuous mode [ 147.470555][T11302] team_slave_0: left promiscuous mode [ 147.477804][T11302] team_slave_1: left promiscuous mode [ 147.483782][T11302] geneve0: left promiscuous mode [ 147.489076][T11302] bridge0: port 2(team0) entered disabled state [ 147.497118][T11302] batman_adv: batadv0: Interface deactivated: dummy0 [ 147.504266][T11302] batman_adv: batadv0: Removing interface: dummy0 [ 147.513948][T11302] bridge_slave_0: left allmulticast mode [ 147.519593][T11302] bridge_slave_0: left promiscuous mode [ 147.527642][T11302] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.554940][T11302] veth0_to_bond: left allmulticast mode [ 147.560528][T11302] veth0_to_bond: left promiscuous mode [ 147.584083][T11302] bridge4: port 2(veth0_to_bond) entered disabled state [ 147.620298][T11302] team0: Port device team_slave_0 removed [ 147.636468][T11302] team0: Port device team_slave_1 removed [ 147.643280][T11302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.650686][T11302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.673962][T11302] team0: Port device geneve0 removed [ 147.685807][T11302] vlan1: left promiscuous mode [ 147.690696][T11302] bridge0: left promiscuous mode [ 147.697995][T11302] bridge1: port 1(vlan1) entered disabled state [ 147.708300][T11302] bond0: (slave bond2): Releasing backup interface [ 147.718181][T11302] veth3: left allmulticast mode [ 147.723784][T11302] veth3: left promiscuous mode [ 147.728757][T11302] bridge4: port 1(veth3) entered disabled state [ 147.826529][T11333] tipc: Enabling of bearer rejected, already enabled [ 147.896838][T11338] nbd: illegal input index -8454144 [ 147.904368][T11338] netlink: 'syz.0.1552': attribute type 1 has an invalid length. [ 148.115735][T11360] netlink: 'syz.0.1562': attribute type 21 has an invalid length. [ 148.117271][T11361] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 148.302361][ T30] audit: type=1800 audit(1756460140.832:2): pid=11364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1560" name="memory.events" dev="tmpfs" ino=1688 res=0 errno=0 [ 148.675417][T11401] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 148.686235][T11400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.887759][T11423] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 149.174174][ T5869] Bluetooth: hci0: command 0x0c20 tx timeout [ 149.180289][ T5867] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 149.308921][T11473] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 149.375970][T11473] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.411138][T11482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.422697][T11482] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 149.435881][T11482] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 149.530075][T11473] veth11: entered promiscuous mode [ 149.549467][T11473] bond4: (slave veth11): Enslaving as an active interface with a down link [ 149.604793][T11493] vlan3: entered allmulticast mode [ 149.610102][T11493] bond4: entered allmulticast mode [ 149.650567][T11504] netlink: 'syz.2.1609': attribute type 21 has an invalid length. [ 149.710764][T11512] __nla_validate_parse: 33 callbacks suppressed [ 149.710784][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 149.754781][T11512] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 149.784767][T11512] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 149.803635][T11512] gretap2: entered promiscuous mode [ 149.819107][T11512] gretap2: entered allmulticast mode [ 149.930493][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1614'. [ 149.987411][T11528] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1609'. [ 150.307695][T11558] netlink: 'syz.1.1623': attribute type 4 has an invalid length. [ 150.311384][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 150.495505][T11570] netlink: 'syz.4.1628': attribute type 21 has an invalid length. [ 150.509340][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 150.550569][T11570] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1628'. [ 150.583357][T11570] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1628'. [ 150.596603][T11577] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1631'. [ 150.638896][T11570] 0ªî{X¹¦: renamed from gretap0 [ 150.647978][T11570] 0ªî{X¹¦: entered allmulticast mode [ 150.655831][T11570] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 150.678961][T11577] vlan2: entered allmulticast mode [ 150.686417][T11577] erspan0: entered allmulticast mode [ 150.757055][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 150.978945][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'. [ 150.993811][T11611] veth0_macvtap: left promiscuous mode [ 151.003060][T11611] macvtap0: entered allmulticast mode [ 151.014070][T11611] macvtap0: refused to change device tx_queue_len [ 151.034429][T11618] bridge_slave_1: left allmulticast mode [ 151.040095][T11618] bridge_slave_1: left promiscuous mode [ 151.099433][T11618] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.626933][T11667] validate_nla: 3 callbacks suppressed [ 151.626953][T11667] netlink: 'syz.3.1656': attribute type 5 has an invalid length. [ 152.029734][T11704] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 152.056155][T11704] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 152.465430][T11738] syz.3.1675 uses old SIOCAX25GETINFO [ 152.650587][T11748] netlink: 'syz.3.1680': attribute type 21 has an invalid length. [ 152.989892][T11766] netlink: 'syz.1.1686': attribute type 2 has an invalid length. [ 153.269735][T11794] netlink: 'syz.0.1692': attribute type 1 has an invalid length. [ 153.329751][T11795] netlink: 'syz.0.1692': attribute type 9 has an invalid length. [ 153.383634][T11795] netlink: 'syz.0.1692': attribute type 9 has an invalid length. [ 153.553526][T11805] can: request_module (can-proto-0) failed. [ 153.565628][T11805] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 154.168925][T11838] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.517465][T11856] hsr_slave_1 (unregistering): left promiscuous mode [ 155.156941][T11866] __nla_validate_parse: 18 callbacks suppressed [ 155.156960][T11866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1718'. [ 155.356054][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 155.377212][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 155.379521][T11887] tipc: Enabling of bearer rejected, already enabled [ 155.615690][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1730'. [ 156.141988][T11926] : entered promiscuous mode [ 156.151344][T11926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1738'. [ 156.209590][T11931] netlink: 'syz.3.1740': attribute type 11 has an invalid length. [ 156.258310][T11936] netlink: 'syz.3.1742': attribute type 12 has an invalid length. [ 156.417498][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1746'. [ 156.436371][ T8714] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 156.455135][ T8714] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 156.462937][ T5967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 156.619424][T11970] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 156.688731][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1756'. [ 156.739141][T11977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1756'. [ 156.777472][T11977] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 156.804019][T11977] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 156.870499][T11990] netlink: 'syz.4.1760': attribute type 1 has an invalid length. [ 156.889394][T11990] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1760'. [ 156.907605][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1762'. [ 157.051869][T12012] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 157.093139][T12012] smc: adding net device bond0 with user defined pnetid SYZ2 [ 157.108901][T12012] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.122003][T12012] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 157.134115][T12012] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 157.166199][T12018] ipvlan0: left allmulticast mode [ 157.171321][T12018] veth0_vlan: left allmulticast mode [ 157.179121][T12018] macvtap0: left allmulticast mode [ 157.187356][T12018] ip6gre1: left allmulticast mode [ 157.195648][T12018] vlan1: left allmulticast mode [ 157.200592][T12018] bridge0: left allmulticast mode [ 157.208546][T12018] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 157.218191][T12018] bond3: left allmulticast mode [ 157.228899][T12020] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.242092][T12020] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 157.252976][ T5936] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 157.326272][T12032] syzkaller1: entered promiscuous mode [ 157.331908][T12032] syzkaller1: entered allmulticast mode [ 157.412646][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 157.445743][T12042] tap0: tun_chr_ioctl cmd 1074025677 [ 157.451580][T12042] tap0: linktype set to 65534 [ 157.637102][ T1211] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 157.677914][T12058] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 157.703453][T12060] netlink: 'syz.0.1782': attribute type 1 has an invalid length. [ 157.757224][T12060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.944505][T12082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.001500][T12092] netlink: 'syz.2.1792': attribute type 5 has an invalid length. [ 158.333001][T12140] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 159.255364][T12217] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 159.566368][T12241] gre0: entered promiscuous mode [ 159.571445][T12241] gre0: entered allmulticast mode [ 159.696513][T12253] veth0_to_team: entered promiscuous mode [ 159.703236][T12253] veth0_to_team: entered allmulticast mode [ 159.767368][T12262] netlink: 'syz.4.1850': attribute type 3 has an invalid length. [ 159.775135][T12265] netlink: 'syz.2.1851': attribute type 12 has an invalid length. [ 159.779181][T12262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.788683][T12265] netlink: 'syz.2.1851': attribute type 12 has an invalid length. [ 159.792399][ T8717] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.810553][ T8717] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.838250][ T8717] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.852492][ T8717] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.532328][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 160.838629][T12319] __nla_validate_parse: 19 callbacks suppressed [ 160.838651][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 160.910278][T12328] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1864'. [ 161.043335][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 161.053762][T12342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.057212][T12336] bond5: entered promiscuous mode [ 161.069427][T12336] bond5: entered allmulticast mode [ 161.075438][T12336] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.096397][T12336] bond5 (unregistering): Released all slaves [ 161.255122][T12358] netlink: 'syz.4.1880': attribute type 21 has an invalid length. [ 161.275746][T12358] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1880'. [ 161.627008][T12393] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1886'. [ 161.646848][T12393] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1886'. [ 161.656086][ T1211] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 60 sec [ 161.678501][T12393] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1886'. [ 161.801015][T12413] netlink: 'syz.2.1890': attribute type 8 has an invalid length. [ 161.879308][T12417] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 161.899132][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 161.901167][T12419] tipc: Enabled bearer , priority 0 [ 161.993653][T12418] tipc: Disabling bearer [ 162.125366][ T5867] block nbd1: Receive control failed (result -32) [ 162.215255][T12451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1902'. [ 162.291801][T12457] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1904'. [ 162.809181][T12498] bond1: left promiscuous mode [ 162.820309][T12498] bridge0: port 1(bond1) entered disabled state [ 162.840334][T12498] bond3: (slave bridge4): Releasing active interface [ 162.958465][T12522] sctp: [Deprecated]: syz.3.1924 (pid 12522) Use of int in max_burst socket option deprecated. [ 162.958465][T12522] Use struct sctp_assoc_value instead [ 163.088616][T12535] C: renamed from lo [ 163.106263][T12535] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 163.229879][T12548] tipc: Enabled bearer , priority 0 [ 163.278197][T12545] tipc: Disabling bearer [ 163.346773][T12555] syzkaller1: entered allmulticast mode [ 163.368933][T12564] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 163.467721][T12580] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 163.558437][T12587] batman_adv: batadv0: adding TT local entry 56:8e:46:0a:c0:9b to non-existent VLAN 2621 [ 163.570394][T12589] netlink: 'syz.2.1948': attribute type 3 has an invalid length. [ 163.667805][T12592] netlink: 'syz.3.1950': attribute type 1 has an invalid length. [ 163.698223][T12592] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.938815][T12627] netlink: 'syz.3.1961': attribute type 7 has an invalid length. [ 163.973535][T12637] netlink: 'syz.3.1961': attribute type 7 has an invalid length. [ 164.001127][T12639] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 164.009112][T12639] netlink: 'syz.0.1964': attribute type 10 has an invalid length. [ 164.019287][T12639] netlink: 'syz.0.1964': attribute type 4 has an invalid length. [ 164.076340][T12642] syzkaller1: entered promiscuous mode [ 164.081867][T12642] syzkaller1: entered allmulticast mode [ 164.104663][T12647] bond2: entered promiscuous mode [ 164.109707][T12647] bond2: entered allmulticast mode [ 164.115388][T12647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.122980][T12648] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 164.233023][T12648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.253497][T12656] 8021q: VLANs not supported on wg1 [ 164.459775][T12678] bond0: Error: Cannot enslave bond to itself. [ 168.932284][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.212352][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 196.614037][T12682] Bluetooth: hci1: command 0x0406 tx timeout [ 196.614681][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 196.614860][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 196.620713][ T5869] Bluetooth: hci0: command 0x0c20 tx timeout [ 199.655706][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.662022][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.852332][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 219.468761][T12686] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 