last executing test programs: 4.079733206s ago: executing program 4 (id=1412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) 3.834803405s ago: executing program 0 (id=1415): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x96, 0x100, 0xb, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x68, 0x0, 0x7f, 0x2f, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x27, 0x62, [@multicast2, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ssrr={0x89, 0xb, 0xc8, [@loopback, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp_prespec={0x44, 0x2c, 0xd3, 0x3, 0xe, [{@multicast2, 0xfffffff8}, {@empty, 0x2}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@loopback}]}, @end]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="001140001100001029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0001000000000000050010007f00000008000500", @ANYRES32=0x0, @ANYBLOB="050021000a00000008000f0006000000a40034801400350073797a5f74756e000000000000000000140035006e657464657673696d300000000000001400350076657468315f746f5f627269646765001400350073797a5f74756e000000000000000000140035007663616e30000000000000000000000014003500697036677265300000000000000000001400350067656e657665300000000000000000001400350070696d7265673000000000000000000008000f000f000000140003007465616d5f736c6176655f3000000000"], 0x100}, 0x1, 0x0, 0x0, 0x48045}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000002300004802c0001800c00010062497477697365001c00028008000140000000000800024000000004080003407fffffff0900010073797a30000000220900020073797a32000000001400000011000100"/131], 0x84}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r6, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="c1ae4baf5c6e676f000e5d8f0f20000000010000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000cfe328fd99f5a8e3a7342c56b0000000000000004ed14107b883abc4b6fa10fee8638cbd9c47568eb3b44f741ce19530a2273a1a12b1a6b071844905c291c4f016ba064dd47985ff2126f00"/89], 0xd) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x40}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) 3.71790426s ago: executing program 3 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r2, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000140)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 3.290912569s ago: executing program 3 (id=1419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 3.226310944s ago: executing program 0 (id=1420): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0xa00, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, 0x27}, [@NHA_GROUP_TYPE={0x6}]}, 0x20}}, 0x80) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4048000) 3.106889946s ago: executing program 1 (id=1421): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="e43a68c44b5e996309a4ca03dbfd3fa84fbaf5876d7bce3d79231d5782ae5eb822174b99dc3a54de51fdbf8b8ed0e92543fedee36d58b27c639406b52ce6c43e4329a07f2c4205f3a9ff4830adf0f74c8e62f99c6d32c0d49b018566b073fabdbff2a1eb26b4752d41c2373f091ea2b67e00c0dc4626cefff3bf416f5898901a4439809de8b19f028a488d5edbd59a0eb3477723532b95f12217dc4ff1bb696649a19f07df4d6e58b3fd4f223d6a7c95994d9b3d1d104b57e4352d20a1d9d0f29b585c26f748786a5158a226f99809f9248edab41d065ba406", 0xd9}, {&(0x7f0000000180)="d5068fe1b1a4bec319520c003f3de1ff41ab010dc4b4ec7d23af8cbe4d8e0e2daf37f0070f042544f4b5980ecd861a2fd921b60fcff8c78c866792c786924fa2649c084bad9ae577863eb762eec77961c201bf321a2f5c37530d63a62f36f77bce88e46ba7b51604d2afeea79c293d75758882098a64e6e057121f3ab9a73517df877f2f2b258d137d9042", 0x8b}], 0x2, 0xe) 3.053404055s ago: executing program 4 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) close(0x3) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000180)='U', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) shutdown(r1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@bridge_setlink={0x2c, 0x13, 0x20, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x100, 0x4c60b}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 2.718767544s ago: executing program 4 (id=1424): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x19, 0x2, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x1170, 0x1170, 0xf0, 0x1170, 0x200, 0x1398, 0x1398, 0x200, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x13, 0x81}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xd8, 0x9, 0x7, 'snmp\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async, rerun: 32) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00'}) 2.285046376s ago: executing program 2 (id=1426): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x4, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x2}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e24, 0x8000c0, @mcast2, 0xc58e}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x0, r6}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001240)={r6, 0x1000, "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"}, &(0x7f0000002280)=0x1008) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000180)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000fffffffffffff8ffffe7ee00000000000000000200000000", 0x58}], 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x20010, r0, 0x155d1000) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x888) 1.631430507s ago: executing program 4 (id=1427): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x25}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0xffffffb3}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000002780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="ff5600000000"], 0x50}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000026c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000023000000000000001f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}], 0x5, 0x10) clock_gettime(0x0, &(0x7f0000002640)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000002440)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000180)=""/209, 0xd1}], 0x2}}, {{&(0x7f00000002c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000380)=""/43, 0x2b}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000700)=""/41, 0x29}, {&(0x7f0000000880)=""/166, 0xa6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/86, 0x56}], 0x4, &(0x7f0000001a00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001b40)=""/59, 0x3b}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/156, 0x9c}, {&(0x7f0000001d40)=""/32, 0x20}], 0x4}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001e40)=""/41, 0x29}], 0x1, &(0x7f0000001ec0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000002200)=[{&(0x7f0000002040)=""/123, 0x7b}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000021c0)=""/27, 0x1b}], 0x3, &(0x7f0000002240)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002280)=@abs, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002300)=""/49, 0x31}, {&(0x7f0000002340)}, {&(0x7f0000002380)=""/96, 0x60}], 0x3}}], 0x8, 0x10023, &(0x7f0000002680)={r1, r2+60000000}) r3 = socket(0xa, 0x80000, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a9058f43a82"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000029c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002800)={0x170, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffb1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x1e, 0x805, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r7}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r7}]}}}]}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.401536333s ago: executing program 3 (id=1428): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) (async) accept4(r2, &(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0x80, 0x80000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1000, 0x800, 0x80000000, 0x3}, 0x20) 1.390634672s ago: executing program 1 (id=1429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000000000000000a0000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000020000000000000005000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe800000000000000000000000000000000000000000000000080000000000000f000000e0000002000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000006c0000000a000000fc010000000000000000000000000000feffffff0400"/500], 0x23c}}, 0x0) 1.215688747s ago: executing program 0 (id=1430): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r3, 0x0) listen(r4, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ed222dbd7000fddbdf253400000008000300", @ANYRES32=r5, @ANYBLOB="14005500cc9b"], 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000083}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100e81cbcde000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c0000140002800800014000000001"], 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) 1.210388908s ago: executing program 2 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000f50a6c000000060a0b04000000000000000002000000400004803c0001800a0001006c696d69740000002c000280080003400000000408000440060000000c00024000000000000000020c000140000000004a9c4b670900010073797a30000000000900020073797a320000000014000000110001000000001a000000000000000a12d47f533ef1ad4c214a000000000edf40b7ab8c6c47180957007d9d38fbc3c783d2604accfc29cd0bd7054bfb76077c001568ad28d59b02bd57"], 0x94}}, 0x4) 1.160309738s ago: executing program 4 (id=1432): r0 = socket(0x1, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f0000000000), 0x10) (async) bind$l2tp(r4, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="cad7a79f356bc0cdabecbd23822d4f065ed4f1039806debe3817edf9492a9027ef5bebd83bdf3a882490d403005f7ddb76f294e72d9a49a4575f60cacf2d884d39292c9e40281c9a32a593271896a45a51b7d617d754123f38c0341e778947d5f7b56567bd1ca20000000000000000008419baa8a30d6ff6b05e4d14831fd5c40e217dd3e778cdea3887ae0865d7bfacbd35bda9891e51ee0bbddc37e4ded1aab17bb84fbbb847a28aca2e3e00e2af3d97acb6460f1ad12feebb1b13", @ANYRES64=0x0], 0x20) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000280)={{0x2, 0x5, 0x200, 0x3, 0xfffffff9}, [{0x3ff, 0xb2d7, 0x3e, 0x40}, {0x200, 0x36e, 0x7, 0x5}, {0x3, 0x80000000000, 0xf, 0x1}]}) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (rerun: 64) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async) write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r10, 0x0, r8, 0x0, 0x2, 0x2) (async, rerun: 64) sendto$unix(r7, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) (rerun: 64) 1.011696915s ago: executing program 1 (id=1433): r0 = socket$netlink(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x50}}, 0x0) 1.010728769s ago: executing program 3 (id=1434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x7dfc9a88bbf6917f, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0xfffffffd, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x1000000) 999.929612ms ago: executing program 2 (id=1435): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0x40) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 865.958986ms ago: executing program 0 (id=1436): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) (async) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) 808.343396ms ago: executing program 1 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r1, 0x75fb3000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000140)) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, r2, 0x4000}, 0x38) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xa}, [], [0x0, 0x0, 0xffffff00], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0xf7fe, 0x4, 'snmp\x00', 'syz1\x00', {0xe8ea}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x100, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 569.62122ms ago: executing program 3 (id=1438): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000004c0)={[{0x2b, 'pids'}]}, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in, @in=@local}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000007c0)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in, @in=@local}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000007c0)=0xe8) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)) (async) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x80, 0x43, 0x107, 0xfffffffe, 0x25dfdbfa, {0x4, 0x7c}, [@nested={0x4, 0x147}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xda, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, @typed={0x8, 0x168, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x15, 0x0, 0x0, @pid=r10}, @generic="089d12407437d76855333654d442aedb769e9cc31fe68579a40c5eda246ea942098fc5388474739ffb2652ebe436cfc629ff50333c097135618e518e1416"]}, 0x80}}, 0x4c010) 561.766391ms ago: executing program 0 (id=1439): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x67, @rand_addr=0x64010101, 0x4e21, 0x4, 'lblcr\x00', 0x27, 0xfffffff9, 0xa}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r3, @ANYBLOB="00032dbd7000fbdbdf25080000000800060000e0ff1f2c000280060002004e240000060002004e200000080008004000000005000d000100000006000e004e2400002c000180060002002f00000008000b0073697000060001000a000000080006006f766600060001000200000030000380140006000000000000000000000004fa00000500080005000000060007004e2100000800050000000100440003801400020077673200000000000000000000000000050008000000000014000600fc0100000000000000000000000000000800030002000000060007004e210000"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x4008c00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000300)=""/40, &(0x7f0000000340)=0x28) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000540)={r1, &(0x7f0000000440)='\x00', 0x40, &(0x7f0000000480)={@align=0x69, {0x1, 0x81, 0x3, 0x3}}, 0xe3, &(0x7f00000004c0), &(0x7f0000000500)=0x822}) r6 = getpid() sendmsg$nl_generic(r5, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x3c4, 0x13, 0x100, 0x70bd2c, 0x25dfdbfe, {0x6}, [@generic="6a77065b6d15af5acf26889180a6e49acc23a415d2788aed2eb7f801ba30dc29902f2648c24f4d65c0603a84f78e887d3ea2b889e1779d4e22163822b9fe23c78a", @nested={0x36c, 0x112, 0x0, 0x1, [@generic="6b483232542a6e3177fc5660f86cdea4", @typed={0x4, 0x2e}, @generic="7fdc86c245f52855b8a53f8d753dcbf4846a4bb1dd30cb3c3bde79ea08210805b5ad30c281dd7e08bec840bd2bfb5b0ffec6c47eb9726a13b373622cdf90e89124a35171071dbbaa50d287bb78f3e3aeda06e81fdb1c85e6885b03d7ddd57b2a1bbd6ef5d382b118e14856125d17427fa58e935322f095e963292e9803647f6a04eb79120f80e7196dc171918f554751b54f91e58860d8bc3354b3bab7b60d3b7238a666f1ae6329c3421be03d8a9f39843214c300bc4382290ae1055d9b0f91296bb2356f15544a0cb9d846b9", @nested={0x4, 0x48}, @generic="72f6640b57d60b1d962c5304c4bab2b091b43064616eb957f6d6765cd6416bd3a8ab0446bc7062ded0e624ae3274ca7ea2ddeeb4d4e7f0ab6b1abcf763c932c05354014640a6bfea672cbbdf8a671e26ff56531140c80e3be395603d5ef675cf14f25da698be96418ffc3a3fdc6cb3d242ee1e1a84340bf1795658ee7860abc883488d061da59b691a3992caea2c1745bb640ed941211a5ac4d39a23277645b08202755bd5797306763586d3ff44fd46daa95d2b4e466e6b7cec636942212432a2cb47151d4011a6563daca81a7d258d", @typed={0x8, 0xff, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x127, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0x169, 0x0, 0x0, @ipv6=@mcast1}, @generic="8ebd84b7bbbc9c185d572f84dec11547bf1b37ce825d3279334586232b4c4b3257754ffc8806848bcf81c3a513ce43250384d49475e2b8242e1d4ce50e6cf9c20d2a5a2d568c71d1230968df0d9cebecbf771c8cbb60d2061641ea77cfbd78896f3189a73baffa86383af659aa3d9a802deff52c8fdf956c974a6ee103e5c18a86106efaa147790119ce0ffe2e05d5e99377ccf751ce83cb3556757143d434384ec11abb0a03a2f7d8cc91", @generic="a1410c91013b1f5332e5718ae9fa362c238e2f6bcd007dc04e8b26273d35f1fd9a181650a64efe3d1c2e2c3cc608abf15bfb0989483181e55b2268c41ee1444f826d61fe1a09a03c4d319a904d33153967a3d72fb89211b798e572ca137b85f8943ef3df72d348a145fdf0198b84389979cb54fa8d7075e84ee0dc5c09c93e0b8ad5d290fa81114b0640cf51aacd86192cdf3495ad4047ab51cd79782a06be5526e598d83788c4ea3fb34ae4e016471a6d5de323827363c77d68326946ae31826d0a3ea095ea16f506f15caf96cc9b1510422b3235b19df2be6553bbf9a056ce63636775"]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x40801}, 0x4008096) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 502.966671ms ago: executing program 2 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x19c, 0x29, 0x107, 0x70bd25, 0x1, {0x9, 0x7c}, [@generic="0c1ee62885efec2471ceb5c93e0499aa8735b6e462f4e47e14e046168ecdfcd761e383ea560e69f192822d6758b931597524439c0765fc45787d36d61658a60603c4d64e324818394b2eb039e8ed22507ea9794d74c0c78e5bc62ed279746a25558233879db88ee43d3cc65441b8ab0dd35305287f788da6f9573e1e", @generic="998d4f0dc3541a", @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x7e}, @generic="b70fe311539e3325d8d420bea927bbb58671d7a21e9d340c34e7b44a505bb2f88945b43b3b9e3d3224083d3876ebe106f8fa2ab95962f67599291b6d7371860bff1651697de784b80176eeda199bc3c653a3ed0c3ace292e0508ecc7079a23362ad4e212292f6ec407d929f589bc115c116397277d7562b99c9f8ac4df420c8617ce23b98eaca8b3521e34d2e8f179d3a2d467657d5d583aa311f766ca317f23438ba624ace23fdb83ebbd321c886358d8be2768827ade63244e988f857d3116a4634ae021140ead405fdad1a6e79707cdad731c3a5e9d7e00c2fe65efd6d5b2e5039f17c947886345b7"]}, 