last executing test programs: 1.950325354s ago: executing program 2 (id=6118): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000f4770027020300000002000000000000120000000004000000000000120200000000005f006100"], 0x0, 0x42, 0x0, 0x1}, 0x20) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast=0xe0000001}, {0x4e21, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x1, 0x0, @void}}}}}}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x4}}, @phonet={0x23, 0x4, 0xd, 0x3}, @phonet={0x23, 0x7, 0x4, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='pimreg\x00', 0x7fffffff, 0x0, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 1.940984806s ago: executing program 2 (id=6122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x108) 1.937081413s ago: executing program 0 (id=6124): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r4, 0x7) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.873518412s ago: executing program 2 (id=6127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x95) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x72b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc, 0x4, 0xd}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f00000000c0)) 1.821328377s ago: executing program 1 (id=6128): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x800000, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x600100a2, 0x0) 1.76866218s ago: executing program 0 (id=6129): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xfc, r0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "4f043ad8019f38af3c4677d51161f123e195378f8b924cd6"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "702d17686c666194d5c1417ee54f7b03930562770ecc227892e242160d3559839cef4ae9"}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept(r8, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x80) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="ecb72c61942b67ddf6dbdfdde3eea63f08a4605e7b6b162cb3ff2b58727b1e00cf2b898a2ffd9064", @ANYRES16=r1, @ANYBLOB="29082bbd7000fcdbdf254f0000005c007a801400020085960514548ef9c87f71fa357ae521720c00030050dba919090e1ebf080004004304000024000100051d9a96b6006c7500293fded444a172f3f6cebba3f194e86ba091949ab597770c000300ac232924662c38d120007a80080004000400000014000100615195181bc404fe8ee84bbfbf2daf5334007a801c00020005ee2a5485021d28ab5c525cce200077cda86e83a4afecc108000400000000000c00030083edc06fd66b08d6"], 0xc4}, 0x1, 0x0, 0x0, 0x2000000}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x9, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0xfffffffffffffdf3) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r7, r7, 0x2f}, 0x20) accept4$x25(r5, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x80800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback=r7, 0x1e, 0x0, 0x4, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x1e, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @func, @ldst={0x3, 0x2, 0x6, 0x3, 0x8, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @ldst={0x0, 0x3, 0x2, 0x5, 0x4, 0x18, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000940)='GPL\x00', 0x6, 0x57, &(0x7f00000009c0)=""/87, 0x40f00, 0x4, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r11]}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d40)={@ifindex, r13, 0x2f, 0x18, 0x4, @void, @value=r7, @void, @void, r12}, 0x20) 1.530265601s ago: executing program 2 (id=6132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x50, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f214d2674000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x2400c841) 1.434160647s ago: executing program 2 (id=6134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x946, 0xffffff3a, 0x0, 0x5, 0xfffffffe, 0x705}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x9}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x3aeca28006a6963a}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x1, 0x40, 0x8000, 0x1, 0x2}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x2}}]}}}]}, 0x9c}}, 0x8040) unshare(0x26020400) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000420004001c0012800c0001006d61637668616e000c00028008000900ffffffff140035004d6163766c616e300000000000000000"], 0x50}}, 0x8000) 1.025131175s ago: executing program 4 (id=6137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r0, 0x0, 0xd}, 0x18) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r3, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) 913.278974ms ago: executing program 3 (id=6138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r1) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x4, 0x1, @remote}]}, 0x44}}, 0x0) 910.096056ms ago: executing program 1 (id=6139): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRESHEX=r0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x24044084}, 0x48080) socket$netlink(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getpeername(r2, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRESHEX=r0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x24044084}, 0x48080) (async) 908.960852ms ago: executing program 4 (id=6140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x9, 0x164f, 0x0, @loopback, @private1, 0x8000, 0x717, 0x73d, 0x8000}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x9, 0x164f, 0x0, @loopback, @private1, 0x8000, 0x717, 0x73d, 0x8000}}) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000010c0)=@newchain={0x58c, 0x64, 0x401, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xb}, {0x9, 0x10}, {0x0, 0xf}}, [@f_rsvp={{0x9}, {0x14, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}, @f_tcindex={{0xc}, {0x53c, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xb, 0xc}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x2, 0xffe6}}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0x4a8, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x1, 0x2, 0xd, 0xcbb5, {0x6, 0x2, 0xb6d4, 0x7, 0x7f1, 0x3fc}, {0xff, 0x2, 0x2acb, 0x80, 0x7, 0x1}, 0x101, 0x5, 0x81}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x3, 0x1, 0x4, {0x2, 0x0, 0x401, 0xf, 0xe, 0x3}, {0xa, 0x0, 0x7ff, 0x80, 0xffff, 0xf5}, 0x10001, 0x0, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x0, 0xd97, 0x20, 0x9, 0x3ff, 0x8, 0x2, 0x0, 0x0, 0x4, 0x5, 0x9, 0x1d85, 0xffff, 0x7, 0x5, 0x5a, 0x4b, 0x5, 0x800, 0x3, 0x1, 0x1, 0xffffff01, 0x9, 0x200000, 0x7, 0x8, 0x5, 0x8, 0x3, 0xe, 0x0, 0x50000000, 0x6, 0x4, 0x551c, 0x0, 0x10, 0x7, 0x8, 0x2743, 0x2, 0x2, 0x39d2, 0x7, 0x9, 0x10001, 0x6b84, 0x4, 0x4, 0xffffffff, 0x40, 0x9, 0x6, 0x3, 0x8, 0x1ff, 0x7fff, 0x2c9f, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfffffff7, 0x800, 0xfff, 0x5, 0x7, 0x0, 0x8, 0xe, 0x0, 0x2, 0x1, 0x3, 0x6, 0x4, 0xa91, 0x10, 0xffffffff, 0x575e, 0x8, 0x4, 0x80, 0x1, 0x1ee, 0x5f7, 0x80, 0x10000, 0x8, 0x80, 0x2, 0x2, 0x6, 0x77af, 0xffff0001, 0x4, 0xfff, 0xf, 0x56, 0x2, 0x5, 0x7, 0x200, 0x9, 0x3, 0x4, 0x2, 0x2, 0xffff, 0x2, 0x0, 0x4, 0x52, 0x3, 0x59c079ec, 0x5, 0x1, 0x1, 0x6, 0x8, 0x5f81, 0x1, 0x70976025, 0x1000, 0xc899, 0x9, 0x100, 0x2, 0xc4, 0xf, 0x3, 0x3b, 0xfff, 0xfff, 0x5, 0x101, 0x9, 0x2, 0x5, 0x3, 0x7f, 0x401, 0xbba, 0xf5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x9, 0xfff, 0x101, 0xf, 0x81f9, 0x4, 0x1, 0x8, 0x3, 0x4, 0x5, 0x9, 0x5, 0xe1cb, 0xab1d, 0x749, 0x8, 0x1, 0x6, 0x8, 0x2, 0x2, 0x1, 0xffffab3f, 0x10001, 0xdaa, 0x2, 0x3e1, 0x100, 0xba, 0x40, 0xb48, 0x10001, 0x6, 0x8, 0x681, 0x9, 0x0, 0xfffffced, 0x7ff, 0x44a1, 0x1ff, 0x0, 0x3, 0x3229, 0x8, 0x4, 0x7, 0x3, 0x3, 0x4, 0x666, 0x200, 0xf6, 0x3, 0x10, 0x3ff, 0x100, 0x6, 0xffffffa7, 0x9, 0x9, 0x10c5, 0x0, 0x9, 0x4, 0x4, 0x1, 0x8000, 0x3, 0xc, 0xa, 0xf0ff, 0x7, 0x9, 0x7, 0x7, 0xed0a, 0xfffffffc, 0x3, 0x1, 0x6, 0x0, 0x255, 0x200, 0x8, 0x7, 0xffff8001, 0x2, 0x5, 0xc, 0x6, 0x6f3b, 0x7, 0x100, 0x7, 0x5, 0x6, 0x8, 0x7, 0x5d6d37d3, 0x1ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_TCINDEX_POLICE={0x78, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x600, 0x6, 0x8, 0x5, 0x4, {0x80, 0x3, 0x4, 0xff7f, 0x0, 0x1}, {0x0, 0x0, 0x30, 0x9, 0x8, 0x6}, 0x0, 0x7, 0xb}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x401}]}]}}]}, 0x58c}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004040) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="f1e626bd7000fbdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="04001300060012000400000006001000fd0000000a0006000802110000000000440081"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) (async) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="f1e626bd7000fbdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="04001300060012000400000006001000fd0000000a0006000802110000000000440081"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="0c009900090000005900000007000a008735dc001000508004000500080007000000000009000700e0321905c200000009000700843da00be300000008003700020000fcffffffffffffffc4c2000000"], 0x6c}, 0x1, 0x0, 0x0, 0x200080d1}, 0x8008) r10 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x624, 0x3b, 0x10, 0x70bd26, 0x25dfdbfc, {0x20}, [@nested={0xfb, 0x106, 0x0, 0x1, [@nested={0x4, 0x7e}, @generic="ef805ae16d9111c13c7d0ed8f08390062c03bd8740714ce2cd5f3cb43cfd2d36fe5b3c5127b440909dd14ea5c90556a9d78f0139f644d22214b798bb7d8bc36ad06b2a7cfa04f4e2bee5edebf0bafda666d57e4892e44d44ba8f3d2c7a07f32130efd0c33e8b67eefc6d3eca7a5c155fc3e5769521fe", @nested={0x4, 0xb7}, @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x26}, @nested={0x4, 0x49}, @generic="19c20c26709b3eb7366210b0c1e9b2", @generic="e7e8994da0ea38f0ceb7333775660a1a5d5afb38d0204980d185e0be73e66150505fbaec2061432d664250bafa1336aaed067750a0b62ab02c8d7a2f0760f259d75a240197a94db533c6218376d3"]}, @typed={0xd7, 0x46, 0x0, 0x0, @binary="ba7b0523f7af4fadac36fd32dd2decfb08366cb2511496f5d6ac74eeeaf0e5b41b0ab5024caf58e9c27d1e1b4d304fcc6e4f4115e5f54162301269d16b3dfc6fd7bb746f5ad6a4b553f9c4e3d623b2947f17367b66279311d1affb6f67a061bc0598db54a0362a0e2c6c3efe7003152a11d6de106937b37cd6160cb44d146e3b454405507c204f74313ac9f002b0d14dc6ecee5050c302957c157b90e2ea37e3096bd69797fd15a1aa777445577000f103a6e33d4451e56e3fefa35f0139bb352b88033372fcb9646cbc3850ebc5a34a74b9d2"}, @generic="6fb675da4c9af4d78d03ee1c02b92fef9ad5a85627ee8380f3f343257d1977f458355e72f435e934e350051501523a738f25b6d2a1a4f71cc15d23eb4f7cd8f8ba808cfa5008473c3fb376a9fa8ee524d9f6e03a59b834f33c6776c4bfb4", @typed={0x14, 0x11f, 0x0, 0x0, @ipv6=@local}, @generic="2093c4b2d9ce0e30143883484b5a35bc80fc826b1795ff774d777330a225c047d00b38c08e54a24da26929f96a3c80b804fc40386648e74d258e76cce6c277e6a78137314819621d0429f33b6ddb4c1b980f473894941e91817b2b7ccbcbf5b7ac044c5320759fd106d81461125a2b006e5debda786e327f1d8f5f742ff0880f31ea3e330cf6fd2084817ed5f8de2e9303b4f5b9716316b77f1d0fe92359c9181ec107abbf58ecc2e7a7c6fa4272556ea7d137b807e8d736a839422b0d166718de90252d2a276d5e9bee6a6370fc8b0a94d8a5885882626a02", @nested={0x20e, 0xf5, 0x0, 0x1, [@nested={0x4, 0xfb}, @nested={0x4, 0xcc}, @generic="542ec14d1fe4b528fba1fabafcfab63c00c4ae2841ebe3abaf726282ccad89893538303297f8066bbab3daaf57129e36e3ffc887c798fc6dbbbff529", @generic="ad03a4b6d95153fefed71f49718733b6368f3b736c0d49f3895078ed742db7f11d927384c9e0232f46df7be56beb281336c8fde15310dc9da5b31b6cecb5dd7b37ad5a794b8c2187973f6cceeff0a380095d2df99627abc69e1ce53753a1483c4125d4fd9f246d10685cf3b6a58abe2a", @typed={0x8, 0x9, 0x0, 0x0, @pid=r10}, @typed={0x7, 0x83, 0x0, 0x0, @str=',)\x00'}, @generic="5fe95f53f562cf60661dd5694843e4c46b2ba2f61c3dac51f621c268d7afced8fa8d31784f453d92601ddf61795b835acefb4b53db2f97533e6797d80e5e5914eff0e52f9a8c06daaf7b7b5f72d065440426c3c94ae6592380af70f1c0eb46ae2ab79f4eddea59a9c215acbcd5639cf94ee1da37ac147969768de3a553435e5522a34d60b3e04898b1e0db22131c142bc643", @generic="5616bccf23", @generic="4361e6fc00eb9f61ad3b2d8478d1236db0ebdcfb41582a1ea0d653e4870cd98b9380a43537d7f0a597d3f9e0599e926d205317806c0366406b18106b7a7188a877a42c4a3aa950ac7dd24c3a9ee07182e4e002c46782746830ade1511e3be48b29cec7a217ec77090d7959ae849a8c8741fa719f56e67fd776e0a559444b686dfc389d35cf415a763a4d957550ebdb8699b77a985279f360f70c38d4d3734d084b923c61b6d381fc1472c36155cfb0"]}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x8c99}, @generic="6d8918694abe9839ebcb79e09e5348bd5934f33297d90aa9c122c8168bdad5c7895a430ca0f43e19511c5a8961788e70da9cc486d2857f96f774ccc51d3d874953c82a8099621d113e0f9e21836076c2f41c743edf2ca514823eb1052dc257b0a538860bb1abddf12c68ee0e7fe00a4007294c28e2e60dc844375e20f8b4efe2f08eaab868235d0f17734ee018a95f255c163b85249e50cdb8a1e2ba21c2aaf86d73a6d323f7f7beb84597f6d537070f81594a39a86d794d12e79228a5ab7480cac655b4c461b3de28f3fa4400", @typed={0x8, 0x128, 0x0, 0x0, @u32=0x8}]}, 0x624}}, 0x24040000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x624, 0x3b, 0x10, 0x70bd26, 0x25dfdbfc, {0x20}, [@nested={0xfb, 0x106, 0x0, 0x1, [@nested={0x4, 0x7e}, @generic="ef805ae16d9111c13c7d0ed8f08390062c03bd8740714ce2cd5f3cb43cfd2d36fe5b3c5127b440909dd14ea5c90556a9d78f0139f644d22214b798bb7d8bc36ad06b2a7cfa04f4e2bee5edebf0bafda666d57e4892e44d44ba8f3d2c7a07f32130efd0c33e8b67eefc6d3eca7a5c155fc3e5769521fe", @nested={0x4, 0xb7}, @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x26}, @nested={0x4, 0x49}, @generic="19c20c26709b3eb7366210b0c1e9b2", @generic="e7e8994da0ea38f0ceb7333775660a1a5d5afb38d0204980d185e0be73e66150505fbaec2061432d664250bafa1336aaed067750a0b62ab02c8d7a2f0760f259d75a240197a94db533c6218376d3"]}, @typed={0xd7, 0x46, 0x0, 0x0, @binary="ba7b0523f7af4fadac36fd32dd2decfb08366cb2511496f5d6ac74eeeaf0e5b41b0ab5024caf58e9c27d1e1b4d304fcc6e4f4115e5f54162301269d16b3dfc6fd7bb746f5ad6a4b553f9c4e3d623b2947f17367b66279311d1affb6f67a061bc0598db54a0362a0e2c6c3efe7003152a11d6de106937b37cd6160cb44d146e3b454405507c204f74313ac9f002b0d14dc6ecee5050c302957c157b90e2ea37e3096bd69797fd15a1aa777445577000f103a6e33d4451e56e3fefa35f0139bb352b88033372fcb9646cbc3850ebc5a34a74b9d2"}, @generic="6fb675da4c9af4d78d03ee1c02b92fef9ad5a85627ee8380f3f343257d1977f458355e72f435e934e350051501523a738f25b6d2a1a4f71cc15d23eb4f7cd8f8ba808cfa5008473c3fb376a9fa8ee524d9f6e03a59b834f33c6776c4bfb4", @typed={0x14, 0x11f, 0x0, 0x0, @ipv6=@local}, @generic="2093c4b2d9ce0e30143883484b5a35bc80fc826b1795ff774d777330a225c047d00b38c08e54a24da26929f96a3c80b804fc40386648e74d258e76cce6c277e6a78137314819621d0429f33b6ddb4c1b980f473894941e91817b2b7ccbcbf5b7ac044c5320759fd106d81461125a2b006e5debda786e327f1d8f5f742ff0880f31ea3e330cf6fd2084817ed5f8de2e9303b4f5b9716316b77f1d0fe92359c9181ec107abbf58ecc2e7a7c6fa4272556ea7d137b807e8d736a839422b0d166718de90252d2a276d5e9bee6a6370fc8b0a94d8a5885882626a02", @nested={0x20e, 0xf5, 0x0, 0x1, [@nested={0x4, 0xfb}, @nested={0x4, 0xcc}, @generic="542ec14d1fe4b528fba1fabafcfab63c00c4ae2841ebe3abaf726282ccad89893538303297f8066bbab3daaf57129e36e3ffc887c798fc6dbbbff529", @generic="ad03a4b6d95153fefed71f49718733b6368f3b736c0d49f3895078ed742db7f11d927384c9e0232f46df7be56beb281336c8fde15310dc9da5b31b6cecb5dd7b37ad5a794b8c2187973f6cceeff0a380095d2df99627abc69e1ce53753a1483c4125d4fd9f246d10685cf3b6a58abe2a", @typed={0x8, 0x9, 0x0, 0x0, @pid=r10}, @typed={0x7, 0x83, 0x0, 0x0, @str=',)\x00'}, @generic="5fe95f53f562cf60661dd5694843e4c46b2ba2f61c3dac51f621c268d7afced8fa8d31784f453d92601ddf61795b835acefb4b53db2f97533e6797d80e5e5914eff0e52f9a8c06daaf7b7b5f72d065440426c3c94ae6592380af70f1c0eb46ae2ab79f4eddea59a9c215acbcd5639cf94ee1da37ac147969768de3a553435e5522a34d60b3e04898b1e0db22131c142bc643", @generic="5616bccf23", @generic="4361e6fc00eb9f61ad3b2d8478d1236db0ebdcfb41582a1ea0d653e4870cd98b9380a43537d7f0a597d3f9e0599e926d205317806c0366406b18106b7a7188a877a42c4a3aa950ac7dd24c3a9ee07182e4e002c46782746830ade1511e3be48b29cec7a217ec77090d7959ae849a8c8741fa719f56e67fd776e0a559444b686dfc389d35cf415a763a4d957550ebdb8699b77a985279f360f70c38d4d3734d084b923c61b6d381fc1472c36155cfb0"]}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x8c99}, @generic="6d8918694abe9839ebcb79e09e5348bd5934f33297d90aa9c122c8168bdad5c7895a430ca0f43e19511c5a8961788e70da9cc486d2857f96f774ccc51d3d874953c82a8099621d113e0f9e21836076c2f41c743edf2ca514823eb1052dc257b0a538860bb1abddf12c68ee0e7fe00a4007294c28e2e60dc844375e20f8b4efe2f08eaab868235d0f17734ee018a95f255c163b85249e50cdb8a1e2ba21c2aaf86d73a6d323f7f7beb84597f6d537070f81594a39a86d794d12e79228a5ab7480cac655b4c461b3de28f3fa4400", @typed={0x8, 0x128, 0x0, 0x0, @u32=0x8}]}, 0x624}}, 0x24040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) ioctl$sock_SIOCINQ(r13, 0x541b, &(0x7f00000000c0)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r11, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "e765"}]}, 0x30}}, 0x0) 871.497007ms ago: executing program 3 (id=6141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x20008000) unshare(0xc040480) (async) unshare(0xc040480) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001380)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000001300)={0x4c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000830}, 0xc000) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x3e}}, @ip_tos_u8={{0x24, 0x29, 0x3b}}, @ip_tos_u8], 0x50}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 823.15852ms ago: executing program 0 (id=6142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) 753.39859ms ago: executing program 1 (id=6143): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 729.342606ms ago: executing program 3 (id=6144): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0x5}, {0xb, 0x7}, {0x0, 0xe}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xdc, 0x5, 0x9, 0x6, 0x0, 0x5e, 0x400, 0x6}}, {0x10, 0x2, [0x5c4, 0x1ff, 0x1, 0x1000, 0x4, 0xfbff]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', r3, 0x4, 0xe, 0xc6, 0x6, 0x0, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x6, 0x6}}) (async) socket$kcm(0xa, 0x3, 0x87) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r5 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 702.420057ms ago: executing program 4 (id=6145): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000280), &(0x7f0000001300)=""/4096, &(0x7f00000002c0)="f5d9e8eb1357fe78a34bed37df8c894c8573aa0c240f2d2e055ddf7bfe3c4d2d4c480b4f25fc54fe1afaefdfce729f5518876e6cd94f125482a06033efb4837bee3734ecea23f4818632d4bd7ba098fddcad952cbde7be2eac36acd36243f62894dbbfb6242f087b9c764176530943fef81c27f255f100caea41c5045edf9803e779fb0060d1caae224299e5a16034f37d7f048312d4e49588d65ddabc786dfe177bda32780e2f045ec00389fd2bd30a982484c668db8be86ea0f3fcce239898c3cd8f8d1d367e10def9e74c23a6c19a05", &(0x7f00000003c0)="95e6d516d7cd33e48c8bc4deeab859c5672904e5b24eb143aa7f649c646897fbcc7cc4d1e2b583aa33c059395941563daac20c5846343b7db494f624c51306b7075a62f2bdb96627ef933bba7af61ecae98ebb583b6c37f6e88475af9b1bcb2f629a745a0c4f5141a9f61a15f4af4eff407dfefb5248e23454db0f58f5", 0x1, r0, 0x4}, 0x38) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) 629.40732ms ago: executing program 0 (id=6146): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0xa, 0x7f, 0x9, 0x10, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x32, 0x80, 0x0, @in6={0xa, 0x4e24, 