last executing test programs: 1.699378652s ago: executing program 1 (id=5998): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@int=0xbfd3, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x1001) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x34d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa2e0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = accept4(r1, 0x0, &(0x7f0000000480), 0x0) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f00000004c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={@remote, @mcast1, @private0, 0x8, 0xfffd, 0xc, 0x100, 0x7fff, 0x4000000}) connect$inet6(r1, &(0x7f0000000580)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) r6 = gettid() ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000005c0)=r6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x29, 0xf, 0x0, 0x7, 0x7e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x7, 0x4, 0x8}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000740)={{0x0, 0x5, 0xcb, 0x5, 0x9, 0x5, 0x3, 0x6, 0x5, 0x3, 0x3, 0x8001, 0x8, 0x9, 0x4}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000800)={r8, 0xfffffffffffffffa}) sendmsg$nl_netfilter(r5, &(0x7f0000001d40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001840)={0x494, 0x5, 0x7, 0x300, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0x7}, [@typed={0x8, 0x36, 0x0, 0x0, @pid}, @typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="0dbe4f048a000f021d", @generic="55c9ae2909132fda0a90e92fb57258c5d13a3905dede3e2c346470ecd383db2ac28f46d63ba33e6088ad0637b048ceac5ca977ede622a0cc5f26b194efe3a1d0e59716f9f313893063efe35c3218dbabfdcff1424e10baf1cebc2db1dcdd2d9709adbf4a3934aaf5b8e6b553316aa7abc513aff2c6fea8592da29f14315db8591e2b772cfa4998e5163b880089b216129f", @generic="fa52a820fb5c7bea0cafd2191c482b69dd28c68691577bb8b5acd9b92f42e926307f023b7d23730edb2b6a10592f71ca904985e2ca779706033461139cdd3a2833bf069369b565cb9c6d39db8771d6bfb886368aa305e4244405fb20ea4062f76c70f730447c4eee2a6a5a555b0250cb47c7f8d0ffb96868749391c7add1fc", @typed={0xc, 0x134, 0x0, 0x0, @u64=0x2}, @nested={0x24d, 0x10c, 0x0, 0x1, [@generic="e5c3d92e84ebbab19b3ff603d2bf27f8aa673ee754e62a31478bbf3ebf6e3a6ec046647aa2ae7c63e16df90ef564f5d7df1d4fe4e0f49e4a36", @typed={0x8, 0xf7, 0x0, 0x0, @u32=0xfff}, @generic="0184b18a7dad013fa42944516c172465b99f9ff2cc79dbce6419221b44c0bcd16f23ca8d9d809c611152b56967656c960a6745bb20a81825a9265126dc9db589812b37bfcf783d1a9a25c4efd36ea990cd75f5e0dff430574784b310576c0287c00f27952c12a4c0b7751e764632f9e9fc70859d6d25d8d751d34e8b133319121e679fff1df4f8f1b5757cc5aa7313b4a8c571b2fa35b2d16c7fcb3d449ad584777b6be4a71971eb44f37b798c943b84b582d0b56347d7c49f9f1f", @typed={0x4, 0xcc}, @generic="5a75300669b6427154f62c4f52fc5093881d6478d3753f853398ab1853c5bfe02f9dfab6be5b7b1944648b1eb9936be3531888f1051ff83f1fa7e62ad50eef3764787197ad1e7a606555be33340de7", @generic="98930655a93ebe477655341f6bbaa06166199d58716b1e3f03914794fc7644cab17eefca9ed10b5f7a829084497a9d301dfebe78d16bbc3a39f64d8cc8c7bc45a1ef2978d94793d0843dc36d7fa1d07c8e21e8d533a01d32602a25194b163127d963c633ac692ecd8b0438ecec4854088ed07f202f7615288357f114846de31a9001fc80187c480385ce72a6ad7161b1a39fa3adaddaa1a9be17e7c570c3f68b41893b99d27aca84c36338f0763b0160525581390341ce1d6f830bd0c1df51ab4077cd6287422abc5ea1e3e4c3fd64", @nested={0x4, 0x10b}, @generic="9a16b5c2821cdf50c5dfa659531d81ad748dfe4bca34a4e3f9d1432521d8e0ae5e5d23d8d59472"]}, @generic="72cd55446b90def781f858bb2129e34f4315d0af784083688239660a6975bad16759cf27f92c9316a63d408086ecb9c56c3f4bfe4ebb9babbfb77695018ba60d72f281665c386e6905463d61b6ecc8fd803fefc59b092ca1843645f2d29cc78f91b0567d76e3f90cdf58559080f368a2ed766e748cc75e48bc3ac99bd91857c69aa551e2d9fa6ff62cd75f01fc14dc3a752d6d818947d0b1486e6450bf1f0549e0ae6c337c29aeae1370234d180fd696510294a2a1606f497a2ab8b64be319f61f856aa5c25d3bad7f33f3c1f6faa23cb8683b79d069e998193f468e8def190260b7afa96bcb180a59e17fefe4119bb0a3de", @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@broadcast}]}, 0x494}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bind$can_raw(r5, &(0x7f0000001d80), 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x28, r9, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x4}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x408c5) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001f40)) socketpair(0xf, 0x1, 0x7fff, &(0x7f0000001f80)={0xffffffffffffffff}) connect$tipc(r11, &(0x7f0000001fc0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x3}}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000002000)={0x0, 0xd}, &(0x7f0000002040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000002080)={r12, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x7, 0x40, 0x100400, 0x8, 0x8, 0x4, 0x4}, 0x9c) 1.521379655s ago: executing program 3 (id=6005): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040), &(0x7f00000003c0)=0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x8050) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) (rerun: 64) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ffff0000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x79, 0x0, &(0x7f0000000340)="444501c453216aaf000000000604faa7a62eabb42ec45e1a72c9aef8fdbd58faec07d0280b906ac094ad60bb7473c208d9540b6c2c8e8727f3e89b7f2a08e0a5977d28809cd53266018e709d522d30b4faa9254e70ed9dd0cd2ce670140c7c312964c07f9f39a074b21cbabe03f6b6175e652bc22df7a330db", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 1.362261286s ago: executing program 3 (id=6008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x8001, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000004c0)={0x7fffffff, 0x5, 0x51, 0x8, 0x1}) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x20, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xd, 0x9, 0x7, 0x50, 0xfffffffffffffff7}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@link_local, @remote, @void, {@mpls_uc={0x8847, {[{0x800, 0x0, 0x1}, {0x842}], @llc={@snap={0xaa, 0xab, 'h', "b686bf", 0x9300, "42a77ab7d018dc1068cafa55568843ed10d81aa10be2234ca94571252e7b189189708d65668f39f11e687edfbe673932fa211a01ce184b69f9783382ae783f3b66fc1ad6cf503008bd7529e40978"}}}}}}, &(0x7f0000000080)={0x1, 0x2, [0x6b5, 0x6dc, 0xe34, 0xa10]}) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x1, {0x1, 0x0, 0x4}, {0x1}, 0xff, 0xfe}], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)={0x8c, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfdd2}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3a582280}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x8c}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000253, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r10, @ANYRES64=r10], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.360706887s ago: executing program 4 (id=6009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.360269753s ago: executing program 3 (id=6010): syz_emit_ethernet(0x21e, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1e8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x35, '\x00', [@generic={0xf, 0xff, "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"}, @generic, @ra, @generic={0x0, 0x85, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f"}, @generic={0x0, 0xe, "8b168e4b48529453d91cea424030"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) unshare(0x2000400) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xfffffffb}, 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="010000009700060000071a80010061cc", 0x10) close(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 1.328320966s ago: executing program 4 (id=6011): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000100000000000200000000000000", @ANYRES32=r3, @ANYBLOB="d98d010008200200200012800e0001006970366772657461700000000c6191fa9c0282e0761da6e6"], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@union={0x6, 0x3, 0x0, 0x5, 0x0, 0x8, [{0x7, 0x2, 0x1ff}, {0x3, 0x5, 0x80000001}, {0x10, 0x1, 0x7fff}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @typedef={0xb}]}, {0x0, [0x30, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f00000003c0)=""/171, 0x67, 0xab, 0x1, 0x4, 0x10000}, 0x28) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newchain={0xc0, 0x64, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0xfffa}, {0x1, 0x8}, {0x0, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9e, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x92}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0x2}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x41d, 0x0, 0x20, 0x8}, {0x9, 0x63, 0x1, 0x1}, {0x1ad, 0x8, 0x4, 0x8}]}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4840}, 0x400c0) 1.005212581s ago: executing program 3 (id=6013): r0 = socket(0x25, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000006a956cf5cf955207b42429ec073787ff9a8532debb8cd8c9985b6cc6aa6ce8d1", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x20004055}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004340), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01082dbd7000fcdbdf2517000015aa00faffffffffff7fffffffb4b70b241cc813c4d11d29271a3c36d8536eb33ba1b230712214d54c7beb52a539e582d1e41e95217a9c8df7d9cc3c1572fc15b1e988684a7ebf47779a0bf9733ede5d85408630f41633ef6e8f3e8706240215750c0dc4eae058ea0760049617d81490ea8c431c96cd0ce2"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x24040000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c006cd3", @ANYRES16=r6, @ANYBLOB="00042abd7000fedbdf2506000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e300000000008000300020000000600040002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x48000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000480)={'gretap0\x00', r7, 0x7800, 0x80, 0x59, 0x100, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x64, 0x0, 0x5, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@timestamp={0x44, 0x28, 0xda, 0x0, 0xa, [0x2, 0xd, 0x8a7, 0x7, 0xf7510ce, 0xfffffffc, 0x8, 0x6, 0x1f]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="000000003e60e86806b0420ddbc996489d0d244b12292ea67c091d63529d4c13a4b69684ff6b0b0b1e3b26f1dce60fefa81a028fecbd7688b046260628bb9d1463d747a2", @ANYRES16=0x0, @ANYBLOB="100027bd7000fddbdf251000000008000800a80c000008000800ffff000008000900ffff0000080007000700000008000600050000000800090005000000080007000800000020000180140002007663616e30000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="0800080002000000"], 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x14040801) socket$inet6(0xa, 0x800, 0x6314) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0xb}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={r12, 0x2}, 0x8) 1.002020036s ago: executing program 0 (id=6014): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x8}, &(0x7f00000001c0)=0x8) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@gettaction={0xe4, 0x32, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffa604}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xe4}}, 0x48000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async) pipe(&(0x7f0000000140)) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) 950.725981ms ago: executing program 4 (id=6015): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) mmap(&(0x7f000056f000/0x4000)=nil, 0x4000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000580)={r1, r3, "9458ef1ae9f98df6f26a5c6ebebd23ee74e071cf3084faf3d7c101bf9faf5adc73b507eb6aa13bc573c4e5692c62d88c6b73809b4184d526295eddbbff7dcfcb111bbfd9743f24a3e3c01c5542d163262cfc9a21569b1dea287c9f4938bb1635c913b410f6ac47585c4281115642049da5ac6920ab77208cbd1fc83b51b67066250b2323bacbb6b310652403eb55222f31cbdc49ce5041748cafa3d043ef6a820199c8a4a37675eb41b59e34d41943ce262a2944894208fc7dce7f6b4a67d868c39a21d839f48880be651858a76a40ecea10cdedb066e8dab736adf0db2482da6596d8e499fa96f78987056f3fc3a031ae228ea23600668a4898edc4d676d7bc", "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"}) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r6, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000080)=0xee2b, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000000c000c00010000000100001b"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 933.507168ms ago: executing program 0 (id=6016): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000380)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x10}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x0, 0x14, {{0x5, 0x4, 0x1, 0x34, 0x14, 0x64, 0x0, 0x94, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}}}}}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000000380)={@remote, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0xfffe, 0x0, 0x80, 0x2, 0x0, @private=0xa010100, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) recvmmsg$unix(r5, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000070000000000000ad0000000060a0b0400000000000000000b000000220007402bee5eaa1ea007f71ead744cb0ceaa2133d70cc33c24ebe0be9f501c072e0828cb970a8e80178af000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x24004094}, 0x1800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000001540)={@val, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0x2, 0x6, "23ff03", 0x10, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[@routing={0x2, 0x0, 0x0, 0xe}], {0x4e20, 0x4e23, 0x8}}}}}}}, 0x52) 880.588364ms ago: executing program 1 (id=6017): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x10, 0xe, 0x0, 0x6}}) 806.685916ms ago: executing program 3 (id=6018): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0xe4, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x14, 0x2, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a3200000000090001"], 0x38}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) bind$vsock_stream(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009400)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1400a2b61000010016bf526f7eef1e21a030a585b94800000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000014000000020a0102000000000000000000000000240006000c0a0102020000080000000002000000090001007379d0000000000000000380140000001100"], 0x80}}, 0x0) 806.469306ms ago: executing program 2 (id=6019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x3, 0xa4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0xc}, 0x94) 805.139633ms ago: executing program 4 (id=6020): pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@gettaction={0x1c, 0x32, 0x300, 0x70bd2a, 0x3, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x1c}}, 0x20048804) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x80, 0xfffffffd, 0x30, @mcast1, @local, 0x80, 0x782, 0x9}}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a03000000000000000000050000000900010073797a300000001b3c00030073797a300000000008000a4000000003280004800800024000000012080001400000000014000300776c616e300000000000000000000000340000001100010000000000000000000000000a38"], 0xa4}}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000100)={0x1d, r6}, 0x10) 732.26629ms ago: executing program 1 (id=6021): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$rxrpc(r5, &(0x7f0000000400)=""/130, 0x82, 0x10001, &(0x7f0000000500)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @local, 0x3}}, 0x24) (async) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x7}, 0x6) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x34, r8, 0x403, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d40), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001d80)={'wpan0\x00', 0x0}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000000)={0x20, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x10) (async, rerun: 32) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000810}, 0x400c055) (rerun: 32) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x810) 670.925129ms ago: executing program 2 (id=6022): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@tracing={0x0, 0x4}}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec204cd32308cdd8dde0400", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) 578.365067ms ago: executing program 0 (id=6023): close(0xffffffffffffffff) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x18) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020001008900010073717a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESOCT=r5, @ANYRESHEX=r3, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x40010) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r5, 0x100, 0x70bd2a, 0x3, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0xfffffffffffffdf9}]}]}, 0x3c}}, 0x4000) 520.909669ms ago: executing program 2 (id=6024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 488.514329ms ago: executing program 4 (id=6025): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x20000}}, 0x20}, 0x1, 0x0, 0x0, 0x4d0d0}, 0x4000000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3f7, 0x2, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) r11 = socket(0x10, 0x803, 0x2) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r12, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x3c}}, 0x0) 438.738176ms ago: executing program 1 (id=6026): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xb, 0xfff2}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xfffffffc}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x58}}, 0x0) 413.066581ms ago: executing program 2 (id=6027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x58}}, 0x4020) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x1, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) 388.120668ms ago: executing program 0 (id=6028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x7ff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 246.647751ms ago: executing program 0 (id=6029): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty, 0x3501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x272}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@mcast2}, {{@in=@multicast2, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000004900000095000000000000004dd90abee6d40aeae03868e3e455a41e85d7b094c58586700988fd470a80a0e2449b82e96a95564fe0dbe0bc7ca6a783fe2d44ac274f0fb8994f79a9cc3c547f99dca5fb70d107492692c0ec3df87abd3ee5bc62416bb6bba0a8a3ea0476024b50f86c110da6cbae7f8e0ffa7565cf9165eeede9bc577f06ce"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f", 0x9f}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x11a}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f", 0x75}], 0x2}}], 0x3, 0x2000c044) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendto$packet(r1, &(0x7f0000000640)="e630e1d152b0cddb6faea304527e20dfde6c53404c38d0f46c175bd66a5032e91806f4c0d6370bafe64001d1fd05e93d2f09eec63ef545af2ef9d92144193ba29d24ab8b283e42f8966e78c9890d96f4d3d6cf8af30f10f34b7ace58334daa7fe2508cf6507a2ebd7014c7998edcc801407cd1ad760c84a4c52a8e27b608b0b39f521378e6ad7c4d78c0058025947009f6aa68fc311ee647a64cdcf66a36899c46151afed61d0a03ebfbeb89ee985d6e", 