0x19c}, 0x1, 0x0, 0x0, 0x4c815}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 502.093894ms ago: executing program 1 (id=1441): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095", @ANYBLOB="8c78afe99d309dc4c887291d975ea193948ec5cadd8f45484c9060158c521c68bceb8f5524c6a397c88fe30149df546ddf1ae48d5f15417f44b7bbe16c7e47eaf8c4ffcc6777d07f40aa43e6e0e8e95ca693cb46a28e7eb4d6649590b809f8a3ced7635743fdd98c46b404c557062d0ea9bb629be0ea1643e00d7708933151c4ce5ef598a0230139edf311bb26769460712a86d5dde4de64c6e3087f5e38f4b8f96272f80160543e6b0672790a6fe4ae8e4516164258ef8a20bd09badd5afc9513070f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 291.876938ms ago: executing program 2 (id=1442): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = socket(0x2b, 0x80801, 0x1) ioctl$SIOCGETNODEID(r2, 0x89e1, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x6, 0x204, 0x8, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0xb, 0x7, 0x0, 0x0, "a9c4eaa89d9376f0"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 247.659384ms ago: executing program 0 (id=1443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {0xe40ca4f7c51e5624}, {0xfff1, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) connect$packet(r1, &(0x7f0000000180)={0x11, 0xf5, r5, 0x1, 0xe, 0x6, @local}, 0x14) accept4$vsock_stream(r4, &(0x7f0000000540)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x1000) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206050000000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000200000005000100060000000c000780080008000000000035d7ce0c93640b698b184719c23c5ae832ade96b4dca499237716d2808416c4a787190c8d71518d0d3964fd8203ac7dd0cdb9362af25dff9c69f4cc358f56575f1a55f9b130a8271f192b174489847b31383b8b320b2cc35008673d8"], 0x58}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x4000, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 171.745469ms ago: executing program 3 (id=1444): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2509000000080001000100000005000800000000000500070000000800010002"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6d55}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9f0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x25dfdc01, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x3}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x38}}, 0x44000) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x24}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "84d7e66acb975436df800e95863e6595"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "aadbd5b0b53b9e22a3aacf4504ef3a13"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "9240bda83adbafb9671cd7693e17a03e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "76af598c61c3b8ac380923e0a00dabd1"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 31.91505ms ago: executing program 2 (id=1445): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f00000001c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000014) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) 17.684718ms ago: executing program 4 (id=1446): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x16, 0xa01, 0x4, 0x0, {0x1f}}, 0x14}}, 0x8000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@private2, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfc00000000000000}, 0x7, 0xd, 0x4, 0x0, 0x7, 0x800002}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0xffffffff00000000}, 0x38) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x1ff, 0x2}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async, rerun: 64) r7 = accept4(r6, 0x0, 0x0, 0x80000) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) (rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0xd) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000080)=[{0x1, 0x0, {0x2, 0xff, 0x4}, {0x1, 0xf0, 0x4}, 0xff, 0x2}, {0x1, 0x1, {0x1, 0xf0, 0x2}, {0x0, 0x1, 0x4}, 0xfd, 0xfd}, {0x0, 0x0, {0x2, 0x1, 0x3}, {0x0, 0xff, 0x1}, 0x1, 0x2}, {0x1, 0x2, {0x0, 0xf1}, {0x2, 0xf0, 0x3}, 0xfd, 0xff}], 0x80) 0s ago: executing program 1 (id=1447): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 74.410651][ T5587] cgroup: Unknown subsys name 'net' [ 74.541069][ T5587] cgroup: Unknown subsys name 'cpuset' [ 74.550549][ T5587] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.207215][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.695108][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.706713][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.716416][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.716959][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.724284][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.733497][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.741285][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.748267][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.754201][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.768179][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.770749][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.785438][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.793462][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.810433][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.810733][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.827896][ T4942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.836013][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.845935][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.857983][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.866740][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.937006][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.951958][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.961545][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.973326][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.982115][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.423650][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.431950][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.439681][ T5638] bridge_slave_0: entered allmulticast mode [ 81.448193][ T5638] bridge_slave_0: entered promiscuous mode [ 81.485178][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.492718][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.499996][ T5638] bridge_slave_1: entered allmulticast mode [ 81.507278][ T5638] bridge_slave_1: entered promiscuous mode [ 81.648212][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.696567][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.835324][ T5638] team0: Port device team_slave_0 added [ 81.849379][ T5638] team0: Port device team_slave_1 added [ 81.888053][ T5635] Bluetooth: hci3: command tx timeout [ 81.888169][ T5627] Bluetooth: hci2: command tx timeout [ 81.894415][ T5630] Bluetooth: hci0: command tx timeout [ 81.900801][ T5627] Bluetooth: hci1: command tx timeout [ 82.002783][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.010162][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.036305][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.048663][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.055962][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.063192][ T5627] Bluetooth: hci4: command tx timeout [ 82.063367][ T5631] bridge_slave_0: entered allmulticast mode [ 82.075859][ T5631] bridge_slave_0: entered promiscuous mode [ 82.109879][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.117755][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.143814][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.154912][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.162226][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.169759][ T5631] bridge_slave_1: entered allmulticast mode [ 82.176856][ T5631] bridge_slave_1: entered promiscuous mode [ 82.304072][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.359883][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.367155][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.374384][ T5625] bridge_slave_0: entered allmulticast mode [ 82.386509][ T5625] bridge_slave_0: entered promiscuous mode [ 82.396557][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.421350][ T5638] hsr_slave_0: entered promiscuous mode [ 82.428369][ T5638] hsr_slave_1: entered promiscuous mode [ 82.445089][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.453233][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.460792][ T5625] bridge_slave_1: entered allmulticast mode [ 82.468102][ T5625] bridge_slave_1: entered promiscuous mode [ 82.484480][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.492094][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.499800][ T5643] bridge_slave_0: entered allmulticast mode [ 82.506910][ T5643] bridge_slave_0: entered promiscuous mode [ 82.515006][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.522396][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.529709][ T5624] bridge_slave_0: entered allmulticast mode [ 82.536956][ T5624] bridge_slave_0: entered promiscuous mode [ 82.575375][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.582772][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.590247][ T5643] bridge_slave_1: entered allmulticast mode [ 82.597676][ T5643] bridge_slave_1: entered promiscuous mode [ 82.604833][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.612235][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.619507][ T5624] bridge_slave_1: entered allmulticast mode [ 82.626621][ T5624] bridge_slave_1: entered promiscuous mode [ 82.645328][ T5631] team0: Port device team_slave_0 added [ 82.693128][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.705074][ T5631] team0: Port device team_slave_1 added [ 82.738359][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.767811][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.780273][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.819036][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.830473][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.852031][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.859226][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.885227][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.926309][ T5625] team0: Port device team_slave_0 added [ 82.932916][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.940391][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.966932][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.008277][ T5625] team0: Port device team_slave_1 added [ 83.030618][ T5643] team0: Port device team_slave_0 added [ 83.038788][ T5624] team0: Port device team_slave_0 added [ 83.077236][ T5643] team0: Port device team_slave_1 added [ 83.084661][ T5624] team0: Port device team_slave_1 added [ 83.103225][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.110290][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.136662][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.185573][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.193371][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.220050][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.262311][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.269338][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.295575][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.327974][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.334947][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.361211][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.379500][ T5631] hsr_slave_0: entered promiscuous mode [ 83.385854][ T5631] hsr_slave_1: entered promiscuous mode [ 83.392454][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 83.398390][ T5631] Cannot create hsr debugfs directory [ 83.404878][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.411974][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.438221][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.463929][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.472004][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.498638][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.554364][ T5643] hsr_slave_0: entered promiscuous mode [ 83.561023][ T5643] hsr_slave_1: entered promiscuous mode [ 83.567550][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 83.573433][ T5643] Cannot create hsr debugfs directory [ 83.637802][ T5625] hsr_slave_0: entered promiscuous mode [ 83.644285][ T5625] hsr_slave_1: entered promiscuous mode [ 83.651212][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 83.656956][ T5625] Cannot create hsr debugfs directory [ 83.701368][ T5624] hsr_slave_0: entered promiscuous mode [ 83.708073][ T5624] hsr_slave_1: entered promiscuous mode [ 83.714277][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 83.720203][ T5624] Cannot create hsr debugfs directory [ 83.967820][ T5627] Bluetooth: hci0: command tx timeout [ 83.968687][ T5635] Bluetooth: hci2: command tx timeout [ 83.973376][ T5627] Bluetooth: hci1: command tx timeout [ 83.979169][ T5630] Bluetooth: hci3: command tx timeout [ 83.999786][ T5638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.013765][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.069986][ T5638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.081805][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.089873][ T5638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.100806][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.108892][ T5638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.120219][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.137367][ T5630] Bluetooth: hci4: command tx timeout [ 84.327585][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.339359][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.353553][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.366079][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.375777][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.389481][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.397955][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.407567][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.512958][ T5643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.523898][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.532356][ T5643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.542572][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.564863][ T5643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.574522][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.583091][ T5643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.593267][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.660144][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.677812][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.694964][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.708195][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.729601][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.740807][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.768028][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.781075][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.822600][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.904736][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.912195][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.922104][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.938081][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.948879][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.956964][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.969601][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.989391][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.996972][ T743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.009475][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.020982][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.063839][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.071512][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.112390][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.174975][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.221182][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.242350][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.249540][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.300062][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.307286][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.320632][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.382737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.390082][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.429635][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.436791][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.468597][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.573868][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.607992][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.640038][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.647307][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.680362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.687577][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.735253][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.802932][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.810191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.846691][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.854078][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.050298][ T5630] Bluetooth: hci3: command tx timeout [ 86.050472][ T5635] Bluetooth: hci2: command tx timeout [ 86.055824][ T5630] Bluetooth: hci0: command tx timeout [ 86.061598][ T5635] Bluetooth: hci1: command tx timeout [ 86.210501][ T5635] Bluetooth: hci4: command tx timeout [ 86.295544][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.515558][ T5638] veth0_vlan: entered promiscuous mode [ 86.584354][ T5638] veth1_vlan: entered promiscuous mode [ 86.801527][ T5638] veth0_macvtap: entered promiscuous mode [ 86.857698][ T5638] veth1_macvtap: entered promiscuous mode [ 86.879843][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.002565][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.046354][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.156617][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.199619][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.245808][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.267970][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.277904][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.382975][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.436142][ T5631] veth0_vlan: entered promiscuous mode [ 87.558729][ T5631] veth1_vlan: entered promiscuous mode [ 87.658261][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.679438][ T3341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.703067][ T3341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.732724][ T5643] veth0_vlan: entered promiscuous mode [ 87.810463][ T5643] veth1_vlan: entered promiscuous mode [ 87.831572][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.846631][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.851889][ T5625] veth0_vlan: entered promiscuous mode [ 87.870895][ T5631] veth0_macvtap: entered promiscuous mode [ 87.912701][ T5625] veth1_vlan: entered promiscuous mode [ 87.932389][ T5631] veth1_macvtap: entered promiscuous mode [ 88.056792][ T5638] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.073350][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.105367][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.120673][ T5643] veth0_macvtap: entered promiscuous mode [ 88.131043][ T4942] Bluetooth: hci0: command tx timeout [ 88.131411][ T5627] Bluetooth: hci3: command tx timeout [ 88.136537][ T5635] Bluetooth: hci1: command tx timeout [ 88.141961][ T5630] Bluetooth: hci2: command tx timeout [ 88.188872][ T5643] veth1_macvtap: entered promiscuous mode [ 88.235517][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.254730][ T5625] veth0_macvtap: entered promiscuous mode [ 88.263732][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.290011][ T5635] Bluetooth: hci4: command tx timeout [ 88.291122][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.332840][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.372450][ T5625] veth1_macvtap: entered promiscuous mode [ 88.396059][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.467026][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.525061][ T1159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.554157][ T1159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.589346][ T1159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.600204][ T1159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.656093][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.729207][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.738164][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.739602][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.795757][ T5624] veth0_vlan: entered promiscuous mode [ 88.841559][ T5834] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.851050][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.862251][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.890355][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.920416][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.920644][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.939576][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.943438][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.952252][ T5624] veth1_vlan: entered promiscuous mode [ 88.962617][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.091940][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.125862][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.184238][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.202207][ T5624] veth0_macvtap: entered promiscuous mode [ 89.204900][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.274545][ T5624] veth1_macvtap: entered promiscuous mode [ 89.330169][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.339170][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.379894][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.424674][ T5840] netlink: 244 bytes leftover after parsing attributes in process `syz.3.11'. [ 89.440441][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.466195][ T5840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11'. [ 89.482185][ T5840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11'. [ 89.485945][ T3341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506045][ T3341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.528964][ T3341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.548938][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.961825][ T14] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.002338][ T14] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.056676][ T48] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 90.086316][ T5866] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 90.086403][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.104978][ T14] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.122677][ T14] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.123668][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.456136][ T5846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.460350][ T5875] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 90.914310][ T5896] netlink: 3080 bytes leftover after parsing attributes in process `syz.3.20'. [ 90.936741][ T5896] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.20'. [ 90.962900][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.972746][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.016807][ T5893] warning: `syz.3.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.403272][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 91.412011][ T5905] netlink: 84 bytes leftover after parsing attributes in process `syz.0.25'. [ 91.428965][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 91.436669][ T5905] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 91.448200][ T5910] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 91.464116][ T5908] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 91.472630][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 91.845375][ T5918] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 91.966851][ T5918] ipvlan2: entered allmulticast mode [ 91.979660][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29'. [ 91.985400][ T5918] erspan0: entered allmulticast mode [ 92.036337][ T5922] Zero length message leads to an empty skb [ 92.036614][ T5924] openvswitch: netlink: Missing key (keys=40, expected=100) [ 92.236717][ T5928] netlink: 'syz.2.31': attribute type 2 has an invalid length. [ 92.246457][ T5931] netlink: 'syz.4.33': attribute type 3 has an invalid length. [ 92.246538][ T11] cfg80211: failed to load regulatory.db [ 92.271346][ T5928] netlink: 'syz.2.31': attribute type 2 has an invalid length. [ 92.279659][ T5932] tipc: Failed to obtain node identity [ 92.294959][ T5932] tipc: Enabling of bearer rejected, failed to enable media [ 92.549212][ T5940] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 92.665115][ T29] audit: type=1804 audit(1783122546.496:2): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.40" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=38 res=1 errno=0 [ 92.721107][ T5953] netlink: 'syz.2.41': attribute type 3 has an invalid length. [ 92.732785][ T5953] netlink: 'syz.2.41': attribute type 1 has an invalid length. [ 92.742598][ T29] audit: type=1800 audit(1783122546.526:3): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.40" name="cgroup.controllers" dev="tmpfs" ino=38 res=0 errno=0 [ 92.956661][ T5961] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 93.385139][ T5973] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 94.048467][ T5635] Bluetooth: hci4: command tx timeout [ 94.483531][ T6017] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 94.823327][ T6029] __nla_validate_parse: 11 callbacks suppressed [ 94.823348][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 95.030975][ T6037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 95.035434][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.71'. [ 95.928927][ T6085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'. [ 98.465601][ T6061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.793333][ T6096] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 98.819155][ T6096] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 98.829476][ T6097] xt_hashlimit: size too large, truncated to 1048576 [ 99.125767][ T6111] validate_nla: 4 callbacks suppressed [ 99.125789][ T6111] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 99.156624][ T6111] netlink: 44 bytes leftover after parsing attributes in process `syz.1.92'. [ 99.322002][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.94'. [ 99.645414][ T29] audit: type=1804 audit(1783122553.476:4): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.97" name="/newroot/19/cgroup.controllers" dev="tmpfs" ino=114 res=1 errno=0 [ 99.651708][ T6124] openvswitch: netlink: IP tunnel dst address not specified [ 99.745384][ T29] audit: type=1800 audit(1783122553.476:5): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.97" name="cgroup.controllers" dev="tmpfs" ino=114 res=0 errno=0 [ 99.773619][ T6132] tipc: Started in network mode [ 99.784010][ T6128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.813060][ T6132] tipc: Node identity ac14140f, cluster identity 4711 [ 99.864002][ T6132] tipc: Enabled bearer , priority 10 [ 99.870536][ T6135] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 100.039548][ T6140] sctp: [Deprecated]: syz.2.102 (pid 6140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.039548][ T6140] Use struct sctp_sack_info instead [ 100.226473][ T6148] xt_hashlimit: size too large, truncated to 1048576 [ 100.274045][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.106'. [ 100.419357][ T6163] veth0: entered promiscuous mode [ 100.439978][ T6159] veth0: left promiscuous mode [ 100.978959][ T5626] tipc: Node number set to 2886997007 [ 101.008967][ T6182] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 101.040361][ T5756] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 101.306805][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 101.448452][ T42] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 101.591073][ T6206] xt_hashlimit: size too large, truncated to 1048576 [ 101.604076][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'. [ 101.646934][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.122'. [ 101.909940][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 102.003645][ T6219] team0: entered promiscuous mode [ 102.025862][ T6219] team_slave_0: entered promiscuous mode [ 102.065087][ T6219] team_slave_1: entered promiscuous mode [ 102.133013][ T6229] x_tables: duplicate underflow at hook 1 [ 102.136293][ T6219] team0: left promiscuous mode [ 102.173772][ T6219] team_slave_0: left promiscuous mode [ 102.185671][ T6219] team_slave_1: left promiscuous mode [ 102.704381][ T6259] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 102.724829][ T6259] netlink: 'syz.2.127': attribute type 4 has an invalid length. [ 102.737029][ T6259] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.127'. [ 102.751982][ T6259] netlink: 'syz.2.127': attribute type 4 has an invalid length. [ 102.986432][ T6269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.992809][ T6269] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 103.033986][ T6269] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.041153][ T6269] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 103.068612][ T6269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.076607][ T6269] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 103.112789][ T6269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.121466][ T6269] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 103.144106][ T6269] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.152404][ T6269] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 103.616318][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.132'. [ 104.802893][ T6216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.811897][ T6233] netlink: 256 bytes leftover after parsing attributes in process `syz.3.126'. [ 105.071881][ T6351] netlink: 'syz.3.134': attribute type 28 has an invalid length. [ 105.090901][ T6351] netlink: 'syz.3.134': attribute type 3 has an invalid length. [ 105.151335][ T6351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.134'. [ 105.210340][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 105.436947][ T6375] xt_hashlimit: size too large, truncated to 1048576 [ 105.519315][ T6378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.825503][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 106.010111][ T6391] netlink: 'syz.2.144': attribute type 3 has an invalid length. [ 106.035697][ T6391] netlink: 244 bytes leftover after parsing attributes in process `syz.2.144'. [ 106.814914][ T6418] sctp: [Deprecated]: syz.1.149 (pid 6418) Use of int in maxseg socket option. [ 106.814914][ T6418] Use struct sctp_assoc_value instead [ 106.853460][ T6421] netlink: 'syz.2.150': attribute type 2 has an invalid length. [ 106.898993][ T6428] trusted_key: syz.0.151 sent an empty control message without MSG_MORE. [ 106.965887][ T6421] : entered promiscuous mode [ 107.147847][ T6431] nbd: must specify a device to reconfigure [ 107.206277][ T6431] netlink: 104 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.581107][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 107.605596][ T6441] xt_hashlimit: size too large, truncated to 1048576 [ 108.196480][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 108.405999][ T6464] bond0: (slave bond_slave_1): Releasing backup interface [ 108.472571][ T6462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.654435][ T6467] Bluetooth: MGMT ver 1.23 [ 108.857487][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 109.426555][ T6500] xt_hashlimit: size too large, truncated to 1048576 [ 111.171187][ T6363] Set syz1 is full, maxelem 65536 reached [ 111.991755][ T6512] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 112.400329][ T6539] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 112.675652][ T6555] netlink: 128 bytes leftover after parsing attributes in process `syz.0.188'. [ 112.685295][ T6558] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 112.691578][ T6555] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 112.713254][ T6558] netlink: 240 bytes leftover after parsing attributes in process `syz.1.189'. [ 112.742379][ T6558] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 112.760492][ T6558] netlink: 240 bytes leftover after parsing attributes in process `syz.1.189'. [ 112.814761][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 112.832513][ T6555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.931968][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 113.205531][ T6578] syzkaller0: entered promiscuous mode [ 113.217868][ T6578] syzkaller0: entered allmulticast mode [ 113.309331][ T6581] sctp: [Deprecated]: syz.0.196 (pid 6581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.309331][ T6581] Use struct sctp_sack_info instead [ 113.330918][ T6580] sctp: [Deprecated]: syz.0.196 (pid 6580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.330918][ T6580] Use struct sctp_sack_info instead [ 113.786798][ T6613] netlink: 84 bytes leftover after parsing attributes in process `syz.3.204'. [ 113.875462][ T6610] gtp0: entered promiscuous mode [ 113.891032][ T6610] gtp0: entered allmulticast mode [ 113.925618][ T6615] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.932704][ T6616] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.968572][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 114.084216][ T6626] netlink: 'syz.4.209': attribute type 63 has an invalid length. [ 114.109547][ T6626] netlink: 'syz.4.209': attribute type 63 has an invalid length. [ 114.215070][ T6631] syzkaller0: entered promiscuous mode [ 114.247456][ T6631] syzkaller0: entered allmulticast mode [ 114.443056][ T6648] netlink: 32 bytes leftover after parsing attributes in process `syz.4.214'. [ 114.524394][ T6645] macvlan0: entered promiscuous mode [ 115.065492][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 115.206310][ T6684] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 115.206310][ T6684] Please contact the netfilter-devel mailing list or update your nftables rules. [ 115.299703][ T6687] xt_bpf: check failed: parse error [ 115.333061][ T6682] syzkaller0: entered promiscuous mode [ 115.347972][ T6682] syzkaller0: entered allmulticast mode [ 115.390231][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 115.516606][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 116.523729][ T6723] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 118.021538][ T6730] netlink: 'syz.3.234': attribute type 3 has an invalid length. [ 118.059745][ T6730] __nla_validate_parse: 1 callbacks suppressed [ 118.059763][ T6730] netlink: 36 bytes leftover after parsing attributes in process `syz.3.234'. [ 118.092899][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 118.128834][ T6740] openvswitch: netlink: Missing key (keys=40, expected=80) [ 118.163641][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.238'. [ 118.196605][ T6735] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 118.441190][ T6743] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 118.506387][ T6748] syzkaller0: entered promiscuous mode [ 118.519887][ T6748] syzkaller0: entered allmulticast mode [ 118.668474][ T6770] netlink: 'syz.4.241': attribute type 21 has an invalid length. [ 118.709192][ T6770] netlink: 128 bytes leftover after parsing attributes in process `syz.4.241'. [ 118.741250][ T6770] netlink: 3 bytes leftover after parsing attributes in process `syz.4.241'. [ 119.115238][ T6778] netlink: 260 bytes leftover after parsing attributes in process `syz.0.244'. [ 119.783993][ T6799] netlink: 68 bytes leftover after parsing attributes in process `syz.0.249'. [ 119.980272][ T6806] netlink: 6212 bytes leftover after parsing attributes in process `syz.0.250'. [ 120.013278][ T6806] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 120.659420][ T6817] netlink: 'syz.1.254': attribute type 1 has an invalid length. [ 120.721939][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 120.802773][ T6815] syzkaller0: entered promiscuous mode [ 120.826308][ T6815] syzkaller0: entered allmulticast mode [ 122.326587][ T6835] netlink: 'syz.4.259': attribute type 1 has an invalid length. [ 122.367205][ T6835] netlink: 224 bytes leftover after parsing attributes in process `syz.4.259'. [ 122.388642][ T6836] ip6t_srh: unknown srh match flags 5F28 [ 125.161179][ T6870] __nla_validate_parse: 3 callbacks suppressed [ 125.161203][ T6870] netlink: 72 bytes leftover after parsing attributes in process `syz.4.269'. [ 125.181176][ T6882] vlan0: entered promiscuous mode [ 125.539454][ T6890] netlink: 244 bytes leftover after parsing attributes in process `syz.3.273'. [ 126.024877][ T6917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 126.265970][ T6923] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 126.341040][ T6923] bond1: entered promiscuous mode [ 126.347963][ T6923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.348784][ T6928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.282'. [ 126.539734][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 126.564391][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 126.597823][ T6941] xt_socket: unknown flags 0x50 [ 126.627035][ T6931] syzkaller0: entered promiscuous mode [ 126.641940][ T6931] syzkaller0: entered allmulticast mode [ 127.059396][ T6961] netlink: 27 bytes leftover after parsing attributes in process `syz.1.291'. [ 127.466523][ T6974] openvswitch: netlink: IP tunnel TTL not specified. [ 127.694690][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 128.985624][ T6959] ip6erspan0: entered allmulticast mode [ 129.146916][ T6982] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 129.173127][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.297'. [ 129.193818][ T6982] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 129.244434][ T6991] netlink: 'syz.3.298': attribute type 7 has an invalid length. [ 129.283990][ T6991] netlink: 140 bytes leftover after parsing attributes in process `syz.3.298'. [ 129.353621][ T6984] netlink: 'syz.0.297': attribute type 8 has an invalid length. [ 129.491268][ T7007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.665223][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.674441][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.006762][ T6984] nbd0: detected capacity change from 0 to 63 [ 130.081690][ T5627] block nbd0: Receive control failed (result -104) [ 130.081690][ T5635] block nbd0: Receive control failed (result -32) [ 130.105709][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.206873][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.393942][ T6251] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.432213][ T6251] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.473823][ T6251] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.512058][ T6251] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.010136][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 131.491557][ T7092] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 131.751379][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 131.953006][ T7126] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 132.239154][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 132.271821][ T7136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.280756][ T7136] IPv6: NLM_F_CREATE should be set when creating new route [ 132.288235][ T7136] IPv6: NLM_F_CREATE should be set when creating new route [ 132.852316][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 133.175012][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.182731][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.231407][ T7187] netlink: 'syz.2.341': attribute type 2 has an invalid length. [ 133.419992][ T7196] tipc: Can't bind to reserved service type 3 [ 133.445366][ T7189] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 133.586532][ T7202] syzkaller0: entered promiscuous mode [ 133.603264][ T7202] syzkaller0: entered allmulticast mode [ 133.679788][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 133.829582][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 133.841507][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 134.274118][ T7242] netlink: 'syz.1.359': attribute type 13 has an invalid length. [ 134.298860][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 134.379197][ T7247] netlink: 'syz.3.358': attribute type 4 has an invalid length. [ 137.426210][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.363'. [ 137.524396][ T7274] lo: Caught tx_queue_len zero misconfig [ 137.572033][ T7277] netlink: 'syz.1.364': attribute type 19 has an invalid length. [ 137.612225][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.365'. [ 138.135443][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 138.233469][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 138.424732][ T7305] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.512199][ T7308] SET target dimension over the limit! [ 138.541891][ T7311] SET target dimension over the limit! [ 138.841568][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'. [ 138.933261][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 139.263779][ T7345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.384'. [ 139.439715][ T7353] veth0: entered promiscuous mode [ 139.506674][ T7353] veth0: left promiscuous mode [ 139.512175][ T7356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.386'. [ 140.119453][ T7379] netlink: 48 bytes leftover after parsing attributes in process `syz.1.393'. [ 140.120793][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.395'. [ 140.276855][ T7389] syzkaller0: entered promiscuous mode [ 140.286432][ T7389] syzkaller0: entered allmulticast mode [ 140.653670][ T7402] tunl0: Caught tx_queue_len zero misconfig [ 140.736106][ T7404] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 141.064940][ T7417] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 141.301007][ T7428] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 141.345527][ T7428] netlink: 'syz.4.408': attribute type 11 has an invalid length. [ 141.356349][ T7430] syzkaller0: entered promiscuous mode [ 141.366572][ T7428] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 141.368286][ T7430] syzkaller0: entered allmulticast mode [ 141.388797][ T7428] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 142.011733][ T7466] netlink: 'syz.3.419': attribute type 30 has an invalid length. [ 142.169237][ T7466] bond2: option arp_missed_max: invalid value (0) [ 142.188150][ T7466] bond2: option arp_missed_max: allowed values 1 - 255 [ 142.214369][ T7466] bond2 (unregistering): Released all slaves [ 142.333586][ T7466] netlink: 'syz.3.419': attribute type 30 has an invalid length. [ 142.401986][ T7466] bond2: option arp_missed_max: invalid value (0) [ 142.410107][ T7466] bond2: option arp_missed_max: allowed values 1 - 255 [ 142.420259][ T7466] bond2 (unregistering): Released all slaves [ 142.516151][ T7466] netlink: 'syz.3.419': attribute type 30 has an invalid length. [ 142.557156][ T7466] bond2: option arp_missed_max: invalid value (0) [ 142.563735][ T7466] bond2: option arp_missed_max: allowed values 1 - 255 [ 142.572247][ T7466] bond2 (unregistering): Released all slaves [ 142.635101][ T7466] netlink: 'syz.3.419': attribute type 30 has an invalid length. [ 142.690943][ T7466] bond2: option arp_missed_max: invalid value (0) [ 142.700179][ T7466] bond2: option arp_missed_max: allowed values 1 - 255 [ 142.710969][ T7466] bond2 (unregistering): Released all slaves [ 142.936707][ T7499] syzkaller0: entered promiscuous mode [ 142.953191][ T7499] syzkaller0: entered allmulticast mode [ 143.142791][ T7506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.334322][ T7518] __nla_validate_parse: 10 callbacks suppressed [ 143.334344][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 143.377221][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 143.418188][ T7518] netlink: 11 bytes leftover after parsing attributes in process `syz.2.431'. [ 143.466125][ T7518] netlink: 'syz.2.431': attribute type 2 has an invalid length. [ 143.499202][ T7518] netlink: 'syz.2.431': attribute type 3 has an invalid length. [ 143.538936][ T7518] netlink: 11 bytes leftover after parsing attributes in process `syz.2.431'. [ 143.563145][ T7531] netlink: 'syz.4.434': attribute type 11 has an invalid length. [ 144.028638][ T7551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.440'. [ 144.057531][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 144.185505][ T7557] syzkaller0: entered promiscuous mode [ 144.201920][ T7557] syzkaller0: entered allmulticast mode [ 144.203715][ T7565] netlink: 'syz.0.445': attribute type 39 has an invalid length. [ 144.755558][ T7580] netlink: 64 bytes leftover after parsing attributes in process `syz.4.450'. [ 144.950327][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 145.128521][ T7606] netlink: 80 bytes leftover after parsing attributes in process `syz.1.459'. [ 145.151768][ T7606] netlink: 80 bytes leftover after parsing attributes in process `syz.1.459'. [ 145.332695][ T7616] netlink: 52 bytes leftover after parsing attributes in process `syz.3.462'. [ 145.623526][ T7625] team0: Device ipvlan2 failed to register rx_handler [ 145.984706][ T7634] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 146.350575][ T7664] syzkaller0: entered promiscuous mode [ 146.408268][ T7664] syzkaller0: entered allmulticast mode [ 146.517334][ T7668] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 146.555679][ T7668] netlink: 'syz.1.474': attribute type 4 has an invalid length. [ 146.574684][ T7668] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 146.593108][ T7668] netlink: 'syz.1.474': attribute type 4 has an invalid length. [ 146.983964][ T7691] openvswitch: netlink: Missing key (keys=40, expected=100) [ 147.039119][ T7686] syzkaller0: entered promiscuous mode [ 147.058869][ T7686] syzkaller0: entered allmulticast mode [ 149.818175][ T7748] syzkaller0: entered promiscuous mode [ 149.829176][ T7748] syzkaller0: entered allmulticast mode [ 150.392933][ T7774] __nla_validate_parse: 5 callbacks suppressed [ 150.392952][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 150.437981][ T7774] netlink: 224 bytes leftover after parsing attributes in process `syz.3.501'. [ 150.471523][ T7781] IPv6: sit1: Disabled Multicast RS [ 150.487200][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 150.505157][ T7781] sit1: entered allmulticast mode [ 150.513757][ T7049] IPVS: starting estimator thread 0... [ 150.618094][ T7786] IPVS: using max 28 ests per chain, 67200 per kthread [ 150.974292][ T7810] netlink: 'syz.4.510': attribute type 16 has an invalid length. [ 151.025540][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.510'. [ 151.666362][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 151.992059][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 152.019264][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 152.026704][ T7853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.516'. [ 152.673558][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.526'. [ 152.686548][ T7873] netlink: 'syz.0.527': attribute type 4 has an invalid length. [ 152.707820][ T7873] netlink: 224 bytes leftover after parsing attributes in process `syz.0.527'. [ 153.022856][ T7891] netlink: 'syz.0.532': attribute type 4 has an invalid length. [ 153.416893][ T7912] netlink: 'syz.4.540': attribute type 7 has an invalid length. [ 153.436515][ T7912] netlink: 'syz.4.540': attribute type 8 has an invalid length. [ 153.605869][ T7920] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 154.212581][ T7948] netlink: 'syz.1.551': attribute type 11 has an invalid length. [ 155.435341][ T8015] __nla_validate_parse: 8 callbacks suppressed [ 155.435362][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 155.450911][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 155.482741][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 155.603446][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.572'. [ 155.873354][ T8035] ipt_ECN: cannot use operation on non-tcp rule [ 155.934070][ T8031] veth3: entered allmulticast mode [ 156.195034][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 156.247217][ T8048] Unsupported ieee802154 address type: 0 [ 156.526512][ T8064] xt_hashlimit: overflow, rate too high: 0 [ 156.788023][ T8073] ip6tnl0: Caught tx_queue_len zero misconfig [ 156.934275][ T8078] netlink: 'syz.3.590': attribute type 4 has an invalid length. [ 157.083091][ T8086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.192235][ T8078] netlink: 14 bytes leftover after parsing attributes in process `syz.3.590'. [ 157.284400][ T8093] IPVS: length: 179 != 8 [ 157.557217][ T8105] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 158.026863][ T8129] netlink: 76 bytes leftover after parsing attributes in process `syz.3.606'. [ 158.435039][ T8144] netlink: 'syz.4.610': attribute type 2 has an invalid length. [ 158.477273][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 158.512661][ T8146] netlink: 'syz.0.611': attribute