last executing test programs: 2.927161901s ago: executing program 3 (id=4661): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 2.737447453s ago: executing program 3 (id=4664): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @remote}}, 0x1e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}], 0x10) (async) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @func_proto]}}, 0x0, 0x3e}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000000007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aaae6d03c3afedd15cafc298c497571f1e4f5a4f47b9fbc2d1cee00ede48f6f00375c9c2647919b2a26a890b14d99d6a5912baf45ac4700179645d989cca106dbcb33b2ea42f2a10999afbafb25bfbeec6b4278e5ae8e8758f5cd9fc3b27a879d76d8ee5145990d4f8b185b3777094de6ac3ea382e9b89f1f85619fb1fc285bf4efbb812c4ba0af15187cacc65be71310ae7e3cbf3def12b70294fb99a5aa59e93dbb949d921cac456148a47e1b77d45fec398f06ebaabf73b8794d5959043f5cf6e428002174f00a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.460241782s ago: executing program 3 (id=4669): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0xfffffffe}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000)) 2.181775596s ago: executing program 3 (id=4674): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109d00000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109d00000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) 2.082530552s ago: executing program 1 (id=4675): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}}, 0x88c4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e00010000000000000000"], 0x38}}, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) (async) r4 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x60) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) 2.002505071s ago: executing program 3 (id=4676): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0840bb00", @ANYRES32=r1, @ANYBLOB="2400a78020009b800400fd8014000e0000000000000000000000ffffac1414bb040053800400fd000800ce00ac1414bb0c00ce0009000000000000000000"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) write(r0, &(0x7f0000000000)="29f800c7cc272386779d9790930000140005b7ff200051915f95eb01010003a606a40e07fff024bb0000", 0x2a) 1.850636201s ago: executing program 1 (id=4679): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40000000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 1.789016395s ago: executing program 2 (id=4681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000200)={r1, 0x0, 0x3, 0x8, 0x7, 0x4}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x19) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x453, 0x2, 0x70bd2b, 0x25dfdbfd, "f52927abb330277fa987dbab2b33cf792ffe49429762784ffae408491fdac3c74a", ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x6ad9b7cd4970df25}, 0x2404480d) r5 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000380)=0x8, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20040c10) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000540)=0x1, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)={0x42c, 0x3f3, 0x800, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0xa, [0x5, 0x8, 0x5, 0x0, 0x5, 0x9, 0x4, 0x4, 0x2, 0x4, 0x5, 0xb4, 0x3, 0x7, 0x3, 0x4cb0, 0x66a, 0x7, 0xffffffff, 0x8, 0x2, 0x5, 0x3, 0x7, 0x3, 0x0, 0x7, 0xf, 0x6, 0xffff, 0x4fd, 0x2, 0x6, 0x8, 0x4, 0x0, 0xfffffffd, 0x3, 0x4, 0x1, 0xffffff01, 0x5, 0x6, 0x7, 0x4, 0xa, 0x8, 0x2, 0x401, 0x6, 0x4, 0x1000, 0x3, 0x1e5b087e, 0x6, 0x81, 0x2, 0x0, 0x3a8cad56, 0xbc99, 0x3, 0x7, 0x6, 0x10001], [0x7, 0xf03, 0x89, 0x5, 0x8, 0x6, 0x1, 0xfffffff9, 0x6d9, 0x5, 0x7, 0x0, 0x200, 0x7b56, 0x4, 0x18b0, 0x9, 0x47, 0xfffffffc, 0x6, 0x1, 0x5, 0x2, 0x6, 0x0, 0x2, 0x8, 0x5, 0x7, 0x3, 0x3, 0xa, 0x59c, 0xc84, 0x4, 0x8, 0x6, 0x1, 0x400, 0x7, 0x1, 0x98d000, 0x5, 0x7, 0x4, 0x7, 0x79, 0x9, 0x98f3, 0x6, 0x4fcfd654, 0x8000, 0x6f, 0x1, 0x9, 0x5, 0x1, 0x1, 0x3, 0x6, 0x5, 0xfffffffa, 0x0, 0x5], [0x81, 0xfff, 0x1, 0xffff, 0xfffffffd, 0x5, 0x40000000, 0x10, 0x8, 0xf4fb, 0x0, 0x7fff, 0x1, 0x5, 0xbed, 0x4, 0x7, 0x8001, 0x40, 0x5, 0x4, 0x7, 0x908, 0x4, 0xffffffff, 0x800, 0x3ff, 0x8, 0x2, 0x5, 0x8000, 0x7, 0x9, 0x7d82, 0x10000, 0x6, 0x4020, 0x7, 0x5, 0x2, 0x6, 0x10001, 0x6, 0x6, 0x3ff, 0x7, 0xe, 0x174, 0x94, 0x2, 0x1ff, 0x124b, 0x3, 0x9, 0x6, 0x0, 0x9, 0x3, 0x7, 0xf6d, 0x7, 0x9, 0x4, 0x8000], [0x1, 0x5, 0x1ff, 0x8, 0x4, 0x3ff, 0x5, 0x200, 0x5, 0x4, 0x9, 0x6, 0x9, 0x8, 0x1ff, 0xffffffff, 0x24000, 0x200, 0xff, 0xfffffff0, 0x164c000, 0x9, 0x0, 0xfffffff9, 0x29a, 0x80000001, 0x1ff, 0x6, 0x7, 0x5, 0x0, 0x774, 0x200, 0xfff, 0xf1, 0x8, 0x8, 0x4, 0x233e, 0xb487, 0x4, 0x7fffffff, 0x5, 0x4, 0x3, 0x0, 0x3, 0x7, 0x3, 0x8, 0x6, 0x3, 0x7, 0xc0, 0x0, 0x6, 0xfffffff8, 0x9, 0x1ff, 0x3, 0x9, 0x0, 0x8], 0xc, ['\':%^[\x00', 'wlan1\x00']}, [""]}, 0x42c}}, 0x4001) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000bc0)={0x0, 0xa0, "80f255ae6ad16877b2a6c800ec51acda4ab4919e1c42efcc5308783d454112ad217578f1369407b24030e805fdca3182740078100dbc47eb00fc87f827475c13f428cf17cafd1c661d3c7b2d7cbfb7e5146f4854dcfb0ad8a818d0eba4d6edcd7335b1655700ff324e19a9ab349675c71a181aeb7a53262053361aaf7d57b01013229e35a73e8a762819c60c695b5003fc567d66007431380e7d0852367be213"}, &(0x7f0000000c80)=0xa8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000cc0)={r10, @in6={{0xa, 0x4e22, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x2, 0x401, 0x7, 0x80000001, 0x2}, 0xfffffffffffffffd) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x84, r6, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x8001}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0x1}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2f26}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x1e, 0x0, @random="85dca17c0ccb4afdb5a695f1509e548c448247941d0a9db04c67"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040080}, 0xc800) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000f40)={0x2, 0x401, 0x2a, &(0x7f0000000f00)=""/42}) sendmsg$nl_route(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@ipv4_newrule={0x24, 0x20, 0x8, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0xc, 0x6, 0x0, 0x0, 0x6, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0xe2e}]}, 0x24}, 0x1, 0x0, 0x0, 0x40060}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000001080)={r10, 0x6a, "66afb5692d00e34584354f18052ef9c699aa3c9d8b09b09bd58bda6bae8e404a75c5b452393c9e50133caa8ef031ffc57f6431dac8604f0b41afd54dd10db137456f83f65ad96f6b8606d72a3b7e3038bbaeedcc7522e20a0604b98de63171cd71c9fc832b13dcfe352c"}, &(0x7f0000001100)=0x72) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000001180)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e23, @remote}, 0x281, 0x0, 0x0, 0x0, 0xd8, &(0x7f0000001140)='virt_wifi0\x00', 0x100000000, 0x9, 0x6}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x150c}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r11, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x4004f506, &(0x7f0000001340)) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000001380)=r2) 1.673520117s ago: executing program 1 (id=4682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r1, @ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000f8000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x108) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00'], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r9 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r9, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r10, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="880200e54a6fc90e99b159de8d64c452ddf05e9c7800", @ANYRES16=r12, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x844}, 0x80) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r11, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x86d3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}}, 0x44094) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x2, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) 1.435169804s ago: executing program 2 (id=4685): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.400101449s ago: executing program 1 (id=4688): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x2006c094) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18021f00040000000000000001850000007a001e009500"/32], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000"], 0x48) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="9c3cbb0f215959fdab43bc3adf1147a0c6c732082403ba7b105e623ba87eb11c1e8fcfb4e04c0c6e66165bfbc59070d1cd074c"}], 0x0, &(0x7f0000000180)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x1000}}]}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="2b228e17f7554c930fd7c90a0e3d658e9e93dcd61dff5452dbf1ba7905b24c8e46562ca564433981dbf71c3661c7e1588fc90d6ca7b85396aa0240df03ceb1e85082531d10e2f2d0da7a16b3a6d316a3a7f6c16afbd314d213bc77b3cee14e6ef3666b136ca2601e62f41437cb23448acd33eed0d7f0be126589cd8d32e79f4694c3f7cf0d75b4df81a87b1c91830551b8e7062a413d6559977e56d9818f1241f88d2a652e99555d68ff9d7d43595299e048eb16538fa9d4"}]}}], 0x1, 0x715076165a76ad26) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/199, 0x49}], 0x1}, 0xdac}], 0x1, 0x0, 0x0) 1.291255112s ago: executing program 4 (id=4689): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d10002"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x2}) (async) writev(r0, &(0x7f0000000180), 0x100000000000003c) 1.274424756s ago: executing program 2 (id=4690): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000340)="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") (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) (async) r1 = socket(0x2a, 0x2, 0x13) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x178, 0x1a, 0x633, 0x70bd28, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in=@multicast2, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x92be, 0x6}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0x3, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x0, 0x0, 0x10}, [@encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in6=@mcast2}}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x178}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x64}}, 0x4000080) 1.123180247s ago: executing program 4 (id=4692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x4888, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6gre0\x00'}]}}]}, 0x48}}, 0x2) 1.073607931s ago: executing program 0 (id=4693): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cca878e35f69c9cc01bd35", 0x42}, {&(0x7f0000000640)="e938cbaa17a9bfd765fcd96649f14c1cfeeaebcc378c703e2dbe1f040cdc5ca688fdb6f33f11fd7ecb56aa69dde9baa8ba34adb46be92b445c63df1cddb09eba21b6ce7cc1e89c22576fd66ac6063bb8cd176a159ce9973d8b3d5c311e41ec2fdec56dd57a652a2734c0dae0af7945da16d365a5871d26aec2dd6540a0c4a9", 0x7f}, {&(0x7f0000000200)}, {&(0x7f00000007c0)="efb0eed8af4f1689db4f82f733aa84f00ec114b80442a2da9b39762484ed25bf4335ee8c6a333e30470cc78789b07bbeba49b80186c52d27d0caf0abbecf9d68fdc9022b212a4a532093b3a3a16442fb253a2c484408a129a3e0f05211daeacc2824d16edadf7d4f7fea0af8837ace4e67219379aa56170b9650595ff12ed0e3d0", 0x81}, {&(0x7f0000000c80)="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", 0x1a5}, {&(0x7f00000006c0)="22ebfffe158406e141b721e6eaa3debffab1c918d3026749e3770cc77889608294058184432db5653203f5922132df", 0x2f}], 0x6}}], 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) (async, rerun: 64) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="200000000020000084000000020000000a000400280000000b000002", @ANYRESDEC=r4, @ANYRESDEC], 0x20, 0x2400e044}, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff000000, 0xff000000, 0xffffffff, 0xff], [0xff, 0xff, 0xffffff00, 0xff000000], 'wg1\x00', 'veth1_to_team\x00', {0x7f}, {0xff}, 0x3c, 0x7, 0x2, 0x2}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xfffffff8, 0x10000000, 'netbios-ns\x00', {0xc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) (async, rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="001b000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r11}, 0xc) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000240)=0x80000000, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) (async) getsockopt$inet6_buf(r8, 0x29, 0x30, 0x0, 0x0) 915.940975ms ago: executing program 4 (id=4694): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 830.505518ms ago: executing program 0 (id=4695): r0 = socket(0x11, 0x80000, 0xffffffff) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0xfffffffffffffcc5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="390005008afd000000"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000010000006110340000000000630198800085f1b2e3d0fbce4e000000538d0b2abebec53c948e3300ecf3ba33a339cf939e67573d87ebed6a742299192124504ccbb49bfb279b5d3596ec4bf003ec57626409c4b9d90ad3fd00000000000000fb0687e45edd1b13650398361315338bf6ed8e9ded842f2c9641e54ac78865f2e189f37593b954ff2baf891d4d05bf2359b7cb93ace34bcbe71f0243dbf2d84636f239ef5f18abc40e67b97b56c7d1ec5ff696aefeddb79e55178d481df010674c25890f6a8d0ae4bcf1cdbb755acdd80433af"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x685, 0x6}, &(0x7f00000000c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 765.046473ms ago: executing program 0 (id=4696): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008000100ac141400080005000a01010208000b0060"], 0x34}}, 0x0) 737.251913ms ago: executing program 4 (id=4697): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000004e0000000e0001006e657464657673696d0000000f0002006e6574646576fcffffff08000b00a76000000300111000"/70], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x10, 0x803, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4000000) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r6, 0x5c2a7000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 586.607595ms ago: executing program 0 (id=4698): r0 = socket(0x2, 0x3, 0x6) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r3, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000fc0)={0xa, 0x4e24, 0x5, @local, 0xb}, 0x1c) recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x38, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 536.86522ms ago: executing program 2 (id=4699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000ee0bbc0f2711cc39000000000a00ee0a30f230656c58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00f67f280001800e000100636f6e6e6c696d69740000001400028008000140800000010800024000000001140000001100010000000000000000000000000a"], 0x80}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x64, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800006}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9b48bb19b19ed400a415af9a063afce5"}]}]}, 0x64}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x240c0040) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r9, &(0x7f0000000480), 0x0}, 0x20) getsockopt$sock_timeval(r0, 0x1, 0x62, &(0x7f0000000080), &(0x7f00000000c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 452.739289ms ago: executing program 0 (id=4700): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) socket$inet6_sctp(0xa, 0x5, 0x84) 395.107726ms ago: executing program 4 (id=4701): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x378, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 394.699782ms ago: executing program 1 (id=4702): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}, {&(0x7f0000000080)}, {&(0x7f0000000300)="c4be5aa278c6e9cf5a3388fec514b113ec649c1aeccf82a26664c6a0943b8f210eb492e4cad744501e19c5247ce03ffbabfe55f3faba16fa3a102de57e67f3484ecc2146f97ca1b9c219b962f35ceba085982866a21c760ed8a761ec6d59a23973ff0effb7644a895cf37ae95bb7fb38279ee7ba38e209b2f0b30866", 0x7c}, {&(0x7f0000000380)="81890cee1324d96a99635658f58c13205a735211de441a66d30f8e407545e4da7831e6ede15377d5f3182f202b0c9febc0cb7db0caf9e1d8bde36e46fd89f6f2e1b9bd86d297a6d6ad6a862f251d5819e18fc40acd06d18bc614b67dfab03e0199876196300e1d4e5b27764717efe3d9eb89c89b582e30a64c5137fe7ca2011998bdd3f483e0b93d790e40cbec6320f334b6ca9eb41f86", 0x97}, {&(0x7f0000000440)="4f786c91aa3b0408d6877f1a2a07d86d4f4c0201f0aea8c94c4344180b675fb0fb743afd16d61339b95973884aa973909c573b034a857cf2267deaaf304b4fd32740d750318327049d3323ba29f3d3c4e2657f6e010dd7ac132075ddf8a6e684862a70bf4202283782112b56605b990a2a20c6a74d07e2cfd4a19d768874c40d925d0eb7927d172e9082b45e011d1f", 0x8f}, {&(0x7f0000000500)="7986411241f0c69c577ef5b86a2d2d7c1f72a9fabf7ae48ed534437a191c9d344efacd03e6ac09dc913aa5f0e24f3f8f53bb2b2ed113bc21ac859d660a3924e5cc59c9b7d71803c7e6f674e06aacbb59efbd857ae80649a9272d363e643b1f1d8301d8879bc1fcfa25ac3c786d007766121c4516a7145a4f46745990778aeecbb21310d08232966ded4bfdb4da472669fafdd19f645c74c3b70d402be22aa27277a050f64eea915d450fe1198f2554e25b1757c7493a4cc9f6b19800a5835b2606eb01456f8ca1b71ff23ccc5a388a82fabafe231b8c3ff7ea4c2148c5", 0xdd}, {&(0x7f0000000600)="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", 0x464}, {&(0x7f0000001600)}], 0x8}}], 0x1, 0x0) 215.747976ms ago: executing program 2 (id=4703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r5, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000ffdbdf25e0000001000000000000000000000000ff02000400004e210002000000002100"/58, @ANYRES8=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 200.337721ms ago: executing program 1 (id=4704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x6488, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6gre0\x00'}]}}]}, 0x48}}, 0x2) 152.641086ms ago: executing program 4 (id=4705): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000000c0)={0x80}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'perf_event'}, {0x2d, 'net_prio'}, {0x2b, 'freezer'}, {0x2b, 'net_cls'}, {0x2d, 'net'}, {0x2b, 'cpuacct'}]}, 0x36) sendmmsg$inet6(r0, &(0x7f0000003100)=[{{&(0x7f0000001700)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000001740)="7021ac924c740e4d5860623b32cf681b7ed0b46ae5960706dd32ab0ec1f724ffe1b7e913fcf517bfec21779f2b33c8370402fe0f0d8211f97dd76669d0cf6eb22fc97e58db8d7f688f24ebab87ebff2200ec584bd3f555fbf6030796b5675d6130b5783cf49f9d593a2af6e8a20967617a413e4ccabe9de91a548e0d1c36af8798f4fa42032515d59c1f220c52529519e4205c451f9e1081b7eb35e37c7944db5d91131a98de5457bbc6a3ceebdc6613e16b0421073de8f1b6482eabade67f7f54dabcb5", 0xc4}], 0x1, &(0x7f0000001880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x18}}, {{&(0x7f00000018c0)={0xa, 0x4e22, 0x0, @private0, 0x7}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001900)="b7", 0x1}, {&(0x7f0000001940)="d456f29b1fc3c801c1f46164d59570ea695bf9235a821170d6593cc77ffbef5ae8f640ef89c02786950dd0948f5288fc9037c3a8be5dbb35601737aaff63a383f356b5081f45aaf449eef8691200a6ee64b52270b24aace8ba24b2d9cc68c6ce", 0x60}, {&(0x7f00000019c0)="dccd57339e3579ce48552dee11d83804d97d615fa854eb6c81b719", 0x1b}, {&(0x7f0000001a00)="d3908b9d8c21f1fe501df35abac3ecb07f9940d1bc32d3db6b7ae02d303afa383371d7892e61a96528619a164bbf07a7feabf1291e3998a505ff4a", 