last executing test programs: 23.055106526s ago: executing program 2 (id=2868): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008044}], 0x1, 0x40081) (async) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e2414000200"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) 22.991342297s ago: executing program 2 (id=2869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv4_newroute={0x44, 0x18, 0x20, 0x70bd2a, 0x3, {0x2, 0x10, 0x14, 0x1, 0xfd, 0x2, 0xc8, 0x9, 0x1000}, [@RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_DPORT={0x6, 0x1d, 0x4e22}, @RTA_FLOW={0x8, 0xb, 0x2}]}, 0x44}}, 0x40081) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffffe7, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYBLOB="3c352ac37cb6f8fc1da277690e2da9bd490ffda4fca09f89e8aaca1d269d95fdd5735be61a34e0df05ae61f16d1db9ee65a0668036e3d5e78efe6f98157c9ff37cfb7504bf5794f302d3d2600d6662e34f5837d61e265003705896cc650919cf31b0341922d62220f35fcdf407c1e9936f6ecf2c3720b17a7379f21d2b9c98c950285064807aa44eb6ffc2e98b209a6a8cc687e2c9e048c11f0ca8946aed4f6d1bbf140657273acaedb0f9be90984c2094c99e"], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x404c880) r3 = accept$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000280)=0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x21df, @local, 0xe224}, @in={0x2, 0x4e24, @multicast2}], 0x2c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000002000020000000900020073797a32000000000900010073797a3000003a112993d2402747c7000024000480200001800700010063740000140002800800014000000013400000000614000000110001000000000000007ad9b9ae1f850a8da0e6e61564d95972f1721cee362af250de3cbc21a401cf7e1c4c96c96583314babc3ecdad962a0adee63de63d17a72bb9efbd32d48474802c329ceb2c485b17b7088287c28bd92b2c10ad960183730630f906c48e03fed1aafaa7c8869040ed05212bec4ed3a8ad352e56fd3372ac396d8df114772acc8"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x600, 0x4) 22.653153828s ago: executing program 2 (id=2873): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x32, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000002c0)={'dummy0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xffffffffffffffff) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001100000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/5, 0x5, 0x1, &(0x7f00000003c0)=""/246, 0xf6}, &(0x7f0000000240)=0x40) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @broadcast, 'ip6gretap0\x00'}}, 0x1e) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x40047452, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) 22.316311262s ago: executing program 2 (id=2879): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) r2 = accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) sendmmsg(r2, &(0x7f0000000f00)=[{{&(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000014c0)="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", 0x1000}], 0x1, &(0x7f00000003c0)=[{0x48, 0x103, 0x5, "3fe3ecc28d8306863047bf1813c47b756be29268637d757a2b7adad18a7d0634446b616cde0465ac6bcd3b0bda3d1a41ed2987"}], 0x48}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="ad9fe356e08a7266805bfcbc23f6059cdf8ae9de13994e43145dcb2d352fcd67f276a640c28af29d997d56e8c30320f114c0c41138d2ba60076c5bcffcf4788cd44a727837f888a1c314f573db188ad3cca883f3552f143c0bc248bad175a6ba7e91b618c16d74e089baada631699fd8041fc8e2d7ddf5dde49da9726215eafb882a43d3bf9bb12ae0be81055a3d53f3b3efa292b576ad57a56cc0b92470f91540c18cc56e49a962355bc18a78f060affd75a2dcde6a049e98193d2d900a93", 0xbf}], 0x1, &(0x7f0000000540)=[{0x110, 0x118, 0x5c3, "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"}, {0x50, 0x10d, 0x162c0, "ae2aba3477c38d91acd3d2df88015eba3940171cb7464813c9e40ab7cd92270a461d1ced2afcc0fc064e21597127de3ff0658a63a94a184f0809675ffa3b"}], 0x160}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)="f9b177cbe6af7458f449685ff87e3f1a97f9a5c7495fa3db479aa645d39546f2d4d122aeafde90f14bc68a78b4abeb80f87d7260e71034f6d60c01b60f064a95029bd61fa648fa5d3bdd0f42a43625fc563285b0fb3da3cad6b01167fb21998b063059e47bd2c0bbbcf3f210d30305702b35a1577e34de350831156d06ace21f1a8dbfd496829578ffcccd4c88d9f99d94fed582181b23522f83e14ab75b53dba5776b1b03e56ec6f8eb215b75b948861dec7109c9cc9d", 0xb7}, {&(0x7f0000000780)="26ae03bb5aa3922c90bd8d60f63a23df009d92a2dda9d60a78043f04793fa04225ceb34e81", 0x25}, {&(0x7f00000007c0)="b491bd2c1a6678580b176af51a918f07db2a01a4e73a969eb7e8d2862b4d914008cae00b4f26bd6d5d2a59f67f48a8ef163ced27bc8727fe93faeaf6628b7bfa8d0116dab8eecf40d82067364a799ddb633db9d9f6893362aaddd9f142762920d6d8838b8fea9ced22267d8e770e53584e46af117ab641944f5d3bff", 0x7c}], 0x3}}, {{&(0x7f0000000880)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000900)="1324e030aeabf4080bb2a841cefa322e19efa8a571dcc462edd71e782ddf5c09fbcb2716afc1a14f97c2b7644b6b6693f9464d", 0x33}, {&(0x7f0000000940)="cf108526a52e67b19bf0ccbb4372fe00a142414b78f5059d334b25206defa2b145e09279ff9681b345bcd9636f2a6f39728ff1694f2c57dd07ca86b2e729290d571bcfeb424f7553c6a3fe3de083560ab976c9765e556a2dec5cd14a242bbbdbcae2e0039afe2fb777ba4bd6831eb31c3ee05cac28cd1dac0b55142af70b3681c310c007448885b8cd3a021319d2c30e57e621918680f74a1f3e832475765ed8698bdb3267b112a19a4363", 0xab}], 0x2, &(0x7f0000000a40)=[{0xf0, 0x10c, 0x7ff, "584571bfcb2335f624696fffaaf447db7b1a4d05816a4fd8141f647599ebdc107a05f9b1525d5bd398fdfd6fcb46afde1999e72518d2c4d497e4ae2b7ae4ef625391cec2edce67e94af5fe94748d109db9f69c7f945aa60db34ffd563fceacbd8a57c273cce37c7402fd076be815703651954ca390f9307abfc88230abeeb9f19ff87efcea43cff4256a691cfaa365e0c32346e6ffab25723f221ac631c00a22f6d9e257ef720e9fe48f6e4976c5a3a5a45868119cc4a4977f5e0cbf25debb3214ef68afaf71aa9ed696d008cdba3ead32bd0101843ac0c78affa787ae"}, {0xe0, 0x102, 0x9, "8300870ade8b0fb5145915b37d5188d90d7215c80669fa74206eb1e62dc90c50e93011a7f783c4a2615ca1ee60d508115db2ab916d93a4df3e3e069547938281299102eea44db953135af4a3d4148f1734c922306019a920a12190c208fcf0564f6382809b4da1617dda61e42711337e7964003792e4d1c81052c5d23f860ecbea2a8e42a35fba02bfe16a87701ec0eb8826aa3fd6661b438925f93bbd7f555c1e52de41b01008f7b5bcc60f2dbe8b9367b7dccfb48861375f271033f091cebbaa99e5518177cdb1d6dd3a4c"}, {0xf8, 0x101, 0x4, "a911c8c612480ac3e2a537117ff48e736a9b9495831ad7e921009b0726c327e5d584c55f1ae72a0fdc568fb2cc4f1dda74f76a599c5e13a040cb95f95fdd750c776b875f7e416e581c6bba110c14f8bee0b5bff6f2d0994907ecac9659dec5a48f19b68c54ad24e29818d164f733172660dfe15157d95956ea68a2bb1782e6ef6cf8d637d06a01ad7d1bf26631d34201b4ec84f60e510479dad14139eda81ae3b87ebac34b20b04b472aa2e3d300e1872bac432ba0ca54aad5e7df098f03db8f3bca7cc5da1bdace7a948485241a0a1c16fa5d230d1e53904329f3020009bb94ff6a4a468b89fc"}, {0x110, 0x1976b4261f40e1d6, 0x74, "f055c490c84b37dc6ff9973b9150248a3b2e9fad19c4d404b74df1c96e8958e0625e12b5d804f45d650093afa07c2c5b3a8d1480041bb81626067043bdca4bb648e9a600e6d5344f95b2cd9280dde497ed433bf34d85aee0af2568a9533baf1d10e0c790dd33fdb3eb181ecc39d67a12c9af5fa27f0bf3a5c3436661ac7fe23c4c738d55325ea260a3d00c7ee26b927c9bbc0ded60ae226e692ac5f60ef5a48151ecea4dbb8a878b8d082f373c3d76d55b35dd3b1a11c9c40152e1e52cde861adb5cb1acf6b85ca5dc4d754193856669eb4ac0e85ed62bff78e2f8335195e24e257169af306ae5ae5da7b68433b33db71ceee6161b43e6938d76839b565c"}, {0xb0, 0x108, 0x8, "d9dd934855150ba951b6280416d6172207fd3c3a9a4b53e46ca5b610ccdab05c2a628cc7308acde2065c99d0342d6013af434143bfa874e218019c413e8fae20cd02d525cc1e02abdd581c9692b591dfe87a034f0a4d8ebb7428901d4bdd3afeca0dabdb90fd4c77e32228d153c0d834c46a0dac3fa4710fa74dc9378ba00b8fadea068e478104a89c675bb7640eb532136f1f29585763fcd6371a208ea179"}], 0x488}}], 0x4, 0x28000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.39067331s ago: executing program 2 (id=2884): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x81, 0x5, 0x25, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x7800, 0x7, 0xd1e1, 0x6}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) getsockopt$bt_hci(r5, 0x84, 0x84, 0x0, &(0x7f0000001080)) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140020000906fc00000000000040d9000a00000245643d51f3e614ef667eeb8da0c7eed87815386f88fdcbb5e0ddae930d2d6540a8ce11d0e51b01040000958983f5fa4810bdd3206de668933e1d9b88735d825b79a268a3cc2d909e"], 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x880) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x4, 0x7, 0x1, 0x9, 0x7, 0x3a8, 0x4}, 0x1c) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x4, 0x600, 0x10000000, {0x0, 0xea60}, {r8, r9/1000+60000}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "b878b2196cca6381"}}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4044005) 21.06417182s ago: executing program 2 (id=2890): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x1}]}, {0x0, [0x5f, 0x2e, 0xe32b8cec5ab8c040]}}, 0x0, 0x29}, 0x20) socket$kcm(0x10, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000001c0)={0x2}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000200)=0x8000000000000001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5c}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 19.082380833s ago: executing program 0 (id=2915): r0 = socket(0xf, 0x5, 0x5) setsockopt$MRT6_TABLE(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000100)={r10, 0xa11c}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x7b, 0x8000, 0x9, 0x6, r10}, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r11, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) 18.648234777s ago: executing program 0 (id=2921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}}, 0x1c}}, 0x0) 18.462752653s ago: executing program 0 (id=2926): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000013c0)={'team0\x00', &(0x7f00000012c0)=@ethtool_drvinfo={0x3, "b1015904849180e9a33bba5c09d84bcfaaf125ea71d525c3ca8d29f38ca7de3d", "3e905dc5345719d6c26ae7d6869eafe1308fbe9ec3937a088353ecc234c1b270", "e27209058368b97e07c6a36bd71bf50faaaa4cc459b461563d96fcf43cef9556", "cb2da74058cb8d204d1fcfe681724ba1c43f448a6dd17bc66b6ca749694f6aba", "942b254fd347c27ba8eac26cb159a5d6fca9f2ebd5f690c7d1aae8c50669cfb9", "5fc03157508709b83ecd0a7b"}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000340)=0xff, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000300)=0x9, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38003d0902000000fcdbdf2507000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01030100e000000200000000000000000000000008000000"], 0x38}}, 0x4000000) 18.293420389s ago: executing program 3 (id=2927): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000fddbdf254c000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@remote, @bcast, @remote, @null, @null]}, &(0x7f0000000040)=0x40, 0x80000) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000080)={'pim6reg0\x00', 0xffff}) 18.20270367s ago: executing program 3 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0x92}]}, &(0x7f0000000080)='syzkaller\x00', 0xfffffff5, 0xb9, &(0x7f00000000c0)=""/185, 0x41000, 0x7, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xa, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="fd378d984ca7b8e2f77903b54bd7f033e36951de007db98b07c57ee0970128a3bf8a9c54d4d28a782b1cc780569c26e3b6eb74bb66fcf7f5b1701a1ed7c54e1985db6fa4cac711ad8c85c96f7dadde8e746152f34a5bf7aba71ca2ba50dc53437160cfcb9996c2f5eb95992e13a90ea563090f15ea22", @ANYRES8=r1, @ANYBLOB="000225bd7000fddbdf2511000000080039000080000005002a000000000008003200090000000a000900000000000000000008003b004024000005003000050000000800310080000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000380)=@raw=[@printk={@li}, @exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x142c5b6b}}], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x10, 0x1d7e, 0x79fa}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) (rerun: 64) close(r2) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x40000, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0xf401, 0x0, 0x54}, 0x9c) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000880)={0x1, [0x0]}, &(0x7f00000008c0)=0x8) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000040)={0x1d, r5}, 0x10) (async, rerun: 64) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0xffffffffffffff09, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c7) (rerun: 64) close(0x3) r6 = socket(0x28, 0x5, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r8, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200ee0000000014", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 18.052934957s ago: executing program 4 (id=2930): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/98, 0x62}, {&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f00000006c0)=""/117, 0x75}, {&(0x7f00000001c0)=""/31, 0x1f}], 0x4, 0x1, 0x3) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18.034241162s ago: executing program 3 (id=2931): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @loopback, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'wg0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 17.837384922s ago: executing program 3 (id=2932): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x40480d0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0xa, 0x922000000003, 0x11) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x40480d0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 17.721384091s ago: executing program 4 (id=2933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0f000000180000000000000020d975c0335fb394fb8afdb0a86c831396c7312fc5e9f407468085b551e127118d36a4a3d39b2bd9e2b15f95dcafe80fffdfebe96e76d931f0e6689a1f226f0b258be49c8fc2ac51eae1295452c7b684b86cc0b67378b09e0200d91fe3685f030d66", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x8000, 0x0, 0xa640, 0xc, {{0x8, 0x4, 0x1, 0x6, 0x20, 0x65, 0x0, 0xc0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xa3, [@dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x3, 0xff62, 0x100, 0x3, 0x100000, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) 17.720922565s ago: executing program 3 (id=2934): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x10, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'nr0\x00', @random}) 17.637917665s ago: executing program 4 (id=2936): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)) 17.50521452s ago: executing program 0 (id=2938): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c0001800600060086dd"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x7c}}, 0x48001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000001440)=ANY=[@ANYRES16=r2, @ANYRES8=r3, @ANYRESDEC=r3, @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="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"], 0x44}, 0x1, 0x2000000000000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a05000000000000000000020000000900010073697a3000000001000000000000010000004000000000000000000a397fda7052bc3396e816676bdf1068e1c942174919ce51528012b9b59bb91c8f468d797a5e001ce6046340a6863f1f52483c6765b163c9ecc3c1164e59f0337eef11cf630c7553e1901f01464eb051c3b97c0a261167920457c8f5f3b24ce71d1ded92154c2a6c7a7a16863a1a4574d9f1ffb49fb7bad22371ceee3f2f9c2b8f76b6a240d16da017064a31ad2f3380c40b3579ab992e04c3d040dc206223cd7e0d73ff6dab3a5f16dd3d86e66b9f"], 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000b00)={r5, @in6={{0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x3, 0x20, 0x7, 0x1, 0xfca}, &(0x7f0000000bc0)=0x98) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="458e1ac26847a7d5a7f1fa299b543078ff2b5639e679566db30422e7774570673840c2f4691a921ab7d1bc70323f1fb2be91fa6052b000a469f9135abb005470d00389a453fafcbf247013458475c40cc0487a99ad15e9ce8fe8c132396f2521c7fecfa598f181007703d666279f0170916f50d7ac807175fb66f2e377bf669e80b1607ca97ff3ab5c9eac823039e5e37c55e9d1bb16ac8a137e92c3c2cefd96c9acaad5f415d441eec2f0a6e1290da89030ae9d58d231198ba37f471c78f6d06026f913eac22d307afbc869041061770494", @ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000}, 0x8}, 0x94) 17.503930114s ago: executing program 4 (id=2939): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYBLOB="080002"], 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r5, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 17.373879055s ago: executing program 0 (id=2941): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x0, 0x20, 0x0, 0x9}, &(0x7f00000012c0)=0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 17.257486962s ago: executing program 4 (id=2942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x4, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 17.245360697s ago: executing program 0 (id=2943): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x3c, &(0x7f0000000180)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, @in6={0xa, 0x4e21, 0x8, @remote, 0x5}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0xc1, "a83eb8dafda646bafd5096e2fc67015d03d24a4b42cb26ed05282013104d8bf803cf324375b3a07e70addf5cb110d4362f05794026f03cff32c3643f8c101810946e604b10c7ba69ebeb2f1ea853d04142df148aff80b7be0525968c1779313d448413e657ff00bfec0b8944a9d96277c1514e31e1cbd459193d76c6dd97715cc2cf99cb178abba443a10cce8a6a2b735c2cef770370e859a750e5dcca4b711773ab5f2a4dbde9a1df35b99c72eb91073b973b4fb1b0c953d5d1e2a16445621dce"}, &(0x7f0000000340)=0xc9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000640)={0x2, [0x0, 0x0]}, &(0x7f0000000680)=0xc) openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000700)={@empty, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@can={0xc, {{0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "f3fadce5f15d2cc8"}}}}, &(0x7f0000000740)={0x0, 0x2, [0xc64, 0xd4, 0xbab, 0x2ea]}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.time\x00', 0x0, 0x0) recvfrom$l2tp(r5, &(0x7f00000007c0)=""/28, 0x1c, 0x120a3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000840)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000880)='THAWED\x00', 0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r5}, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, 0x1402, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendto$inet6(r5, &(0x7f0000000a40)="2d990a4e9183fa32d39e18c6256ac1e26b2c7100d58061fd41c672d5fcd9a1f7b0d4fcb07a297d5ace60ad99f25ea3b74696fb53771b28bbc8a09a01c0877b5f26", 0x41, 0x4000, &(0x7f0000000ac0)={0xa, 0x4e23, 0x7fffffff, @empty, 0xffffffff}, 0x1c) socket(0x21, 0x6, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000b00)=0x9) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000b40)=@bpq0, 0x10) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000b80)=0x4, &(0x7f0000000bc0)=0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xa0}, 0x801) 17.191754145s ago: executing program 4 (id=2944): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x801) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r3, 0x6}, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=@getpolicy={0x58, 0x15, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@local, 0x4e24}, 0x6e6bba, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xcc, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}, {0x8, 0x15, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xeb8c}, {0x6, 0x11, 0x4}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xb}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x40884) (async) listen(r4, 0x8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000314010000000000fcdbdf250900020073797a3100000000080041007369770014003300626f6e645f736c6176655f30000000000900020073797a310000000008004100736977001400330067310000000000000000000900020073797a3000000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) (async) ioctl$int_in(r8, 