type 5 has an invalid length. [ 158.518883][ T8118] netlink: 'syz.1.603': attribute type 4 has an invalid length. [ 158.582573][ T8152] netlink: 244 bytes leftover after parsing attributes in process `syz.2.613'. [ 158.762874][ T8157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.616'. [ 158.803519][ T8161] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 158.820768][ T8157] xt_addrtype: ipv6 does not support BROADCAST matching [ 159.073473][ T8162] team0 (unregistering): Port device team_slave_0 removed [ 159.133486][ T8162] team0 (unregistering): Port device team_slave_1 removed [ 159.271642][ T8177] syzkaller0: entered promiscuous mode [ 159.285523][ T8177] syzkaller0: entered allmulticast mode [ 159.438892][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.445804][ T8181] netlink: 'syz.2.620': attribute type 5 has an invalid length. [ 159.456030][ T8184] raw_sendmsg: syz.4.622 forgot to set AF_INET. Fix it! [ 159.640133][ T8187] vlan2: entered allmulticast mode [ 159.649429][ T8187] bond0: entered allmulticast mode [ 159.663221][ T8187] bond_slave_0: entered allmulticast mode [ 159.677470][ T8187] bond_slave_1: entered allmulticast mode [ 159.821034][ T8194] syzkaller0: entered promiscuous mode [ 159.826886][ T8194] syzkaller0: entered allmulticast mode [ 160.063391][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 160.082056][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 160.097849][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 160.107045][ T1614] block nbd0: Dead connection, failed to find a fallback [ 160.128681][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 160.647855][ T8216] __nla_validate_parse: 2 callbacks suppressed [ 160.647875][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 161.691515][ T8217] veth1_to_bond: entered allmulticast mode [ 161.697956][ T8218] veth1_to_bond: entered promiscuous mode [ 161.703980][ T8218] veth1_to_bond: left promiscuous mode [ 161.719065][ T8218] veth1_to_bond: left allmulticast mode [ 161.761528][ T8216] bond0: (slave bond_slave_1): Releasing backup interface [ 161.786260][ T8216] bond_slave_1 (unregistering): left allmulticast mode [ 161.950006][ T8227] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 162.080569][ T8224] IPVS: Scheduler module ip_vs_sip not found [ 162.310635][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 162.352172][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 162.382384][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 162.427258][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 162.459402][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 162.550159][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 162.579618][ T5635] block nbd1: Receive control failed (result -32) [ 162.580795][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.642'. [ 162.864877][ T8273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.979886][ T8275] syzkaller0: entered promiscuous mode [ 162.998405][ T8275] syzkaller0: entered allmulticast mode [ 163.084845][ T8290] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.650'. [ 163.094639][ T8290] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.650'. [ 163.245177][ T8291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.294453][ T8288] macvlan2: entered promiscuous mode [ 163.311228][ T8288] macvlan2: entered allmulticast mode [ 163.340628][ T8288] bond1: entered promiscuous mode [ 163.358086][ T8288] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 163.868114][ T8288] bond1: left promiscuous mode [ 164.023555][ T8333] Bluetooth: MGMT ver 1.23 [ 164.283783][ T8340] syzkaller0: entered promiscuous mode [ 164.299890][ T8340] syzkaller0: entered allmulticast mode [ 164.432142][ T8351] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 164.444065][ T8351] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 164.583557][ T8363] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 165.263561][ T8407] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.272250][ T8407] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 165.378725][ T8399] IPv6: sit1: Disabled Multicast RS [ 165.414209][ T8388] netlink: 'syz.2.677': attribute type 11 has an invalid length. [ 165.840780][ T8434] x_tables: duplicate entry at hook 2 [ 165.970875][ T8440] netlink: 'syz.0.690': attribute type 83 has an invalid length. [ 166.310140][ T8459] __nla_validate_parse: 13 callbacks suppressed [ 166.310159][ T8459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.696'. [ 166.569760][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.699'. [ 166.799497][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 166.826870][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 167.080833][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.372901][ T8514] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 167.461416][ T8519] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.713'. [ 167.487352][ T8519] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.713'. [ 167.681978][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 167.771034][ T8536] vlan2: entered allmulticast mode [ 167.780751][ T8541] netlink: 'syz.4.719': attribute type 1 has an invalid length. [ 167.792405][ T8542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.716'. [ 167.828165][ T8536] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 167.919901][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 167.952109][ T8541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.041146][ T8556] x_tables: unsorted entry at hook 2 [ 168.054980][ T8548] bond3: (slave veth7): Enslaving as an active interface with a down link [ 168.115686][ T8550] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 168.140148][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 168.152360][ T8550] bond3: (slave batadv1): making interface the new active one [ 168.185830][ T8550] batadv1: entered promiscuous mode [ 168.210390][ T8550] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 168.210426][ T8565] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 168.371575][ T8541] bond3: (slave veth9): Enslaving as an active interface with a down link [ 168.402819][ T8559] xfrm1: entered promiscuous mode [ 168.408278][ T8559] xfrm1: entered allmulticast mode [ 168.433305][ T8574] netlink: 'syz.3.726': attribute type 17 has an invalid length. [ 169.584878][ T8634] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20002 [ 171.398397][ T8624] tipc: Enabling of bearer rejected, failed to enable media [ 171.433422][ T8654] geneve2: entered promiscuous mode [ 171.438896][ T8654] geneve2: entered allmulticast mode [ 171.742793][ T8678] __nla_validate_parse: 3 callbacks suppressed [ 171.742814][ T8678] netlink: 56 bytes leftover after parsing attributes in process `syz.4.748'. [ 171.889720][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 171.986855][ T8692] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 172.022514][ T8694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 172.044794][ T8696] Bluetooth: MGMT ver 1.23 [ 172.067267][ T8696] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 172.485712][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 172.720731][ T8720] netlink: 100 bytes leftover after parsing attributes in process `syz.3.755'. [ 172.863307][ T8723] nbd: must specify an index to disconnect [ 173.016785][ T8731] xt_hashlimit: size too large, truncated to 1048576 [ 173.294582][ T8739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.758'. [ 173.318751][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.399665][ T8733] bridge_slave_0 (unregistering): left allmulticast mode [ 173.426929][ T8733] bridge_slave_0 (unregistering): left promiscuous mode [ 173.462534][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.693260][ T8777] sctp: [Deprecated]: syz.4.771 (pid 8777) Use of int in max_burst socket option. [ 174.693260][ T8777] Use struct sctp_assoc_value instead [ 175.625072][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 176.036522][ T8824] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.425217][ T8825] syzkaller0: entered promiscuous mode [ 176.447856][ T8825] syzkaller0: entered allmulticast mode [ 176.459344][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 176.487579][ T8826] netlink: 50 bytes leftover after parsing attributes in process `syz.1.783'. [ 176.517128][ T8826] netlink: 50 bytes leftover after parsing attributes in process `syz.1.783'. [ 179.258625][ T12] batadv1: left promiscuous mode [ 179.332488][ T8876] netlink: 'syz.4.798': attribute type 39 has an invalid length. [ 179.333209][ T29] audit: type=1804 audit(1783122633.166:6): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.797" name="/newroot/165/memory.events" dev="tmpfs" ino=860 res=1 errno=0 [ 179.341861][ T8877] netlink: 'syz.4.798': attribute type 39 has an invalid length. [ 179.419831][ T29] audit: type=1800 audit(1783122633.206:7): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.797" name="memory.events" dev="tmpfs" ino=860 res=0 errno=0 [ 179.444046][ T29] audit: type=1804 audit(1783122633.206:8): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.797" name="/newroot/165/memory.events" dev="tmpfs" ino=860 res=1 errno=0 [ 179.510664][ T8876] hsr_slave_0: left promiscuous mode [ 179.520189][ T8876] hsr_slave_1: left promiscuous mode [ 179.778226][ T8884] vlan2: entered promiscuous mode [ 179.804930][ T8884] bridge0: entered promiscuous mode [ 179.812334][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 180.283029][ T8902] Cannot find add_set index 46338 as target [ 180.553539][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 180.613105][ T7047] IPVS: starting estimator thread 0... [ 180.729889][ T8914] IPVS: using max 30 ests per chain, 72000 per kthread [ 180.799428][ T8922] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 180.842486][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 180.890611][ T8922] sock: sock_set_timeout: `syz.2.813' (pid 8922) tries to set negative timeout [ 180.933202][ T8927] netlink: 'syz.3.815': attribute type 2 has an invalid length. [ 181.461889][ T8941] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 181.800701][ T8935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.812755][ T8935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.922064][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 181.942124][ T8942] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.818'. [ 182.039358][ T8941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.206940][ T8946] bond1: (slave geneve2): making interface the new active one [ 182.241988][ T8959] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 182.286170][ T8959] netlink: 224 bytes leftover after parsing attributes in process `syz.0.824'. [ 182.316347][ T8946] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 182.354028][ T8948] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 182.466358][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.825'. [ 182.719003][ T8935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.745972][ T8935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.838204][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.826'. [ 183.139069][ T8935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.170329][ T8935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.235601][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 183.349885][ T8990] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 183.372367][ T8990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.830'. [ 183.500395][ T8997] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 183.523103][ T8935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.567008][ T8935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.632442][ T8997] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 184.005090][ T14] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.053521][ T14] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.157489][ T14] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.192317][ T14] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.304433][ T14] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.328942][ T14] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.544812][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.591811][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.578603][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.591308][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.718685][ T9037] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 185.827313][ T9060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.164265][ T9078] __nla_validate_parse: 1 callbacks suppressed [ 186.164286][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 186.599203][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.853'. [ 186.702867][ T9093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.756444][ T9096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.853'. [ 186.771092][ T9096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.853'. [ 186.772227][ T9089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.838580][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.856'. [ 186.843144][ T9100] : renamed from bond0 [ 186.848811][ T9103] nbd: must specify at least one socket [ 187.238483][ T9118] netlink: 256 bytes leftover after parsing attributes in process `syz.1.857'. [ 187.736782][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 187.763504][ T9132] netlink: 'syz.3.865': attribute type 83 has an invalid length. [ 188.009807][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.867'. [ 188.239727][ T9148] netlink: 'syz.1.869': attribute type 2 has an invalid length. [ 188.274718][ T9148] netlink: 156 bytes leftover after parsing attributes in process `syz.1.869'. [ 188.324567][ T9142] macvtap1: entered promiscuous mode [ 188.350968][ T9142] macvtap1: entered allmulticast mode [ 188.380491][ T9142] veth1_vlan: entered allmulticast mode [ 188.583742][ T29] audit: type=1804 audit(1783122642.416:9): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.872" name="/newroot/186/cgroup.controllers" dev="tmpfs" ino=966 res=1 errno=0 [ 188.674139][ T9161] netlink: zone id is out of range [ 188.705511][ T29] audit: type=1800 audit(1783122642.446:10): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.872" name="cgroup.controllers" dev="tmpfs" ino=966 res=0 errno=0 [ 188.730345][ T9156] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 188.761768][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 189.133533][ T9176] netlink: 'syz.1.878': attribute type 12 has an invalid length. [ 189.172660][ T9176] netlink: 'syz.1.878': attribute type 29 has an invalid length. [ 189.225445][ T9176] netlink: 'syz.1.878': attribute type 3 has an invalid length. [ 189.280116][ T9176] netlink: 'syz.1.878': attribute type 2 has an invalid length. [ 189.374090][ T9190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.461056][ T9190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.679519][ T7012] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 189.718712][ T7012] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 189.742151][ T9179] macvlan0: left promiscuous mode [ 189.838930][ T9179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.861571][ T9176] team0: Caught tx_queue_len zero misconfig [ 189.886708][ T9182] syzkaller1: entered promiscuous mode [ 189.900294][ T9182] syzkaller1: entered allmulticast mode [ 190.209885][ T6251] wlan0: Trigger new scan to find an IBSS to join [ 190.228656][ T9207] netlink: 'syz.0.886': attribute type 21 has an invalid length. [ 190.275276][ T6245] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 190.301503][ T6245] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 190.335923][ T9205] xt_TCPMSS: Only works on TCP SYN packets [ 190.861140][ T9221] bridge2: entered promiscuous mode [ 190.877786][ T9221] bridge2: entered allmulticast mode [ 191.017481][ T6251] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 191.077861][ T9234] netlink: 'syz.3.894': attribute type 3 has an invalid length. [ 191.104175][ T9234] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 191.131512][ T9227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.675579][ T9251] vlan0: left promiscuous mode [ 191.751166][ T9251] gtp0: left promiscuous mode [ 191.778145][ T9251] gtp0: left allmulticast mode [ 191.793587][ T9262] netlink: 'syz.1.902': attribute type 1 has an invalid length. [ 191.826096][ T9262] __nla_validate_parse: 12 callbacks suppressed [ 191.826114][ T9262] netlink: 11 bytes leftover after parsing attributes