0xb0, 0x0, &(0x7f0000000840)={0x11, 0x2, r4, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) accept$inet(r3, 0x0, &(0x7f0000000440)) (async, rerun: 32) sendto$inet(r3, &(0x7f00000004c0)="0003", 0x2, 0x16000000, 0x0, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x102}}, 0x20}}, 0x42) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) 245.378965ms ago: executing program 4 (id=6030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x1) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) syz_emit_ethernet(0x42, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff810031000800450000300100000000019078ac141430ac0114aa0b009078030000004500000000000000000c0000ac1414ccd2480420"], 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'macsec0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x108) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r4, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async, rerun: 32) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) (rerun: 32) sendto$inet(r5, 0x0, 0x0, 0x60000095, &(0x7f00000018c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000080)='O', 0x1, 0x0, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000ea0000000000"], 0x48) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r5}, 0x20) (async) shutdown(r5, 0x1) (async) connect$bt_l2cap(r1, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x15, 0x0, &(0x7f00000006c0)="5c71f91b05c413550230b4c817a62875483efe176d", 0x0, 0x8000008, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 188.327602ms ago: executing program 1 (id=6031): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @local}, 0x14) 153.776615ms ago: executing program 2 (id=6032): syz_emit_ethernet(0x4e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44843}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 66.676819ms ago: executing program 0 (id=6033): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) (async) r3 = socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x66, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e20, 0x52, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959"}}}}, 0x74) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x5, 0xffffffffffffffff, 0x0, 0xf4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 66.068036ms ago: executing program 1 (id=6034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002e00)=""/4095, 0xfff}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4076, 0xfec}, {&(0x7f0000000000)=""/112, 0x70}, {&(0x7f0000000600)=""/135, 0x87}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x40010020, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x5c, r3, 0x2, 0x9849, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)='Ir;', 0x0}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f0000000180)={0xc, 0x1}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001051}, 0x4000800) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002e00)=""/4095, 0xfff}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4076, 0xfec}, {&(0x7f0000000000)=""/112, 0x70}, {&(0x7f0000000600)=""/135, 0x87}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x40010020, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x5c, r3, 0x2, 0x9849, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)='Ir;', 0x0}, 0x50) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) (async) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f0000000180)={0xc, 0x1}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001051}, 0x4000800) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 44.987312ms ago: executing program 3 (id=6035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x4, 0x9, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029303279ae1a61fa1bc242ae60301394cf85e2cdf90d6c8568b825a51fab35f2d2c030c0ea0c905e0c933414f6a8a30aab04a639980af39a9047ca91c7657ab294910e66f561c5bb8c05ecc476571af15bbcae42e53baf514bc224e8f29f4a4c", @ANYRES32=r5, @ANYBLOB="0400ac00050029000c000000"], 0x28}, 0x1, 0x0, 0x0, 0x82dac147ed671845}, 0x800) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000183a00fe8000000000000000000000000000bbff0200000000000000000000000000018800907800000000ff0200000000000000000000000000012da6af9ffa3149d91d503e688285"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000004000000000004de000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe7f76c7761078890}, 0x20000080) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000200)) pipe(&(0x7f0000000100)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=6036): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x6, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x6, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x1bd, 0x9ffffd}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000010"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): 0: entered promiscuous mode [ 367.305755][T18954] gretap0: entered promiscuous mode [ 367.318630][T18954] openvswitch: netlink: Unknown key attributes 2 [ 367.413834][T11986] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.424773][T11986] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.436390][T11986] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 367.691027][T19003] veth0: entered promiscuous mode [ 367.707650][T19002] veth0: left promiscuous mode [ 367.810861][T19014] tipc: Enabled bearer , priority 0 [ 367.819473][T19015] tipc: Enabling of bearer rejected, already enabled [ 367.861439][T19014] syzkaller0: entered promiscuous mode [ 367.874128][T19014] syzkaller0: entered allmulticast mode [ 368.081817][T19035] tipc: Enabled bearer , priority 0 [ 368.117029][T19045] netlink: zone id is out of range [ 368.127778][T19045] netlink: zone id is out of range [ 368.132969][T19045] netlink: get zone limit has 8 unknown bytes [ 368.147072][T19011] tipc: Resetting bearer [ 368.198494][T19011] tipc: Disabling bearer [ 368.215019][T19052] syzkaller0: MTU too low for tipc bearer [ 368.227780][T19052] tipc: Disabling bearer [ 368.283808][T19062] netlink: 'syz.3.3817': attribute type 1 has an invalid length. [ 368.365402][T19070] openvswitch: netlink: Key type 85 is out of range max 32 [ 368.511428][T19090] netlink: 'syz.0.3825': attribute type 17 has an invalid length. [ 368.713311][T19103] hsr_slave_0 (unregistering): left promiscuous mode [ 370.289038][T19152] netlink: 'syz.2.3844': attribute type 83 has an invalid length. [ 370.349397][T19158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.354221][T19154] __nla_validate_parse: 77 callbacks suppressed [ 370.354238][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3846'. [ 370.486387][T19172] netlink: 'syz.0.3852': attribute type 4 has an invalid length. [ 370.616864][T19189] netlink: 'syz.2.3857': attribute type 4 has an invalid length. [ 370.671871][T19196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.696304][T19196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.854869][T19219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3866'. [ 371.002675][T19229] ipvlan0: entered promiscuous mode [ 371.041563][T19236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3874'. [ 371.051790][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3874'. [ 371.079445][T19236] validate_nla: 1 callbacks suppressed [ 371.079458][T19236] netlink: 'syz.0.3874': attribute type 1 has an invalid length. [ 371.093464][T19236] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3874'. [ 371.158179][T19244] netlink: 'syz.0.3876': attribute type 6 has an invalid length. [ 371.492849][T19266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3884'. [ 371.518269][T19267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3884'. [ 371.533845][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3884'. [ 371.645017][T19277] openvswitch: netlink: Missing key (keys=40, expected=100) [ 371.708162][T19282] pim6reg1: entered promiscuous mode [ 371.723122][T19282] pim6reg1: entered allmulticast mode [ 372.196837][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3904'. [ 372.215650][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3905'. [ 372.280687][T19340] lo speed is unknown, defaulting to 1000 [ 372.363965][T19352] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 372.454793][T19367] netlink: 'syz.0.3911': attribute type 49 has an invalid length. [ 372.839210][T19404] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 372.896396][T19411] netlink: 'syz.0.3923': attribute type 24 has an invalid length. [ 373.018514][T19419] openvswitch: netlink: Message has 5 unknown bytes. [ 373.092569][T19419] netlink: 'syz.4.3927': attribute type 29 has an invalid length. [ 373.266362][T19433] bridge2: entered promiscuous mode [ 373.273884][T19433] bridge2: entered allmulticast mode [ 373.539680][T19454] xt_limit: Overflow, try lower: 271964/0 [ 373.585264][T19458] netem: change failed [ 373.956322][T19488] syz.2.3952: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 373.973918][T19488] CPU: 0 UID: 0 PID: 19488 Comm: syz.2.3952 Not tainted syzkaller #0 PREEMPT(full) [ 373.973951][T19488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.973966][T19488] Call Trace: [ 373.973973][T19488] [ 373.973981][T19488] dump_stack_lvl+0x189/0x250 [ 373.974009][T19488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.974029][T19488] ? __pfx__printk+0x10/0x10 [ 373.974050][T19488] ? lock_release+0x4b/0x3e0 [ 373.974075][T19488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.974096][T19488] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 373.974117][T19488] warn_alloc+0x214/0x310 [ 373.974140][T19488] ? stack_depot_save_flags+0x40/0x860 [ 373.974163][T19488] ? __pfx_warn_alloc+0x10/0x10 [ 373.974187][T19488] ? kasan_save_track+0x4f/0x80 [ 373.974206][T19488] ? xskq_create+0x56/0x170 [ 373.974226][T19488] ? xsk_init_queue+0xb0/0x110 [ 373.974246][T19488] ? xsk_setsockopt+0x4dc/0x8d0 [ 373.974264][T19488] ? do_sock_setsockopt+0x17c/0x1b0 [ 373.974280][T19488] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 373.974295][T19488] ? do_syscall_64+0xfa/0x3b0 [ 373.974317][T19488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.974338][T19488] __vmalloc_node_range_noprof+0x125/0x12f0 [ 373.974375][T19488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 373.974399][T19488] ? xsk_setsockopt+0x462/0x8d0 [ 373.974420][T19488] ? __kasan_kmalloc+0x93/0xb0 [ 373.974442][T19488] vmalloc_user_noprof+0xad/0xf0 [ 373.974465][T19488] ? xskq_create+0xbf/0x170 [ 373.974486][T19488] xskq_create+0xbf/0x170 [ 373.974509][T19488] xsk_init_queue+0xb0/0x110 [ 373.974530][T19488] xsk_setsockopt+0x4dc/0x8d0 [ 373.974551][T19488] ? __pfx_xsk_setsockopt+0x10/0x10 [ 373.974569][T19488] ? rcu_is_watching+0x15/0xb0 [ 373.974585][T19488] ? __pfx_aa_sk_perm+0x10/0x10 [ 373.974610][T19488] ? aa_sock_opt_perm+0xff/0x1b0 [ 373.974627][T19488] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 373.974646][T19488] ? __pfx_xsk_setsockopt+0x10/0x10 [ 373.974666][T19488] do_sock_setsockopt+0x17c/0x1b0 [ 373.974685][T19488] __x64_sys_setsockopt+0x13f/0x1b0 [ 373.974705][T19488] do_syscall_64+0xfa/0x3b0 [ 373.974728][T19488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.974745][T19488] ? clear_bhb_loop+0x60/0xb0 [ 373.974764][T19488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.974785][T19488] RIP: 0033:0x7ff16bf8ebe9 [ 373.974801][T19488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.974817][T19488] RSP: 002b:00007ff16cdde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 373.974836][T19488] RAX: ffffffffffffffda RBX: 00007ff16c1b5fa0 RCX: 00007ff16bf8ebe9 [ 373.974849][T19488] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 373.974860][T19488] RBP: 00007ff16c011e19 R08: 0000000000000004 R09: 0000000000000000 [ 373.974871][T19488] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.974882][T19488] R13: 00007ff16c1b6038 R14: 00007ff16c1b5fa0 R15: 00007ffd8a084fb8 [ 373.974906][T19488] [ 373.974978][T19488] Mem-Info: [ 374.301645][T19488] active_anon:4977 inactive_anon:0 isolated_anon:0 [ 374.301645][T19488] active_file:2564 inactive_file:39937 isolated_file:0 [ 374.301645][T19488] unevictable:768 dirty:100 writeback:0 [ 374.301645][T19488] slab_reclaimable:12910 slab_unreclaimable:129568 [ 374.301645][T19488] mapped:30101 shmem:1370 pagetables:1468 [ 374.301645][T19488] sec_pagetables:0 bounce:0 [ 374.301645][T19488] kernel_misc_reclaimable:0 [ 374.301645][T19488] free:1292719 free_pcp:11956 free_cma:0 [ 374.360642][T19488] Node 0 active_anon:19908kB inactive_anon:0kB active_file:10256kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120404kB dirty:400kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14496kB pagetables:5732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.397385][T19488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.433250][T19488] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.466611][T19488] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 374.473006][T19488] Node 0 DMA32 free:1268308kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19860kB inactive_anon:0kB active_file:10256kB inactive_file:157976kB unevictable:1536kB writepending:400kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:28736kB local_pcp:15280kB free_cma:0kB [ 374.510265][T19488] lowmem_reserve[]: 0 0 1 1 1 [ 374.515055][T19488] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 374.557591][T19488] lowmem_reserve[]: 0 0 0 0 0 [ 374.562750][T19488] Node 1 Normal free:3885224kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19712kB local_pcp:12416kB free_cma:0kB [ 374.599424][T19488] lowmem_reserve[]: 0 0 0 0 0 [ 374.604337][T19488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.618551][T19488] Node 0 DMA32: 1108*4kB (UME) 521*8kB (ME) 247*16kB (ME) 351*32kB (UM) 97*64kB (UME) 235*128kB (UME) 174*256kB (UME) 73*512kB (UME) 23*1024kB (UME) 7*2048kB (UME) 265*4096kB (M) = 1265320kB [ 374.637637][T19488] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 374.650493][T19488] Node 1 Normal: 212*4kB (UME) 51*8kB (UME) 40*16kB (UME) 126*32kB (UME) 38*64kB (UME) 12*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 944*4096kB (M) = 3885224kB [ 374.669386][T19488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.679541][T19488] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 374.690359][T19488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.701467][T19488] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 374.714480][T19488] 43868 total pagecache pages [ 374.724730][T19488] 0 pages in swap cache [ 374.755148][T19488] Free swap = 124996kB [ 374.759727][T19488] Total swap = 124996kB [ 374.764073][T19488] 2097051 pages RAM [ 374.770398][T19488] 0 pages HighMem/MovableOnly [ 374.775329][T19488] 425660 pages reserved [ 374.779771][T19488] 0 pages cma reserved [ 374.861340][T19513] netlink: 'syz.0.3956': attribute type 2 has an invalid length. [ 374.996195][T19527] : renamed from hsr0 (while UP) [ 375.083864][T19531] netlink: 'syz.2.3966': attribute type 7 has an invalid length. [ 375.131780][T19531] : entered promiscuous mode [ 375.151449][T19537] : renamed from vlan0 [ 375.268040][T19544] lo speed is unknown, defaulting to 1000 [ 375.352198][T19556] netlink: 'syz.4.3973': attribute type 21 has an invalid length. [ 375.358464][T19558] __nla_validate_parse: 57 callbacks suppressed [ 375.358483][T19558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3972'. [ 375.408881][T19556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3973'. [ 375.440336][T19563] 8021q: VLANs not supported on caif0 [ 375.649832][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 375.856777][T19591] netlink: 'syz.1.3984': attribute type 1 has an invalid length. [ 375.866201][T19591] netlink: 16110 bytes leftover after parsing attributes in process `syz.1.3984'. [ 375.972005][T19599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3985'. [ 376.100654][T19612] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 376.100814][T19606] IPVS: stopping backup sync thread 19612 ... [ 376.122742][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3990'. [ 376.152087][T19617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3988'. [ 376.220893][T19624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3993'. [ 376.231752][T19610] netlink: 'syz.1.3988': attribute type 15 has an invalid length. [ 376.254585][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3988'. [ 376.341898][T19628] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3995'. [ 376.530217][T19638] veth5: entered promiscuous mode [ 376.544215][T19638] veth5: entered allmulticast mode [ 376.573417][T19641] : entered promiscuous mode [ 376.716205][T19651] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 376.798426][T19661] tipc: Started in network mode [ 376.812185][T19661] tipc: Node identity 4e16d84b0ab1, cluster identity 4711 [ 376.831582][T19661] tipc: Enabled bearer , priority 0 [ 376.848552][T19661] syzkaller0: entered promiscuous mode [ 376.854156][T19661] syzkaller0: entered allmulticast mode [ 376.867618][T19661] tipc: Resetting bearer [ 376.876826][T19659] tipc: Resetting bearer [ 376.904505][T19659] tipc: Disabling bearer [ 377.080673][T19681] netlink: 'syz.1.4014': attribute type 2 has an invalid length. [ 377.173987][T19695] tun0: tun_chr_ioctl cmd 1074025675 [ 377.187375][T19695] tun0: persist disabled [ 377.196229][T19695] ip6erspan0: entered promiscuous mode [ 377.327273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.354512][ T2154] IPVS: starting estimator thread 0... [ 377.442004][T19706] tipc: Enabled bearer , priority 0 [ 377.467783][T19712] IPVS: using max 51 ests per chain, 122400 per kthread [ 377.540772][T19705] tipc: Disabling bearer [ 377.643066][T19734] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 377.899844][T19767] sctp: [Deprecated]: syz.0.4039 (pid 19767) Use of int in max_burst socket option deprecated. [ 377.899844][T19767] Use struct sctp_assoc_value instead [ 377.980666][T19772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.035298][ T2154] hid-generic 0005:15C2:5505.0002: item fetching failed at offset 0/1 [ 378.046919][ T2154] hid-generic 0005:15C2:5505.0002: probe with driver hid-generic failed with error -22 [ 378.254990][T19794] netlink: 'syz.1.4050': attribute type 2 has an invalid length. [ 378.742587][T19814] netlink: 'syz.4.4060': attribute type 1 has an invalid length. [ 379.090144][T19839] netlink: 'syz.3.4066': attribute type 9 has an invalid length. [ 379.155280][T19843] sctp: [Deprecated]: syz.1.4069 (pid 19843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.155280][T19843] Use struct sctp_sack_info instead [ 379.404332][T19880] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 379.428726][T19880] netlink: 'syz.2.4077': attribute type 10 has an invalid length. [ 379.532801][T19880] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 379.602841][T19905] netlink: 'syz.1.4084': attribute type 1 has an invalid length. [ 379.718939][T19912] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 379.747609][T19912] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 379.783817][T19917] netlink: 'syz.4.4088': attribute type 1 has an invalid length. [ 379.922652][T19930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.932739][T19930] netlink: 'syz.0.4092': attribute type 33 has an invalid length. [ 380.072932][T19946] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 380.377045][T19972] __nla_validate_parse: 47 callbacks suppressed [ 380.377062][T19972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4102'. [ 380.993369][T20000] netlink: 'syz.4.4110': attribute type 11 has an invalid length. [ 381.029493][T20000] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4110'. [ 381.162851][T20012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4111'. [ 381.316470][T20027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'. [ 381.406004][T20033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4117'. [ 381.444132][T20033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4117'. [ 381.536518][T20041] pim6reg1: entered promiscuous mode [ 381.548679][T20041] pim6reg1: entered allmulticast mode [ 381.664249][T20052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4122'. [ 381.728494][T20054] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4123'. [ 381.828388][T20069] netlink: 'syz.1.4129': attribute type 1 has an invalid length. [ 381.839801][T20069] netlink: 'syz.1.4129': attribute type 3 has an invalid length. [ 381.849318][T20068] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 381.853923][T20069] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4129'. [ 381.864030][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 382.011597][T20084] netlink: 'syz.3.4134': attribute type 5 has an invalid length. [ 382.025896][T20080] netlink: 'syz.1.4133': attribute type 8 has an invalid length. [ 382.035428][T20078] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !瀵$蘒L賤y岗丌匘ｘUD寃榼漽 [ 382.138944][T20084] netlink: 'syz.3.4134': attribute type 1 has an invalid length. [ 382.146767][T20084] netlink: 'syz.3.4134': attribute type 1 has an invalid length. [ 382.160583][T20088] unknown channel width for channel at 909000KHz? [ 382.180876][T20088] unknown channel width for channel at 909000KHz? [ 382.235898][T20101] netlink: 'syz.3.4142': attribute type 1 has an invalid length. [ 382.261633][T20103] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20000 [ 382.277477][T20104] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20000 [ 382.301146][T20101] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 382.326206][T20101] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 382.350430][T20110] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 382.363884][T20110] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 382.384591][T20117] openvswitch: netlink: Actions may not be safe on all matching packets [ 382.726222][T20145] netlink: 'syz.1.4155': attribute type 1 has an invalid length. [ 382.761893][T20145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.845985][T20161] openvswitch: netlink: Actions may not be safe on all matching packets [ 383.057060][T20180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.214360][T20200] netlink: ct family unspecified [ 383.219770][T20200] openvswitch: netlink: Actions may not be safe on all matching packets [ 383.417922][T20215] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 383.430942][T20215] netlink: 'syz.1.4178': attribute type 1 has an invalid length. [ 383.583484][T20230] bond0: entered promiscuous mode [ 383.589111][T20230] bond_slave_0: entered promiscuous mode [ 383.595319][T20230] bond_slave_1: entered promiscuous mode [ 383.605226][T20230] batadv0: entered promiscuous mode [ 383.736064][T20239] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 383.809646][T20243] nbd: couldn't find a device at index 0 [ 384.181675][T20262] tipc: Enabling of bearer rejected, failed to enable media [ 384.926426][T20264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.777600][ T95] block nbd1: Possible stuck request ffff8880252be000: control (read@0,1024B). Runtime 120 seconds [ 390.788406][ T95] block nbd1: Possible stuck request ffff8880252be1c0: control (read@1024,1024B). Runtime 120 seconds [ 390.800503][ T95] block nbd1: Possible stuck request ffff8880252be380: control (read@2048,1024B). Runtime 120 seconds [ 390.811506][ T95] block nbd1: Possible stuck request ffff8880252be540: control (read@3072,1024B). Runtime 120 seconds [ 394.609742][ T55] block nbd2: Possible stuck request ffff8880252e0000: control (read@0,1024B). Runtime 120 seconds [ 394.621280][ T55] block nbd2: Possible stuck request ffff8880252e01c0: control (read@1024,1024B). Runtime 120 seconds [ 394.632408][ T55] block nbd2: Possible stuck request ffff8880252e0380: control (read@2048,1024B). Runtime 120 seconds [ 394.643943][ T55] block nbd2: Possible stuck request ffff8880252e0540: control (read@3072,1024B). Runtime 120 seconds [ 395.247589][ T55] block nbd3: Possible stuck request ffff888025350000: control (read@0,1024B). Runtime 120 seconds [ 395.258853][ T55] block nbd3: Possible stuck request ffff8880253501c0: control (read@1024,1024B). Runtime 120 seconds [ 395.269861][ T55] block nbd3: Possible stuck request ffff888025350380: control (read@2048,1024B). Runtime 120 seconds [ 395.280925][ T55] block nbd3: Possible stuck request ffff888025350540: control (read@3072,1024B). Runtime 120 seconds [ 420.848012][ T95] block nbd1: Possible stuck request ffff8880252be000: control (read@0,1024B). Runtime 150 seconds [ 420.859572][ T95] block nbd1: Possible stuck request ffff8880252be1c0: control (read@1024,1024B). Runtime 150 seconds [ 420.870605][ T95] block nbd1: Possible stuck request ffff8880252be380: control (read@2048,1024B). Runtime 150 seconds [ 420.881672][ T95] block nbd1: Possible stuck request ffff8880252be540: control (read@3072,1024B). Runtime 150 seconds [ 424.689049][ T55] block nbd2: Possible stuck request ffff8880252e0000: control (read@0,1024B). Runtime 150 seconds [ 424.699869][ T55] block nbd2: Possible stuck request ffff8880252e01c0: control (read@1024,1024B). Runtime 150 seconds [ 424.710913][ T55] block nbd2: Possible stuck request ffff8880252e0380: control (read@2048,1024B). Runtime 150 seconds [ 424.722211][ T55] block nbd2: Possible stuck request ffff8880252e0540: control (read@3072,1024B). Runtime 150 seconds [ 425.328460][ T55] block nbd3: Possible stuck request ffff888025350000: control (read@0,1024B). Runtime 150 seconds [ 425.339418][ T55] block nbd3: Possible stuck request ffff8880253501c0: control (read@1024,1024B). Runtime 150 seconds [ 425.350962][ T55] block nbd3: Possible stuck request ffff888025350380: control (read@2048,1024B). Runtime 150 seconds [ 425.362036][ T55] block nbd3: Possible stuck request ffff888025350540: control (read@3072,1024B). Runtime 150 seconds [ 431.887342][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 434.927615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.478646][T20297] __nla_validate_parse: 22 callbacks suppressed [ 435.478664][T20297] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4205'. [ 435.649458][T20307] smc: net device bond0 applied user defined pnetid SYZ2 [ 435.686261][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4210'. [ 435.721463][T20318] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4209'. [ 435.756584][T20316] netlink: 'syz.1.4211': attribute type 2 has an invalid length. [ 435.760241][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4212'. [ 435.834003][T20325] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 435.854252][T20331] sock: sock_set_timeout: `syz.2.4214' (pid 20331) tries to set negative timeout [ 435.953402][T20337] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4218'. [ 435.963991][T20337] netlink: 'syz.3.4218': attribute type 10 has an invalid length. [ 435.985759][T20337] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.993161][T20337] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.009646][T20337] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.016785][T20337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.024180][T20337] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.031333][T20337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.042549][T20337] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 436.061567][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4215'. [ 436.266039][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4226'. [ 436.308946][T20365] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4227'. [ 436.383773][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4226'. [ 436.524772][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4231'. [ 436.616416][T20383] netlink: 'syz.2.4230': attribute type 4 has an invalid length. [ 436.823595][T20408] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 437.007311][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 440.106429][T20446] netlink: 'syz.1.4253': attribute type 1 has an invalid length. [ 440.140346][T20448] netlink: 'syz.0.4254': attribute type 4 has an invalid length. [ 440.175379][T20454] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 440.185480][T20454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.390672][T20474] net veth1_virt_wifi .: renamed from virt_wifi0 [ 440.495960][T20485] __nla_validate_parse: 6 callbacks suppressed [ 440.495977][T20485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4267'. [ 440.813779][T20499] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 440.821298][T20499] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 441.122852][T20520] bond2: entered promiscuous mode [ 441.128289][T20520] bond2: entered allmulticast mode [ 441.133680][T20520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.178876][T20527] netlink: 'syz.3.4283': attribute type 1 has an invalid length. [ 441.186707][T20527] netlink: 'syz.3.4283': attribute type 1 has an invalid length. [ 441.201558][T20527] netlink: 'syz.3.4283': attribute type 1 has an invalid length. [ 441.263420][T20527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 441.275304][T20527] bond3: (slave bond4): making interface the new active one [ 441.285136][T20527] bond3: (slave bond4): Enslaving as an active interface with an up link [ 441.299135][T20527] bridge0: Device is already in use. [ 441.587909][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4293'. [ 441.720923][T20573] lo speed is unknown, defaulting to 1000 [ 441.726939][T20568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4296'. [ 441.766539][T20579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4297'. [ 441.929430][T20594] bond0: entered promiscuous mode [ 441.940547][T20594] bond_slave_0: entered promiscuous mode [ 441.946392][T20594] bond_slave_1: entered promiscuous mode [ 442.052425][T20600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4302'. [ 442.066140][T20600] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4302'. [ 442.121669][T20600] netlink: 'syz.0.4302': attribute type 10 has an invalid length. [ 442.144398][T20600] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 442.201832][T20610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4306'. [ 442.503931][T20625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4311'. [ 442.633706][T20641] netlink: 'syz.2.4313': attribute type 23 has an invalid length. [ 443.062713][T20674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4323'. [ 443.101515][T20674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4323'. [ 443.271382][T20692] openvswitch: netlink: Actions may not be safe on all matching packets [ 443.376710][T20701] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 443.481969][T20716] Dead loop on virtual device ip6_vti0, fix it urgently! [ 443.844709][T20740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.866124][ T1147] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 443.879220][T20749] gtp0: entered promiscuous mode [ 443.884287][T20749] gtp0: entered allmulticast mode [ 444.013368][T20755] macvlan0: entered promiscuous mode [ 444.022551][T20755] macvlan0: entered allmulticast mode [ 444.141761][T20765] netlink: 'syz.1.4354': attribute type 8 has an invalid length. [ 444.165705][T20768] netlink: 'syz.3.4359': attribute type 18 has an invalid length. [ 444.194076][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.214451][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.250431][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.279823][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.789195][T20823] netlink: 'syz.2.4375': attribute type 12 has an invalid length. [ 444.841264][T20835] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 445.043569][T20848] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 445.065974][T20858] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 445.072585][T20853] lo speed is unknown, defaulting to 1000 [ 445.213899][T20875] tipc: Started in network mode [ 445.219449][T20875] tipc: Node identity 52d4941097ff, cluster identity 4711 [ 445.226716][T20875] tipc: Enabled bearer , priority 0 [ 445.276178][T20875] syzkaller0: entered promiscuous mode [ 445.305257][T20875] syzkaller0: entered allmulticast mode [ 445.324168][T20875] tipc: Resetting bearer [ 445.344051][T11986] tipc: Resetting bearer [ 445.399888][T20883] netlink: 'syz.0.4390': attribute type 29 has an invalid length. [ 445.481631][T20886] netlink: 'syz.0.4390': attribute type 29 has an invalid length. [ 445.504703][T20874] tipc: Resetting bearer [ 445.605403][T20900] __nla_validate_parse: 19 callbacks suppressed [ 445.605430][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4393'. [ 445.622271][T20900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4393'. [ 445.646090][T20874] tipc: Disabling bearer [ 445.796125][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4395'. [ 445.809092][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4396'. [ 445.994151][T20920] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4400'. [ 446.076920][T20933] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 446.276488][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4408'. [ 446.318012][T20951] validate_nla: 4 callbacks suppressed [ 446.318030][T20951] netlink: 'syz.3.4408': attribute type 30 has an invalid length. [ 446.417846][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4412'. [ 446.458545][T20963] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4413'. [ 446.893084][T20990] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 447.086408][T20992] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4420'. [ 447.119816][T20997] netlink: 'syz.4.4422': attribute type 1 has an invalid length. [ 447.202132][T20997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.239674][T21006] netlink: 'syz.1.4423': attribute type 32 has an invalid length. [ 447.251950][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4423'. [ 447.261166][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 447.262378][T21002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.275818][T21002] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 447.299413][T21002] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 447.319030][T21013] IPv6: NLM_F_CREATE should be specified when creating new route [ 447.342157][T21006] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 447.420671][T21006] netlink: 'syz.1.4423': attribute type 1 has an invalid length. [ 447.456573][T21020] tipc: Enabling of bearer rejected, failed to enable media [ 447.485265][T21021] openvswitch: netlink: Key type 235 is out of range max 32 [ 447.496686][T21017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.530650][T21017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.614020][T21017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.635958][T21017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.700299][T21030] 8021q: VLANs not supported on ip6_vti0 [ 447.707735][T11986] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.756759][T21017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.777929][T21017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.831508][T11986] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.862428][T11986] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.872036][T11986] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.883602][T21017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.905109][T21017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.001830][T21055] syzkaller1: entered promiscuous mode [ 448.009237][T21055] syzkaller1: entered allmulticast mode [ 448.034831][ T61] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.053405][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.141627][T21069] vlan4: entered promiscuous mode [ 448.173619][ T61] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.182786][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.196669][T21072] netlink: 'syz.4.4447': attribute type 1 has an invalid length. [ 448.203167][ T61] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.208664][T21072] netlink: 'syz.4.4447': attribute type 11 has an invalid length. [ 448.216427][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.239645][ T1147] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.256990][ T1147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.424034][T21087] netlink: 'syz.1.4454': attribute type 2 has an invalid length. [ 448.465459][T21095] openvswitch: netlink: IP tunnel dst address not specified [ 448.540335][T21095] openvswitch: netlink: IP tunnel dst address not specified [ 448.869993][T21128] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.877269][T21128] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.891639][T21128] team_slave_0: left promiscuous mode [ 448.900832][T21128] team_slave_1: left promiscuous mode [ 448.927572][ T5865] Bluetooth: hci1: command 0x0401 tx timeout [ 449.005921][T21133] netlink: 'syz.2.4465': attribute type 1 has an invalid length. [ 449.056343][T11986] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.065982][T11986] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.075277][T11986] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.083943][T11986] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.097098][T11986] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.107390][T11986] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.116240][T11986] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.125125][T11986] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.153608][T21137] netlink: 