0x5421, &(0x7f0000000040)=0xdc7d) (async) bind$bt_sco(r8, &(0x7f0000000740)={0x1f, @none}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000420000000e008e006e657464df0e5d657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0046e54f7cc002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000"], 0x84}}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80002200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x10c, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfffffffffffffff8}, {0xc, 0x90, 0xfffffffffffffffb}}]}, 0x10c}}, 0x4048094) (async, rerun: 32) listen(r8, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) accept4(r8, 0x0, 0x0, 0x80800) (async) accept4(r4, 0x0, 0x0, 0x80000) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) (async, rerun: 64) syz_init_net_socket$ax25(0x3, 0x3, 0x6) (rerun: 64) 16.802334404s ago: executing program 3 (id=2947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newsa={0x190, 0x10, 0x713, 0x40000, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x2, 0xb}, [@algo_crypt={0x9f, 0x2, {{'ecb-serpent-avx\x00'}, 0x2b8, "40961e2a9811f8683b99b5b264d9f655513c7f90a81307439a7d2769f7e96fa80e4659507b18c298dcf6cd803c65678741db3a1f8c842c79b3d3206e22742000682bd717dd3cb07026a67c074383f52868c5d17b199d00"}}]}, 0x190}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r7, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r6) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc810}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d4"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r12, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43eb}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) 15.726477694s ago: executing program 1 (id=2953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100"/25], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_rq_requeue\x00', r0, 0x0, 0x8000}, 0x18) 15.566205378s ago: executing program 1 (id=2954): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd26, 0xffffffff, {0xa, 0x14, 0x20, 0x40, 0x3, 0x0, 0x0, 0x7}, [@FRA_DST={0x14, 0x1, @mcast2}, @FRA_SRC={0x14, 0x2, @private2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'virt_wifi0\x00', 0x102e}) 15.4247283s ago: executing program 1 (id=2955): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x1, 0x1ff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x11, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xbf}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x40000000}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) (async) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) 15.296291609s ago: executing program 1 (id=2956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0x1, 0x0, 0x2}, {0x10002, 0x65ad, 0x1, 0x0, 0xfffffffffffffff8, 0x802b, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x6c}, 0x2, @in=@empty, 0x40000, 0x5, 0x0, 0xb7, 0x10000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_RATE={0x14, 0x6, {0xdd07, 0x8, 0x9, 0x9}}]}}}]}, 0x64}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000d80)={0xec, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44040}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x370, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x328, 0x1, [@m_xt={0x1b4, 0xa, 0x0, 0x0, {{0x7}, {0x18c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc6, 0x6, {0x4, 'mangle\x00', 0xe, 0xd43, "e73b494ff07bbfa288806d487a2678106259b5b15917a71b7a7979bea7ccac755b16d7fb7d2a0b5f9241348d89f1ab4002fed1f518ed55a8272fbf780563bbebb96e9c474865f3d903a36c867c1242562d0e2cbe42b3403ddf5f59b1e368ca6f66c989bcf37b151504a5f41a80f7dc65a7483ed94f39bff48d1f3e5133a85f6e2c76d4e774ed4e1f696b2990a99106514806b6ac002bc000004a2fab"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xffffffffffffff0d, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b385"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xd4, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x85, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x6d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x6c, 0x11, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x10001, 0x2, 0x5, 0xdbe1}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4f01, 0x8001, 0x7, 0x9, 0xfffffff4}, 0x3}}]}, {0x5, 0x6, "8e"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, {0x34, 0x1, [@m_gact={0x30, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r7 = socket(0x10, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000000) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r9, 0x89e7, &(0x7f0000000180)={0xfffffffd}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3ce49fcf352faebe33310000008d00000000aecb06970300840000000900010073797a3000247f2bd771fe8e0000000c0004800800014000ffffffff00020000000000e86342592dc0d64fe540c9b90866b20726d3720cec9df6eb8228e7d000dca0c3bea61c5e7d63f11f7476a0a56fcc3253cf01528ea9075da03ce104a27bd42f68084532f62e57d28fc110cacb70ab95ee9e764051cde9a7e11f9dd622e6c360b473a3362eb3b970920fbd378ec0006244b98f93d1b91a9b50df8ccec3660dbc6eb57b89e138202b1ac30541f886510e9b48b4164df8abc5927bb4396300"], 0x3c}}, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r11, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 15.16003717s ago: executing program 1 (id=2957): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 15.108291204s ago: executing program 1 (id=2958): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x11e, 0x0, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r1, 0x400442c9, 0x200000f3) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="4cff3f00"], 0x4) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) pwritev(r3, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba8d4416efcb4768e949522f47331d4548861502149843b0606505ad3255eb63568e3c6147e90cc21f78d2323128c8d375102a2bcdb5cd78e7f3d6ff64da1b49a467badc8e4f6d699c789929cf02ca9c7165d13c7f7b8be98dcf5a0eb01a3df3e9bdfde437d11f4f599ad8bb03bf63efc4183d44de47eaf11ec43172db7ef524be9203ad39a624829527f8c30773b6", 0x90}], 0x1, 0x5e, 0xdc) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) syz_emit_ethernet(0x1016, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES8=r2, @ANYRES8=r2], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r9, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x13, 0x6, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x6088501}, 0x20000000) 2.064748364s ago: executing program 32 (id=2943): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x3c, &(0x7f0000000180)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, @in6={0xa, 0x4e21, 0x8, @remote, 0x5}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0xc1, "a83eb8dafda646bafd5096e2fc67015d03d24a4b42cb26ed05282013104d8bf803cf324375b3a07e70addf5cb110d4362f05794026f03cff32c3643f8c101810946e604b10c7ba69ebeb2f1ea853d04142df148aff80b7be0525968c1779313d448413e657ff00bfec0b8944a9d96277c1514e31e1cbd459193d76c6dd97715cc2cf99cb178abba443a10cce8a6a2b735c2cef770370e859a750e5dcca4b711773ab5f2a4dbde9a1df35b99c72eb91073b973b4fb1b0c953d5d1e2a16445621dce"}, &(0x7f0000000340)=0xc9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000640)={0x2, [0x0, 0x0]}, &(0x7f0000000680)=0xc) openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000700)={@empty, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@can={0xc, {{0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "f3fadce5f15d2cc8"}}}}, &(0x7f0000000740)={0x0, 0x2, [0xc64, 0xd4, 0xbab, 0x2ea]}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.time\x00', 0x0, 0x0) recvfrom$l2tp(r5, &(0x7f00000007c0)=""/28, 0x1c, 0x120a3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000840)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000880)='THAWED\x00', 0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r5}, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, 0x1402, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendto$inet6(r5, &(0x7f0000000a40)="2d990a4e9183fa32d39e18c6256ac1e26b2c7100d58061fd41c672d5fcd9a1f7b0d4fcb07a297d5ace60ad99f25ea3b74696fb53771b28bbc8a09a01c0877b5f26", 0x41, 0x4000, &(0x7f0000000ac0)={0xa, 0x4e23, 0x7fffffff, @empty, 0xffffffff}, 0x1c) socket(0x21, 0x6, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000b00)=0x9) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000b40)=@bpq0, 0x10) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000b80)=0x4, &(0x7f0000000bc0)=0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xa0}, 0x801) 2.038967765s ago: executing program 33 (id=2944): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x801) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r3, 0x6}, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=@getpolicy={0x58, 0x15, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@local, 0x4e24}, 0x6e6bba, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xcc, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}, {0x8, 0x15, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xeb8c}, {0x6, 0x11, 0x4}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xb}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x40884) (async) listen(r4, 0x8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000314010000000000fcdbdf250900020073797a3100000000080041007369770014003300626f6e645f736c6176655f30000000000900020073797a310000000008004100736977001400330067310000000000000000000900020073797a3000000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) (async) ioctl$int_in(r8, 0x5421, &(0x7f0000000040)=0xdc7d) (async) bind$bt_sco(r8, &(0x7f0000000740)={0x1f, @none}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000420000000e008e006e657464df0e5d657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0046e54f7cc002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000"], 0x84}}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80002200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x10c, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfffffffffffffff8}, {0xc, 0x90, 0xfffffffffffffffb}}]}, 0x10c}}, 0x4048094) (async, rerun: 32) listen(r8, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) accept4(r8, 0x0, 0x0, 0x80800) (async) accept4(r4, 0x0, 0x0, 0x80000) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) (async, rerun: 64) syz_init_net_socket$ax25(0x3, 0x3, 0x6) (rerun: 64) 1.014352112s ago: executing program 34 (id=2947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newsa={0x190, 0x10, 0x713, 0x40000, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x2, 0xb}, [@algo_crypt={0x9f, 0x2, {{'ecb-serpent-avx\x00'}, 0x2b8, "40961e2a9811f8683b99b5b264d9f655513c7f90a81307439a7d2769f7e96fa80e4659507b18c298dcf6cd803c65678741db3a1f8c842c79b3d3206e22742000682bd717dd3cb07026a67c074383f52868c5d17b199d00"}}]}, 0x190}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r7, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r6) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc810}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d4"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r12, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43eb}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) 0s ago: executing program 35 (id=2958): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x11e, 0x0, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r1, 0x400442c9, 0x200000f3) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="4cff3f00"], 0x4) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) pwritev(r3, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba8d4416efcb4768e949522f47331d4548861502149843b0606505ad3255eb63568e3c6147e90cc21f78d2323128c8d375102a2bcdb5cd78e7f3d6ff64da1b49a467badc8e4f6d699c789929cf02ca9c7165d13c7f7b8be98dcf5a0eb01a3df3e9bdfde437d11f4f599ad8bb03bf63efc4183d44de47eaf11ec43172db7ef524be9203ad39a624829527f8c30773b6", 0x90}], 0x1, 0x5e, 0xdc) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) syz_emit_ethernet(0x1016, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES8=r2, @ANYRES8=r2], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r9, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x13, 0x6, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x6088501}, 0x20000000) kernel console output (not intermixed with test programs): ty:111 writeback:0 [ 134.458850][ T8541] slab_reclaimable:10942 slab_unreclaimable:99903 [ 134.458850][ T8541] mapped:30286 shmem:1364 pagetables:1273 [ 134.458850][ T8541] sec_pagetables:0 bounce:0 [ 134.458850][ T8541] kernel_misc_reclaimable:0 [ 134.458850][ T8541] free:1328446 free_pcp:12925 free_cma:0 [ 134.572391][ T8541] Node 0 active_anon:26788kB inactive_anon:0kB active_file:10788kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121044kB dirty:444kB writeback:0kB shmem:4720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12584kB pagetables:4864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.621765][ T8541] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.632800][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.670'. [ 134.700656][ T8562] netlink: 'syz.4.671': attribute type 14 has an invalid length. [ 134.723670][ T8541] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.786302][ T8561] netlink: 'syz.4.671': attribute type 14 has an invalid length. [ 134.798963][ T8541] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 134.818304][ T8541] Node 0 DMA32 free:1409708kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25692kB inactive_anon:0kB active_file:10788kB inactive_file:157800kB unevictable:1536kB writepending:456kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:36036kB local_pcp:16236kB free_cma:0kB [ 134.917690][ T8541] lowmem_reserve[]: 0 0 1 1 1 [ 134.968522][ T8541] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 135.023605][ T8541] lowmem_reserve[]: 0 0 0 0 0 [ 135.028360][ T8541] Node 1 Normal free:3888144kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17952kB local_pcp:6176kB free_cma:0kB [ 135.074100][ T8541] lowmem_reserve[]: 0 0 0 0 0 [ 135.078850][ T8541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.096772][ T8541] Node 0 DMA32: 651*4kB (UME) 852*8kB (UME) 328*16kB (UM) 97*32kB (UM) 85*64kB (UM) 80*128kB (UME) 64*256kB (UM) 44*512kB (UM) 28*1024kB (UM) 15*2048kB (UM) 312*4096kB (UM) = 1409708kB [ 135.133059][ T8541] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 135.156342][ T8541] Node 1 Normal: 172*4kB (UE) 44*8kB (UME) 36*16kB (UME) 74*32kB (UME) 30*64kB (UME) 10*128kB (UME) 4*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3888144kB [ 135.210421][ T8541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.234227][ T8541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.254068][ T8541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.278336][ T8541] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 135.330812][ T8541] 44560 total pagecache pages [ 135.348670][ T8541] 0 pages in swap cache [ 135.358809][ T8541] Free swap = 124996kB [ 135.368806][ T8541] Total swap = 124996kB [ 135.377664][ T8541] 2097051 pages RAM [ 135.385939][ T8541] 0 pages HighMem/MovableOnly [ 135.396262][ T8541] 425672 pages reserved [ 135.404995][ T8541] 0 pages cma reserved [ 135.418431][ T8595] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 135.439528][ T8595] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 136.145108][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 136.168116][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.686'. [ 136.198368][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.296150][ T8619] bond0: (slave rose0): Enslaving as an active interface with an up link [ 136.315560][ T8630] sctp: [Deprecated]: syz.2.688 (pid 8630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.315560][ T8630] Use struct sctp_sack_info instead [ 136.544873][ T8646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.613391][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.689'. [ 136.635724][ T8646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.672003][ T8653] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 136.710859][ T8653] netlink: 204 bytes leftover after parsing attributes in process `syz.3.693'. [ 136.714637][ T8655] netlink: 'syz.1.694': attribute type 13 has an invalid length. [ 136.738671][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 136.753257][ T8655] netlink: 'syz.1.694': attribute type 58 has an invalid length. [ 137.499151][ T8695] (unnamed net_device) (uninitialized): (slave ip6_vti0): Device is not bonding slave [ 137.529652][ T8695] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6_vti0) [ 137.892613][ T8708] : entered promiscuous mode [ 138.507865][ T8738] __nla_validate_parse: 9 callbacks suppressed [ 138.507881][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 138.821133][ T8748] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 139.053387][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.721'. [ 139.069716][ T8764] syzkaller0: entered promiscuous mode [ 139.081105][ T8764] syzkaller0: entered allmulticast mode [ 139.266870][ T8774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.725'. [ 139.333488][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 139.362668][ T8775] tc_dump_action: action bad kind [ 139.574751][ T8789] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 139.615078][ T8789] netlink: 'syz.2.729': attribute type 3 has an invalid length. [ 139.645227][ T8789] netlink: 224 bytes leftover after parsing attributes in process `syz.2.729'. [ 139.668629][ T8783] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.727'. [ 139.749120][ T8789] NCSI netlink: No device for ifindex 131080 [ 140.279977][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'. [ 140.334320][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'. [ 140.807649][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.743'. [ 141.425628][ T8883] syzkaller1: entered promiscuous mode [ 141.449895][ T8883] syzkaller1: entered allmulticast mode [ 141.745201][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 142.739361][ T8923] delete_channel: no stack [ 142.997978][ T8964] netlink: 'syz.2.765': attribute type 15 has an invalid length. [ 143.231359][ T8968] netlink: 'syz.3.766': attribute type 12 has an invalid length. [ 143.866933][ T8998] __nla_validate_parse: 1 callbacks suppressed [ 143.866950][ T8998] netlink: 68 bytes leftover after parsing attributes in process `syz.0.773'. [ 143.889689][ T8994] netlink: 256 bytes leftover after parsing attributes in process `syz.0.773'. [ 143.910875][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 144.233970][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 144.373562][ T9030] syz_tun: entered allmulticast mode [ 144.388111][ T9027] syz_tun: left allmulticast mode [ 144.514213][ T9036] syz_tun: entered allmulticast mode [ 144.647335][ T9038] netlink: 'syz.3.785': attribute type 3 has an invalid length. [ 144.745121][ T9036] bond0: entered allmulticast mode [ 144.760821][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.809097][ T9046] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.786'. [ 144.843583][ T9033] syz_tun: left allmulticast mode [ 145.153233][ T5996] IPVS: starting estimator thread 0... [ 145.164722][ T9062] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 145.272458][ T9064] IPVS: using max 27 ests per chain, 64800 per kthread [ 145.323016][ T12] bond0 (unregistering): Released all slaves [ 145.417022][ T9068] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 145.434992][ T9068] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 145.999757][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.803'. [ 146.070551][ T9093] netlink: 248 bytes leftover after parsing attributes in process `syz.3.801'. [ 146.224124][ T9100] nbd: must specify an index to disconnect [ 146.247640][ T9101] nbd: must specify an index to disconnect [ 146.304165][ T9111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.807'. [ 147.060018][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 147.118736][ T9157] netlink: 'syz.4.815': attribute type 11 has an invalid length. [ 147.129910][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 147.217442][ T9167] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 147.364896][ T9183] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 147.472938][ T9167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.547855][ T9168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.569967][ T9168] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.605740][ T9168] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 147.677822][ T9203] netlink: 'syz.0.825': attribute type 3 has an invalid length. [ 147.776701][ T9174] bond4: (slave veth5): Enslaving as an active interface with a down link [ 147.967468][ T9218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.971666][ T9212] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 148.038525][ T9212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.360339][ T9236] netlink: 'syz.1.833': attribute type 5 has an invalid length. [ 148.628812][ T9253] IPVS: length: 8 != 1152 [ 148.773492][ T9255] batadv0: entered promiscuous mode [ 148.806019][ T9255] bond0: entered promiscuous mode [ 148.857914][ T9255] bond_slave_0: entered promiscuous mode [ 148.872683][ T9255] bond_slave_1: entered promiscuous mode [ 148.890406][ T9255] hsr1: entered allmulticast mode [ 148.908786][ T9255] batadv0: entered allmulticast mode [ 148.931575][ T9255] bond0: entered allmulticast mode [ 148.938866][ T9269] __nla_validate_parse: 8 callbacks suppressed [ 148.938879][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 148.964044][ T9255] bond_slave_0: entered allmulticast mode [ 148.973119][ T9255] bond_slave_1: entered allmulticast mode [ 148.989823][ T9255] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 149.230271][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.846'. [ 149.300723][ T9291] netlink: 60 bytes leftover after parsing attributes in process `syz.0.840'. [ 150.116083][ T9326] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 150.213107][ T9334] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.281407][ T9332] syzkaller0: entered promiscuous mode [ 150.316346][ T9332] syzkaller0: entered allmulticast mode [ 150.449216][ T9341] netlink: 'syz.1.857': attribute type 10 has an invalid length. [ 150.484192][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.859'. [ 150.529157][ T9341] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.641040][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'. [ 150.690323][ T9341] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 150.865442][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.863'. [ 151.422401][ T9392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.870'. [ 151.460082][ T9388] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 152.089044][ T9432] macvtap1: entered promiscuous mode [ 152.107557][ T9432] vlan0: entered promiscuous mode [ 152.115399][ T9432] macvtap1: entered allmulticast mode [ 152.120892][ T9432] vlan0: entered allmulticast mode [ 152.130302][ T9432] veth0_vlan: entered allmulticast mode [ 152.165371][ T9439] netlink: 312 bytes leftover after parsing attributes in process `syz.1.882'. [ 152.180523][ T9437] macvtap2: entered promiscuous mode [ 152.186336][ T9437] macvtap2: entered allmulticast mode [ 152.227782][ T9441] 8021q: VLANs not supported on ip6_vti0 [ 152.260739][ T9436] tipc: Enabled bearer , priority 0 [ 152.297743][ T9438] syzkaller0: entered promiscuous mode [ 152.312426][ T9438] syzkaller0: entered allmulticast mode [ 152.379423][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 152.396168][ T9436] tipc: Resetting bearer [ 152.421313][ T9435] tipc: Resetting bearer [ 152.440126][ T9435] tipc: Disabling bearer [ 152.473807][ T9451] netlink: 'syz.0.885': attribute type 3 has an invalid length. [ 152.501811][ T9451] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.885'. [ 152.529288][ T9451] netlink: 'syz.0.885': attribute type 3 has an invalid length. [ 152.790000][ T9470] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 153.151153][ T9493] netlink: 'syz.4.899': attribute type 6 has an invalid length. [ 153.172842][ T9492] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 153.190219][ T9488] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 153.200837][ T9494] netlink: 'syz.4.899': attribute type 6 has an invalid length. [ 153.288808][ T9488] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.377015][ T9498] veth7: entered promiscuous mode [ 153.395580][ T9498] bond5: (slave veth7): Enslaving as an active interface with an up link [ 154.222879][ T9552] netlink: 'syz.4.919': attribute type 33 has an invalid length. [ 154.265015][ T9552] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 154.368058][ T9558] 8021q: VLANs not supported on ip_vti0 [ 155.020928][ T9593] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 155.058788][ T9593] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 155.207339][ T9607] netlink: 'syz.3.935': attribute type 21 has an invalid length. [ 155.465347][ T9624] openvswitch: netlink: IP tunnel dst address not specified [ 155.507049][ T9628] __nla_validate_parse: 8 callbacks suppressed [ 155.507065][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 155.935902][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 156.971114][ T9685] syzkaller0: entered promiscuous mode [ 156.982201][ T9685] syzkaller0: entered allmulticast mode [ 157.151649][ T9708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.954'. [ 158.811512][ T9739] sock: sock_set_timeout: `syz.2.961' (pid 9739) tries to set negative timeout [ 158.853674][ T9739] sock: sock_set_timeout: `syz.2.961' (pid 9739) tries to set negative timeout [ 158.894455][ T9739] sock: sock_set_timeout: `syz.2.961' (pid 9739) tries to set negative timeout [ 159.095726][ T9755] net veth1_virt_wifi .: renamed from virt_wifi0 [ 159.188034][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 159.207045][ T9761] netlink: 'syz.2.969': attribute type 11 has an invalid length. [ 159.277288][ T9763] netlink: 'syz.3.968': attribute type 13 has an invalid length. [ 159.435599][ T9780] netlink: 116 bytes leftover after parsing attributes in process `syz.1.971'. [ 159.505350][ T9763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.580406][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 159.615166][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 159.665054][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 159.753085][ T9788] netlink: 96 bytes leftover after parsing attributes in process `syz.2.976'. [ 159.827721][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 160.324186][ T9829] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 160.365150][ T9829] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 160.387006][ T9829] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 160.424891][ T9829] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 160.443654][ T9833] lo: entered promiscuous mode [ 160.453766][ T9833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.797196][ T9855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.946059][ T9862] __nla_validate_parse: 2 callbacks suppressed [ 160.946077][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.998'. [ 160.981734][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'. [ 161.009268][ T9862] netlink: 'syz.3.998': attribute type 7 has an invalid length. [ 162.051073][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 162.096146][ T5924] hid-generic 0005:04F3:1010.0002: item fetching failed at offset 0/1 [ 162.123307][ T5924] hid-generic 0005:04F3:1010.0002: probe with driver hid-generic failed with error -22 [ 162.177650][ T9901] vlan2: entered allmulticast mode [ 162.202906][ T9901] bridge0: entered allmulticast mode [ 162.223404][ T9901] bridge2: port 1(vlan2) entered blocking state [ 162.229919][ T9901] bridge2: port 1(vlan2) entered disabled state [ 162.238786][ T9901] vlan2: entered promiscuous mode [ 162.247307][ T9901] bridge0: entered promiscuous mode [ 162.353521][ T9909] netlink: 171920 bytes leftover after parsing attributes in process `syz.4.1011'. [ 162.431881][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 162.494982][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1012'. [ 163.161560][ T9959] ipvlan2: entered promiscuous mode [ 163.227369][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 163.306904][ T9970] netlink: 'syz.1.1027': attribute type 9 has an invalid length. [ 163.332590][ T9970] netlink: 'syz.1.1027': attribute type 6 has an invalid length. [ 163.404799][ T9970] netlink: 'syz.1.1027': attribute type 7 has an invalid length. [ 163.445950][ T9970] netlink: 'syz.1.1027': attribute type 8 has an invalid length. [ 163.483330][ T9974] tipc: Started in network mode [ 163.532767][ T9974] tipc: Node identity 4687c0e137a3, cluster identity 4711 [ 163.553847][ T9974] tipc: Enabled bearer , priority 0 [ 163.582005][ T9983] syzkaller0: entered promiscuous mode [ 163.592952][ T9983] syzkaller0: entered allmulticast mode [ 163.607847][ T9974] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 163.787476][T10000] unsupported nla_type 52263 [ 163.804366][ T9974] tipc: Resetting bearer [ 163.932395][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 164.037273][ T9971] tipc: Resetting bearer [ 164.125996][ T9971] tipc: Disabling bearer [ 164.230263][T10016] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1037'. [ 164.903226][T10054] tipc: Enabled bearer , priority 0 [ 164.925475][T10054] syzkaller0: entered promiscuous mode [ 164.931011][T10054] syzkaller0: entered allmulticast mode [ 164.947348][T10056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1049'. [ 165.225977][T10078] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 165.235154][T10053] tipc: Resetting bearer [ 165.242705][T10078] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 165.265313][T10053] tipc: Disabling bearer [ 165.680566][T10100] netlink: 'syz.4.1061': attribute type 21 has an invalid length. [ 165.975894][T10113] __nla_validate_parse: 5 callbacks suppressed [ 165.975910][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 166.181334][ T5996] IPVS: starting estimator thread 0... [ 166.197552][T10129] IPVS: sh: FWM 3 0x00000003 - no destination available [ 166.255430][T10126] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1068'. [ 166.292849][T10130] IPVS: using max 27 ests per chain, 64800 per kthread [ 166.414515][T10142] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1072'. [ 166.461583][T10146] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 166.594741][T10146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.632494][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 166.658663][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'. [ 166.672302][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 166.705571][T10155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1075'. [ 166.749956][T10152] bond2: (slave veth3): Enslaving as an active interface with a down link [ 166.779115][T10159] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 167.125556][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1080'. [ 167.161381][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1080'. [ 167.915350][T10223] syz.1.1096 (10223) used greatest stack depth: 17864 bytes left [ 167.946499][T10226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1097'. [ 168.067951][T10238] 8021q: VLANs not supported on wg0 [ 168.123090][T10240] batadv0: entered promiscuous mode [ 168.130394][T10240] bond0: entered promiscuous mode [ 168.143159][T10240] bond_slave_0: entered promiscuous mode [ 168.160754][T10240] bond_slave_1: entered promiscuous mode [ 168.194406][T10240] debugfs: 'hsr1' already exists in 'hsr' [ 168.213880][T10240] Cannot create hsr debugfs directory [ 168.220330][T10240] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 168.223208][T10250] netlink: 'syz.4.1104': attribute type 11 has an invalid length. [ 168.236105][T10240] hsr1: entered allmulticast mode [ 168.248254][T10240] batadv0: entered allmulticast mode [ 168.253899][T10240] bond0: entered allmulticast mode [ 168.259038][T10240] bond_slave_0: entered allmulticast mode [ 168.265039][T10240] bond_slave_1: entered allmulticast mode [ 168.271201][T10240] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 168.300415][ T61] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.362972][ T61] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.420007][ T61] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.450379][ T61] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.958815][T10283] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 169.626540][T10330] ip6gre1: entered allmulticast mode [ 169.632840][T10334] netlink: 'syz.2.1126': attribute type 15 has an invalid length. [ 169.805374][T10343] netlink: 'syz.1.1131': attribute type 33 has an invalid length. [ 170.068403][T10360] veth0: entered promiscuous mode [ 170.243935][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 170.403427][T10377] syz_tun: entered allmulticast mode [ 170.609040][T10374] syz_tun: left allmulticast mode [ 171.165621][T10414] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 171.605589][T10439] __nla_validate_parse: 8 callbacks suppressed [ 171.605607][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 171.805433][T10449] sctp: [Deprecated]: syz.3.1167 (pid 10449) Use of int in max_burst socket option deprecated. [ 171.805433][T10449] Use struct sctp_assoc_value instead [ 172.582605][T10477] nbd: must specify at least one socket [ 172.585854][T10485] openvswitch: netlink: Tunnel attr 114 out of range max 16 [ 172.972812][T10504] netlink: 'syz.4.1185': attribute type 9 has an invalid length. [ 172.995003][T10504] netlink: 'syz.4.1185': attribute type 9 has an invalid length. [ 173.265265][T10519] netlink: 'syz.2.1189': attribute type 11 has an invalid length. [ 173.292224][T10519] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1189'. [ 173.501592][T10526] netlink: 'syz.0.1191': attribute type 7 has an invalid length. [ 173.611798][T10526] : entered promiscuous mode [ 174.036426][T10555] netlink: 'syz.0.1198': attribute type 64 has an invalid length. [ 174.067838][T10555] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1198'. [ 174.303965][T10563] block nbd0: server does not support multiple connections per device. [ 174.320275][T10563] block nbd0: shutting down sockets [ 174.602951][T10585] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 174.848514][T10598] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 174.855161][T10598] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 174.893103][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 174.907885][T10603] syz_tun: entered allmulticast mode [ 174.916669][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1212'. [ 175.101041][T10607] tipc: Enabled bearer , priority 0 [ 175.145496][T10607] syzkaller0: entered promiscuous mode [ 175.160191][T10607] syzkaller0: entered allmulticast mode [ 175.199798][T10595] syz_tun: left allmulticast mode [ 175.343167][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1217'. [ 175.669666][T10608] tipc: Resetting bearer [ 175.822644][T10608] tipc: Disabling bearer [ 175.915205][T10642] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 175.950055][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 175.986927][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 176.200115][T10653] netlink: 'syz.2.1227': attribute type 10 has an invalid length. [ 176.322013][T10660] delete_channel: no stack [ 176.358995][T10657] IPVS: ip_vs_edit_dest(): server weight less than zero [ 176.366495][ T5992] IPVS: starting estimator thread 0... [ 176.413535][T10657] nbd: must specify a device to reconfigure [ 176.492811][T10664] IPVS: using max 30 ests per chain, 72000 per kthread [ 177.241174][T10707] netlink: 'syz.1.1243': attribute type 2 has an invalid length. [ 177.627071][T10719] netlink: 'syz.0.1249': attribute type 3 has an invalid length. [ 177.673679][T10719] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1249'. [ 178.189524][T10753] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 178.355991][T10753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.460374][T10759] bond6: (slave gretap1): making interface the new active one [ 178.466578][T10758] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1258'. [ 178.505056][T10758] unsupported nlmsg_type 40 [ 178.547386][T10759] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 178.839489][T10783] netlink: 'syz.1.1265': attribute type 5 has an invalid length. [ 178.861652][T10789] netlink: 'syz.2.1266': attribute type 3 has an invalid length. [ 179.018575][T10800] netlink: 'syz.0.1270': attribute type 10 has an invalid length. [ 179.147463][T10809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1274'. [ 179.304201][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1278'. [ 179.333392][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 179.626085][T10844] veth0: entered promiscuous mode [ 179.640715][T10846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1285'. [ 179.688485][T10848] batadv_slave_1: entered promiscuous mode [ 179.699144][T10848] batman_adv: batadv0: Adding interface: macsec2 [ 179.712287][T10848] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.739906][T10844] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1284'. [ 179.769275][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.789221][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.802253][T10848] batman_adv: batadv0: Interface activated: macsec2 [ 179.878520][T10848] veth0: left promiscuous mode [ 180.695473][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'. [ 180.704854][T10918] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 180.714525][T10918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.764278][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 180.881105][T10929] tipc: Enabled bearer , priority 0 [ 180.976771][T10939] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 181.027021][T10939] bond0: (slave bridge4): making interface the new active one [ 181.036141][T10939] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 181.090589][T10947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1311'. [ 181.134235][T10950] openvswitch: netlink: Flow actions attr not present in new flow. [ 181.204613][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 181.220523][T10955] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 181.277502][T10948] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 181.353102][T10959] macvtap1: entered promiscuous mode [ 181.361461][T10959] macvtap1: entered allmulticast mode [ 181.388119][T10959] bond_slave_0: entered promiscuous mode [ 