0x3b}, {&(0x7f0000001a40)="163c77744a5065b346499583559109724191921be90904fc3f9d403933fe2a989e001740f93e16b550a5e349f2556b15371389263c0a1de3c8ff8cc05643deea6446abfbdab3c24685d3ac226ff3f00581d9f919cdabfc4ef7e3db478f4b6741d8021bceea71433409f5b06e4a2ab7598ac51ded3ef80160321b8c90ab65aa14ba9f8de5d8def9349fa8306d47926713188cd8390991d3d21bc7408d9f1011e374eecb813b6c1a489d2ef180ebb691d9e87aef358fea1bb0940070ac9eb171", 0xbf}], 0x5, &(0x7f0000001b80)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdr={{0x38, 0x29, 0x39, {0x16, 0x4, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private0]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1000}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c00)="0379900efe57f1be869511b04d99384bac5ff3d2a14724143ca03cba67a8b1c8748f796c13e7aaa0dd3c32388cbdf384b37fde5dd987f31f51cdaa5d6fe285c38d98431b660e14b3d572b2359b876f50369459a9c54d8cd5cffee2083a9b1e", 0x5f}, {&(0x7f0000001c80)="6144da2f0b7e0c29a298fed606d27085fb0056b69cb296258e892d0fcbbb1b94b71ee6946eefe203bc06be1e168b5bbd81b7e5b2147204ebf475333adeab195db27ccd04fa4e5a898f32258d2bc7e86f7f7459cc5ad4931029a5633581fb4ccfe7efdcbd7e8b1ef76ab9ffe6a6ebc2debbdebe5012a245a2", 0x78}, {&(0x7f0000001d00)="f0396d3df689eadcf89bb99fa98c0eacc7493aee054257efca4e51c23062078e516180247a0e303f66feb4f42deb1e08b216aebcec956ddc568a8f", 0x3b}], 0x3}}, {{&(0x7f0000001d80)={0xa, 0x4e21, 0x45, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)="0409a0089c9f2d5925924680df3533191e2f96b9c6fabc488b8ba01c80fbc1", 0x1f}, {&(0x7f0000001e00)="9470bd18fed34c4ce74676f8343f4ad2e386247bd4fd2d58d25a3578f3edab953fe251c7a2acf7290848486303a1e40a5ab3dc4fd75ec18758a869bc33d5b05dfc49bf95c54cae5c2a334e9ee4e4bec20395dc7291ac4bb8112543f2c4598d2f8f4a7f2207abfe261592ada1e1884c1f551a51b76e57b8f1ca7659fe679ed2601ff28781ce65b4e4b74030b1dfcbf9d6bfb045bdd1327c6ae505f30ccbdc61c8d62d3b61", 0xa4}, {&(0x7f0000001ec0)="a013da62c7c63f4ce8c29c6a1903be0118a034d66eeffc499c59af9be2e6aed7d5998cfe29ab222457f7061e9065ab020b76264610660200add3413822ccd470632a7a4fe15218a4a867184b053da9a9e0240645cbf5c03470fbd0c2003ff992db6bff20fa8ccf08729653f65229ae20e58532f2d6ec06e091f7f8c2c5b78f65d5099acfc4f15f00923fdfc08df9da38b41c8cfcc742607a6cfe7a04aaf935cea30c1b3601004e3bbf71b01f3147fbe835cb7b69e2f78ea90b4ed865db5599e6e7d74ea1bb530933bc3b0e57a8c4a0aad42ce703", 0xd4}], 0x3, &(0x7f0000002000)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x18}}, {{&(0x7f0000002040)={0xa, 0x4e22, 0x3, @loopback, 0x9c1}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="b939c00bfda89d7e35d9cdd3", 0xc}], 0x2}}], 0x5, 0x11) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0xffffffff}], 0x1, 0x40, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x100, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x6, 0x8, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000240)='GPL\x00', 0xf0000000, 0x84, &(0x7f0000000340)=""/132, 0x40f00, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r6, r7], &(0x7f0000001600)=[{0x3, 0x1, 0x0, 0x5}, {0x0, 0x4, 0x721, 0x8}, {0x5, 0x1, 0x5, 0x7}], 0x10, 0x3ee6}, 0x94) 91.193611ms ago: executing program 2 (id=4706): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket(0x2d, 0x2, 0x0) r3 = accept$nfc_llcp(r2, 0x0, 0x0) (async) recvfrom$rose(r2, &(0x7f0000000100)=""/69, 0x45, 0x40000000, 0x0, 0x0) sendto$rxrpc(r1, &(0x7f00000000c0)='{Y%PaiZ', 0x7, 0x4000044, 0x0, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) close(0x4) (async) listen(r4, 0x0) (async) r7 = socket(0x28, 0x5, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000400)={@l2tp6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1000, 0x1}, {&(0x7f0000000300)=""/174, 0xae}, &(0x7f00000003c0), 0x2}, 0xa0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) close(0x3) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000280)={r3, 0xe9dc, 0xbc, 0xfffffffe00000000}) connect$vsock_stream(r10, &(0x7f0000000080), 0x10) (async) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) r11 = accept4$unix(r4, 0x0, 0x0, 0x800) recvfrom$unix(r11, &(0x7f0000000140)=""/263, 0x107, 0x102, 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000000)=""/102, 0x66, 0x1, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'pim6reg0\x00', 0x1}) 90.53747ms ago: executing program 0 (id=4707): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 0s ago: executing program 3 (id=4708): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x1}}]}, 0x158}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket$caif_stream(0x25, 0x1, 0x3) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0x8007, 0xffff}, {0xffff, 0xfff1}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x4, 0x3, 0x1, 0x0, 0x4, 0xc}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r6, 0x57, "98928017d137d087522fe938f187994c84a53bec3f138aaced752bc9b6d27ec2cbd60781644b82bd3962e8a8c87a69ff8f2d44ec637cf2f681ff6a956ab681c08a8f5ed80ebb326b26fb48e4ce6381714af3e6db7046b5"}, &(0x7f0000000080)=0x5f) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async, rerun: 64) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x41) (rerun: 64) kernel console output (not intermixed with test programs): wn delay as MII monitoring is disabled [ 358.980455][T16439] bond15 (unregistering): Released all slaves [ 359.022738][ T5939] tipc: Disabling bearer [ 359.068710][ T5939] tipc: Disabling bearer [ 359.083101][ T5939] tipc: Left network mode [ 359.173909][T16446] syzkaller0: entered promiscuous mode [ 359.189008][T16446] syzkaller0: entered allmulticast mode [ 359.206176][T16446] tipc: Enabled bearer , priority 0 [ 359.283812][T16445] tipc: Resetting bearer [ 359.327413][T16445] tipc: Disabling bearer [ 359.351170][ T5939] IPVS: stopping backup sync thread 8188 ... [ 359.420197][T16470] bond8: option mode: unable to set because the bond device has slaves [ 359.567154][T16483] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3015'. [ 359.611845][T16483] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3015'. [ 359.624260][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3015'. [ 359.684888][ T51] Bluetooth: hci5: command tx timeout [ 359.858649][T16494] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3017'. [ 360.113748][T16502] xt_CONNSECMARK: invalid mode: 0 [ 360.962624][ T5939] hsr_slave_0: left promiscuous mode [ 360.984425][ T5939] hsr_slave_1: left promiscuous mode [ 361.210130][T16561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.518114][T16571] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 362.132893][T16158] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.189576][T16158] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.242321][T16158] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.326553][T16158] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.447439][T16588] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.477274][T16588] syzkaller0: entered promiscuous mode [ 362.508131][T16588] syzkaller0: entered allmulticast mode [ 362.540064][T16609] netlink: 'syz.3.3044': attribute type 1 has an invalid length. [ 362.568379][T16609] netlink: 'syz.3.3044': attribute type 4 has an invalid length. [ 362.591873][T16609] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.3044'. [ 362.783371][T16618] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20002 [ 363.019193][T16158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.066971][T16158] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.108478][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.115734][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.173311][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.180600][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.199853][T16627] tc_dump_action: action bad kind [ 363.598642][T16656] xt_l2tp: invalid flags combination: 8 [ 363.942048][T16158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.004823][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 364.012891][ C1] lec:lec_tx_timeout: lec0 [ 364.017543][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 364.170653][T16158] veth0_vlan: entered promiscuous mode [ 364.234676][T16158] veth1_vlan: entered promiscuous mode [ 364.301506][T16683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3060'. [ 364.346754][T16683] netlink: 'syz.1.3060': attribute type 39 has an invalid length. [ 364.441252][T16158] veth0_macvtap: entered promiscuous mode [ 364.471745][T16158] veth1_macvtap: entered promiscuous mode [ 364.479553][T16690] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3061'. [ 364.557296][T16158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.602889][T16158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.676351][T13080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.702288][T13080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.761463][T16697] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 364.793203][T16697] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 364.820528][T16697] gretap3: entered promiscuous mode [ 364.842959][T16697] gretap3: entered allmulticast mode [ 364.870323][T13080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.892652][T13080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.918240][T16703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3066'. [ 365.136775][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.164916][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.200434][T16722] netlink: 'syz.1.3069': attribute type 1 has an invalid length. [ 365.229129][T16722] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.3069'. [ 365.280871][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.312045][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.658121][T16750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2933'. [ 365.673475][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'. [ 365.707484][T16741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3072'. [ 366.280215][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.296032][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.315871][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.335192][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.349639][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.529504][T16766] virt_wifi0 speed is unknown, defaulting to 1000 [ 366.772095][T16781] tipc: Enabling of bearer rejected, failed to enable media [ 366.790391][T16788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.346566][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3090'. [ 367.420329][T16766] chnl_net:caif_netlink_parms(): no params data found [ 367.506732][T16816] virt_wifi0 speed is unknown, defaulting to 1000 [ 367.898436][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.930422][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.940255][T16766] bridge_slave_0: entered allmulticast mode [ 367.957781][T16766] bridge_slave_0: entered promiscuous mode [ 368.132102][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.140543][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.149806][T16766] bridge_slave_1: entered allmulticast mode [ 368.174345][T16766] bridge_slave_1: entered promiscuous mode [ 368.251661][T16766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.378085][T16766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.414532][ T51] Bluetooth: hci0: command tx timeout [ 368.422400][T16865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3101'. [ 368.471435][T16766] team0: Port device team_slave_0 added [ 368.496954][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 368.513751][T16766] team0: Port device team_slave_1 added [ 368.560537][T16874] netlink: 'syz.1.3105': attribute type 12 has an invalid length. [ 368.588196][T16865] bond1: Invalid ad_actor_system MAC address. [ 368.600357][T16865] bond1: option ad_actor_system: invalid value (1) [ 368.609435][T16865] bond1 (unregistering): Released all slaves [ 368.691336][T16874] bond11: option primary_reselect: invalid value (255) [ 368.700272][T16874] bond11 (unregistering): Released all slaves [ 368.742987][T16766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.752748][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.780874][T16766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.798629][T16766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.806843][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.833339][T16766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.025246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 369.033399][ C1] lec:lec_tx_timeout: lec0 [ 369.038283][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 369.050305][T16766] hsr_slave_0: entered promiscuous mode [ 369.086413][T16766] hsr_slave_1: entered promiscuous mode [ 369.095762][T16766] debugfs: 'hsr0' already exists in 'hsr' [ 369.101560][T16766] Cannot create hsr debugfs directory [ 369.661495][T16766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.676792][T16766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.690514][T16766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 369.863353][T16937] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.902607][T16937] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.913236][T16937] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.924404][T16937] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 369.951326][T16766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.970263][T16766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.989129][T16766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 370.146417][T16766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.175822][T16766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.202621][T16766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 370.375009][T16766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.387228][T16766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.412939][T16766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 370.485232][ T51] Bluetooth: hci0: command tx timeout [ 370.625973][T16976] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3132'. [ 370.753405][T16980] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3134'. [ 370.781175][T16981] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3134'. [ 370.809381][T16766] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.836557][T16985] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3136'. [ 370.847499][T16766] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.862335][T16986] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3136'. [ 370.877794][T16766] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.902906][T16766] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.266682][T16766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.533648][T17028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3142'. [ 371.542707][T16766] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.562006][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 371.676869][T13080] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.684154][T13080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.730803][T13080] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.738109][T13080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.069326][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'. [ 372.172402][T17052] syzkaller0: entered promiscuous mode [ 372.189634][T17052] syzkaller0: entered allmulticast mode [ 372.428902][T16766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.565200][ T51] Bluetooth: hci0: command tx timeout [ 372.638437][T17079] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 372.981360][T16766] veth0_vlan: entered promiscuous mode [ 373.017210][T16766] veth1_vlan: entered promiscuous mode [ 373.073692][T17098] netlink: 'syz.1.3158': attribute type 2 has an invalid length. [ 373.127122][T17102] netlink: 'syz.3.3159': attribute type 1 has an invalid length. [ 373.157151][T17102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.187800][T16766] veth0_macvtap: entered promiscuous mode [ 373.239014][T16766] veth1_macvtap: entered promiscuous mode [ 373.313616][T16766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.352169][T17111] team0: Device ip6gre1 is of different type [ 373.422647][T17112] team0: Device ip6gre1 is of different type [ 373.528144][T16766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.567400][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.579931][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.589476][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.686571][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.776906][T17132] __nla_validate_parse: 20 callbacks suppressed [ 373.776926][T17132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3165'. [ 373.885297][T16052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.915479][T16052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.000718][T13080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.025106][T13080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.044673][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 374.052782][ C1] lec:lec_tx_timeout: lec0 [ 374.058176][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 374.296478][T17151] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 374.308554][T17151] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3170'. [ 374.320057][T17151] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3170'. [ 374.332131][T17151] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 374.342253][T17151] netlink: 'syz.2.3170': attribute type 8 has an invalid length. [ 374.371032][T17151] netlink: 606 bytes leftover after parsing attributes in process `syz.2.3170'. [ 374.401237][T17152] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 374.410468][T17152] netlink: 760 bytes leftover after parsing attributes in process `syz.4.3075'. [ 374.591336][T17157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.651548][ T51] Bluetooth: hci0: command tx timeout [ 374.676391][T17160] ipt_ECN: cannot use operation on non-tcp rule [ 374.836299][T17163] x_tables: duplicate underflow at hook 1 [ 374.869096][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.880710][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.913912][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.923607][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.933937][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.329338][T17165] virt_wifi0 speed is unknown, defaulting to 1000 [ 375.416332][T17187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.503580][T17202] netlink: 'syz.4.3184': attribute type 1 has an invalid length. [ 375.516871][T17202] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3184'. [ 