0x6ca, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, @sadb_x_sa2={0x2, 0x13, 0x66, 0x0, 0x0, 0x70bd2b, 0x3501}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in={0x2, 0x4e20, @broadcast}}]}, 0x80}}, 0x4000050) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f0000000380)=""/41, 0x29}], 0x4}, 0x2000000}], 0x2, 0x40000123, 0x0) 578.324494ms ago: executing program 1 (id=6147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x8, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x2, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240088e0}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 492.134716ms ago: executing program 0 (id=6148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x4}, @TCA_CODEL_CE_THRESHOLD={0xffffffffffffff79}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa45, 0xcd78, 0x2, 0x5, 0x9, 0x8, 0x7, 0x80000001, 0x8, 0x7fffffff, 0x3, 0x10000, 0x8, 0x2, 0x0, 0x671, 0x7fffffff, 0x1ff, 0x8, 0x1ff, 0x8, 0x0, 0x1, 0x0, 0x101, 0x6, 0x4, 0x92f2, 0x1, 0x8, 0x0, 0x8001, 0x3, 0x1ff, 0x5, 0xfffffffb, 0x7f, 0x80000001, 0x8, 0x0, 0x8, 0x3, 0x8, 0x4, 0xfffffffa, 0x9, 0xb02, 0x9c8, 0x1, 0x7fff, 0x4, 0x9, 0xe, 0x66c, 0x6, 0x5, 0x1, 0x7, 0x4, 0x7, 0xff, 0x0, 0x7ff, 0x9, 0x2, 0xbe9, 0x8, 0x2, 0x401, 0x80000000, 0x10000, 0x4, 0x5, 0x9, 0x9, 0x7, 0x9, 0x7, 0x4c089cff, 0x8, 0x7, 0x7, 0x3, 0xf, 0x0, 0x8, 0x7d, 0xf, 0x7, 0x5, 0x1000, 0x80000001, 0xb8, 0x16, 0x5, 0xffff, 0x6151, 0x6, 0x0, 0x9b7, 0x56, 0x3, 0x1, 0x3, 0x3, 0x1, 0x40, 0x6, 0x9, 0x8, 0x6, 0xff27, 0xfffff800, 0xfff, 0x3, 0x5, 0x6, 0x1800000, 0xffff0566, 0xa, 0x3ff, 0xa, 0x7, 0x6ff3, 0xffffffff, 0x9d34, 0x83f, 0x0, 0x3, 0x2, 0x40, 0x9, 0x3, 0x6, 0x3ff, 0x0, 0xcf65, 0x1, 0x6, 0x5, 0xb7d, 0x0, 0x8, 0xe1, 0x1ff, 0x7ff, 0x249, 0x3, 0x3, 0x9, 0x8001, 0x8, 0x0, 0xfff, 0xb0, 0xffff7c98, 0x800, 0xf9, 0x2, 0xfffffff9, 0x1, 0x80000001, 0x6, 0x1000, 0x0, 0x9, 0x1000, 0x1, 0xef, 0x80, 0x3, 0x7, 0x10000, 0x3, 0x8c2, 0x5, 0x7f106ec6, 0x8, 0xe0a, 0x9, 0x101, 0x8, 0x3, 0x0, 0x26, 0x2, 0xa, 0x1, 0x507a5961, 0x800, 0x85, 0x80000001, 0x6, 0x4, 0x3, 0x2, 0x1, 0xfffffff9, 0x200, 0x1000, 0xff, 0x81, 0x9, 0x9, 0x5, 0xfab, 0x55, 0x7, 0xffff0062, 0x2b, 0x8000, 0x6, 0x9, 0x2, 0x4, 0x4, 0x9, 0x1000, 0x6, 0xffff5339, 0x1, 0x1, 0xc, 0x0, 0x4, 0x4, 0x39ee, 0x151, 0x5, 0x2, 0x5, 0x2, 0xfffffffe, 0x483a, 0x2, 0x100, 0x1, 0x2, 0x0, 0x80000001, 0x0, 0x9, 0x6, 0x5, 0x6, 0xcaf9, 0x8, 0x0, 0xfffffffc, 0x10000, 0x401, 0x2, 0x7, 0x7fffffff, 0x80000001, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x2, 0x3, 0x0, {0x5, 0x1, 0x0, 0x4, 0xad, 0x7f}, {0x1, 0x1, 0x3ff, 0x0, 0x5, 0x2}, 0x401, 0xc}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1000, 0x9, 0x3, 0x8, 0x2, 0x7, 0x100, 0x8, 0x4, 0x6, 0x89, 0x9, 0x10000, 0x4, 0xa4, 0x8a, 0x7, 0x9, 0x7800000, 0x3, 0x8, 0x5, 0xf5fd, 0x8fd3, 0x6, 0xffff0001, 0x401, 0x1, 0x72ff, 0x1, 0x3, 0xd77, 0x1, 0x6, 0x6, 0xa, 0x0, 0x3, 0x2, 0x6a, 0x6, 0xfffffff9, 0x0, 0x3, 0x7, 0x0, 0x200, 0x5, 0xd6, 0x3, 0x4, 0x1000, 0x5d, 0x5, 0x5, 0x200, 0x8, 0x10001, 0x8, 0xfffffffd, 0x6c75, 0x900, 0x4, 0x10000, 0x4c4, 0xa, 0x0, 0x2, 0xd, 0x6, 0x5, 0x273, 0x10, 0xfffffffc, 0x3, 0x7, 0x7, 0x8, 0xfffffffa, 0x80, 0xc, 0x1, 0xffffffff, 0x1, 0x10001, 0x3, 0x9, 0x8, 0x8, 0x17, 0x9, 0x7fffffff, 0x4, 0x0, 0x7cdc8a2b, 0xc0000, 0x7, 0x8, 0x7, 0xffff, 0x1, 0x1, 0x6, 0x4, 0x6, 0x7, 0x7fffffff, 0x4, 0x2c1df2ce, 0x18000000, 0x83cc, 0x0, 0x1, 0x5, 0x1, 0xb, 0x4, 0x7fff, 0x9, 0x6, 0x8, 0x3, 0x0, 0x53a6, 0x80000000, 0x6, 0x6, 0x1, 0x3, 0x8, 0x1000, 0x0, 0x6, 0x4, 0x7d28, 0x6, 0x3, 0x2, 0x28, 0x80, 0x971e, 0x6, 0x8001, 0x9, 0xb, 0x0, 0x4, 0x5, 0xfd2a, 0x8, 0x5, 0x9, 0x100, 0x1, 0x6, 0x5, 0x7ca, 0x8, 0x1, 0x3, 0x4, 0x3, 0xfffffffd, 0x1, 0x8, 0x0, 0xfffffff3, 0x97, 0x8, 0x7f, 0xd2, 0x9, 0x0, 0x5, 0x3, 0x2, 0xffffff36, 0x0, 0x3, 0x507, 0x800, 0x0, 0x8, 0x0, 0x6, 0x8a97, 0x0, 0x4, 0x200, 0xffffffc0, 0xfc61, 0x8, 0x8, 0x5, 0x80, 0x80000000, 0x8, 0x713bd693, 0x5a26f4fd, 0xffffffff, 0x9, 0x4, 0x0, 0x2a5ffce4, 0x5e, 0x9283, 0x5, 0x6, 0x7fff, 0x8, 0x1edc, 0x8001, 0x9, 0x6, 0x401, 0xfffffffc, 0x0, 0xd82, 0x2, 0xff, 0x7fff, 0x1, 0x0, 0x1, 0xf901, 0xd, 0x9, 0x5, 0x3, 0x4, 0xffffffff, 0x80000000, 0x7ff, 0x6, 0xf80b, 0x10000, 0x0, 0x2, 0x806, 0x5, 0x3c, 0x9, 0xfffff129, 0x2, 0x21075f57, 0xff, 0x0, 0xe142, 0x5f, 0x8, 0xfffffff9, 0x5, 0x7, 0x9, 0x100]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x0, 0xfff1}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000001180)={'hsr0\x00'}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) sendto$inet6(r1, &(0x7f0000001080)="6937074b1349a11197f3df7798dc2d63bac886cf6dabd50ceebb2a9d98342b722e260b7175d70d3586cf1a828a96444c7356ef24a909567f524bb7db857311db6ebfeaa0db7558836ae8494725056a634e43bb2dd561785d70d7ab0013b5eefee9bfc89dfabb1902f676a928a047d700adaa3db1b35b5b964c1867e4f958205cc0dfa592bf38af448c69323374ab2ae876add85637108927242bd01e60e0627672ac1fa301c78cf06c5dc29562e57e76", 0xb0, 0x20004010, &(0x7f0000001140)={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) ppoll(&(0x7f0000000040)=[{r7, 0x8000}, {0xffffffffffffffff, 0x45c0}], 0x2, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x26, 0xffffffffffffff34) socket$inet6_sctp(0xa, 0x5, 0x84) 491.362423ms ago: executing program 4 (id=6149): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 421.32572ms ago: executing program 3 (id=6150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00010000ac0000002c00128007000000000000006e6c00001c000280050004000300000008001400080000000800070000000100"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 420.815977ms ago: executing program 2 (id=6151): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, 0x0, 0x0, 0x40000714, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000080)=0x400000, 0x4) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 287.009762ms ago: executing program 4 (id=6152): r0 = socket(0x400000000010, 0x6, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000001240)="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", 0x108) socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) 227.083848ms ago: executing program 3 (id=6153): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000040)=@raw=[@exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 169.362616ms ago: executing program 4 (id=6154): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500382c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b0002"], 0x0) r1 = socket(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xb, &(0x7f00000000c0)=@raw=[@exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0xdb, &(0x7f0000000200)=""/219, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x9, 0xffffffff, 0x401}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff]}, 0x94) vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000480)="1395e938b6b03eb919a01e628df06d1714b449a8c2413c3877010822a993eddc0cc62fc0423dafc4149b1874d4ee5dfc39cbf21cea942cab5df428f841825fb5207f7294ee44cd696809f5047ea474e7926caf9afaa41231d0e2d516f19f54081db72c827b106fb6abc7c4729a25002cac0852d6452d502b95c6b58fd8c3fa2b4b309036a2627cd75d3bc94555878f6a1a508080b8edce095e6998bf5e1bdde8f61504839a1805841a62d605", 0xac}, {&(0x7f0000000540)="0465ae26ced76dcb63a04cbfe0c55bb7609e83dd635810b607a36c66b1574d531dd272a70e8cbb1ffa08b58d5fa97ec782b72f6e7f9b711f24198733a9995c4786c99aa3bd5050d40f664095fa2acae10c9d4c5cd38c97a8c57e700a0a892d9c9e85472135a6427d1b873e0199868c2eeacc383441e4941f5d437f18c6aa2bbc3d7891ef6410f8cca4e9fc83248511042b73d0dd0173778f6ad5e85413b4c54ba2afdc978e8fa2a9db3546b71ee7e70ae1ac9040e907b5a4f0811d4cefb406a56f2f25f052166cb9e20aa51a114a9261aa480ee587b68658c0842f4d5b7a47d9994da9b1c249d1259e24e64f86a1996b0835dd84f5f5bc", 0xf7}, {&(0x7f0000000640)="cf34e15ec427d3d0ca55bd598f0fbb02effcc893c16e4571a4c02689563e4587564b72aa8b26e6702bf30cdda0460506590454697721e1a80c8b857093d67d73b31954a09b1d6fff5811251ce3adf7ada3622f784f577db1b8d9fdb2b85d1a62acc5a475bbe129fc208794a275b42b8bde0bcb28e0f6ca92e218a40491cbbc3b204d5ca08aa13ec571e733a972c636e1ba6fa0c5b42888dc321264f591", 0x9d}, {&(0x7f0000000700)}, {&(0x7f0000000740)="cbe6d71f4579515ba2239348f384e14db00f715f3899144d3fcd5cc27c53a8440f55fe1f96f539032a44ed1cf18940f583a1e2b1355fe6", 0x37}], 0x5, 0x5) 164.265012ms ago: executing program 1 (id=6155): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f0000000ac0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x8000}) 78.7614ms ago: executing program 3 (id=6156): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x4e}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.031287ms ago: executing program 1 (id=6157): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 0s ago: executing program 0 (id=6158): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r5) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r6, 0x911, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x3002, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200), 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r0, 0x100000000) kernel console output (not intermixed with test programs): nk: 128 bytes leftover after parsing attributes in process `syz.0.4223'. [ 427.413397][T19618] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4223'. [ 427.439719][T19616] ip6erspan1: entered promiscuous mode [ 427.461524][T19616] ip6erspan1: entered allmulticast mode [ 427.597998][T19628] netlink: 'syz.1.4228': attribute type 1 has an invalid length. [ 427.668150][T19634] netlink: 'syz.0.4229': attribute type 1 has an invalid length. [ 427.698770][T19638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4227'. [ 427.815311][T19634] gretap1: entered promiscuous mode [ 427.827813][T19645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4231'. [ 427.837483][T19647] netlink: 'syz.1.4233': attribute type 5 has an invalid length. [ 427.991009][T19654] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4236'. [ 428.480018][T19681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.653454][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4252'. [ 428.672963][T19696] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 428.704087][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4252'. [ 428.728881][T19704] veth1_to_bond: entered allmulticast mode [ 428.732996][T19697] netlink: 'syz.4.4252': attribute type 15 has an invalid length. [ 428.855432][T19704] delete_channel: no stack [ 428.890888][T19704] veth1_to_bond: left allmulticast mode [ 428.976802][T19722] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4257'. [ 429.007234][T19722] block nbd0: reconnected socket [ 429.026593][T19722] nbd: socks must be embedded in a SOCK_ITEM attr [ 429.056742][ T5839] block nbd0: Receive control failed (result -32) [ 429.145209][ T8847] bridge_slave_0: left allmulticast mode [ 429.172618][ T8847] bridge_slave_0: left promiscuous mode [ 429.182672][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4260'. [ 429.196679][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.507210][T19750] FAULT_INJECTION: forcing a failure. [ 429.507210][T19750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.522192][T19750] CPU: 1 UID: 0 PID: 19750 Comm: syz.2.4266 Not tainted syzkaller #0 PREEMPT(full) [ 429.522221][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.522234][T19750] Call Trace: [ 429.522242][T19750] [ 429.522250][T19750] dump_stack_lvl+0x189/0x250 [ 429.522282][T19750] ? __pfx____ratelimit+0x10/0x10 [ 429.522306][T19750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.522332][T19750] ? __pfx__printk+0x10/0x10 [ 429.522352][T19750] ? __might_fault+0xb0/0x130 [ 429.522391][T19750] should_fail_ex+0x414/0x560 [ 429.522425][T19750] _copy_from_iter+0x1de/0x1790 [ 429.522453][T19750] ? rcu_is_watching+0x15/0xb0 [ 429.522479][T19750] ? kmalloc_reserve+0xbd/0x290 [ 429.522509][T19750] ? __pfx__copy_from_iter+0x10/0x10 [ 429.522532][T19750] ? __build_skb_around+0x262/0x3f0 [ 429.522565][T19750] ? netlink_sendmsg+0x642/0xb30 [ 429.522580][T19750] ? skb_put+0x11b/0x210 [ 429.522601][T19750] netlink_sendmsg+0x6b2/0xb30 [ 429.522628][T19750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.522662][T19750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 429.522692][T19750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.522710][T19750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.522741][T19750] __sock_sendmsg+0x21c/0x270 [ 429.522769][T19750] ____sys_sendmsg+0x505/0x830 [ 429.522795][T19750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.522825][T19750] ? import_iovec+0x74/0xa0 [ 429.522852][T19750] ___sys_sendmsg+0x21f/0x2a0 [ 429.522875][T19750] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.522931][T19750] ? __fget_files+0x2a/0x420 [ 429.522961][T19750] ? __fget_files+0x3a0/0x420 [ 429.522990][T19750] __x64_sys_sendmsg+0x19b/0x260 [ 429.523013][T19750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.523043][T19750] ? __pfx_ksys_write+0x10/0x10 [ 429.523075][T19750] ? do_syscall_64+0xbe/0xfa0 [ 429.523105][T19750] do_syscall_64+0xfa/0xfa0 [ 429.523129][T19750] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.523154][T19750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.523172][T19750] ? clear_bhb_loop+0x60/0xb0 [ 429.523196][T19750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.523216][T19750] RIP: 0033:0x7f42f2f8efc9 [ 429.523234][T19750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.523251][T19750] RSP: 002b:00007f42f3f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.523272][T19750] RAX: ffffffffffffffda RBX: 00007f42f31e5fa0 RCX: 00007f42f2f8efc9 [ 429.523287][T19750] RDX: 0000000000008000 RSI: 0000200000003e80 RDI: 0000000000000003 [ 429.523298][T19750] RBP: 00007f42f3f13090 R08: 0000000000000000 R09: 0000000000000000 [ 429.523310][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.523322][T19750] R13: 00007f42f31e6038 R14: 00007f42f31e5fa0 R15: 00007ffd93ec52f8 [ 429.523354][T19750] [ 429.839469][ T56] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 180 seconds [ 429.860305][ T56] block nbd0: Possible stuck request ffff8880251e01c0: control (read@1024,1024B). Runtime 180 seconds [ 429.873474][ T56] block nbd0: Possible stuck request ffff8880251e0380: control (read@2048,1024B). Runtime 180 seconds [ 429.884826][ T56] block nbd0: Possible stuck request ffff8880251e0540: control (read@3072,1024B). Runtime 180 seconds [ 429.902740][ T56] block nbd0: Dead connection, failed to find a fallback [ 431.278012][ T8847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.288285][ T8847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.298541][ T8847] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 431.309998][ T8847] bond0 (unregistering): Released all slaves [ 431.325407][ T8847] bond1 (unregistering): Released all slaves [ 431.342789][ T8847] bond2 (unregistering): Released all slaves [ 431.357674][ T8847] bond3 (unregistering): (slave bond4): Releasing backup interface [ 431.367981][ T8847] bond3 (unregistering): Released all slaves [ 431.476325][ T8847] bond4 (unregistering): Released all slaves [ 431.691808][ T8847] 9: left promiscuous mode [ 431.762658][T19770] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 431.813496][ T8847] tipc: Disabling bearer [ 431.839818][ T8847] tipc: Left network mode [ 431.853523][T19771] tipc: Enabled bearer , priority 0 [ 431.872487][T19771] syzkaller0: entered promiscuous mode [ 431.878033][T19771] syzkaller0: entered allmulticast mode [ 431.990379][T19780] batadv0: entered allmulticast mode [ 432.017053][T19771] tipc: Resetting bearer [ 432.038756][T19769] tipc: Resetting bearer [ 432.071245][T19769] tipc: Disabling bearer [ 432.083388][T19787] FAULT_INJECTION: forcing a failure. [ 432.083388][T19787] name failslab, interval 1, probability 0, space 0, times 0 [ 432.097126][T19787] CPU: 1 UID: 0 PID: 19787 Comm: syz.2.4277 Not tainted syzkaller #0 PREEMPT(full) [ 432.097156][T19787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 432.097170][T19787] Call Trace: [ 432.097178][T19787] [ 432.097187][T19787] dump_stack_lvl+0x189/0x250 [ 432.097222][T19787] ? __pfx____ratelimit+0x10/0x10 [ 432.097248][T19787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.097278][T19787] ? __pfx__printk+0x10/0x10 [ 432.097306][T19787] ? __lock_acquire+0xab9/0xd20 [ 432.097335][T19787] should_fail_ex+0x414/0x560 [ 432.097374][T19787] should_failslab+0xa8/0x100 [ 432.097398][T19787] kmem_cache_alloc_noprof+0x74/0x6e0 [ 432.097429][T19787] ? skb_clone+0x212/0x3a0 [ 432.097459][T19787] skb_clone+0x212/0x3a0 [ 432.097486][T19787] __netlink_deliver_tap+0x404/0x850 [ 432.097534][T19787] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.097568][T19787] netlink_deliver_tap+0x19c/0x1b0 [ 432.097602][T19787] netlink_unicast+0x7fa/0x9e0 [ 432.097641][T19787] ? __pfx_netlink_unicast+0x10/0x10 [ 432.097673][T19787] ? netlink_sendmsg+0x642/0xb30 [ 432.097690][T19787] ? skb_put+0x11b/0x210 [ 432.097714][T19787] netlink_sendmsg+0x805/0xb30 [ 432.097744][T19787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.097782][T19787] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.097816][T19787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.097837][T19787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.097870][T19787] __sock_sendmsg+0x21c/0x270 [ 432.097901][T19787] ____sys_sendmsg+0x505/0x830 [ 432.097930][T19787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.097961][T19787] ? import_iovec+0x74/0xa0 [ 432.097992][T19787] ___sys_sendmsg+0x21f/0x2a0 [ 432.098022][T19787] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.098085][T19787] ? __fget_files+0x2a/0x420 [ 432.098106][T19787] ? __fget_files+0x3a0/0x420 [ 432.098137][T19787] __x64_sys_sendmsg+0x19b/0x260 [ 432.098164][T19787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.098198][T19787] ? __pfx_ksys_write+0x10/0x10 [ 432.098233][T19787] ? do_syscall_64+0xbe/0xfa0 [ 432.098264][T19787] do_syscall_64+0xfa/0xfa0 [ 432.098290][T19787] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.098318][T19787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.098339][T19787] ? clear_bhb_loop+0x60/0xb0 [ 432.098365][T19787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.098385][T19787] RIP: 0033:0x7f42f2f8efc9 [ 432.098404][T19787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.098422][T19787] RSP: 002b:00007f42f3f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.098446][T19787] RAX: ffffffffffffffda RBX: 00007f42f31e5fa0 RCX: 00007f42f2f8efc9 [ 432.098461][T19787] RDX: 0000000000008000 RSI: 0000200000003e80 RDI: 0000000000000003 [ 432.098475][T19787] RBP: 00007f42f3f13090 R08: 0000000000000000 R09: 0000000000000000 [ 432.098489][T19787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.098501][T19787] R13: 00007f42f31e6038 R14: 00007f42f31e5fa0 R15: 00007ffd93ec52f8 [ 432.098537][T19787] [ 432.903211][T19815] __nla_validate_parse: 2 callbacks suppressed [ 432.903232][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4285'. [ 