'syz.2.4466': attribute type 2 has an invalid length. [ 449.676259][T21191] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 449.814034][T21203] netlink: 'syz.1.4489': attribute type 2 has an invalid length. [ 449.831508][T21203] nbd: must specify a device to reconfigure [ 449.839592][T21201] bond0: entered promiscuous mode [ 449.846789][T21201] bond_slave_0: entered promiscuous mode [ 449.866439][T21201] bond_slave_1: entered promiscuous mode [ 449.873178][T21201] team0: entered promiscuous mode [ 449.881667][T21201] team_slave_0: entered promiscuous mode [ 449.888955][T21201] team_slave_1: entered promiscuous mode [ 449.894762][T21201] geneve0: entered promiscuous mode [ 449.901839][T21201] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 449.910835][T21201] bond0: left promiscuous mode [ 449.915730][T21201] bond_slave_0: left promiscuous mode [ 449.921826][T21201] bond_slave_1: left promiscuous mode [ 449.929821][T21201] team0: left promiscuous mode [ 449.934604][T21201] team_slave_0: left promiscuous mode [ 449.958370][T21201] team_slave_1: left promiscuous mode [ 449.970135][T21201] geneve0: left promiscuous mode [ 449.983933][T21201] mac80211_hwsim hwsim26 wlan1: left promiscuous mode [ 450.486713][T21261] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 450.566776][T21266] lo speed is unknown, defaulting to 1000 [ 450.709867][T21283] __nla_validate_parse: 19 callbacks suppressed [ 450.709885][T21283] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4511'. [ 450.748926][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4512'. [ 450.758762][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4510'. [ 450.782316][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4510'. [ 450.782365][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4510'. [ 450.811212][T21285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4510'. [ 450.852444][T21293] syzkaller0: entered promiscuous mode [ 450.859270][T21293] syzkaller0: entered allmulticast mode [ 450.865845][T21290] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 450.932314][ T95] block nbd1: Possible stuck request ffff8880252be000: control (read@0,1024B). Runtime 180 seconds [ 450.943941][ T95] block nbd1: Possible stuck request ffff8880252be1c0: control (read@1024,1024B). Runtime 180 seconds [ 450.955619][ T95] block nbd1: Possible stuck request ffff8880252be380: control (read@2048,1024B). Runtime 180 seconds [ 450.967341][ T95] block nbd1: Possible stuck request ffff8880252be540: control (read@3072,1024B). Runtime 180 seconds [ 451.106452][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4518'. [ 451.126271][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4518'. [ 451.169526][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4518'. [ 451.271421][T21315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4517'. [ 451.294703][T21310] bridge0: port 4(vlan3) entered blocking state [ 451.324908][T21310] bridge0: port 4(vlan3) entered disabled state [ 451.339728][T21310] vlan3: entered allmulticast mode [ 451.354264][T21310] bridge0: entered allmulticast mode [ 451.392756][T21310] vlan3: left allmulticast mode [ 451.397873][T21310] bridge0: left allmulticast mode [ 451.420247][T21315] tipc: Enabled bearer , priority 0 [ 451.566704][T21308] tipc: Resetting bearer [ 451.635308][T21308] tipc: Disabling bearer [ 451.649809][T21343] macvlan2: entered promiscuous mode [ 451.655238][T21343] macvlan2: entered allmulticast mode [ 451.838020][T21365] syzkaller1: entered promiscuous mode [ 451.866306][T21365] syzkaller1: entered allmulticast mode [ 451.987484][T21379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.991843][T21384] validate_nla: 2 callbacks suppressed [ 451.991861][T21384] netlink: 'syz.1.4538': attribute type 1 has an invalid length. [ 451.996743][T21381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.072859][T21388] sctp: [Deprecated]: syz.0.4542 (pid 21388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.072859][T21388] Use struct sctp_sack_info instead [ 452.087448][T21390] netlink: 'syz.3.4541': attribute type 1 has an invalid length. [ 452.200835][T21404] netlink: 'syz.3.4546': attribute type 10 has an invalid length. [ 452.329944][T21412] netlink: 'syz.0.4548': attribute type 1 has an invalid length. [ 452.368321][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 452.370284][T21412] netlink: 'syz.0.4548': attribute type 2 has an invalid length. [ 452.374516][T21416] netlink: 'syz.1.4549': attribute type 1 has an invalid length. [ 452.403392][T21412] netlink: 'syz.0.4548': attribute type 1 has an invalid length. [ 452.495095][T21422] batman_adv: batadv0: Adding interface: wlan1 [ 452.518178][T21422] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.557270][T21422] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 452.587110][T21431] sctp: [Deprecated]: syz.3.4554 (pid 21431) Use of int in max_burst socket option deprecated. [ 452.587110][T21431] Use struct sctp_assoc_value instead [ 452.782961][T21452] nft_compat: unsupported protocol 0 [ 452.845864][T21457] erspan0: entered allmulticast mode [ 453.183972][T21490] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 453.201519][T21490] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 453.203512][ T1147] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 453.209461][T21490] gretap1: entered promiscuous mode [ 453.223725][T21490] gretap1: entered allmulticast mode [ 453.239103][T21497] lo speed is unknown, defaulting to 1000 [ 453.636990][T21511] netlink: 'syz.3.4576': attribute type 12 has an invalid length. [ 453.983751][T21506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.069931][ T30] audit: type=1800 audit(1756005435.789:5): pid=21526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4581" name="memory.events" dev="tmpfs" ino=1468 res=0 errno=0 [ 454.135583][ T30] audit: type=1804 audit(1756005435.829:6): pid=21526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4581" name="/newroot/285/memory.events" dev="tmpfs" ino=1468 res=1 errno=0 [ 454.276501][T21542] sctp: [Deprecated]: syz.3.4585 (pid 21542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.276501][T21542] Use struct sctp_sack_info instead [ 454.616367][T21564] can: request_module (can-proto-0) failed. [ 454.767432][ T55] block nbd2: Possible stuck request ffff8880252e0000: control (read@0,1024B). Runtime 180 seconds [ 454.780692][ T55] block nbd2: Possible stuck request ffff8880252e01c0: control (read@1024,1024B). Runtime 180 seconds [ 454.791809][ T55] block nbd2: Possible stuck request ffff8880252e0380: control (read@2048,1024B). Runtime 180 seconds [ 454.802925][ T55] block nbd2: Possible stuck request ffff8880252e0540: control (read@3072,1024B). Runtime 180 seconds [ 455.396337][T21589] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 455.447968][ T55] block nbd3: Possible stuck request ffff888025350000: control (read@0,1024B). Runtime 180 seconds [ 455.458766][ T55] block nbd3: Possible stuck request ffff8880253501c0: control (read@1024,1024B). Runtime 180 seconds [ 455.470431][ T55] block nbd3: Possible stuck request ffff888025350380: control (read@2048,1024B). Runtime 180 seconds [ 455.481455][ T55] block nbd3: Possible stuck request ffff888025350540: control (read@3072,1024B). Runtime 180 seconds [ 455.500285][T21589] tipc: Enabled bearer , priority 0 [ 455.533505][T21589] syzkaller0: entered promiscuous mode [ 455.570298][T21589] syzkaller0: entered allmulticast mode [ 455.600185][T21589] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 455.644458][T21589] tipc: Resetting bearer [ 455.681476][T21613] pim6reg: entered allmulticast mode [ 455.736364][T21586] tipc: Resetting bearer [ 455.748123][T21620] __nla_validate_parse: 17 callbacks suppressed [ 455.748142][T21620] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4608'. [ 455.749966][T21621] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4608'. [ 455.774734][T21586] tipc: Disabling bearer [ 455.922541][T21631] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 455.932778][T21636] netlink: 'syz.0.4612': attribute type 1 has an invalid length. [ 455.956209][T21636] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4612'. [ 456.036342][T21643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4615'. [ 456.064919][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4617'. [ 456.206664][T21659] nbd: couldn't find a device at index 0 [ 456.369862][T21672] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4625'. [ 456.384950][T21672] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4625'. [ 456.602134][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'. [ 456.652295][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'. [ 456.834812][T21703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.898495][T21721] netlink: 'syz.0.4639': attribute type 10 has an invalid length. [ 456.906533][T21721] batman_adv: batadv0: Removing interface: wlan1 [ 456.922233][T21721] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 456.937729][T21721] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 456.954366][T21731] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4641'. [ 457.120964][T21751] tipc: Enabling of bearer rejected, media not registered [ 457.140356][T21748] tipc: Enabling of bearer rejected, media not registered [ 457.233657][T21761] netlink: 'syz.2.4651': attribute type 1 has an invalid length. [ 457.274602][T21761] netlink: 'syz.2.4651': attribute type 10 has an invalid length. [ 457.283095][T21761] netlink: 'syz.2.4651': attribute type 4 has an invalid length. [ 457.433113][T21779] netlink: 'syz.0.4655': attribute type 7 has an invalid length. [ 457.551133][T21785] gretap0: entered promiscuous mode [ 457.563435][T21785] batadv_slave_1: entered promiscuous mode [ 457.582063][T21785] debugfs: 'hsr1' already exists in 'hsr' [ 457.589710][T21785] Cannot create hsr debugfs directory [ 457.611618][T21787] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 457.628644][T21791] netlink: 'syz.4.4660': attribute type 1 has an invalid length. [ 457.757045][T21796] macvlan0: left promiscuous mode [ 457.762468][T21796] macvlan0: left allmulticast mode [ 457.770172][T21796] netlink: 'syz.4.4662': attribute type 2 has an invalid length. [ 457.922338][T21809] netlink: 'syz.0.4664': attribute type 4 has an invalid length. [ 458.123638][T21837] netlink: 'syz.1.4673': attribute type 1 has an invalid length. [ 458.846944][T21887] syzkaller0: entered promiscuous mode [ 458.854012][T21887] syzkaller0: entered allmulticast mode [ 459.170047][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 459.235768][T21897] netlink: 'syz.1.4689': attribute type 1 has an invalid length. [ 459.337945][T21897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.818515][T21945] bridge4: port 1(veth5) entered blocking state [ 459.846302][T21945] bridge4: port 1(veth5) entered disabled state [ 459.856690][T21945] veth5: entered allmulticast mode [ 459.867888][T21945] veth5: entered promiscuous mode [ 459.886949][T21956] bridge4: port 2(veth0_to_bond) entered blocking state [ 459.936447][T21956] bridge4: port 2(veth0_to_bond) entered disabled state [ 459.942585][T21964] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 459.954675][T21956] veth0_to_bond: entered allmulticast mode [ 459.963415][T21967] netlink: 'syz.2.4705': attribute type 1 has an invalid length. [ 459.989988][T21956] veth0_to_bond: entered promiscuous mode [ 460.111060][T21972] nbd: error processing sock list [ 460.124961][T21972] block nbd5: shutting down sockets [ 460.129444][T21967] 8021q: adding VLAN 0 to HW filter on device bond5 [ 460.163410][T21951] lo speed is unknown, defaulting to 1000 [ 460.210299][T21973] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 460.439603][T21966] lo speed is unknown, defaulting to 1000 [ 460.719868][T22009] gretap0: entered promiscuous mode [ 460.771982][T22012] __nla_validate_parse: 25 callbacks suppressed [ 460.772001][T22012] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4720'. [ 460.809961][T22019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4723'. [ 460.821559][T22012] 0{X功: renamed from gretap0 [ 460.832930][T22012] 0{X功: left promiscuous mode [ 460.838215][T22012] 0{X功: entered allmulticast mode [ 460.845163][T22012] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 460.862538][T22025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4723'. [ 460.991301][T22034] team0: Mode changed to "activebackup" [ 461.123885][T22043] lo: entered promiscuous mode [ 461.155983][T22043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.200778][T22049] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 461.345667][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4736'. [ 461.836526][T22085] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4743'. [ 461.898498][T22091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 461.926941][T22091] bond6: (slave veth11): Enslaving as an active interface with a down link [ 461.948845][T22091] vlan0: entered allmulticast mode [ 461.954052][T22091] veth0_to_bond: entered allmulticast mode [ 461.960980][T22091] bond6: (slave vlan0): Opening slave failed [ 461.965166][T22098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 461.985701][T22097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4747'. [ 461.999292][T22099] bridge_slave_0: invalid flags given to default FDB implementation [ 462.007612][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4747'. [ 462.079962][T22104] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4748'. [ 462.089814][T22106] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 462.098786][T22103] veth0_macvtap: left promiscuous mode [ 462.107879][T22103] macvtap0: entered allmulticast mode [ 462.125674][T22103] macvtap0: refused to change device tx_queue_len [ 462.316048][T22130] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4757'. [ 462.340039][T22130] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4757'. [ 462.360388][T22130] validate_nla: 5 callbacks suppressed [ 462.360404][T22130] netlink: 'syz.3.4757': attribute type 6 has an invalid length. [ 462.381907][T22130] netlink: 'syz.3.4757': attribute type 5 has an invalid length. [ 462.835411][T22190] netlink: 'syz.3.4776': attribute type 1 has an invalid length. [ 462.843456][T22191] netlink: 'syz.3.4776': attribute type 1 has an invalid length. [ 463.713600][T22233] netlink: 'syz.4.4790': attribute type 30 has an invalid length. [ 463.732400][T22237] netlink: 'syz.1.4792': attribute type 10 has an invalid length. [ 463.774533][T22237] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 463.798464][T22240] atomic_op ffff8880666b9998 conn xmit_atomic 0000000000000000 [ 463.972826][T22262] openvswitch: netlink: Actions may not be safe on all matching packets [ 463.992781][T22264] netlink: 'syz.4.4801': attribute type 1 has an invalid length. [ 464.115532][T22278] veth0: entered promiscuous mode [ 464.130753][T22273] netlink: 'syz.3.4803': attribute type 1 has an invalid length. [ 464.151247][T22273] netlink: 'syz.3.4803': attribute type 3 has an invalid length. [ 464.172498][T22273] NCSI netlink: No device for ifindex 131080 [ 464.195363][T22289] bond0: entered promiscuous mode [ 464.221589][T22289] erspan0: entered promiscuous mode [ 464.232747][T22289] hsr2: entered promiscuous mode [ 464.241116][T22279] veth0: left promiscuous mode [ 465.182639][T22362] netlink: 'syz.1.4830': attribute type 3 has an invalid length. [ 465.343140][T22382] "syz.3.4836" (22382) uses obsolete ecb(arc4) skcipher [ 465.373559][T22389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.521982][T22392] pim6reg1: entered promiscuous mode [ 465.527937][T22392] pim6reg1: entered allmulticast mode [ 465.733922][T22402] ip6gre1: entered allmulticast mode [ 466.205528][T22445] __nla_validate_parse: 31 callbacks suppressed [ 466.205547][T22445] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4852'. [ 466.243190][T22449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4853'. [ 466.278584][T22452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4854'. [ 466.319084][T22454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4855'. [ 466.425890][T22461] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.471053][T22461] bond4: (slave gretap0): making interface the new active one [ 466.499864][T22461] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 466.521120][T22467] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4859'. [ 466.586375][T22474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4860'. [ 466.858106][T22503] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.4868'. [ 467.371260][T22518] validate_nla: 4 callbacks suppressed [ 467.371277][T22518] netlink: 'syz.0.4873': attribute type 1 has an invalid length. [ 467.451911][T22524] team0: left allmulticast mode [ 467.456799][T22524] team_slave_0: left allmulticast mode [ 467.462488][T22524] team_slave_1: left allmulticast mode [ 467.469305][T22524] team0: left promiscuous mode [ 467.474154][T22524] team_slave_0: left promiscuous mode [ 467.481507][T22524] team_slave_1: left promiscuous mode [ 467.488037][T22524] bridge0: port 3(team0) entered disabled state [ 467.493213][T22487] netlink: 'syz.4.4865': attribute type 1 has an invalid length. [ 467.502150][T22487] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4865'. [ 467.515343][T22487] nbd: couldn't find device at index 1048576 [ 467.518796][T22524] bridge_slave_0: left allmulticast mode [ 467.540048][T22524] bridge_slave_0: left promiscuous mode [ 467.565075][T22524] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.605687][T22524] bridge_slave_1: left allmulticast mode [ 467.623671][T22524] bridge_slave_1: left promiscuous mode [ 467.630403][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 467.646991][T22524] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.710824][T22524] bond0: (slave bond_slave_0): Releasing backup interface [ 467.730566][T22524] bond_slave_0: left promiscuous mode [ 467.747275][T22524] bond0: (slave bond_slave_1): Releasing backup interface [ 467.749160][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4879'. [ 467.764020][T22524] bond_slave_1: left promiscuous mode [ 467.779838][T22524] team0: Port device team_slave_0 removed [ 467.796811][T22524] team0: Port device team_slave_1 removed [ 467.806247][T22524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.829880][T22524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.851437][T22524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.871897][T22524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.896916][T22524] bond0: (slave wlan1): Releasing backup interface [ 467.909098][T22524] mac80211_hwsim hwsim30 wlan1: left promiscuous mode [ 468.042827][T22529] lo speed is unknown, defaulting to 1000 [ 468.060203][T22563] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20003 [ 468.629283][T22605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4896'. [ 468.650367][T22609] erspan0: entered allmulticast mode [ 469.281445][T22658] netlink: 'syz.0.4910': attribute type 10 has an invalid length. [ 469.696383][T22702] netlink: 'syz.3.4926': attribute type 39 has an invalid length. [ 470.021598][T22719] kthread_run failed with err -4 [ 470.202378][T22747] bond0: (slave team0): Releasing backup interface [ 470.225251][T22754] netlink: 'syz.3.4945': attribute type 5 has an invalid length. [ 470.228291][T22747] team0 (unregistering): Port device team_slave_0 removed [ 470.261674][T22747] team0 (unregistering): Port device team_slave_1 removed [ 470.287024][T22747] team0 (unregistering): Port device geneve0 removed [ 470.288299][T22756] netlink: 'syz.1.4946': attribute type 26 has an invalid length. [ 470.306516][T22756] netlink: 'syz.1.4946': attribute type 26 has an invalid length. [ 470.330974][T22756] netlink: 'syz.1.4946': attribute type 21 has an invalid length. [ 470.339616][T22756] netlink: 'syz.1.4946': attribute type 22 has an invalid length. [ 470.347598][T22756] netlink: 'syz.1.4946': attribute type 23 has an invalid length. [ 470.358146][T22758] syzkaller0: entered promiscuous mode [ 470.363736][T22758] syzkaller0: entered allmulticast mode [ 470.563094][T22781] netlink: 'syz.0.4955': attribute type 11 has an invalid length. [ 473.958571][ T5233] udevd[5233]: worker [11181] /devices/virtual/block/nbd3 timeout; kill it [ 473.967712][ T5233] udevd[5233]: seq 16884 '/devices/virtual/block/nbd3' killed [ 473.975659][ T5233] udevd[5233]: worker [10613] /devices/virtual/block/nbd1 timeout; kill it [ 473.985735][ T5233] udevd[5233]: seq 16685 '/devices/virtual/block/nbd1' killed [ 473.993336][ T5233] udevd[5233]: worker [10617] /devices/virtual/block/nbd2 timeout; kill it [ 474.002151][ T5233] udevd[5233]: seq 16869 '/devices/virtual/block/nbd2' killed [ 481.009345][ T95] block nbd1: Possible stuck request ffff8880252be000: control (read@0,1024B). Runtime 210 seconds [ 481.020180][ T95] block nbd1: Possible stuck request ffff8880252be1c0: control (read@1024,1024B). Runtime 210 seconds [ 481.032009][ T95] block nbd1: Possible stuck request ffff8880252be380: control (read@2048,1024B). Runtime 210 seconds [ 481.043108][ T95] block nbd1: Possible stuck request ffff8880252be540: control (read@3072,1024B). Runtime 210 seconds [ 484.847416][ T55] block nbd2: Possible stuck request ffff8880252e0000: control (read@0,1024B). Runtime 210 seconds [ 484.858674][ T55] block nbd2: Possible stuck request ffff8880252e01c0: control (read@1024,1024B). Runtime 210 seconds [ 484.869694][ T55] block nbd2: Possible stuck request ffff8880252e0380: control (read@2048,1024B). Runtime 210 seconds [ 484.880851][ T55] block nbd2: Possible stuck request ffff8880252e0540: control (read@3072,1024B). Runtime 210 seconds [ 485.487605][ T55] block nbd3: Possible stuck request ffff888025350000: control (read@0,1024B). Runtime 210 seconds [ 485.498860][ T55] block nbd3: Possible stuck request ffff8880253501c0: control (read@1024,1024B). Runtime 210 seconds [ 485.509858][ T55] block nbd3: Possible stuck request ffff888025350380: control (read@2048,1024B). Runtime 210 seconds [ 485.520906][ T55] block nbd3: Possible stuck request ffff888025350540: control (read@3072,1024B). Runtime 210 seconds [ 511.090687][ T95] block nbd1: Possible stuck request ffff8880252be000: control (read@0,1024B). Runtime 240 seconds [ 511.101734][ T95] block nbd1: Possible stuck request ffff8880252be1c0: control (read@1024,1024B). Runtime 240 seconds [ 511.112926][ T95] block nbd1: Possible stuck request ffff8880252be380: control (read@2048,1024B). Runtime 240 seconds [ 511.124335][ T95] block nbd1: Possible stuck request ffff8880252be540: control (read@3072,1024B). Runtime 240 seconds [ 514.928559][ T55] block nbd2: Possible stuck request ffff8880252e0000: control (read@0,1024B). Runtime 240 seconds [ 514.939347][ T55] block nbd2: Possible stuck request ffff8880252e01c0: control (read@1024,1024B). Runtime 240 seconds [ 514.950342][ T55] block nbd2: Possible stuck request ffff8880252e0380: control (read@2048,1024B). Runtime 240 seconds [ 514.962656][ T55] block nbd2: Possible stuck request ffff8880252e0540: control (read@3072,1024B). Runtime 240 seconds [ 515.568595][ T55] block nbd3: Possible stuck request ffff888025350000: control (read@0,1024B). Runtime 240 seconds [ 515.579375][ T55] block nbd3: Possible stuck request ffff8880253501c0: control (read@1024,1024B). Runtime 240 seconds [ 515.590881][ T55] block nbd3: Possible stuck request ffff888025350380: control (read@2048,1024B). Runtime 240 seconds [ 515.601902][ T55] block nbd3: Possible stuck request ffff888025350540: control (read@3072,1024B). Runtime 240 seconds [ 518.768130][ T10] page_pool_release_retry() stalled pool shutdown: id 89, 1 inflight 60 sec [ 530.357813][T22808] __nla_validate_parse: 16 callbacks suppressed [ 530.357831][T22808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4958'. [ 530.399387][T22802] veth0_to_team: entered promiscuous mode [ 530.405240][T22802] veth0_to_team: entered allmulticast mode [ 530.469038][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4965'. [ 530.594436][T22827] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 530.821820][T22850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4974'. [ 531.021454][T22862] validate_nla: 3 callbacks suppressed [ 531.021471][T22862] netlink: 'syz.0.4978': attribute type 1 has an invalid length. [ 531.095079][T22861] vlan4: entered promiscuous mode [ 531.102966][T22861] vlan4: entered allmulticast mode [ 531.108968][T22861] hsr_slave_1: entered allmulticast mode [ 531.274886][T22872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4980'. [ 531.421701][T22874] netlink: 'syz.1.4981': attribute type 1 has an invalid length. [ 531.447310][T22874] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4981'. [ 531.477113][T22874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.498370][T22878] netlink: 'syz.2.4983': attribute type 7 has an invalid length. [ 531.633404][T22887] netlink: 'syz.4.4985': attribute type 2 has an invalid length. [ 531.668250][T22887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.458591][T22930] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 532.494344][T22933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5002'. [ 532.618317][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 532.922799][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5006'. [ 533.090915][T22960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5009'. [ 533.382993][T22972] netlink: 'syz.0.5014': attribute type 8 has an invalid length. [ 533.693530][T22993] netlink: 'syz.1.5018': attribute type 12 has an invalid length. [ 533.778299][T22996] team0: Device ip6gre3 is of different type [ 533.822288][T22997] team0: Device ip6gre3 is of different type [ 533.855768][T23000] pim6reg1: entered promiscuous mode [ 533.863414][T23000] pim6reg1: entered allmulticast mode [ 533.949879][T23012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5026'. [ 533.963170][T23010] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 534.189435][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5037'. [ 534.433212][ T30] audit: type=1107 audit(1756005516.149:7): pid=23065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 534.556092][T23074] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 534.655490][T23077] netlink: 'syz.2.5050': attribute type 1 has an invalid length. [ 534.669702][T23078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.885936][T23106] netlink: 'syz.4.5056': attribute type 1 has an invalid length. [ 535.050199][T23127] netlink: 'syz.0.5061': attribute type 16 has an invalid length. [ 535.058163][T23127] netlink: 'syz.0.5061': attribute type 3 has an invalid length. [ 535.348801][T23134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.396843][T23159] hsr_slave_1 (unregistering): left promiscuous mode [ 535.502553][T23170] __nla_validate_parse: 13 callbacks suppressed [ 535.502572][T23170] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5076'. [ 535.539585][T23174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5077'. [ 535.856538][T23206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5085'. [ 535.912211][T23211] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5087'. [ 536.005868][T23218] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.020627][T23218] bond0: entered allmulticast mode [ 536.025831][T23218] bond_slave_0: entered allmulticast mode [ 536.031998][T23218] bond_slave_1: entered allmulticast mode [ 536.038234][T23218] batadv0: entered allmulticast mode [ 536.044570][T23218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.081341][T23222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5092'. [ 536.145699][T23227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5094'. [ 536.190489][T23235] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5096'. [ 536.204421][T23235] validate_nla: 5 callbacks suppressed [ 536.204433][T23235] netlink: 'syz.0.5096': attribute type 24 has an invalid length. [ 536.311593][T23245] netlink: 'syz.1.5100': attribute type 2 has an invalid length. [ 536.315248][T23244] bond0: (slave gretap0): Error: Device type is different from other slaves [ 536.334317][T23245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5100'. [ 536.520634][T23264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5105'. [ 536.551995][T23264] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5105'. [ 536.564805][T23266] netlink: 'syz.0.5106': attribute type 1 has an invalid length. [ 536.641622][T23266] bond5: (slave gretap2): making interface the new active one [ 536.649996][T23266] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 537.477231][T23330] netlink: 'syz.2.5122': attribute type 1 has an invalid length. [ 537.481207][T23329] netlink: 'syz.2.5122': attribute type 1 has an invalid length. [ 537.507752][T23329] bond6: (slave bridge9): making interface the new active one [ 537.515781][T23329] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 537.531854][T23330] bond6: (slave bridge10): Enslaving as an active interface with a down link [ 537.821150][T23360] geneve3: entered promiscuous mode [ 537.835668][T23360] geneve3: entered allmulticast mode [ 537.903631][T23369] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 538.387575][T23422] netlink: 'syz.3.5152': attribute type 1 has an invalid length. [ 538.445280][T23426] netlink: 'syz.3.5154': attribute type 2 has an invalid length. [ 538.620097][T23439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.629666][T23439] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.640381][T23439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.873597][T23452] netlink: 'syz.4.5165': attribute type 12 has an invalid length. [ 539.304342][T23489] sock: sock_set_timeout: `syz.3.5178' (pid 23489) tries to set negative timeout [ 539.334185][T23506] netlink: 'syz.2.5183': attribute type 1 has an invalid length. [ 539.355580][T23506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.424623][T23506] bond0: (slave wlan1): Releasing backup interface [ 539.460804][T23506] batman_adv: batadv0: Adding interface: wlan1 [ 539.478581][T23506] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.519550][T23506] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 539.550170][T23521] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 539.710303][T23528] netlink: 'syz.0.5188': attribute type 4 has an invalid length. [ 540.152259][T23565] team0: Device ip6gre3 is of different type [ 540.189214][T23569] bond7: (slave bridge11): making interface the new active one [ 540.198361][T23569] bond7: (slave bridge11): Enslaving as an active interface with an up link [ 540.222253][T23572] bond7: (slave bridge12): Enslaving as an active interface with a down link [ 540.491993][T23602] lo speed is unknown, defaulting to 1000 [ 540.605127][T23608] netlink: 'syz.4.5212': attribute type 11 has an invalid length. [ 540.636465][T23608] __nla_validate_parse: 33 callbacks suppressed [ 540.636484][T23608] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5212'. [ 541.182417][ T95] block nbd1: Possible stuck request ffff8880252be000: control (read@0,1024B). Runtime 270 seconds [ 541.193648][ T95] block nbd1: Possible stuck request ffff8880252be1c0: control (read@1024,1024B). Runtime 270 seconds [ 541.206351][ T95] block nbd1: Possible stuck request ffff8880252be380: control (read@2048,1024B). Runtime 270 seconds [ 541.217990][ T95] block nbd1: Possible stuck request ffff8880252be540: control (read@3072,1024B). Runtime 270 seconds [ 541.424909][T23652] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.5224'. [ 541.504925][T23654] validate_nla: 7 callbacks suppressed [ 541.504938][T23654] netlink: 'syz.1.5225': attribute type 1 has an invalid length. [ 541.710775][T23667] pim6reg1: entered promiscuous mode [ 541.716101][T23667] pim6reg1: entered allmulticast mode [ 541.785191][T23670] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.5230'. [ 541.809140][T23670] macvlan0: entered promiscuous mode [ 541.814452][T23670] macvlan0: entered allmulticast mode [ 541.836893][T23672] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5231'. [ 541.925531][T23673] dvmrp0: entered allmulticast mode [ 542.009038][T23682] nft_compat: unsupported protocol 0 [ 542.031616][T23682] netlink: 'syz.1.5233': attribute type 2 has an invalid length. [ 542.156052][T23696] lo speed is unknown, defaulting to 1000 [ 542.246404][T23703] netlink: 'syz.1.5238': attribute type 25 has an invalid length. [ 542.613293][T23730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5245'. [ 542.655313][T23730] team0: Device gtp1 is of different type [ 542.976822][T23744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5248'. [ 543.024288][T23750] netlink: 'syz.4.5251': attribute type 3 has an invalid length. [ 543.080575][T23752] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5253'. [ 543.096127][T23752] netlink: 'syz.4.5253': attribute type 12 has an invalid length. [ 543.106271][T23752] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5253'. [ 543.244192][T23766] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 543.276963][T23766] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 543.287990][T23766] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 543.326208][T23779] tunl0: entered promiscuous mode [ 543.334064][T23788] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 543.337127][T23771] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 543.354154][T23779] netlink: 'syz.3.5260': attribute type 3 has an invalid length. [ 543.374867][T23779] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5260'. [ 543.388235][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5261'. [ 543.856395][T23836] netlink: 'syz.2.5278': attribute type 1 has an invalid length. [ 543.888656][T23841] netlink: 'syz.3.5279': attribute type 10 has an invalid length. [ 543.930720][T23841] team0: Port device dummy0 added [ 543.960027][T23841] netlink: 'syz.3.5279': attribute type 10 has an invalid length. [ 544.022437][T23841] team0: Port device dummy0 removed [ 544.045042][T23841] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 544.142954][T23862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.167239][T23862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.192084][T23862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 544.223503][T23873] netlink: 'syz.4.5289': attribute type 4 has an invalid length. [ 544.271838][T23862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.291677][T23862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.344169][T23862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 544.421748][T23862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.450225][T23862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.461065][T23862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 544.679036][ T66] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.692282][ T66] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 544.701616][ T66] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 544.712827][ T66] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.725368][ T66] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 544.735344][ T66] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 544.756222][ T66] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.775950][ T66] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 544.795773][ T66] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 544.815899][ T44] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.825824][ T44] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 544.837798][ T44] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 545.005727][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.014616][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.022965][ T55] block nbd2: Possible stuck request ffff8880252e0000: control (read@0,1024B). Runtime 270 seconds [ 545.025321][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.033832][ T55] block nbd2: Possible stuck request ffff8880252e01c0: control (read@1024,1024B). Runtime 270 seconds [ 545.033862][ T55] block nbd2: Possible stuck request ffff8880252e0380: control (read@2048,1024B). Runtime 270 seconds [ 545.033883][ T55] block nbd2: Possible stuck request ffff8880252e0540: control (read@3072,1024B). Runtime 270 seconds [ 545.090162][T23952] pim6reg527: entered allmulticast mode [ 545.119832][T23946] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 545.160301][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.175678][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.195391][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.202512][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.213786][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.221256][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.231566][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.239067][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.245952][T23946] hsr0 speed is unknown, defaulting to 1000 [ 545.401333][T23974] pim6reg: entered allmulticast mode [ 545.649822][ T55] block nbd3: Possible stuck request ffff888025350000: control (read@0,1024B). Runtime 270 seconds [ 