375.530866][T17202] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3184'. [ 375.540829][T17202] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3184'. [ 375.609324][T17204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3183'. [ 375.621494][T17204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3183'. [ 375.833120][T17217] netlink: 'syz.1.3186': attribute type 3 has an invalid length. [ 375.846028][T17212] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.922364][T17216] team_slave_0: entered promiscuous mode [ 375.928482][T17216] team_slave_1: entered promiscuous mode [ 375.960270][T17216] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.251993][T17228] block nbd3: Unsupported socket: should be TCP or UNIX. [ 376.264970][T17229] netlink: 'syz.0.3189': attribute type 28 has an invalid length. [ 376.319872][T17229] netlink: 'syz.0.3189': attribute type 3 has an invalid length. [ 376.595439][T17165] chnl_net:caif_netlink_parms(): no params data found [ 377.030515][T17248] syzkaller0: entered promiscuous mode [ 377.037845][T17248] syzkaller0: entered allmulticast mode [ 377.045713][ T5834] Bluetooth: hci3: command tx timeout [ 377.351010][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.383696][ T49] bridge_slave_0: left promiscuous mode [ 377.411112][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.783574][ T49] bond4 (unregistering): (slave erspan1): Releasing active interface [ 377.792911][ T49] erspan1 (unregistering): left promiscuous mode [ 377.806787][ T49] tipc: Disabling bearer [ 377.970029][ T49] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 377.978491][ T49] bridge3 (unregistering): left promiscuous mode [ 378.111706][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.126501][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.140699][ T49] bond0 (unregistering): (slave ): Releasing backup interface [ 378.156413][ T49] bond0 (unregistering): Released all slaves [ 378.168031][ T49] bond1 (unregistering): Released all slaves [ 378.184157][ T49] bond2 (unregistering): Released all slaves [ 378.204048][ T49] bond3 (unregistering): Released all slaves [ 378.220358][ T49] bond4 (unregistering): Released all slaves [ 378.243011][ T49] bond5 (unregistering): Released all slaves [ 378.261369][ T49] bond6 (unregistering): Released all slaves [ 378.278209][ T49] bond7 (unregistering): Released all slaves [ 378.304521][ T49] bond8 (unregistering): Released all slaves [ 378.320083][ T49] bond9 (unregistering): Released all slaves [ 378.336819][ T49] bond10 (unregistering): Released all slaves [ 378.358630][ T49] bond11 (unregistering): Released all slaves [ 378.374494][ T49] bond12 (unregistering): Released all slaves [ 378.392619][ T49] bond13 (unregistering): Released all slaves [ 378.413442][ T49] bond14 (unregistering): Released all slaves [ 378.452386][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.472374][T17266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.506428][T17165] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.537673][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.556571][T17165] bridge_slave_0: entered allmulticast mode [ 378.568503][T17165] bridge_slave_0: entered promiscuous mode [ 378.590249][T17165] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.633068][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.667688][T17165] bridge_slave_1: entered allmulticast mode [ 378.760535][T17165] bridge_slave_1: entered promiscuous mode [ 378.794534][ T49] 9: left promiscuous mode [ 378.862269][T17290] __nla_validate_parse: 4 callbacks suppressed [ 378.862290][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'. [ 379.011742][ T49] tipc: Disabling bearer [ 379.020089][ T49] tipc: Disabling bearer [ 379.049720][ T49] tipc: Left network mode [ 379.064970][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 379.073082][ C1] lec:lec_tx_timeout: lec0 [ 379.078087][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 379.099614][T17165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.125676][ T5834] Bluetooth: hci3: command tx timeout [ 379.167241][T17165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.376432][ T1726] block nbd2: Possible stuck request ffff888026900000: control (read@0,1024B). Runtime 90 seconds [ 379.394851][ T1726] block nbd2: Possible stuck request ffff888026900200: control (read@1024,1024B). Runtime 90 seconds [ 379.406150][ T1726] block nbd2: Possible stuck request ffff888026900400: control (read@2048,1024B). Runtime 90 seconds [ 379.417677][ T1726] block nbd2: Possible stuck request ffff888026900600: control (read@3072,1024B). Runtime 90 seconds [ 379.540128][T17165] team0: Port device team_slave_0 added [ 379.579673][T17165] team0: Port device team_slave_1 added [ 379.729115][T17330] SET target dimension over the limit! [ 379.848714][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 379.992483][T17165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.024437][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.123172][T17165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.178250][T17354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3219'. [ 380.190331][T17165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.214963][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.270337][T17165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.587683][T17165] hsr_slave_0: entered promiscuous mode [ 380.605637][T17165] hsr_slave_1: entered promiscuous mode [ 380.633916][T17165] debugfs: 'hsr0' already exists in 'hsr' [ 380.650621][T17165] Cannot create hsr debugfs directory [ 380.758176][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3225'. [ 380.803215][T17391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3226'. [ 380.833994][T17388] : entered promiscuous mode [ 380.861609][ T5834] block nbd3: Receive control failed (result -22) [ 380.888414][T17374] virt_wifi0 speed is unknown, defaulting to 1000 [ 380.933585][T17396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3227'. [ 381.205595][ T5834] Bluetooth: hci3: command tx timeout [ 381.206259][T17403] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3228'. [ 382.049915][ T49] hsr_slave_0: left promiscuous mode [ 382.065560][ T49] hsr_slave_1: left promiscuous mode [ 382.082169][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.111417][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.482426][ T49] team0 (unregistering): Port device team_slave_1 removed [ 382.503587][ T49] team0 (unregistering): Port device team_slave_0 removed [ 382.629693][T17441] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3235'. [ 383.288752][ T5834] Bluetooth: hci3: command tx timeout [ 383.458672][ T49] IPVS: stop unused estimator thread 0... [ 383.500119][T17494] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3244'. [ 383.572182][T17497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3244'. [ 383.683410][T17496] virt_wifi0 speed is unknown, defaulting to 1000 [ 383.753987][T17165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.837928][T17165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.915315][T17165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.090710][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 384.098809][ C1] lec:lec_tx_timeout: lec0 [ 384.103886][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 384.368354][T17165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.676966][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 384.686173][T17527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3252'. [ 384.856716][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 385.069233][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3256'. [ 385.297215][T17165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.341047][T17569] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3258'. [ 385.362588][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'. [ 385.378461][T17165] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.405872][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.413080][T16048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.491979][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.499236][T16052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.834891][T17590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3264'. [ 386.054530][T17599] netlink: 'syz.0.3266': attribute type 1 has an invalid length. [ 386.067913][T17599] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3266'. [ 386.293902][T17165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.437663][T17611] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 386.496969][T17165] veth0_vlan: entered promiscuous mode [ 386.578496][T17165] veth1_vlan: entered promiscuous mode [ 386.779754][T17165] veth0_macvtap: entered promiscuous mode [ 386.814277][T17626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3272'. [ 386.969666][T17165] veth1_macvtap: entered promiscuous mode [ 387.138979][T17165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.200030][T17165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.302550][T17654] sctp: [Deprecated]: syz.0.3278 (pid 17654) Use of int in max_burst socket option deprecated. [ 387.302550][T17654] Use struct sctp_assoc_value instead [ 387.350192][T17657] netlink: 'syz.1.3280': attribute type 3 has an invalid length. [ 389.090123][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.115008][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 389.123111][ C1] lec:lec_tx_timeout: lec0 [ 389.128283][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 389.145788][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.155509][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.177857][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.666346][T16052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.674296][T16052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.762980][T17724] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3290'. [ 389.793410][T17724] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3290'. [ 389.886404][T16048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.905813][T16048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.133415][T17747] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3293'. [ 390.396633][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 390.486802][T17758] xt_hashlimit: size too large, truncated to 1048576 [ 390.581558][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'. [ 390.597500][T17761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3296'. [ 390.823595][T17771] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3297'. [ 390.859191][T17771] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3297'. [ 390.907801][T17771] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3297'. [ 391.346043][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3302'. [ 391.409903][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.421993][T17791] netlink: 'syz.4.3302': attribute type 3 has an invalid length. [ 391.431217][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.446906][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.461765][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.470332][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.618846][T17795] virt_wifi0 speed is unknown, defaulting to 1000 [ 392.374928][T17795] chnl_net:caif_netlink_parms(): no params data found [ 392.712685][T17795] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.737590][T17795] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.757772][T17795] bridge_slave_0: entered allmulticast mode [ 392.782583][T17795] bridge_slave_0: entered promiscuous mode [ 392.888363][T17795] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.930717][T17795] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.965840][T17795] bridge_slave_1: entered allmulticast mode [ 392.980851][T17795] bridge_slave_1: entered promiscuous mode [ 393.124421][T17795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.179336][T17795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.258474][T17878] netlink: 'syz.0.3319': attribute type 16 has an invalid length. [ 393.300153][T17878] netlink: 'syz.0.3319': attribute type 3 has an invalid length. [ 393.319916][T17795] team0: Port device team_slave_0 added [ 393.338418][T17795] team0: Port device team_slave_1 added [ 393.400083][T17888] netlink: 'syz.3.3321': attribute type 1 has an invalid length. [ 393.441876][T17889] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.453198][T17892] sctp: [Deprecated]: syz.0.3319 (pid 17892) Use of int in max_burst socket option. [ 393.453198][T17892] Use struct sctp_assoc_value instead [ 393.484319][T17795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.492090][T17795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.535400][ T5834] Bluetooth: hci1: command tx timeout [ 393.553419][T17795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.572165][T17795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.579804][T17795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.607217][T17795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.739114][T17795] hsr_slave_0: entered promiscuous mode [ 393.746311][T17795] hsr_slave_1: entered promiscuous mode [ 394.109635][T17795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 394.144675][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 394.152756][ C1] lec:lec_tx_timeout: lec0 [ 394.157857][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.277462][T17795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 394.380297][T17795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 394.447724][T17795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 394.710599][T17795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.772135][T17795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.822305][T17936] __nla_validate_parse: 9 callbacks suppressed [ 394.822327][T17936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3327'. [ 394.855360][T17795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.890928][T17795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.023614][T17948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3329'. [ 395.123874][T17795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.183068][T17795] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.211666][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.218923][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.230070][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.237317][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.581317][T17968] netlink: 'syz.3.3336': attribute type 1 has an invalid length. [ 395.607980][T17968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3336'. [ 395.621213][ T5834] Bluetooth: hci1: command tx timeout [ 395.690885][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 395.729990][T17968] netlink: 'syz.3.3336': attribute type 3 has an invalid length. [ 395.754067][T17795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.814234][T17795] veth0_vlan: entered promiscuous mode [ 395.831488][T17795] veth1_vlan: entered promiscuous mode [ 395.912339][T17795] veth0_macvtap: entered promiscuous mode [ 395.950957][T17795] veth1_macvtap: entered promiscuous mode [ 395.997557][T17795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.028700][T17795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.073104][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.097408][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.116650][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.129391][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.241610][T16048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.250198][T16048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.289037][T13080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.297641][T13080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.685094][ T5834] Bluetooth: hci1: command tx timeout [ 399.165188][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 399.173259][ C1] lec:lec_tx_timeout: lec0 [ 399.177931][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.404129][ T5186] udevd[5186]: worker [8836] /devices/virtual/block/nbd2 is taking a long time [ 399.764977][ T5834] Bluetooth: hci1: command tx timeout [ 404.184840][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 404.192905][ C1] lec:lec_tx_timeout: lec0 [ 404.197797][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 409.448050][ T1726] block nbd2: Possible stuck request ffff888026900000: control (read@0,1024B). Runtime 120 seconds [ 409.458997][ T1726] block nbd2: Possible stuck request ffff888026900200: control (read@1024,1024B). Runtime 120 seconds [ 409.470169][ T1726] block nbd2: Possible stuck request ffff888026900400: control (read@2048,1024B). Runtime 120 seconds [ 409.481603][ T1726] block nbd2: Possible stuck request ffff888026900600: control (read@3072,1024B). Runtime 120 seconds [ 410.084714][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5890 ms [ 410.092805][ C1] lec:lec_tx_timeout: lec0 [ 410.098526][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 415.115126][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 415.123197][ C1] lec:lec_tx_timeout: lec0 [ 415.128469][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 420.135066][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 420.143143][ C1] lec:lec_tx_timeout: lec0 [ 420.147834][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 421.619100][T17999] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3344'. [ 421.657981][T17999] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3344'. [ 421.744314][T18006] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.3347'. [ 421.829755][T18006] sctp: [Deprecated]: syz.0.3347 (pid 18006) Use of int in maxseg socket option. [ 421.829755][T18006] Use struct sctp_assoc_value instead [ 421.947629][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.957666][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.985293][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.996401][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.004248][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.088005][T18011] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.139397][T18024] "syz.2.3352" (18024) uses obsolete ecb(arc4) skcipher [ 422.330363][T18031] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 422.666296][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3359'. [ 422.677814][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'. [ 422.718527][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'. [ 