181.394048][T10959] bond_slave_1: entered promiscuous mode [ 181.399786][T10959] dummy0: entered promiscuous mode [ 181.491629][T10959] bond0: entered allmulticast mode [ 181.514233][T10959] bond_slave_0: entered allmulticast mode [ 181.534775][T10959] bond_slave_1: entered allmulticast mode [ 181.552768][T10959] dummy0: entered allmulticast mode [ 181.559360][T10959] bond0: entered promiscuous mode [ 181.567702][T10959] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 181.575615][T10959] team0: Device macvtap1 failed to register rx_handler [ 181.583315][T10959] bond0: left allmulticast mode [ 181.588330][T10959] bond_slave_0: left allmulticast mode [ 181.594608][T10959] bond_slave_1: left allmulticast mode [ 181.600447][T10959] dummy0: left allmulticast mode [ 181.606512][T10959] bond0: left promiscuous mode [ 181.612709][T10959] bond_slave_0: left promiscuous mode [ 181.617430][T10978] openvswitch: netlink: Actions may not be safe on all matching packets [ 181.618136][T10959] bond_slave_1: left promiscuous mode [ 181.631968][T10959] dummy0: left promiscuous mode [ 181.690879][T10953] syzkaller0: entered promiscuous mode [ 181.698029][T10953] syzkaller0: entered allmulticast mode [ 181.711247][T10929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 181.767234][T10928] tipc: Resetting bearer [ 181.840132][T10928] tipc: Disabling bearer [ 182.319192][T11023] netlink: 'syz.0.1336': attribute type 12 has an invalid length. [ 182.338781][T11025] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 182.348016][T11023] netlink: 'syz.0.1336': attribute type 11 has an invalid length. [ 182.400929][T11025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.465572][T11025] bond3: (slave gretap1): making interface the new active one [ 182.495745][T11025] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 182.668210][T11052] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 182.758424][T11052] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 182.766080][T11052] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 182.780340][T11052] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 182.803695][T11053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.827660][T11053] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 182.860303][ T5996] IPVS: starting estimator thread 0... [ 182.874592][T11060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.893064][T11060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.901229][T11060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.909306][T11060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.917648][T11060] batman_adv: batadv0: Interface deactivated: macsec2 [ 182.926754][T11060] batman_adv: batadv0: Removing interface: macsec2 [ 182.952416][T11066] IPVS: using max 32 ests per chain, 76800 per kthread [ 182.967076][T11060] bond0: (slave batadv0): Releasing backup interface [ 183.006459][T11074] __nla_validate_parse: 5 callbacks suppressed [ 183.006474][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'. [ 183.034926][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'. [ 183.282499][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 183.308018][T11091] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20001 [ 183.413778][T11098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1353'. [ 183.438353][T11098] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1353'. [ 183.500591][T11105] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1355'. [ 183.553325][T11108] validate_nla: 2 callbacks suppressed [ 183.553342][T11108] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 183.668146][T11115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1357'. [ 183.678890][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 183.681941][T11108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.705888][T11116] bridge0: port 1(veth0_to_bridge) entered blocking state [ 183.716260][T11116] bridge0: port 1(veth0_to_bridge) entered disabled state [ 183.725929][T11116] veth0_to_bridge: entered allmulticast mode [ 183.752825][T11116] veth0_to_bridge: entered promiscuous mode [ 183.760978][T11116] bridge0: port 1(veth0_to_bridge) entered blocking state [ 183.768740][T11116] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 184.290465][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 184.443723][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1371'. [ 184.846101][T11183] IPVS: Scheduler module ip_vs_sip not found [ 185.274131][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 185.479344][T11233] openvswitch: netlink: IPv4 tun info is not correct [ 185.679943][T11245] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 186.247749][T11288] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.566381][T11313] netlink: 'syz.4.1414': attribute type 4 has an invalid length. [ 186.698994][T11326] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 186.870161][T11320] bridge0: port 1(veth0_to_bridge) entered disabled state [ 187.107477][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.117154][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.148427][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.167538][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.771057][T11397] delete_channel: no stack [ 188.313062][T11418] openvswitch: netlink: IPv4 tun info is not correct [ 188.503369][T11434] __nla_validate_parse: 7 callbacks suppressed [ 188.503387][T11434] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1451'. [ 188.508698][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 188.537127][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 188.577200][T11439] netlink: 'syz.2.1454': attribute type 12 has an invalid length. [ 188.604158][T11442] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1455'. [ 188.701775][T11449] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1458'. [ 189.010742][T11470] : entered promiscuous mode [ 189.128354][T11475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1466'. [ 189.138683][T11475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1466'. [ 189.148428][T11476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1466'. [ 189.166777][T11476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1466'. [ 189.885460][T11523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.940777][T11526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.951628][T11525] pim6reg1: entered promiscuous mode [ 189.957199][T11525] pim6reg1: entered allmulticast mode [ 190.237799][T11537] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.253519][T11538] bond7: option mode: unable to set because the bond device is up [ 191.067719][T11581] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1496'. [ 191.107370][T11583] netlink: 'syz.0.1495': attribute type 10 has an invalid length. [ 191.175961][T11585] vlan3: entered promiscuous mode [ 191.181316][T11585] vlan3: entered allmulticast mode [ 191.187863][T11585] hsr_slave_1: entered allmulticast mode [ 191.271707][T11590] bridge0: port 4(batadv1) entered blocking state [ 191.279133][T11590] bridge0: port 4(batadv1) entered disabled state [ 191.285863][T11590] batadv1: entered allmulticast mode [ 191.295557][T11590] batadv1: entered promiscuous mode [ 191.772625][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 191.782423][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 192.114034][T11625] Bluetooth: MGMT ver 1.23 [ 192.316359][T11626] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 192.508584][T11636] sch_fq: defrate 0 ignored. [ 192.819943][T11664] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 192.826503][T11665] delete_channel: no stack [ 192.960740][T11672] netlink: 'syz.1.1523': attribute type 9 has an invalid length. [ 193.040350][T11667] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 193.247724][T11689] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 193.499404][T11701] netlink: 'syz.1.1527': attribute type 1 has an invalid length. [ 193.756474][T11725] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 193.777922][T11727] : renamed from hsr0 [ 193.817495][T11725] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.886030][T11725] veth7: entered promiscuous mode [ 194.117305][T11750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.129157][T11731] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 194.187860][T11752] __nla_validate_parse: 10 callbacks suppressed [ 194.187878][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1541'. [ 194.227364][T11752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 194.437657][T11765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.447026][T11774] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 194.518198][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 194.564574][T11788] netlink: 'syz.2.1550': attribute type 27 has an invalid length. [ 194.573008][T11788] netlink: 'syz.2.1550': attribute type 4 has an invalid length. [ 194.580748][T11788] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1550'. [ 194.691549][T11793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1554'. [ 194.810177][T11804] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.1555'. [ 195.019220][T11819] netlink: 'syz.3.1559': attribute type 13 has an invalid length. [ 195.059898][T11819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.059957][T11822] netlink: 'syz.2.1561': attribute type 1 has an invalid length. [ 195.143522][T11824] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 195.145071][T11822] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 195.261122][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 195.433554][T11855] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1571'. [ 195.851784][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 196.017214][T11896] netlink: 'syz.4.1584': attribute type 1 has an invalid length. [ 196.058444][T11896] veth1: entered promiscuous mode [ 196.126858][T11901] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 196.155726][T11903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1585'. [ 196.246979][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 196.253390][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.255986][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 196.280437][T11909] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 196.454937][T11917] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 196.469765][T11917] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 197.143187][T11962] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 197.197945][T11962] veth9: entered promiscuous mode [ 197.214556][T11967] netlink: 'syz.2.1603': attribute type 3 has an invalid length. [ 197.248580][T11966] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 197.287242][T11974] netlink: 'syz.0.1606': attribute type 1 has an invalid length. [ 197.380261][T11981] veth0: entered promiscuous mode [ 197.411788][T11981] veth0 (unregistering): left promiscuous mode [ 197.649354][T11996] team0: Device ip6gre1 is of different type [ 198.023783][T12015] veth1: entered promiscuous mode [ 198.047457][T12018] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 198.148870][T12030] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 199.024188][T12121] validate_nla: 7 callbacks suppressed [ 199.024204][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.040163][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.049074][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.057546][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.065838][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.074616][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.082949][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.092378][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.101937][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.110669][T12121] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 199.431253][T12146] : entered promiscuous mode [ 199.459036][T12147] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.486685][T12147] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 199.497714][T12147] bond7: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 199.517501][T12153] __nla_validate_parse: 12 callbacks suppressed [ 199.517517][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 199.576888][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 199.889428][T12176] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1654'. [ 199.989514][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 200.000102][T12180] veth1: entered promiscuous mode [ 200.132507][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 200.636117][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1667'. [ 200.658038][T12223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.668057][T12223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.683075][T12223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.700725][T12223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.763235][T12227] tipc: Enabled bearer , priority 0 [ 200.770825][T12227] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 200.782711][T12227] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 200.795436][T12227] tipc: Resetting bearer [ 200.805673][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 200.812559][T12227] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 200.826717][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 200.924770][T12229] tipc: Resetting bearer [ 201.031951][T12239] veth1: entered promiscuous mode [ 201.513385][T12268] delete_channel: no stack [ 201.625472][T12275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'. [ 201.636670][T12275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'. [ 201.718405][T12275] : (slave bond_slave_0): Releasing backup interface [ 201.761937][T12275] team0: Port device team_slave_0 removed [ 201.768338][ T5924] tipc: Node number set to 1252503283 [ 201.796643][T12275] team0: Port device team_slave_1 removed [ 201.812899][T12275] bond2: (slave veth5): Releasing active interface [ 201.826116][T12275] vlan2: left promiscuous mode [ 201.841978][T12275] bridge0: left promiscuous mode [ 201.867805][T12275] bridge2: port 1(vlan2) entered disabled state [ 201.896468][T12275] bond0: (slave bridge4): Releasing active interface [ 201.935168][ T37] tipc: Resetting bearer [ 202.046627][T12301] nbd: must specify a device to reconfigure [ 202.075236][T12301] veth1_macvtap: left promiscuous mode [ 202.100983][T12301] team0: Device veth1_macvtap failed to register rx_handler [ 202.591336][T12339] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 202.662800][T12340] veth1: entered promiscuous mode [ 202.740616][T12349] rdma_op ffff88807f35c9f0 conn xmit_rdma 0000000000000000 [ 203.442505][T12389] veth1: entered promiscuous mode [ 204.220219][T12436] veth9: entered promiscuous mode [ 204.566024][T12453] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 204.727120][T12467] validate_nla: 35 callbacks suppressed [ 204.727138][T12467] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 204.848765][T12467] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.097427][T12486] tipc: Started in network mode [ 205.116687][T12486] tipc: Node identity 0900000000000000ffffffffffffffff, cluster identity 4711 [ 205.142964][T12489] netlink: 'syz.0.1751': attribute type 4 has an invalid length. [ 205.221054][T12495] __nla_validate_parse: 212 callbacks suppressed [ 205.221071][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1752'. [ 205.252536][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1752'. [ 205.284718][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'. [ 205.391829][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 205.406934][T12507] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1756'. [ 205.573953][T12515] netlink: 'syz.4.1759': attribute type 39 has an invalid length. [ 205.678952][T12525] veth1: entered promiscuous mode [ 205.711782][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1763'. [ 205.728285][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 205.904450][T12541] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1768'. [ 206.403712][T12569] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 206.466888][T12579] openvswitch: netlink: IPv6 tunnel dst address is zero [ 206.479921][T12577] netlink: 'syz.2.1778': attribute type 1 has an invalid length. [ 206.530972][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 206.573852][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 206.892614][T12607] netlink: 'syz.3.1787': attribute type 6 has an invalid length. [ 207.002013][T12614] netlink: 'syz.1.1791': attribute type 9 has an invalid length. [ 207.011313][T12615] bridge0: port 1(ipvlan2) entered blocking state [ 207.023619][T12615] bridge0: port 1(ipvlan2) entered disabled state [ 207.030569][T12615] ipvlan2: entered allmulticast mode [ 207.048446][T12615] bridge0: entered allmulticast mode [ 207.063975][T12615] ipvlan2: left allmulticast mode [ 207.074959][T12615] bridge0: left allmulticast mode [ 207.187432][T12626] netlink: 'syz.4.1795': attribute type 1 has an invalid length. [ 207.424308][T12634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.441803][T12637] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 207.460175][T12637] macvtap1: entered allmulticast mode [ 207.472355][T12637] veth0_macvtap: entered allmulticast mode [ 207.494652][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 207.515063][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 207.532873][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 208.067342][T12637] infiniband syz2: set down [ 208.081683][T12637] infiniband syz2: added vxcan1 [ 208.101763][ T44] vxcan1 speed is unknown, defaulting to 1000 [ 208.195844][T12637] RDS/IB: syz2: added [ 208.200425][T12637] smc: adding ib device syz2 with port count 1 [ 208.208259][T12637] smc: ib device syz2 port 1 has pnetid [ 208.216221][ T44] vxcan1 speed is unknown, defaulting to 1000 [ 208.226166][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 208.450342][T12691] netlink: 'syz.3.1815': attribute type 2 has an invalid length. [ 208.667598][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 208.703987][T12713] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 208.726268][T12714] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 208.806452][T12709] tipc: Enabling of bearer rejected, failed to enable media [ 208.867412][T12721] veth5: entered promiscuous mode [ 209.021931][T12727] tun0: tun_chr_ioctl cmd 1074025675 [ 209.042258][T12727] tun0: persist disabled [ 209.106192][T12729] Bluetooth: MGMT ver 1.23 [ 209.238716][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 209.797155][T12760] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 209.866493][T12760] bond4: left allmulticast mode [ 210.010259][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 210.089906][T12790] validate_nla: 2 callbacks suppressed [ 210.089923][T12790] netlink: 'syz.4.1841': attribute type 7 has an invalid length. [ 210.127010][T12790] netlink: 'syz.4.1841': attribute type 8 has an invalid length. [ 210.278350][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056789400: rx timeout, send abort [ 210.527857][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 