433.188122][T19827] FAULT_INJECTION: forcing a failure. [ 433.188122][T19827] name failslab, interval 1, probability 0, space 0, times 0 [ 433.234781][T19827] CPU: 0 UID: 0 PID: 19827 Comm: syz.2.4288 Not tainted syzkaller #0 PREEMPT(full) [ 433.234814][T19827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.234828][T19827] Call Trace: [ 433.234837][T19827] [ 433.234847][T19827] dump_stack_lvl+0x189/0x250 [ 433.234883][T19827] ? __pfx____ratelimit+0x10/0x10 [ 433.234911][T19827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.234940][T19827] ? __pfx__printk+0x10/0x10 [ 433.234969][T19827] ? __pfx___might_resched+0x10/0x10 [ 433.234991][T19827] ? fs_reclaim_acquire+0x7d/0x100 [ 433.235029][T19827] should_fail_ex+0x414/0x560 [ 433.235067][T19827] should_failslab+0xa8/0x100 [ 433.235090][T19827] __kmalloc_noprof+0xcb/0x7f0 [ 433.235119][T19827] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 433.235147][T19827] ? __local_bh_enable_ip+0x12d/0x1c0 [ 433.235175][T19827] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 433.235211][T19827] genl_family_rcv_msg_doit+0xb8/0x300 [ 433.235245][T19827] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.235279][T19827] ? apparmor_capable+0x137/0x1b0 [ 433.235306][T19827] ? bpf_lsm_capable+0x9/0x20 [ 433.235332][T19827] ? security_capable+0x7e/0x2e0 [ 433.235368][T19827] genl_rcv_msg+0x60e/0x790 [ 433.235401][T19827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.235423][T19827] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 433.235444][T19827] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 433.235470][T19827] ? __pfx_nl80211_post_doit+0x10/0x10 [ 433.235493][T19827] ? __asan_memcpy+0x40/0x70 [ 433.235520][T19827] ? __pfx_ref_tracker_free+0x10/0x10 [ 433.235550][T19827] netlink_rcv_skb+0x208/0x470 [ 433.235580][T19827] ? __lock_acquire+0xab9/0xd20 [ 433.235601][T19827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.235628][T19827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.235687][T19827] ? down_read+0x1ad/0x2e0 [ 433.235725][T19827] genl_rcv+0x28/0x40 [ 433.235747][T19827] netlink_unicast+0x82f/0x9e0 [ 433.235787][T19827] ? __pfx_netlink_unicast+0x10/0x10 [ 433.235819][T19827] ? netlink_sendmsg+0x642/0xb30 [ 433.235836][T19827] ? skb_put+0x11b/0x210 [ 433.235860][T19827] netlink_sendmsg+0x805/0xb30 [ 433.235890][T19827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.235927][T19827] ? aa_sock_msg_perm+0xf1/0x1d0 [ 433.235959][T19827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.235979][T19827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.236013][T19827] __sock_sendmsg+0x21c/0x270 [ 433.236043][T19827] ____sys_sendmsg+0x505/0x830 [ 433.236070][T19827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.236104][T19827] ? import_iovec+0x74/0xa0 [ 433.236134][T19827] ___sys_sendmsg+0x21f/0x2a0 [ 433.236159][T19827] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.236220][T19827] ? __fget_files+0x2a/0x420 [ 433.236239][T19827] ? __fget_files+0x3a0/0x420 [ 433.236271][T19827] __x64_sys_sendmsg+0x19b/0x260 [ 433.236297][T19827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.236329][T19827] ? __pfx_ksys_write+0x10/0x10 [ 433.236365][T19827] ? do_syscall_64+0xbe/0xfa0 [ 433.236397][T19827] do_syscall_64+0xfa/0xfa0 [ 433.236423][T19827] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.236451][T19827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.236472][T19827] ? clear_bhb_loop+0x60/0xb0 [ 433.236497][T19827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.236517][T19827] RIP: 0033:0x7f42f2f8efc9 [ 433.236536][T19827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.236555][T19827] RSP: 002b:00007f42f3f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.236577][T19827] RAX: ffffffffffffffda RBX: 00007f42f31e5fa0 RCX: 00007f42f2f8efc9 [ 433.236593][T19827] RDX: 0000000000008000 RSI: 0000200000003e80 RDI: 0000000000000003 [ 433.236607][T19827] RBP: 00007f42f3f13090 R08: 0000000000000000 R09: 0000000000000000 [ 433.236620][T19827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.236632][T19827] R13: 00007f42f31e6038 R14: 00007f42f31e5fa0 R15: 00007ffd93ec52f8 [ 433.236677][T19827] [ 433.653062][T19815] veth1_vlan (unregistering): left allmulticast mode [ 434.020138][T19836] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4291'. [ 434.032365][T19836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4291'. [ 434.108338][ T8847] hsr_slave_0: left promiscuous mode [ 434.127114][ T8847] hsr_slave_1: left promiscuous mode [ 434.144199][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.167601][T19843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4294'. [ 434.348155][T19847] netlink: 'syz.4.4296': attribute type 27 has an invalid length. [ 434.357680][T19847] netlink: 'syz.4.4296': attribute type 4 has an invalid length. [ 434.380626][T19847] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4296'. [ 434.795698][ T8847] team0 (unregistering): Port device team_slave_1 removed [ 434.864798][ T8847] team0 (unregistering): Port device team_slave_0 removed [ 435.455927][ T36] smc: removing ib device syz0 [ 435.462554][ T5912] lo speed is unknown, defaulting to 1000 [ 435.468483][ T5912] syz0: Port: 1 Link DOWN [ 435.513090][T19854] vcan0: entered allmulticast mode [ 435.731242][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4302'. [ 435.775365][T19875] FAULT_INJECTION: forcing a failure. [ 435.775365][T19875] name failslab, interval 1, probability 0, space 0, times 0 [ 435.858839][T19875] CPU: 1 UID: 0 PID: 19875 Comm: syz.4.4301 Not tainted syzkaller #0 PREEMPT(full) [ 435.858871][T19875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.858885][T19875] Call Trace: [ 435.858893][T19875] [ 435.858903][T19875] dump_stack_lvl+0x189/0x250 [ 435.858939][T19875] ? __pfx____ratelimit+0x10/0x10 [ 435.858966][T19875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.858996][T19875] ? __pfx__printk+0x10/0x10 [ 435.859025][T19875] ? __pfx___might_resched+0x10/0x10 [ 435.859054][T19875] should_fail_ex+0x414/0x560 [ 435.859093][T19875] should_failslab+0xa8/0x100 [ 435.859117][T19875] kmem_cache_alloc_node_noprof+0x77/0x710 [ 435.859148][T19875] ? __alloc_skb+0x112/0x2d0 [ 435.859187][T19875] __alloc_skb+0x112/0x2d0 [ 435.859224][T19875] netlink_ack+0x146/0xa50 [ 435.859254][T19875] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.859278][T19875] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 435.859300][T19875] ? __pfx_nl80211_post_doit+0x10/0x10 [ 435.859325][T19875] ? __asan_memcpy+0x40/0x70 [ 435.859353][T19875] ? __pfx_ref_tracker_free+0x10/0x10 [ 435.859383][T19875] netlink_rcv_skb+0x28c/0x470 [ 435.859414][T19875] ? __lock_acquire+0xab9/0xd20 [ 435.859436][T19875] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.859463][T19875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.859514][T19875] ? down_read+0x1ad/0x2e0 [ 435.859547][T19875] genl_rcv+0x28/0x40 [ 435.859568][T19875] netlink_unicast+0x82f/0x9e0 [ 435.859608][T19875] ? __pfx_netlink_unicast+0x10/0x10 [ 435.859639][T19875] ? netlink_sendmsg+0x642/0xb30 [ 435.859655][T19875] ? skb_put+0x11b/0x210 [ 435.859679][T19875] netlink_sendmsg+0x805/0xb30 [ 435.859716][T19875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.859752][T19875] ? aa_sock_msg_perm+0xf1/0x1d0 [ 435.859786][T19875] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.859807][T19875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.859842][T19875] __sock_sendmsg+0x21c/0x270 [ 435.859877][T19875] ____sys_sendmsg+0x505/0x830 [ 435.859906][T19875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.859938][T19875] ? import_iovec+0x74/0xa0 [ 435.859970][T19875] ___sys_sendmsg+0x21f/0x2a0 [ 435.859995][T19875] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.860058][T19875] ? __fget_files+0x2a/0x420 [ 435.860078][T19875] ? __fget_files+0x3a0/0x420 [ 435.860110][T19875] __x64_sys_sendmsg+0x19b/0x260 [ 435.860137][T19875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.860171][T19875] ? __pfx_ksys_write+0x10/0x10 [ 435.860206][T19875] ? do_syscall_64+0xbe/0xfa0 [ 435.860237][T19875] do_syscall_64+0xfa/0xfa0 [ 435.860263][T19875] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.860290][T19875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.860312][T19875] ? clear_bhb_loop+0x60/0xb0 [ 435.860339][T19875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.860360][T19875] RIP: 0033:0x7f2c8298efc9 [ 435.860378][T19875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.860397][T19875] RSP: 002b:00007f2c80bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.860421][T19875] RAX: ffffffffffffffda RBX: 00007f2c82be5fa0 RCX: 00007f2c8298efc9 [ 435.860437][T19875] RDX: 0000000000008000 RSI: 0000200000003e80 RDI: 0000000000000003 [ 435.860451][T19875] RBP: 00007f2c80bee090 R08: 0000000000000000 R09: 0000000000000000 [ 435.860465][T19875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.860477][T19875] R13: 00007f2c82be6038 R14: 00007f2c82be5fa0 R15: 00007ffd973c2da8 [ 435.860514][T19875] [ 436.656811][T19901] netlink: 'syz.0.4309': attribute type 1 has an invalid length. [ 436.677380][T19901] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4309'. [ 436.717535][T19901] netlink: 'syz.0.4309': attribute type 1 has an invalid length. [ 436.765016][T19907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4310'. [ 436.933862][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 437.069377][T19920] tipc: Enabling of bearer rejected, failed to enable media [ 437.115858][T19925] FAULT_INJECTION: forcing a failure. [ 437.115858][T19925] name failslab, interval 1, probability 0, space 0, times 0 [ 437.191905][T19925] CPU: 0 UID: 0 PID: 19925 Comm: syz.2.4316 Not tainted syzkaller #0 PREEMPT(full) [ 437.191937][T19925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.191950][T19925] Call Trace: [ 437.191959][T19925] [ 437.191968][T19925] dump_stack_lvl+0x189/0x250 [ 437.192003][T19925] ? __pfx____ratelimit+0x10/0x10 [ 437.192029][T19925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.192057][T19925] ? __pfx__printk+0x10/0x10 [ 437.192081][T19925] ? __pfx___might_resched+0x10/0x10 [ 437.192105][T19925] ? fs_reclaim_acquire+0x7d/0x100 [ 437.192144][T19925] should_fail_ex+0x414/0x560 [ 437.192183][T19925] should_failslab+0xa8/0x100 [ 437.192212][T19925] kmem_cache_alloc_node_noprof+0x77/0x710 [ 437.192241][T19925] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 437.192266][T19925] ? __alloc_skb+0x112/0x2d0 [ 437.192304][T19925] __alloc_skb+0x112/0x2d0 [ 437.192341][T19925] nl80211_send_scan_start+0x2f/0x170 [ 437.192375][T19925] nl80211_trigger_scan+0x1aaf/0x1f10 [ 437.192420][T19925] genl_family_rcv_msg_doit+0x215/0x300 [ 437.192456][T19925] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 437.192495][T19925] ? bpf_lsm_capable+0x9/0x20 [ 437.192521][T19925] ? security_capable+0x7e/0x2e0 [ 437.192558][T19925] genl_rcv_msg+0x60e/0x790 [ 437.192591][T19925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.192614][T19925] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 437.192634][T19925] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 437.192667][T19925] ? __pfx_nl80211_post_doit+0x10/0x10 [ 437.192690][T19925] ? __asan_memcpy+0x40/0x70 [ 437.192717][T19925] ? __pfx_ref_tracker_free+0x10/0x10 [ 437.192748][T19925] netlink_rcv_skb+0x208/0x470 [ 437.192779][T19925] ? __lock_acquire+0xab9/0xd20 [ 437.192801][T19925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.192829][T19925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.192883][T19925] ? down_read+0x1ad/0x2e0 [ 437.192918][T19925] genl_rcv+0x28/0x40 [ 437.192944][T19925] netlink_unicast+0x82f/0x9e0 [ 437.192982][T19925] ? __pfx_netlink_unicast+0x10/0x10 [ 437.193014][T19925] ? netlink_sendmsg+0x642/0xb30 [ 437.193031][T19925] ? skb_put+0x11b/0x210 [ 437.193055][T19925] netlink_sendmsg+0x805/0xb30 [ 437.193087][T19925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.193125][T19925] ? aa_sock_msg_perm+0xf1/0x1d0 [ 437.193159][T19925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.193179][T19925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.193215][T19925] __sock_sendmsg+0x21c/0x270 [ 437.193248][T19925] ____sys_sendmsg+0x505/0x830 [ 437.193277][T19925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.193310][T19925] ? import_iovec+0x74/0xa0 [ 437.193342][T19925] ___sys_sendmsg+0x21f/0x2a0 [ 437.193368][T19925] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.193433][T19925] ? __fget_files+0x2a/0x420 [ 437.193453][T19925] ? __fget_files+0x3a0/0x420 [ 437.193487][T19925] __x64_sys_sendmsg+0x19b/0x260 [ 437.193513][T19925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.193547][T19925] ? __pfx_ksys_write+0x10/0x10 [ 437.193582][T19925] ? do_syscall_64+0xbe/0xfa0 [ 437.193615][T19925] do_syscall_64+0xfa/0xfa0 [ 437.193647][T19925] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.193674][T19925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.193696][T19925] ? clear_bhb_loop+0x60/0xb0 [ 437.193722][T19925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.193743][T19925] RIP: 0033:0x7f42f2f8efc9 [ 437.193763][T19925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.193781][T19925] RSP: 002b:00007f42f3f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.193804][T19925] RAX: ffffffffffffffda RBX: 00007f42f31e5fa0 RCX: 00007f42f2f8efc9 [ 437.193820][T19925] RDX: 0000000000008000 RSI: 0000200000003e80 RDI: 0000000000000003 [ 437.193835][T19925] RBP: 00007f42f3f13090 R08: 0000000000000000 R09: 0000000000000000 [ 437.193848][T19925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.193860][T19925] R13: 00007f42f31e6038 R14: 00007f42f31e5fa0 R15: 00007ffd93ec52f8 [ 437.193898][T19925] [ 437.983049][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4321'. [ 438.070811][T19940] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4321'. [ 438.101071][T19947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4323'. [ 438.143788][T19948] netlink: 'syz.0.4322': attribute type 1 has an invalid length. [ 438.397578][T19948] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 438.609425][T19966] netlink: 'syz.2.4329': attribute type 58 has an invalid length. [ 438.672258][T19967] netlink: 'syz.1.4328': attribute type 21 has an invalid length. [ 438.677785][T19966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4329'. [ 438.681040][T19967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4328'. [ 438.728018][T19969] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4330'. [ 438.734291][T19970] netlink: 'syz.1.4328': attribute type 1 has an invalid length. [ 438.836869][T19973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.844208][T19973] IPv6: NLM_F_CREATE should be set when creating new route [ 439.031720][T19983] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 439.045814][T19971] syzkaller0: entered promiscuous mode [ 439.051986][T19971] syzkaller0: entered allmulticast mode [ 439.097116][T19983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.104464][T19983] IPv6: NLM_F_CREATE should be set when creating new route [ 439.235999][T19987] Cannot find add_set index 2 as target [ 440.758129][ T8847] IPVS: stop unused estimator thread 0... [ 440.918392][T20010] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4340'. [ 441.095985][T20024] xt_TPROXY: Can be used only with -p tcp or -p udp [ 441.133989][T20024] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4341'. [ 441.462054][T20041] netlink: 'syz.3.4349': attribute type 11 has an invalid length. [ 441.481838][T20041] netlink: 'syz.3.4349': attribute type 11 has an invalid length. [ 441.577247][T20047] netlink: 'syz.3.4352': attribute type 1 has an invalid length. [ 441.585515][T20047] netlink: 'syz.3.4352': attribute type 2 has an invalid length. [ 441.603086][T20047] netlink: 'syz.3.4352': attribute type 1 has an invalid length. [ 441.611990][T20047] netlink: 'syz.3.4352': attribute type 2 has an invalid length. [ 441.644570][T20047] team0: Device wireguard0 is of different type [ 441.752283][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4353'. [ 441.763765][T20057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4353'. [ 441.810947][T20059] netlink: 'syz.0.4355': attribute type 1 has an invalid length. [ 441.952016][T20067] netlink: 'syz.0.4358': attribute type 7 has an invalid length. [ 441.993763][T20069] netlink: 'syz.2.4359': attribute type 21 has an invalid length. [ 442.132359][T20075] netlink: 'syz.0.4362': attribute type 21 has an invalid length. [ 442.765427][ T30] audit: type=1800 audit(1761697874.134:5): pid=20097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4368" name="memory.events" dev="tmpfs" ino=928 res=0 errno=0 [ 442.819234][ T30] audit: type=1804 audit(1761697874.184:6): pid=20102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4368" name="/newroot/179/memory.events" dev="tmpfs" ino=928 res=1 errno=0 [ 443.205546][T20123] __nla_validate_parse: 7 callbacks suppressed [ 443.205568][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4377'. [ 443.224405][T20123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4377'. [ 443.294934][T20123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4377'. [ 443.338835][T20130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4380'. [ 443.450538][ T8858] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.450651][T20130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4380'. [ 443.464000][ T8858] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.490414][ T8858] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.508539][T20133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4381'. [ 443.528332][T20141] FAULT_INJECTION: forcing a failure. [ 443.528332][T20141] name failslab, interval 1, probability 0, space 0, times 0 [ 443.532624][ T8858] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.549503][T20141] CPU: 1 UID: 0 PID: 20141 Comm: syz.2.4383 Not tainted syzkaller #0 PREEMPT(full) [ 443.549533][T20141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.549546][T20141] Call Trace: [ 443.549556][T20141] [ 443.549565][T20141] dump_stack_lvl+0x189/0x250 [ 443.549600][T20141] ? __pfx____ratelimit+0x10/0x10 [ 443.549627][T20141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.549657][T20141] ? __pfx__printk+0x10/0x10 [ 443.549686][T20141] ? __lock_acquire+0xab9/0xd20 [ 443.549716][T20141] should_fail_ex+0x414/0x560 [ 443.549754][T20141] should_failslab+0xa8/0x100 [ 443.549778][T20141] kmem_cache_alloc_noprof+0x74/0x6e0 [ 443.549809][T20141] ? skb_clone+0x212/0x3a0 [ 443.549838][T20141] skb_clone+0x212/0x3a0 [ 443.549873][T20141] __netlink_deliver_tap+0x404/0x850 [ 443.549921][T20141] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.549956][T20141] netlink_deliver_tap+0x19c/0x1b0 [ 443.549990][T20141] netlink_unicast+0x7fa/0x9e0 [ 443.550030][T20141] ? __pfx_netlink_unicast+0x10/0x10 [ 443.550062][T20141] ? netlink_sendmsg+0x642/0xb30 [ 443.550080][T20141] ? skb_put+0x11b/0x210 [ 443.550104][T20141] netlink_sendmsg+0x805/0xb30 [ 443.550134][T20141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.550171][T20141] ? aa_sock_msg_perm+0xf1/0x1d0 [ 443.550205][T20141] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 443.550225][T20141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.550260][T20141] __sock_sendmsg+0x21c/0x270 [ 443.550291][T20141] ____sys_sendmsg+0x505/0x830 [ 443.550320][T20141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.550353][T20141] ? import_iovec+0x74/0xa0 [ 443.550383][T20141] ___sys_sendmsg+0x21f/0x2a0 [ 443.550409][T20141] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.550472][T20141] ? __fget_files+0x2a/0x420 [ 443.550491][T20141] ? __fget_files+0x3a0/0x420 [ 443.550523][T20141] __x64_sys_sendmsg+0x19b/0x260 [ 443.550549][T20141] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.550582][T20141] ? __pfx_ksys_write+0x10/0x10 [ 443.550618][T20141] ? do_syscall_64+0xbe/0xfa0 [ 443.550649][T20141] do_syscall_64+0xfa/0xfa0 [ 443.550676][T20141] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.550704][T20141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.550725][T20141] ? clear_bhb_loop+0x60/0xb0 [ 443.550751][T20141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.550772][T20141] RIP: 0033:0x7f42f2f8efc9 [ 443.550791][T20141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.550810][T20141] RSP: 002b:00007f42f3f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.550833][T20141] RAX: ffffffffffffffda RBX: 00007f42f31e5fa0 RCX: 00007f42f2f8efc9 [ 443.550856][T20141] RDX: 0000000000008000 RSI: 0000200000003e80 RDI: 0000000000000003 [ 443.550870][T20141] RBP: 00007f42f3f13090 R08: 0000000000000000 R09: 0000000000000000 [ 443.550883][T20141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.550896][T20141] R13: 00007f42f31e6038 R14: 00007f42f31e5fa0 R15: 00007ffd93ec52f8 [ 443.550932][T20141] [ 444.044847][T20158] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4390'. [ 444.147216][T20161] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 444.285560][T20159] bond1: entered promiscuous mode [ 444.291146][T20159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.393551][T20169] bond1: (slave bridge3): making interface the new active one [ 444.432248][T20171] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 444.471579][T20169] bridge3: entered promiscuous mode [ 444.547625][T20169] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 444.577866][T20198] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4395'. [ 444.712020][T20199] veth9: entered promiscuous mode [ 444.846535][T20206] geneve2: entered promiscuous mode [ 444.893423][T20211] IPVS: set_ctl: invalid protocol: 50 172.20.20.57:21 [ 445.050307][T20218] delete_channel: no stack [ 445.156352][T20228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4404'. [ 445.180035][T20230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4404'. [ 445.683784][T20254] syzkaller0: entered promiscuous mode [ 445.699537][T20254] syzkaller0: entered allmulticast mode [ 447.179565][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 447.482570][T20262] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 447.484410][T20266] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 447.817047][T20312] kthread_run failed with err -4 [ 448.013221][T20333] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 448.030324][T20333] bond3 (unregistering): Released all slaves [ 448.064392][T20339] bond0: entered promiscuous mode [ 448.069731][T20339] bond_slave_0: entered promiscuous mode [ 448.076042][T20339] bond_slave_1: entered promiscuous mode [ 448.118348][T20339] batadv0: entered promiscuous mode [ 448.130568][T20339] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 448.140619][T20338] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 448.665749][T20375] validate_nla: 6 callbacks suppressed [ 448.665769][T20375] netlink: 'syz.1.4447': attribute type 3 has an invalid length. [ 448.810864][T20385] __nla_validate_parse: 5 callbacks suppressed [ 448.810884][T20385] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4453'. [ 448.884498][T20387] xt_TPROXY: Can be used only with -p tcp or -p udp [ 448.977233][T20391] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4455'. [ 449.539893][T20412] netlink: 'syz.1.4462': attribute type 18 has an invalid length. [ 449.546720][T20410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.574036][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4462'. [ 449.621686][T20415] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 449.706834][T20419] : entered promiscuous mode [ 449.750313][T20424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4467'. [ 449.804273][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'. [ 449.838753][T20429] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 449.886537][T20429] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 449.899487][T20429] gretap3: entered promiscuous mode [ 449.905256][T20429] gretap3: entered allmulticast mode [ 450.169854][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'. [ 450.736601][T20482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.766400][T20483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 450.909765][T20487] netlink: 'syz.1.4483': attribute type 21 has an invalid length. [ 450.977324][T20490] netlink: 'syz.2.4484': attribute type 64 has an invalid length. [ 450.986940][T20490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4484'. [ 451.012237][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4484'. [ 451.186184][T20502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4488'. [ 451.383986][ T9834] IPVS: starting estimator thread 0... [ 451.404455][T20511] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 451.471474][T20510] IPVS: using max 27 ests per chain, 64800 per kthread [ 451.747419][T20525] warn_alloc: 1 callbacks suppressed [ 451.747438][T20525] syz.3.4496: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 451.798464][T20525] CPU: 1 UID: 0 PID: 20525 Comm: syz.3.4496 Not tainted syzkaller #0 PREEMPT(full) [ 451.798496][T20525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.798509][T20525] Call Trace: [ 451.798519][T20525] [ 451.798530][T20525] dump_stack_lvl+0x189/0x250 [ 451.798569][T20525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.798601][T20525] ? __pfx__printk+0x10/0x10 [ 451.798623][T20525] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 451.798654][T20525] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 451.798689][T20525] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 451.798724][T20525] warn_alloc+0x214/0x310 [ 451.798757][T20525] ? stack_depot_save_flags+0x40/0x860 [ 451.798797][T20525] ? __pfx_warn_alloc+0x10/0x10 [ 451.798832][T20525] ? kasan_save_track+0x3e/0x80 [ 451.798861][T20525] ? __kasan_kmalloc+0x93/0xb0 [ 451.798894][T20525] ? xsk_setsockopt+0x4dc/0x8d0 [ 451.798916][T20525] ? do_sock_setsockopt+0x17c/0x1b0 [ 451.798936][T20525] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 451.798955][T20525] ? do_syscall_64+0xfa/0xfa0 [ 451.798980][T20525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.799019][T20525] __vmalloc_node_range_noprof+0x125/0x12d0 [ 451.799086][T20525] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 451.799123][T20525] ? __kasan_kmalloc+0x93/0xb0 [ 451.799163][T20525] vmalloc_user_noprof+0xad/0xf0 [ 451.799195][T20525] ? xskq_create+0xbf/0x170 [ 451.799221][T20525] xskq_create+0xbf/0x170 [ 451.799251][T20525] xsk_init_queue+0xb0/0x110 [ 451.799280][T20525] xsk_setsockopt+0x4dc/0x8d0 [ 451.799306][T20525] ? __pfx_xsk_setsockopt+0x10/0x10 [ 451.799333][T20525] ? __pfx_aa_sk_perm+0x10/0x10 [ 451.799364][T20525] ? aa_sock_opt_perm+0xff/0x1b0 [ 451.799399][T20525] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 451.799421][T20525] ? __pfx_xsk_setsockopt+0x10/0x10 [ 451.799448][T20525] do_sock_setsockopt+0x17c/0x1b0 [ 451.799484][T20525] __x64_sys_setsockopt+0x13f/0x1b0 [ 451.799512][T20525] do_syscall_64+0xfa/0xfa0 [ 451.799539][T20525] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.799567][T20525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.799589][T20525] ? clear_bhb_loop+0x60/0xb0 [ 451.799616][T20525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.799638][T20525] RIP: 0033:0x7fbd97b8efc9 [ 451.799660][T20525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.799679][T20525] RSP: 002b:00007fbd98a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 451.799702][T20525] RAX: ffffffffffffffda RBX: 00007fbd97de6090 RCX: 00007fbd97b8efc9 [ 451.799719][T20525] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 451.799732][T20525] RBP: 00007fbd97c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 451.799746][T20525] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.799760][T20525] R13: 00007fbd97de6128 R14: 00007fbd97de6090 R15: 00007fffca3a8df8 [ 451.799797][T20525] [ 451.800245][T20525] Mem-Info: [ 451.844057][T20528] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 451.898753][T20525] active_anon:4523 inactive_anon:0 isolated_anon:0 [ 451.898753][T20525] active_file:3529 inactive_file:40019 isolated_file:0 [ 451.898753][T20525] unevictable:768 dirty:157 writeback:0 [ 451.898753][T20525] slab_reclaimable:12326 slab_unreclaimable:110066 [ 451.898753][T20525] mapped:29320 shmem:1356 pagetables:1317 [ 451.898753][T20525] sec_pagetables:0 bounce:0 [ 451.898753][T20525] kernel_misc_reclaimable:0 [ 451.898753][T20525] free:1312456 free_pcp:14414 free_cma:0 [ 452.215434][T20525] Node 0 active_anon:18392kB inactive_anon:0kB active_file:14116kB inactive_file:159876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125480kB dirty:128kB writeback:100kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14228kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 452.355661][T20525] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 452.408178][T20525] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.440312][T20525] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 452.449661][T20525] Node 0 DMA32 free:1338608kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18192kB inactive_anon:0kB active_file:14116kB inactive_file:159876kB unevictable:1536kB writepending:128kB zspages:0kB present:3129332kB managed:2565180kB mlocked:0kB bounce:0kB free_pcp:40980kB local_pcp:20588kB free_cma:0kB [ 452.484254][T20525] lowmem_reserve[]: 0 0 0 0 0 [ 452.489366][T20525] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.564912][T20525] lowmem_reserve[]: 0 0 0 0 0 [ 452.569836][T20525] Node 1 Normal free:3895240kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17208kB local_pcp:6116kB free_cma:0kB [ 452.603932][T20525] lowmem_reserve[]: 0 0 0 0 0 [ 452.609428][T20525] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 452.626693][T20525] Node 0 DMA32: 2278*4kB (UME) 1980*8kB (UME) 1000*16kB (UME) 1339*32kB (UME) 990*64kB (UME) 402*128kB (UME) 670*256kB (UM) 340*512kB (UM) 99*1024kB (UE) 10*2048kB (UME) 164*4096kB (UM) = 1337816kB [ 452.648189][T20525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 452.660169][T20525] Node 1 Normal: 188*4kB (UE) 61*8kB (UME) 55*16kB (UME) 92*32kB (UME) 26*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895240kB [ 452.710110][T20525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 452.724736][T20525] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 452.736924][T20525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 452.746754][T20525] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 452.756545][T20525] 44901 total pagecache pages [ 452.762099][T20525] 0 pages in swap cache [ 452.766365][T20525] Free swap = 124996kB [ 452.770552][T20525] Total swap = 124996kB [ 452.775040][T20525] 2097051 pages RAM [ 452.778881][T20525] 0 pages HighMem/MovableOnly [ 452.783804][T20525] 424114 pages reserved [ 452.787990][T20525] 0 pages cma reserved [ 452.993320][T20589] netlink: 'syz.0.4512': attribute type 10 has an invalid length. [ 453.160446][T20600] syz.0.4516 (20600) used obsolete PPPIOCDETACH ioctl [ 453.611128][T20621] vlan2: entered promiscuous mode [ 453.629601][T20621] bridge0: entered promiscuous mode [ 453.967182][T20646] smc: net device vcan0 applied user defined pnetid SYZ1 [ 454.682775][T20677] delete_channel: no stack [ 454.797996][T20682] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 454.874766][T20692] __nla_validate_parse: 5 callbacks suppressed [ 454.874785][T20692] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.4541'. [ 454.923977][T20691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4542'. [ 455.099704][T20697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4544'. [ 455.395452][T20715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4551'. [ 455.463874][T20715] veth0_macvtap: left promiscuous mode [ 456.055819][T20742] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4558'. [ 456.198959][T20752] netlink: 'syz.3.4561': attribute type 10 has an invalid length. [ 456.217358][T20752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4561'. [ 456.268549][T20752] batadv0: entered allmulticast mode [ 456.294543][T20752] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 456.540144][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'. [ 456.976846][T20795] netlink: 'syz.3.4574': attribute type 1 has an invalid length. [ 457.022640][T20795] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4574'. [ 457.413791][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 457.853460][T20838] Bluetooth: MGMT ver 1.23 [ 457.863486][T20839] netlink: 'syz.3.4587': attribute type 1 has an invalid length. [ 457.871278][T20839] netlink: 'syz.3.4587': attribute type 2 has an invalid length. [ 457.907171][T20839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4587'. [ 458.114391][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4589'. [ 458.151880][T20851] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.295866][T20851] bridge_slave_1 (unregistering): left allmulticast mode [ 458.311604][T20851] bridge_slave_1 (unregistering): left promiscuous mode [ 458.322653][T20851] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.662744][T20824] delete_channel: no stack [ 458.858229][T20880] gre4: entered promiscuous mode [ 458.885565][T20880] gre4: entered allmulticast mode [ 458.946059][T20887] netlink: 'syz.0.4599': attribute type 6 has an invalid length. [ 460.141970][T20947] netlink: 'syz.2.4614': attribute type 1 has an invalid length. [ 460.160120][T20947] __nla_validate_parse: 7 callbacks suppressed [ 460.160141][T20947] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4614'. [ 460.202776][T20951] netlink: 'syz.2.4614': attribute type 8 has an invalid length. [ 460.232820][T20953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.303933][T20949] Cannot find add_set index 1 as target [ 460.376744][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4619'. [ 460.387102][T20963] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4616'. [ 460.405939][T20950] delete_channel: no stack [ 460.412770][T20965] Cannot find add_set index 2 as target [ 460.661944][T20972] tipc: Enabled bearer , priority 0 [ 460.766133][T20972] syzkaller0: entered promiscuous mode [ 460.784999][T20972] syzkaller0: entered allmulticast mode [ 460.810214][T20972] tipc: Resetting bearer [ 460.864943][T20974] tipc: Started in network mode [ 460.876143][T20974] tipc: Node identity 9ef31642098a, cluster identity 4711 [ 460.902510][T20974] tipc: Enabled bearer , priority 0 [ 460.937695][T20967] tipc: Resetting bearer [ 461.784470][ T9834] tipc: Node number set to 2069363838 [ 462.024738][ T5898] tipc: Node number set to 2541295170 [ 462.429700][T20967] tipc: Disabling bearer [ 462.442182][T20974] syzkaller0: entered promiscuous mode [ 462.447725][T20974] syzkaller0: entered allmulticast mode [ 462.503652][T20987] tipc: Resetting bearer [ 462.552109][T20973] tipc: Resetting bearer [ 462.597429][T20973] tipc: Disabling bearer [ 462.626506][T21006] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 462.630808][T21007] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 462.661707][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'. [ 462.671868][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'. [ 462.681154][T21006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.711526][T21006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.732586][T21006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.772198][T21006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.848180][T21018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4636'. [ 462.901820][T21019] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.187108][T21041] IPv6: NLM_F_REPLACE set, but no existing node found! [ 463.212893][T21043] netlink: 'syz.3.4642': attribute type 62 has an invalid length. [ 463.280707][T21046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4643'. [ 463.320027][T21049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4644'. [ 463.537337][T21063] xt_TCPMSS: Only works on TCP SYN packets [ 463.640857][T21070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4652'. [ 463.742686][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4651'. [ 463.811200][T21070] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 464.227735][T21108] xfrm1: entered promiscuous mode [ 464.244435][T21108] xfrm1: entered allmulticast mode [ 464.262754][T21110] x_tables: unsorted underflow at hook 3 [ 464.298795][T21110] pimreg: entered allmulticast mode [ 464.596475][T21138] netlink: 'syz.4.4669': attribute type 1 has an invalid length. [ 464.930106][T21158] IPVS: set_ctl: invalid protocol: 704 0.32.0.0:0 [ 465.276703][T21168] __nla_validate_parse: 6 callbacks suppressed [ 465.276725][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4678'. [ 465.372418][T21168] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4678'. [ 465.946935][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4687'. [ 466.282200][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4693'. [ 466.292144][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4693'. [ 466.486380][T21240] netlink: 'syz.2.4695': attribute type 12 has an invalid length. [ 466.512351][T21240] netlink: 'syz.2.4695': attribute type 29 has an invalid length. [ 466.530506][T21240] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4695'. [ 466.549724][T21240] netlink: 'syz.2.4695': attribute type 2 has an invalid length. [ 466.566694][T21240] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4695'. [ 466.579095][T21246] netlink: 