422.718562][T16048] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.757099][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'. [ 422.800249][T16048] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.822777][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3360'. [ 422.835471][T18011] chnl_net:caif_netlink_parms(): no params data found [ 422.862735][T16048] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.873113][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3360'. [ 422.882344][T16048] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.918632][T16048] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.939137][ T1336] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.099812][ T1336] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.114436][ T1336] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.125156][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3364'. [ 423.259349][T18011] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.294860][T18011] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.302195][T18011] bridge_slave_0: entered allmulticast mode [ 423.366713][T18011] bridge_slave_0: entered promiscuous mode [ 423.386249][T18011] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.402280][T18011] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.414357][T18011] bridge_slave_1: entered allmulticast mode [ 423.428919][T18011] bridge_slave_1: entered promiscuous mode [ 423.549302][T18011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.588332][T18011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.737938][T18011] team0: Port device team_slave_0 added [ 423.751608][T18011] team0: Port device team_slave_1 added [ 423.954820][T18097] syzkaller0: entered promiscuous mode [ 423.960540][T18097] syzkaller0: entered allmulticast mode [ 423.989064][T18011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.006114][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.043570][T18011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.084838][ T51] Bluetooth: hci2: command tx timeout [ 424.254491][T18115] netlink: 'syz.0.3377': attribute type 10 has an invalid length. [ 425.155964][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 425.164014][ C1] lec:lec_tx_timeout: lec0 [ 425.168760][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 425.777990][T18011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.785938][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.812667][T18011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.847128][T18115] dummy0: entered promiscuous mode [ 425.854414][T18115] team0: Port device dummy0 added [ 425.884834][T18107] netlink: 'syz.4.3376': attribute type 29 has an invalid length. [ 426.058107][T18011] hsr_slave_0: entered promiscuous mode [ 426.078489][T18011] hsr_slave_1: entered promiscuous mode [ 426.120797][T18011] debugfs: 'hsr0' already exists in 'hsr' [ 426.145243][T18011] Cannot create hsr debugfs directory [ 426.166544][ T51] Bluetooth: hci2: command tx timeout [ 426.274245][T18139] netlink: 'syz.3.3387': attribute type 11 has an invalid length. [ 426.671618][T18163] __nla_validate_parse: 2 callbacks suppressed [ 426.671637][T18163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3393'. [ 426.707191][T18165] FAULT_INJECTION: forcing a failure. [ 426.707191][T18165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.742243][T18165] CPU: 1 UID: 0 PID: 18165 Comm: syz.0.3392 Not tainted syzkaller #0 PREEMPT(full) [ 426.742273][T18165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 426.742295][T18165] Call Trace: [ 426.742303][T18165] [ 426.742312][T18165] dump_stack_lvl+0xe8/0x150 [ 426.742347][T18165] should_fail_ex+0x412/0x560 [ 426.742382][T18165] _copy_from_user+0x2d/0xb0 [ 426.742403][T18165] ___sys_sendmsg+0x1c6/0x360 [ 426.742428][T18165] ? __lock_acquire+0x6b5/0x2cf0 [ 426.742455][T18165] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.742514][T18165] ? __fget_files+0x2a/0x420 [ 426.742534][T18165] ? __fget_files+0x3a0/0x420 [ 426.742563][T18165] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.742592][T18165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.742628][T18165] ? __pfx_ksys_write+0x10/0x10 [ 426.742685][T18165] do_syscall_64+0x14d/0xf80 [ 426.742712][T18165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.742730][T18165] ? trace_irq_disable+0x37/0x100 [ 426.742753][T18165] ? clear_bhb_loop+0x40/0x90 [ 426.742777][T18165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.742800][T18165] RIP: 0033:0x7f612759bf79 [ 426.742819][T18165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.742836][T18165] RSP: 002b:00007f61283e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.742857][T18165] RAX: ffffffffffffffda RBX: 00007f6127816090 RCX: 00007f612759bf79 [ 426.742872][T18165] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000004 [ 426.742885][T18165] RBP: 00007f61283e0090 R08: 0000000000000000 R09: 0000000000000000 [ 426.742898][T18165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.742909][T18165] R13: 00007f6127816128 R14: 00007f6127816090 R15: 00007ffca856ff38 [ 426.742946][T18165] [ 426.780542][T18173] netlink: 'syz.4.3394': attribute type 1 has an invalid length. [ 427.122390][T18173] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 427.411719][T18190] netlink: 'syz.4.3398': attribute type 3 has an invalid length. [ 427.455280][T18196] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 427.521487][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3401'. [ 427.646765][T18201] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3403'. [ 427.667890][T18201] netlink: 'syz.4.3403': attribute type 2 has an invalid length. [ 427.736828][T18201] netlink: 'syz.4.3403': attribute type 4 has an invalid length. [ 427.967878][T18215] netlink: 'syz.0.3409': attribute type 4 has an invalid length. [ 427.997432][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3409'. [ 428.043190][T12693] IPVS: starting estimator thread 0... [ 428.166466][T18224] IPVS: using max 26 ests per chain, 62400 per kthread [ 428.208286][T18011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.245046][ T51] Bluetooth: hci2: command tx timeout [ 428.258425][T18011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.288939][T18011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.337638][T18011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.492690][T18262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3416'. [ 428.967770][T18229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.184776][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 430.192863][ C1] lec:lec_tx_timeout: lec0 [ 430.197607][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 430.325620][ T51] Bluetooth: hci2: command tx timeout [ 431.122792][T18230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.353886][T18011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.405202][T18282] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 431.463019][T18287] xt_TPROXY: Can be used only with -p tcp or -p udp [ 431.493804][T18011] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.553997][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.561286][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.573411][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3424'. [ 431.637206][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.644463][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.794213][T18305] FAULT_INJECTION: forcing a failure. [ 431.794213][T18305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.861218][T18305] CPU: 0 UID: 0 PID: 18305 Comm: syz.2.3427 Not tainted syzkaller #0 PREEMPT(full) [ 431.861249][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 431.861262][T18305] Call Trace: [ 431.861271][T18305] [ 431.861280][T18305] dump_stack_lvl+0xe8/0x150 [ 431.861314][T18305] should_fail_ex+0x412/0x560 [ 431.861351][T18305] _copy_to_user+0x31/0xb0 [ 431.861376][T18305] simple_read_from_buffer+0xe1/0x170 [ 431.861414][T18305] proc_fail_nth_read+0x1bb/0x230 [ 431.861445][T18305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.861477][T18305] ? rw_verify_area+0x2a6/0x4d0 [ 431.861509][T18305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.861538][T18305] vfs_read+0x20c/0xa70 [ 431.861560][T18305] ? fdget_pos+0x246/0x320 [ 431.861586][T18305] ? __pfx___mutex_lock+0x10/0x10 [ 431.861622][T18305] ? __pfx_vfs_read+0x10/0x10 [ 431.861649][T18305] ? __fget_files+0x2a/0x420 [ 431.861673][T18305] ? __fget_files+0x3a0/0x420 [ 431.861692][T18305] ? __fget_files+0x2a/0x420 [ 431.861722][T18305] ksys_read+0x150/0x270 [ 431.861750][T18305] ? __pfx_ksys_read+0x10/0x10 [ 431.861787][T18305] do_syscall_64+0x14d/0xf80 [ 431.861821][T18305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.861840][T18305] ? trace_irq_disable+0x37/0x100 [ 431.861864][T18305] ? clear_bhb_loop+0x40/0x90 [ 431.861890][T18305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.861909][T18305] RIP: 0033:0x7f04d2d5c84e [ 431.861928][T18305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 431.861946][T18305] RSP: 002b:00007f04d3c93fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.861967][T18305] RAX: ffffffffffffffda RBX: 00007f04d3c946c0 RCX: 00007f04d2d5c84e [ 431.861982][T18305] RDX: 000000000000000f RSI: 00007f04d3c940a0 RDI: 0000000000000007 [ 431.861995][T18305] RBP: 00007f04d3c94090 R08: 0000000000000000 R09: 0000000000000000 [ 431.862008][T18305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.862020][T18305] R13: 00007f04d3016218 R14: 00007f04d3016180 R15: 00007fff751a9cf8 [ 431.862054][T18305] [ 432.228552][T18311] syzkaller0: entered promiscuous mode [ 432.234110][T18311] syzkaller0: entered allmulticast mode [ 432.389017][T18319] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 432.429402][T18011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.484547][T18323] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3432'. [ 432.507988][T18011] veth0_vlan: entered promiscuous mode [ 432.520425][T18011] veth1_vlan: entered promiscuous mode [ 432.553228][T18011] veth0_macvtap: entered promiscuous mode [ 432.569176][T18011] veth1_macvtap: entered promiscuous mode [ 432.590955][T18011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.603985][T18011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.620635][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.631458][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.641761][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.652541][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.336394][T18281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.446196][T16052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.466553][T16052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.537509][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.576490][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.603154][T18328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3434'. [ 434.698451][T18335] netlink: 'syz.4.3437': attribute type 9 has an invalid length. [ 434.766567][T18337] netlink: 'syz.3.3436': attribute type 1 has an invalid length. [ 434.878555][T18337] bond1: entered promiscuous mode [ 434.901722][T18337] bond1: entered allmulticast mode [ 434.940798][T18337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.029033][T18342] erspan2: entered allmulticast mode [ 435.067815][T18342] bond1: (slave erspan2): making interface the new active one [ 435.085900][T18342] erspan2: entered promiscuous mode [ 435.107458][T18342] bond1: (slave erspan2): Enslaving as an active interface with an up link [ 435.154391][T18363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3442'. [ 435.416758][T18375] netlink: 'syz.1.3448': attribute type 10 has an invalid length. [ 435.440907][T18375] team0: Device ipvlan1 failed to register rx_handler [ 435.504135][T18378] netlink: 'syz.2.3449': attribute type 10 has an invalid length. [ 435.540347][T18378] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.557182][T18378] bridge_slave_1: left allmulticast mode [ 435.562994][T18378] bridge_slave_1: left promiscuous mode [ 435.569879][T18384] xt_l2tp: invalid flags combination: 8 [ 435.590522][T18378] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.681841][T18378] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 435.908469][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3455'. [ 436.221361][T18398] vlan2: entered promiscuous mode [ 436.227384][T18398] vlan2: entered allmulticast mode [ 436.232663][T18398] hsr_slave_1: entered allmulticast mode [ 436.324627][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 436.332697][ C1] lec:lec_tx_timeout: lec0 [ 436.348294][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 436.373202][T18413] tipc: Started in network mode [ 436.379518][T18413] tipc: Node identity aedf323546bc, cluster identity 4711 [ 436.423734][T18413] tipc: Enabled bearer , priority 0 [ 436.678767][T18412] tipc: Disabling bearer [ 436.712403][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3462'. [ 436.831269][T18432] bond1: entered promiscuous mode [ 436.840579][T18432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.934333][T18437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.960375][T18437] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 436.974159][T18437] bond1: (slave sit1): Error -95 calling set_mac_address [ 437.110580][T18449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3468'. [ 437.334354][T18460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3472'. [ 437.448173][T18470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3475'. [ 437.460104][T18470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3475'. [ 437.472694][T18470] netlink: 'syz.1.3475': attribute type 1 has an invalid length. [ 437.483841][T18470] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3475'. [ 437.737368][T18479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.766106][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3477'. [ 437.838001][T18472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3476'. [ 437.901546][T18488] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3479'. [ 438.020711][T18491] veth0_to_bond: entered allmulticast mode [ 438.239196][T18494] syzkaller0: entered promiscuous mode [ 438.252380][T18506] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 438.265785][T18494] syzkaller0: entered allmulticast mode [ 438.287573][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 438.299550][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3484'. [ 438.300060][T18506] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 438.341834][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 438.352133][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3484'. [ 438.381838][T18494] netlink: 'syz.1.3481': attribute type 9 has an invalid length. [ 438.449012][T18511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3487'. [ 438.486709][T18514] openvswitch: netlink: IP tunnel dst address not specified [ 438.490883][T18515] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3489'. [ 438.507353][T18515] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 438.648311][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 438.842262][T18534] netlink: 'syz.3.3492': attribute type 10 has an invalid length. [ 439.142184][T18548] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 439.160528][T18548] bond2 (unregistering): Released all slaves [ 439.525820][ T1726] block nbd2: Possible stuck request ffff888026900000: control (read@0,1024B). Runtime 150 seconds [ 439.536719][ T1726] block nbd2: Possible stuck request ffff888026900200: control (read@1024,1024B). Runtime 150 seconds [ 439.548649][ T1726] block nbd2: Possible stuck request ffff888026900400: control (read@2048,1024B). Runtime 150 seconds [ 439.560363][ T1726] block nbd2: Possible stuck request ffff888026900600: control (read@3072,1024B). Runtime 150 seconds [ 439.601386][T18565] netem: change failed [ 440.188761][T18596] netlink: 'syz.1.3514': attribute type 4 has an invalid length. [ 440.191223][T18593] netlink: 'syz.3.3515': attribute type 9 has an invalid length. [ 440.441378][T18608] netlink: 'syz.1.3518': attribute type 15 has an invalid length. [ 440.859132][T18575] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 441.060205][T18633] syzkaller0: entered promiscuous mode [ 441.129381][T18633] syzkaller0: entered allmulticast mode [ 441.327157][T18654] openvswitch: netlink: Message has 8 unknown bytes. [ 441.348361][T18654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.658171][T18675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 441.665498][T18675] IPv6: NLM_F_CREATE should be set when creating new route [ 442.094688][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 442.102803][ C1] lec:lec_tx_timeout: lec0 [ 442.252312][T18713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.318587][T18713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.371253][T18717] tipc: Started in network mode [ 442.377448][T18717] tipc: Node identity 7a2f51ae16fb, cluster identity 4711 [ 442.397828][T18717] tipc: Enabled bearer , priority 0 [ 442.416917][T18717] syzkaller0: entered promiscuous mode [ 442.422557][T18717] syzkaller0: entered allmulticast mode [ 442.487098][T18717] tipc: Resetting bearer [ 442.523464][T18715] tipc: Resetting bearer [ 442.592703][T18715] tipc: Disabling bearer [ 442.850253][T18745] __nla_validate_parse: 19 callbacks suppressed [ 442.850276][T18745] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.3555'. [ 443.004398][T18757] sctp: [Deprecated]: syz.1.3560 (pid 18757) Use of int in maxseg socket option. [ 443.004398][T18757] Use struct sctp_assoc_value instead [ 443.139651][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3560'. [ 443.268561][T18778] netlink: 'syz.3.3567': attribute type 2 has an invalid length. [ 443.317890][T18779] netlink: 'syz.3.3567': attribute type 2 has an invalid length. [ 443.357395][T18778] #{6c: entered promiscuous mode [ 443.468793][T18786] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 443.715948][T18795] tc_dump_action: action bad kind [ 443.891436][T18800] can: request_module (can-proto-0) failed. [ 444.428853][T18839] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 444.446661][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3580'. [ 444.607962][T18847] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3586'. [ 444.893961][ T5939] syzkaller0: tun_net_xmit 76 [ 444.899803][ T5939] syzkaller0: tun_net_xmit 48 [ 444.915784][T12706] syzkaller0: tun_net_xmit 76 [ 445.296120][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 