545.663289][ T55] block nbd3: Possible stuck request ffff8880253501c0: control (read@1024,1024B). Runtime 270 seconds [ 545.676144][ T55] block nbd3: Possible stuck request ffff888025350380: control (read@2048,1024B). Runtime 270 seconds [ 545.687493][ T55] block nbd3: Possible stuck request ffff888025350540: control (read@3072,1024B). Runtime 270 seconds [ 545.712792][T24002] __nla_validate_parse: 35 callbacks suppressed [ 545.712808][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5322'. [ 545.763575][T24007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5323'. [ 545.775062][T24007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5323'. [ 545.823786][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5326'. [ 545.893897][T24017] 8021q: adding VLAN 0 to HW filter on device bond8 [ 545.911806][T24017] bond8: (slave geneve3): making interface the new active one [ 545.923271][T24017] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 545.965036][T24030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5330'. [ 545.996942][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5329'. [ 546.012186][T24022] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5327'. [ 546.050428][ T979] IPVS: starting estimator thread 0... [ 546.102515][T24042] lo speed is unknown, defaulting to 1000 [ 546.147570][T24036] IPVS: using max 38 ests per chain, 91200 per kthread [ 546.274188][T24054] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.5336'. [ 546.295560][T24059] sctp: [Deprecated]: syz.3.5335 (pid 24059) Use of int in max_burst socket option deprecated. [ 546.295560][T24059] Use struct sctp_assoc_value instead [ 546.338296][T24060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.430412][T24065] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5339'. [ 546.549480][T24042] hsr0 speed is unknown, defaulting to 1000 [ 546.652451][T24085] validate_nla: 31 callbacks suppressed [ 546.652468][T24085] netlink: 'syz.2.5343': attribute type 10 has an invalid length. [ 546.680159][T24085] veth1_macvtap: left promiscuous mode [ 546.733564][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5344'. [ 546.873032][T24099] netlink: 'syz.0.5348': attribute type 5 has an invalid length. [ 546.902026][T24101] netlink: 'syz.0.5349': attribute type 18 has an invalid length. [ 546.990459][T24104] netlink: 'syz.0.5351': attribute type 1 has an invalid length. [ 547.017069][T24104] netlink: 'syz.0.5351': attribute type 1 has an invalid length. [ 547.031226][T24104] netlink: 'syz.0.5351': attribute type 1 has an invalid length. [ 547.043033][T24104] netlink: 'syz.0.5351': attribute type 1 has an invalid length. [ 547.058983][T24104] netlink: 'syz.0.5351': attribute type 1 has an invalid length. [ 547.073816][T24104] netlink: 'syz.0.5351': attribute type 1 has an invalid length. [ 547.084680][T24104] netlink: 'syz.0.5351': attribute type 1 has an invalid length. [ 547.508618][T24153] syzkaller0: entered promiscuous mode [ 547.514302][T24153] syzkaller0: entered allmulticast mode [ 547.567438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.219632][T24179] 0{X功: entered promiscuous mode [ 548.225356][T24179] 0{X功: left allmulticast mode [ 548.252063][T24184] 1{X功: renamed from 30{X功 [ 548.350627][T24184] 1{X功: left promiscuous mode [ 548.355900][T24184] 1{X功: entered allmulticast mode [ 548.374247][T24184] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 548.461376][T24194] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 548.714385][T24224] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 549.321445][T24284] gretap2: entered promiscuous mode [ 549.330733][T24275] block nbd5: server does not support multiple connections per device. [ 549.336992][T24284] gretap2: entered allmulticast mode [ 549.351624][T24275] block nbd5: shutting down sockets [ 549.486670][T24297] syzkaller1: entered promiscuous mode [ 549.495615][T24297] syzkaller1: entered allmulticast mode [ 549.586347][T24308] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.593651][T24308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.115811][T24363] bond6 (unregistering): Released all slaves [ 550.134144][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.145804][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.156344][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.166988][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.178551][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.200283][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.218393][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.239053][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.257042][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.274610][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.291256][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.303074][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.318382][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.330549][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.344904][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.356402][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.369013][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.391542][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.419485][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.446034][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.463976][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.483905][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.526335][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.540104][T24393] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 550.542573][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.570448][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.581302][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.592202][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.612863][T24397] team0: Device vti0 is up. Set it down before adding it as a team port [ 550.622451][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.633866][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.645716][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.658674][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.683040][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.712398][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.851361][T24416] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 550.934792][T24424] __nla_validate_parse: 87 callbacks suppressed [ 550.934805][T24424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5448'. [ 551.126627][T24433] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5450'. [ 551.165995][T24435] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5451'. [ 551.302835][T24442] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5452'. [ 551.463029][T24455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5456'. [ 551.489625][T24455] veth0: entered promiscuous mode [ 551.495698][T24454] veth0: left promiscuous mode [ 551.551577][T24467] bridge_slave_0: invalid flags given to default FDB implementation [ 551.629137][T24457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5457'. [ 551.630771][T24471] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5460'. [ 551.695187][T24475] validate_nla: 32 callbacks suppressed [ 551.695206][T24475] netlink: 'syz.0.5462': attribute type 1 has an invalid length. [ 551.932473][T24498] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5469'. [ 551.949205][T24497] netlink: 'syz.4.5471': attribute type 1 has an invalid length. [ 552.013003][T24503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5474'. [ 552.035764][T24503] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5474'. [ 552.214245][T24525] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 552.296073][T24532] netlink: 'syz.2.5482': attribute type 10 has an invalid length. [ 552.350867][T24537] netlink: 'syz.4.5484': attribute type 2 has an invalid length. [ 552.366796][T24541] sctp: [Deprecated]: syz.1.5485 (pid 24541) Use of int in maxseg socket option. [ 552.366796][T24541] Use struct sctp_assoc_value instead [ 552.684949][T24556] netlink: 'syz.2.5488': attribute type 1 has an invalid length. [ 552.696571][T24556] nbd: couldn't find a device at index -373156329 [ 571.247965][ T95] block nbd1: Possible stuck request ffff8880252be000: control (read@0,1024B). Runtime 300 seconds [ 571.258995][ T95] block nbd1: Possible stuck request ffff8880252be1c0: control (read@1024,1024B). Runtime 300 seconds [ 571.270060][ T95] block nbd1: Possible stuck request ffff8880252be380: control (read@2048,1024B). Runtime 300 seconds [ 571.281445][ T95] block nbd1: Possible stuck request ffff8880252be540: control (read@3072,1024B). Runtime 300 seconds [ 575.087686][ T55] block nbd2: Possible stuck request ffff8880252e0000: control (read@0,1024B). Runtime 300 seconds [ 575.099467][ T55] block nbd2: Possible stuck request ffff8880252e01c0: control (read@1024,1024B). Runtime 300 seconds [ 575.110460][ T55] block nbd2: Possible stuck request ffff8880252e0380: control (read@2048,1024B). Runtime 300 seconds [ 575.121441][ T55] block nbd2: Possible stuck request ffff8880252e0540: control (read@3072,1024B). Runtime 300 seconds [ 575.728402][ T55] block nbd3: Possible stuck request ffff888025350000: control (read@0,1024B). Runtime 300 seconds [ 575.739210][ T55] block nbd3: Possible stuck request ffff8880253501c0: control (read@1024,1024B). Runtime 300 seconds [ 575.750200][ T55] block nbd3: Possible stuck request ffff888025350380: control (read@2048,1024B). Runtime 300 seconds [ 575.761671][ T55] block nbd3: Possible stuck request ffff888025350540: control (read@3072,1024B). Runtime 300 seconds [ 597.450317][T24560] sctp: [Deprecated]: syz.3.5492 (pid 24560) Use of int in maxseg socket option. [ 597.450317][T24560] Use struct sctp_assoc_value instead [ 598.380536][T24597] __nla_validate_parse: 6 callbacks suppressed [ 598.380553][T24597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5501'. [ 598.401396][T24603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5501'. [ 598.456323][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5502'. [ 598.463024][T24608] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 598.466357][T24606] netlink: 'syz.4.5502': attribute type 30 has an invalid length. [ 598.496085][T24606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5502'. [ 598.512116][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5503'. [ 598.535633][T24606] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5502'. [ 598.560960][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5503'. [ 598.581647][T24606] 0{X功: renamed from gretap0 (while UP) [ 598.604124][T24606] 0{X功: entered allmulticast mode [ 598.616709][T24606] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 598.676375][T24622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5503'. [ 598.844928][T24644] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5515'. [ 598.900167][T24647] netlink: 'syz.0.5517': attribute type 1 has an invalid length. [ 599.019960][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5521'. [ 599.053770][T24655] tipc: Enabled bearer , priority 0 [ 599.077926][ T5865] Bluetooth: hci4: link tx timeout [ 599.083079][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 599.098857][T24655] syzkaller0: entered promiscuous mode [ 599.126368][T24655] syzkaller0: entered allmulticast mode [ 599.215158][T24680] ipvlan0: entered promiscuous mode [ 599.261861][T24684] tipc: Resetting bearer [ 599.300443][T24691] IPv6: sit3: Disabled Multicast RS [ 599.306456][T24691] sit3: entered allmulticast mode [ 599.446149][T24694] netlink: 'syz.2.5531': attribute type 39 has an invalid length. [ 599.824768][T24654] tipc: Resetting bearer [ 599.854391][T24654] tipc: Disabling bearer [ 599.910737][T24748] bridge_slave_1: left allmulticast mode [ 599.926576][T24748] bridge_slave_1: left promiscuous mode [ 599.952890][T24748] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.976324][T24748] bridge_slave_0: left allmulticast mode [ 599.988127][T24748] bridge_slave_0: left promiscuous mode [ 600.006405][T24748] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.232479][ T979] IPVS: starting estimator thread 0... [ 600.241390][T24774] IPVS: ip_vs_edit_dest(): server weight less than zero [ 600.304092][T24786] lo speed is unknown, defaulting to 1000 [ 600.328027][T24776] IPVS: using max 38 ests per chain, 91200 per kthread [ 600.824521][T24786] hsr0 speed is unknown, defaulting to 1000 [ 601.170107][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 601.349438][ T95] block nbd1: Possible stuck request ffff8880252be000: control (read@0,1024B). Runtime 330 seconds [ 601.358146][T24859] netlink: 'syz.3.5581': attribute type 1 has an invalid length. [ 601.360622][ T95] block nbd1: Possible stuck request ffff8880252be1c0: control (read@1024,1024B). Runtime 330 seconds [ 601.379743][ T95] block nbd1: Possible stuck request ffff8880252be380: control (read@2048,1024B). Runtime 330 seconds [ 601.390891][ T95] block nbd1: Possible stuck request ffff8880252be540: control (read@3072,1024B). Runtime 330 seconds [ 601.496610][T24859] 8021q: adding VLAN 0 to HW filter on device bond8 [ 601.530380][T24859] vlan0: entered allmulticast mode [ 601.536632][T24859] bond8: (slave vlan0): Opening slave failed [ 601.604411][T24863] bond8: (slave veth15): Enslaving as an active interface with a down link [ 601.744734][T24888] netlink: 'syz.1.5589': attribute type 8 has an invalid length. [ 601.958683][ T5913] hid-generic 0005:15C2:5505.0003: item fetching failed at offset 0/1 [ 601.976928][ T5913] hid-generic 0005:15C2:5505.0003: probe with driver hid-generic failed with error -22 [ 602.152017][T24918] netlink: 'syz.2.5597': attribute type 23 has an invalid length. [ 602.226715][T24932] netlink: 'syz.1.5600': attribute type 1 has an invalid length. [ 602.286998][T24927] netlink: 'syz.1.5600': attribute type 1 has an invalid length. [ 602.352176][T24927] netlink: 'syz.1.5600': attribute type 1 has an invalid length. [ 602.384954][T24932] 8021q: adding VLAN 0 to HW filter on device bond6 [ 602.534690][T24959] openvswitch: netlink: Flow key attr not present in new flow. [ 602.545167][T24954] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 602.566472][T24954] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 602.590030][T24961] team0: Device wireguard0 is of different type [ 602.659870][T24976] vxcan0: entered promiscuous mode [ 603.320800][T25031] netlink: 'syz.0.5627': attribute type 1 has an invalid length. [ 603.421273][T25049] openvswitch: netlink: Flow key attribute not present in set flow. [ 603.515005][ T1147] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 603.690874][T25078] nbd: must specify a device to reconfigure [ 603.764421][T25082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.771849][T25083] pim6reg1: entered promiscuous mode [ 603.781073][T25083] pim6reg1: entered allmulticast mode [ 604.001182][T25104] netlink: 'syz.3.5651': attribute type 4 has an invalid length. [ 604.009456][T25104] __nla_validate_parse: 34 callbacks suppressed [ 604.009474][T25104] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5651'. [ 604.100060][T25113] netlink: 'syz.2.5654': attribute type 23 has an invalid length. [ 604.110835][T25113] openvswitch: netlink: Message has 4 unknown bytes. [ 604.142476][T25117] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5653'. [ 604.151775][T25117] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5653'. [ 604.440356][T25132] macvtap1: entered promiscuous mode [ 604.445686][T25132] vlan0: entered promiscuous mode [ 604.454590][T25132] macvtap1: entered allmulticast mode [ 604.461506][T25132] vlan0: entered allmulticast mode [ 604.466641][T25132] veth1_macvtap: entered allmulticast mode [ 604.513655][T25136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5662'. [ 604.563465][T25136] netlink: 'syz.1.5662': attribute type 3 has an invalid length. [ 604.575670][T25136] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.5662'. [ 604.674733][T25142] netlink: 'syz.1.5664': attribute type 32 has an invalid length. [ 604.775916][T25150] netlink: 'syz.1.5667': attribute type 1 has an invalid length. [ 604.795976][T25150] bond7: entered promiscuous mode [ 604.801747][T25150] 8021q: adding VLAN 0 to HW filter on device bond7 [ 604.884125][T25157] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 604.894842][T25159] geneve3: entered promiscuous mode [ 604.900559][T25159] geneve3: entered allmulticast mode [ 604.908984][T25159] netlink: 'syz.1.5670': attribute type 6 has an invalid length. [ 604.909995][ T66] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 604.930849][T25157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5669'. [ 604.940197][ T66] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 604.940487][ T66] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 604.940516][ T66] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 604.991228][T25159] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.003722][T25159] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.016681][T25159] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 605.027827][T25159] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 605.040955][T25161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5671'. [ 605.041024][T25157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5669'. [ 605.123564][T25159] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.124943][T25166] sctp: [Deprecated]: syz.4.5672 (pid 25166) Use of int in maxseg socket option. [ 605.124943][T25166] Use struct sctp_assoc_value instead [ 605.144246][T25159] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.161973][T25159] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 605.164048][T25169] netlink: 'syz.3.5673': attribute type 10 has an invalid length. [ 605.176537][T25159] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 605.187665][T25166] raw_sendmsg: syz.4.5672 forgot to set AF_INET. Fix it! [ 605.195048][ T55] block nbd2: Possible stuck request ffff8880252e0000: control (read@0,1024B). Runtime 330 seconds [ 605.211609][ T55] block nbd2: Possible stuck request ffff8880252e01c0: control (read@1024,1024B). Runtime 330 seconds [ 605.222687][ T55] block nbd2: Possible stuck request ffff8880252e0380: control (read@2048,1024B). Runtime 330 seconds [ 605.234559][ T55] block nbd2: Possible stuck request ffff8880252e0540: control (read@3072,1024B). Runtime 330 seconds [ 605.256104][T25169] bridge0: port 3(team0) entered blocking state [ 605.268655][T25169] bridge0: port 3(team0) entered disabled state [ 605.275372][T25169] team0: entered allmulticast mode [ 