210.627698][T12816] bond0: option ad_select: unable to set because the bond device is up [ 210.666530][T12816] netlink: zone id is out of range [ 210.679851][T12816] netlink: zone id is out of range [ 210.689591][T12816] netlink: zone id is out of range [ 210.699710][T12816] netlink: zone id is out of range [ 210.709250][T12816] netlink: zone id is out of range [ 210.717134][T12816] netlink: del zone limit has 4 unknown bytes [ 210.736576][T12816] __nla_validate_parse: 11 callbacks suppressed [ 210.736591][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 210.787204][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056789400: abort rx timeout. Force session deactivation [ 210.869176][T12825] netlink: 'syz.4.1854': attribute type 3 has an invalid length. [ 210.888236][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1853'. [ 210.897971][T12825] netlink: 'syz.4.1854': attribute type 3 has an invalid length. [ 210.928421][T12825] netlink: 'syz.4.1854': attribute type 3 has an invalid length. [ 211.123686][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 211.123806][ T5870] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 211.288771][T12832] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1855'. [ 211.563291][T12863] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1864'. [ 211.729718][T12872] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 211.839685][T12880] syzkaller0: create flow: hash 922350383 index 1 [ 211.898656][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 211.991812][T12891] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1875'. [ 212.007658][T12885] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 212.023756][ T13] syzkaller0: tun_net_xmit 76 [ 212.028788][ T13] syzkaller0: tun_net_xmit 48 [ 212.041500][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1876'. [ 212.052470][ T5924] syzkaller0: tun_net_xmit 76 [ 212.096010][T12885] bond6: entered promiscuous mode [ 212.101511][T12885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.196812][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'. [ 212.205978][ T5924] syzkaller0: tun_net_xmit 76 [ 212.261605][T12891] hsr_slave_0 (unregistering): left promiscuous mode [ 212.689013][T12931] vxcan1 speed is unknown, defaulting to 1000 [ 212.700927][T12874] syzkaller0: delete flow: hash 922350383 index 1 [ 214.221020][T12963] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 214.243719][T12963] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1892'. [ 214.298845][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1893'. [ 214.359882][T12963] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.430051][T12968] veth1_macvtap: left promiscuous mode [ 214.721785][T12988] IPv6: sit3: Disabled Multicast RS [ 214.745391][T12988] sit3: entered allmulticast mode [ 214.779722][T12989] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 214.916451][T12997] netlink: 'syz.4.1900': attribute type 13 has an invalid length. [ 214.947315][T12997] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 215.020549][T13006] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 215.107250][T13012] netem: unknown loss type 0 [ 215.207240][T13019] veth9: entered promiscuous mode [ 215.547304][T13043] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 215.576362][T13043] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 215.782201][T13058] macvlan4: entered promiscuous mode [ 215.789853][T13058] macvlan4: entered allmulticast mode [ 215.811280][T13058] bond7: entered promiscuous mode [ 215.817166][T13058] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 215.829728][T13058] bond7: left promiscuous mode [ 215.893270][T13062] __nla_validate_parse: 3 callbacks suppressed [ 215.893285][T13062] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1922'. [ 215.912581][T13062] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1922'. [ 215.922018][T13062] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1922'. [ 216.063840][T13067] veth9: entered promiscuous mode [ 216.236390][T13088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.316303][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'. [ 216.519377][T13108] sit0: left promiscuous mode [ 216.542821][T13108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.617458][T13108] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1934'. [ 216.663630][T13115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1936'. [ 216.826237][T13129] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1939'. [ 216.945383][T13139] bridge: RTM_NEWNEIGH with invalid ether address [ 216.953251][T13139] bridge: RTM_NEWNEIGH with invalid ether address [ 217.025564][T13144] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 217.343650][T13162] block nbd0: shutting down sockets [ 217.414075][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'. [ 217.436820][T13164] tipc: Enabled bearer , priority 0 [ 217.531963][T13178] netlink: 'syz.4.1945': attribute type 11 has an invalid length. [ 217.544061][T13177] tipc: Resetting bearer [ 217.585855][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 217.586038][T13178] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1945'. [ 217.803458][T13163] tipc: Disabling bearer [ 217.849939][T13187] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 218.199105][T13191] tipc: Enabled bearer , priority 0 [ 218.375195][T13189] tipc: Resetting bearer [ 219.571786][T13189] tipc: Disabling bearer [ 219.850248][T13254] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 219.872162][T13254] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 220.024646][ T5870] block nbd0: Receive control failed (result -32) [ 220.213354][T13281] netlink: 'syz.1.1976': attribute type 8 has an invalid length. [ 220.561567][ T8085] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.591961][ T5996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.602877][ T8085] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.785180][T13320] tipc: New replicast peer: 255.255.255.255 [ 220.791642][T13320] tipc: Enabled bearer , priority 10 [ 220.869761][T13325] veth1: entered promiscuous mode [ 220.916407][T13328] pimreg3: entered allmulticast mode [ 220.925246][T13328] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.263810][T13345] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 221.271604][T13345] __nla_validate_parse: 12 callbacks suppressed [ 221.271620][T13345] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1998'. [ 221.442422][ T5996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.468828][T13358] veth5: entered promiscuous mode [ 221.523581][ T5996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.592611][T13371] sctp: [Deprecated]: syz.2.2009 (pid 13371) Use of int in max_burst socket option. [ 221.592611][T13371] Use struct sctp_assoc_value instead [ 221.880322][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 221.902497][ T44] tipc: Node number set to 1898234081 [ 221.944522][T13390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.009126][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2015'. [ 222.042728][T13398] nft_compat: unsupported protocol 1 [ 222.143392][T13406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2019'. [ 222.220170][T13415] lo: entered allmulticast mode [ 222.230068][T13415] tunl0: entered allmulticast mode [ 222.239327][T13415] gre0: entered allmulticast mode [ 222.434436][T13415] gretap0: entered allmulticast mode [ 222.501414][T13415] erspan0: entered allmulticast mode [ 222.530390][T13415] ip_vti0: entered allmulticast mode [ 222.551864][T13415] ip6_vti0: entered allmulticast mode [ 222.571506][T13415] sit0: entered allmulticast mode [ 222.637701][T13415] ip6tnl0: entered allmulticast mode [ 222.647641][T13415] ip6gre0: entered allmulticast mode [ 222.663721][T13415] syz_tun: entered allmulticast mode [ 222.677209][T13415] ip6gretap0: entered allmulticast mode [ 222.686359][T13415] vcan0: entered allmulticast mode [ 222.706716][T13415] dummy0: entered allmulticast mode [ 222.719406][T13415] nlmon0: entered allmulticast mode [ 222.728779][T13415] caif0: entered allmulticast mode [ 222.746299][T13415] vxcan0: entered allmulticast mode [ 222.754362][T13415] vxcan1: entered allmulticast mode [ 222.760576][T13415] veth0: entered allmulticast mode [ 222.768492][T13415] veth1: entered allmulticast mode [ 222.776606][T13415] wg0: entered allmulticast mode [ 222.784889][T13415] wg1: entered allmulticast mode [ 222.791636][T13415] wg2: entered allmulticast mode [ 222.796919][T13446] netlink: 'syz.4.2025': attribute type 10 has an invalid length. [ 222.805266][T13415] veth0_to_bridge: entered allmulticast mode [ 222.816329][T13415] bridge_slave_0: entered allmulticast mode [ 222.824543][T13415] veth1_to_bridge: entered allmulticast mode [ 222.833562][T13415] bridge_slave_1: entered allmulticast mode [ 222.840761][T13415] veth0_to_bond: entered allmulticast mode [ 222.850180][T13415] veth1_to_bond: entered allmulticast mode [ 222.859098][T13415] veth0_to_team: entered allmulticast mode [ 222.868299][T13415] team_slave_0: entered allmulticast mode [ 222.874654][T13415] veth1_to_team: entered allmulticast mode [ 222.882844][T13415] team_slave_1: entered allmulticast mode [ 222.889283][T13415] veth0_to_batadv: entered allmulticast mode [ 222.897953][T13415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.906446][T13415] batadv_slave_0: entered allmulticast mode [ 222.915838][T13415] xfrm0: entered allmulticast mode [ 222.923634][T13415] veth0_to_hsr: entered allmulticast mode [ 222.931490][T13415] hsr_slave_0: entered allmulticast mode [ 222.939183][T13415] veth1_to_hsr: entered allmulticast mode [ 222.947597][T13415] hsr_slave_1: entered allmulticast mode [ 222.956095][T13415] hsr0: entered allmulticast mode [ 222.967448][T13415] veth1_virt_wifi: entered allmulticast mode [ 222.976780][T13415] veth0_virt_wifi: entered allmulticast mode [ 222.986198][T13415] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 222.994415][T13415] veth1_vlan: entered allmulticast mode [ 223.012471][T13415] vlan1: entered allmulticast mode [ 223.018045][T13415] macvlan0: entered allmulticast mode [ 223.027525][T13415] macvlan1: entered allmulticast mode [ 223.035519][T13415] ipvlan0: entered allmulticast mode [ 223.040893][T13415] ipvlan1: entered allmulticast mode [ 223.057645][T13415] veth1_macvtap: entered allmulticast mode [ 223.068113][T13415] veth0_macvtap: entered allmulticast mode [ 223.077893][T13415] macvtap0: entered allmulticast mode [ 223.086531][T13415] geneve0: entered allmulticast mode [ 223.096643][T13415] geneve1: entered allmulticast mode [ 223.105308][T13415] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 223.117888][T13415] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 223.128645][T13415] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 223.144036][T13415] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 223.153258][T13415] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 223.160375][T13415] nicvf0: entered allmulticast mode [ 223.166462][T13415] bridge0: entered allmulticast mode [ 223.175678][T13415] batadv1: entered allmulticast mode [ 223.181247][T13415] geneve2: entered allmulticast mode [ 223.187318][T13415] bridge1: entered allmulticast mode [ 223.193585][T13415] mac80211_hwsim hwsim6 pim6reg0: entered allmulticast mode [ 223.203674][T13415] sit1: entered allmulticast mode [ 223.227822][T13415] vlan0: left promiscuous mode [ 223.233922][T13415] macvtap1: left promiscuous mode [ 223.240641][T13415] gtp0: entered allmulticast mode [ 223.246299][T13415] gre1: entered allmulticast mode [ 223.253928][T13415] vxlan0: entered allmulticast mode [ 223.259708][T13415] ip6erspan0: entered allmulticast mode [ 223.267489][T13415] sit2: entered allmulticast mode [ 223.288791][T13415] ip6tnl1: entered allmulticast mode [ 223.296472][T13415] bond2: entered allmulticast mode [ 223.302891][T13415] veth2: entered allmulticast mode [ 223.308464][T13415] veth3: entered allmulticast mode [ 223.317661][T13415] bond3: entered allmulticast mode [ 223.323605][T13415] gretap1: entered allmulticast mode [ 223.331615][T13415] bond4: entered allmulticast mode [ 223.337450][T13415] macvlan2: entered allmulticast mode [ 223.345278][T13415] bridge2: entered allmulticast mode [ 223.352303][T13415] bond5: entered allmulticast mode [ 223.357858][T13415] bridge3: entered allmulticast mode [ 223.366682][T13415] bridge4: entered allmulticast mode [ 223.373881][T13415] bond6: left promiscuous mode [ 223.378634][T13415] bond6: entered allmulticast mode [ 223.385855][T13415] ipip0: entered allmulticast mode [ 223.391711][T13415] syzkaller0: entered allmulticast mode [ 223.405329][T13433] dvmrp1: entered allmulticast mode [ 223.435696][T13446] team0: Device hsr_slave_0 failed to register rx_handler [ 223.450136][ T61] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.495642][ T61] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.564915][ T61] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.595350][ T61] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.645793][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'. [ 223.669403][T13464] netlink: 'syz.4.2031': attribute type 6 has an invalid length. [ 223.718183][T13465] macvtap2: entered promiscuous mode [ 223.723816][T13465] vlan0: entered promiscuous mode [ 223.729428][T13465] macvtap2: entered allmulticast mode [ 223.766353][T13465] macvtap3: entered promiscuous mode [ 223.771763][T13465] macvtap3: entered allmulticast mode [ 223.801491][T13471] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2030'. [ 223.814085][T13464] syzkaller1: entered promiscuous mode [ 223.819666][T13464] syzkaller1: entered allmulticast mode [ 223.868139][T13471] veth5: entered promiscuous mode [ 223.873590][T13471] veth5: entered allmulticast mode [ 223.913092][T13474] tipc: Enabled bearer , priority 0 [ 223.941758][T13474] syzkaller0: entered promiscuous mode [ 223.961636][T13474] syzkaller0: entered allmulticast mode [ 223.971023][T13480] netlink: 'syz.3.2035': attribute type 15 has an invalid length. [ 223.979201][T13480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2035'. [ 223.987816][T13474] tipc: Resetting bearer [ 224.024415][T13470] tipc: Resetting bearer [ 224.060013][T13470] tipc: Disabling bearer [ 224.068802][T13481] veth1_to_bond: entered promiscuous mode [ 224.124121][T13488] team0: Device gtp0 is of different type [ 224.204690][T13491] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 224.402262][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.416942][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2045'. [ 224.489260][T13512] netlink: 'syz.2.2046': attribute type 1 has an invalid length. [ 224.627731][T13521] veth7: entered promiscuous mode [ 224.927562][T13542] xt_l2tp: invalid flags combination: 0 [ 224.978573][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 225.033087][T13548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2052'. [ 225.138169][T13545] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 225.147594][T13545] team0: Device hsr_slave_0 failed to register rx_handler [ 225.875833][T13585] netlink: 'syz.4.2065': attribute type 10 has an invalid length. [ 225.967385][T13585] dummy0: entered promiscuous mode [ 225.977628][T13585] bond0: (slave dummy0): Releasing backup interface [ 225.988949][T13585] bridge0: port 3(dummy0) entered blocking state [ 226.000349][T13585] bridge0: port 3(dummy0) entered disabled state [ 226.011496][T13585] dummy0: entered allmulticast mode [ 226.429496][T13616] __nla_validate_parse: 7 callbacks suppressed [ 226.429512][T13616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2068'. [ 226.770052][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 227.777168][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 227.800446][T13641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2077'. [ 227.876864][T13649] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 227.905645][T13650] tipc: Enabled bearer , priority 0 [ 227.916683][T13649] tipc: Enabling of bearer rejected, already enabled [ 228.019602][T13666] netlink: 'syz.0.2085': attribute type 7 has an invalid length. [ 228.138395][T13670] netlink: 'syz.4.2088': attribute type 33 has an invalid length. [ 228.185173][T13680] netlink: 'syz.2.2089': attribute type 13 has an invalid length. [ 228.271121][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2089'. [ 228.288249][T13695] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2090'. [ 228.420699][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 228.721201][T13736] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.744624][T13736] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.783778][T13739] netlink: 'syz.4.2099': attribute type 16 has an invalid length. [ 228.797249][T13739] netlink: 'syz.4.2099': attribute type 17 has an invalid length. [ 228.862956][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2099'. [ 228.880378][T13739] bridge0: port 3(dummy0) entered blocking state [ 228.887068][T13739] bridge0: port 3(dummy0) entered forwarding state [ 228.899103][T13739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.915338][T13745] macvlan0: left allmulticast mode [ 228.920717][T13745] netlink: 'syz.3.2101': attribute type 2 has an invalid length. [ 228.994496][T13736] team1: entered promiscuous mode [ 229.001756][T13736] team1: entered allmulticast mode [ 229.032596][ T5996] tipc: Node number set to 150994944 [ 229.171506][T13763] netlink: 'syz.1.2105': attribute type 5 has an invalid length. [ 229.180401][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'. [ 229.550389][T13800] netlink: set zone limit has 8 unknown bytes [ 229.789904][T13828] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2123'. [ 230.040980][T13847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.156018][T13854] netlink: 'syz.2.2129': attribute type 2 has an invalid length. [ 230.192619][T13854] netlink: 'syz.2.2129': attribute type 2 has an invalid length. [ 230.212033][T13854] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 230.441157][T13862] bond8: (slave macvlan2): Opening slave failed [ 230.791534][T13895] openvswitch: netlink: Flow key attr not present in new flow. [ 230.960121][T13909] netlink: 'syz.0.2146': attribute type 29 has an invalid length. [ 231.014662][T13910] ªªªªªª: renamed from vlan0 (while UP) [ 231.281793][T13932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.658066][T13957] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.694190][T13961] __nla_validate_parse: 13 callbacks suppressed [ 231.694209][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 231.757637][T13964] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2165'. [ 231.771921][T13964] NCSI netlink: No device for ifindex 0 [ 231.915839][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 231.922234][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.981260][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'. [ 232.004391][T13976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.011658][T13976] IPv6: NLM_F_CREATE should be set when creating new route [ 232.152888][T13984] syzkaller0: entered promiscuous mode [ 232.158386][T13984] syzkaller0: entered allmulticast mode [ 232.166708][T13984] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 