446.162711][T18919] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 447.231542][T18935] netlink: 'syz.0.3621': attribute type 1 has an invalid length. [ 447.405687][T18939] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3622'. [ 447.688539][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 447.927043][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 447.937283][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 448.008490][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 448.071959][T18982] team_slave_1: mtu less than device minimum [ 448.166446][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 448.176734][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 448.253430][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 448.263691][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 448.278713][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3643'. [ 448.326035][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 448.934467][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3654'. [ 448.962357][T19034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3654'. [ 448.980228][T19023] virt_wifi0 speed is unknown, defaulting to 1000 [ 448.996732][T19037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3654'. [ 449.014520][T19028] virt_wifi0 speed is unknown, defaulting to 1000 [ 449.170716][T19046] netlink: 5496 bytes leftover after parsing attributes in process `syz.2.3658'. [ 449.696055][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3665'. [ 449.713461][T19068] erspan0: entered promiscuous mode [ 449.921135][T19081] tipc: Started in network mode [ 449.945317][T19081] tipc: Node identity 9a7087d7362f, cluster identity 4711 [ 449.962172][T19081] tipc: Enabled bearer , priority 0 [ 450.007802][T19085] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 450.090326][T19081] syzkaller0: entered promiscuous mode [ 450.098345][T19081] syzkaller0: entered allmulticast mode [ 450.133304][T19081] tipc: Resetting bearer [ 450.208963][T19081] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.366053][T19079] tipc: Resetting bearer [ 450.974803][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 450.983001][ C1] lec:lec_tx_timeout: lec0 [ 451.210701][ C0] sctp_transport_update_pmtu: 56 callbacks suppressed [ 451.210718][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 451.227768][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 451.290524][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 451.687511][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 451.847145][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 451.857361][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 451.861415][T19120] SET target dimension over the limit! [ 451.930319][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 451.940552][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 452.006175][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 452.081581][T19079] tipc: Disabling bearer [ 452.088949][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 452.108193][T12691] tipc: Node number set to 2891941847 [ 452.257577][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3681'. [ 452.298316][T19130] syzkaller0: entered promiscuous mode [ 452.305782][T19130] syzkaller0: entered allmulticast mode [ 452.377611][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3684'. [ 452.390056][T19130] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3684'. [ 452.415953][T19130] netlink: ct family unspecified [ 452.536335][T19141] tipc: Enabling of bearer rejected, media not registered [ 452.857555][T19158] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3696'. [ 453.116317][T19165] hsr_slave_0 (unregistering): left promiscuous mode [ 453.133779][T19179] netlink: 'syz.3.3701': attribute type 1 has an invalid length. [ 453.269423][T19184] bond2: (slave geneve2): making interface the new active one [ 453.280003][T19184] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 453.291851][T16048] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 453.300639][T19189] __nla_validate_parse: 2 callbacks suppressed [ 453.300685][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3703'. [ 453.325444][T16048] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 453.334557][T16048] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 453.356621][T16048] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 453.395452][T19189] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3703'. [ 453.453636][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3706'. [ 453.464037][T19189] veth0: entered promiscuous mode [ 453.473231][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3703'. [ 453.633111][T19207] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3708'. [ 453.656833][T19208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3707'. [ 453.702693][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3707'. [ 454.252914][T19229] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.3715'. [ 454.697267][T19246] netlink: 'syz.2.3720': attribute type 6 has an invalid length. [ 454.708365][T19247] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3718'. [ 454.719668][T19246] netlink: 'syz.2.3720': attribute type 6 has an invalid length. [ 454.770072][T19247] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 455.049169][T19262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3722'. [ 455.061059][T12702] IPVS: starting estimator thread 0... [ 455.155220][T19263] IPVS: using max 35 ests per chain, 84000 per kthread [ 455.238595][T19269] Cannot find add_set index 65532 as target [ 455.882846][T12702] IPVS: starting estimator thread 0... [ 455.926359][T19299] netlink: 'syz.1.3734': attribute type 4 has an invalid length. [ 455.942313][T19304] netlink: 'syz.0.3736': attribute type 1 has an invalid length. [ 455.973936][T19304] netlink: 'syz.0.3736': attribute type 3 has an invalid length. [ 455.984672][T19302] IPVS: using max 29 ests per chain, 69600 per kthread [ 456.005825][T19304] NCSI netlink: No device for ifindex 813332851 [ 456.036498][T19304] netlink: 'syz.0.3736': attribute type 1 has an invalid length. [ 456.044280][T19304] netlink: 'syz.0.3736': attribute type 3 has an invalid length. [ 456.065326][T19304] NCSI netlink: No device for ifindex 813332851 [ 456.407618][ C0] sctp_transport_update_pmtu: 43 callbacks suppressed [ 456.407641][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 456.424769][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 456.887298][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 457.449637][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 457.459894][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 457.470256][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 457.526336][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 457.766381][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 457.926414][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 458.089682][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 458.368577][T19401] netlink: 'syz.3.3764': attribute type 1 has an invalid length. [ 458.409273][T19401] __nla_validate_parse: 11 callbacks suppressed [ 458.409312][T19401] netlink: 476 bytes leftover after parsing attributes in process `syz.3.3764'. [ 458.479007][T19401] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3764'. [ 458.663149][T19413] netlink: 'syz.3.3769': attribute type 9 has an invalid length. [ 458.737910][T19416] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 458.744526][T19416] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 459.286601][T19444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3777'. [ 459.322448][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3778'. [ 459.566939][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3783'. [ 459.721720][T19472] netlink: 'syz.2.3786': attribute type 1 has an invalid length. [ 459.772972][T19472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.821206][T19472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.841572][T19485] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 459.853268][T19472] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 459.900126][T19472] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 459.952561][T19492] netlink: 'syz.3.3791': attribute type 16 has an invalid length. [ 459.961123][T19492] netlink: 'syz.3.3791': attribute type 17 has an invalid length. [ 460.247582][T19506] delete_channel: no stack [ 460.299033][T19492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.428568][T19515] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 460.736852][T19530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3802'. [ 460.802851][T19530] sctp: [Deprecated]: syz.4.3802 (pid 19530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.802851][T19530] Use struct sctp_sack_info instead [ 460.896523][T19539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3802'. [ 461.122814][T19548] ip6gre1: entered allmulticast mode [ 461.499706][T19567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3812'. [ 461.591610][T19571] netlink: 'syz.0.3815': attribute type 1 has an invalid length. [ 461.612903][T19569] syzkaller0: entered promiscuous mode [ 461.622841][T19569] syzkaller0: entered allmulticast mode [ 461.632958][T19576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3816'. [ 461.723961][T19578] netlink: 'syz.2.3814': attribute type 2 has an invalid length. [ 461.814493][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 461.956722][T19590] virt_wifi0 speed is unknown, defaulting to 1000 [ 462.127814][T19596] bond2: Unable to set down delay as MII monitoring is disabled [ 462.139537][T19596] bond2 (unregistering): Released all slaves [ 462.182051][T19606] bridge0: entered promiscuous mode [ 462.202771][T19606] macsec1: entered promiscuous mode [ 462.209764][T19606] macsec1: entered allmulticast mode [ 462.217898][T19606] bridge0: entered allmulticast mode [ 462.231291][T19606] bridge0: port 3(macsec1) entered blocking state [ 462.244256][T19606] bridge0: port 3(macsec1) entered disabled state [ 462.266782][T19606] bridge0: left allmulticast mode [ 462.280007][T19606] bridge0: left promiscuous mode [ 462.508667][T19616] syzkaller0: entered promiscuous mode [ 462.520192][T19616] syzkaller0: entered allmulticast mode [ 462.551467][T19618] sctp: [Deprecated]: syz.1.3827 (pid 19618) Use of int in maxseg socket option. [ 462.551467][T19618] Use struct sctp_assoc_value instead [ 463.157369][T19652] netlink: 'syz.0.3837': attribute type 1 has an invalid length. [ 463.202241][T19652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.349593][T19658] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 463.460142][T19669] IPv6: sit1: Disabled Multicast RS [ 463.503903][T19669] sit1: entered allmulticast mode [ 463.553871][T19674] __nla_validate_parse: 5 callbacks suppressed [ 463.553893][T19674] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3844'. [ 463.720780][T19684] netlink: 'syz.3.3848': attribute type 1 has an invalid length. [ 463.745315][T19684] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3848'. [ 463.809265][T19692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3851'. [ 463.858740][T19694] netlink: 'syz.3.3852': attribute type 10 has an invalid length. [ 463.893564][T19698] xt_cgroup: xt_cgroup: no path or classid specified [ 464.010542][T19703] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 464.070298][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3857'. [ 464.122228][T19711] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3858'. [ 464.247437][T19717] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3859'. [ 464.393569][T19723] Bluetooth: MGMT ver 1.23 [ 464.448201][T19721] syzkaller1: entered promiscuous mode [ 464.467696][T19721] syzkaller1: entered allmulticast mode [ 464.636868][T19733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3866'. [ 464.652757][T19733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3866'. [ 464.657452][T19732] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3868'. [ 464.698005][T19733] erspan0: entered promiscuous mode [ 464.726871][T19733] gretap0: entered promiscuous mode [ 464.775395][T19741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3869'. [ 464.803678][T19737] syzkaller0: entered promiscuous mode [ 464.811532][T19737] syzkaller0: entered allmulticast mode [ 465.070720][T19756] SET target dimension over the limit! [ 466.535832][T19762] netlink: 'syz.4.3876': attribute type 1 has an invalid length. [ 466.556628][T19762] netlink: 'syz.4.3876': attribute type 1 has an invalid length. [ 466.564435][T19762] netlink: 'syz.4.3876': attribute type 8 has an invalid length. [ 466.838090][ T49] team0: Port device ip6gre1 removed [ 466.974266][ T49] bond1 (unregistering): (slave gretap1): Releasing active interface [ 467.033457][ T49] dvmrp0 (unregistering): left allmulticast mode [ 467.073879][ T49] batman_adv: batadv0: Removing interface: ipvlan2 [ 467.470950][ T49] bond3 (unregistering): (slave bridge9): Releasing backup interface [ 467.479777][ T49] bridge9 (unregistering): left promiscuous mode [ 467.575768][ T49] bond0 (unregistering): Released all slaves [ 467.587542][ T49] bond1 (unregistering): Released all slaves [ 467.607047][ T49] bond2 (unregistering): Released all slaves [ 467.623268][ T49] bond3 (unregistering): Released all slaves [ 467.643082][ T49] bond4 (unregistering): (slave bond5): Releasing active interface [ 467.656012][ T49] bond4 (unregistering): Released all slaves [ 467.671376][ T49] bond5 (unregistering): Released all slaves [ 467.865342][ T49] tipc: Disabling bearer [ 467.879413][ T49] tipc: Left network mode [ 467.983386][ T49] IPVS: stopping backup sync thread 10115 ... [ 468.543304][T19831] netlink: 'syz.1.3899': attribute type 21 has an invalid length. [ 468.554409][T19831] IPv6: NLM_F_CREATE should be specified when creating new route [ 468.659233][T19833] __nla_validate_parse: 7 callbacks suppressed [ 468.659255][T19833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'. [ 468.704082][ T49] hsr_slave_0: left promiscuous mode [ 468.764213][ T49] veth1_macvtap: left promiscuous mode [ 468.808374][ T49] pimreg (unregistering): left allmulticast mode [ 468.849390][T19844] netlink: 'syz.3.3903': attribute type 21 has an invalid length. [ 468.869861][T19844] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3903'. [ 469.033049][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3902'. [ 469.137387][T19862] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3906'. [ 469.350705][T19833] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 469.440920][T19857] vlan2: entered allmulticast mode [ 469.456980][T19857] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 469.467883][T19863] syzkaller0: entered promiscuous mode [ 469.473417][T19863] syzkaller0: entered allmulticast mode [ 469.607180][ T1726] block nbd2: Possible stuck request ffff888026900000: control (read@0,1024B). Runtime 180 seconds [ 469.621498][ T1726] block nbd2: Possible stuck request ffff888026900200: control (read@1024,1024B). Runtime 180 seconds [ 469.633412][ T1726] block nbd2: Possible stuck request ffff888026900400: control (read@2048,1024B). Runtime 180 seconds [ 469.644768][ T1726] block nbd2: Possible stuck request ffff888026900600: control (read@3072,1024B). Runtime 180 seconds [ 469.652358][T19875] xt_hashlimit: size too large, truncated to 1048576 [ 469.809720][T19885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3912'. [ 469.879983][T19881] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3911'. [ 470.094062][T19891] macvlan2: entered promiscuous mode [ 470.102816][T19891] macvlan2: entered allmulticast mode [ 470.150551][T19891] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 470.311200][T19901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3918'. [ 470.324745][T19901] netlink: 'syz.0.3918': attribute type 7 has an invalid length. [ 470.332742][T19901] netlink: 'syz.0.3918': attribute type 8 has an invalid length. [ 470.341687][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3918'. [ 470.367228][T19898] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3916'. [ 470.387680][T19894] vcan1: entered promiscuous mode [ 470.392922][T19894] vcan1: entered allmulticast mode [ 470.600294][ T49] IPVS: stop unused estimator thread 0... [ 470.806221][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3927'. [ 470.841320][T19923] tap0: tun_chr_ioctl cmd 1074025678 [ 470.854325][T19923] tap0: group set to 0 [ 470.926748][T19938] netlink: 'syz.2.3929': attribute type 16 has an invalid length. [ 470.936587][T19938] netlink: 'syz.2.3929': attribute type 3 has an invalid length. [ 471.086025][T19947] gretap1: entered promiscuous mode [ 471.218696][T19957] pim6reg1: entered promiscuous mode [ 471.224122][T19957] pim6reg1: entered allmulticast mode [ 471.293282][T19964] netlink: 'syz.2.3936': attribute type 24 has an invalid length. [ 471.693257][T19983] vlan0: entered allmulticast mode [ 471.713414][T19990] sctp: [Deprecated]: syz.0.3943 (pid 19990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.713414][T19990] Use struct sctp_sack_info instead [ 471.739599][T19983] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 471.764074][T19989] tipc: Enabling of bearer rejected, failed to enable media [ 471.843011][T19996] syzkaller0: entered promiscuous mode [ 471.852950][T19996] syzkaller0: entered allmulticast mode [ 471.888128][ T1141] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.926586][T20002] netlink: 'syz.0.3948': attribute type 1 has an invalid length. [ 471.965435][ T1141] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.987677][ T1141] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.023176][ T1141] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.260521][T20017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.402044][T20027] netlink: 'syz.0.3958': attribute type 39 has an invalid length. [ 472.414015][T20029] nbd: illegal input index 2958377 [ 472.580366][T16046] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 472.598725][T16046] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.619847][T20037] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 472.621627][T16046] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.640284][T20038] FAULT_INJECTION: forcing a failure. [ 472.640284][T20038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.683818][T16046] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.693923][T20038] CPU: 0 UID: 0 PID: 20038 Comm: syz.2.3962 Not tainted syzkaller #0 PREEMPT(full) [ 472.693952][T20038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 472.693965][T20038] Call Trace: [ 