in process `syz.1.902'. [ 191.847377][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 191.890462][ T9251] vlan2: left allmulticast mode [ 191.923105][ T9251] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 191.973587][ T9251] xfrm1: left promiscuous mode [ 192.009996][ T9251] xfrm1: left allmulticast mode [ 192.075667][ T9251] bridge2: left promiscuous mode [ 192.108114][ T9251] bridge2: left allmulticast mode [ 192.327469][ T9285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.906'. [ 192.553077][ T9278] nbd2: detected capacity change from 0 to 63 [ 192.601475][ T5635] block nbd2: Receive control failed (result -32) [ 192.601634][ T5627] block nbd2: Receive control failed (result -32) [ 192.632281][ T1660] block nbd2: Dead connection, failed to find a fallback [ 192.643885][ T1660] block nbd2: shutting down sockets [ 192.652860][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.669830][ T1660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.689240][ T1660] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.699952][ T1660] Buffer I/O error on dev nbd2, logical block 1, async page read [ 192.711481][ T1660] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.722044][ T1660] Buffer I/O error on dev nbd2, logical block 2, async page read [ 192.731400][ T1660] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.741878][ T1660] Buffer I/O error on dev nbd2, logical block 3, async page read [ 192.751472][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.766500][ T1660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.776449][ T1660] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.787089][ T1660] Buffer I/O error on dev nbd2, logical block 1, async page read [ 192.796378][ T1660] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.806807][ T1660] Buffer I/O error on dev nbd2, logical block 2, async page read [ 192.816378][ T1660] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.827424][ T1660] Buffer I/O error on dev nbd2, logical block 3, async page read [ 192.836714][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.847253][ T1660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 192.857292][ T1660] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.870150][ T1660] Buffer I/O error on dev nbd2, logical block 1, async page read [ 192.888670][ T5642] ldm_validate_partition_table(): Disk read failed. [ 192.900636][ T5642] Dev nbd2: unable to read RDB block 0 [ 192.923427][ T5642] nbd2: unable to read partition table [ 192.955480][ T5642] ldm_validate_partition_table(): Disk read failed. [ 192.971175][ T5642] Dev nbd2: unable to read RDB block 0 [ 192.987887][ T5642] nbd2: unable to read partition table [ 193.028535][ T9300] netlink: 766 bytes leftover after parsing attributes in process `syz.4.911'. [ 193.095390][ T9299] syzkaller0: entered promiscuous mode [ 193.131651][ T9299] syzkaller0: entered allmulticast mode [ 193.292349][ T9309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.915'. [ 193.549122][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 193.603066][ T9315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.834411][ T9320] vlan3: entered promiscuous mode [ 193.857442][ T9320] bridge0: entered promiscuous mode [ 193.959551][ T9337] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 194.036014][ T9339] netlink: 72 bytes leftover after parsing attributes in process `syz.3.925'. [ 194.049828][ T9337] netlink: 240 bytes leftover after parsing attributes in process `syz.2.923'. [ 194.095068][ T9337] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 194.243140][ T9345] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 194.251929][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'. [ 194.300787][ T9339] hsr_slave_1 (unregistering): left promiscuous mode [ 194.450738][ T9354] netlink: 88 bytes leftover after parsing attributes in process `syz.1.927'. [ 194.617611][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.624060][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.173988][ T6247] wlan0: Trigger new scan to find an IBSS to join [ 196.105497][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.123007][ T9397] xt_hl: Unknown TTL match mode: 255 [ 198.136423][ T9398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.940'. [ 198.546663][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 198.639030][ T9413] FAULT_INJECTION: forcing a failure. [ 198.639030][ T9413] name failslab, interval 1, probability 0, space 0, times 1 [ 198.678724][ T9413] CPU: 1 UID: 0 PID: 9413 Comm: syz.1.949 Not tainted syzkaller #0 PREEMPT(full) [ 198.678754][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.678765][ T9413] Call Trace: [ 198.678772][ T9413] [ 198.678780][ T9413] dump_stack_lvl+0xe8/0x150 [ 198.678815][ T9413] should_fail_ex+0x40c/0x560 [ 198.678843][ T9413] should_failslab+0xa8/0x100 [ 198.678878][ T9413] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 198.678902][ T9413] ? skb_clone+0x212/0x3a0 [ 198.678930][ T9413] ? skb_clone+0x212/0x3a0 [ 198.678964][ T9413] skb_clone+0x212/0x3a0 [ 198.678997][ T9413] __netlink_deliver_tap+0x413/0x860 [ 198.679040][ T9413] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.679070][ T9413] netlink_deliver_tap+0x19c/0x1b0 [ 198.679099][ T9413] netlink_unicast+0x77f/0x940 [ 198.679138][ T9413] netlink_sendmsg+0x813/0xb40 [ 198.679178][ T9413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.679210][ T9413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 198.679236][ T9413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.679263][ T9413] sock_sendmsg_nosec+0x13a/0x180 [ 198.679289][ T9413] ____sys_sendmsg+0x54e/0x850 [ 198.679323][ T9413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.679361][ T9413] ? import_iovec+0x73/0xa0 [ 198.679392][ T9413] ___sys_sendmsg+0x2a5/0x360 [ 198.679418][ T9413] ? __lock_acquire+0x683/0x2cf0 [ 198.679447][ T9413] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.679513][ T9413] ? __fget_files+0x2a/0x420 [ 198.679537][ T9413] ? __fget_files+0x3a2/0x420 [ 198.679572][ T9413] __x64_sys_sendmsg+0x1b1/0x290 [ 198.679602][ T9413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.679650][ T9413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.679672][ T9413] do_syscall_64+0x174/0x580 [ 198.679696][ T9413] ? trace_irq_disable+0x3b/0x140 [ 198.679729][ T9413] ? clear_bhb_loop+0x40/0x90 [ 198.679752][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.679771][ T9413] RIP: 0033:0x7f6c56d9de59 [ 198.679789][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.679805][ T9413] RSP: 002b:00007f6c54ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.679826][ T9413] RAX: ffffffffffffffda RBX: 00007f6c57025fa0 RCX: 00007f6c56d9de59 [ 198.679840][ T9413] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 198.679851][ T9413] RBP: 00007f6c54ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.679862][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.679872][ T9413] R13: 00007f6c57026038 R14: 00007f6c57025fa0 R15: 00007ffe1e4acf68 [ 198.679904][ T9413] [ 199.238744][ T9421] netlink: 112 bytes leftover after parsing attributes in process `syz.0.948'. [ 199.261874][ T9428] netlink: 'syz.1.953': attribute type 15 has an invalid length. [ 199.310432][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 199.382699][ T9428] netlink: 'syz.1.953': attribute type 15 has an invalid length. [ 199.418391][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 199.441025][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 199.464501][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 199.546689][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 199.571776][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 199.628038][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 199.675484][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 199.703857][ T9439] netlink: 'syz.0.955': attribute type 12 has an invalid length. [ 199.737676][ T9439] netlink: 'syz.0.955': attribute type 11 has an invalid length. [ 199.906501][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 199.918173][ T9452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.093130][ T9452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.282207][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 200.307758][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 200.898681][ T9485] x_tables: duplicate underflow at hook 4 [ 202.152696][ T9530] wg2: Caught tx_queue_len zero misconfig [ 202.173125][ T9528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.405173][ T9538] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 202.445637][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.481534][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.716455][ T9548] x_tables: duplicate underflow at hook 2 [ 202.867880][ T9554] xt_ipcomp: unknown flags 1D [ 203.071855][ T9548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.205884][ T9567] ipvlan1: entered promiscuous mode [ 203.224391][ T9567] ipvlan1: entered allmulticast mode [ 203.237305][ T9567] veth0_vlan: entered allmulticast mode [ 203.298941][ T9571] gtp0: entered promiscuous mode [ 203.324721][ T9571] gtp0: entered allmulticast mode [ 203.529289][ T9578] __nla_validate_parse: 9 callbacks suppressed [ 203.529310][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 203.656608][ T3379] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 203.676508][ T3379] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 203.709391][ T3379] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 203.758001][ T3379] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 203.781696][ T9587] netlink: 'syz.3.998': attribute type 8 has an invalid length. [ 203.927254][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 204.143998][ T9594] x_tables: duplicate underflow at hook 1 [ 204.849158][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 207.558024][ T4992] udevd[4992]: worker [5649] /devices/virtual/block/nbd0 is taking a long time [ 256.048932][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.055308][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.890275][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'. [ 262.899951][ T9609] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1006'. [ 262.950148][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 263.210546][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 263.885723][ T9626] vlan4: entered allmulticast mode [ 263.900634][ T9626] bridge2: entered allmulticast mode [ 263.957688][ T9627] bridge2: port 1(erspan0) entered blocking state [ 264.014759][ T9627] bridge2: port 1(erspan0) entered disabled state [ 264.056086][ T9627] erspan0: entered allmulticast mode [ 264.095012][ T9627] erspan0: entered promiscuous mode [ 264.125877][ T9627] bridge2: port 1(erspan0) entered blocking state [ 264.133745][ T9627] bridge2: port 1(erspan0) entered forwarding state [ 264.271753][ T9629] IPv6: sit1: Disabled Multicast RS [ 264.657698][ T9663] netlink: 'syz.3.1014': attribute type 10 has an invalid length. [ 264.740947][ T9663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.774029][ T9663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.820316][ T9668] SET target dimension over the limit! [ 265.071762][ T9676] syzkaller0: entered promiscuous mode [ 265.079459][ T9676] syzkaller0: entered allmulticast mode [ 265.209718][ T9681] vcan0: tx address claim with dest, not broadcast [ 265.221663][ T9681] x_tables: duplicate entry at hook 3 [ 265.329868][ T9688] netlink: 'syz.2.1023': attribute type 1 has an invalid length. [ 265.340088][ T9688] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1023'. [ 265.343183][ T9689] netlink: 'syz.2.1023': attribute type 1 has an invalid length. [ 265.359141][ T9689] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1023'. [ 265.389763][ T9689] netlink: 'syz.2.1023': attribute type 21 has an invalid length. [ 265.425851][ T9689] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1023'. [ 265.761480][ T9698] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 265.920319][ T9709] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 265.954091][ T9711] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1030'. [ 265.971604][ T9698] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 266.146090][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 266.199080][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1033'. [ 266.356570][ T9709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.454974][ T9713] vlan4: entered promiscuous mode [ 266.463616][ T9713] bond2: entered promiscuous mode [ 266.472019][ T9713] vlan4: entered allmulticast mode [ 266.486983][ T9713] bond2: entered allmulticast mode [ 266.689249][ T9717] bond2: (slave bridge3): making interface the new active one [ 266.734440][ T9717] bridge3: entered promiscuous mode [ 266.755306][ T9717] bridge3: entered allmulticast mode [ 266.792528][ T9717] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 266.917883][ T7012] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 266.945131][ T9731] bridge_slave_0: left allmulticast mode [ 266.973488][ T9731] bridge_slave_0: left promiscuous mode [ 266.998013][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.035898][ T9731] bridge_slave_1: left allmulticast mode [ 267.059208][ T9731] bridge_slave_1: left promiscuous mode [ 267.069266][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.207522][ T7035] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 267.250150][ T9731] bond0: (slave bond_slave_0): Releasing backup interface [ 267.292243][ T9731] bond_slave_0: left allmulticast mode [ 267.349268][ T9731] team0: Port device team_slave_0 removed [ 267.369164][ T9731] team0: Port device team_slave_1 removed [ 267.394896][ T9731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.410687][ T9731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.433381][ T9731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.446288][ T9731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.471247][ T9731] bond3: (slave veth7): Releasing active interface [ 267.479078][ T9731] bond3: (slave veth7): the permanent HWaddr of slave - be:a4:1f:41:f4:2c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 267.505614][ T9731] batadv1: entered promiscuous mode [ 267.519725][ T9731] bond3: (slave batadv1): Releasing active interface [ 267.526542][ T9731] batadv1: left promiscuous mode [ 267.534525][ T9731] bond3: (slave veth9): making interface the new active one [ 267.550966][ T9731] bond3: (slave veth9): Releasing active interface [ 267.704488][ T6251] bond0: (slave bond_slave_0): interface is now down [ 267.735373][ T6251] bond0: (slave bond_slave_1): interface is now down [ 267.850866][ T9774] netlink: 'syz.3.1042': attribute type 13 has an invalid length. [ 267.950120][ T9737] syzkaller0: entered promiscuous mode [ 267.957508][ T9737] syzkaller0: entered allmulticast mode [ 270.297882][ T61] bond0: (slave bond_slave_0): interface is now down [ 270.320365][ T61] bond0: (slave bond_slave_1): interface is now down [ 271.430514][ T9808] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 271.476486][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'. [ 271.511813][ T9810] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1052'. [ 271.752744][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 271.802636][ T9824] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1057'. [ 271.851531][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 272.141589][ T9833] syzkaller0: entered promiscuous mode [ 272.166780][ T9833] syzkaller0: entered allmulticast mode [ 272.216898][ T9838] netlink: 'syz.0.1060': attribute type 4 has an invalid length. [ 272.236038][ T9833] netlink: 'syz.0.1060': attribute type 4 has an invalid length. [ 272.851794][ T14] bond0: (slave bond_slave_0): interface is now down [ 272.872088][ T14] bond0: (slave bond_slave_1): interface is now down [ 273.323112][ T9870] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1071'. [ 273.432020][ T9875] syzkaller0: entered promiscuous mode [ 273.457318][ T9875] syzkaller0: entered allmulticast mode [ 273.546133][ T9884] tap0: tun_chr_ioctl cmd 2148553947 [ 273.798885][ T9894] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1077'. [ 273.842743][ T9894] netlink: 'syz.2.1077': attribute type 4 has an invalid length. [ 273.968933][ T9898] netlink: 'syz.0.1079': attribute type 23 has an invalid length. [ 274.204675][ T9909] netlink: 'syz.3.1081': attribute type 2 has an invalid length. [ 274.255293][ T9907] bond0: option miimon: invalid value (18446744071829782528) [ 274.304290][ T9907] bond0: option