232.391090][T13997] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2176'. [ 232.551205][T14008] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2181'. [ 232.583814][T14008] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2181'. [ 232.735964][T14026] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2186'. [ 232.953453][T14044] tipc: Can't bind to reserved service type 0 [ 233.054222][ T5870] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 233.154755][T14052] xt_l2tp: wrong L2TP version: 0 [ 233.429846][T14072] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002 [ 233.448285][T14071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2200'. [ 233.547319][T14078] syzkaller0: entered promiscuous mode [ 233.553282][T14078] syzkaller0: entered allmulticast mode [ 233.618013][T14086] validate_nla: 7 callbacks suppressed [ 233.618029][T14086] netlink: 'syz.3.2205': attribute type 1 has an invalid length. [ 233.637418][T14086] netlink: 'syz.3.2205': attribute type 1 has an invalid length. [ 233.662464][T14081] team0: Device gtp0 is of different type [ 233.747601][T14088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2201'. [ 233.869809][T14101] netlink: 'syz.3.2209': attribute type 1 has an invalid length. [ 233.920311][T14103] º: renamed from veth1_vlan [ 234.176150][T14123] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 234.467055][T14137] ipvlan2: left promiscuous mode [ 234.566832][T14137] vlan3: left promiscuous mode [ 234.687797][T13701] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.712692][T13701] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.746465][T14156] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 234.768324][T14157] netlink: 'syz.0.2222': attribute type 27 has an invalid length. [ 234.777646][T13701] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.799115][T13701] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.946678][T14171] sctp: [Deprecated]: syz.3.2228 (pid 14171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.946678][T14171] Use struct sctp_sack_info instead [ 235.020599][T14175] netlink: 'syz.0.2226': attribute type 11 has an invalid length. [ 235.068033][T14176] netlink: 'syz.3.2228': attribute type 3 has an invalid length. [ 235.354573][T13701] nci: nci_ntf_packet: unknown ntf opcode 0x1d [ 235.714483][T13698] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.723347][T13698] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.743325][ T5992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.251726][T14229] nbd: device at index 1 is going down [ 236.565858][ T983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.596682][T14255] netlink: 'syz.4.2250': attribute type 7 has an invalid length. [ 236.643065][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.833140][T14280] tipc: Enabled bearer , priority 0 [ 236.861674][T14279] syzkaller0: entered promiscuous mode [ 236.880445][T14279] syzkaller0: entered allmulticast mode [ 237.017634][T14278] tipc: Resetting bearer [ 237.078044][T14278] tipc: Disabling bearer [ 237.127912][T14301] __nla_validate_parse: 14 callbacks suppressed [ 237.127931][T14301] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2261'. [ 237.234626][T14303] netlink: 'syz.0.2262': attribute type 30 has an invalid length. [ 237.428318][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2265'. [ 237.462240][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2265'. [ 237.599871][T14314] infiniband syz0: set down [ 237.612192][T14314] infiniband syz0: added bond_slave_0 [ 237.672389][T14314] RDS/IB: syz0: added [ 237.676522][T14314] smc: adding ib device syz0 with port count 1 [ 237.683643][T14314] smc: ib device syz0 port 1 has pnetid [ 237.689938][T14329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.138837][T14348] netlink: 'syz.0.2269': attribute type 10 has an invalid length. [ 238.187831][T14344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.199375][T14344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.218036][T14344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.256621][T14344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.270098][T14344] batman_adv: batadv0: Interface deactivated: macsec1 [ 238.281499][T14344] batman_adv: batadv0: Removing interface: macsec1 [ 238.306069][T14344] batadv0 (unregistering): left promiscuous mode [ 238.320340][T14354] netlink: 'syz.4.2271': attribute type 10 has an invalid length. [ 238.704992][T14384] netlink: 'syz.4.2278': attribute type 6 has an invalid length. [ 238.775410][T14387] lo: left allmulticast mode [ 238.780208][T14387] dvmrp1: left allmulticast mode [ 239.067357][T14405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2282'. [ 239.321588][T14412] tipc: Enabled bearer , priority 0 [ 239.329725][T14412] syzkaller0: entered promiscuous mode [ 239.335809][T14412] syzkaller0: entered allmulticast mode [ 239.349480][T14412] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 239.389257][T14412] tipc: Resetting bearer [ 239.401996][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'. [ 239.411643][T14411] tipc: Resetting bearer [ 239.456647][T14411] tipc: Disabling bearer [ 239.468001][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 239.574016][T14422] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2288'. [ 239.602446][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.627139][T14422] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2288'. [ 239.663051][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2288'. [ 239.673496][T14422] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2288'. [ 239.775244][T14433] sctp: [Deprecated]: syz.2.2291 (pid 14433) Use of int in maxseg socket option. [ 239.775244][T14433] Use struct sctp_assoc_value instead [ 240.015711][T14447] netlink: 'syz.3.2296': attribute type 32 has an invalid length. [ 240.610065][T14485] openvswitch: netlink: Duplicate or invalid key (type 0). [ 240.634788][T14485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.657433][T14487] netlink: 'syz.1.2308': attribute type 1 has an invalid length. [ 240.673055][T14485] netlink: 'syz.3.2307': attribute type 6 has an invalid length. [ 240.840944][T14499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.866927][T13703] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.917254][T13694] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.957955][T13694] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.032486][T13696] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.299242][T14532] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 241.354386][T14537] netlink: 'syz.2.2322': attribute type 1 has an invalid length. [ 241.370482][T14537] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 242.105801][T14560] sctp: [Deprecated]: syz.4.2331 (pid 14560) Use of int in maxseg socket option. [ 242.105801][T14560] Use struct sctp_assoc_value instead [ 242.248495][T14566] __nla_validate_parse: 7 callbacks suppressed [ 242.248514][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 242.547579][T14593] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 242.574525][T14592] netlink: set zone limit has 8 unknown bytes [ 242.581201][T14587] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 242.651815][T14600] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2344'. [ 242.679576][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 242.688663][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 242.699262][T14603] netlink: 'syz.2.2345': attribute type 62 has an invalid length. [ 242.699265][T14602] netlink: 'syz.2.2345': attribute type 62 has an invalid length. [ 242.699427][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2344'. [ 242.827772][T14615] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 242.839442][T14615] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 242.903378][T14623] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2350'. [ 242.914283][T14621] ipvlan1: mtu less than device minimum [ 242.935003][T14623] openvswitch: netlink: Actions may not be safe on all matching packets [ 243.043708][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'. [ 243.044859][T14638] ip6gre0 speed is unknown, defaulting to 1000 [ 243.057663][T14637] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 243.087996][T14638] ip6gre0 speed is unknown, defaulting to 1000 [ 243.114573][T14638] ip6gre0 speed is unknown, defaulting to 1000 [ 243.132656][T14641] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2356'. [ 243.169749][T14641] veth1_to_bond: left allmulticast mode [ 243.299128][T14653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2360'. [ 243.437504][T14664] nft_compat: unsupported protocol 0 [ 243.446628][T14667] tipc: Enabling of bearer rejected, already enabled [ 243.456161][T14664] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2363'. [ 243.476744][T14665] vlan2: entered promiscuous mode [ 243.481942][T14665] bridge0: entered promiscuous mode [ 243.547655][T14638] infiniband syz1: set active [ 243.553657][ T5996] ip6gre0 speed is unknown, defaulting to 1000 [ 243.565168][T14638] infiniband syz1: added ip6gre0 [ 243.671112][T14638] RDS/IB: syz1: added [ 243.677586][T14638] smc: adding ib device syz1 with port count 1 [ 243.706596][T14638] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 243.720328][ T5996] ip6gre0 speed is unknown, defaulting to 1000 [ 243.731271][T14638] ip6gre0 speed is unknown, defaulting to 1000 [ 244.099493][T14693] netlink: 'syz.3.2370': attribute type 1 has an invalid length. [ 244.106890][T14638] ip6gre0 speed is unknown, defaulting to 1000 [ 244.123312][T14693] netlink: 'syz.3.2370': attribute type 2 has an invalid length. [ 244.361903][T14707] netlink: 'syz.3.2372': attribute type 3 has an invalid length. [ 244.449711][T14638] ip6gre0 speed is unknown, defaulting to 1000 [ 244.849862][T14738] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.990176][T14638] ip6gre0 speed is unknown, defaulting to 1000 [ 245.435832][T14770] batman_adv: batadv0: Adding interface: dummy0 [ 245.450396][T14770] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.493361][T14770] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 245.504202][T14774] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 245.511935][T14774] netlink: 'syz.1.2393': attribute type 4 has an invalid length. [ 245.558126][T14777] bond10: (slave vcan2): The slave device specified does not support setting the MAC address [ 245.570213][T14777] bond10: (slave vcan2): Error -95 calling set_mac_address [ 245.626998][T14638] ip6gre0 speed is unknown, defaulting to 1000 [ 245.700888][T14785] sch_fq: defrate 0 ignored. [ 245.830947][T14787] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.444218][T14810] netlink: 'syz.0.2405': attribute type 29 has an invalid length. [ 246.475695][T14808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.500254][ T5996] ip6gre0 speed is unknown, defaulting to 1000 [ 246.506783][T14810] netlink: 'syz.0.2405': attribute type 29 has an invalid length. [ 246.522583][T14814] team_slave_0: entered allmulticast mode [ 246.547787][T14817] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 246.642239][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.654150][T14822] netlink: 'syz.1.2407': attribute type 2 has an invalid length. [ 247.282686][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.319734][T14865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.447047][T14869] __nla_validate_parse: 19 callbacks suppressed [ 247.447064][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 247.464911][T14873] netlink: 'syz.2.2419': attribute type 2 has an invalid length. [ 247.509997][T14869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2418'. [ 247.647417][T14885] netlink: 'syz.2.2421': attribute type 4 has an invalid length. [ 247.938000][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2429'. [ 248.360267][T14937] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2437'. [ 248.372039][T14937] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2437'. [ 248.513535][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'. [ 248.573798][T14944] geneve2: entered promiscuous mode [ 248.575923][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 248.868323][T14967] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 249.026846][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2449'. [ 249.064641][T14970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2448'. [ 249.156533][T14981] openvswitch: netlink: Tunnel attr 16 has unexpected len 3 expected 0 [ 249.663221][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'. [ 249.897977][T15025] validate_nla: 1 callbacks suppressed [ 249.897994][T15025] netlink: 'syz.3.2465': attribute type 4 has an invalid length. [ 249.943501][T15027] lo: entered allmulticast mode [ 249.950679][T15029] lo: Caught tx_queue_len zero misconfig [ 249.956649][T15029] netlink: 'syz.4.2467': attribute type 14 has an invalid length. [ 249.999598][T15037] FAULT_INJECTION: forcing a failure. [ 249.999598][T15037] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 250.027115][T15037] CPU: 0 UID: 0 PID: 15037 Comm: syz.2.2469 Not tainted syzkaller #0 PREEMPT(full) [ 250.027140][T15037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.027162][T15037] Call Trace: [ 250.027169][T15037] [ 250.027177][T15037] dump_stack_lvl+0x189/0x250 [ 250.027203][T15037] ? __pfx____ratelimit+0x10/0x10 [ 250.027223][T15037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.027242][T15037] ? __pfx__printk+0x10/0x10 [ 250.027264][T15037] ? __might_fault+0xb0/0x130 [ 250.027297][T15037] should_fail_ex+0x414/0x560 [ 250.027327][T15037] _copy_from_user+0x2d/0xb0 [ 250.027349][T15037] ___sys_sendmsg+0x158/0x2a0 [ 250.027373][T15037] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.027430][T15037] ? __fget_files+0x2a/0x420 [ 250.027445][T15037] ? __fget_files+0x3a0/0x420 [ 250.027472][T15037] __x64_sys_sendmsg+0x19b/0x260 [ 250.027496][T15037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.027525][T15037] ? __pfx_ksys_write+0x10/0x10 [ 250.027544][T15037] ? rcu_is_watching+0x15/0xb0 [ 250.027567][T15037] ? do_syscall_64+0xbe/0x3b0 [ 250.027590][T15037] do_syscall_64+0xfa/0x3b0 [ 250.027606][T15037] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.027623][T15037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.027639][T15037] ? clear_bhb_loop+0x60/0xb0 [ 250.027660][T15037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.027677][T15037] RIP: 0033:0x7fd176f8eec9 [ 250.027694][T15037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.027709][T15037] RSP: 002b:00007fd177eed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.027727][T15037] RAX: ffffffffffffffda RBX: 00007fd1771e5fa0 RCX: 00007fd176f8eec9 [ 250.027740][T15037] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 250.027751][T15037] RBP: 00007fd177eed090 R08: 0000000000000000 R09: 0000000000000000 [ 250.027761][T15037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.027778][T15037] R13: 00007fd1771e6038 R14: 00007fd1771e5fa0 R15: 00007ffdd2f48918 [ 250.027808][T15037] [ 250.377767][T15047] netlink: 'syz.2.2471': attribute type 1 has an invalid length. [ 250.387621][T15047] netlink: 'syz.2.2471': attribute type 3 has an invalid length. [ 250.395462][T15047] NCSI netlink: No device for ifindex 813332851 [ 250.418585][T15045] openvswitch: netlink: Unknown key attributes 2 [ 250.447707][T15049] netlink: 'syz.1.2473': attribute type 1 has an invalid length. [ 250.468991][T15051] ip6tnl0: Caught tx_queue_len zero misconfig [ 250.499699][T15051] netlink: 'syz.4.2474': attribute type 10 has an invalid length. [ 250.551956][T15049] 8021q: adding VLAN 0 to HW filter on device bond9 [ 250.686243][T15060] bond9: (slave veth9): Enslaving as an active interface with a down link [ 250.748859][T15049] veth11: entered promiscuous mode [ 250.757505][T15049] bond9: (slave veth11): Enslaving as an active interface with a down link [ 250.810523][T15068] vlan2: entered allmulticast mode [ 250.821615][T15068] bond9: entered allmulticast mode [ 250.830383][T15081] FAULT_INJECTION: forcing a failure. [ 250.830383][T15081] name failslab, interval 1, probability 0, space 0, times 1 [ 250.847648][T15081] CPU: 0 UID: 0 PID: 15081 Comm: syz.2.2481 Not tainted syzkaller #0 PREEMPT(full) [ 250.847669][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.847678][T15081] Call Trace: [ 250.847686][T15081] [ 250.847693][T15081] dump_stack_lvl+0x189/0x250 [ 250.847717][T15081] ? __pfx____ratelimit+0x10/0x10 [ 250.847735][T15081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.847754][T15081] ? __pfx__printk+0x10/0x10 [ 250.847781][T15081] ? __pfx___might_resched+0x10/0x10 [ 250.847800][T15081] should_fail_ex+0x414/0x560 [ 250.847828][T15081] should_failslab+0xa8/0x100 [ 250.847852][T15081] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 250.847875][T15081] ? __alloc_skb+0x112/0x2d0 [ 250.847897][T15081] __alloc_skb+0x112/0x2d0 [ 250.847918][T15081] netlink_sendmsg+0x5c6/0xb30 [ 250.847946][T15081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.847966][T15081] ? aa_sock_msg_perm+0xf1/0x1d0 [ 250.847986][T15081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.848004][T15081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.848022][T15081] __sock_sendmsg+0x219/0x270 [ 250.848048][T15081] ____sys_sendmsg+0x505/0x830 [ 250.848073][T15081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.848102][T15081] ? import_iovec+0x74/0xa0 [ 250.848126][T15081] ___sys_sendmsg+0x21f/0x2a0 [ 250.848147][T15081] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.848203][T15081] ? __fget_files+0x2a/0x420 [ 250.848218][T15081] ? __fget_files+0x3a0/0x420 [ 250.848244][T15081] __x64_sys_sendmsg+0x19b/0x260 [ 250.848267][T15081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.848297][T15081] ? __pfx_ksys_write+0x10/0x10 [ 250.848315][T15081] ? rcu_is_watching+0x15/0xb0 [ 250.848338][T15081] ? do_syscall_64+0xbe/0x3b0 [ 250.848360][T15081] do_syscall_64+0xfa/0x3b0 [ 250.848377][T15081] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.848394][T15081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.848410][T15081] ? clear_bhb_loop+0x60/0xb0 [ 250.848431][T15081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.848448][T15081] RIP: 0033:0x7fd176f8eec9 [ 250.848463][T15081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.848477][T15081] RSP: 002b:00007fd177eed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.848504][T15081] RAX: ffffffffffffffda RBX: 00007fd1771e5fa0 RCX: 00007fd176f8eec9 [ 250.848516][T15081] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 250.848527][T15081] RBP: 00007fd177eed090 R08: 0000000000000000 R09: 0000000000000000 [ 250.848537][T15081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.848548][T15081] R13: 00007fd1771e6038 R14: 00007fd1771e5fa0 R15: 00007ffdd2f48918 [ 250.848579][T15081] [ 250.851379][T15068] bond9: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 251.781270][T15138] netlink: 'syz.0.2495': attribute type 27 has an invalid length. [ 251.794648][T15138] netlink: 'syz.0.2495': attribute type 4 has an invalid length. [ 252.024760][T15156] 8021q: adding VLAN 0 to HW filter on device bond11 [ 252.037939][T15159] syzkaller1: entered promiscuous mode [ 252.043677][T15159] syzkaller1: entered allmulticast mode [ 252.056446][T15156] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 252.318718][T15177] netlink: 'syz.0.2510': attribute type 1 has an invalid length. [ 252.486400][T15189] netlink: 'syz.4.2513': attribute type 11 has an invalid length. [ 252.561834][T15197] __nla_validate_parse: 75 callbacks suppressed [ 252.561852][T15197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2514'. [ 252.659212][T15199] IPVS: Error connecting to the multicast addr [ 252.778355][T15206] ksmbd: Unknown IPC event: 3, ignore. [ 252.908156][T15206] sctp: [Deprecated]: syz.0.2516 (pid 15206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.908156][T15206] Use struct sctp_sack_info instead [ 253.026830][T15223] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2522'. [ 253.147189][T15232] tipc: Enabling of bearer rejected, already enabled [ 253.177912][T15232] veth1_macvtap: left promiscuous mode [ 253.289538][T15246] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2531'. [ 253.404189][T15248] 8021q: adding VLAN 0 to HW filter on device bond12 [ 253.611072][ T30] audit: type=1800 audit(1758846596.516:7): pid=15271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2538" name="memory.events" dev="tmpfs" ino=2545 res=0 errno=0 [ 253.650025][ T30] audit: type=1804 audit(1758846596.516:8): pid=15271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2538" name="/newroot/498/memory.events" dev="tmpfs" ino=2545 res=1 errno=0 [ 253.897732][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2544'. [ 254.024292][T15297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2545'. [ 254.050895][T15297] team0: No ports can be present during mode change [ 254.073725][T15300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2546'. [ 254.285542][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2550'. [ 254.305751][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2550'. [ 254.669561][T15329] ipvlan5: entered promiscuous mode [ 254.798127][T15337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.256098][T15319] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 255.316546][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 255.327290][T15368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2570'. [ 255.346693][T15368] validate_nla: 1 callbacks suppressed [ 255.346713][T15368] netlink: 'syz.1.2570': attribute type 10 has an invalid length. [ 255.364946][T15368] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 255.421300][T15376] IPVS: stopping backup sync thread 14817 ... [ 255.439331][T15378] xt_l2tp: missing protocol rule (udp|l2tpip) [ 255.590816][T15387] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 255.638027][T15388] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 255.640383][T15395] netlink: 'syz.2.2577': attribute type 2 has an invalid length. [ 255.984202][T15407] vxcan1 speed is unknown, defaulting to 1000 [ 256.090743][T15420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.330616][T15430] gre5: entered promiscuous mode [ 256.343713][T15434] netlink: 'syz.1.2592': attribute type 7 has an invalid length. [ 256.351790][T15430] gre5: entered allmulticast mode [ 256.363504][T15434] netlink: 'syz.1.2592': attribute type 2 has an invalid length. [ 256.371257][T15434] netlink: 'syz.1.2592': attribute type 3 has an invalid length. [ 256.441165][T15437] netlink: 'syz.0.2594': attribute type 9 has an invalid length. [ 256.486167][T15438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.817421][T15459] veth1_to_bond: entered allmulticast mode [ 256.927727][T15459] bond0: (slave bond_slave_1): Releasing backup interface [ 256.984702][T15459] veth1_to_bond (unregistering): left allmulticast mode [ 257.036684][T15463] team_slave_0: left allmulticast mode [ 257.057956][T15463] bond2: left allmulticast mode [ 257.065657][T15463] vlan2: left allmulticast mode [ 257.070886][T15463] bridge0: left allmulticast mode [ 257.077902][T15463] vlan3: left allmulticast mode [ 257.085163][T15463] hsr_slave_1: left allmulticast mode [ 257.107367][T15463] ipvlan5: left promiscuous mode [ 257.157461][T15407] ip6gre0 speed is unknown, defaulting to 1000 [ 258.046484][T15524] __nla_validate_parse: 14 callbacks suppressed [ 258.046503][T15524] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2625'. [ 258.074475][T15526] netlink: 'syz.1.2626': attribute type 10 has an invalid length. [ 258.131763][T15527] netem: change failed [ 258.271175][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2629'. [ 258.358312][T15524] vxcan1 speed is unknown, defaulting to 1000 [ 258.956644][T15558] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2635'. [ 259.231615][T15538] vxcan1 speed is unknown, defaulting to 1000 [ 259.471493][T15576] bond4 (unregistering): Released all slaves [ 259.561007][T15586] netlink: 'syz.0.2641': attribute type 13 has an invalid length. [ 259.584798][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'. [ 259.897311][T15595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2642'. [ 259.932988][T15590] vlan0 (unregistering): left promiscuous mode [ 259.981682][T15524] ip6gre0 speed is unknown, defaulting to 1000 [ 260.505660][T15538] ip6gre0 speed is unknown, defaulting to 1000 [ 260.555946][T15613] netlink: 'syz.0.2649': attribute type 4 has an invalid length. [ 261.820894][T15653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.870972][T15658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.016325][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2664'. [ 262.031605][T15662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2664'. [ 262.139237][T15671] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2668'. [ 262.276700][T15675] netlink: 'syz.2.2670': attribute type 30 has an invalid length. [ 262.411173][T15679] netlink: 'syz.2.2670': attribute type 30 has an invalid length. [ 262.690659][T15692] netlink: 'syz.4.2676': attribute type 10 has an invalid length. [ 262.733667][T15692] bridge0: port 4(team0) entered blocking state [ 262.761825][T15692] bridge0: port 4(team0) entered disabled state [ 262.795431][T15695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'. [ 262.818822][T15692] team0: entered allmulticast mode [ 262.836256][T15692] team_slave_0: entered allmulticast mode [ 262.892265][T15692] team_slave_1: entered allmulticast mode [ 262.978153][T15692] team0: entered promiscuous mode [ 263.012655][T15692] team_slave_0: entered promiscuous mode [ 263.028804][T15692] team_slave_1: entered promiscuous mode [ 263.104573][T15703] dvmrp0: entered allmulticast mode [ 263.492283][T15720] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 263.532905][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 263.572735][T15720] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.610180][T15730] tls_set_device_offload: netdev not found [ 263.880031][T15744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2690'. [ 263.890918][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2692'. [ 263.937817][T15751] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2693'. [ 263.956162][T15744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2690'. [ 263.958476][T15751] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2693'. [ 263.988715][T15751] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2693'. [ 264.216918][T15763] delete_channel: no stack [ 264.487801][T15789] tipc: Enabling of bearer rejected, already enabled [ 264.645344][T15807] tipc: Enabling of bearer rejected, already enabled [ 264.701904][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2711'. [ 264.783470][T15816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2713'. [ 264.934177][T15827] syzkaller1: entered promiscuous mode [ 264.971435][T15827] syzkaller1: entered allmulticast mode [ 264.984262][T15835] netlink: 'syz.2.2717': attribute type 11 has an invalid length. [ 265.003285][T15835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2717'. [ 265.358808][T15862] nbd: must specify a device to reconfigure [ 265.711117][T15883] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 266.418601][T15927] netlink: 'syz.4.2741': attribute type 1 has an invalid length. [ 266.455294][T15931] siw: device registration error -23 [ 266.697347][T15945] netlink: 'syz.0.2746': attribute type 3 has an invalid length. [ 266.879580][T15960] geneve2: entered promiscuous mode [ 266.901480][T15960] geneve2: entered allmulticast mode [ 266.941545][T13693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 266.992888][T13693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 267.021281][T13693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 267.048678][T13693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 267.904407][T16029] netlink: 'syz.2.2771': attribute type 33 has an invalid length. [ 268.590083][T16074] tipc: Enabled bearer , priority 0 [ 268.600529][T16074] syzkaller0: entered promiscuous mode [ 268.629156][T16074] syzkaller0: entered allmulticast mode [ 268.653752][T16074] tipc: Resetting bearer [ 268.672684][T16077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.714771][T16075] tipc: Resetting bearer [ 268.744140][T16075] tipc: Disabling bearer [ 268.823184][T16082] __nla_validate_parse: 16 callbacks suppressed [ 268.823204][T16082] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2783'. [ 268.990879][T16096] sit0: entered promiscuous mode [ 269.018299][T16096] sit0: left allmulticast mode [ 269.041580][T16096] netlink: 'syz.3.2787': attribute type 1 has an invalid length. [ 269.087040][T16096] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2787'. [ 269.579855][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2793'. [ 269.680565][T16128] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2795'. [ 269.703472][T16128] ip6gretap0: entered promiscuous mode [ 269.730078][T16128] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2795'. [ 269.965478][T16146] syzkaller0: entered promiscuous mode [ 269.970973][T16146] syzkaller0: entered allmulticast mode [ 270.064514][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2803'. [ 270.065386][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2805'. [ 270.090993][T16156] netlink: 'syz.4.2804': attribute type 1 has an invalid length. [ 270.101664][T16156] netlink: 'syz.4.2804': attribute type 4 has an invalid length. [ 270.114605][T16156] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.2804'. [ 270.168749][T16161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2805'. [ 270.179313][T16157] 8021q: adding VLAN 0 to HW filter on device bond11 [ 270.570915][T16188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2812'. [ 270.770236][T16209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.024969][T16237] tipc: Enabling of bearer rejected, already enabled [ 271.094090][T16243] lo: Caught tx_queue_len zero misconfig [ 271.308515][T16257] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 271.326388][T16260] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 271.401362][T16263] bond13: (slave vxcan5): The slave device specified does not support setting the MAC address [ 271.414022][T16263] bond13: (slave vxcan5): Error -95 calling set_mac_address [ 271.454561][T16257] gretap2: entered promiscuous mode [ 271.478256][T16257] bond13: (slave gretap2): making interface the new active one [ 271.497246][T16257] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 271.535796][T16263] macvlan0: entered promiscuous mode [ 271.545951][T16263] macvlan0: entered allmulticast mode [ 271.552634][T16263] bond13: entered promiscuous mode [ 271.596589][T16263] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 271.632749][T16263] bond13: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 271.668928][T16263] bond13: left promiscuous mode [ 272.113870][T16287] 8021q: adding VLAN 0 to HW filter on device bond14 [ 272.346204][T16308] tipc: Enabled bearer , priority 0 [ 272.648104][T16323] vxcan1 speed is unknown, defaulting to 1000 [ 272.789507][T16336] netlink: 'syz.0.2857': attribute type 1 has an invalid length. [ 272.895444][T16336] 8021q: adding VLAN 0 to HW filter on device bond15 [ 272.975214][T16340] veth9: entered promiscuous mode [ 273.004463][T16340] bond15: (slave veth9): Enslaving as an active interface with an up link [ 273.218548][T16354] netlink: 'syz.2.2860': attribute type 10 has an invalid length. [ 273.429488][T16323] ip6gre0 speed is unknown, defaulting to 1000 [ 273.659558][T16370] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 273.946997][T16386] __nla_validate_parse: 13 callbacks suppressed [ 273.947016][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2869'. [ 273.968603][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2869'. [ 274.009901][T16386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2869'. [ 274.162237][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.262938][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 274.362387][T16399] openvswitch: netlink: Actions may not be safe on all matching packets [ 274.581813][T16414] lo: left allmulticast mode [ 274.596139][T16414] tunl0: left allmulticast mode [ 274.602455][T16414] gre0: left allmulticast mode [ 274.607386][T16414] gretap0: left allmulticast mode [ 274.619991][T16414] erspan0: left allmulticast mode [ 274.631961][T16414] ip_vti0: left allmulticast mode [ 274.663524][T16414] ip6_vti0: left allmulticast mode [ 274.669539][T16414] sit0: left promiscuous mode [ 274.710510][T16414] ip6tnl0: left allmulticast mode [ 274.716129][T16414] ip6gre0: left allmulticast mode [ 274.721300][T16414] syz_tun: left allmulticast mode [ 274.742537][T16414] ip6gretap0: left allmulticast mode [ 274.747963][T16414] vcan0: left allmulticast mode [ 274.760257][T16414] dummy0: left allmulticast mode [ 274.821994][T16414] nlmon0: left allmulticast mode [ 274.832506][T16414] caif0: left allmulticast mode [ 274.837679][T16414] vxcan0: left allmulticast mode [ 274.842803][T16414] vxcan1: left allmulticast mode [ 274.849370][T16414] veth0: left allmulticast mode [ 274.854489][T16414] veth1: left allmulticast mode [ 274.859485][T16414] wg0: left allmulticast mode [ 274.870423][T16414] wg1: left allmulticast mode [ 274.875317][T16414] wg2: left allmulticast mode [ 274.880140][T16414] veth0_to_bridge: left allmulticast mode [ 274.886823][T16414] bridge_slave_0: left allmulticast mode [ 274.897016][T16414] veth1_to_bridge: left allmulticast mode [ 274.922606][T16414] bridge_slave_1: left allmulticast mode [ 274.928408][T16414] veth0_to_bond: left allmulticast mode [ 274.969510][T16414] veth0_to_team: left allmulticast mode [ 274.988321][T16414] team_slave_0: left allmulticast mode [ 275.012591][T16414] veth1_to_team: left allmulticast mode [ 275.028545][T16414] team_slave_1: left allmulticast mode [ 275.041522][T16414] veth0_to_batadv: left allmulticast mode [ 275.051154][T16414] batadv_slave_0: left allmulticast mode [ 275.057758][T16414] xfrm0: left allmulticast mode [ 275.066398][T16414] veth0_to_hsr: left allmulticast mode [ 275.073970][T16414] veth1_to_hsr: left allmulticast mode [ 275.079789][T16414] hsr0: left allmulticast mode [ 275.090644][T16414] hsr_slave_0: left allmulticast mode [ 275.096853][T16414] hsr_slave_1: left allmulticast mode [ 275.107156][T16414] veth1_virt_wifi: left allmulticast mode [ 275.113971][T16414] veth0_virt_wifi: left allmulticast mode [ 275.119915][T16414] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 275.130204][T16414] veth1_macvtap: left allmulticast mode [ 275.137162][T16414] veth0_macvtap: left allmulticast mode [ 275.144162][T16414] macvtap0: left allmulticast mode [ 275.149470][T16414] geneve0: left allmulticast mode [ 275.155636][T16414] geneve1: left allmulticast mode [ 275.160935][T16414] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 275.168719][T16414] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 275.176871][T16414] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 275.184426][T16414] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 275.191427][T16414] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 275.198471][T16414] nicvf0: left allmulticast mode [ 275.204691][T16414] batadv1: left allmulticast mode [ 275.209869][T16414] bond1: left allmulticast mode [ 275.216359][T16414] geneve2: left allmulticast mode [ 275.221486][T16414] bridge1: left allmulticast mode [ 275.226654][T16414] mac80211_hwsim hwsim6 pim6reg0: left allmulticast mode [ 275.234142][T16414] hsr1: left allmulticast mode [ 275.238909][T16414] batadv0: left allmulticast mode [ 275.244053][T16414] bond0: left allmulticast mode [ 275.248887][T16414] bond_slave_0: left allmulticast mode [ 275.254407][T16414] bond_slave_1: left allmulticast mode [ 275.259865][T16414] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 275.267347][T16414] sit1: left allmulticast mode [ 275.272340][T16414] gtp0: left allmulticast mode [ 275.277195][T16414] gre1: left allmulticast mode [ 275.282624][T16414] vxlan0: left allmulticast mode [ 275.287883][T16414] ip6erspan0: left allmulticast mode [ 275.293881][T16414] sit2: left allmulticast mode [ 275.298840][T16414] ip6tnl1: left allmulticast mode [ 275.304130][T16414] bond2: left allmulticast mode [ 275.309170][T16414] veth2: left allmulticast mode [ 275.314469][T16414] veth3: left allmulticast mode [ 275.319646][T16414] bond3: left allmulticast mode [ 275.324982][T16414] gretap1: left allmulticast mode [ 275.330263][T16414] bond4: left allmulticast mode [ 275.335338][T16414] bridge2: left allmulticast mode [ 275.340564][T16414] bond5: left allmulticast mode [ 275.345695][T16414] bridge3: left allmulticast mode [ 275.350901][T16414] bridge4: left allmulticast mode [ 275.356338][T16414] bond6: left allmulticast mode [ 275.361304][T16414] ipip0: left allmulticast mode [ 275.370053][T16414] veth5: left promiscuous mode [ 275.374890][T16414] veth5: left allmulticast mode [ 275.455679][T16424] 8021q: adding VLAN 0 to HW filter on device bond16 [ 275.486629][T16432] bond16: (slave ip6gretap1): Enslaving as an active interface with an up link [ 275.510466][T16433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2881'. [ 275.527992][T16439] netlink: 'syz.2.2884': attribute type 11 has an invalid length. [ 275.547501][T16441] tipc: Enabling of bearer rejected, already enabled [ 275.559371][T16441] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 275.568111][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2884'. [ 275.581025][T16441] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 275.695778][T16449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.760214][T16449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.823868][T16462] netlink: 'syz.3.2889': attribute type 11 has an invalid length. [ 275.852191][T16462] netlink: 'syz.3.2889': attribute type 11 has an invalid length. [ 275.860027][T16462] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2889'. [ 276.311002][T16487] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2895'. [ 276.339291][T16487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.654444][T16500] netlink: 'syz.4.2897': attribute type 4 has an invalid length. [ 276.671691][T16498] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 276.739938][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.753485][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.762309][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.777880][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.788351][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.950236][T16505] vxcan1 