472.693973][T20038] [ 472.693982][T20038] dump_stack_lvl+0xe8/0x150 [ 472.694015][T20038] should_fail_ex+0x412/0x560 [ 472.694049][T20038] _copy_from_iter+0x1d3/0x1670 [ 472.694086][T20038] ? rcu_is_watching+0x15/0xb0 [ 472.694111][T20038] ? __pfx__copy_from_iter+0x10/0x10 [ 472.694147][T20038] ? netlink_sendmsg+0x650/0xb40 [ 472.694167][T20038] ? skb_put+0x11b/0x210 [ 472.694193][T20038] netlink_sendmsg+0x6c0/0xb40 [ 472.694221][T20038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.694245][T20038] ? aa_sock_msg_perm+0xf1/0x1b0 [ 472.694276][T20038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.694306][T20038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.694327][T20038] ____sys_sendmsg+0xa68/0xad0 [ 472.694352][T20038] ? __might_fault+0xaf/0x130 [ 472.694382][T20038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.694419][T20038] ? import_iovec+0x73/0xa0 [ 472.694444][T20038] ___sys_sendmsg+0x2a5/0x360 [ 472.694469][T20038] ? __lock_acquire+0x6b5/0x2cf0 [ 472.694496][T20038] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.694559][T20038] ? __fget_files+0x2a/0x420 [ 472.694580][T20038] ? __fget_files+0x3a0/0x420 [ 472.694610][T20038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 472.694649][T20038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.694685][T20038] ? __pfx_ksys_write+0x10/0x10 [ 472.694722][T20038] do_syscall_64+0x14d/0xf80 [ 472.694748][T20038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.694769][T20038] ? trace_irq_disable+0x37/0x100 [ 472.694793][T20038] ? clear_bhb_loop+0x40/0x90 [ 472.694817][T20038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.694837][T20038] RIP: 0033:0x7f04d2d9bf79 [ 472.694856][T20038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.694874][T20038] RSP: 002b:00007f04d3cd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.694898][T20038] RAX: ffffffffffffffda RBX: 00007f04d3015fa0 RCX: 00007f04d2d9bf79 [ 472.694914][T20038] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000004 [ 472.694927][T20038] RBP: 00007f04d3cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.694939][T20038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.694952][T20038] R13: 00007f04d3016038 R14: 00007f04d3015fa0 R15: 00007fff751a9cf8 [ 472.694984][T20038] [ 472.982935][T10197] lec:lec_start_xmit: lec0:No lecd attached [ 473.280000][T20052] : renamed from ip6_vti0 (while UP) [ 473.409204][T20056] tipc: Enabled bearer , priority 0 [ 473.417751][T20056] syzkaller0: entered promiscuous mode [ 473.423296][T20056] syzkaller0: entered allmulticast mode [ 473.486363][T20056] tipc: Resetting bearer [ 473.503685][T20058] delete_channel: no stack [ 473.531688][T20055] tipc: Resetting bearer [ 473.584388][T20055] tipc: Disabling bearer [ 473.607801][T20066] xt_hashlimit: size too large, truncated to 1048576 [ 473.683191][T20073] __nla_validate_parse: 21 callbacks suppressed [ 473.683214][T20073] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3973'. [ 473.717661][T20069] ipvlan2: entered promiscuous mode [ 473.756842][T20073] : renamed from vxcan1 (while UP) [ 473.897204][T20077] FAULT_INJECTION: forcing a failure. [ 473.897204][T20077] name failslab, interval 1, probability 0, space 0, times 0 [ 473.910703][T20077] CPU: 0 UID: 0 PID: 20077 Comm: syz.0.3977 Not tainted syzkaller #0 PREEMPT(full) [ 473.910732][T20077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 473.910745][T20077] Call Trace: [ 473.910754][T20077] [ 473.910764][T20077] dump_stack_lvl+0xe8/0x150 [ 473.910798][T20077] should_fail_ex+0x412/0x560 [ 473.910835][T20077] should_failslab+0xa8/0x100 [ 473.910882][T20077] ? skb_clone+0x212/0x3a0 [ 473.910909][T20077] kmem_cache_alloc_noprof+0x87/0x650 [ 473.910933][T20077] ? __netlink_lookup+0xc6/0x8b0 [ 473.910961][T20077] skb_clone+0x212/0x3a0 [ 473.910992][T20077] __netlink_deliver_tap+0x404/0x850 [ 473.911025][T20077] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.911047][T20077] netlink_deliver_tap+0x19c/0x1b0 [ 473.911069][T20077] netlink_unicast+0x7e3/0x9b0 [ 473.911108][T20077] ? __pfx_netlink_unicast+0x10/0x10 [ 473.911139][T20077] ? netlink_sendmsg+0x650/0xb40 [ 473.911158][T20077] ? skb_put+0x11b/0x210 [ 473.911184][T20077] netlink_sendmsg+0x813/0xb40 [ 473.911215][T20077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.911239][T20077] ? aa_sock_msg_perm+0xf1/0x1b0 [ 473.911269][T20077] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.911299][T20077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.911319][T20077] ____sys_sendmsg+0xa68/0xad0 [ 473.911344][T20077] ? __might_fault+0xaf/0x130 [ 473.911372][T20077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.911407][T20077] ? import_iovec+0x73/0xa0 [ 473.911432][T20077] ___sys_sendmsg+0x2a5/0x360 [ 473.911455][T20077] ? __lock_acquire+0x6b5/0x2cf0 [ 473.911481][T20077] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.911542][T20077] ? __fget_files+0x2a/0x420 [ 473.911561][T20077] ? __fget_files+0x3a0/0x420 [ 473.911591][T20077] __x64_sys_sendmsg+0x1bd/0x2a0 [ 473.911620][T20077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.911655][T20077] ? __pfx_ksys_write+0x10/0x10 [ 473.911692][T20077] do_syscall_64+0x14d/0xf80 [ 473.911719][T20077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.911738][T20077] ? trace_irq_disable+0x37/0x100 [ 473.911761][T20077] ? clear_bhb_loop+0x40/0x90 [ 473.911785][T20077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.911804][T20077] RIP: 0033:0x7f612759bf79 [ 473.911823][T20077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.911841][T20077] RSP: 002b:00007f6128401028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.911868][T20077] RAX: ffffffffffffffda RBX: 00007f6127815fa0 RCX: 00007f612759bf79 [ 473.911882][T20077] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000004 [ 473.911896][T20077] RBP: 00007f6128401090 R08: 0000000000000000 R09: 0000000000000000 [ 473.911908][T20077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.911920][T20077] R13: 00007f6127816038 R14: 00007f6127815fa0 R15: 00007ffca856ff38 [ 473.911952][T20077] [ 474.769741][T20118] rdma_rxe: rxe_newlink: failed to add lo [ 474.780861][T20118] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3990'. [ 474.960932][T20129] Bluetooth: MGMT ver 1.23 [ 475.300280][T20148] syzkaller1: entered promiscuous mode [ 475.319672][T20148] syzkaller1: entered allmulticast mode [ 476.030653][T20187] : entered promiscuous mode [ 476.076979][T20184] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4011'. [ 476.089668][T20184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4011'. [ 476.125318][T20184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4011'. [ 476.321051][T20200] delete_channel: no stack [ 476.356015][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.381256][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.388114][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4016'. [ 476.425047][T20204] syzkaller0: entered promiscuous mode [ 476.430594][T20204] syzkaller0: entered allmulticast mode [ 476.448369][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.492941][T20207] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4022'. [ 476.605441][T20210] netlink: 'syz.4.4021': attribute type 30 has an invalid length. [ 476.651491][T20210] bond1: option arp_missed_max: invalid value (0) [ 476.659642][T20210] bond1: option arp_missed_max: allowed values 1 - 255 [ 476.678595][T20210] bond1 (unregistering): Released all slaves [ 476.730078][T20214] netlink: 'syz.0.4023': attribute type 1 has an invalid length. [ 476.739935][T20215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 476.798460][T20214] IPv4: Oversized IP packet from 172.20.20.11 [ 476.968975][T20199] infiniband syz2: set down [ 476.978142][T20223] geneve2: entered promiscuous mode [ 476.983767][T20199] infiniband syz2: added ip6_vti0 [ 476.992237][ T794] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.003881][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 36933 - 0 [ 477.082016][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 36933 - 0 [ 477.101756][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 36933 - 0 [ 477.111363][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 36933 - 0 [ 477.227510][T20199] RDS/IB: syz2: added [ 477.238010][T20199] smc: adding ib device syz2 with port count 1 [ 477.260562][T20199] smc: ib device syz2 port 1 has no pnetid [ 477.277606][T12692] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.288571][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.318106][T20235] xt_bpf: check failed: parse error [ 477.324229][T20233] xt_hashlimit: size too large, truncated to 1048576 [ 477.853206][T20252] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 477.962253][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.004635][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 478.012760][ C1] lec:lec_tx_timeout: lec0 [ 478.085605][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 478.332277][T20268] --map-set only usable from mangle table [ 478.388907][T20275] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 478.429016][T20275] team0: Device macvlan3 is already an upper device of the team interface [ 478.647391][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.670132][T20283] netlink: 'syz.3.4045': attribute type 11 has an invalid length. [ 478.679842][T20283] netlink: 'syz.3.4045': attribute type 4 has an invalid length. [ 478.695610][T20283] netlink: 'syz.3.4045': attribute type 5 has an invalid length. [ 478.733000][T20283] netlink: 'syz.3.4045': attribute type 6 has an invalid length. [ 478.754490][T20283] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.4045'. [ 479.386966][T20322] netlink: 'syz.3.4055': attribute type 11 has an invalid length. [ 479.461914][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.547133][T20329] FAULT_INJECTION: forcing a failure. [ 479.547133][T20329] name failslab, interval 1, probability 0, space 0, times 0 [ 479.570464][T20329] CPU: 1 UID: 0 PID: 20329 Comm: syz.3.4057 Not tainted syzkaller #0 PREEMPT(full) [ 479.570495][T20329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 479.570509][T20329] Call Trace: [ 479.570517][T20329] [ 479.570525][T20329] dump_stack_lvl+0xe8/0x150 [ 479.570560][T20329] should_fail_ex+0x412/0x560 [ 479.570596][T20329] should_failslab+0xa8/0x100 [ 479.570628][T20329] __kmalloc_cache_noprof+0x88/0x660 [ 479.570657][T20329] ? fl_init+0x53/0x1d0 [ 479.570686][T20329] fl_init+0x53/0x1d0 [ 479.570714][T20329] tcf_proto_create+0x248/0x330 [ 479.570747][T20329] tc_new_tfilter+0x11fc/0x1630 [ 479.570799][T20329] ? __pfx_tc_new_tfilter+0x10/0x10 [ 479.570839][T20329] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 479.570878][T20329] ? __pfx_tc_new_tfilter+0x10/0x10 [ 479.570902][T20329] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 479.570929][T20329] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 479.570950][T20329] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.570970][T20329] ? ref_tracker_free+0x693/0x840 [ 479.570998][T20329] ? __copy_skb_header+0xa3/0x4a0 [ 479.571033][T20329] ? __pfx_ref_tracker_free+0x10/0x10 [ 479.571075][T20329] netlink_rcv_skb+0x232/0x4b0 [ 479.571098][T20329] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.571122][T20329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.571155][T20329] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.571185][T20329] netlink_unicast+0x80f/0x9b0 [ 479.571226][T20329] ? __pfx_netlink_unicast+0x10/0x10 [ 479.571258][T20329] ? netlink_sendmsg+0x650/0xb40 [ 479.571289][T20329] ? skb_put+0x11b/0x210 [ 479.571316][T20329] netlink_sendmsg+0x813/0xb40 [ 479.571346][T20329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.571371][T20329] ? aa_sock_msg_perm+0xf1/0x1b0 [ 479.571401][T20329] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.571431][T20329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.571450][T20329] ____sys_sendmsg+0xa68/0xad0 [ 479.571476][T20329] ? __might_fault+0xaf/0x130 [ 479.571506][T20329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.571541][T20329] ? import_iovec+0x73/0xa0 [ 479.571566][T20329] ___sys_sendmsg+0x2a5/0x360 [ 479.571589][T20329] ? __lock_acquire+0x6b5/0x2cf0 [ 479.571615][T20329] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.571677][T20329] ? __fget_files+0x2a/0x420 [ 479.571697][T20329] ? __fget_files+0x3a0/0x420 [ 479.571727][T20329] __x64_sys_sendmsg+0x1bd/0x2a0 [ 479.571755][T20329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.571791][T20329] ? __pfx_ksys_write+0x10/0x10 [ 479.571828][T20329] do_syscall_64+0x14d/0xf80 [ 479.571854][T20329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.571874][T20329] ? trace_irq_disable+0x37/0x100 [ 479.571897][T20329] ? clear_bhb_loop+0x40/0x90 [ 479.571920][T20329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.571940][T20329] RIP: 0033:0x7f2c0ff9bf79 [ 479.571958][T20329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.571975][T20329] RSP: 002b:00007f2c10e39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.571996][T20329] RAX: ffffffffffffffda RBX: 00007f2c10215fa0 RCX: 00007f2c0ff9bf79 [ 479.572011][T20329] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000004 [ 479.572023][T20329] RBP: 00007f2c10e39090 R08: 0000000000000000 R09: 0000000000000000 [ 479.572042][T20329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.572054][T20329] R13: 00007f2c10216038 R14: 00007f2c10215fa0 R15: 00007ffe3063eac8 [ 479.572088][T20329] [ 480.002549][T20331] IPv4: Oversized IP packet from 172.20.20.24 [ 480.010331][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 480.017034][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 480.440944][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 480.601656][T20353] netlink: 'syz.4.4066': attribute type 10 has an invalid length. [ 480.748734][T20353] team0 (unregistering): Port device team_slave_0 removed [ 480.875973][T20353] team0 (unregistering): Port device team_slave_1 removed [ 480.926478][T20365] syzkaller0: entered promiscuous mode [ 480.955473][T20365] syzkaller0: entered allmulticast mode [ 480.997947][T20365] tipc: Enabled bearer , priority 0 [ 481.016700][T20363] tipc: Resetting bearer [ 481.086303][T20363] tipc: Disabling bearer [ 481.139619][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.565330][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.362540][T20445] xt_TCPMSS: Only works on TCP SYN packets [ 482.544143][T20454] netlink: 'syz.2.4095': attribute type 1 has an invalid length. [ 482.553139][T20454] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4095'. [ 482.616724][T20458] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.4097'. [ 486.206703][ T5186] udevd[5186]: worker [8836] /devices/virtual/block/nbd2 timeout; kill it [ 486.216903][ T5186] udevd[5186]: seq 17711 '/devices/virtual/block/nbd2' killed [ 498.565627][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 499.690512][ T1726] block nbd2: Possible stuck request ffff888026900000: control (read@0,1024B). Runtime 210 seconds [ 499.702427][ T1726] block nbd2: Possible stuck request ffff888026900200: control (read@1024,1024B). Runtime 210 seconds [ 499.714086][ T1726] block nbd2: Possible stuck request ffff888026900400: control (read@2048,1024B). Runtime 210 seconds [ 499.725961][ T1726] block nbd2: Possible stuck request ffff888026900600: control (read@3072,1024B). Runtime 210 seconds [ 506.731567][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 506.848914][T20484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4109'. [ 506.852562][T20486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4110'. [ 506.919003][T20486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4110'. [ 506.930483][T20492] netlink: 'syz.0.4108': attribute type 2 has an invalid length. [ 506.945943][T20492] 9: entered promiscuous mode [ 507.067148][T20500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4114'. [ 507.160807][T20507] ip6gre2: entered promiscuous mode [ 507.186194][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4114'. [ 507.267581][T20500] netlink: 'syz.4.4114': attribute type 2 has an invalid length. [ 507.300680][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4120'. [ 507.324395][T20518] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 507.387056][T20518] team1: entered promiscuous mode [ 507.392255][T20518] team1: entered allmulticast mode [ 508.048705][T20553] batman_adv: batadv0: Adding interface: dummy0 [ 508.055649][T20553] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.116978][T20558] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4131'. [ 508.151380][T20563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4135'. [ 508.164094][T20553] batman_adv: batadv0: Interface activated: dummy0 [ 508.168751][T20558] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 508.293147][T20573] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4138'. [ 508.335318][T20573] netlink: 'syz.4.4138': attribute type 10 has an invalid length. [ 508.382079][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4139'. [ 508.432874][T20577] hsr_slave_0: left promiscuous mode [ 508.474617][T20577] hsr_slave_1: left promiscuous mode [ 508.819276][T20600] bond1: invalid ARP target 0.0.0.0 specified for addition [ 508.827668][T20600] bond1: option arp_ip_target: invalid value (0) [ 508.918083][T20600] bond1 (unregistering): Released all slaves [ 509.329237][ T1141] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.356442][ T1141] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 36933 - 0 [ 509.456110][T20616] syzkaller1: entered promiscuous mode [ 509.471470][T20616] syzkaller1: entered allmulticast mode [ 509.729599][T20651] IPv6: NLM_F_CREATE should be specified when creating new route [ 509.750711][T20651] xt_TPROXY: Can be used only with -p tcp or -p udp [ 510.102444][T20671] openvswitch: netlink: Flow key attribute not present in set flow. [ 510.493533][T20681] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 511.239406][T20709] --map-set only usable from mangle table [ 511.631812][T20715] netlink: 'syz.4.4180': attribute type 1 has an invalid length. [ 512.006585][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 512.014671][ C1] lec:lec_tx_timeout: lec0 [ 512.452494][T20718] gretap1: entered promiscuous mode [ 512.607177][T20720] __nla_validate_parse: 5 callbacks suppressed [ 512.607198][T20720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4182'. [ 512.706842][T20727] syzkaller0: entered promiscuous mode [ 512.712412][T20727] syzkaller0: entered allmulticast mode [ 512.827185][T20736] sit0: entered promiscuous mode [ 512.888294][T20736] netlink: 'syz.0.4187': attribute type 1 has