219.477755][T12686] __nla_validate_parse: 20 callbacks suppressed [ 219.477772][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1980'. [ 219.506982][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1979'. [ 219.517631][T12686] ipvlan1: entered promiscuous mode [ 219.532273][T12686] ipvlan1: entered allmulticast mode [ 219.546415][T12686] veth0_vlan: entered allmulticast mode [ 219.556899][T12686] bridge0: port 1(ipvlan1) entered blocking state [ 219.563611][T12686] bridge0: port 1(ipvlan1) entered disabled state [ 219.641000][T12686] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 219.650447][T12702] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 219.676002][T12707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1988'. [ 219.695132][T12708] ip6erspan0: mtu less than device minimum [ 219.715094][T12707] syzkaller1: entered promiscuous mode [ 219.722322][T10927] : Port: 1 Link ACTIVE [ 219.732703][T12707] syzkaller1: entered allmulticast mode [ 219.775728][T12707] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 219.783619][T12707] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1988'. [ 219.806296][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 219.816223][T12714] netlink: 'syz.2.1991': attribute type 10 has an invalid length. [ 219.824631][T12714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1991'. [ 219.824801][T12710] tipc: Enabled bearer , priority 0 [ 219.857775][T12714] team0: Port device geneve0 added [ 219.866422][T12395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.890069][T12398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.903493][T12398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.936802][T12709] tipc: Disabling bearer [ 219.956721][T12392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.051410][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 220.125826][T12744] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 220.136273][T12744] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2001'. [ 220.144881][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 220.282420][ T5936] syzkaller1: tun_net_xmit 90 [ 220.351701][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 220.688679][T12780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.786616][T12788] bridge0: left promiscuous mode [ 220.832524][T12398] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.841151][T12398] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.882095][T12398] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 220.891618][T12398] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.925435][T12398] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.943009][T12398] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 220.955178][T12398] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.963994][T12398] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.984189][T12398] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 221.032057][T12392] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.056496][T12392] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.075341][T12392] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 221.135392][T12831] gretap0: entered promiscuous mode [ 221.145509][T12831] 0ªî{X¹¦: renamed from gretap0 [ 221.157709][T12831] 0ªî{X¹¦: left promiscuous mode [ 221.164101][T12831] 0ªî{X¹¦: entered allmulticast mode [ 221.171366][T12831] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 221.196414][T12834] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 221.218600][T12834] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 221.356171][T12845] syz.1.2030: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 221.378994][T12845] CPU: 1 UID: 0 PID: 12845 Comm: syz.1.2030 Not tainted syzkaller #0 PREEMPT(full) [ 221.379021][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.379034][T12845] Call Trace: [ 221.379041][T12845] [ 221.379049][T12845] dump_stack_lvl+0x189/0x250 [ 221.379088][T12845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.379112][T12845] ? __pfx__printk+0x10/0x10 [ 221.379137][T12845] ? lock_release+0x4b/0x3e0 [ 221.379167][T12845] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 221.379191][T12845] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 221.379215][T12845] warn_alloc+0x214/0x310 [ 221.379248][T12845] ? __pfx_warn_alloc+0x10/0x10 [ 221.379281][T12845] ? __get_vm_area_node+0x28f/0x300 [ 221.379308][T12845] ? nf_tables_newset+0x132b/0x2530 [ 221.379331][T12845] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 221.379359][T12845] ? unwind_get_return_address+0x4d/0x90 [ 221.379393][T12845] ? alloc_pages_mpol+0x3cd/0x4a0 [ 221.379421][T12845] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.379452][T12845] ? rcu_is_watching+0x15/0xb0 [ 221.379471][T12845] ? nf_tables_newset+0x132b/0x2530 [ 221.379501][T12845] ? nf_tables_newset+0x132b/0x2530 [ 221.379520][T12845] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 221.379547][T12845] ? nf_tables_newset+0x132b/0x2530 [ 221.379566][T12845] ? nft_table_lookup+0x211/0x230 [ 221.379587][T12845] ? nft_set_lookup+0x128/0x150 [ 221.379609][T12845] ? nft_hash_privsize+0xaf/0xf0 [ 221.379639][T12845] nf_tables_newset+0x132b/0x2530 [ 221.379667][T12845] ? __pfx_nf_tables_newset+0x10/0x10 [ 221.379690][T12845] ? nfnl_pernet+0x23/0x240 [ 221.379712][T12845] ? rcu_is_watching+0x15/0xb0 [ 221.379733][T12845] ? lock_release+0x4b/0x3e0 [ 221.379763][T12845] ? __nla_parse+0x40/0x60 [ 221.379794][T12845] nfnetlink_rcv+0x1132/0x2520 [ 221.379842][T12845] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 221.379875][T12845] ? ref_tracker_free+0x63a/0x7d0 [ 221.379917][T12845] ? __netlink_deliver_tap+0x807/0x850 [ 221.379946][T12845] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.379975][T12845] ? lock_release+0x4b/0x3e0 [ 221.380008][T12845] netlink_unicast+0x82c/0x9e0 [ 221.380037][T12845] ? __pfx_netlink_unicast+0x10/0x10 [ 221.380063][T12845] ? netlink_sendmsg+0x642/0xb30 [ 221.380108][T12845] ? skb_put+0x11b/0x210 [ 221.380128][T12845] netlink_sendmsg+0x805/0xb30 [ 221.380164][T12845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.380195][T12845] ? futex_unqueue+0x22/0x240 [ 221.380217][T12845] ? aa_sock_msg_perm+0xf1/0x1d0 [ 221.380236][T12845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.380258][T12845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.380287][T12845] __sock_sendmsg+0x21c/0x270 [ 221.380315][T12845] ____sys_sendmsg+0x505/0x830 [ 221.380339][T12845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.380365][T12845] ? import_iovec+0x74/0xa0 [ 221.380390][T12845] ___sys_sendmsg+0x21f/0x2a0 [ 221.380412][T12845] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.380436][T12845] ? futex_wait+0x285/0x360 [ 221.380480][T12845] ? __fget_files+0x2a/0x420 [ 221.380510][T12845] ? __fget_files+0x3a0/0x420 [ 221.380546][T12845] __x64_sys_sendmsg+0x19b/0x260 [ 221.380568][T12845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.380600][T12845] ? rcu_is_watching+0x15/0xb0 [ 221.380621][T12845] do_syscall_64+0xfa/0x3b0 [ 221.380661][T12845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.380681][T12845] ? clear_bhb_loop+0x60/0xb0 [ 221.380703][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.380724][T12845] RIP: 0033:0x7fc552d8ebe9 [ 221.380750][T12845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.380768][T12845] RSP: 002b:00007fc550ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.380790][T12845] RAX: ffffffffffffffda RBX: 00007fc552fb5fa0 RCX: 00007fc552d8ebe9 [ 221.380823][T12845] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 221.380835][T12845] RBP: 00007fc552e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 221.380849][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.380861][T12845] R13: 00007fc552fb6038 R14: 00007fc552fb5fa0 R15: 00007fffa528cc98 [ 221.380886][T12845] [ 221.380898][T12845] Mem-Info: [ 221.805953][T12845] active_anon:11757 inactive_anon:0 isolated_anon:0 [ 221.805953][T12845] active_file:2440 inactive_file:39864 isolated_file:0 [ 221.805953][T12845] unevictable:768 dirty:40 writeback:0 [ 221.805953][T12845] slab_reclaimable:11476 slab_unreclaimable:165870 [ 221.805953][T12845] mapped:28859 shmem:1361 pagetables:1128 [ 221.805953][T12845] sec_pagetables:0 bounce:0 [ 221.805953][T12845] kernel_misc_reclaimable:0 [ 221.805953][T12845] free:1247994 free_pcp:15440 free_cma:0 [ 221.852446][T12845] Node 0 active_anon:47028kB inactive_anon:0kB active_file:9760kB inactive_file:159260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115436kB dirty:160kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13376kB pagetables:4476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.884956][T12845] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.918455][T12845] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.948479][T12845] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 221.955924][T12845] Node 0 DMA32 free:1085224kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46980kB inactive_anon:0kB active_file:9760kB inactive_file:157692kB unevictable:1536kB writepending:160kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:42992kB local_pcp:20112kB free_cma:0kB [ 221.991523][T12845] lowmem_reserve[]: 0 0 1 1 1 [ 221.998505][T12845] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 222.041380][T12877] syzkaller1: entered promiscuous mode [ 222.050045][T12877] syzkaller1: entered allmulticast mode [ 222.064901][T12845] lowmem_reserve[]: 0 0 0 0 0 [ 222.069667][T12845] Node 1 Normal free:3891380kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20224kB local_pcp:5760kB free_cma:0kB [ 222.106849][T12845] lowmem_reserve[]: 0 0 0 0 0 [ 222.111639][T12845] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.130788][T12845] Node 0 DMA32: 93*4kB (ME) 34*8kB (ME) 68*16kB (ME) 317*32kB (UME) 42*64kB (UME) 31*128kB (UME) 73*256kB (UME) 41*512kB (UM) 19*1024kB (UE) 10*2048kB (UM) 241*4096kB (UM) = 1085284kB [ 222.149954][T12845] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 222.163600][T12845] Node 1 Normal: 195*4kB (UME) 61*8kB (UME) 44*16kB (UME) 84*32kB (UME) 34*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891380kB [ 222.181922][T12845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.191637][T12845] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.201388][T12845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.201411][T12845] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.201428][T12845] 43662 total pagecache pages [ 222.201448][T12845] 0 pages in swap cache [ 222.201456][T12845] Free swap = 124996kB [ 222.201465][T12845] Total swap = 124996kB [ 222.201476][T12845] 2097051 pages RAM [ 222.201484][T12845] 0 pages HighMem/MovableOnly [ 222.201491][T12845] 425661 pages reserved [ 222.201500][T12845] 0 pages cma reserved [ 222.635514][ T5936] IPVS: starting estimator thread 0... [ 222.715472][T12925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.727264][T12922] veth0: entered promiscuous mode [ 222.734567][T12919] IPVS: using max 35 ests per chain, 84000 per kthread [ 222.778803][T12922] veth0: left promiscuous mode [ 222.951546][T12956] netlink: 'syz.2.2062': attribute type 1 has an invalid length. [ 222.991587][T12956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.052011][T12970] netlink: 'syz.3.2066': attribute type 11 has an invalid length. [ 223.089285][T12969] netlink: 'syz.1.2065': attribute type 4 has an invalid length. [ 223.182088][T12967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.196439][T12980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.287653][T12992] tipc: Enabled bearer , priority 0 [ 223.320255][T12992] syzkaller0: entered promiscuous mode [ 223.329186][T12992] syzkaller0: entered allmulticast mode [ 223.360257][T12992] tipc: Resetting bearer [ 223.378440][T12987] tipc: Resetting bearer [ 223.397497][T12987] tipc: Disabling bearer [ 223.499585][T13007] veth0: entered promiscuous mode [ 223.532458][T13012] veth0: left promiscuous mode [ 223.542520][T13010] tc_dump_action: action bad kind [ 223.568150][T13019] gretap0: left allmulticast mode [ 223.652822][T13026] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 223.784182][T13024] tipc: Resetting bearer [ 224.208417][T13064] gtp1: entered promiscuous mode [ 224.214963][T13066] tipc: Enabled bearer , priority 10 [ 224.347503][T13071] tipc: Enabled bearer , priority 0 [ 224.395538][T13070] tipc: Resetting bearer [ 224.396670][T13082] netlink: 'syz.3.2098': attribute type 12 has an invalid length. [ 224.478534][T13070] tipc: Disabling bearer [ 224.579502][T13096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.644793][T13101] netlink: 'syz.2.2105': attribute type 7 has an invalid length. [ 224.685887][T13105] syzkaller1: entered promiscuous mode [ 224.691473][T13105] syzkaller1: entered allmulticast mode [ 224.769226][T13107] syzkaller0: entered promiscuous mode [ 224.777751][T13107] syzkaller0: entered allmulticast mode [ 224.898866][T13121] __nla_validate_parse: 27 callbacks suppressed [ 224.898884][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 224.983596][T13125] netlink: 'syz.1.2113': attribute type 1 has an invalid length. [ 225.076337][T13125] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.091733][T13131] bond7: (slave gretap0): making interface the new active one [ 225.114422][T13131] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 225.332536][ T5936] tipc: Node number set to 3055837978 [ 225.406297][T13160] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 225.681587][T13170] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 225.900591][T13195] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2134'. [ 225.965006][T13199] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 226.141404][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 226.155622][T13218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2142'. [ 226.220590][T13223] netlink: 1152 bytes leftover after parsing attributes in process `syz.4.2143'. [ 226.237029][T13225] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 226.356065][T13235] netlink: 'syz.0.2148': attribute type 1 has an invalid length. [ 226.390241][T13235] bond5: (slave geneve3): making interface the new active one [ 226.399157][T13235] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 226.409103][T12398] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 226.420576][T12398] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 226.442802][T12398] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 226.461178][T12398] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 226.513602][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'. [ 226.524973][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 226.534390][T13246] netlink: 'syz.0.2151': attribute type 14 has an invalid length. [ 226.542495][T13246] netlink: 'syz.0.2151': attribute type 13 