605.280560][T25169] team_slave_0: entered allmulticast mode [ 605.286289][T25169] team_slave_1: entered allmulticast mode [ 605.293247][T25169] team0: left allmulticast mode [ 605.300128][T25169] team_slave_0: left allmulticast mode [ 605.305901][T25169] team_slave_1: left allmulticast mode [ 605.352351][T25159] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.379984][T25159] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.410073][T25159] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 605.420665][T25159] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 605.442661][T25174] bond0: (slave bridge0): Releasing backup interface [ 605.455731][T25174] bond0: (slave dummy0): Releasing backup interface [ 605.466122][T25174] bridge_slave_0: left allmulticast mode [ 605.472282][T25174] bridge_slave_0: left promiscuous mode [ 605.478834][T25174] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.487005][T25174] bridge_slave_1: left allmulticast mode [ 605.492966][T25174] bridge_slave_1: left promiscuous mode [ 605.501076][T25174] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.509951][T25174] bond0: (slave bond_slave_0): Releasing backup interface [ 605.520090][T25174] bond0: (slave bond_slave_1): Releasing backup interface [ 605.529596][T25174] team0: Port device team_slave_0 removed [ 605.536842][T25174] team0: Port device team_slave_1 removed [ 605.543707][T25174] bond0: (slave geneve1): Releasing backup interface [ 605.552555][T25174] bond3: (slave bond4): Releasing backup interface [ 605.563178][T25174] bond6: (slave veth11): Releasing active interface [ 605.571008][T25188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5677'. [ 605.583288][T25174] bond8: (slave veth15): Releasing active interface [ 605.592232][T25183] bridge0: entered promiscuous mode [ 605.602143][T25183] bridge0: left promiscuous mode [ 605.628192][T25159] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.654148][T25159] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.682766][T25159] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 605.697004][T25159] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 605.790680][ T66] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.803142][ T66] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 605.820786][ T55] block nbd3: Possible stuck request ffff888025350000: control (read@0,1024B). Runtime 330 seconds [ 605.823964][ T66] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 605.831609][ T55] block nbd3: Possible stuck request ffff8880253501c0: control (read@1024,1024B). Runtime 330 seconds [ 605.831638][ T55] block nbd3: Possible stuck request ffff888025350380: control (read@2048,1024B). Runtime 330 seconds [ 605.831661][ T55] block nbd3: Possible stuck request ffff888025350540: control (read@3072,1024B). Runtime 330 seconds [ 605.875244][ T66] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 605.894525][ T66] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.906696][ T66] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 605.915517][ T66] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 605.931589][ T66] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 605.968834][ T1147] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.977046][ T1147] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 606.004371][ T1147] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 606.030941][ T1147] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 606.081472][ T1147] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.091968][ T1147] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 606.103264][ T1147] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 606.116881][ T1147] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 606.270364][T25237] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5694'. [ 606.351361][T25248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.455740][T25255] netlink: 'syz.2.5701': attribute type 2 has an invalid length. [ 606.463630][T25255] netlink: 'syz.2.5701': attribute type 8 has an invalid length. [ 606.671833][T25279] netlink: 'syz.3.5710': attribute type 1 has an invalid length. [ 606.761362][T25279] 8021q: adding VLAN 0 to HW filter on device bond9 [ 606.779340][T25287] bond9: (slave geneve2): making interface the new active one [ 606.788213][T25287] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 606.801625][T25290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.839602][ T66] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.861780][ T66] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.884402][T11985] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.916665][T25296] !: renamed from bond_slave_0 [ 606.959576][T25299] pim6reg: entered allmulticast mode [ 606.971178][T11985] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.230478][T25337] openvswitch: netlink: Flow key attr not present in new flow. [ 607.694096][ T44] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.705644][ T44] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.714942][ T44] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.726154][ T44] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.843319][T25397] bond5: (slave gretap2): Releasing backup interface [ 607.873660][T25397] NCSI netlink: No device for ifindex 0 [ 607.945766][T25403] tipc: Enabled bearer , priority 10 [ 607.967306][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 608.105075][T25425] sctp: [Deprecated]: syz.1.5755 (pid 25425) Use of int in max_burst socket option. [ 608.105075][T25425] Use struct sctp_assoc_value instead [ 608.591139][T15718] IPVS: starting estimator thread 0... [ 608.655452][T25474] tipc: Enabling of bearer rejected, failed to enable media [ 608.708051][T25469] IPVS: using max 47 ests per chain, 112800 per kthread [ 609.029662][T25489] __nla_validate_parse: 113 callbacks suppressed [ 609.029682][T25489] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5774'. [ 609.051459][T25490] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5774'. [ 609.067373][ T5913] tipc: Node number set to 1577844736 [ 609.178532][T25489] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5774'. [ 609.319368][T25509] validate_nla: 8 callbacks suppressed [ 609.319386][T25509] netlink: 'syz.0.5778': attribute type 1 has an invalid length. [ 609.337036][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 609.349869][T25509] nbd: error processing sock list [ 609.351898][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 609.356258][T25509] block nbd5: shutting down sockets [ 609.363245][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 609.377352][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 609.385149][T11986] tipc: Disabling bearer [ 609.391117][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 609.941001][T11986] bond0 (unregistering): Released all slaves [ 609.950388][T11986] bond1 (unregistering): Released all slaves [ 609.961725][T11986] bond2 (unregistering): Released all slaves [ 609.972412][T11986] bond3 (unregistering): Released all slaves [ 609.985332][T11986] bond4 (unregistering): Released all slaves [ 610.001806][T11986] bond5 (unregistering): Released all slaves [ 610.012234][T11986] bond6 (unregistering): Released all slaves [ 610.093106][T25513] lo speed is unknown, defaulting to 1000 [ 610.155351][T11986] tipc: Left network mode [ 610.223767][T11986] IPVS: stopping backup sync thread 10470 ... [ 610.256757][T25532] netlink: 'syz.4.5784': attribute type 1 has an invalid length. [ 610.313550][T25532] bond4 (unregistering): Released all slaves [ 610.354662][T25531] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 610.498957][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5789'. [ 610.626158][T25513] hsr0 speed is unknown, defaulting to 1000 [ 610.771256][T25570] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5795'. [ 610.920940][T11986] batadv_slave_1: left promiscuous mode [ 610.951169][T11986] batadv_slave_0: left promiscuous mode [ 610.979410][T11986] hsr_slave_0: left promiscuous mode [ 611.138242][T25594] netlink: 'syz.4.5803': attribute type 10 has an invalid length. [ 611.146336][T25594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5803'. [ 611.204588][T11986] hsr_slave_1: left promiscuous mode [ 611.290080][T25600] netlink: 'syz.3.5805': attribute type 2 has an invalid length. [ 611.407948][ T51] Bluetooth: hci3: command tx timeout [ 611.486705][T25594] geneve0: entered promiscuous mode [ 611.504009][T25594] team0: Port device geneve0 added [ 611.645613][T25611] netlink: 'syz.3.5808': attribute type 1 has an invalid length. [ 611.678247][T25611] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5808'. [ 611.707888][T25513] chnl_net:caif_netlink_parms(): no params data found [ 611.834916][T25634] netlink: 'syz.0.5814': attribute type 1 has an invalid length. [ 611.894672][T25634] bond7: entered promiscuous mode [ 611.900670][T25634] 8021q: adding VLAN 0 to HW filter on device bond7 [ 611.929906][T25513] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.950797][T25513] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.958850][T25513] bridge_slave_0: entered allmulticast mode [ 611.965939][T25513] bridge_slave_0: entered promiscuous mode [ 611.977782][T25513] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.985285][T25513] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.000542][T25513] bridge_slave_1: entered allmulticast mode [ 612.008315][T25513] bridge_slave_1: entered promiscuous mode [ 612.062004][T11986] IPVS: stop unused estimator thread 0... [ 612.089332][T25513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.120065][T25513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.147002][T25656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5817'. [ 612.193604][T25513] team0: Port device team_slave_0 added [ 612.220293][T25513] team0: Port device team_slave_1 added [ 612.233663][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5818'. [ 612.309079][T25513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.324617][T25513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.357988][T25513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.359050][T25672] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5822'. [ 612.373775][T25513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.390576][T25513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.433493][T25513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.584664][T25513] hsr_slave_0: entered promiscuous mode [ 612.598186][T25513] hsr_slave_1: entered promiscuous mode [ 612.619021][T25513] debugfs: 'hsr0' already exists in 'hsr' [ 612.630426][T25513] Cannot create hsr debugfs directory [ 612.701107][T25695] netem: incorrect gi model size [ 612.706600][T25695] netem: change failed [ 612.722072][T25698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.788971][T25698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.838371][T25513] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.852116][T25513] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 612.862940][T25513] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 612.922001][T25513] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.932821][T25513] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 612.952468][T25513] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 613.034274][T25513] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.048569][T25513] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 613.065405][T25513] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 613.152608][T25513] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.188891][T25513] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 613.201825][T25513] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 613.230487][T25719] netlink: 'syz.4.5832': attribute type 1 has an invalid length. [ 613.269009][T25713] lo speed is unknown, defaulting to 1000 [ 613.422270][T25724] netlink: 'syz.3.5834': attribute type 1 has an invalid length. [ 613.487675][ T51] Bluetooth: hci3: command tx timeout [ 613.623554][T25737] netlink: 'syz.4.5837': attribute type 22 has an invalid length. [ 613.627938][T25513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 613.670381][T25713] hsr0 speed is unknown, defaulting to 1000 [ 613.670561][T25513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 613.676837][T25737] netlink: 'syz.4.5837': attribute type 22 has an invalid length. [ 613.701353][T11985] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.714409][T11985] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.729650][T25513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 613.743709][T11985] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.764877][T11985] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.813100][T25513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 613.863402][T25743] 8021q: adding VLAN 0 to HW filter on device bond10 [ 613.920745][T25742] syzkaller1: entered promiscuous mode [ 613.926331][T25742] syzkaller1: entered allmulticast mode [ 614.155557][T25513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.209430][T25765] bond11: (slave bridge8): making interface the new active one [ 614.258347][T25765] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 614.363287][T25513] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.392214][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.399369][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.457132][T25775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.482173][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.489328][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.022475][T25513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.096646][T25513] veth0_vlan: entered promiscuous mode [ 615.166779][T25513] veth1_vlan: entered promiscuous mode [ 615.246670][T25513] veth0_macvtap: entered promiscuous mode [ 615.278515][T25513] veth1_macvtap: entered promiscuous mode [ 615.323402][T25513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.362668][T25513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.395134][ T1147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.406853][ T1147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.427099][ T1147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.443181][T25833] validate_nla: 1 callbacks suppressed [ 615.443200][T25833] netlink: 'syz.4.5864': attribute type 10 has an invalid length. [ 615.459842][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.472962][T25832] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.545710][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.568312][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.579343][ T51] Bluetooth: hci3: command tx timeout [ 615.616377][T25837] __nla_validate_parse: 9 callbacks suppressed [ 615.616395][T25837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5866'. [ 615.661904][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.674598][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.844534][T25861] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.5873'. [ 615.858396][T25859] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 615.878840][T25859] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 615.892096][T25859] gretap3: entered promiscuous mode [ 615.899207][T25859] gretap3: entered allmulticast mode [ 615.971614][T25870] syzkaller0: entered promiscuous mode [ 615.984960][T25870] syzkaller0: entered allmulticast mode [ 616.249597][T25882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5878'. [ 616.687307][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 616.876984][T25907] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5887'. [ 616.946976][T25919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5890'. [ 617.030742][T25922] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5891'. [ 617.061606][T25924] netlink: 'syz.2.5892': attribute type 11 has an invalid length. [ 617.094674][T25924] netlink: 'syz.2.5892': attribute type 4 has an invalid length. [ 617.132695][T25924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5892'. [ 617.659306][ T51] Bluetooth: hci3: command tx timeout [ 617.842007][T25969] netlink: 'syz.0.5906': attribute type 1 has an invalid length. [ 617.873239][T25967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.883527][T25960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5906'. [ 618.032579][T25973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5910'. [ 618.168531][T25982] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5910'. [ 618.254067][T25985] tunl0: left promiscuous mode [ 618.300508][T25985] ip6erspan0: left promiscuous mode [ 618.350031][T25985] veth5: left promiscuous mode [ 618.402897][T25985] bond2: left promiscuous mode [ 618.447026][T25985] gretap2: left promiscuous mode [ 618.601595][T26002] netlink: 'syz.4.5919': attribute type 1 has an invalid length. [ 618.653394][T26002] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 618.672948][T26008] vlan0: entered promiscuous mode [ 618.679849][T26008] bridge0: entered promiscuous mode [ 618.776916][T26017] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 619.054911][T26041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.345383][T26067] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 620.131988][T26121] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 620.141374][T26121] netlink: 'syz.1.5953': attribute type 16 has an invalid length. [ 620.149417][T26121] netlink: 'syz.1.5953': attribute type 3 has an invalid length. [ 620.248051][T26130] netlink: 'syz.2.5958': attribute type 26 has an invalid length. [ 620.288102][ T51] Bluetooth: hci3: command tx timeout [ 620.296714][T26130] netlink: 'syz.2.5958': attribute type 26 has an invalid length. [ 620.356723][T26138] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 620.491539][T26152] tipc: Started in network mode [ 620.502170][T26152] tipc: Node identity f6d5d7716878, cluster identity 4711 [ 620.515810][T26152] tipc: Enabled bearer , priority 0 [ 620.558329][T26159] netlink: 'syz.1.5967': attribute type 1 has an invalid length. [ 620.588287][T26159] netlink: 'syz.1.5967': attribute type 3 has an invalid length. [ 620.595050][T26152] syzkaller0: entered promiscuous mode [ 620.602570][T26152] syzkaller0: entered allmulticast mode [ 620.650138][T26169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.657709][T26152] tipc: Resetting bearer [ 620.693040][T26150] tipc: Resetting bearer [ 620.796825][T26150] tipc: Disabling bearer [ 620.819503][T26184] __nla_validate_parse: 9 callbacks suppressed [ 620.819520][T26184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5972'. [ 