an invalid length. [ 512.945229][T20736] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4187'. [ 512.946652][T20737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4187'. [ 513.096693][T20746] tipc: Enabling of bearer rejected, failed to enable media [ 513.107075][T20747] tipc: Enabling of bearer rejected, failed to enable media [ 513.119531][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'. [ 513.462699][T20761] --map-set only usable from mangle table [ 513.925232][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 514.151977][T20797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4206'. [ 514.261935][T20804] --map-set only usable from mangle table [ 514.412178][T20810] xt_hashlimit: size too large, truncated to 1048576 [ 515.066682][T20840] bridge3: entered promiscuous mode [ 515.092420][T20840] bridge3: entered allmulticast mode [ 515.303897][T20850] syzkaller1: entered promiscuous mode [ 515.311426][T20850] syzkaller1: entered allmulticast mode [ 515.384051][T20850] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 515.398589][T20859] IPVS: set_ctl: invalid protocol: 16234 172.30.1.4:20001 [ 515.408239][T20850] bond2 (unregistering): Released all slaves [ 515.667261][T20880] netlink: 'syz.1.4233': attribute type 39 has an invalid length. [ 515.800233][T20886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4235'. [ 515.823978][T20888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4236'. [ 515.895664][T20886] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.971060][T20886] bridge_slave_0 (unregistering): left allmulticast mode [ 515.980793][T20886] bridge_slave_0 (unregistering): left promiscuous mode [ 515.988921][T20886] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.349314][T20910] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4243'. [ 516.513171][T20913] tipc: Started in network mode [ 516.518713][T20913] tipc: Node identity 9e31e8eb836b, cluster identity 4711 [ 516.540549][T20913] tipc: Enabled bearer , priority 0 [ 516.550257][T20917] syzkaller0: entered promiscuous mode [ 516.569263][T20917] syzkaller0: entered allmulticast mode [ 516.665809][T20913] tipc: Resetting bearer [ 516.712611][T20904] tipc: Resetting bearer [ 516.733050][T20932] netlink: 'syz.0.4251': attribute type 39 has an invalid length. [ 516.760461][T20904] tipc: Disabling bearer [ 516.792382][T20934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4252'. [ 516.818976][T20934] netlink: 'syz.4.4252': attribute type 10 has an invalid length. [ 516.829658][T20934] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4252'. [ 516.904205][T20934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.013714][T20943] xfrm1: entered allmulticast mode [ 517.109518][T20948] vlan1: entered allmulticast mode [ 517.135830][T20948] veth0_vlan: entered allmulticast mode [ 517.165613][T20950] netlink: 'syz.2.4258': attribute type 16 has an invalid length. [ 517.173732][T20950] netlink: 'syz.2.4258': attribute type 17 has an invalid length. [ 517.248584][T20950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.408927][T20957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.438030][T20964] netlink: 'syz.2.4263': attribute type 39 has an invalid length. [ 517.448035][T20957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.459037][T20957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 517.539683][T20966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.627824][T20957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.638986][T20957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.650163][T20957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 517.743708][T20971] __nla_validate_parse: 2 callbacks suppressed [ 517.743728][T20971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4266'. [ 517.767646][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4266'. [ 517.778737][T20971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4266'. [ 517.834026][T20957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.846788][T20957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.858769][T20957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.126192][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4270'. [ 518.160969][T20957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.194129][T20957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.205295][T20957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.398744][T20999] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4275'. [ 518.451722][T16048] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.470996][T16048] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.491682][T16048] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.510543][T16048] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.535874][T16048] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.585221][T16048] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.622682][T21004] bridge_slave_1: left allmulticast mode [ 518.636998][T21004] bridge_slave_1: left promiscuous mode [ 518.661754][T21004] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.724152][T21004] bond0: (slave bond_slave_0): Releasing backup interface [ 518.779836][T21004] bond0: (slave bond_slave_1): Releasing backup interface [ 518.842160][T21004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.906883][T21004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.939669][T21004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.960900][T21004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.983719][T21004] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 519.100795][ T5939] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.109901][ T5939] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 519.118998][ T5939] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 519.171316][ T5939] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.194487][ T5939] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 519.225256][ T5939] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 519.337649][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4280'. [ 519.385017][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4280'. [ 519.516196][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4280'. [ 519.556289][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4280'. [ 519.585217][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4280'. [ 519.694303][T21036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.726722][T21037] netlink: 'syz.3.4285': attribute type 1 has an invalid length. [ 519.770158][T21037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.796551][T21042] xt_l2tp: v2 doesn't support IP mode [ 519.827936][T21041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.835872][T21041] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 519.849609][T21041] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 520.016465][T21037] veth3: entered promiscuous mode [ 520.029355][T21037] bond3: (slave veth3): Enslaving as an active interface with a down link [ 520.073084][T21041] vlan1: entered allmulticast mode [ 520.093742][T21041] bond3: entered allmulticast mode [ 520.202771][T21049] syzkaller0: entered promiscuous mode [ 520.213633][T21049] syzkaller0: entered allmulticast mode [ 520.233316][T21037] bond3: (slave vlan1): Error -34 calling dev_set_mtu [ 520.487240][T21081] Bluetooth: hci2: command 0x0405 tx timeout [ 522.071740][T21091] IPv6: NLM_F_CREATE should be specified when creating new route [ 522.328783][T21103] netlink: 'syz.0.4303': attribute type 39 has an invalid length. [ 522.837103][T21126] Bluetooth: MGMT ver 1.23 [ 522.842809][T21126] Bluetooth: hci1: too big key_count value 32778 [ 522.967735][T21130] __nla_validate_parse: 30 callbacks suppressed [ 522.967759][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 522.984473][T21130] netlink: 'syz.0.4313': attribute type 1 has an invalid length. [ 522.995028][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 523.004187][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 523.019306][T21130] netlink: 'syz.0.4313': attribute type 1 has an invalid length. [ 523.031025][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 523.050771][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 523.168777][T21135] netlink: 'syz.4.4316': attribute type 39 has an invalid length. [ 523.290784][T21146] xt_l2tp: missing protocol rule (udp|l2tpip) [ 523.540156][T21159] syzkaller0: entered promiscuous mode [ 523.546948][T21159] syzkaller0: entered allmulticast mode [ 523.835666][T21178] netlink: 'syz.3.4329': attribute type 11 has an invalid length. [ 524.092634][T21190] netlink: 'syz.1.4334': attribute type 39 has an invalid length. [ 524.464745][T21208] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 524.493922][T21208] bond0: (slave gre0): Error -95 calling set_mac_address [ 524.575966][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4343'. [ 524.714117][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4347'. [ 524.764442][T21228] netlink: 'syz.1.4348': attribute type 39 has an invalid length. [ 525.020114][T21244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4354'. [ 525.328888][T21260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4360'. [ 525.380660][T21264] netlink: 'syz.2.4362': attribute type 39 has an invalid length. [ 525.573388][T21273] syzkaller0: entered promiscuous mode [ 525.587861][T21273] syzkaller0: entered allmulticast mode [ 525.937351][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4369'. [ 525.961941][T21294] openvswitch: netlink: EtherType 50a is less than min 600 [ 526.043985][T21295] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 526.069310][T21298] --map-set only usable from mangle table [ 526.264233][T21306] netlink: 'syz.4.4375': attribute type 39 has an invalid length. [ 526.353484][T21310] netlink: 'syz.1.4377': attribute type 1 has an invalid length. [ 526.771434][T21333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.910356][T21343] openvswitch: netlink: IP tunnel dst address not specified [ 527.033062][T21355] netlink: 'syz.0.4391': attribute type 39 has an invalid length. [ 527.283218][T21368] netlink: 'syz.4.4394': attribute type 3 has an invalid length. [ 527.377820][T21366] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 527.410042][T21367] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 527.445599][ T794] IPVS: starting estimator thread 0... [ 527.554833][T21377] IPVS: using max 25 ests per chain, 60000 per kthread [ 527.610492][T21383] Bluetooth: MGMT ver 1.23 [ 527.745421][T21393] netlink: 'syz.2.4403': attribute type 39 has an invalid length. [ 528.001134][T21405] __nla_validate_parse: 9 callbacks suppressed [ 528.001156][T21405] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4406'. [ 528.046958][T21405] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.218866][T21420] netlink: 'syz.1.4412': attribute type 11 has an invalid length. [ 528.241064][T21421] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 528.282677][T21420] netlink: 'syz.1.4412': attribute type 11 has an invalid length. [ 528.331163][T21420] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4412'. [ 528.450825][T21420] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 528.468091][T21433] netlink: 'syz.4.4416': attribute type 39 has an invalid length. [ 528.577914][T21432] syzkaller1: entered promiscuous mode [ 528.584222][T21432] syzkaller1: entered allmulticast mode [ 528.597586][T21432] netlink: 'syz.0.4414': attribute type 12 has an invalid length. [ 528.893984][T21449] bond1: Removing last arp target with arp_interval on [ 528.905912][T21449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4422'. [ 528.915946][T21449] IPv6: Can't replace route, no match found [ 528.963087][T21449] syzkaller0: entered promiscuous mode [ 528.969697][T21449] syzkaller0: entered allmulticast mode [ 529.771453][ T1726] block nbd2: Possible stuck request ffff888026900000: control (read@0,1024B). Runtime 240 seconds [ 529.783546][ T1726] block nbd2: Possible stuck request ffff888026900200: control (read@1024,1024B). Runtime 240 seconds [ 529.797096][ T1726] block nbd2: Possible stuck request ffff888026900400: control (read@2048,1024B). Runtime 240 seconds [ 529.809795][ T1726] block nbd2: Possible stuck request ffff888026900600: control (read@3072,1024B). Runtime 240 seconds [ 529.890836][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4432'. [ 531.699436][T21516] tipc: Enabling of bearer rejected, failed to enable media [ 531.738425][T21523] tipc: Enabling of bearer rejected, failed to enable media [ 531.914908][T21533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4443'. [ 531.966433][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 531.979817][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4445'. [ 532.251437][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'. [ 532.303062][T21545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4448'. [ 532.872438][T21577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4455'. [ 533.098886][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 533.143211][T21594] netlink: 'syz.0.4459': attribute type 1 has an invalid length. [ 533.151772][T21594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4459'. [ 533.165786][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 533.176093][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 533.190141][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 533.215337][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 533.231743][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 533.265646][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 533.287491][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 533.315852][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 533.439223][T21598] team_slave_1: mtu less than device minimum [ 534.128285][T21634] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.142653][ T794] IPVS: starting estimator thread 0... [ 534.270176][T21642] IPVS: using max 27 ests per chain, 64800 per kthread [ 534.495191][T21650] netlink: 'syz.2.4478': attribute type 7 has an invalid length. [ 534.863501][T21670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.927290][T21670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.039872][T21691] netlink: 'syz.1.4488': attribute type 21 has an invalid length. [ 535.053433][T21693] netlink: 'syz.4.4489': attribute type 1 has an invalid length. [ 535.122639][T21695] netlink: 'syz.4.4489': attribute type 1 has an invalid length. [ 535.148725][T21695] netlink: 'syz.4.4489': attribute type 3 has an invalid length. [ 535.161480][T21695] NCSI netlink: No device for ifindex 813332851 [ 535.200674][T21704] netlink: 'syz.3.4490': attribute type 1 has an invalid length. [ 535.263533][T21704] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.287213][T21710] netlink: 'syz.0.4493': attribute type 39 has an invalid length. [ 535.858048][T21729] syzkaller0: entered promiscuous mode [ 535.863671][T21729] syzkaller0: entered allmulticast mode [ 535.911579][T21736] netlink: 'syz.2.4504': attribute type 39 has an invalid length. [ 536.837968][T21740] delete_channel: no stack [ 537.571859][T10197] lec:lec_start_xmit: lec0:No lecd attached [ 538.073404][T21774] syzkaller0: entered promiscuous mode [ 538.080256][T21774] syzkaller0: entered allmulticast mode [ 538.292117][T21789] netlink: 'syz.3.4522': attribute type 39 has an invalid length. [ 538.659769][T21808] virt_wifi0 speed is unknown, defaulting to 1000 [ 538.671561][T21808] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.686317][T21816] netlink: 'syz.3.4531': attribute type 1 has an invalid length. [ 538.749013][T21816] bond5: entered promiscuous mode [ 538.754138][T21816] bond5: entered allmulticast mode [ 538.792119][T21820] xt_hashlimit: size too large, truncated to 1048576 [ 538.800325][T21816] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.867786][T21860] netlink: 'syz.0.4545': attribute type 1 has an invalid length. [ 539.896602][T21863] __nla_validate_parse: 110 callbacks suppressed [ 539.896625][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4546'. [ 540.018367][T21863] vlan3: entered allmulticast mode [ 540.023582][T21863] hsr0: entered allmulticast mode [ 540.066343][T21863] hsr_slave_0: entered allmulticast mode [ 540.951633][T21917] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4558'. [ 540.969664][T21917] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 541.117082][T21912] syzkaller1: entered promiscuous mode [ 541.138951][T21912] syzkaller1: entered allmulticast mode [ 541.491958][T21938] syzkaller1: entered promiscuous mode [ 541.508303][T21938] syzkaller1: entered allmulticast mode [ 541.955475][ T30] audit: type=1800 audit(1771006655.646:6): pid=21953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4567" name="memory.events" dev="tmpfs" ino=1654 res=0 errno=0 [ 542.300973][T21978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4573'. [ 542.347710][T21981] netlink: 'syz.1.4575': attribute type 2 has an invalid length. [ 542.432189][T21981] netlink: 'syz.1.4575': attribute type 4 has an invalid length. [ 542.463684][T21988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4576'. [ 542.964579][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5390 ms [ 542.972702][ C1] lec:lec_tx_timeout: lec0 [ 543.016014][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4586'. [ 543.379843][T22033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4591'. [ 543.460674][T22037] xfrm1: entered allmulticast mode [ 543.596577][T22047] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4594'. [ 543.801808][T22051] bridge4: entered promiscuous mode [ 543.809928][T22057] netlink: 'syz.1.4597': attribute type 7 has an invalid length. [ 543.834265][T22057] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4597'. [ 543.851836][T22051] bridge4: entered allmulticast mode [ 543.865275][T22055] netlink: 'syz.3.4596': attribute type 14 has an invalid length. [ 543.971359][T22066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4598'. [ 544.728281][T22104] netlink: 'syz.3.4612': attribute type 10 has an invalid length. [ 544.766362][T22104] team0: Port device dummy0 added [ 545.425578][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4624'. [ 545.455254][T22147] bond3: option miimon: invalid value (18446744073709551585) [ 545.463093][T22147] bond3: option miimon: allowed values 0 - 2147483647 [ 545.499078][T22147] bond3 (unregistering): Released all slaves [ 545.620502][T22146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.683045][T22146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.705562][T22146] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 