has an invalid length. [ 226.555742][T13248] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.851730][T13266] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2157'. [ 226.914777][T13213] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 227.027848][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 227.072713][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.124904][T13289] syzkaller0: entered promiscuous mode [ 227.136098][T13289] syzkaller0: entered allmulticast mode [ 227.170849][T13296] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 227.181123][T13296] netlink: 784 bytes leftover after parsing attributes in process `syz.3.2166'. [ 227.246279][T13302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.517912][T13324] unknown channel width for channel at 909000KHz? [ 227.527096][T13324] unknown channel width for channel at 909000KHz? [ 227.761616][T13349] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 227.889254][T13360] geneve4: entered promiscuous mode [ 227.897747][T13360] geneve4: entered allmulticast mode [ 228.000690][T13362] batadv_slave_1: entered promiscuous mode [ 228.032648][T13372] netlink: 'syz.1.2192': attribute type 4 has an invalid length. [ 228.054675][T13361] batadv_slave_1: left promiscuous mode [ 228.134424][ T5869] Bluetooth: hci0: command 0x0c20 tx timeout [ 228.357772][T13402] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 228.422480][T13406] tap0: tun_chr_ioctl cmd 1074025677 [ 228.428055][T13406] tap0: linktype set to 65534 [ 228.464220][T13408] syzkaller0: entered promiscuous mode [ 228.469762][T13408] syzkaller0: entered allmulticast mode [ 229.037534][T13415] netlink: 'syz.1.2210': attribute type 11 has an invalid length. [ 229.105481][T13423] bridge0: port 1(syz_tun) entered blocking state [ 229.116886][T13423] bridge0: port 1(syz_tun) entered disabled state [ 229.129484][T13423] syz_tun: entered allmulticast mode [ 229.140374][T13423] syz_tun: entered promiscuous mode [ 229.247048][T13438] netlink: 'syz.4.2216': attribute type 2 has an invalid length. [ 229.331463][T13437] delete_channel: no stack [ 229.433635][T13449] tipc: Enabled bearer , priority 0 [ 229.454287][T13449] syzkaller0: entered promiscuous mode [ 229.459787][T13449] syzkaller0: entered allmulticast mode [ 229.493138][T13449] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 229.531068][T13449] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 229.581501][T13449] tipc: Resetting bearer [ 229.618240][T13448] tipc: Resetting bearer [ 229.702234][T13448] tipc: Disabling bearer [ 229.729303][T13478] netlink: 'syz.3.2228': attribute type 33 has an invalid length. [ 229.771806][T13478] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 229.824809][T13488] netlink: 'syz.1.2230': attribute type 13 has an invalid length. [ 229.962977][T13498] __nla_validate_parse: 20 callbacks suppressed [ 229.962996][T13498] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2233'. [ 229.985980][T13498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2233'. [ 230.047871][T13488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.198876][T13516] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 230.257128][T13516] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.296711][T13516] veth9: entered promiscuous mode [ 230.618481][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'. [ 230.905327][T13566] netlink: 808 bytes leftover after parsing attributes in process `syz.4.2253'. [ 231.630777][T13602] netlink: 'syz.2.2265': attribute type 2 has an invalid length. [ 231.640339][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 231.670268][T13602] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 231.682391][T13602] bond6: (slave vcan0): Error -95 calling set_mac_address [ 232.095333][T13627] syzkaller1: entered promiscuous mode [ 232.100907][T13627] syzkaller1: entered allmulticast mode [ 232.416413][T13636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2276'. [ 232.467621][T13649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2280'. [ 232.499362][T13651] netlink: 'syz.4.2281': attribute type 4 has an invalid length. [ 232.805719][T13681] netlink: 'syz.4.2291': attribute type 17 has an invalid length. [ 232.816348][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'. [ 232.831642][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'. [ 232.848508][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 233.476718][T13740] netlink: 'syz.3.2306': attribute type 4 has an invalid length. [ 233.520764][T13740] `: renamed from bond0 (while UP) [ 233.626122][T13746] netlink: 'syz.2.2309': attribute type 2 has an invalid length. [ 233.646596][T13746] RDS: rds_bind could not find a transport for fe80::32, load rds_tcp or rds_rdma? [ 233.825800][T13773] sctp: [Deprecated]: syz.3.2317 (pid 13773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.825800][T13773] Use struct sctp_sack_info instead [ 233.882251][T13778] netlink: 'syz.2.2319': attribute type 21 has an invalid length. [ 234.099369][T13796] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 234.113572][T13796] bond7: (slave vcan0): Error -95 calling set_mac_address [ 234.502693][T13847] batadv1: entered promiscuous mode [ 234.517425][T13845] tipc: Enabled bearer , priority 0 [ 234.534468][T13845] syzkaller0: entered promiscuous mode [ 234.540212][T13845] syzkaller0: entered allmulticast mode [ 234.563605][T13845] tipc: Resetting bearer [ 234.576844][T13844] tipc: Resetting bearer [ 234.600844][T13844] tipc: Disabling bearer [ 234.637595][T13852] bridge_slave_0: left allmulticast mode [ 234.643715][T13852] bridge_slave_0: left promiscuous mode [ 234.649506][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.395357][T13894] __nla_validate_parse: 15 callbacks suppressed [ 235.395380][T13894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2361'. [ 235.610019][T13908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.613252][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 235.667717][T13911] syzkaller0: entered promiscuous mode [ 235.673312][T13911] syzkaller0: entered allmulticast mode [ 235.739788][T13913] IPVS: length: 8 != 1152 [ 235.849674][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'. [ 235.868019][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2370'. [ 235.904398][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 235.926212][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 236.002078][T13939] veth5: entered promiscuous mode [ 236.007418][T13939] veth5: entered allmulticast mode [ 236.077960][T13946] tipc: Enabled bearer , priority 0 [ 236.089020][T13946] syzkaller0: entered promiscuous mode [ 236.096689][T13946] syzkaller0: entered allmulticast mode [ 236.126999][T13946] tipc: Resetting bearer [ 236.192008][T13945] tipc: Resetting bearer [ 236.199234][T13957] openvswitch: netlink: IPv4 tun info is not correct [ 236.227047][T13945] tipc: Disabling bearer [ 236.339209][T13969] validate_nla: 4 callbacks suppressed [ 236.339244][T13969] netlink: 'syz.3.2385': attribute type 4 has an invalid length. [ 236.365527][T13971] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 236.657572][T13996] netlink: 'syz.3.2392': attribute type 1 has an invalid length. [ 236.691713][T13996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2392'. [ 236.710975][T13996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2392'. [ 236.828556][T14002] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2395'. [ 236.854571][T14003] netlink: 'syz.2.2394': attribute type 10 has an invalid length. [ 236.921753][T14002] smc: removing net device bond0 with user defined pnetid SYZ2 [ 236.934924][T14007] netlink: 'syz.2.2394': attribute type 10 has an invalid length. [ 236.934957][T14002] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.966777][T14002] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.989857][T14002] ` (unregistering): Released all slaves [ 237.006438][T14008] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2394'. [ 237.016527][T14007] syz_tun: left allmulticast mode [ 237.021583][T14007] syz_tun: left promiscuous mode [ 237.027058][T14007] bridge0: port 1(syz_tun) entered disabled state [ 237.041406][T14008] gretap0: entered promiscuous mode [ 237.088009][T14010] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000 [ 237.109099][T14010] tipc: Enabling of bearer rejected, already enabled [ 237.158084][T14012] netlink: 'syz.2.2397': attribute type 18 has an invalid length. [ 237.185455][T14012] netlink: 'syz.2.2397': attribute type 18 has an invalid length. [ 237.343201][T14022] veth0_to_bridge: entered promiscuous mode [ 237.360593][T14019] veth0_to_bridge: left promiscuous mode [ 237.446245][T14035] netlink: 'syz.0.2404': attribute type 11 has an invalid length. [ 237.472231][T14035] netlink: 'syz.0.2404': attribute type 11 has an invalid length. [ 237.594159][T14048] !€ÿ: renamed from bond_slave_0 [ 237.710201][T14052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.735541][T14063] syz_tun: entered allmulticast mode [ 237.747919][T14063] syz_tun: left allmulticast mode [ 238.692851][T14153] netlink: 'syz.1.2440': attribute type 14 has an invalid length. [ 238.717508][T14153] netlink: 'syz.1.2440': attribute type 13 has an invalid length. [ 239.174838][T14217] netlink: 'syz.2.2458': attribute type 12 has an invalid length. [ 239.184815][T14217] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 239.340037][T14226] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.604938][T14297] __nla_validate_parse: 30 callbacks suppressed [ 240.604957][T14297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2482'. [ 240.658036][T14297] macvlan0: entered promiscuous mode [ 240.725380][T14307] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2485'. [ 240.740941][T14307] NCSI netlink: No device for ifindex 0 [ 240.761125][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2485'. [ 240.770515][T14307] openvswitch: netlink: Flow actions attr not present in new flow. [ 240.790466][T14314] netlink: 3436 bytes leftover after parsing attributes in process `syz.3.2488'. [ 240.926692][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 240.937050][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 240.946580][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 240.956656][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 240.966424][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 240.975807][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 242.011738][T14371] team0: Device ip6gre2 is of different type [ 242.531497][T14426] team0: Device vti0 is up. Set it down before adding it as a team port [ 242.582563][T14437] validate_nla: 7 callbacks suppressed [ 242.582583][T14437] netlink: 'syz.3.2522': attribute type 24 has an invalid length. [ 243.250280][T14470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.346799][T14429] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 243.364875][T14477] tipc: Enabled bearer , priority 0 [ 243.528090][T14479] tipc: Disabling bearer [ 243.779390][T14515] netlink: 'syz.0.2543': attribute type 32 has an invalid length. [ 243.792986][T14518] tun0: tun_chr_ioctl cmd 1074025675 [ 243.808889][T14518] tun0: persist disabled [ 243.824205][T14518] tun0: tun_chr_ioctl cmd 1074025675 [ 243.834428][T14518] tun0: persist enabled [ 243.859540][T14526] tun0: tun_chr_ioctl cmd 1074025673 [ 244.000642][T14539] pim6reg1: entered promiscuous mode [ 244.031960][T14539] pim6reg1: entered allmulticast mode [ 244.121502][T14551] netlink: 'syz.3.2548': attribute type 2 has an invalid length. [ 244.368118][T14576] netlink: 'syz.2.2564': attribute type 10 has an invalid length. [ 244.386232][T14579] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 244.404967][T14576] netlink: 'syz.2.2564': attribute type 10 has an invalid length. [ 244.491128][T14576] 8021q: adding VLAN 0 to HW filter on device bond11 [ 244.509875][T14592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.532830][ T5869] Bluetooth: hci0: command 0x0c20 tx timeout [ 244.587356][T14591] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 244.634855][T14591] bond11: (slave macvlan3): Enslaving as a backup interface with a down link [ 244.704132][T14605] netlink: 'syz.4.2570': attribute type 10 has an invalid length. [ 244.737893][T14610] veth0: entered promiscuous mode [ 244.752993][T14607] netlink: 'syz.4.2570': attribute type 10 has an invalid length. [ 244.753720][T14605] team0: Device hsr_slave_0 failed to register rx_handler [ 244.788485][T14609] veth0: left promiscuous mode [ 244.805445][T14607] team0: Device hsr_slave_0 failed to register rx_handler [ 244.891085][T14620] bridge_slave_0: left allmulticast mode [ 244.897483][T14620] bridge_slave_0: left promiscuous mode [ 244.904182][T14620] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.919877][T14620] bridge_slave_1: left allmulticast mode [ 244.926727][T14620] bridge_slave_1: left promiscuous mode [ 244.939990][T14620] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.971349][T14620] team0: Port device team_slave_0 removed [ 245.024467][T14620] team0: Port device team_slave_1 removed [ 245.047954][T14620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.061671][T14620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.075618][T14620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.086646][T14620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.107281][T14620] bond1: (slave veth3): Releasing active interface [ 245.128977][T14620] bond3: (slave geneve3): Releasing active interface [ 245.152881][T14620] bond4: (slave veth11): Releasing active interface [ 245.187644][T12387] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 245.208607][T12387] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 245.234125][T12387] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 245.259986][T12387] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 245.803019][T14663] __nla_validate_parse: 88 callbacks suppressed [ 245.803039][T14663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2587'. [ 245.838533][T14663] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2587'. [ 246.026896][T14677] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 246.050130][T14681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2592'. [ 246.060686][T14677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.078609][T14677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.089662][T14677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 246.159078][T14686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.185513][T14688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2594'. [ 246.234898][T14677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.252440][T14677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.292756][T14677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 246.329793][T14699] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2596'. [ 