621.073526][T26201] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5978'. [ 621.171580][T26209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5981'. [ 621.286090][T26214] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5983'. [ 621.302587][T26216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5982'. [ 621.325568][T26219] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 621.336064][T26219] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 621.365259][T26221] netlink: 564 bytes leftover after parsing attributes in process `syz.3.5985'. [ 621.384054][T26221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5985'. [ 621.674396][T26237] tc_dump_action: action bad kind [ 621.806862][T26247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5992'. [ 621.966708][T26257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5996'. [ 621.972278][T26251] netlink: 'syz.1.5994': attribute type 4 has an invalid length. [ 621.980613][T26259] veth1_macvtap: left promiscuous mode [ 621.991789][T26259] macsec0: entered promiscuous mode [ 621.997080][T26259] macsec0: entered allmulticast mode [ 622.035240][T26259] veth1_macvtap: entered promiscuous mode [ 622.051154][T26261] sctp: [Deprecated]: syz.1.5998 (pid 26261) Use of int in max_burst socket option deprecated. [ 622.051154][T26261] Use struct sctp_assoc_value instead [ 622.069772][T26259] veth1_macvtap: entered allmulticast mode [ 622.079009][T26259] macsec0: left promiscuous mode [ 622.084920][T26259] macsec0: left allmulticast mode [ 622.090794][T26259] veth1_macvtap: left allmulticast mode [ 622.100474][T26267] netlink: 'syz.3.6001': attribute type 6 has an invalid length. [ 622.101338][T26265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6000'. [ 622.548911][T26295] bond9: (slave geneve2): Releasing active interface [ 622.621715][T26295] bond11: (slave bridge8): Releasing active interface [ 622.669940][T26296] A link change request failed with some changes committed already. Interface veth4 may have been left with an inconsistent configuration, please check. [ 622.701624][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.713921][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.728604][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.751751][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.934832][T26328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.305022][T26366] netlink: 'syz.4.6025': attribute type 1 has an invalid length. [ 623.370224][T26366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.404546][T26366] veth9: entered promiscuous mode [ 623.443189][T26366] bond4: (slave veth9): Enslaving as an active interface with a down link [ 623.478112][T26380] unknown channel width for channel at 909000KHz? [ 623.529056][T26385] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 623.541696][T26385] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 623.669291][T26397] netlink: 'syz.2.6032': attribute type 3 has an invalid length. [ 623.729851][ T31] INFO: task udevd:10613 blocked for more than 143 seconds. [ 623.747233][ T31] Not tainted syzkaller #0 [ 623.760787][T26399] syzkaller1: entered promiscuous mode [ 623.773608][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 623.782690][T26399] syzkaller1: entered allmulticast mode [ 623.790183][ T31] task:udevd state:D stack:21832 pid:10613 tgid:10613 ppid:5233 task_flags:0x400140 flags:0x00004006 [ 623.806933][ T31] Call Trace: [ 623.813182][ T31] [ 623.831921][ T31] __schedule+0x1798/0x4cc0 [ 623.847830][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 623.855039][ T31] ? __pfx___schedule+0x10/0x10 [ 623.860880][ T31] ? do_raw_spin_lock+0x121/0x290 [ 623.866033][ T31] ? schedule+0x91/0x360 [ 623.870487][ T31] ? rcu_is_watching+0x15/0xb0 [ 623.875333][ T31] ? rcu_is_watching+0x15/0xb0 [ 623.880224][ T31] ? lock_release+0x4b/0x3e0 [ 623.884819][ T31] schedule+0x165/0x360 [ 623.890950][ T31] io_schedule+0x80/0xd0 [ 623.895224][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 623.900579][ T31] ? lock_release+0x4b/0x3e0 [ 623.905188][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 623.911144][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 623.916737][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 623.922432][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 623.928972][ T31] do_read_cache_folio+0x1aa/0x590 [ 623.934125][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 623.939628][ T31] read_part_sector+0xb6/0x2b0 [ 623.944405][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 623.949851][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 623.955421][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 623.961932][ T31] bdev_disk_changed+0x75f/0x14b0 [ 623.966995][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 623.972745][ T31] ? wait_on_inode+0xc0/0x230 [ 623.977481][ T31] blkdev_get_whole+0x380/0x510 [ 623.982348][ T31] bdev_open+0x31e/0xd30 [ 623.986590][ T31] blkdev_open+0x3a8/0x510 [ 623.991454][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 623.996409][ T31] do_dentry_open+0x950/0x13f0 [ 624.001213][ T31] vfs_open+0x3b/0x340 [ 624.005268][ T31] ? path_openat+0x2ecd/0x3830 [ 624.010082][ T31] path_openat+0x2ee5/0x3830 [ 624.014680][ T31] ? arch_stack_walk+0xfc/0x150 [ 624.019919][ T31] ? stack_depot_save_flags+0x40/0x860 [ 624.025371][ T31] ? __pfx_path_openat+0x10/0x10 [ 624.030327][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.036405][ T31] do_filp_open+0x1fa/0x410 [ 624.040930][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 624.045951][ T31] ? _raw_spin_unlock+0x28/0x50 [ 624.051217][ T31] ? alloc_fd+0x64c/0x6c0 [ 624.055564][ T31] do_sys_openat2+0x121/0x1c0 [ 624.060632][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 624.066106][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.071388][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.076201][ T31] __x64_sys_openat+0x138/0x170 [ 624.081455][ T31] do_syscall_64+0xfa/0x3b0 [ 624.085953][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.090733][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.096812][ T31] ? clear_bhb_loop+0x60/0xb0 [ 624.101504][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.108193][ T31] RIP: 0033:0x7fa5caea7407 [ 624.112657][ T31] RSP: 002b:00007ffd21131aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 624.121090][ T31] RAX: ffffffffffffffda RBX: 00007fa5cadb9880 RCX: 00007fa5caea7407 [ 624.129120][ T31] RDX: 00000000000a0800 RSI: 00005597c06decb0 RDI: ffffffffffffff9c [ 624.137097][ T31] RBP: 00005597c06be910 R08: 0000000000000000 R09: 0000000000000000 [ 624.145541][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005597c06d1e20 [ 624.153539][ T31] R13: 00005597c06cc190 R14: 0000000000000000 R15: 00005597c06d1e20 [ 624.161560][ T31] [ 624.164633][ T31] INFO: task udevd:10617 blocked for more than 143 seconds. [ 624.173305][ T31] Not tainted syzkaller #0 [ 624.178491][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.188390][ T31] task:udevd state:D stack:22760 pid:10617 tgid:10617 ppid:5233 task_flags:0x400140 flags:0x00004006 [ 624.200866][ T31] Call Trace: [ 624.204140][ T31] [ 624.207065][ T31] __schedule+0x1798/0x4cc0 [ 624.211608][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.217949][ T31] ? __pfx___schedule+0x10/0x10 [ 624.222787][ T31] ? do_raw_spin_lock+0x121/0x290 [ 624.228667][ T31] ? schedule+0x91/0x360 [ 624.232926][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.237724][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.242492][ T31] ? lock_release+0x4b/0x3e0 [ 624.247082][ T31] schedule+0x165/0x360 [ 624.251255][ T31] io_schedule+0x80/0xd0 [ 624.255507][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 624.261723][ T31] ? lock_release+0x4b/0x3e0 [ 624.266375][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 624.272211][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 624.277815][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 624.283108][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 624.289227][ T31] do_read_cache_folio+0x1aa/0x590 [ 624.294354][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 624.299946][ T31] read_part_sector+0xb6/0x2b0 [ 624.304740][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 624.310142][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 624.315684][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 624.322062][ T31] bdev_disk_changed+0x75f/0x14b0 [ 624.327215][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 624.332681][ T31] ? wait_on_inode+0xc0/0x230 [ 624.337400][ T31] blkdev_get_whole+0x380/0x510 [ 624.342270][ T31] bdev_open+0x31e/0xd30 [ 624.346529][ T31] blkdev_open+0x3a8/0x510 [ 624.351469][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 624.356395][ T31] do_dentry_open+0x950/0x13f0 [ 624.361173][ T31] vfs_open+0x3b/0x340 [ 624.365238][ T31] ? path_openat+0x2ecd/0x3830 [ 624.370772][ T31] path_openat+0x2ee5/0x3830 [ 624.375388][ T31] ? arch_stack_walk+0xfc/0x150 [ 624.381046][ T31] ? stack_depot_save_flags+0x40/0x860 [ 624.386532][ T31] ? __pfx_path_openat+0x10/0x10 [ 624.391505][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.397614][ T31] do_filp_open+0x1fa/0x410 [ 624.402134][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 624.407764][ T31] ? _raw_spin_unlock+0x28/0x50 [ 624.412607][ T31] ? alloc_fd+0x64c/0x6c0 [ 624.416928][ T31] do_sys_openat2+0x121/0x1c0 [ 624.421620][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 624.427068][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.432304][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.437058][ T31] __x64_sys_openat+0x138/0x170 [ 624.442315][ T31] do_syscall_64+0xfa/0x3b0 [ 624.446810][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.452882][ T31] ? clear_bhb_loop+0x60/0xb0 [ 624.457569][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.463470][ T31] RIP: 0033:0x7fa5caea7407 [ 624.468309][ T31] RSP: 002b:00007ffd21131aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 624.476712][ T31] RAX: ffffffffffffffda RBX: 00007fa5cadb9880 RCX: 00007fa5caea7407 [ 624.484697][ T31] RDX: 00000000000a0800 RSI: 00005597c06d7f80 RDI: ffffffffffffff9c [ 624.492688][ T31] RBP: 00005597c06be910 R08: 0000000000000000 R09: 0000000000000000 [ 624.501496][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005597c06d2ba0 [ 624.509526][ T31] R13: 00005597c06cc190 R14: 0000000000000000 R15: 00005597c06d2ba0 [ 624.517559][ T31] [ 624.520614][ T31] INFO: task udevd:11181 blocked for more than 144 seconds. [ 624.528827][ T31] Not tainted syzkaller #0 [ 624.533775][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.542475][ T31] task:udevd state:D stack:22760 pid:11181 tgid:11181 ppid:5233 task_flags:0x400140 flags:0x00004006 [ 624.554482][ T31] Call Trace: [ 624.558595][ T31] [ 624.561531][ T31] __schedule+0x1798/0x4cc0 [ 624.566028][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.572369][ T31] ? __pfx___schedule+0x10/0x10 [ 624.577248][ T31] ? do_raw_spin_lock+0x121/0x290 [ 624.582275][ T31] ? schedule+0x91/0x360 [ 624.586502][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.591685][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.596440][ T31] ? lock_release+0x4b/0x3e0 [ 624.601037][ T31] schedule+0x165/0x360 [ 624.605180][ T31] io_schedule+0x80/0xd0 [ 624.609707][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 624.614991][ T31] ? lock_release+0x4b/0x3e0 [ 624.620166][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 624.625964][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 624.631531][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 624.638348][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 624.643694][ T31] do_read_cache_folio+0x1aa/0x590 [ 624.649548][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 624.655006][ T31] read_part_sector+0xb6/0x2b0 [ 624.659832][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 624.665220][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 624.671292][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 624.678831][ T31] bdev_disk_changed+0x75f/0x14b0 [ 624.683907][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 624.689437][ T31] ? wait_on_inode+0xc0/0x230 [ 624.694108][ T31] blkdev_get_whole+0x380/0x510 [ 624.699021][ T31] bdev_open+0x31e/0xd30 [ 624.703276][ T31] blkdev_open+0x3a8/0x510 [ 624.708301][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 624.713227][ T31] do_dentry_open+0x950/0x13f0 [ 624.718021][ T31] vfs_open+0x3b/0x340 [ 624.722095][ T31] ? path_openat+0x2ecd/0x3830 [ 624.726847][ T31] path_openat+0x2ee5/0x3830 [ 624.731475][ T31] ? arch_stack_walk+0xfc/0x150 [ 624.736317][ T31] ? stack_depot_save_flags+0x40/0x860 [ 624.742204][ T31] ? xfd_validate_state+0x6d/0x150 [ 624.747363][ T31] ? __pfx_path_openat+0x10/0x10 [ 624.752303][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.758398][ T31] do_filp_open+0x1fa/0x410 [ 624.762926][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 624.769876][ T31] ? _raw_spin_unlock+0x28/0x50 [ 624.775282][ T31] ? alloc_fd+0x64c/0x6c0 [ 624.779736][ T31] do_sys_openat2+0x121/0x1c0 [ 624.784457][ T31] ? __might_fault+0xb0/0x130 [ 624.789241][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.794450][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.800059][ T31] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 624.806138][ T31] __x64_sys_openat+0x138/0x170 [ 624.811020][ T31] do_syscall_64+0xfa/0x3b0 [ 624.815531][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.820320][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.826402][ T31] ? clear_bhb_loop+0x60/0xb0 [ 624.831833][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.837756][ T31] RIP: 0033:0x7fa5caea7407 [ 624.842169][ T31] RSP: 002b:00007ffd21131aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 624.850743][ T31] RAX: ffffffffffffffda RBX: 00007fa5cadb9880 RCX: 00007fa5caea7407 [ 624.859073][ T31] RDX: 00000000000a0800 RSI: 00005597c06d28f0 RDI: ffffffffffffff9c [ 624.867051][ T31] RBP: 00005597c06be910 R08: 0000000000000000 R09: 0000000000000000 [ 624.875188][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005597c06e4a40 [ 624.884045][ T31] R13: 00005597c06cc190 R14: 0000000000000000 R15: 00005597c06e4a40 [ 624.893173][ T31] [ 624.896282][ T31] INFO: lockdep is turned off. [ 624.901258][ T31] NMI backtrace for cpu 0 [ 624.901276][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 624.901298][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.901308][ T31] Call Trace: [ 624.901313][ T31] [ 624.901319][ T31] dump_stack_lvl+0x189/0x250 [ 624.901344][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.901363][ T31] ? __pfx__printk+0x10/0x10 [ 624.901391][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 624.901412][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 624.901430][ T31] ? __pfx__printk+0x10/0x10 [ 624.901451][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 624.901475][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 624.901494][ T31] watchdog+0xf93/0xfe0 [ 624.901516][ T31] ? watchdog+0x1de/0xfe0 [ 624.901539][ T31] kthread+0x70e/0x8a0 [ 624.901558][ T31] ? __pfx_watchdog+0x10/0x10 [ 624.901576][ T31] ? __pfx_kthread+0x10/0x10 [ 624.901596][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.901616][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.901635][ T31] ? __pfx_kthread+0x10/0x10 [ 624.901655][ T31] ret_from_fork+0x3f9/0x770 [ 624.901672][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 624.901690][ T31] ? __switch_to_asm+0x39/0x70 [ 624.901710][ T31] ? __switch_to_asm+0x33/0x70 [ 624.901729][ T31] ? __pfx_kthread+0x10/0x10 [ 624.901749][ T31] ret_from_fork_asm+0x1a/0x30 [ 624.901775][ T31] [ 624.901781][ T31] Sending NMI from CPU 0 to CPUs 1: [ 625.054020][ C1] NMI backtrace for cpu 1 [ 625.054038][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 625.054056][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.054065][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 625.054091][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 625.054105][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 625.054121][ C1] RAX: 5769140a132de600 RBX: ffffffff819683b8 RCX: 5769140a132de600 [ 625.054133][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 625.054145][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 625.054162][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38430 [ 625.054174][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 625.054184][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 625.054197][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.054208][ C1] CR2: 00002000000001b0 CR3: 000000001fe82000 CR4: 00000000003526f0 [ 625.054222][ C1] Call Trace: [ 625.054230][ C1] [ 625.054236][ C1] default_idle+0x13/0x20 [ 625.054254][ C1] default_idle_call+0x74/0xb0 [ 625.054270][ C1] do_idle+0x1e8/0x510 [ 625.054291][ C1] ? __pfx_do_idle+0x10/0x10 [ 625.054313][ C1] cpu_startup_entry+0x44/0x60 [ 625.054328][ C1] start_secondary+0x101/0x110 [ 625.054349][ C1] common_startup_64+0x13e/0x147 [ 625.054375][ C1] [ 625.055463][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 625.221339][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 625.230424][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.240459][ T31] Call Trace: [ 625.243740][ T31] [ 625.246666][ T31] dump_stack_lvl+0x99/0x250 [ 625.251242][ T31] ? __asan_memcpy+0x40/0x70 [ 625.255814][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.260987][ T31] ? __pfx__printk+0x10/0x10 [ 625.265566][ T31] vpanic+0x281/0x750 [ 625.269525][ T31] ? __pfx_vpanic+0x10/0x10 [ 625.274003][ T31] ? preempt_schedule+0xae/0xc0 [ 625.278832][ T31] ? preempt_schedule_common+0x83/0xd0 [ 625.284270][ T31] panic+0xb9/0xc0 [ 625.287975][ T31] ? __pfx_panic+0x10/0x10 [ 625.292369][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 625.297732][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 625.303899][ T31] watchdog+0xfd2/0xfe0 [ 625.308042][ T31] ? watchdog+0x1de/0xfe0 [ 625.312353][ T31] kthread+0x70e/0x8a0 [ 625.316400][ T31] ? __pfx_watchdog+0x10/0x10 [ 625.321054][ T31] ? __pfx_kthread+0x10/0x10 [ 625.325622][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.330800][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.335994][ T31] ? __pfx_kthread+0x10/0x10 [ 625.340563][ T31] ret_from_fork+0x3f9/0x770 [ 625.345137][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 625.350225][ T31] ? __switch_to_asm+0x39/0x70 [ 625.354977][ T31] ? __switch_to_asm+0x33/0x70 [ 625.359724][ T31] ? __pfx_kthread+0x10/0x10 [ 625.364295][ T31] ret_from_fork_asm+0x1a/0x30 [ 625.369041][ T31] [ 625.372204][ T31] Kernel Offset: disabled [ 625.376509][ T31] Rebooting in 86400 seconds..