545.732897][T22146] bond0 (unregistering): Released all slaves [ 546.031090][T22177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4633'. [ 546.075980][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 546.088722][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 546.098106][T22181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4634'. [ 546.158294][T22185] blkio.reset_stats is deprecated [ 546.227865][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4636'. [ 546.338073][T22191] bond3: Invalid ad_actor_system MAC address. [ 546.344240][T22191] bond3: option ad_actor_system: invalid value (1) [ 546.376803][T22191] bond3 (unregistering): Released all slaves [ 546.468683][T22201] gre1: entered promiscuous mode [ 546.483828][T22201] gre1: entered allmulticast mode [ 546.740521][T22221] netlink: 'syz.3.4645': attribute type 1 has an invalid length. [ 546.758434][T22219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4644'. [ 546.758444][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4644'. [ 546.869594][T22228] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 546.891033][T22228] bond3 (unregistering): Released all slaves [ 546.960957][T22221] bond6: (slave gretap1): making interface the new active one [ 546.999697][T22221] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 547.044242][T22229] gretap2: entered promiscuous mode [ 547.054472][T22229] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 547.095812][T22231] macvlan0: entered promiscuous mode [ 547.106960][T22231] macvlan0: entered allmulticast mode [ 547.118808][T22231] bond6: entered promiscuous mode [ 547.124176][T22231] gretap1: entered promiscuous mode [ 547.167015][T22231] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 547.180197][T22231] bond6: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 547.198836][T22231] bond6: left promiscuous mode [ 547.204399][T22231] gretap1: left promiscuous mode [ 547.296116][T22252] netlink: 'syz.1.4654': attribute type 39 has an invalid length. [ 547.568565][T22267] netlink: 'syz.4.4656': attribute type 13 has an invalid length. [ 547.846823][T22274] bond1: option lp_interval: invalid value (0) [ 547.885276][T22274] bond1: option lp_interval: allowed values 1 - 2147483647 [ 547.946382][T22274] bond1 (unregistering): Released all slaves [ 548.007420][T22285] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4662'. [ 548.290968][T22302] xt_l2tp: wrong L2TP version: 0 [ 548.364463][T22309] netlink: 'syz.2.4667': attribute type 39 has an invalid length. [ 548.619504][T22324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4671'. [ 549.020864][T22345] virt_wifi0 speed is unknown, defaulting to 1000 [ 549.042800][T22350] netlink: 'syz.3.4676': attribute type 1 has an invalid length. [ 549.093279][T22352] netlink: 'syz.4.4680': attribute type 39 has an invalid length. [ 549.107949][T22345] ip6_vti0 speed is unknown, defaulting to 1000 [ 549.567534][T22375] netlink: 'syz.4.4689': attribute type 2 has an invalid length. [ 549.599794][T22378] netlink: 'syz.2.4690': attribute type 32 has an invalid length. [ 549.617160][T22380] netlink: 'syz.0.4691': attribute type 1 has an invalid length. [ 550.580048][T22422] __nla_validate_parse: 5 callbacks suppressed [ 550.580069][T22422] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4703'. [ 550.777307][T22428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4707'. [ 550.809918][ T49] [ 550.812341][ T49] ============================================ [ 550.818520][ T49] WARNING: possible recursive locking detected [ 550.824711][ T49] syzkaller #0 Not tainted [ 550.829191][ T49] -------------------------------------------- [ 550.835363][ T49] kworker/u8:3/49 is trying to acquire lock: [ 550.841371][ T49] ffff88802bd53760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 550.850760][ T49] [ 550.850760][ T49] but task is already holding lock: [ 550.858330][ T49] ffff88802bd53760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 550.867960][ T49] [ 550.867960][ T49] other info that might help us debug this: [ 550.876048][ T49] Possible unsafe locking scenario: [ 550.876048][ T49] [ 550.883555][ T49] CPU0 [ 550.886886][ T49] ---- [ 550.890195][ T49] lock(k-sk_lock-AF_INET6); [ 550.894921][ T49] lock(k-sk_lock-AF_INET6); [ 550.899637][ T49] [ 550.899637][ T49] *** DEADLOCK *** [ 550.899637][ T49] [ 550.907813][ T49] May be due to missing lock nesting notation [ 550.907813][ T49] [ 550.916178][ T49] 4 locks held by kworker/u8:3/49: [ 550.921321][ T49] #0: ffff888076868148 ((wq_completion)krds_cp_wq#11/0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 550.933129][ T49] #1: ffffc90000ba7c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 550.945985][ T49] #2: ffff88802bd53760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 550.956066][ T49] #3: ffff88802bd53908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x950 [ 550.966143][ T49] [ 550.966143][ T49] stack backtrace: [ 550.972084][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 550.972118][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 550.972133][ T49] Workqueue: krds_cp_wq#11/0 rds_send_worker [ 550.972165][ T49] Call Trace: [ 550.972173][ T49] [ 550.972182][ T49] dump_stack_lvl+0xe8/0x150 [ 550.972211][ T49] print_deadlock_bug+0x279/0x290 [ 550.972239][ T49] __lock_acquire+0x253f/0x2cf0 [ 550.972262][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 550.972287][ T49] ? lock_acquire+0x106/0x330 [ 550.972310][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 550.972334][ T49] ? lock_acquire+0x106/0x330 [ 550.972355][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 550.972383][ T49] ? inet6_getname+0x15d/0x650 [ 550.972413][ T49] lock_acquire+0x106/0x330 [ 550.972433][ T49] ? inet6_getname+0x15d/0x650 [ 550.972463][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 550.972488][ T49] ? unwind_next_frame+0x1aaf/0x23c0 [ 550.972518][ T49] lock_sock_nested+0x48/0x100 [ 550.972537][ T49] ? inet6_getname+0x15d/0x650 [ 550.972568][ T49] inet6_getname+0x15d/0x650 [ 550.972602][ T49] rds_tcp_conn_slots_available+0x288/0x470 [ 550.972637][ T49] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 550.972677][ T49] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 550.972702][ T49] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 550.972734][ T49] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 550.972754][ T49] ? rds_send_worker+0x7d/0x2e0 [ 550.972777][ T49] ? process_scheduled_works+0xaec/0x17a0 [ 550.972798][ T49] ? worker_thread+0xa50/0xfc0 [ 550.972824][ T49] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 550.972853][ T49] rds_recv_incoming+0x9f6/0x12d0 [ 550.972878][ T49] ? __pfx_rds_recv_incoming+0x10/0x10 [ 550.972899][ T49] ? skb_copy_bits+0x7e5/0x8f0 [ 550.972927][ T49] rds_tcp_data_recv+0x7f1/0xa40 [ 550.972956][ T49] __tcp_read_sock+0x196/0x970 [ 550.972987][ T49] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 550.973006][ T49] rds_tcp_data_ready+0x369/0x950 [ 550.973024][ T49] ? __pfx_sock_def_readable+0x10/0x10 [ 550.973054][ T49] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 550.973082][ T49] ? tcp_grow_window+0x4fc/0xc50 [ 550.973105][ T49] tcp_data_queue+0x1e2e/0x5e50 [ 550.973141][ T49] ? tcp_urg+0x106/0x410 [ 550.973166][ T49] ? __pfx_tcp_data_queue+0x10/0x10 [ 550.973190][ T49] ? __pfx_tcp_urg+0x10/0x10 [ 550.973214][ T49] ? ktime_get+0x45/0x200 [ 550.973238][ T49] ? seqcount_lockdep_reader_access+0x60/0x100 [ 550.973266][ T49] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 550.973297][ T49] tcp_rcv_established+0x1270/0x2670 [ 550.973332][ T49] ? __pfx_tcp_rcv_established+0x10/0x10 [ 550.973359][ T49] ? ip6_dst_check+0x70/0x7e0 [ 550.973380][ T49] ? ip6_dst_check+0xe2/0x7e0 [ 550.973400][ T49] ? ip6_dst_check+0x5e3/0x7e0 [ 550.973419][ T49] ? __pfx_ip6_dst_check+0x10/0x10 [ 550.973440][ T49] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 550.973474][ T49] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 550.973501][ T49] __release_sock+0x1b8/0x3a0 [ 550.973534][ T49] release_sock+0x5f/0x1f0 [ 550.973553][ T49] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 550.973575][ T49] rds_send_xmit+0x207e/0x28d0 [ 550.973596][ T49] ? __lock_acquire+0x6b5/0x2cf0 [ 550.973616][ T49] ? look_up_lock_class+0x57/0x110 [ 550.973659][ T49] ? __pfx_rds_send_xmit+0x10/0x10 [ 550.973681][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 550.973707][ T49] rds_send_worker+0x7d/0x2e0 [ 550.973731][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 550.973753][ T49] process_scheduled_works+0xaec/0x17a0 [ 550.973785][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.973809][ T49] ? assign_work+0x3d5/0x5e0 [ 550.973832][ T49] worker_thread+0xa50/0xfc0 [ 550.973868][ T49] kthread+0x388/0x470 [ 550.973895][ T49] ? __pfx_worker_thread+0x10/0x10 [ 550.973916][ T49] ? __pfx_kthread+0x10/0x10 [ 550.973943][ T49] ret_from_fork+0x51e/0xb90 [ 550.973967][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 550.973988][ T49] ? __switch_to+0xc7d/0x1400 [ 550.974008][ T49] ? __pfx_kthread+0x10/0x10 [ 550.974035][ T49] ret_from_fork_asm+0x1a/0x30 [ 550.974083][ T49] [ 551.373328][ T49] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 551.382153][ T49] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 49, name: kworker/u8:3 [ 551.391240][ T49] preempt_count: 201, expected: 0 [ 551.396328][ T49] RCU nest depth: 0, expected: 0 [ 551.401292][ T49] INFO: lockdep is turned off. [ 551.406121][ T49] Preemption disabled at: [ 551.406135][ T49] [<0000000000000000>] 0x0 [ 551.415059][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 551.415087][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 551.415103][ T49] Workqueue: krds_cp_wq#11/0 rds_send_worker [ 551.415135][ T49] Call Trace: [ 551.415143][ T49] [ 551.415152][ T49] dump_stack_lvl+0xe8/0x150 [ 551.415181][ T49] __might_resched+0x378/0x4d0 [ 551.415210][ T49] lock_sock_nested+0x5d/0x100 [ 551.415230][ T49] inet6_getname+0x15d/0x650 [ 551.415266][ T49] rds_tcp_conn_slots_available+0x288/0x470 [ 551.415299][ T49] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 551.415339][ T49] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 551.415363][ T49] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 551.415396][ T49] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 551.415416][ T49] ? rds_send_worker+0x7d/0x2e0 [ 551.415440][ T49] ? process_scheduled_works+0xaec/0x17a0 [ 551.415460][ T49] ? worker_thread+0xa50/0xfc0 [ 551.415487][ T49] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 551.415514][ T49] rds_recv_incoming+0x9f6/0x12d0 [ 551.415540][ T49] ? __pfx_rds_recv_incoming+0x10/0x10 [ 551.415561][ T49] ? skb_copy_bits+0x7e5/0x8f0 [ 551.415589][ T49] rds_tcp_data_recv+0x7f1/0xa40 [ 551.415617][ T49] __tcp_read_sock+0x196/0x970 [ 551.415650][ T49] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 551.415671][ T49] rds_tcp_data_ready+0x369/0x950 [ 551.415689][ T49] ? __pfx_sock_def_readable+0x10/0x10 [ 551.415721][ T49] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 551.415741][ T49] ? tcp_grow_window+0x4fc/0xc50 [ 551.415765][ T49] tcp_data_queue+0x1e2e/0x5e50 [ 551.415802][ T49] ? tcp_urg+0x106/0x410 [ 551.415827][ T49] ? __pfx_tcp_data_queue+0x10/0x10 [ 551.415855][ T49] ? __pfx_tcp_urg+0x10/0x10 [ 551.415880][ T49] ? ktime_get+0x45/0x200 [ 551.415905][ T49] ? seqcount_lockdep_reader_access+0x60/0x100 [ 551.415933][ T49] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 551.415962][ T49] tcp_rcv_established+0x1270/0x2670 [ 551.415993][ T49] ? __pfx_tcp_rcv_established+0x10/0x10 [ 551.416016][ T49] ? ip6_dst_check+0x70/0x7e0 [ 551.416045][ T49] ? ip6_dst_check+0xe2/0x7e0 [ 551.416064][ T49] ? ip6_dst_check+0x5e3/0x7e0 [ 551.416083][ T49] ? __pfx_ip6_dst_check+0x10/0x10 [ 551.416103][ T49] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 551.416136][ T49] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 551.416161][ T49] __release_sock+0x1b8/0x3a0 [ 551.416189][ T49] release_sock+0x5f/0x1f0 [ 551.416207][ T49] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 551.416228][ T49] rds_send_xmit+0x207e/0x28d0 [ 551.416247][ T49] ? __lock_acquire+0x6b5/0x2cf0 [ 551.416277][ T49] ? look_up_lock_class+0x57/0x110 [ 551.416318][ T49] ? __pfx_rds_send_xmit+0x10/0x10 [ 551.416338][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 551.416364][ T49] rds_send_worker+0x7d/0x2e0 [ 551.416386][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 551.416407][ T49] process_scheduled_works+0xaec/0x17a0 [ 551.416440][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 551.416465][ T49] ? assign_work+0x3d5/0x5e0 [ 551.416487][ T49] worker_thread+0xa50/0xfc0 [ 551.416521][ T49] kthread+0x388/0x470 [ 551.416547][ T49] ? __pfx_worker_thread+0x10/0x10 [ 551.416567][ T49] ? __pfx_kthread+0x10/0x10 [ 551.416594][ T49] ret_from_fork+0x51e/0xb90 [ 551.416618][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 551.416639][ T49] ? __switch_to+0xc7d/0x1400 [ 551.416657][ T49] ? __pfx_kthread+0x10/0x10 [ 551.416682][ T49] ret_from_fork_asm+0x1a/0x30 [ 551.416718][ T49] [ 551.416730][ T49] BUG: scheduling while atomic: kworker/u8:3/49/0x00000202 [ 551.655321][T22444] caif:caif_disconnect_client(): nothing to disconnect [ 551.661127][ T49] INFO: lockdep is turned off. [ 551.661150][ T49] Modules linked in: [ 551.781829][ T49] Preemption disabled at: [ 551.781842][ T49] [<0000000000000000>] 0x0 [ 551.790683][ T49] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 551.799482][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT(full) [ 551.810380][ T49] Tainted: [W]=WARN [ 551.814246][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 551.824355][ T49] Workqueue: krds_cp_wq#11/0 rds_send_worker [ 551.830389][ T49] Call Trace: [ 551.833716][ T49] [ 551.836683][ T49] vpanic+0x1e0/0x670 [ 551.840717][ T49] panic+0xc5/0xd0 [ 551.844490][ T49] ? __pfx_panic+0x10/0x10 [ 551.848953][ T49] ? __pfx__printk+0x10/0x10 [ 551.853591][ T49] ? vprintk_emit+0x4eb/0x560 [ 551.858321][ T49] ? __pfx_vprintk_emit+0x10/0x10 [ 551.863385][ T49] ? __irq_work_queue_local+0x1f2/0x540 [ 551.868977][ T49] check_panic_on_warn+0x89/0xb0 [ 551.873976][ T49] __schedule_bug+0xf6/0x150 [ 551.878625][ T49] __schedule+0x168c/0x5290 [ 551.883217][ T49] ? __wake_up_klogd+0xe6/0x120 [ 551.888121][ T49] ? vprintk_emit+0x4eb/0x560 [ 551.892840][ T49] ? rcu_is_watching+0x15/0xb0 [ 551.897646][ T49] ? __pfx_vprintk_emit+0x10/0x10 [ 551.902731][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 551.907889][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 551.912943][ T49] ? prepare_to_wait_exclusive+0x45/0x240 [ 551.918692][ T49] ? __pfx___schedule+0x10/0x10 [ 551.923580][ T49] ? schedule+0x90/0x360 [ 551.927860][ T49] ? rcu_is_watching+0x15/0xb0 [ 551.932659][ T49] ? rcu_is_watching+0x15/0xb0 [ 551.937460][ T49] ? lock_release+0x4b/0x3a0 [ 551.942097][ T49] ? schedule+0x90/0x360 [ 551.946384][ T49] ? wq_worker_sleeping+0x63/0x250 [ 551.951538][ T49] schedule+0x164/0x360 [ 551.955743][ T49] __lock_sock+0x161/0x2c0 [ 551.960200][ T49] ? __pfx___lock_sock+0x10/0x10 [ 551.965166][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 551.970223][ T49] ? __pfx_autoremove_wake_function+0x10/0x10 [ 551.976301][ T49] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 551.981748][ T49] ? dump_stack_lvl+0x135/0x150 [ 551.986617][ T49] ? lock_sock_nested+0x6a/0x100 [ 551.991600][ T49] lock_sock_nested+0x9f/0x100 [ 551.996379][ T49] inet6_getname+0x15d/0x650 [ 552.001027][ T49] rds_tcp_conn_slots_available+0x288/0x470 [ 552.006939][ T49] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 552.013372][ T49] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 552.019183][ T49] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 552.025623][ T49] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 552.030758][ T49] ? rds_send_worker+0x7d/0x2e0 [ 552.035616][ T49] ? process_scheduled_works+0xaec/0x17a0 [ 552.041345][ T49] ? worker_thread+0xa50/0xfc0 [ 552.046125][ T49] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 552.051835][ T49] rds_recv_incoming+0x9f6/0x12d0 [ 552.056885][ T49] ? __pfx_rds_recv_incoming+0x10/0x10 [ 552.062440][ T49] ? skb_copy_bits+0x7e5/0x8f0 [ 552.067223][ T49] rds_tcp_data_recv+0x7f1/0xa40 [ 552.072187][ T49] __tcp_read_sock+0x196/0x970 [ 552.076989][ T49] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 552.082460][ T49] rds_tcp_data_ready+0x369/0x950 [ 552.087501][ T49] ? __pfx_sock_def_readable+0x10/0x10 [ 552.092974][ T49] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 552.098540][ T49] ? tcp_grow_window+0x4fc/0xc50 [ 552.103510][ T49] tcp_data_queue+0x1e2e/0x5e50 [ 552.108396][ T49] ? tcp_urg+0x106/0x410 [ 552.112653][ T49] ? __pfx_tcp_data_queue+0x10/0x10 [ 552.117867][ T49] ? __pfx_tcp_urg+0x10/0x10 [ 552.122473][ T49] ? ktime_get+0x45/0x200 [ 552.126837][ T49] ? seqcount_lockdep_reader_access+0x60/0x100 [ 552.133029][ T49] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 552.138888][ T49] tcp_rcv_established+0x1270/0x2670 [ 552.144231][ T49] ? __pfx_tcp_rcv_established+0x10/0x10 [ 552.149878][ T49] ? ip6_dst_check+0x70/0x7e0 [ 552.154657][ T49] ? ip6_dst_check+0xe2/0x7e0 [ 552.159341][ T49] ? ip6_dst_check+0x5e3/0x7e0 [ 552.164197][ T49] ? __pfx_ip6_dst_check+0x10/0x10 [ 552.169340][ T49] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 552.174032][ T49] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 552.179154][ T49] __release_sock+0x1b8/0x3a0 [ 552.183875][ T49] release_sock+0x5f/0x1f0 [ 552.188298][ T49] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 552.194558][ T49] rds_send_xmit+0x207e/0x28d0 [ 552.199360][ T49] ? __lock_acquire+0x6b5/0x2cf0 [ 552.204323][ T49] ? look_up_lock_class+0x57/0x110 [ 552.209484][ T49] ? __pfx_rds_send_xmit+0x10/0x10 [ 552.214618][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 552.220351][ T49] rds_send_worker+0x7d/0x2e0 [ 552.225037][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 552.230803][ T49] process_scheduled_works+0xaec/0x17a0 [ 552.236370][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.242397][ T49] ? assign_work+0x3d5/0x5e0 [ 552.247023][ T49] worker_thread+0xa50/0xfc0 [ 552.251655][ T49] kthread+0x388/0x470 [ 552.255765][ T49] ? __pfx_worker_thread+0x10/0x10 [ 552.260904][ T49] ? __pfx_kthread+0x10/0x10 [ 552.265545][ T49] ret_from_fork+0x51e/0xb90 [ 552.270341][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 552.275458][ T49] ? __switch_to+0xc7d/0x1400 [ 552.280177][ T49] ? __pfx_kthread+0x10/0x10 [ 552.284809][ T49] ret_from_fork_asm+0x1a/0x30 [ 552.289606][ T49] [ 552.293256][ T49] Kernel Offset: disabled [ 552.297583][ T49] Rebooting in 86400 seconds..