246.407486][T14677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.437401][T14677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.456839][T14677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 246.518444][T14677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.536235][T14677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.608775][T14677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 246.654890][T14716] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 246.738194][T12387] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.748467][T12387] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 246.760108][T12387] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.805985][T12387] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.817052][T12387] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 246.827794][T12387] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.867234][T14729] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2607'. [ 246.873488][T12387] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.887730][T12387] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 246.897441][T12387] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.909137][T12387] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.917849][T12387] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 246.929523][T12387] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 247.047329][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'. [ 247.116180][T14745] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 247.159646][T14745] netlink: 'syz.1.2611': attribute type 3 has an invalid length. [ 247.165279][T14751] pim6reg1: entered promiscuous mode [ 247.189859][T14745] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2611'. [ 247.196512][T14751] pim6reg1: entered allmulticast mode [ 247.203091][T14755] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2613'. [ 247.218887][T14755] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2613'. [ 247.234783][T14745] NCSI netlink: No device for ifindex 813332851 [ 247.480194][T14766] netlink: 'syz.4.2617': attribute type 1 has an invalid length. [ 247.913170][T14819] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 248.014196][T14825] pim6reg1: entered promiscuous mode [ 248.029648][T14825] pim6reg1: entered allmulticast mode [ 248.162325][T14837] validate_nla: 1 callbacks suppressed [ 248.162345][T14837] netlink: 'syz.2.2644': attribute type 11 has an invalid length. [ 248.209769][T14837] team0: Port device geneve0 removed [ 248.218826][T14837] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 248.235123][ T8714] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.248184][ T8714] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.257783][ T8714] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.301472][ T8714] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.327529][T14846] openvswitch: netlink: Flow key attr not present in new flow. [ 248.618595][T14870] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 248.628594][T14871] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 248.723914][T14875] bond10: (slave bridge9): making interface the new active one [ 248.738335][T14875] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 248.748804][T14886] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 248.769062][T14886] 0ªî{X¹¦: entered allmulticast mode [ 248.792277][T14886] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 248.827573][T14895] tipc: Enabling of bearer rejected, media not registered [ 248.849357][T14896] netlink: 'syz.0.2664': attribute type 7 has an invalid length. [ 249.017483][T14908] tipc: Enabled bearer , priority 0 [ 249.300733][T14908] syzkaller0: entered promiscuous mode [ 249.306303][T14908] syzkaller0: entered allmulticast mode [ 249.399022][T14920] pim6reg1: entered promiscuous mode [ 249.405439][T14920] pim6reg1: entered allmulticast mode [ 249.419178][T14927] tipc: Resetting bearer [ 249.475175][T14905] tipc: Resetting bearer [ 249.485714][T14905] tipc: Disabling bearer [ 249.536287][T14932] netlink: 'syz.1.2672': attribute type 12 has an invalid length. [ 249.549206][T14932] netlink: 'syz.1.2672': attribute type 12 has an invalid length. [ 249.569223][T14932] netlink: 'syz.1.2672': attribute type 12 has an invalid length. [ 249.589094][T14932] netlink: 'syz.1.2672': attribute type 12 has an invalid length. [ 249.598177][T14932] netlink: 'syz.1.2672': attribute type 12 has an invalid length. [ 249.603136][T14937] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 249.607726][T14932] netlink: 'syz.1.2672': attribute type 12 has an invalid length. [ 250.278955][ T959] syz0: Port: 1 Link DOWN [ 250.283658][T10928] : Port: 1 Link DOWN [ 250.288106][ T8714] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.308652][ T8714] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.335687][ T8714] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.379995][ T8714] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.412697][ T8714] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.421782][ T8714] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.454810][T14983] tap0: tun_chr_ioctl cmd 1074025677 [ 250.463645][T14983] tap0: linktype set to 65534 [ 250.491954][ T8714] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.501641][ T8714] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.528228][T14983] tap0: tun_chr_ioctl cmd 1074025676 [ 250.693291][T14995] bridge_slave_0: entered promiscuous mode [ 250.733146][T15007] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 250.846170][T15018] __nla_validate_parse: 48 callbacks suppressed [ 250.846193][T15018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2692'. [ 250.889446][T15020] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 250.925190][T15022] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 251.004221][T15031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2696'. [ 251.187468][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2703'. [ 251.187630][T15051] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2702'. [ 251.233917][T15055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2704'. [ 251.408360][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2708'. [ 251.461889][T15078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.619632][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 251.700044][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 251.908430][T15125] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2725'. [ 251.917360][T15127] netlink: 'syz.4.2726': attribute type 18 has an invalid length. [ 251.955130][T15125] openvswitch: netlink: Actions may not be safe on all matching packets [ 252.039280][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2730'. [ 252.096615][T15141] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 252.147081][T15147] wg1 speed is unknown, defaulting to 1000 [ 252.166855][T15147] wg1 speed is unknown, defaulting to 1000 [ 252.224979][T15147] wg1 speed is unknown, defaulting to 1000 [ 252.238399][T15147] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 252.275959][T15147] wg1 speed is unknown, defaulting to 1000 [ 252.290091][T15149] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 252.303857][T15149] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 252.324878][T15152] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 252.343059][T15147] wg1 speed is unknown, defaulting to 1000 [ 252.355188][T15158] gretap1: entered promiscuous mode [ 252.420261][T15147] wg1 speed is unknown, defaulting to 1000 [ 252.428893][T15147] wg1 speed is unknown, defaulting to 1000 [ 252.438968][T15147] wg1 speed is unknown, defaulting to 1000 [ 253.200088][T15200] tipc: Resetting bearer [ 253.257296][T15204] bridge9: entered promiscuous mode [ 253.282750][T15204] bridge9: entered allmulticast mode [ 253.310157][T15204] 0ªî{X¹¦: left allmulticast mode [ 253.422079][T15204] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 253.429589][T15204] 1ªî{X¹¦: entered allmulticast mode [ 253.448167][T15204] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 253.613877][T15224] validate_nla: 3 callbacks suppressed [ 253.613896][T15224] netlink: 'syz.0.2758': attribute type 6 has an invalid length. [ 253.663607][T15226] netlink: 'syz.3.2759': attribute type 21 has an invalid length. [ 253.675130][T15228] netlink: 'syz.3.2759': attribute type 21 has an invalid length. [ 253.715387][T15226] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.730153][T15228] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.756000][T15226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.763311][T15226] IPv6: NLM_F_CREATE should be set when creating new route [ 253.770585][T15226] IPv6: NLM_F_CREATE should be set when creating new route [ 253.777930][T15226] IPv6: NLM_F_CREATE should be set when creating new route [ 253.810782][T15228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.866617][T15247] tipc: Enabling of bearer rejected, already enabled [ 253.875981][T15247] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 253.927678][T15249] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 253.935110][T15249] tipc: Enabled bearer , priority 10 [ 254.062260][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.202573][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.342301][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.482619][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.567826][T15285] netlink: 'syz.4.2777': attribute type 8 has an invalid length. [ 254.622319][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.675236][T15286] pim6reg1: entered promiscuous mode [ 254.680570][T15286] pim6reg1: entered allmulticast mode [ 254.762238][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.902216][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.911840][T15299] netlink: 'syz.2.2782': attribute type 1 has an invalid length. [ 254.926975][T15299] netlink: 'syz.2.2782': attribute type 2 has an invalid length. [ 255.042387][ T5861] tipc: Node number set to 2908024327 [ 255.087053][T15315] tipc: Enabled bearer , priority 0 [ 255.095924][T15315] syzkaller0: entered promiscuous mode [ 255.102330][T15315] syzkaller0: entered allmulticast mode [ 255.179716][T15315] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 255.187764][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.213455][T15315] tipc: Resetting bearer [ 255.237383][T15314] tipc: Resetting bearer [ 255.276809][T15314] tipc: Disabling bearer [ 255.536750][ T30] audit: type=1800 audit(1756460248.082:3): pid=15348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2797" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2991 res=0 errno=0 [ 255.731480][T15374] netlink: 'syz.0.2803': attribute type 9 has an invalid length. [ 256.032261][T15407] __nla_validate_parse: 23 callbacks suppressed [ 256.032281][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2813'. [ 256.089489][T15411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2816'. [ 256.098790][T15411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2816'. [ 256.109214][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2816'. [ 256.289078][T15434] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 256.443413][T15447] macvtap1: entered promiscuous mode [ 256.448842][T15447] vlan0: entered promiscuous mode [ 256.454949][T15447] macvtap1: entered allmulticast mode [ 256.460444][T15447] vlan0: entered allmulticast mode [ 256.466253][T15447] veth0_vlan: entered allmulticast mode [ 256.623385][T15464] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 256.749014][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2835'. [ 256.776049][T15470] ip6tnl2: entered promiscuous mode [ 256.781391][T15470] ip6tnl2: entered allmulticast mode [ 256.790916][T15470] syzkaller1: entered allmulticast mode [ 256.926959][T15482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2838'. [ 256.939368][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2838'. [ 256.991815][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'. [ 257.336777][T15508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2847'. [ 257.358714][T15516] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.2851'. [ 259.092267][ C0] net_ratelimit: 8 callbacks suppressed [ 259.092289][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 260.132236][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.095726][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.102298][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.172242][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.212252][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 263.252241][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 264.292264][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 265.332233][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 266.372268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 267.412223][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.452245][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 269.492226][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 270.532268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.572247][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 272.612249][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.133892][ T5184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.141250][ T5184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.151152][ T5184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.159200][ T5184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.169475][ T5184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.170652][T12682] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.190883][ T5869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.198380][ T5869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.208992][ T5869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.216469][ T5184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.217754][T12682] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.233043][ T5184] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.240299][ T5184] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.250959][ T5184] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.259755][ T5184] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.279872][ T5184] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 273.287403][ T5184] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 273.294860][ T5184] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 273.303022][ T5184] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 273.310562][ T5184] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 273.652270][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.019603][ T5869] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 