miimon: allowed values 0 - 2147483647 [ 274.433150][ T9915] geneve2: entered promiscuous mode [ 274.440741][ T9915] geneve2: entered allmulticast mode [ 274.538743][ T9917] bridge2: port 1(erspan0) entered disabled state [ 274.643056][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.655937][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.704400][ T9921] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 274.731915][ T9921] xt_hashlimit: size too large, truncated to 1048576 [ 274.898694][ T9917] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 274.940107][ T3379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 274.950945][ T3379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 275.008802][ T3379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 275.049529][ T3379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 275.243700][ T9935] ipvlan3: entered allmulticast mode [ 275.264747][ T9935] batadv_slave_1: entered allmulticast mode [ 275.296136][ T9935] batman_adv: batadv0: Adding interface: ipvlan3 [ 275.322506][ T9935] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.405928][ T9935] batman_adv: batadv0: Interface activated: ipvlan3 [ 275.424136][ T3379] bond0: (slave bond_slave_0): interface is now down [ 275.443060][ T3379] bond0: (slave bond_slave_1): interface is now down [ 275.532124][ T9945] xt_hashlimit: size too large, truncated to 1048576 [ 275.686098][ T9949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'. [ 275.792763][ T9953] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1092'. [ 276.355213][ T9971] netlink: 'syz.3.1100': attribute type 1 has an invalid length. [ 276.389402][ T9974] FAULT_INJECTION: forcing a failure. [ 276.389402][ T9974] name failslab, interval 1, probability 0, space 0, times 0 [ 276.441571][ T9974] CPU: 1 UID: 0 PID: 9974 Comm: syz.4.1098 Not tainted syzkaller #0 PREEMPT(full) [ 276.441598][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.441610][ T9974] Call Trace: [ 276.441618][ T9974] [ 276.441627][ T9974] dump_stack_lvl+0xe8/0x150 [ 276.441662][ T9974] should_fail_ex+0x40c/0x560 [ 276.441691][ T9974] should_failslab+0xa8/0x100 [ 276.441719][ T9974] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 276.441743][ T9974] ? alloc_empty_file+0x5b/0x1d0 [ 276.441766][ T9974] ? alloc_empty_file+0x5b/0x1d0 [ 276.441796][ T9974] alloc_empty_file+0x5b/0x1d0 [ 276.441821][ T9974] alloc_file_pseudo+0x115/0x1e0 [ 276.441849][ T9974] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 276.441885][ T9974] anon_inode_getfile+0xc5/0x1a0 [ 276.441910][ T9974] bpf_link_prime+0xfc/0x220 [ 276.441934][ T9974] bpf_nf_link_attach+0x518/0x870 [ 276.441969][ T9974] ? __pfx_bpf_nf_link_attach+0x10/0x10 [ 276.441997][ T9974] ? __fget_files+0x3a2/0x420 [ 276.442021][ T9974] ? __fget_files+0x2a/0x420 [ 276.442049][ T9974] ? bpf_prog_attach_check_attach_type+0x1ad/0x540 [ 276.442081][ T9974] link_create+0x397/0x850 [ 276.442112][ T9974] __sys_bpf+0x760/0xd90 [ 276.442149][ T9974] ? __pfx___sys_bpf+0x10/0x10 [ 276.442186][ T9974] ? __fget_files+0x2a/0x420 [ 276.442228][ T9974] ? ksys_write+0x242/0x270 [ 276.442259][ T9974] ? __pfx_ksys_write+0x10/0x10 [ 276.442293][ T9974] __x64_sys_bpf+0xba/0xd0 [ 276.442315][ T9974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.442336][ T9974] do_syscall_64+0x174/0x580 [ 276.442360][ T9974] ? trace_irq_disable+0x3b/0x140 [ 276.442382][ T9974] ? clear_bhb_loop+0x40/0x90 [ 276.442405][ T9974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.442424][ T9974] RIP: 0033:0x7fdab519de59 [ 276.442442][ T9974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.442457][ T9974] RSP: 002b:00007fdab6089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.442479][ T9974] RAX: ffffffffffffffda RBX: 00007fdab5425fa0 RCX: 00007fdab519de59 [ 276.442493][ T9974] RDX: 0000000000000020 RSI: 0000200000002380 RDI: 000000000000001c [ 276.442505][ T9974] RBP: 00007fdab6089090 R08: 0000000000000000 R09: 0000000000000000 [ 276.442516][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.442527][ T9974] R13: 00007fdab5426038 R14: 00007fdab5425fa0 R15: 00007ffd9baa1048 [ 276.442566][ T9974] [ 276.919235][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1105'. [ 277.566218][T10012] gretap0: entered promiscuous mode [ 277.612678][T10012] vlan3: entered promiscuous mode [ 277.748749][T10031] FAULT_INJECTION: forcing a failure. [ 277.748749][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 277.776373][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.4.1112 Not tainted syzkaller #0 PREEMPT(full) [ 277.776400][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 277.776411][T10031] Call Trace: [ 277.776418][T10031] [ 277.776426][T10031] dump_stack_lvl+0xe8/0x150 [ 277.776460][T10031] should_fail_ex+0x40c/0x560 [ 277.776487][T10031] should_failslab+0xa8/0x100 [ 277.776516][T10031] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 277.776537][T10031] ? security_file_alloc+0x34/0x310 [ 277.776560][T10031] ? security_file_alloc+0x34/0x310 [ 277.776590][T10031] security_file_alloc+0x34/0x310 [ 277.776616][T10031] init_file+0x90/0x2b0 [ 277.776640][T10031] alloc_empty_file+0x74/0x1d0 [ 277.776664][T10031] alloc_file_pseudo+0x115/0x1e0 [ 277.776691][T10031] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 277.776726][T10031] anon_inode_getfile+0xc5/0x1a0 [ 277.776752][T10031] bpf_link_prime+0xfc/0x220 [ 277.776777][T10031] bpf_nf_link_attach+0x518/0x870 [ 277.776813][T10031] ? __pfx_bpf_nf_link_attach+0x10/0x10 [ 277.776849][T10031] ? bpf_prog_attach_check_attach_type+0x1ad/0x540 [ 277.776882][T10031] link_create+0x397/0x850 [ 277.776914][T10031] __sys_bpf+0x760/0xd90 [ 277.776952][T10031] ? __pfx___sys_bpf+0x10/0x10 [ 277.776987][T10031] ? __fget_files+0x2a/0x420 [ 277.777029][T10031] ? ksys_write+0x242/0x270 [ 277.777060][T10031] ? __pfx_ksys_write+0x10/0x10 [ 277.777094][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.777121][T10031] __x64_sys_bpf+0xba/0xd0 [ 277.777143][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.777164][T10031] do_syscall_64+0x174/0x580 [ 277.777189][T10031] ? trace_irq_disable+0x3b/0x140 [ 277.777213][T10031] ? clear_bhb_loop+0x40/0x90 [ 277.777237][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.777257][T10031] RIP: 0033:0x7fdab519de59 [ 277.777276][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.777292][T10031] RSP: 002b:00007fdab6089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.777313][T10031] RAX: ffffffffffffffda RBX: 00007fdab5425fa0 RCX: 00007fdab519de59 [ 277.777326][T10031] RDX: 0000000000000020 RSI: 0000200000002380 RDI: 000000000000001c [ 277.777338][T10031] RBP: 00007fdab6089090 R08: 0000000000000000 R09: 0000000000000000 [ 277.777351][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.777361][T10031] R13: 00007fdab5426038 R14: 00007fdab5425fa0 R15: 00007ffd9baa1048 [ 277.777395][T10031] [ 278.051016][ T6251] bond0: (slave bond_slave_0): interface is now down [ 278.058178][ T6251] bond0: (slave bond_slave_1): interface is now down [ 278.071074][ T6251] bond0: now running without any active interface! [ 278.224933][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'. [ 278.234569][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'. [ 278.243795][T10040] netlink: 'syz.2.1115': attribute type 5 has an invalid length. [ 278.260181][T10040] veth0: entered promiscuous mode [ 278.266390][T10038] veth0: left promiscuous mode [ 278.345362][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 278.356841][T10045] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1117'. [ 278.366206][T10045] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1117'. [ 278.663118][T10050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1116'. [ 278.741407][T10054] veth7: entered promiscuous mode [ 278.764072][T10054] veth7: entered allmulticast mode [ 278.776628][T10055] veth0: entered promiscuous mode [ 278.831583][T10052] veth0: left promiscuous mode [ 279.243110][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 279.303306][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1127'. [ 279.787985][T10103] netlink: 'syz.1.1131': attribute type 3 has an invalid length. [ 279.810438][T10103] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 279.854438][T10103] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1131'. [ 280.598561][ T7019] IPVS: starting estimator thread 0... [ 280.729335][T10136] IPVS: using max 32 ests per chain, 76800 per kthread [ 280.742307][T10138] team0: Device ipvlan4 failed to register rx_handler [ 280.784178][T10140] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 280.912047][T10143] xt_time: unknown flags 0xf4 [ 281.023986][T10140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.155544][T10144] bond3: (slave geneve3): making interface the new active one [ 281.182790][T10144] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 281.327526][ T3379] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.348866][ T3379] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.381687][ T3379] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.425681][ T3379] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.527756][T10170] lo: Caught tx_queue_len zero misconfig [ 281.931893][T10187] __nla_validate_parse: 5 callbacks suppressed [ 281.931914][T10187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1152'. [ 282.089814][T10183] syzkaller0: entered promiscuous mode [ 282.102953][T10183] syzkaller0: entered allmulticast mode [ 282.170063][T10191] 8021q: VLANs not supported on lo [ 282.236753][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 282.371895][T10203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1156'. [ 282.506988][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 282.601234][T10212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1158'. [ 282.625001][T10212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1158'. [ 285.679171][T10236] xt_socket: unknown flags 0x8 [ 285.826523][T10239] netlink: 'syz.4.1163': attribute type 2 has an invalid length. [ 285.853200][T10237] tipc: Started in network mode [ 285.872432][T10237] tipc: Node identity 4e057f7b395a, cluster identity 4711 [ 285.895570][T10237] tipc: Enabled bearer , priority 0 [ 285.916080][T10237] syzkaller0: entered promiscuous mode [ 285.924635][T10237] syzkaller0: entered allmulticast mode [ 285.936798][T10247] ip6t_rpfilter: unknown options [ 285.944955][T10237] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 286.136464][T10237] tipc: Resetting bearer [ 286.172753][T10234] tipc: Resetting bearer [ 286.289054][T10234] tipc: Disabling bearer [ 286.460980][T10268] syzkaller0: entered promiscuous mode [ 286.473008][T10268] syzkaller0: entered allmulticast mode [ 286.831616][T10281] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1173'. [ 286.915974][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'. [ 287.185759][T10293] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 287.249833][T10293] syzkaller0: entered promiscuous mode [ 287.278877][T10293] syzkaller0: entered allmulticast mode [ 287.316587][T10297] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1181'. [ 287.912465][T10319] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 288.339944][T10333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1193'. [ 288.520004][T10337] IPVS: Unknown mcast interface: vcan0 [ 288.648345][T10340] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 288.795917][T10352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1199'. [ 289.068362][T10359] netlink: 'syz.2.1200': attribute type 22 has an invalid length. [ 289.106873][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 289.191051][T10359] netlink: 'syz.2.1200': attribute type 22 has an invalid length. [ 289.221904][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 289.420897][T10367] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.473642][T10373] netlink: 'syz.1.1205': attribute type 5 has an invalid length. [ 289.491425][T10373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.498816][T10373] IPv6: NLM_F_CREATE should be set when creating new route [ 289.506072][T10373] IPv6: NLM_F_CREATE should be set when creating new route [ 290.914713][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'. [ 291.343091][T10434] ip6tnl0: Caught tx_queue_len zero misconfig [ 291.351579][T10434] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1222'. [ 291.490322][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 291.910101][T10455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.299421][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1235'. [ 292.416393][T10472] x_tables: duplicate underflow at hook 1 [ 292.533611][T10476] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1236'. [ 292.698107][T10475] syzkaller1: entered promiscuous mode [ 292.742639][T10475] syzkaller1: entered allmulticast mode [ 293.214793][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 293.669430][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 295.979709][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 296.072342][T10509] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 296.531318][T10528] netlink: 'syz.2.1251': attribute type 10 has an invalid length. [ 296.665356][T10528] team0: Port device dummy0 added [ 296.672433][T10526] netlink: 'syz.4.1252': attribute type 22 has an invalid length. [ 296.680957][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 296.723602][T10526] netlink: 'syz.4.1252': attribute type 22 has an invalid length. [ 296.741377][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 297.172331][T10555] netlink: 'syz.0.1259': attribute type 21 has an invalid length. [ 297.217317][T10555] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 297.381117][T10559] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 297.521018][T10564] netlink: zone id is out of range [ 297.543694][T10564] netlink: zone id is out of range [ 297.558276][T10564] netlink: zone id is out of range [ 297.586658][T10564] netlink: zone id is out of range [ 297.637106][T10564] netlink: zone id is out of range [ 297.667885][T10564] netlink: zone id is out of range [ 297.710481][T10564] netlink: zone id is out of range [ 297.742745][T10564] netlink: zone id is out of range [ 297.775910][T10564] netlink: zone id is out of range [ 298.256126][T10582] set match dimension is over the limit! [ 298.302384][T10582] netlink: 'syz.2.1267': attribute type 63 has an invalid length. [ 299.069100][T10615] sctp: [Deprecated]: syz.2.1278 (pid 10615) Use of int in maxseg socket option. [ 299.069100][T10615] Use struct sctp_assoc_value instead [ 299.136605][T10623] sctp: [Deprecated]: syz.2.1278 (pid 10623) Use of int in maxseg socket option. [ 299.136605][T10623] Use struct sctp_assoc_value instead [ 299.611811][T10639] netlink: 'syz.1.1285': attribute type 23 has an invalid length. [ 300.142002][T10667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1292'. [ 300.240489][T10669] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1290'. [ 300.273583][T10669] nbd: illegal input index 65508 [ 300.695538][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 300.726861][T10681] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 300.763674][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 302.974206][T10745] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 303.000112][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 303.092402][T10759] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 303.194827][T10759] bond5: entered promiscuous mode [ 303.201537][T10759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.320071][T10765] gtp1: entered allmulticast mode [ 303.343387][T10765] team0: Device gtp1 is of different type [ 303.435739][T10752] bond5: (slave bridge4): making interface the new active one [ 303.445905][T10752] bridge4: entered promiscuous mode [ 303.456379][T10752] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 303.683668][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1324'. [ 303.801608][T10780] netlink: 'syz.0.1326': attribute type 8 has an invalid length. [ 304.347786][T10788] netlink: 'syz.2.1328': attribute type 9 has an invalid length. [ 304.403622][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 304.971769][T10818] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 305.179285][T10822] netlink: 'syz.2.1333': attribute type 10 has an invalid length. [ 305.230215][T10822] netlink: 'syz.2.1333': attribute type 12 has an invalid length. [ 305.590086][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1336'. [ 305.737504][T10839] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1338'. [ 