'syz.3.4698': attribute type 23 has an invalid length. [ 466.608231][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4697'. [ 466.640997][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4697'. [ 466.694827][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4697'. [ 466.878552][T21266] tipc: Started in network mode [ 466.890695][T21266] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 466.927303][T21266] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 466.956334][T21266] tipc: Enabled bearer , priority 10 [ 466.988880][T21276] veth9: entered allmulticast mode [ 467.706513][T21313] netlink: zone id is out of range [ 468.072445][ T9834] tipc: Node number set to 1 [ 468.307366][T21351] xt_ecn: cannot match TCP bits for non-tcp packets [ 468.629020][ T8856] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 469.028040][T21393] x_tables: duplicate underflow at hook 1 [ 469.371268][T21403] netlink: 'syz.2.4743': attribute type 2 has an invalid length. [ 469.534626][T21407] openvswitch: netlink: Message has 592 unknown bytes. [ 469.552939][T21407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.588150][T21415] netlink: 'syz.0.4748': attribute type 3 has an invalid length. [ 469.597035][T21415] netlink: 'syz.0.4748': attribute type 1 has an invalid length. [ 469.824393][T21429] netlink: zone id is out of range [ 469.841067][T21429] netlink: zone id is out of range [ 470.077067][T21415] infiniband syz0: set active [ 470.090763][T21415] infiniband syz0: added bond_slave_0 [ 470.204161][T21415] RDS/IB: syz0: added [ 470.216587][T21415] smc: adding ib device syz0 with port count 1 [ 470.236154][T21415] smc: ib device syz0 port 1 has no pnetid [ 470.370483][T21456] __nla_validate_parse: 13 callbacks suppressed [ 470.370507][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4761'. [ 470.416253][T21456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4761'. [ 470.449543][T21456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4761'. [ 470.495500][T21460] netlink: 'syz.1.4762': attribute type 24 has an invalid length. [ 471.318912][T21476] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.337607][T21476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.344951][T21476] IPv6: NLM_F_CREATE should be set when creating new route [ 471.352268][T21476] IPv6: NLM_F_CREATE should be set when creating new route [ 471.504106][T21486] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4772'. [ 471.556251][T21492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4774'. [ 471.987029][T21507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4777'. [ 472.743739][T21530] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4783'. [ 472.791986][T21530] macvtap1: entered allmulticast mode [ 472.811037][T21530] veth0_macvtap: entered allmulticast mode [ 473.052812][T21544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4788'. [ 473.467806][T21566] netlink: 'syz.1.4794': attribute type 1 has an invalid length. [ 473.492108][T21567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4795'. [ 473.848724][T21577] syzkaller0: entered promiscuous mode [ 473.871175][T21577] syzkaller0: entered allmulticast mode [ 475.422462][T21594] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 475.423982][T21593] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 475.515908][T21600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4805'. [ 475.555714][T21600] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4805'. [ 475.606654][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4805'. [ 475.803564][T21610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4809'. [ 475.898789][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4810'. [ 475.917982][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4811'. [ 476.146371][T21632] Cannot find add_set index 2 as target [ 476.158657][T21632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4816'. [ 476.255043][T21632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.360768][T21644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4819'. [ 476.460022][T21653] ip6t_rpfilter: unknown options [ 476.509172][T21651] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 476.528591][T21651] bond3 (unregistering): Released all slaves [ 476.809252][T21678] x_tables: duplicate underflow at hook 2 [ 476.830079][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4829'. [ 476.843667][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4829'. [ 477.155049][T21698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.310183][T21699] netlink: 'syz.3.4835': attribute type 4 has an invalid length. [ 477.815746][T21719] bond0 (unregistering): left promiscuous mode [ 477.822271][T21719] bond_slave_0: left promiscuous mode [ 477.827830][T21719] bond_slave_1: left promiscuous mode [ 477.836181][T21719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.853576][T21719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.870862][T21719] bond0 (unregistering): Released all slaves [ 478.058316][T21747] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 478.554532][T21785] netlink: 'syz.1.4858': attribute type 1 has an invalid length. [ 478.596934][T21785] Cannot find set identified by id 65534 to match [ 478.741102][T21800] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 478.776435][T21800] bond0 (unregistering): Released all slaves [ 478.936292][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 479.096644][T21820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.263885][T21837] team0: Device ip6gre2 is of different type [ 479.554673][T21855] bond3: option resend_igmp: invalid value (32767) [ 479.561228][T21855] bond3: option resend_igmp: allowed values 0 - 255 [ 479.570910][T21855] bond3 (unregistering): Released all slaves [ 479.595431][T21858] syzkaller0: entered promiscuous mode [ 479.601189][T21858] syzkaller0: entered allmulticast mode [ 479.613451][T21858] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 479.632836][T21858] syzkaller0: left promiscuous mode [ 479.638099][T21858] syzkaller0: left allmulticast mode [ 479.648049][T21858] netlink: 'syz.4.4876': attribute type 10 has an invalid length. [ 479.680501][T21858] team0: Port device dummy0 added [ 479.848813][T21872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.319601][T21894] x_tables: unsorted underflow at hook 2 [ 480.742813][T21919] tipc: Enabled bearer , priority 0 [ 480.769033][T21919] syzkaller0: entered promiscuous mode [ 480.779020][T21919] syzkaller0: entered allmulticast mode [ 480.799347][T21925] __nla_validate_parse: 8 callbacks suppressed [ 480.799370][T21925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4898'. [ 480.876931][T21919] tipc: Resetting bearer [ 480.970884][T21915] tipc: Resetting bearer [ 480.999132][T21934] netlink: 'syz.4.4902': attribute type 13 has an invalid length. [ 481.034151][T21915] tipc: Disabling bearer [ 481.047912][T21934] macvtap0: entered allmulticast mode [ 481.085800][T21934] macvtap0: refused to change device tx_queue_len [ 481.125579][T21939] geneve2: entered promiscuous mode [ 481.136970][T21936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4903'. [ 481.146511][T21937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4903'. [ 481.149818][T21939] geneve2: entered allmulticast mode [ 481.405127][T21961] netlink: 'syz.4.4908': attribute type 29 has an invalid length. [ 481.430918][T21961] netlink: 'syz.4.4908': attribute type 29 has an invalid length. [ 481.454002][T21961] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4908'. [ 481.478792][T21961] unsupported nla_type 58 [ 482.218689][T21970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4911'. [ 482.300054][T21972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4912'. [ 482.715497][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4915'. [ 482.768784][T21992] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 482.807598][T21984] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4915'. [ 483.030560][T21999] bond3 (unregistering): Released all slaves [ 483.236224][T22014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4924'. [ 483.501166][T22029] tipc: Enabled bearer , priority 0 [ 483.518068][T22029] syzkaller0: entered promiscuous mode [ 483.546186][T22029] syzkaller0: entered allmulticast mode [ 483.573556][T22030] tipc: Enabled bearer , priority 0 [ 483.626911][T22030] syzkaller0: entered promiscuous mode [ 483.651821][T22030] syzkaller0: entered allmulticast mode [ 483.658154][T22030] tipc: Resetting bearer [ 483.702748][T22040] netlink: 'syz.0.4932': attribute type 24 has an invalid length. [ 483.713886][T22029] tipc: Resetting bearer [ 483.730305][T22037] tipc: Resetting bearer [ 483.751607][T22033] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4930'. [ 483.862259][T22044] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 484.246247][T22061] netlink: 'syz.4.4938': attribute type 4 has an invalid length. [ 485.418996][T22037] tipc: Disabling bearer [ 485.429077][T22027] tipc: Resetting bearer [ 485.450103][T22027] tipc: Disabling bearer [ 485.474783][T22061] `: renamed from bond0 (while UP) [ 485.824865][T22088] tc_dump_action: action bad kind [ 485.866016][T22096] __nla_validate_parse: 5 callbacks suppressed [ 485.866036][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4949'. [ 486.062646][T22107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4950'. [ 488.605371][T22142] netlink: 'syz.2.4963': attribute type 1 has an invalid length. [ 488.613551][T22142] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4963'. [ 488.793405][T22152] netlink: 'syz.2.4966': attribute type 10 has an invalid length. [ 488.833542][T22152] batman_adv: batadv0: Interface deactivated: dummy0 [ 488.845791][T22152] batman_adv: batadv0: Removing interface: dummy0 [ 488.894539][T22152] team0: Port device dummy0 added [ 488.907039][T22160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4969'. [ 489.045170][T22165] netlink: 'syz.0.4970': attribute type 1 has an invalid length. [ 489.065891][T22167] netlink: 'syz.3.4972': attribute type 62 has an invalid length. [ 489.076844][T22167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4972'. [ 489.164065][T22165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4970'. [ 489.230526][T22173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 489.242482][T22173] bond5: (slave bond6): making interface the new active one [ 489.254606][T22173] bond5: (slave bond6): Enslaving as an active interface with an up link [ 489.295689][T22165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.327001][T22189] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4977'. [ 489.352340][T22189] 8021q: VLANs not supported on ip6_vti0 [ 489.446719][T22195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4981'. [ 489.504673][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4982'. [ 489.582870][T22209] sctp: [Deprecated]: syz.3.4983 (pid 22209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.582870][T22209] Use struct sctp_sack_info instead [ 489.815992][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 490.006907][T22238] netlink: 'syz.3.4991': attribute type 2 has an invalid length. [ 490.154456][T22250] mac80211_hwsim hwsim33 ÿ: renamed from wlan1 (while UP) [ 490.377059][T22264] syzkaller1: entered promiscuous mode [ 490.383726][T22264] syzkaller1: entered allmulticast mode [ 490.616302][T22276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.635696][T22276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.664950][T22276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.757893][T22280] syzkaller0: entered promiscuous mode [ 490.763583][T22280] syzkaller0: entered allmulticast mode [ 490.944363][T22295] netlink: 'syz.0.5009': attribute type 16 has an invalid length. [ 490.973943][T22295] netlink: 'syz.0.5009': attribute type 17 has an invalid length. [ 491.013323][T22295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.044655][T22298] netlink: 'syz.2.5010': attribute type 1 has an invalid length. [ 491.073275][T22298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.094159][T22300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.102985][T22298] ipt_ECN: cannot use operation on non-tcp rule [ 491.197105][T22298] bond3: (slave veth13): Enslaving as an active interface with a down link [ 491.263575][T22302] bond3: (slave veth0_to_bond): making interface the new active one [ 491.289954][T22302] veth0_to_bond: entered promiscuous mode [ 491.297101][T22302] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 491.297999][T22309] __nla_validate_parse: 2 callbacks suppressed [ 491.298018][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5012'. [ 491.342126][T22309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5012'. [ 491.346305][T22306] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 491.514803][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5016'. [ 491.514803][T22316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5016'. [ 491.579707][T22318] netlink: 'syz.3.5018': attribute type 1 has an invalid length. [ 491.589284][T22320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.616421][T22318] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5018'. [ 491.671106][T22316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.678652][T22316] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 491.688574][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5018'. [ 491.729652][T22316] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 491.872677][T22336] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5024'. [ 491.988291][T22349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5029'. [ 492.013020][T22350] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 492.080289][T22352] netlink: 'syz.1.5031': attribute type 4 has an invalid length. [ 492.128553][T22352] netlink: 'syz.1.5031': attribute type 4 has an invalid length. [ 492.289439][T22360] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 492.329971][T22360] bond0 (unregistering): Released all slaves [ 492.534743][T22374] Cannot find add_set index 0 as target [ 492.567333][ T9013] IPVS: starting estimator thread 0... [ 492.573249][T22378] IPVS: ip_vs_add_dest(): server weight less than zero [ 492.586676][T22378] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5041'. [ 492.657077][T22381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5042'. [ 492.673756][T22379] IPVS: using max 24 ests per chain, 57600 per kthread [ 493.059362][T22398] bond0: entered promiscuous mode [ 493.077276][T22398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.145257][T22406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.159011][T22406] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 493.172529][T22406] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 493.189827][T22406] bond0: (slave wireguard0): making interface the new active one [ 493.199602][T22406] wireguard0: entered promiscuous mode [ 493.212196][T22406] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 493.242310][T22404] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 493.412568][ T52] Bluetooth: hci0: command tx timeout [ 493.418661][T22423] xt_socket: unknown flags 0x50 [ 494.263374][T22471] vlan0: entered allmulticast mode [ 494.285585][T22477] validate_nla: 1 callbacks suppressed [ 494.285605][T22477] netlink: 'syz.1.5072': attribute type 3 has an invalid length. [ 494.287168][T22473] sctp: [Deprecated]: syz.0.5071 (pid 22473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.287168][T22473] Use struct sctp_sack_info instead [ 494.344040][T22479] xt_TCPMSS: Only works on TCP SYN packets [ 494.787472][T22503] mac80211_hwsim hwsim31 ÿ: renamed from wlan1 (while UP) [ 495.160904][T22518] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 495.263546][T22525] veth1_to_bond: entered allmulticast mode [ 495.391134][T22525] bond0: (slave bond_slave_1): Releasing backup interface [ 495.430204][T22525] veth1_to_bond (unregistering): left allmulticast mode [ 496.033123][T22568] tipc: Enabling of bearer rejected, failed to enable media [ 496.447015][T22580] __nla_validate_parse: 8 callbacks suppressed [ 496.447039][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5105'. [ 496.475317][T22580] netlink: 'syz.4.5105': attribute type 8 has an invalid length. [ 496.553208][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5107'. [ 496.574570][T22586] netlink: 'syz.2.5108': attribute type 1 has an invalid length. [ 496.584151][T22586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5108'. [ 496.598122][T22586] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5108'. [ 496.794857][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5111'. [ 497.072112][T22609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5115'. [ 497.081128][T22609] netlink: 'syz.2.5115': attribute type 7 has an invalid length. [ 497.102103][T22609] netlink: 'syz.2.5115': attribute type 8 has an invalid length. [ 497.109894][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5115'. [ 497.133755][T22613] openvswitch: netlink: Missing key (keys=40, expected=100) [ 497.147634][T22613] netlink: 'syz.4.5118': attribute type 1 has an invalid length. [ 497.210821][T22615] syzkaller0: entered promiscuous mode [ 497.216962][T22615] syzkaller0: entered allmulticast mode [ 497.437364][T22632] xt_TPROXY: Can be used only with -p tcp or -p udp [ 497.759901][T22648] netem: change failed [ 498.114275][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5137'. [ 498.153248][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5137'. [ 498.506231][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5143'. [ 498.905524][T22705] gretap0: entered promiscuous mode [ 498.908516][T22703] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 498.957665][T22705] 0ªî{X¹¦: renamed from gretap0 [ 498.979698][T22705] 0ªî{X¹¦: left promiscuous mode [ 498.992793][T22705] 0ªî{X¹¦: entered allmulticast mode [ 499.007064][T22709] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20004 [ 499.015518][T22705] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 499.488991][T22734] smc: net device vcan0 applied user defined pnetid SYZ1 [ 499.519266][T22739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.129874][T22750] netlink: 'syz.3.5160': attribute type 1 has an invalid length. [ 500.139154][T22750] netlink: 'syz.3.5160': attribute type 2 has an invalid length. [ 500.367005][T22750] C: renamed from lo [ 500.373824][T22750] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 500.576360][T22766] netlink: 'syz.2.5164': attribute type 5 has an invalid length. [ 500.598834][T22765] nbd: nbd0 already in use [ 500.609854][T22765] netlink: 'syz.0.5163': attribute type 10 has an invalid length. [ 500.619545][T22765] veth1_macvtap: left promiscuous mode [ 501.412563][T22816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.688948][T22818] team0 (unregistering): Port device team_slave_0 removed [ 501.712122][T22823] __nla_validate_parse: 7 callbacks suppressed [ 501.712142][T22823] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5181'. [ 501.737620][T22818] team0 (unregistering): Port device team_slave_1 removed [ 501.756168][T22818] team0 (unregistering): Port device dummy0 removed [ 501.765586][T22824] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5181'. [ 501.789662][T22819] tipc: Enabling of bearer rejected, failed to enable media [ 501.806833][T22823] erspan0: entered promiscuous mode [ 501.980278][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5183'. [ 502.026804][T22832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5183'. [ 502.043060][T22832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5183'. [ 502.055481][T22831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5183'. [ 502.068002][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5183'. [ 502.078655][T22832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5183'. [ 502.088479][T22832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5183'. [ 502.098259][T22831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5183'. [ 502.318413][T22847] : entered promiscuous mode [ 502.464229][ T8852] veth0_to_bond: left promiscuous mode [ 502.520062][T22865] netlink: 'syz.2.5195': attribute type 32 has an invalid length. [ 502.562643][T22865] bond5: option coupled_control: invalid value (52) [ 502.600106][T22865] bond5 (unregistering): Released all slaves [ 502.688148][T22874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.926721][T22885] bridge: RTM_NEWNEIGH with invalid ether address [ 503.387211][T22920] tipc: Enabled bearer , priority 0 [ 503.423854][T22921] syzkaller0: entered promiscuous mode [ 503.437561][T22921] syzkaller0: entered allmulticast mode [ 503.493588][T22921] tipc: Resetting bearer [ 503.550487][T22921] tipc: Disabling bearer [ 503.696644][T22935] netlink: 'syz.1.5217': attribute type 27 has an invalid length. [ 503.765306][T22935] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 503.775507][T22935] bond2: option packets_per_slave: allowed values 0 - 65535 [ 503.808713][T22935] bond2 (unregistering): Released all slaves [ 503.913055][T22950] block nbd2: Unsupported socket: should be TCP or UNIX. [ 503.957946][T22953] x_tables: duplicate entry at hook 2 [ 503.967790][T22955] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 4, id = 0 [ 504.457981][T22983] netlink: 'syz.1.5225': attribute type 33 has an invalid length. [ 504.468234][T22981] tipc: Enabled bearer , priority 0 [ 504.498291][T22981] tipc: Resetting bearer [ 504.524216][T22980] tipc: Disabling bearer [ 505.065914][T23031] openvswitch: netlink: Message has 592 unknown bytes. [ 505.082609][T23031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.106342][T23022] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.114196][T23022] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.155731][T23022] bridge0: entered promiscuous mode [ 505.432424][T23053] set match dimension is over the limit! [ 505.443813][T23055] set match dimension is over the limit! [ 505.873814][T23073] netlink: 'syz.4.5250': attribute type 1 has an invalid length. [ 505.920054][T23073] tap0: tun_chr_ioctl cmd 1074025672 [ 505.926653][T23073] tap0: ignored: set checksum disabled [ 506.552276][T23116] netlink: 'syz.3.5262': attribute type 10 has an invalid length. [ 506.756266][T23122] bridge0: left promiscuous mode [ 507.115002][T23122] macvtap0: left allmulticast mode [ 507.234038][T23122] veth5: left allmulticast mode [ 507.255688][T23122] bond1: left promiscuous mode [ 507.260737][T23122] bridge3: left promiscuous mode [ 507.469537][T23122] gre4: left promiscuous mode [ 507.493433][T23122] gre4: left allmulticast mode [ 507.580223][T23122] veth9: left allmulticast mode [ 507.591181][T23122] veth0_macvtap: left allmulticast mode [ 507.598767][T23122] macvtap1: left allmulticast mode [ 507.610673][T23122] bond0: left promiscuous mode [ 507.616304][T23122] wireguard0: left promiscuous mode [ 507.633552][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.664232][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.693916][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.723695][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.854305][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.898353][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.952377][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.976575][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.982077][T23158] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 508.018414][T23161] __nla_validate_parse: 17 callbacks suppressed [ 508.018434][T23161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5278'. [ 508.055743][T23161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5278'. [ 508.344644][T23182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5284'. [ 508.355669][T23182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5284'. [ 508.365537][T23182] netlink: 50 bytes leftover after parsing attributes in process `syz.0.5284'. [ 508.365877][T23183] tipc: Enabled bearer , priority 0 [ 508.475867][T23183] syzkaller0: entered promiscuous mode [ 508.483932][T23183] syzkaller0: entered allmulticast mode [ 508.490417][T23183] tipc: Resetting bearer [ 508.511086][T23193] netlink: 'syz.0.5288': attribute type 1 has an invalid length. [ 508.519601][T23191] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5287'. [ 508.524804][T23190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5287'. [ 508.539416][T23181] tipc: Resetting bearer [ 508.546531][T23190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5287'. [ 508.638455][T23195] netlink: 'syz.0.5288': attribute type 24 has an invalid length. [ 508.690880][T23197] sctp: [Deprecated]: syz.2.5289 (pid 23197) Use of int in maxseg socket option. [ 508.690880][T23197] Use struct sctp_assoc_value instead [ 508.814177][T23205] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 508.918184][T23214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.382460][ T6277] tipc: Node number set to 1270161844 [ 510.414148][T23181] tipc: Disabling bearer [ 512.672339][T23252] tipc: Enabling of bearer rejected, failed to enable media [ 512.874600][T23281] netlink: 'syz.4.5314': attribute type 25 has an invalid length. [ 512.886742][T23281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5314'. [ 513.020388][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5317'. [ 513.105766][T23299] tipc: Enabled bearer , priority 0 [ 513.153101][T23295] vcan0 (unregistering): left allmulticast mode [ 513.162082][T23295] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 513.176515][T23299] syzkaller0: entered promiscuous mode [ 513.183882][T23299] syzkaller0: entered allmulticast mode [ 513.217112][T23299] tipc: Resetting bearer [ 513.231221][T23298] tipc: Resetting bearer [ 513.308849][T23298] tipc: Disabling bearer [ 513.349452][T23311] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5322'. [ 513.423145][T23314] xt_policy: too many policy elements [ 513.649054][T23326] xt_TCPMSS: Only works on TCP SYN packets [ 514.853419][T23414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5346'. [ 515.060797][T23424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5351'. [ 515.071789][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5351'. [ 515.477152][T23455] netlink: 'syz.4.5361': attribute type 10 has an invalid length. [ 515.513111][T23455] veth0_virt_wifi: entered allmulticast mode [ 515.523353][T23458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5362'. [ 515.657578][T23460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5364'. [ 515.678484][T23470] netlink: 'syz.4.5365': attribute type 19 has an invalid length. [ 515.834372][T23460] hsr_slave_1 (unregistering): left promiscuous mode [ 515.986530][T23483] xt_l2tp: missing protocol rule (udp|l2tpip) [ 516.005686][T23484] syzkaller0: entered promiscuous mode [ 516.011225][T23484] syzkaller0: entered allmulticast mode [ 516.114793][T23490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5371'. [ 516.175233][T23490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5371'. [ 516.369152][T23500] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 516.399548][T23503] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 516.412398][T23500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.440633][T23506] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20002 [ 516.525260][T23511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5377'. [ 516.594677][T23513] netlink: 'syz.0.5378': attribute type 32 has an invalid length. [ 516.752436][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5383'. [ 516.997993][T23538] netlink: 'syz.4.5385': attribute type 20 has an invalid length. [ 517.077211][T23538] netlink: 'syz.4.5385': attribute type 20 has an invalid length. [ 517.223271][T23545] wg1: entered promiscuous mode [ 517.228295][T23545] wg1: entered allmulticast mode [ 517.363224][T23549] syzkaller0: entered promiscuous mode [ 517.368742][T23549] syzkaller0: entered allmulticast mode [ 517.599099][T23564] netlink: 'syz.2.5392': attribute type 24 has an invalid length. [ 518.162545][T23588] set match dimension is over the limit! [ 518.339063][T23600] netlink: 'syz.1.5400': attribute type 1 has an invalid length. [ 518.367920][T23607] __nla_validate_parse: 5 callbacks suppressed [ 518.367943][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5403'. [ 518.404416][T23602] netlink: 'syz.2.5402': attribute type 2 has an invalid length. [ 518.418145][T23607] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5403'. [ 518.656005][T23616] netlink: 'syz.1.5407': attribute type 1 has an invalid length. [ 518.672180][T23616] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5407'. [ 518.722440][T23621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5407'. [ 518.954059][T23630] netlink: 'syz.0.5413': attribute type 1 has an invalid length. [ 519.301069][T23642] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 519.309817][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 519.670557][T23649] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5419'. [ 519.800990][T23661] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 519.884552][T23669] x_tables: duplicate underflow at hook 1 [ 520.016394][T23678] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5426'. [ 520.038994][T23678] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5426'. [ 520.065666][T23681] netlink: 340 bytes leftover after parsing attributes in process `syz.2.5428'. [ 520.159963][T23686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5430'. [ 520.310625][T23697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5432'. [ 520.741921][T23718] netlink: 'syz.2.5438': attribute type 21 has an invalid length. [ 520.760111][T23718] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.795250][T23708] netlink: 'syz.1.5439': attribute type 2 has an invalid length. [ 520.875211][T23724] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 521.153973][T23728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.336083][T23750] Cannot find add_set index 2 as target [ 521.346693][T23752] netlink: 'syz.3.5450': attribute type 1 has an invalid length. [ 521.364898][T23752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.388299][T23752] netlink: 'syz.3.5450': attribute type 15 has an invalid length. [ 521.580331][T23766] xt_policy: neither incoming nor outgoing policy selected [ 522.229812][T23808] netlink: 'syz.3.5466': attribute type 1 has an invalid length. [ 522.484066][T23833] xt_policy: output policy not valid in PREROUTING and INPUT [ 522.484192][T23834] IPVS: set_ctl: invalid protocol: 115 172.20.20.48:20003 [ 522.516336][T23838] syz_tun: entered allmulticast mode [ 522.575264][T23840] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 522.588546][T23840] bond7 (unregistering): Released all slaves [ 522.620137][T23831] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20002 [ 522.656983][T23837] syz_tun: left allmulticast mode [ 523.215011][T23872] openvswitch: netlink: IP tunnel dst address not specified [ 523.415568][T23884] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 523.513235][T23895] netlink: 'syz.4.5493': attribute type 10 has an invalid length. [ 523.521181][T23899] __nla_validate_parse: 9 callbacks suppressed [ 523.521200][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5490'. [ 523.539552][T23892] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5491'. [ 523.554324][T23899] openvswitch: netlink: Flow actions attr not present in new flow. [ 523.856947][T23915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5500'. [ 523.885451][T23916] netlink: 'syz.2.5499': attribute type 1 has an invalid length. [ 523.920012][T23921] batadv2: entered allmulticast mode [ 524.057563][T23933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5504'. [ 524.097298][T23933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5504'. [ 524.448153][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5509'. [ 524.766483][T23957] syzkaller0: entered promiscuous mode [ 524.778846][T23957] syzkaller0: entered allmulticast mode [ 524.953337][T23976] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 525.405267][T23995] bond7: (slave bond_slave_1): Device is not our slave [ 525.417318][T23995] bond7: option active_slave: invalid value (bond_slave_1) [ 525.438429][T23995] bond7 (unregistering): Released all slaves [ 525.525071][T23996] bond7: (slave bond_slave_1): Device is not our slave [ 525.532774][T23996] bond7: option active_slave: invalid value (bond_slave_1) [ 525.547224][T23996] bond7 (unregistering): Released all slaves [ 525.576605][T24010] netlink: 'syz.3.5528': attribute type 4 has an invalid length. [ 525.596096][T24010] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5528'. [ 525.649513][T24014] veth0_to_batadv: entered promiscuous mode [ 525.800278][T24021] syzkaller0: entered promiscuous mode [ 525.844317][T24021] syzkaller0: entered allmulticast mode [ 526.323878][T24062] netlink: 'syz.2.5538': attribute type 11 has an invalid length. [ 526.456256][T24073] netlink: 'syz.1.5540': attribute type 1 has an invalid length. [ 526.526733][T24073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.553956][T24078] bond3: (slave veth9): Enslaving as an active interface with a down link [ 526.574363][T24082] ipt_ECN: cannot use operation on non-tcp rule [ 526.583286][T24073] bond3: (slave veth0_to_bond): making interface the new active one [ 526.593066][T24073] veth0_to_bond: entered promiscuous mode [ 526.599425][T24073] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 526.612508][T24078] netlink: 'syz.1.5540': attribute type 1 has an invalid length. [ 527.003976][T24100] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 527.021105][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5550'. [ 527.033716][T24100] bond0 (unregistering): Released all slaves [ 527.055242][T24108] netlink: 'syz.2.5553': attribute type 1 has an invalid length. [ 527.064421][T24110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5550'. [ 527.281269][T24112] 8021q: adding VLAN 0 to HW filter on device bond6 [ 527.294965][T24112] bond5: (slave bond6): making interface the new active one [ 527.305389][T24112] bond5: (slave bond6): Enslaving as an active interface with an up link [ 527.338658][T24108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5553'. [ 527.397269][T24108] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 527.714426][T24149] netlink: 'syz.3.5562': attribute type 83 has an invalid length. [ 527.807159][T24158] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 527.808418][T24159] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20004 [ 527.826810][T24159] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20004 [ 527.834127][T24159] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20004 [ 527.842358][T24159] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20004 [ 527.851069][T24159] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20004 [ 527.858332][T24159] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20004 [ 527.865672][T24159] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20004 [ 528.314545][T24176] netlink: zone id is out of range [ 528.377800][T24177] netlink: zone id is out of range [ 528.662800][T24179] __nla_validate_parse: 1 callbacks suppressed [ 528.662822][T24179] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5570'. [ 528.694310][T24182] xt_l2tp: missing protocol rule (udp|l2tpip) [ 528.708286][T24184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5572'. [ 528.773518][T24184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5572'. [ 529.016759][T24206] netlink: 'syz.1.5577': attribute type 1 has an invalid length. [ 529.149580][T24206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.234944][T24222] vlan0: entered promiscuous mode [ 529.241114][T24222] bond4: entered promiscuous mode [ 529.249450][T24222] vlan0: entered allmulticast mode [ 529.262481][T24222] bond4: entered allmulticast mode [ 529.338680][T24225] netlink: 'syz.2.5581': attribute type 3 has an invalid length. [ 530.094297][T24271] netlink: 'syz.2.5594': attribute type 4 has an invalid length. [ 530.103239][T24271] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5594'. [ 530.410681][T24293] tipc: Enabled bearer , priority 0 [ 530.433271][T24292] tipc: Enabling of bearer rejected, already enabled [ 530.497148][T24302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5601'. [ 530.589336][T24292] tipc: Disabling bearer [ 530.713064][T24302] netlink: 'syz.1.5601': attribute type 5 has an invalid length. [ 530.739551][T24302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5601'. [ 530.842479][T24307] syzkaller0: entered promiscuous mode [ 530.848053][T24307] syzkaller0: entered allmulticast mode [ 530.884223][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5604'. [ 532.778299][T24350] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 532.985664][T24378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5619'. [ 532.994221][T24376] No such timeout policy "syz1" [ 533.056866][T24382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5618'. [ 533.059921][T24378] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 533.088716][T24382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5618'. [ 533.123582][T24388] tipc: MTU too low for tipc bearer [ 533.199379][T24396] netlink: 'syz.0.5622': attribute type 1 has an invalid length. [ 533.474025][T24410] veth0: entered promiscuous