274.027551][ T5869] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 274.035107][ T5869] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 274.043038][ T5869] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 274.050501][ T5869] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 274.692308][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 275.252296][ T5184] Bluetooth: hci6: command tx timeout [ 275.252393][ T5869] Bluetooth: hci5: command tx timeout [ 275.332239][ T5869] Bluetooth: hci8: command tx timeout [ 275.332381][ T5184] Bluetooth: hci7: command tx timeout [ 275.732297][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 276.132603][ T5184] Bluetooth: hci9: command tx timeout [ 276.772250][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 277.332361][ T5184] Bluetooth: hci6: command tx timeout [ 277.335421][ T5869] Bluetooth: hci5: command tx timeout [ 277.413220][ T5869] Bluetooth: hci7: command tx timeout [ 277.415273][ T5184] Bluetooth: hci8: command tx timeout [ 277.812243][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 278.213188][ T5184] Bluetooth: hci9: command tx timeout [ 278.852268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 279.412258][ T5184] Bluetooth: hci5: command tx timeout [ 279.412295][ T5869] Bluetooth: hci6: command tx timeout [ 279.492718][ T5869] Bluetooth: hci7: command tx timeout [ 279.493193][ T5184] Bluetooth: hci8: command tx timeout [ 279.892238][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 280.292440][ T5184] Bluetooth: hci9: command tx timeout [ 280.932322][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 281.492347][ T5184] Bluetooth: hci5: command tx timeout [ 281.492486][ T5869] Bluetooth: hci6: command tx timeout [ 281.572540][ T5869] Bluetooth: hci7: command tx timeout [ 281.575208][ T5184] Bluetooth: hci8: command tx timeout [ 281.972248][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 282.372368][ T5184] Bluetooth: hci9: command tx timeout [ 283.012315][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 284.052232][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 285.092294][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 286.132304][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 287.172255][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 288.222278][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 289.252265][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 290.292229][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 291.332236][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 292.372260][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 293.412322][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.452251][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 295.492238][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 296.532281][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 297.572253][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 298.612228][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 299.652262][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 300.692253][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 301.732233][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 302.772232][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 303.812237][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 304.852242][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 305.892387][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 306.932245][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 307.972263][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 309.012226][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 310.052459][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 311.092234][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 312.132704][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 313.172239][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 314.212302][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 315.252294][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 316.292287][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 317.332228][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 318.372289][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 319.412250][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 320.452228][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 321.492224][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 322.533142][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 322.540677][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.547170][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.572248][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 324.612359][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 325.652247][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 326.692237][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 327.732205][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 328.772227][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 329.812214][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 330.852235][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 331.892262][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 332.932268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 333.340459][ T5869] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 333.349913][T12682] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 333.357448][T12682] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 333.365584][ T5866] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 333.372992][ T5866] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 333.380349][ T5866] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 333.391293][T12682] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 333.399706][ T5866] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 333.409513][ T5866] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 333.409976][T12682] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 333.456698][ T5866] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 333.464592][ T5866] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 333.471934][ T5866] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 333.482577][ T5866] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 333.490146][ T5866] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 333.494444][T12682] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 333.505549][T12682] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 333.513034][T12682] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 333.521028][T12682] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 333.528887][T12682] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 333.972218][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 334.203781][ T5184] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 334.211133][ T5184] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 334.219750][ T5184] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 334.227637][ T5184] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 334.235282][ T5184] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 335.012220][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 335.492292][ T5184] Bluetooth: hci11: command tx timeout [ 335.492499][T12682] Bluetooth: hci10: command tx timeout [ 335.572219][T12682] Bluetooth: hci13: command tx timeout [ 335.572235][ T5184] Bluetooth: hci12: command tx timeout [ 336.052208][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 336.292310][T12682] Bluetooth: hci14: command tx timeout [ 337.092251][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 337.572266][T12682] Bluetooth: hci11: command tx timeout [ 337.573406][ T5184] Bluetooth: hci10: command tx timeout [ 337.652349][ T5184] Bluetooth: hci12: command tx timeout [ 337.662649][ T5184] Bluetooth: hci13: command tx timeout [ 338.132200][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 338.372315][ T5184] Bluetooth: hci14: command tx timeout [ 339.172239][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 339.652317][ T5184] Bluetooth: hci10: command tx timeout [ 339.657871][ T5184] Bluetooth: hci11: command tx timeout [ 339.732261][ T5184] Bluetooth: hci12: command tx timeout [ 339.742601][ T5184] Bluetooth: hci13: command tx timeout [ 340.212206][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 340.452581][ T5184] Bluetooth: hci14: command tx timeout [ 341.252215][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 341.732329][T12682] Bluetooth: hci10: command tx timeout [ 341.736022][ T5184] Bluetooth: hci11: command tx timeout [ 341.812282][ T5184] Bluetooth: hci13: command tx timeout [ 341.812543][T12682] Bluetooth: hci12: command tx timeout [ 342.292199][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 342.532246][T12682] Bluetooth: hci14: command tx timeout [ 343.332207][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 344.372238][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 345.412246][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 346.452256][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 347.492372][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 348.532207][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 349.582225][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 350.612259][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 351.662229][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 352.692205][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 353.732216][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 354.772190][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 355.812259][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 356.852225][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 357.892287][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 358.932245][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 359.972201][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 361.012189][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 362.052188][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.092217][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 364.142253][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 365.172192][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 366.212271][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 367.252208][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 368.292265][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 369.332513][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 370.372223][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 371.422219][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 372.452299][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.492209][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 374.532218][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 375.572200][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 376.612221][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.652229][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.692226][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 379.732190][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 380.772276][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 380.932279][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 381.822190][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 382.852208][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 383.892191][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 383.974093][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.980488][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.932210][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 385.972181][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 387.012204][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 388.062205][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 389.092513][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.132207][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 391.172236][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 392.212191][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 393.252335][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 393.526679][ T5184] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 393.535183][ T5184] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 393.563165][ T5184] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 393.571059][ T5184] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 393.579025][ T5184] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 393.625051][ T5184] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 393.633025][ T5184] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 393.640368][ T5184] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 393.648642][ T5869] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 393.649776][ T5866] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 393.656321][ T5869] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 393.661504][ T5869] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 393.665158][ T5866] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 393.675477][ T5869] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 393.685885][ T5866] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 393.696220][ T5869] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 393.702349][ T5866] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 393.709354][ T5869] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 393.718744][ T5866] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 393.722976][ T5869] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 394.292184][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 394.447066][ T5859] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 394.455625][ T5859] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 394.463183][ T5859] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 394.471013][ T5859] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 394.478835][ T5859] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 395.332225][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 395.652201][ T5859] Bluetooth: hci15: command tx timeout [ 395.732573][ T5859] Bluetooth: hci18: command tx timeout [ 395.732579][T15590] Bluetooth: hci16: command tx timeout [ 395.812272][T15590] Bluetooth: hci17: command tx timeout [ 396.292562][T15590] Bluetooth: hci8: command 0x0406 tx timeout [ 396.293895][ T5859] Bluetooth: hci5: command 0x0406 tx timeout [ 396.298707][ T5866] Bluetooth: hci6: command 0x0406 tx timeout [ 396.311056][ T5867] Bluetooth: hci7: command 0x0406 tx timeout [ 396.311074][ T5859] Bluetooth: hci9: command 0x0406 tx timeout [ 396.372180][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 396.532203][ T5184] Bluetooth: hci19: command tx timeout [ 397.412209][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.732233][ T5184] Bluetooth: hci15: command tx timeout [ 397.812304][ T5184] Bluetooth: hci18: command tx timeout [ 397.812352][ T5869] Bluetooth: hci16: command tx timeout [ 397.892496][ T5869] Bluetooth: hci17: command tx timeout [ 398.462194][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 398.612321][ T5869] Bluetooth: hci19: command tx timeout [ 399.492177][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 399.812519][ T5869] Bluetooth: hci15: command tx timeout [ 399.892223][ T5869] Bluetooth: hci16: command tx timeout [ 399.892237][ T5184] Bluetooth: hci18: command tx timeout [ 399.972225][ T5869] Bluetooth: hci17: command tx timeout [ 400.542205][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 400.692555][ T5869] Bluetooth: hci19: command tx timeout [ 401.572213][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 401.892661][ T5869] Bluetooth: hci15: command tx timeout [ 401.972213][ T5869] Bluetooth: hci16: command tx timeout [ 401.973410][ T5184] Bluetooth: hci18: command tx timeout [ 402.052188][ T5184] Bluetooth: hci17: command tx timeout [ 402.622217][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 402.772218][ T5184] Bluetooth: hci19: command tx timeout [ 403.652220][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 404.692189][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 405.732221][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 406.772202][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 407.812262][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 408.852197][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 409.892194][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 410.932214][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 411.972214][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 413.012171][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 414.052195][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 415.102193][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 415.332675][ T31] INFO: task kworker/u8:17:8714 blocked for more than 143 seconds. [ 415.340697][ T31] Not tainted syzkaller #0 [ 415.345796][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.354614][ T31] task:kworker/u8:17 state:D stack:22472 pid:8714 tgid:8714 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 415.367196][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 415.373288][ T31] Call Trace: [ 415.376593][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 415.379518][ T31] __schedule+0x1798/0x4cc0 [ 415.384140][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 415.390457][ T31] ? arch_stack_walk+0x11c/0x150 [ 415.395858][ T31] ? __pfx___schedule+0x10/0x10 [ 415.400748][ T31] ? schedule+0x91/0x360 [ 415.405283][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.410089][ T31] ? lock_release+0x4b/0x3e0 [ 415.417973][ T31] ? wq_worker_sleeping+0x63/0x250 [ 415.423864][ T31] schedule+0x165/0x360 [ 415.428072][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.436530][ T31] __mutex_lock+0x7e6/0x1350 [ 415.441173][ T31] ? __mutex_lock+0x5bb/0x1350 [ 415.446299][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 415.451528][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 415.459855][ T31] addrconf_dad_work+0x112/0x14b0 [ 415.465188][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 415.470679][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.478371][ T31] ? lock_acquire+0x5f/0x360 [ 415.483630][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.488427][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 415.497020][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 415.503006][ T31] process_scheduled_works+0xae1/0x17b0 [ 415.508591][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 415.517764][ T31] worker_thread+0x8a0/0xda0 [ 415.523132][ T31] kthread+0x70e/0x8a0 [ 415.527241][ T31] ? __pfx_worker_thread+0x10/0x10 [ 415.535293][ T31] ? __pfx_kthread+0x10/0x10 [ 415.539937][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.545296][ T31] ? __pfx_kthread+0x10/0x10 [ 415.549943][ T31] ret_from_fork+0x3f9/0x770 [ 415.554938][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 415.560091][ T31] ? __switch_to_asm+0x39/0x70 [ 415.565491][ T31] ? __switch_to_asm+0x33/0x70 [ 415.582597][ T31] ? __pfx_kthread+0x10/0x10 [ 415.587243][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.619686][ T31] [ 415.626341][ T31] INFO: task kworker/u8:31:12392 blocked for more than 143 seconds. [ 415.634445][ T31] Not tainted syzkaller #0 [ 415.639442][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.648634][ T31] task:kworker/u8:31 state:D stack:22504 pid:12392 tgid:12392 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 415.661392][ T31] Workqueue: events_unbound linkwatch_event [ 415.667414][ T31] Call Trace: [ 415.670710][ T31] [ 415.673968][ T31] __schedule+0x1798/0x4cc0 [ 415.678485][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.683302][ T31] ? __pfx_bond_check_dev_link+0x10/0x10 [ 415.688959][ T31] ? __pfx___schedule+0x10/0x10 [ 415.693869][ T31] ? schedule+0x91/0x360 [ 415.698221][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.703526][ T31] ? lock_release+0x4b/0x3e0 [ 415.708167][ T31] ? wq_worker_sleeping+0x63/0x250 [ 415.713337][ T31] schedule+0x165/0x360 [ 415.717562][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.723232][ T31] __mutex_lock+0x7e6/0x1350 [ 415.727857][ T31] ? __mutex_lock+0x5bb/0x1350 [ 415.733007][ T31] ? linkwatch_event+0xe/0x60 [ 415.737707][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 415.742827][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 415.748582][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.753463][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.758250][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 415.764409][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 415.770182][ T31] linkwatch_event+0xe/0x60 [ 415.774827][ T31] process_scheduled_works+0xae1/0x17b0 [ 415.780407][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 415.786494][ T31] worker_thread+0x8a0/0xda0 [ 415.791124][ T31] kthread+0x70e/0x8a0 [ 415.795490][ T31] ? __pfx_worker_thread+0x10/0x10 [ 415.800601][ T31] ? __pfx_kthread+0x10/0x10 [ 415.805250][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.810030][ T31] ? __pfx_kthread+0x10/0x10 [ 415.814792][ T31] ret_from_fork+0x3f9/0x770 [ 415.819421][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 415.824910][ T31] ? __switch_to_asm+0x39/0x70 [ 415.829691][ T31] ? __switch_to_asm+0x33/0x70 [ 415.834633][ T31] ? __pfx_kthread+0x10/0x10 [ 415.839240][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.844076][ T31] [ 415.847139][ T31] INFO: task syz.1.2852:15524 blocked for more than 143 seconds. [ 415.855202][ T31] Not tainted syzkaller #0 [ 415.860154][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.868886][ T31] task:syz.1.2852 state:D stack:26568 pid:15524 tgid:15523 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 415.880919][ T31] Call Trace: [ 415.884559][ T31] [ 415.887549][ T31] __schedule+0x1798/0x4cc0 [ 415.892106][ T31] ? __kernel_text_address+0xd/0x40 [ 415.897329][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 415.903583][ T31] ? arch_stack_walk+0xfc/0x150 [ 415.908463][ T31] ? __pfx___schedule+0x10/0x10 [ 415.913660][ T31] ? schedule+0x91/0x360 [ 415.917942][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.922763][ T31] ? lock_release+0x4b/0x3e0 [ 415.927399][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 415.933350][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 415.939792][ T31] schedule+0x165/0x360 [ 415.944459][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.949952][ T31] __mutex_lock+0x7e6/0x1350 [ 415.954619][ T31] ? __mutex_lock+0x5bb/0x1350 [ 415.959409][ T31] ? __netdev_update_features+0xcb1/0x1be0 [ 415.965280][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 415.970366][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.975612][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 415.982002][ T31] ? rcu_is_watching+0x15/0xb0 [ 415.986928][ T31] __netdev_update_features+0xcb1/0x1be0 [ 415.992651][ T31] ? __pfx___netdev_update_features+0x10/0x10 [ 415.998750][ T31] ? cfg80211_netdev_notifier_call+0x1ee/0x1450 [ 416.005410][ T31] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 416.011953][ T31] ? do_raw_spin_lock+0x121/0x290 [ 416.017028][ T31] netdev_update_features+0x6d/0xe0 [ 416.022303][ T31] ? __pfx_netdev_update_features+0x10/0x10 [ 416.028241][ T31] ? bond_netdev_event+0xd9/0xe80 [ 416.033623][ T31] ? netdevice_event+0x2dc/0x8a0 [ 416.038585][ T31] macsec_notify+0x2f5/0x660 [ 416.043223][ T31] ? __pfx_macsec_notify+0x10/0x10 [ 416.048353][ T31] notifier_call_chain+0x1b3/0x3e0 [ 416.053756][ T31] netdev_features_change+0x85/0xc0 [ 416.058967][ T31] ? __pfx_netdev_features_change+0x10/0x10 [ 416.065215][ T31] ? security_capable+0x7e/0x2e0 [ 416.070168][ T31] dev_ethtool+0x1536/0x19b0 [ 416.074821][ T31] ? __pfx_dev_ethtool+0x10/0x10 [ 416.079774][ T31] ? dev_load+0x21/0x1f0 [ 416.084063][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.088871][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.093967][ T31] ? lock_release+0x4b/0x3e0 [ 416.098656][ T31] ? dev_load+0x21/0x1f0 [ 416.102974][ T31] dev_ioctl+0x392/0x1150 [ 416.107337][ T31] sock_do_ioctl+0x22c/0x300 [ 416.111955][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 416.117147][ T31] ? do_futex+0x333/0x420 [ 416.121511][ T31] sock_ioctl+0x576/0x790 [ 416.126235][ T31] ? lock_release+0x4b/0x3e0 [ 416.130861][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 416.135879][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 416.143030][ T31] ? __fget_files+0x2a/0x420 [ 416.147640][ T31] ? __fget_files+0x3a0/0x420 [ 416.152657][ T31] ? __fget_files+0x2a/0x420 [ 416.157277][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 416.162371][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 416.167245][ T31] __se_sys_ioctl+0xfc/0x170 [ 416.171853][ T31] do_syscall_64+0xfa/0x3b0 [ 416.176433][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.182881][ T31] ? clear_bhb_loop+0x60/0xb0 [ 416.187578][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.193510][ T31] RIP: 0033:0x7fc552d8ebe9 [ 416.197938][ T31] RSP: 002b:00007fc550ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.206385][ T31] RAX: ffffffffffffffda RBX: 00007fc552fb5fa0 RCX: 00007fc552d8ebe9 [ 416.214615][ T31] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 416.222633][ T31] RBP: 00007fc552e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 416.230633][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.238698][ T31] R13: 00007fc552fb6038 R14: 00007fc552fb5fa0 R15: 00007fffa528cc98 [ 416.247052][ T31] [ 416.250103][ T31] INFO: task syz.1.2852:15531 blocked for more than 144 seconds. [ 416.260511][ T31] Not tainted syzkaller #0 [ 416.265520][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.274532][ T31] task:syz.1.2852 state:D stack:26776 pid:15531 tgid:15523 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 416.286510][ T31] Call Trace: [ 416.289819][ T31] [ 416.292810][ T31] __schedule+0x1798/0x4cc0 [ 416.297348][ T31] ? __pfx___schedule+0x10/0x10 [ 416.302576][ T31] ? schedule+0x91/0x360 [ 416.306854][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.311613][ T31] ? lock_release+0x4b/0x3e0 [ 416.316242][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 416.322186][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 416.328534][ T31] schedule+0x165/0x360 [ 416.333060][ T31] schedule_preempt_disabled+0x13/0x30 [ 416.338551][ T31] __mutex_lock+0x7e6/0x1350 [ 416.343193][ T31] ? __mutex_lock+0x5bb/0x1350 [ 416.347977][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 416.352816][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.357873][ T31] ? ns_capable+0x8a/0xf0 [ 416.362565][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 416.368412][ T31] rtnl_newlink+0x8db/0x1c70 [ 416.373110][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 416.378178][ T31] ? unwind_next_frame+0xa5/0x2390 [ 416.383509][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.388294][ T31] ? unwind_next_frame+0xa5/0x2390 [ 416.393727][ T31] ? unwind_next_frame+0xa5/0x2390 [ 416.398853][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.403653][ T31] ? unwind_next_frame+0xa5/0x2390 [ 416.408792][ T31] ? unwind_next_frame+0xa5/0x2390 [ 416.413965][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.418747][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 416.424333][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.429121][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.433939][ T31] ? lock_release+0x4b/0x3e0 [ 416.438568][ T31] ? lock_release+0x4b/0x3e0 [ 416.443225][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 416.448537][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 416.454857][ T31] ? kernel_text_address+0xa5/0xe0 [ 416.460021][ T31] ? __kernel_text_address+0xd/0x40 [ 416.466367][ T31] ? unwind_get_return_address+0x4d/0x90 [ 416.472179][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 416.477319][ T31] ? lock_release+0x4b/0x3e0 [ 416.481907][ T31] ? bpf_lsm_capable+0x9/0x20 [ 416.486712][ T31] ? security_capable+0x7e/0x2e0 [ 416.491700][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 416.497478][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 416.502871][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 416.508160][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 416.514190][ T31] ? __netlink_lookup+0xbd/0x810 [ 416.519280][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.524107][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.528907][ T31] netlink_rcv_skb+0x208/0x470 [ 416.533850][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 416.539342][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.544938][ T31] netlink_unicast+0x82c/0x9e0 [ 416.549719][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 416.555083][ T31] ? netlink_sendmsg+0x642/0xb30 [ 416.560065][ T31] ? skb_put+0x11b/0x210 [ 416.564351][ T31] netlink_sendmsg+0x805/0xb30 [ 416.569153][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.574908][ T31] ? futex_unqueue+0x22/0x240 [ 416.579616][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.584591][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.589888][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.595250][ T31] __sock_sendmsg+0x21c/0x270 [ 416.600045][ T31] ____sys_sendmsg+0x505/0x830 [ 416.605115][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.610429][ T31] ? import_iovec+0x74/0xa0 [ 416.616334][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 416.621044][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.626592][ T31] ? futex_wait+0x285/0x360 [ 416.631191][ T31] ? __fget_files+0x2a/0x420 [ 416.636092][ T31] ? __fget_files+0x3a0/0x420 [ 416.640835][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 416.646265][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.651763][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.656640][ T31] do_syscall_64+0xfa/0x3b0 [ 416.661205][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.667346][ T31] ? clear_bhb_loop+0x60/0xb0 [ 416.672454][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.678368][ T31] RIP: 0033:0x7fc552d8ebe9 [ 416.682869][ T31] RSP: 002b:00007fc550fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.691305][ T31] RAX: ffffffffffffffda RBX: 00007fc552fb6090 RCX: 00007fc552d8ebe9 [ 416.699429][ T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 416.707674][ T31] RBP: 00007fc552e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 416.715700][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.723844][ T31] R13: 00007fc552fb6128 R14: 00007fc552fb6090 R15: 00007fffa528cc98 [ 416.731856][ T31] [ 416.735362][ T31] INFO: task syz.0.2853:15526 blocked for more than 144 seconds. [ 416.743194][ T31] Not tainted syzkaller #0 [ 416.748136][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.756851][ T31] task:syz.0.2853 state:D stack:26744 pid:15526 tgid:15525 ppid:5856 task_flags:0x400140 flags:0x00004004 [ 416.769062][ T31] Call Trace: [ 416.772474][ T31] [ 416.775601][ T31] __schedule+0x1798/0x4cc0 [ 416.780180][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 416.785674][ T31] ? __pfx___schedule+0x10/0x10 [ 416.790546][ T31] ? schedule+0x91/0x360 [ 416.795101][ T31] ? rcu_is_watching+0x15/0xb0 [ 416.799865][ T31] ? lock_release+0x4b/0x3e0 [ 416.804505][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 416.810417][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 416.816814][ T31] schedule+0x165/0x360 [ 416.820988][ T31] schedule_preempt_disabled+0x13/0x30 [ 416.826826][ T31] __mutex_lock+0x7e6/0x1350 [ 416.831435][ T31] ? __mutex_lock+0x5bb/0x1350 [ 416.836362][ T31] ? tipc_nl_media_set+0x12/0x30 [ 416.841359][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.846462][ T31] ? __nla_parse+0x40/0x60 [ 416.850910][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 416.857667][ T31] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 416.864060][ T31] tipc_nl_media_set+0x12/0x30 [ 416.868859][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 416.874477][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 416.880688][ T31] genl_rcv_msg+0x60e/0x790 [ 416.885497][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.890524][ T31] ? __pfx_tipc_nl_media_set+0x10/0x10 [ 416.896075][ T31] ? __asan_memcpy+0x40/0x70 [ 416.900681][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 416.906099][ T31] netlink_rcv_skb+0x208/0x470 [ 416.910905][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.916263][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.921563][ T31] ? lock_release+0x4b/0x3e0 [ 416.926247][ T31] ? down_read+0x1ad/0x2e0 [ 416.930700][ T31] genl_rcv+0x28/0x40 [ 416.934864][ T31] netlink_unicast+0x82c/0x9e0 [ 416.939658][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 416.945469][ T31] ? netlink_sendmsg+0x642/0xb30 [ 416.950439][ T31] ? skb_put+0x11b/0x210 [ 416.955018][ T31] netlink_sendmsg+0x805/0xb30 [ 416.959836][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.965214][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.970165][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.975881][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.981206][ T31] __sock_sendmsg+0x21c/0x270 [ 416.985944][ T31] ____sys_sendmsg+0x505/0x830 [ 416.990833][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.996317][ T31] ? import_iovec+0x74/0xa0 [ 417.000872][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 417.005861][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.011067][ T31] ? futex_wake+0x4b2/0x560 [ 417.015688][ T31] ? __fget_files+0x2a/0x420 [ 417.020398][ T31] ? __fget_files+0x3a0/0x420 [ 417.025138][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 417.030122][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.035867][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.040839][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.045648][ T31] do_syscall_64+0xfa/0x3b0 [ 417.050177][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.056441][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.061150][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.067374][ T31] RIP: 0033:0x7fe4e1d8ebe9 [ 417.071796][ T31] RSP: 002b:00007fe4e2b77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.080277][ T31] RAX: ffffffffffffffda RBX: 00007fe4e1fb5fa0 RCX: 00007fe4e1d8ebe9 [ 417.088333][ T31] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000c [ 417.096806][ T31] RBP: 00007fe4e1e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 417.104838][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.112865][ T31] R13: 00007fe4e1fb6038 R14: 00007fe4e1fb5fa0 R15: 00007ffea04b4308 [ 417.120868][ T31] [ 417.124295][ T31] INFO: task syz.0.2853:15532 blocked for more than 145 seconds. [ 417.132117][ T31] Not tainted syzkaller #0 [ 417.137067][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.145804][ T31] task:syz.0.2853 state:D stack:26440 pid:15532 tgid:15525 ppid:5856 task_flags:0x400140 flags:0x00004004 [ 417.158019][ T31] Call Trace: [ 417.161318][ T31] [ 417.164480][ T31] __schedule+0x1798/0x4cc0 [ 417.169038][ T31] ? __pfx___schedule+0x10/0x10 [ 417.174075][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 417.181130][ T31] ? schedule+0x91/0x360 [ 417.185672][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.190442][ T31] ? lock_release+0x4b/0x3e0 [ 417.195088][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 417.201005][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.207364][ T31] schedule+0x165/0x360 [ 417.211538][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.217378][ T31] __mutex_lock+0x7e6/0x1350 [ 417.221986][ T31] ? __mutex_lock+0x5bb/0x1350 [ 417.226828][ T31] ? __tun_chr_ioctl+0x37a/0x1df0 [ 417.231878][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.236984][ T31] ? lock_release+0x4b/0x3e0 [ 417.241627][ T31] ? __might_fault+0xb0/0x130 [ 417.246744][ T31] ? __might_fault+0xcc/0x130 [ 417.251451][ T31] __tun_chr_ioctl+0x37a/0x1df0 [ 417.256365][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 417.261684][ T31] ? __fget_files+0x2a/0x420 [ 417.266374][ T31] ? __fget_files+0x3a0/0x420 [ 417.271088][ T31] ? __fget_files+0x2a/0x420 [ 417.276017][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 417.280962][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 417.286160][ T31] __se_sys_ioctl+0xfc/0x170 [ 417.290801][ T31] do_syscall_64+0xfa/0x3b0 [ 417.295353][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.301524][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.306510][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.312453][ T31] RIP: 0033:0x7fe4e1d8ebe9 [ 417.316894][ T31] RSP: 002b:00007fe4e2b56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.325335][ T31] RAX: ffffffffffffffda RBX: 00007fe4e1fb6090 RCX: 00007fe4e1d8ebe9 [ 417.333710][ T31] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 000000000000000d [ 417.341711][ T31] RBP: 00007fe4e1e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 417.349846][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.357862][ T31] R13: 00007fe4e1fb6128 R14: 00007fe4e1fb6090 R15: 00007ffea04b4308 [ 417.366238][ T31] [ 417.369327][ T31] INFO: task syz.0.2853:15534 blocked for more than 145 seconds. [ 417.377115][ T31] Not tainted syzkaller #0 [ 417.382090][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.390762][ T31] task:syz.0.2853 state:D stack:29064 pid:15534 tgid:15525 ppid:5856 task_flags:0x400040 flags:0x00004004 [ 417.403451][ T31] Call Trace: [ 417.406794][ T31] [ 417.409746][ T31] __schedule+0x1798/0x4cc0 [ 417.414506][ T31] ? __pfx___schedule+0x10/0x10 [ 417.419399][ T31] ? schedule+0x91/0x360 [ 417.423679][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.428484][ T31] ? lock_release+0x4b/0x3e0 [ 417.433413][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 417.439326][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.445714][ T31] schedule+0x165/0x360 [ 417.449898][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.455429][ T31] __mutex_lock+0x7e6/0x1350 [ 417.460037][ T31] ? __mutex_lock+0x5bb/0x1350 [ 417.465186][ T31] ? __tun_chr_ioctl+0x37a/0x1df0 [ 417.470235][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.475319][ T31] ? count_memcg_event_mm+0x21/0x260 [ 417.480633][ T31] __tun_chr_ioctl+0x37a/0x1df0 [ 417.485576][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 417.490906][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.496582][ T31] ? __fget_files+0x2a/0x420 [ 417.501219][ T31] ? __fget_files+0x3a0/0x420 [ 417.506355][ T31] ? __fget_files+0x2a/0x420 [ 417.510991][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 417.516747][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 417.521886][ T31] __se_sys_ioctl+0xfc/0x170 [ 417.526733][ T31] do_syscall_64+0xfa/0x3b0 [ 417.531271][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.537465][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.543000][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.548930][ T31] RIP: 0033:0x7fe4e1d8ebe9 [ 417.553911][ T31] RSP: 002b:00007fe4e2b35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.562437][ T31] RAX: ffffffffffffffda RBX: 00007fe4e1fb6180 RCX: 00007fe4e1d8ebe9 [ 417.570514][ T31] RDX: 0000000000000324 RSI: 00000000400454cd RDI: 000000000000000d [ 417.578561][ T31] RBP: 00007fe4e1e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 417.586962][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.595038][ T31] R13: 00007fe4e1fb6218 R14: 00007fe4e1fb6180 R15: 00007ffea04b4308 [ 417.603083][ T31] [ 417.606128][ T31] INFO: task syz.2.2855:15530 blocked for more than 145 seconds. [ 417.614465][ T31] Not tainted syzkaller #0 [ 417.619419][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.628323][ T31] task:syz.2.2855 state:D stack:27304 pid:15530 tgid:15529 ppid:5870 task_flags:0x400140 flags:0x00004004 [ 417.641466][ T31] Call Trace: [ 417.644845][ T31] [ 417.647794][ T31] __schedule+0x1798/0x4cc0 [ 417.652525][ T31] ? stack_trace_save+0x9c/0xe0 [ 417.657421][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 417.663587][ T31] ? stack_depot_save_flags+0x40/0x860 [ 417.669088][ T31] ? __pfx___schedule+0x10/0x10 [ 417.674088][ T31] ? schedule+0x91/0x360 [ 417.678361][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.683210][ T31] ? lock_release+0x4b/0x3e0 [ 417.687824][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 417.694566][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.700924][ T31] schedule+0x165/0x360 [ 417.706244][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.711754][ T31] __mutex_lock+0x7e6/0x1350 [ 417.716490][ T31] ? __mutex_lock+0x5bb/0x1350 [ 417.721306][ T31] ? wext_ioctl_dispatch+0xa2/0x410 [ 417.727425][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.733131][ T31] ? dev_load+0x21/0x1f0 [ 417.737415][ T31] ? __pfx_ioctl_standard_call+0x10/0x10 [ 417.743133][ T31] wext_ioctl_dispatch+0xa2/0x410 [ 417.748187][ T31] wext_handle_ioctl+0x100/0x1c0 [ 417.753956][ T31] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 417.759426][ T31] ? do_futex+0x333/0x420 [ 417.763878][ T31] ? file_init_path+0x434/0x590 [ 417.768770][ T31] sock_ioctl+0x15f/0x790 [ 417.773280][ T31] ? lock_release+0x4b/0x3e0 [ 417.777908][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 417.783789][ T31] ? __fget_files+0x2a/0x420 [ 417.788415][ T31] ? __fget_files+0x3a0/0x420 [ 417.793193][ T31] ? __fget_files+0x2a/0x420 [ 417.797809][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 417.802820][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 417.807708][ T31] __se_sys_ioctl+0xfc/0x170 [ 417.813413][ T31] do_syscall_64+0xfa/0x3b0 [ 417.817958][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.824065][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.828773][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.834741][ T31] RIP: 0033:0x7fb2c8f8ebe9 [ 417.839206][ T31] RSP: 002b:00007fb2c9ec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.848492][ T31] RAX: ffffffffffffffda RBX: 00007fb2c91b5fa0 RCX: 00007fb2c8f8ebe9 [ 417.856604][ T31] RDX: 0000200000000000 RSI: 0000000000008b29 RDI: 0000000000000003 [ 417.864635][ T31] RBP: 00007fb2c9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 417.873493][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.881477][ T31] R13: 00007fb2c91b6038 R14: 00007fb2c91b5fa0 R15: 00007ffe58ce22e8 [ 417.889524][ T31] [ 417.892682][ T31] INFO: task syz.3.2856:15536 blocked for more than 145 seconds. [ 417.900410][ T31] Not tainted syzkaller #0 [ 417.906166][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.914956][ T31] task:syz.3.2856 state:D stack:27816 pid:15536 tgid:15535 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 417.926961][ T31] Call Trace: [ 417.930242][ T31] [ 417.934025][ T31] __schedule+0x1798/0x4cc0 [ 417.938557][ T31] ? __pfx___schedule+0x10/0x10 [ 417.943483][ T31] ? schedule+0x91/0x360 [ 417.947753][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.952605][ T31] ? lock_release+0x4b/0x3e0 [ 417.957316][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 417.964049][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.970441][ T31] schedule+0x165/0x360 [ 417.974793][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.980289][ T31] __mutex_lock+0x7e6/0x1350 [ 417.984928][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 417.990066][ T31] ? __mutex_lock+0x5bb/0x1350 [ 417.995875][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 418.001033][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.006142][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 418.011305][ T31] ? lock_release+0x4b/0x3e0 [ 418.016020][ T31] ? bpf_lsm_capable+0x9/0x20 [ 418.020711][ T31] ? security_capable+0x7e/0x2e0 [ 418.026510][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 418.031473][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 418.036718][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.042292][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 418.047351][ T31] ? __asan_memcpy+0x40/0x70 [ 418.051960][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 418.058276][ T31] netlink_rcv_skb+0x208/0x470 [ 418.063133][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.068637][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.074061][ T31] netlink_unicast+0x82c/0x9e0 [ 418.078866][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.084910][ T31] ? netlink_sendmsg+0x642/0xb30 [ 418.089893][ T31] ? skb_put+0x11b/0x210 [ 418.094275][ T31] netlink_sendmsg+0x805/0xb30 [ 418.099087][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.104444][ T31] ? futex_unqueue+0x22/0x240 [ 418.109148][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.115005][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.120328][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.125703][ T31] __sock_sendmsg+0x21c/0x270 [ 418.130420][ T31] ____sys_sendmsg+0x505/0x830 [ 418.135367][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.140679][ T31] ? import_iovec+0x74/0xa0 [ 418.145982][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 418.150682][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.156010][ T31] ? futex_wait+0x285/0x360 [ 418.160565][ T31] ? __fget_files+0x2a/0x420 [ 418.165232][ T31] ? __fget_files+0x3a0/0x420 [ 418.169967][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 418.175706][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.181187][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.186036][ T31] do_syscall_64+0xfa/0x3b0 [ 418.190585][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.196774][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.201475][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.208109][ T31] RIP: 0033:0x7f4455b8ebe9 [ 418.212843][ T31] RSP: 002b:00007f44569b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.221289][ T31] RAX: ffffffffffffffda RBX: 00007f4455db5fa0 RCX: 00007f4455b8ebe9 [ 418.222193][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 418.229329][ T31] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000005 [ 418.245139][ T31] RBP: 00007f4455c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 418.253226][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.261254][ T31] R13: 00007f4455db6038 R14: 00007f4455db5fa0 R15: 00007ffec5965e68 [ 418.270248][ T31] [ 418.273398][ T31] INFO: task syz.3.2856:15537 blocked for more than 146 seconds. [ 418.281143][ T31] Not tainted syzkaller #0 [ 418.286245][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.295596][ T31] task:syz.3.2856 state:D stack:27816 pid:15537 tgid:15535 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 418.307774][ T31] Call Trace: [ 418.311075][ T31] [ 418.314070][ T31] __schedule+0x1798/0x4cc0 [ 418.318640][ T31] ? __pfx___schedule+0x10/0x10 [ 418.324311][ T31] ? schedule+0x91/0x360 [ 418.328574][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.333439][ T31] ? lock_release+0x4b/0x3e0 [ 418.338081][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 418.344084][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 418.350441][ T31] schedule+0x165/0x360 [ 418.355419][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.360888][ T31] __mutex_lock+0x7e6/0x1350 [ 418.365602][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 418.370735][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.375751][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 418.380902][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.386996][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 418.392222][ T31] ? lock_release+0x4b/0x3e0 [ 418.396857][ T31] ? bpf_lsm_capable+0x9/0x20 [ 418.401583][ T31] ? security_capable+0x7e/0x2e0 [ 418.406686][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 418.411680][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 418.417512][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.423093][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 418.428146][ T31] ? __asan_memcpy+0x40/0x70 [ 418.432801][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 418.438211][ T31] netlink_rcv_skb+0x208/0x470 [ 418.443763][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.449238][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.454640][ T31] netlink_unicast+0x82c/0x9e0 [ 418.459445][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.464875][ T31] ? netlink_sendmsg+0x642/0xb30 [ 418.469844][ T31] ? skb_put+0x11b/0x210 [ 418.474920][ T31] netlink_sendmsg+0x805/0xb30 [ 418.479711][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.485114][ T31] ? futex_unqueue+0x22/0x240 [ 418.489818][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.494814][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.500130][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.506239][ T31] __sock_sendmsg+0x21c/0x270 [ 418.510953][ T31] ____sys_sendmsg+0x505/0x830 [ 418.515776][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.521100][ T31] ? import_iovec+0x74/0xa0 [ 418.525758][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 418.530472][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.536775][ T31] ? futex_wait+0x285/0x360 [ 418.541452][ T31] ? __fget_files+0x2a/0x420 [ 418.546340][ T31] ? __fget_files+0x3a0/0x420 [ 418.551175][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 418.556258][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.561748][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.567310][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.572144][ T31] do_syscall_64+0xfa/0x3b0 [ 418.576705][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.582875][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.587581][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.594241][ T31] RIP: 0033:0x7f4455b8ebe9 [ 418.598681][ T31] RSP: 002b:00007f4456995038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.607194][ T31] RAX: ffffffffffffffda RBX: 00007f4455db6090 RCX: 00007f4455b8ebe9 [ 418.615370][ T31] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 418.624424][ T31] RBP: 00007f4455c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 418.632468][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.640483][ T31] R13: 00007f4455db6128 R14: 00007f4455db6090 R15: 00007ffec5965e68 [ 418.648571][ T31] [ 418.651619][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 418.661672][ T31] INFO: task syz.4.2858:15545 blocked for more than 146 seconds. [ 418.669736][ T31] Not tainted syzkaller #0 [ 418.674722][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.684306][ T31] task:syz.4.2858 state:D stack:28024 pid:15545 tgid:15544 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 418.696291][ T31] Call Trace: [ 418.699608][ T31] [ 418.702655][ T31] __schedule+0x1798/0x4cc0 [ 418.707188][ T31] ? unwind_next_frame+0xa5/0x2390 [ 418.712988][ T31] ? unwind_next_frame+0xa5/0x2390 [ 418.718122][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.723007][ T31] ? unwind_next_frame+0xa5/0x2390 [ 418.728164][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.732985][ T31] ? __pfx___schedule+0x10/0x10 [ 418.737860][ T31] ? schedule+0x91/0x360 [ 418.743058][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.747917][ T31] ? lock_release+0x4b/0x3e0 [ 418.752639][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 418.758548][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 418.765010][ T31] schedule+0x165/0x360 [ 418.769216][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.775551][ T31] __mutex_lock+0x7e6/0x1350 [ 418.780157][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 418.785587][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.790397][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 418.795605][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.800660][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 418.806580][ T31] ? lock_release+0x4b/0x3e0 [ 418.811192][ T31] ? bpf_lsm_capable+0x9/0x20 [ 418.815961][ T31] ? security_capable+0x7e/0x2e0 [ 418.820934][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 418.825986][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 418.831202][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.837479][ T31] ? __netlink_lookup+0xbd/0x810 [ 418.842605][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.847379][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.852198][ T31] netlink_rcv_skb+0x208/0x470 [ 418.856997][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.863306][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.868637][ T31] netlink_unicast+0x82c/0x9e0 [ 418.873557][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.878873][ T31] ? netlink_sendmsg+0x642/0xb30 [ 418.883922][ T31] ? skb_put+0x11b/0x210 [ 418.888185][ T31] netlink_sendmsg+0x805/0xb30 [ 418.894012][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.899360][ T31] ? futex_unqueue+0x22/0x240 [ 418.904149][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.909119][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.914477][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.919807][ T31] __sock_sendmsg+0x21c/0x270 [ 418.925599][ T31] ____sys_sendmsg+0x505/0x830 [ 418.930397][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.935741][ T31] ? import_iovec+0x74/0xa0 [ 418.940259][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 418.945045][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.950275][ T31] ? futex_wait+0x285/0x360 [ 418.955544][ T31] ? __fget_files+0x2a/0x420 [ 418.960147][ T31] ? __fget_files+0x3a0/0x420 [ 418.964950][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 418.969926][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.975446][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.980239][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.985858][ T31] do_syscall_64+0xfa/0x3b0 [ 418.990403][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.996536][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.001246][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.007308][ T31] RIP: 0033:0x7f5cf178ebe9 [ 419.011754][ T31] RSP: 002b:00007f5cf25e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.021244][ T31] RAX: ffffffffffffffda RBX: 00007f5cf19b5fa0 RCX: 00007f5cf178ebe9 [ 419.029393][ T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 419.037446][ T31] RBP: 00007f5cf1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 419.046536][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.054592][ T31] R13: 00007f5cf19b6038 R14: 00007f5cf19b5fa0 R15: 00007ffd0fd8f098 [ 419.062662][ T31] [ 419.065690][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 419.075748][ T31] INFO: lockdep is turned off. [ 419.080532][ T31] NMI backtrace for cpu 1 [ 419.080550][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 419.080566][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.080575][ T31] Call Trace: [ 419.080581][ T31] [ 419.080588][ T31] dump_stack_lvl+0x189/0x250 [ 419.080610][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.080628][ T31] ? __pfx__printk+0x10/0x10 [ 419.080653][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 419.080672][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 419.080690][ T31] ? __pfx__printk+0x10/0x10 [ 419.080712][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.080735][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 419.080754][ T31] watchdog+0xf93/0xfe0 [ 419.080776][ T31] ? watchdog+0x1de/0xfe0 [ 419.080797][ T31] kthread+0x70e/0x8a0 [ 419.080816][ T31] ? __pfx_watchdog+0x10/0x10 [ 419.080835][ T31] ? __pfx_kthread+0x10/0x10 [ 419.080853][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.080872][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.080890][ T31] ? __pfx_kthread+0x10/0x10 [ 419.080908][ T31] ret_from_fork+0x3f9/0x770 [ 419.080924][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.080940][ T31] ? __switch_to_asm+0x39/0x70 [ 419.080958][ T31] ? __switch_to_asm+0x33/0x70 [ 419.080976][ T31] ? __pfx_kthread+0x10/0x10 [ 419.080994][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.081020][ T31] [ 419.081025][ T31] Sending NMI from CPU 1 to CPUs 0: [ 419.230697][ C0] NMI backtrace for cpu 0 [ 419.230715][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 419.230734][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.230745][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 419.230774][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 86 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 419.230791][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 419.230807][ C0] RAX: d9c21727618cc300 RBX: ffffffff819683b8 RCX: d9c21727618cc300 [ 419.230820][ C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 419.230833][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 419.230846][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38530 [ 419.230858][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 419.230870][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 419.230884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.230896][ C0] CR2: 00007ffa520e5000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 419.230912][ C0] Call Trace: [ 419.230920][ C0] [ 419.230926][ C0] default_idle+0x13/0x20 [ 419.230943][ C0] default_idle_call+0x74/0xb0 [ 419.230962][ C0] do_idle+0x1e8/0x510 [ 419.230981][ C0] ? __pfx_do_idle+0x10/0x10 [ 419.231005][ C0] cpu_startup_entry+0x44/0x60 [ 419.231021][ C0] rest_init+0x2de/0x300 [ 419.231040][ C0] start_kernel+0x3a9/0x410 [ 419.231062][ C0] x86_64_start_reservations+0x24/0x30 [ 419.231088][ C0] x86_64_start_kernel+0x143/0x1c0 [ 419.231113][ C0] common_startup_64+0x13e/0x147 [ 419.231144][ C0] [ 419.231713][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 419.412422][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 419.421541][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.431602][ T31] Call Trace: [ 419.434885][ T31] [ 419.437832][ T31] dump_stack_lvl+0x99/0x250 [ 419.442430][ T31] ? __asan_memcpy+0x40/0x70 [ 419.447030][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.452245][ T31] ? __pfx__printk+0x10/0x10 [ 419.456880][ T31] vpanic+0x281/0x750 [ 419.460870][ T31] ? __pfx_vpanic+0x10/0x10 [ 419.465380][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.470148][ T31] ? preempt_schedule+0xae/0xc0 [ 419.475011][ T31] ? preempt_schedule_common+0x83/0xd0 [ 419.480486][ T31] panic+0xb9/0xc0 [ 419.484225][ T31] ? __pfx_panic+0x10/0x10 [ 419.488677][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 419.494066][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 419.500244][ T31] watchdog+0xfd2/0xfe0 [ 419.504415][ T31] ? watchdog+0x1de/0xfe0 [ 419.508756][ T31] kthread+0x70e/0x8a0 [ 419.512850][ T31] ? __pfx_watchdog+0x10/0x10 [ 419.517532][ T31] ? __pfx_kthread+0x10/0x10 [ 419.522131][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.527351][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.532560][ T31] ? __pfx_kthread+0x10/0x10 [ 419.537194][ T31] ret_from_fork+0x3f9/0x770 [ 419.541794][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.546934][ T31] ? __switch_to_asm+0x39/0x70 [ 419.551729][ T31] ? __switch_to_asm+0x33/0x70 [ 419.556502][ T31] ? __pfx_kthread+0x10/0x10 [ 419.561105][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.565895][ T31] [ 419.569261][ T31] Kernel Offset: disabled [ 419.573583][ T31] Rebooting in 86400 seconds..