305.742656][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 305.886405][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 305.967437][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 306.131216][T10857] netlink: 'syz.1.1337': attribute type 10 has an invalid length. [ 306.176729][T10857] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.198855][T10857] bond0: (slave team0): Enslaving as an active interface with an up link [ 306.234753][T10860] netlink: 'syz.0.1341': attribute type 83 has an invalid length. [ 306.302573][T10859] netlink: 'syz.0.1341': attribute type 29 has an invalid length. [ 306.339388][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 306.443697][T10859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'. [ 306.666568][T10869] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1342'. [ 306.731929][T10871] syzkaller0: entered promiscuous mode [ 306.760495][T10871] syzkaller0: entered allmulticast mode [ 307.657428][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 307.720229][T10909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'. [ 308.442466][ T6251] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xff [ 308.805693][T10933] vlan5: entered allmulticast mode [ 309.650205][T10957] netlink: 'syz.1.1362': attribute type 5 has an invalid length. [ 311.203345][T10936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.385175][T10993] __nla_validate_parse: 6 callbacks suppressed [ 311.385195][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 311.449490][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 311.471240][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 311.515892][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 311.583460][T10999] net_ratelimit: 72 callbacks suppressed [ 311.583481][T10999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.614565][T11000] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1373'. [ 311.638181][T10993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1371'. [ 311.665778][T10996] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1372'. [ 311.716320][T11004] x_tables: duplicate entry at hook 1 [ 311.735584][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1375'. [ 311.904500][T11007] block nbd0: Unsupported socket: should be TCP or UNIX. [ 312.179489][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1377'. [ 312.259964][T11014] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 312.650531][T11028] netlink: 'syz.1.1381': attribute type 2 has an invalid length. [ 313.072101][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1385'. [ 313.133728][T11042] x_tables: ip_tables: CT target: only valid in raw table, not veth0_to_team [ 313.194657][ T7012] IPVS: starting estimator thread 0... [ 313.202837][T11047] IPVS: ip_vs_add_dest(): server weight less than zero [ 313.297515][T11051] IPVS: using max 25 ests per chain, 60000 per kthread [ 314.395110][T11087] xt_hashlimit: size too large, truncated to 1048576 [ 315.309063][T11116] can: request_module (can-proto-0) failed. [ 315.802087][T11125] netlink: 'syz.2.1407': attribute type 24 has an invalid length. [ 315.971637][T11124] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 316.012532][T11124] bond7 (unregistering): Released all slaves [ 316.574528][T11164] __nla_validate_parse: 2 callbacks suppressed [ 316.574574][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'. [ 316.599982][T11164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1417'. [ 316.615446][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 317.173041][T11182] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 317.356371][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'. [ 317.494081][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.501615][ T1307] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 318.464946][T11169] geneve3: entered promiscuous mode [ 318.471446][T11169] geneve3: entered allmulticast mode [ 318.541311][ T6247] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.591138][ T6247] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 318.614859][ T6247] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.645306][ T6247] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 318.695739][ T6247] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.723687][ T6247] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 318.754804][ T6247] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.782066][ T6247] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 318.878594][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 318.926945][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'. [ 319.123111][T11238] syzkaller0: entered promiscuous mode [ 319.142252][T11238] syzkaller0: entered allmulticast mode [ 319.272477][T11240] netlink: 'syz.2.1435': attribute type 5 has an invalid length. [ 319.294503][T11240] netlink: 'syz.2.1435': attribute type 5 has an invalid length. [ 319.355915][T11245] xt_CT: No such helper "snmp" [ 319.523359][T11257] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1440'. [ 319.590118][T11261] IPVS: set_ctl: invalid protocol: 103 100.1.1.1:20001 [ 319.597709][T11253] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 319.626456][T11253] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1438'. [ 319.856531][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 320.052778][ T30] INFO: task kworker/1:1H:1614 blocked for more than 143 seconds. [ 320.096356][ T30] Not tainted syzkaller #0 [ 320.108694][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.118025][ T30] task:kworker/1:1H state:D stack:26360 pid:1614 tgid:1614 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 320.164809][ T30] Workqueue: kblockd blk_mq_requeue_work [ 320.173731][ T30] Call Trace: [ 320.179852][T11281] ipvlan1: left promiscuous mode [ 320.184184][ T30] [ 320.195996][ T30] __schedule+0x17d9/0x56c0 [ 320.198824][T11281] ipvlan1: left allmulticast mode [ 320.210449][ T30] ? __pfx___schedule+0x10/0x10 [ 320.210475][T11281] veth0_vlan: left allmulticast mode [ 320.230859][ T30] ? __pfx___schedule+0x10/0x10 [ 320.243271][ T30] ? schedule+0x90/0x2b0 [ 320.248077][ T30] schedule+0x164/0x2b0 [ 320.254060][ T30] schedule_timeout+0x152/0x2c0 [ 320.261100][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 320.274912][ T30] ? __pfx_process_timeout+0x10/0x10 [ 320.280839][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 320.286832][ T30] ? prepare_to_wait_event+0x436/0x480 [ 320.298400][ T30] nbd_queue_rq+0x889/0x1150 [ 320.303236][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 320.309252][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 320.315865][ T30] blk_mq_dispatch_rq_list+0x499/0x1990 [ 320.322776][ T30] ? sbitmap_get+0x229/0x390 [ 320.327872][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 320.334055][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 320.340808][ T30] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 320.347739][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 320.354736][ T30] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 320.361247][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 320.366735][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 320.373251][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 320.379862][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 320.385342][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 320.391092][ T30] blk_mq_run_hw_queues+0x268/0x3f0 [ 320.396579][ T30] blk_mq_requeue_work+0x703/0x760 [ 320.402535][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 320.408802][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.413743][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 320.422870][ T30] process_scheduled_works+0xa8e/0x14e0 [ 320.428687][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.434917][ T30] ? assign_work+0x3cf/0x5d0 [ 320.440146][ T30] worker_thread+0xa47/0xfb0 [ 320.444926][ T30] kthread+0x388/0x470 [ 320.449565][ T30] ? __pfx_worker_thread+0x10/0x10 [ 320.454845][ T30] ? __pfx_kthread+0x10/0x10 [ 320.460656][ T30] ret_from_fork+0x514/0xb70 [ 320.465507][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 320.470987][ T30] ? __switch_to+0xc89/0x1420 [ 320.476053][ T30] ? __pfx_kthread+0x10/0x10 [ 320.481051][ T30] ret_from_fork_asm+0x1a/0x30 [ 320.486187][ T30] [ 320.489894][ T30] [ 320.489894][ T30] Showing all locks held in the system: [ 320.501157][ T30] 1 lock held by khungtaskd/30: [ 320.506518][ T30] #0: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 320.519034][ T30] 3 locks held by kworker/u8:2/35: [ 320.524535][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 320.570550][ T30] #1: ffffc90000ab7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 320.581806][ T30] #2: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 320.591326][ T30] 4 locks held by kworker/1:1H/1614: [ 320.596741][ T30] #0: ffff88801e6d2940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 320.608618][ T30] #1: ffffc900061d7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 320.622439][ T30] #2: ffff8880264c1918 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 320.632517][ T30] #3: ffff888053a27178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 320.642306][ T30] 1 lock held by klogd/4981: [ 320.647719][ T30] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 320.658232][ T30] 2 locks held by getty/5383: [ 320.663054][ T30] #0: ffff888035fa90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 320.673116][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 320.687205][ T30] 1 lock held by udevd/5649: [ 320.692212][ T30] #0: ffff888026df6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 320.702915][ T30] 3 locks held by kworker/u8:11/6247: [ 320.708487][ T30] #0: ffff888032584140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 320.720533][ T30] #1: ffffc90004f9fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 320.733919][ T30] #2: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 320.743678][ T30] 2 locks held by syz.2.1445/11275: [ 320.749049][ T30] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 320.758773][ T30] #1: ffffffff8eb5ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 320.771155][ T30] 2 locks held by syz.1.1447/11281: [ 320.776586][ T30] #0: ffffffff9002f440 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 320.789868][ T30] #1: ffffffff8eb5ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 320.801674][ T30] [ 320.804290][ T30] ============================================= [ 320.804290][ T30] [ 320.819227][ T30] NMI backtrace for cpu 0 [ 320.819246][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 320.819267][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.819277][ T30] Call Trace: [ 320.819285][ T30] [ 320.819294][ T30] dump_stack_lvl+0xe8/0x150 [ 320.819330][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 320.819353][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 320.819385][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 320.819410][ T30] sys_info+0x135/0x170 [ 320.819429][ T30] watchdog+0xfd7/0x1030 [ 320.819463][ T30] ? watchdog+0x1c7/0x1030 [ 320.819493][ T30] kthread+0x388/0x470 [ 320.819520][ T30] ? __pfx_watchdog+0x10/0x10 [ 320.819541][ T30] ? __pfx_kthread+0x10/0x10 [ 320.819582][ T30] ret_from_fork+0x514/0xb70 [ 320.819614][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 320.819642][ T30] ? __switch_to+0xc89/0x1420 [ 320.819670][ T30] ? __pfx_kthread+0x10/0x10 [ 320.819699][ T30] ret_from_fork_asm+0x1a/0x30 [ 320.819736][ T30] [ 320.819756][ T30] Sending NMI from CPU 0 to CPUs 1: [ 320.934342][ C1] NMI backtrace for cpu 1 [ 320.934363][ C1] CPU: 1 UID: 0 PID: 5638 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 320.934381][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.934391][ C1] RIP: 0010:__lock_acquire+0xac4/0x2cf0 [ 320.934419][ C1] Code: 90 48 bb eb 83 b5 80 46 86 c8 61 48 0f af dd 48 c1 eb 2d 48 8b 04 dd 40 25 30 94 48 85 c0 74 1c 48 83 c0 f8 74 16 48 8b 48 18 <48> 39 e9 0f 84 bb 01 00 00 48 8b 40 08 48 85 c0 75 e4 e8 25 d5 ff [ 320.934434][ C1] RSP: 0018:ffffc90003cbf740 EFLAGS: 00000097 [ 320.934457][ C1] RAX: ffffffff94746830 RBX: 0000000000023c22 RCX: 53ebb2a25ce06a8c [ 320.934469][ C1] RDX: 00000000155db6f6 RSI: 0000000023f5aebf RDI: ffff88807efa8000 [ 320.934481][ C1] RBP: 53ebb2a25ce06a8c R08: ffffffff81b367f5 R09: 0000000000080000 [ 320.934492][ C1] R10: 0000000000000000 R11: ffffffff9a7bf748 R12: ffff88807efa8bc8 [ 320.934503][ C1] R13: ffff88807efa8bc8 R14: ffff88807efa8000 R15: 0000000000000001 [ 320.934515][ C1] FS: 00005555745ff500(0000) GS:ffff88812505a000(0000) knlGS:0000000000000000 [ 320.934529][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.934540][ C1] CR2: 0000001b34614ff8 CR3: 000000006f6d6000 CR4: 00000000003526f0 [ 320.934556][ C1] Call Trace: [ 320.934564][ C1] [ 320.934575][ C1] ? __lock_acquire+0x683/0x2cf0 [ 320.934602][ C1] ? ktime_get+0x45/0x220 [ 320.934620][ C1] lock_acquire+0x106/0x350 [ 320.934640][ C1] ? ktime_get+0x45/0x220 [ 320.934658][ C1] ? finish_task_switch+0x15d/0xc60 [ 320.934675][ C1] ? lock_acquire+0x106/0x350 [ 320.934694][ C1] ? finish_task_switch+0x15d/0xc60 [ 320.934710][ C1] ? ktime_get+0x45/0x220 [ 320.934727][ C1] seqcount_lockdep_reader_access+0x55/0x100 [ 320.934747][ C1] ? ktime_get+0x45/0x220 [ 320.934765][ C1] ktime_get+0x45/0x220 [ 320.934784][ C1] finish_task_switch+0x307/0xc60 [ 320.934809][ C1] __schedule+0x17e1/0x56c0 [ 320.934830][ C1] ? __lock_acquire+0x683/0x2cf0 [ 320.934852][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 320.934874][ C1] ? __pfx___schedule+0x10/0x10 [ 320.934895][ C1] ? schedule+0x90/0x2b0 [ 320.934921][ C1] schedule+0x164/0x2b0 [ 320.934939][ C1] do_nanosleep+0x21e/0x6a0 [ 320.934955][ C1] ? do_nanosleep+0x7e/0x6a0 [ 320.934972][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 320.934987][ C1] ? __asan_memset+0x22/0x50 [ 320.935004][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 320.935019][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 320.935038][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 320.935062][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 320.935080][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 320.935102][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 320.935121][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 320.935141][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.935158][ C1] do_syscall_64+0x174/0x580 [ 320.935184][ C1] ? trace_irq_disable+0x3b/0x140 [ 320.935210][ C1] ? clear_bhb_loop+0x40/0x90 [ 320.935228][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.935243][ C1] RIP: 0033:0x7f5d5355e68e [ 320.935258][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 320.935271][ C1] RSP: 002b:00007fff0dc774f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 320.935288][ C1] RAX: ffffffffffffffda RBX: 00005555745ff500 RCX: 00007f5d5355e68e [ 320.935300][ C1] RDX: 00007fff0dc77550 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.935310][ C1] RBP: 00007fff0dc775bc R08: 0000000000000000 R09: 0000000000000000 [ 320.935320][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 320.935331][ C1] R13: 00000000000927c0 R14: 000000000004e2a4 R15: 00007fff0dc77610 [ 320.935349][ C1] [ 321.311371][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 321.318256][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 321.327605][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.337891][ T30] Call Trace: [ 321.341191][ T30] [ 321.344161][ T30] vpanic+0x56c/0xa60 [ 321.348345][ T30] ? __pfx___schedule+0x10/0x10 [ 321.353246][ T30] ? __pfx_vpanic+0x10/0x10 [ 321.357771][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 321.364209][ T30] panic+0xc5/0xd0 [ 321.367993][ T30] ? __pfx_panic+0x10/0x10 [ 321.372449][ T30] ? preempt_schedule_common+0x82/0xd0 [ 321.377942][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 321.383418][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 321.389783][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 321.396303][ T30] watchdog+0x1030/0x1030 [ 321.400673][ T30] ? watchdog+0x1c7/0x1030 [ 321.405112][ T30] kthread+0x388/0x470 [ 321.409289][ T30] ? __pfx_watchdog+0x10/0x10 [ 321.413976][ T30] ? __pfx_kthread+0x10/0x10 [ 321.418602][ T30] ret_from_fork+0x514/0xb70 [ 321.423215][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 321.428565][ T30] ? __switch_to+0xc89/0x1420 [ 321.433260][ T30] ? __pfx_kthread+0x10/0x10 [ 321.437901][ T30] ret_from_fork_asm+0x1a/0x30 [ 321.442691][ T30] [ 321.445866][ T30] Kernel Offset: disabled [ 321.450190][ T30] Rebooting in 86400 seconds..