mode [ 533.516583][T24414] netlink: 'syz.0.5629': attribute type 1 has an invalid length. [ 533.528262][T24414] netlink: 'syz.0.5629': attribute type 1 has an invalid length. [ 533.669699][T24427] netlink: 'syz.3.5634': attribute type 1 has an invalid length. [ 533.680760][T24427] netlink: 'syz.3.5634': attribute type 2 has an invalid length. [ 534.212807][T24449] netlink: 'syz.4.5642': attribute type 16 has an invalid length. [ 534.220735][T24449] netlink: 'syz.4.5642': attribute type 17 has an invalid length. [ 534.440603][T24449] 8021q: adding VLAN 0 to HW filter on device ` [ 534.496501][T24449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.087720][T24490] __nla_validate_parse: 6 callbacks suppressed [ 535.087743][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5652'. [ 535.117525][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5650'. [ 535.127036][T24489] bond0: Master is either lo or non-ether device [ 535.135962][T24489] netlink: 'syz.4.5650': attribute type 29 has an invalid length. [ 535.145341][T24489] netlink: 'syz.4.5650': attribute type 29 has an invalid length. [ 535.310215][T24496] netlink: 'syz.2.5654': attribute type 9 has an invalid length. [ 535.463805][T24500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.478380][T24502] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5657'. [ 535.496202][T24502] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5657'. [ 535.510083][T24502] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5657'. [ 535.626067][T24513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.682113][T24519] v: renamed from vlan0 [ 535.716083][T24519] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5660'. [ 535.793416][T24519] SET target dimension over the limit! [ 536.114424][T24535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 536.462623][T24568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5676'. [ 536.520417][T24566] openvswitch: netlink: Unknown nsh attribute 0 [ 536.527633][T24566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.560280][T24576] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5678'. [ 536.605737][T24582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5674'. [ 536.682671][T24559] syz.0.5674 (24559) used greatest stack depth: 17832 bytes left [ 536.984794][T24602] xt_hashlimit: size too large, truncated to 1048576 [ 537.064971][T24606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5684'. [ 537.107971][T24606] tipc: Enabling of bearer rejected, failed to enable media [ 537.164881][T24610] vlan0: entered promiscuous mode [ 537.204897][T24610] bridge0: entered promiscuous mode [ 537.787766][T24630] ip6t_srh: unknown srh invflags 4000 [ 537.794033][T24631] ip6t_srh: unknown srh invflags 4000 [ 537.846295][T24634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.853622][T24634] IPv6: NLM_F_CREATE should be set when creating new route [ 538.011531][T23961] veth0_to_bond: left promiscuous mode [ 538.160381][T24650] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20000 [ 538.179165][T24650] sctp: [Deprecated]: syz.1.5696 (pid 24650) Use of int in max_burst socket option. [ 538.179165][T24650] Use struct sctp_assoc_value instead [ 538.222810][T24653] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 538.231278][T24653] bond7: option packets_per_slave: allowed values 0 - 65535 [ 538.266463][T24653] bond7 (unregistering): Released all slaves [ 538.563861][T24672] sctp: [Deprecated]: syz.3.5702 (pid 24672) Use of int in maxseg socket option. [ 538.563861][T24672] Use struct sctp_assoc_value instead [ 538.576855][T24675] netlink: 'syz.4.5700': attribute type 15 has an invalid length. [ 538.863611][T24694] netlink: 'syz.1.5705': attribute type 30 has an invalid length. [ 538.943165][T24699] netlink: 'syz.0.5710': attribute type 32 has an invalid length. [ 538.979353][T24699] bond7: Setting coupled_control to off (0) [ 539.420076][T24728] can: request_module (can-proto-0) failed. [ 539.505701][T24733] netlink: 'syz.4.5722': attribute type 13 has an invalid length. [ 539.542484][T24741] xt_hashlimit: max too large, truncated to 1048576 [ 539.582115][T24733] netlink: 'syz.4.5722': attribute type 58 has an invalid length. [ 539.714725][T24749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.873607][T24757] netlink: 'syz.1.5730': attribute type 1 has an invalid length. [ 539.888377][T24749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.903003][T24757] netlink: 'syz.1.5730': attribute type 2 has an invalid length. [ 540.257643][T24788] Cannot find add_set index 2 as target [ 540.414695][T24796] __nla_validate_parse: 12 callbacks suppressed [ 540.414718][T24796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5738'. [ 540.488401][T24798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5739'. [ 540.506977][T24803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5741'. [ 540.525457][T24801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5739'. [ 540.612101][T24811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5741'. [ 540.845430][T24826] xt_ecn: cannot match TCP bits for non-tcp packets [ 541.326088][T24860] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 541.395075][T24865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5758'. [ 541.471655][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5762'. [ 541.679437][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5765'. [ 541.679437][T24888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5765'. [ 541.845117][T24888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5765'. [ 542.281213][T24928] sock: sock_set_timeout: `syz.0.5778' (pid 24928) tries to set negative timeout [ 542.503081][T24948] team0: No ports can be present during mode change [ 542.575841][T24952] x_tables: duplicate underflow at hook 2 [ 542.630599][T24952] x_tables: duplicate underflow at hook 1 [ 542.924041][T24971] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20000 [ 543.498742][T25016] netlink: 'syz.2.5802': attribute type 32 has an invalid length. [ 543.538615][T25017] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 544.648763][T25087] sctp: [Deprecated]: syz.0.5822 (pid 25087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.648763][T25087] Use struct sctp_sack_info instead [ 545.112508][T25117] Unsupported ieee802154 address type: 0 [ 545.403248][T25135] tipc: Enabling of bearer rejected, failed to enable media [ 545.651602][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 545.966157][T25176] __nla_validate_parse: 16 callbacks suppressed [ 545.966178][T25176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5853'. [ 546.020505][T25174] tipc: Enabled bearer , priority 0 [ 546.050333][T25174] syzkaller0: entered promiscuous mode [ 546.061023][T25174] syzkaller0: entered allmulticast mode [ 546.155931][T25174] tipc: Resetting bearer [ 546.195823][T25173] tipc: Resetting bearer [ 546.270780][T25173] tipc: Disabling bearer [ 546.373405][T25185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5854'. [ 547.110216][T25233] netlink: 'syz.3.5866': attribute type 4 has an invalid length. [ 547.130160][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5867'. [ 547.279015][T25242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5869'. [ 547.360268][T25242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5869'. [ 547.416981][T25242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5869'. [ 547.437675][T25252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5868'. [ 547.556557][T25258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5873'. [ 547.579464][T25252] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 547.603707][T25252] bond7 (unregistering): Released all slaves [ 547.733828][T25267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5875'. [ 548.194716][T23961] bond1 (unregistering): (slave gretap2): Releasing active interface [ 548.623887][T23961] bond0 (unregistering): Released all slaves [ 548.644313][T23961] bond1 (unregistering): Released all slaves [ 548.786300][T23961] bond2 (unregistering): Released all slaves [ 548.934465][T23961] bond3 (unregistering): Released all slaves [ 548.955570][T23961] bond4 (unregistering): Released all slaves [ 548.974720][T23961] bond5 (unregistering): Released all slaves [ 548.993402][T23961] bond6 (unregistering): Released all slaves [ 549.157901][T23961] bond7 (unregistering): Released all slaves [ 549.306845][T23961] bond8 (unregistering): Released all slaves [ 549.379031][T25267] bridge_slave_1: left allmulticast mode [ 549.386851][T25267] bridge_slave_1: left promiscuous mode [ 549.404504][T25267] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.444663][T25267] bridge_slave_0: left allmulticast mode [ 549.452353][T25267] bridge_slave_0: left promiscuous mode [ 549.458197][T25267] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.466366][T25272] netlink: 'syz.1.5876': attribute type 1 has an invalid length. [ 549.555548][T25274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5877'. [ 549.637132][T23961] tipc: Disabling bearer [ 549.651909][T23961] tipc: Left network mode [ 549.693044][T25279] netlink: 'syz.1.5879': attribute type 1 has an invalid length. [ 549.711198][T25279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.742700][T25279] IPVS: length: 239 != 24 [ 552.711163][T25306] tipc: Enabled bearer , priority 0 [ 552.719267][T25308] syzkaller0: entered promiscuous mode [ 552.725397][T25308] syzkaller0: entered allmulticast mode [ 552.817865][T25329] bond4: Removing last ns target with arp_interval on [ 552.835713][T25320] tipc: Resetting bearer [ 552.994865][T25320] tipc: Disabling bearer [ 553.088435][T25350] __nla_validate_parse: 1 callbacks suppressed [ 553.088458][T25350] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5891'. [ 553.246440][T25362] netlink: 'syz.3.5894': attribute type 1 has an invalid length. [ 553.279524][T25362] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5894'. [ 553.551876][T25381] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5899'. [ 553.561126][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5899'. [ 553.883755][T25396] netlink: 'syz.3.5905': attribute type 21 has an invalid length. [ 553.895107][T25396] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5905'. [ 553.908756][T23961] hsr_slave_0: left promiscuous mode [ 554.409468][T25413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5908'. [ 554.621557][T25426] openvswitch: netlink: IP tunnel dst address not specified [ 555.049821][T25422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5909'. [ 555.076648][T25422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5909'. [ 555.295584][T25437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5914'. [ 555.463610][T23961] IPVS: stop unused estimator thread 0... [ 555.656943][T25459] netlink: 'syz.4.5923': attribute type 1 has an invalid length. [ 555.678961][T25459] netlink: 'syz.4.5923': attribute type 2 has an invalid length. [ 555.707729][T25459] netlink: 'syz.4.5923': attribute type 1 has an invalid length. [ 555.734303][T25459] netlink: 'syz.4.5923': attribute type 2 has an invalid length. [ 555.839774][T25463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.082562][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.093244][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.103841][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.114330][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.125199][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 556.500310][T25481] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5930'. [ 556.808551][T25500] netlink: 'syz.3.5936': attribute type 9 has an invalid length. [ 557.048233][T25466] chnl_net:caif_netlink_parms(): no params data found [ 557.312851][T25525] tipc: Enabled bearer , priority 0 [ 557.361697][T25530] syzkaller0: entered promiscuous mode [ 557.367342][T25530] syzkaller0: entered allmulticast mode [ 557.444628][T25520] syzkaller0: mtu greater than device maximum [ 557.475838][T25509] tipc: Resetting bearer [ 557.511016][T25509] tipc: Disabling bearer [ 557.530179][T25466] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.550217][T25466] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.576395][T25466] bridge_slave_0: entered allmulticast mode [ 557.585447][T25466] bridge_slave_0: entered promiscuous mode [ 557.596866][T25466] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.622486][T25466] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.629942][T25466] bridge_slave_1: entered allmulticast mode [ 557.653013][T25466] bridge_slave_1: entered promiscuous mode [ 557.774100][T25466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.818004][T25466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.964885][T25466] team0: Port device team_slave_0 added [ 558.030413][T25466] team0: Port device team_slave_1 added [ 558.182669][T25466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.190561][T25466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.227297][ T5839] Bluetooth: hci1: command tx timeout [ 558.251509][T25466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.274913][T25466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.283435][T25578] __nla_validate_parse: 1 callbacks suppressed [ 558.283453][T25578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5949'. [ 558.302053][T25466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.345460][T25581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5951'. [ 558.365325][T25466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.391042][T25577] tipc: Enabling of bearer rejected, failed to enable media [ 558.604539][T25466] hsr_slave_0: entered promiscuous mode [ 558.623039][T25466] hsr_slave_1: entered promiscuous mode [ 558.938478][T25613] netlink: 'syz.0.5958': attribute type 2 has an invalid length. [ 559.017819][T25466] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.029777][T25466] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 559.040899][T25466] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 559.065415][T25620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5960'. [ 559.075027][T25618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5960'. [ 559.154264][T25466] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.170436][T25466] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 559.183305][T25466] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 559.240347][T25466] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.255354][T25466] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 559.267769][T25466] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 559.338540][T25466] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.361221][T25466] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 559.373797][T25466] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 559.400662][T25633] gtp1: entered promiscuous mode [ 559.407392][T25635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5967'. [ 559.408064][T25633] gtp1: entered allmulticast mode [ 559.623620][T25466] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 559.638521][T25466] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 559.683258][T25466] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 559.695574][T25648] syzkaller1: entered promiscuous mode [ 559.703506][T25648] syzkaller1: entered allmulticast mode [ 559.720722][T25466] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 559.879394][T25648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5971'. [ 560.005764][T25466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.035551][T25670] netlink: 'syz.3.5977': attribute type 30 has an invalid length. [ 560.179667][T25674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5979'. [ 560.299446][ T5839] Bluetooth: hci1: command tx timeout [ 562.372639][ T5839] Bluetooth: hci1: command tx timeout [ 562.583455][T25696] syzkaller1: left promiscuous mode [ 562.589008][T25696] syzkaller1: left allmulticast mode [ 562.635560][T25466] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.655226][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.662428][ T8856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.762780][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.769978][ T8856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.847903][T25721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5991'. [ 562.898780][T25721] sctp: Trying to GSO but underlying device doesn't support it. [ 563.007555][T25729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5994'. [ 563.365342][T25752] netlink: 'syz.0.6000': attribute type 10 has an invalid length. [ 563.373821][T25466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.496379][T25466] veth0_vlan: entered promiscuous mode [ 563.545465][T25466] veth1_vlan: entered promiscuous mode [ 563.678416][T25466] veth0_macvtap: entered promiscuous mode [ 563.696889][T25466] veth1_macvtap: entered promiscuous mode [ 563.730341][T25466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.753497][T25466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.771530][ T8843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.780337][ T8843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.810208][ T8843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.822612][ T8843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.938797][T25779] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 563.948677][T25780] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 563.957547][T25777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6005'. [ 563.967720][T25779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6005'. [ 563.984690][T25778] syzkaller0: entered promiscuous mode [ 563.990204][T25778] syzkaller0: entered allmulticast mode [ 563.991744][T25784] netlink: 'syz.1.6006': attribute type 15 has an invalid length. [ 564.004732][T25784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6006'. [ 564.243965][T25796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6009'. [ 564.263898][T25796] syzkaller0: entered promiscuous mode [ 564.269404][T25796] syzkaller0: entered allmulticast mode [ 564.423221][ T8843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.434543][ T8843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.453974][ T5839] Bluetooth: hci1: command tx timeout [ 564.546842][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6009'. [ 564.556197][T25795] netlink: 'syz.1.6009': attribute type 1 has an invalid length. [ 564.564288][T25795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6009'. [ 564.624507][T25804] netlink: 'syz.4.6012': attribute type 30 has an invalid length. [ 564.676030][T25809] netlink: 'syz.4.6012': attribute type 30 has an invalid length. [ 564.726164][T23962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.754170][T25812] sctp: [Deprecated]: syz.3.6014 (pid 25812) Use of int in maxseg socket option. [ 564.754170][T25812] Use struct sctp_assoc_value instead [ 564.763468][T23962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.096852][T25824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6016'. [ 565.507089][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 565.525474][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 565.535355][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 565.549300][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 565.557473][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 566.276708][T25874] team_slave_1: mtu less than device minimum [ 566.600592][T25902] netlink: 'syz.3.6041': attribute type 10 has an invalid length. [ 566.687987][T25837] chnl_net:caif_netlink_parms(): no params data found [ 566.894170][T25837] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.910598][T25837] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.919823][T25837] bridge_slave_0: entered allmulticast mode [ 566.935502][T25837] bridge_slave_0: entered promiscuous mode [ 566.946919][T25837] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.956563][T25837] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.965554][T25837] bridge_slave_1: entered allmulticast mode [ 566.979450][T25837] bridge_slave_1: entered promiscuous mode [ 567.039918][T25837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.092503][T25837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.181010][T25837] team0: Port device team_slave_0 added [ 567.192441][T25837] team0: Port device team_slave_1 added [ 567.308063][T25837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.325760][T25837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.372799][T25837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.422865][T25837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.432864][T25837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.510749][T25837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.643876][T25947] bond0: Error: Cannot enslave bond to itself. [ 567.656748][ T52] Bluetooth: hci3: command tx timeout [ 567.684361][T25837] hsr_slave_0: entered promiscuous mode [ 567.692116][T25837] hsr_slave_1: entered promiscuous mode [ 567.698783][T25837] debugfs: 'hsr0' already exists in 'hsr' [ 567.722144][T25837] Cannot create hsr debugfs directory [ 568.064991][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6059'. [ 568.331202][T25837] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.351496][T25837] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.391083][T25987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6063'. [ 568.415175][T25987] netlink: 'syz.4.6063': attribute type 1 has an invalid length. [ 568.430421][T25987] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6063'. [ 568.432918][T25837] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.449800][T25837] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.536343][T25837] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.567595][T25837] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.659639][T25837] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.679145][T25837] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.934631][T26014] geneve0: entered promiscuous mode [ 568.939904][T26014] geneve0: entered allmulticast mode [ 568.948393][T23964] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.966580][T23964] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.991147][ T8854] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.018934][ T8854] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.107984][ T30] audit: type=1800 audit(1761698000.754:7): pid=26021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6078" name="memory.events" dev="tmpfs" ino=91 res=0 errno=0 [ 569.192905][ T30] audit: type=1804 audit(1761698000.784:8): pid=26021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6078" name="/newroot/14/memory.events" dev="tmpfs" ino=91 res=1 errno=0 [ 569.265817][T25837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 569.286557][T25837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 569.415202][T26042] __nla_validate_parse: 5 callbacks suppressed [ 569.415223][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'. [ 569.417972][T26044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'. [ 569.470845][T26030] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.478539][T26030] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.664078][T25837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 569.675688][T25837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 569.687047][T26038] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6081'. [ 569.703552][ T8860] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.712863][ T8860] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.731803][ T52] Bluetooth: hci3: command tx timeout [ 569.765236][ T8860] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.775134][ T8860] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.792289][ T8860] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.802169][ T8860] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.835642][ T8860] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.846545][ T8860] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.933791][T26062] netlink: 'syz.2.6086': attribute type 21 has an invalid length. [ 569.970415][T25837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.995105][T26062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6086'. [ 570.046824][T25837] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.096016][T23962] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.103259][T23962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.162521][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.169745][ T8854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.300934][ T8854] tipc: Subscription rejected, illegal request [ 570.370001][T26081] wg1: left promiscuous mode [ 570.376495][T26081] wg1: left allmulticast mode [ 570.387933][T26081] ip6erspan1: left promiscuous mode [ 570.395339][T26081] ip6erspan1: left allmulticast mode [ 570.413455][T26081] gretap3: left promiscuous mode [ 570.418461][T26081] gretap3: left allmulticast mode [ 570.438787][T26081] xfrm1: left promiscuous mode [ 570.445307][T26081] xfrm1: left allmulticast mode [ 570.452679][T26081] geneve2: left promiscuous mode [ 570.457664][T26081] geneve2: left allmulticast mode [ 570.466168][T26081] vlan0: left promiscuous mode [ 570.472725][T26081] bond4: left promiscuous mode [ 570.477801][T26081] vlan0: left allmulticast mode [ 570.483991][T26081] bond4: left allmulticast mode [ 570.620542][T26091] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 570.916347][T25837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.003694][T26113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6102'. [ 571.016252][T25837] veth0_vlan: entered promiscuous mode [ 571.069465][T25837] veth1_vlan: entered promiscuous mode [ 571.170655][T25837] veth0_macvtap: entered promiscuous mode [ 571.186251][T25837] veth1_macvtap: entered promiscuous mode [ 571.212538][T25837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.226832][T25837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.290541][T26129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.446411][T23962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.457061][T23962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.468811][T23962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.493377][T23962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.535391][ T8860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.559157][ T8860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.595082][T26137] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6108'. [ 571.606265][T26137] openvswitch: netlink: Key type 1040 is out of range max 32 [ 571.620220][T23962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.629076][T23962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.750773][T26143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6018'. [ 571.812297][ T52] Bluetooth: hci3: command tx timeout [ 572.116224][T26159] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6114'. [ 572.263115][T26167] xt_hashlimit: overflow, rate too high: 0 [ 572.689272][T26200] syzkaller0: entered promiscuous mode [ 572.704230][T26200] syzkaller0: entered allmulticast mode [ 572.719507][T26200] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 572.775091][ T9003] IPVS: starting estimator thread 0... [ 572.861748][T26208] IPVS: using max 26 ests per chain, 62400 per kthread [ 573.238253][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6136'. [ 573.248842][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6136'. [ 573.593684][T26244] netlink: 'syz.4.6140': attribute type 21 has an invalid length. [ 573.614224][T26245] netlink: 'syz.4.6140': attribute type 21 has an invalid length. [ 573.893385][ T52] Bluetooth: hci3: command tx timeout [ 574.028381][T26270] tipc: Enabled bearer , priority 0 [ 574.043942][T26271] syzkaller0: entered promiscuous mode [ 574.055765][T26271] syzkaller0: entered allmulticast mode [ 574.106689][T26274] netlink: 'syz.0.6148': attribute type 1 has an invalid length. [ 574.116571][T26266] tipc: Resetting bearer [ 574.163560][T26266] tipc: Disabling bearer [ 574.197223][T26278] netlink: 'syz.2.6151': attribute type 9 has an invalid length. [ 574.373026][ T31] INFO: task kworker/1:1H:56 blocked for more than 143 seconds. [ 574.380732][ T31] Not tainted syzkaller #0 [ 574.400564][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.427242][ T31] task:kworker/1:1H state:D stack:25192 pid:56 tgid:56 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 574.453299][ T31] Workqueue: kblockd blk_mq_requeue_work [ 574.459125][ T31] Call Trace: [ 574.462986][ T31] [ 574.466075][ T31] __schedule+0x1798/0x4cc0 [ 574.471213][ T31] ? do_raw_spin_lock+0x121/0x290 [ 574.476973][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.482667][ T31] ? __pfx___schedule+0x10/0x10 [ 574.495035][ T31] ? schedule+0x91/0x360 [ 574.499483][ T31] schedule+0x165/0x360 [ 574.507832][ T31] schedule_timeout+0x12b/0x270 [ 574.513718][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 574.519300][ T31] ? __pfx_process_timeout+0x10/0x10 [ 574.525922][ T31] ? prepare_to_wait_event+0x437/0x480 [ 574.535833][ T31] nbd_queue_rq+0x662/0xf10 [ 574.540543][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 574.541076][T26296] __nla_validate_parse: 9 callbacks suppressed [ 574.541095][T26296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6158'. [ 574.547545][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 574.568707][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 574.574352][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 574.579420][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 574.586128][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 574.592528][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 574.598902][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 574.606448][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 574.614180][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 574.620225][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 574.626070][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 574.631239][ T31] blk_mq_run_hw_queues+0x33e/0x430 [ 574.636510][ T31] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 574.643180][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.648405][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.655852][ T31] blk_mq_requeue_work+0x717/0x760 [ 574.661005][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 574.668246][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.674298][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 574.680041][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 574.686213][ T31] process_scheduled_works+0xae1/0x17b0 [ 574.692957][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.698993][ T31] worker_thread+0x8a0/0xda0 [ 574.704338][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.710724][ T31] ? __kthread_parkme+0x7b/0x200 [ 574.716267][ T31] kthread+0x711/0x8a0 [ 574.720366][ T31] ? __pfx_worker_thread+0x10/0x10 [ 574.726075][ T31] ? __pfx_kthread+0x10/0x10 [ 574.730706][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.736623][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.742359][ T31] ? __pfx_kthread+0x10/0x10 [ 574.746978][ T31] ret_from_fork+0x4bc/0x870 [ 574.752137][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.757279][ T31] ? __switch_to_asm+0x39/0x70 [ 574.762914][ T31] ? __switch_to_asm+0x33/0x70 [ 574.767713][ T31] ? __pfx_kthread+0x10/0x10 [ 574.774274][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.779108][ T31] [ 574.782996][ T31] [ 574.782996][ T31] Showing all locks held in the system: [ 574.792473][ T31] 1 lock held by rcu_tasks_trace/29: [ 574.803583][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 574.814276][ T31] 1 lock held by khungtaskd/31: [ 574.819155][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.829890][ T31] 4 locks held by kworker/1:1H/56: [ 574.836110][ T31] #0: ffff88801d6dfd48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.848001][ T31] #1: ffffc9000131fba0 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.862374][ T31] #2: ffff888142bf5590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 574.873376][ T31] #3: ffff8880251e06b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 574.882401][ T31] 2 locks held by getty/5586: [ 574.887096][ T31] #0: ffff88814db980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.897141][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 574.907752][ T31] 1 lock held by udevd/5905: [ 574.912824][ T31] #0: ffff888142f68358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 574.922864][ T31] 2 locks held by syz.2.6151/26275: [ 574.928079][ T31] #0: ffff88806b68e988 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 574.939059][ T31] #1: ffffffff8f2cb0c8 (rtnl_mutex){+.+.}-{4:4}, at: ip6mr_sk_done+0x125/0x350 [ 574.948880][ T31] 2 locks held by syz.3.6156/26297: [ 574.954932][ T31] #0: ffff88805b9664d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 574.966172][ T31] #1: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 574.978723][ T31] 3 locks held by syz.0.6158/26296: [ 574.984524][ T31] #0: ffffffff8f2cb0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x346/0x700 [ 574.993811][ T31] #1: ffff888059302d38 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1171/0x2390 [ 575.006266][ T31] #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 575.017838][ T31] [ 575.021258][ T31] ============================================= [ 575.021258][ T31] [ 575.034660][ T31] NMI backtrace for cpu 1 [ 575.034679][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 575.034703][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.034717][ T31] Call Trace: [ 575.034733][ T31] [ 575.034742][ T31] dump_stack_lvl+0x189/0x250 [ 575.034780][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.034810][ T31] ? __pfx__printk+0x10/0x10 [ 575.034853][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 575.034879][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 575.034904][ T31] ? __pfx__printk+0x10/0x10 [ 575.034931][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.034969][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 575.034994][ T31] watchdog+0xf60/0xfa0 [ 575.035021][ T31] ? watchdog+0x1e2/0xfa0 [ 575.035049][ T31] kthread+0x711/0x8a0 [ 575.035083][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.035103][ T31] ? __pfx_kthread+0x10/0x10 [ 575.035135][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.035159][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.035185][ T31] ? __pfx_kthread+0x10/0x10 [ 575.035215][ T31] ret_from_fork+0x4bc/0x870 [ 575.035241][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.035272][ T31] ? __switch_to_asm+0x39/0x70 [ 575.035288][ T31] ? __switch_to_asm+0x33/0x70 [ 575.035304][ T31] ? __pfx_kthread+0x10/0x10 [ 575.035334][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.035371][ T31] [ 575.035415][ T31] Sending NMI from CPU 1 to CPUs 0: [ 575.197362][ C0] NMI backtrace for cpu 0 [ 575.197380][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 575.197400][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.197411][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 575.197439][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 575.197455][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 575.197472][ C0] RAX: 169acc8cff22c400 RBX: ffffffff81967b87 RCX: 169acc8cff22c400 [ 575.197487][ C0] RDX: 0000000000000001 RSI: ffffffff8d70c9b0 RDI: ffffffff8bbf0460 [ 575.197500][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 575.197513][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd370 [ 575.197526][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 575.197538][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 575.197552][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.197564][ C0] CR2: 00007fbd97db12f8 CR3: 000000007afcc000 CR4: 00000000003526f0 [ 575.197580][ C0] Call Trace: [ 575.197587][ C0] [ 575.197594][ C0] default_idle+0x13/0x20 [ 575.197619][ C0] default_idle_call+0x73/0xb0 [ 575.197646][ C0] do_idle+0x1e7/0x510 [ 575.197669][ C0] ? __pfx_do_idle+0x10/0x10 [ 575.197697][ C0] cpu_startup_entry+0x44/0x60 [ 575.197715][ C0] rest_init+0x2de/0x300 [ 575.197738][ C0] start_kernel+0x3ae/0x410 [ 575.197764][ C0] x86_64_start_reservations+0x24/0x30 [ 575.197784][ C0] x86_64_start_kernel+0x143/0x1c0 [ 575.197802][ C0] common_startup_64+0x13e/0x147 [ 575.197840][ C0] [ 583.494329][T23964] bond6 (unregistering): (slave gretap1): Releasing active interface [ 583.620365][T23964] bond2 (unregistering): (slave geneve2): Releasing active interface [ 584.133402][T23964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.143729][T23964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.155133][T23964] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 584.167018][T23964] bond0 (unregistering): Released all slaves [ 584.182413][T23964] bond1 (unregistering): Released all slaves [ 584.198453][T23964] bond2 (unregistering): Released all slaves [ 584.218699][T23964] bond3 (unregistering): (slave bond4): Releasing backup interface [ 584.228620][T23964] bond3 (unregistering): Released all slaves [ 584.338674][T23964] bond4 (unregistering): Released all slaves [ 584.354452][T23964] bond5 (unregistering): Released all slaves