speed is unknown, defaulting to 1000 [ 276.951850][T16516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2900'. [ 277.036768][T16525] sctp: [Deprecated]: syz.4.2905 (pid 16525) Use of int in max_burst socket option. [ 277.036768][T16525] Use struct sctp_assoc_value instead [ 277.186467][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 277.488548][T16505] ip6gre0 speed is unknown, defaulting to 1000 [ 277.617327][T16536] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 277.649351][T16539] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 277.896205][T16554] : renamed from bridge_slave_0 [ 277.927030][T16552] syzkaller0: entered allmulticast mode [ 278.051248][T16561] tipc: Enabled bearer , priority 10 [ 278.072672][T16566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.083626][T16566] block nbd3: not configured, cannot reconfigure [ 278.278036][T16572] netlink: 'syz.1.2922': attribute type 1 has an invalid length. [ 278.321102][T16572] 8021q: adding VLAN 0 to HW filter on device bond12 [ 278.415956][T16570] netlink: 'syz.3.2923': attribute type 11 has an invalid length. [ 278.429822][T16505] chnl_net:caif_netlink_parms(): no params data found [ 278.838208][T16505] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.868503][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.882155][ T5870] Bluetooth: hci5: command tx timeout [ 278.900573][T16505] bridge_slave_0: entered allmulticast mode [ 278.910737][T16505] bridge_slave_0: entered promiscuous mode [ 278.927916][T16505] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.939082][T16505] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.948092][T16505] bridge_slave_1: entered allmulticast mode [ 278.956329][T16505] bridge_slave_1: entered promiscuous mode [ 279.009780][T16505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.022759][T16605] tipc: Enabling of bearer rejected, already enabled [ 279.035822][T16605] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 279.076556][T16505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.176824][T16505] team0: Port device team_slave_0 added [ 279.195607][T16505] team0: Port device team_slave_1 added [ 279.273081][T16505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.287955][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.322372][T16505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.340529][T16623] openvswitch: netlink: Missing key (keys=40, expected=100) [ 279.343299][T16505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.351480][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.389985][T16505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.445590][T16629] netlink: 'syz.1.2940': attribute type 28 has an invalid length. [ 279.455652][T16629] netlink: 'syz.1.2940': attribute type 3 has an invalid length. [ 279.465550][T16629] __nla_validate_parse: 5 callbacks suppressed [ 279.465563][T16629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2940'. [ 279.487014][T16627] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.526607][T16505] hsr_slave_0: entered promiscuous mode [ 279.529664][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2940'. [ 279.538792][T16505] hsr_slave_1: entered promiscuous mode [ 279.549297][T16505] debugfs: 'hsr0' already exists in 'hsr' [ 279.561081][T16505] Cannot create hsr debugfs directory [ 279.666578][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2940'. [ 279.859448][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2940'. [ 279.897956][T16644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.924354][T16644] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 279.933642][T16644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.949218][T16644] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 279.966087][T16654] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 279.973701][T16654] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 279.981238][T16654] tipc: Resetting bearer [ 279.983974][T16644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.023073][T16644] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 280.036588][T16505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 280.094671][T16644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.100587][T16644] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 280.128397][T16644] tipc: Resetting bearer [ 280.201569][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 280.256283][T16505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 280.436559][T16505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 280.597287][T16505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 280.631363][T16644] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 280.644903][T16644] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 280.792923][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 280.953757][T16505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.966847][T16505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.979811][T16505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 281.014832][T16505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.219245][T16505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.248966][T16505] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.264153][T13688] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.271328][T13688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.307717][T16714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2954'. [ 281.324657][T13693] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.331812][T13693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.349839][T16714] net veth1_virt_wifi .: renamed from virt_wifi0 [ 281.779043][T16737] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2958'. [ 281.809524][T16505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.891166][T16505] veth0_vlan: entered promiscuous mode [ 281.909998][T16505] veth1_vlan: entered promiscuous mode [ 281.965877][T16505] veth0_macvtap: entered promiscuous mode [ 281.981524][T16505] veth1_macvtap: entered promiscuous mode [ 282.013208][T16505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.036113][T16505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.055644][T13701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.064817][T13701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.076819][T13701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.091717][T13701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.282305][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.802576][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.499523][T13688]  (unregistering): Released all slaves [ 435.512379][T13688] bond1 (unregistering): Released all slaves [ 435.604041][T13688] bond2 (unregistering): Released all slaves [ 435.625754][T13688] bond0 (unregistering): Released all slaves [ 435.716625][T13688] bond3 (unregistering): Released all slaves [ 435.728845][T13688] bond4 (unregistering): Released all slaves [ 435.821730][T13688] : left promiscuous mode [ 435.863693][T13688] tipc: Disabling bearer [ 435.875312][T13688] tipc: Left network mode [ 436.082779][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 436.090465][ T31] Not tainted syzkaller #0 [ 436.095501][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.104281][ T31] task:kworker/0:0 state:D stack:23976 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 436.117008][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 436.123801][ T31] Call Trace: [ 436.127077][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 436.129991][ T31] __schedule+0x1798/0x4cc0 [ 436.134628][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 436.140015][ T31] ? __pfx___schedule+0x10/0x10 [ 436.145451][ T31] ? schedule+0x91/0x360 [ 436.149745][ T31] schedule+0x165/0x360 [ 436.154315][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.160007][ T31] __mutex_lock+0x7e6/0x1350 [ 436.164685][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.169488][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 436.206729][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.211794][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 436.233624][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 436.239399][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 436.245597][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 436.251324][ T31] process_scheduled_works+0xae1/0x17b0 [ 436.257257][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 436.263811][ T31] worker_thread+0x8a0/0xda0 [ 436.268416][ T31] kthread+0x70e/0x8a0 [ 436.272544][ T31] ? __pfx_worker_thread+0x10/0x10 [ 436.277648][ T31] ? __pfx_kthread+0x10/0x10 [ 436.282318][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.287511][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.293217][ T31] ? __pfx_kthread+0x10/0x10 [ 436.297815][ T31] ret_from_fork+0x439/0x7d0 [ 436.302440][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 436.307583][ T31] ? __switch_to_asm+0x39/0x70 [ 436.312351][ T31] ? __switch_to_asm+0x33/0x70 [ 436.317093][ T31] ? __pfx_kthread+0x10/0x10 [ 436.321678][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.326789][ T31] [ 436.329924][ T31] INFO: task syz-executor:16505 blocked for more than 143 seconds. [ 436.337846][ T31] Not tainted syzkaller #0 [ 436.342797][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.351449][ T31] task:syz-executor state:D stack:21064 pid:16505 tgid:16505 ppid:1 task_flags:0x400140 flags:0x00004004 [ 436.363946][ T31] Call Trace: [ 436.367220][ T31] [ 436.370134][ T31] __schedule+0x1798/0x4cc0 [ 436.374648][ T31] ? kasan_save_free_info+0x46/0x50 [ 436.379832][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.384725][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.389572][ T31] ? __pfx___schedule+0x10/0x10 [ 436.394711][ T31] ? schedule+0x91/0x360 [ 436.398944][ T31] schedule+0x165/0x360 [ 436.403126][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.408588][ T31] __mutex_lock+0x7e6/0x1350 [ 436.413250][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.418014][ T31] ? misc_open+0x51/0x330 [ 436.422881][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.427922][ T31] misc_open+0x51/0x330 [ 436.432131][ T31] chrdev_open+0x4c9/0x5e0 [ 436.436550][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.441488][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 436.447974][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.453230][ T31] do_dentry_open+0x950/0x13f0 [ 436.457989][ T31] vfs_open+0x3b/0x340 [ 436.462079][ T31] ? path_openat+0x2ecd/0x3830 [ 436.466854][ T31] path_openat+0x2ee5/0x3830 [ 436.471441][ T31] ? arch_stack_walk+0xfc/0x150 [ 436.476319][ T31] ? stack_depot_save_flags+0x40/0x860 [ 436.481772][ T31] ? __pfx_path_openat+0x10/0x10 [ 436.487509][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.493622][ T31] do_filp_open+0x1fa/0x410 [ 436.498107][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.503000][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 436.508050][ T31] ? _raw_spin_unlock+0x28/0x50 [ 436.513232][ T31] ? alloc_fd+0x64c/0x6c0 [ 436.517558][ T31] do_sys_openat2+0x121/0x1c0 [ 436.522271][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.527463][ T31] ? fput_close_sync+0x119/0x200 [ 436.532406][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 436.537675][ T31] __x64_sys_openat+0x138/0x170 [ 436.543060][ T31] do_syscall_64+0xfa/0x3b0 [ 436.547570][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.553646][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.559786][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.564642][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.570547][ T31] RIP: 0033:0x7f834538d710 [ 436.575441][ T31] RSP: 002b:00007ffc09497570 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 436.583886][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f834538d710 [ 436.591840][ T31] RDX: 0000000000000002 RSI: 00007f8345412a45 RDI: 00000000ffffff9c [ 436.599820][ T31] RBP: 00007f8345412a45 R08: 0000000000000000 R09: 0000000000000000 [ 436.608035][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 436.616026][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 436.624057][ T31] [ 436.627091][ T31] INFO: task syz.0.2943:16637 blocked for more than 143 seconds. [ 436.635347][ T31] Not tainted syzkaller #0 [ 436.640299][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.649187][ T31] task:syz.0.2943 state:D stack:26632 pid:16637 tgid:16637 ppid:5868 task_flags:0x400040 flags:0x00004004 [ 436.661112][ T31] Call Trace: [ 436.664932][ T31] [ 436.667860][ T31] __schedule+0x1798/0x4cc0 [ 436.672540][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.677405][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.682290][ T31] ? __pfx___schedule+0x10/0x10 [ 436.687142][ T31] ? schedule+0x91/0x360 [ 436.691370][ T31] schedule+0x165/0x360 [ 436.695771][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.701205][ T31] __mutex_lock+0x7e6/0x1350 [ 436.705817][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.710595][ T31] ? rfkill_unregister+0xc8/0x220 [ 436.715634][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.720642][ T31] ? __pfx_device_del+0x10/0x10 [ 436.726334][ T31] rfkill_unregister+0xc8/0x220 [ 436.731205][ T31] nfc_unregister_device+0x96/0x2a0 [ 436.736427][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 436.742183][ T31] virtual_ncidev_close+0x56/0x90 [ 436.747207][ T31] __fput+0x44c/0xa70 [ 436.751177][ T31] task_work_run+0x1d1/0x260 [ 436.756023][ T31] ? __pfx_task_work_run+0x10/0x10 [ 436.761123][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 436.766581][ T31] exit_to_user_mode_loop+0xec/0x110 [ 436.771848][ T31] do_syscall_64+0x2bd/0x3b0 [ 436.776453][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.783065][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.789221][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.793930][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.799828][ T31] RIP: 0033:0x7fc8de78eec9 [ 436.806635][ T31] RSP: 002b:00007ffcd21e03e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 436.815117][ T31] RAX: 0000000000000000 RBX: 000000000004444a RCX: 00007fc8de78eec9 [ 436.823408][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 436.831388][ T31] RBP: 00007fc8de9e7da0 R08: 0000000000000001 R09: 0000001ed21e06df [ 436.839390][ T31] R10: 0000001b32120000 R11: 0000000000000246 R12: 00007fc8de9e5fac [ 436.847532][ T31] R13: 00007fc8de9e5fa0 R14: ffffffffffffffff R15: 00007ffcd21e0500 [ 436.855576][ T31] [ 436.858603][ T31] INFO: task syz.4.2944:16644 blocked for more than 144 seconds. [ 436.866513][ T31] Not tainted syzkaller #0 [ 436.871445][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.880288][ T31] task:syz.4.2944 state:D stack:25144 pid:16644 tgid:16643 ppid:5874 task_flags:0x400140 flags:0x00004006 [ 436.892669][ T31] Call Trace: [ 436.895953][ T31] [ 436.898868][ T31] __schedule+0x1798/0x4cc0 [ 436.904681][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.909567][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.914434][ T31] ? __pfx___schedule+0x10/0x10 [ 436.919276][ T31] ? schedule+0x91/0x360 [ 436.923650][ T31] schedule+0x165/0x360 [ 436.927807][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.933547][ T31] __mutex_lock+0x7e6/0x1350 [ 436.938125][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.942963][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 436.948253][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.953320][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.958516][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 436.965061][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 436.971394][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 436.977412][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 436.982612][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 436.988349][ T31] rfkill_set_block+0x1d2/0x440 [ 436.993444][ T31] rfkill_fop_write+0x44b/0x570 [ 436.998281][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 437.004104][ T31] ? security_kernfs_init_security+0x250/0x290 [ 437.010263][ T31] ? rw_verify_area+0x255/0x4d0 [ 437.015156][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.020009][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 437.025973][ T31] vfs_write+0x27b/0xb30 [ 437.030227][ T31] ? __pfx_vfs_write+0x10/0x10 [ 437.035005][ T31] ? __fget_files+0x2a/0x420 [ 437.039577][ T31] ? __fget_files+0x2a/0x420 [ 437.044605][ T31] ? __fget_files+0x3a0/0x420 [ 437.049289][ T31] ? __fget_files+0x2a/0x420 [ 437.054135][ T31] ksys_write+0x145/0x250 [ 437.058452][ T31] ? __pfx_ksys_write+0x10/0x10 [ 437.063364][ T31] ? rcu_is_watching+0x15/0xb0 [ 437.068134][ T31] ? do_syscall_64+0xbe/0x3b0 [ 437.072826][ T31] do_syscall_64+0xfa/0x3b0 [ 437.077310][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.083146][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.089214][ T31] ? clear_bhb_loop+0x60/0xb0 [ 437.093893][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.099763][ T31] RIP: 0033:0x7f78ea38eec9 [ 437.104234][ T31] RSP: 002b:00007f78eb19c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.112906][ T31] RAX: ffffffffffffffda RBX: 00007f78ea5e5fa0 RCX: 00007f78ea38eec9 [ 437.120859][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 437.129704][ T31] RBP: 00007f78ea411f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.137795][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.145971][ T31] R13: 00007f78ea5e6038 R14: 00007f78ea5e5fa0 R15: 00007fffd8d8d308 [ 437.154070][ T31] [ 437.157110][ T31] INFO: task syz.3.2947:16659 blocked for more than 144 seconds. [ 437.164882][ T31] Not tainted syzkaller #0 [ 437.169797][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.178573][ T31] task:syz.3.2947 state:D stack:26760 pid:16659 tgid:16658 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 437.190605][ T31] Call Trace: [ 437.193996][ T31] [ 437.196932][ T31] __schedule+0x1798/0x4cc0 [ 437.201440][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.206416][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.211250][ T31] ? __pfx___schedule+0x10/0x10 [ 437.216178][ T31] ? schedule+0x91/0x360 [ 437.220421][ T31] schedule+0x165/0x360 [ 437.224958][ T31] schedule_preempt_disabled+0x13/0x30 [ 437.230420][ T31] __mutex_lock+0x7e6/0x1350 [ 437.235122][ T31] ? __mutex_lock+0x5bb/0x1350 [ 437.239906][ T31] ? rfkill_register+0x37/0x8e0 [ 437.244922][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 437.249956][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 437.255389][ T31] ? device_initialize+0x24b/0x440 [ 437.260486][ T31] rfkill_register+0x37/0x8e0 [ 437.265227][ T31] nfc_register_device+0x14a/0x320 [ 437.270336][ T31] nci_register_device+0x87f/0x9d0 [ 437.275507][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 437.281128][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 437.286496][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 437.291869][ T31] virtual_ncidev_open+0x129/0x1a0 [ 437.297045][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 437.302740][ T31] misc_open+0x2b9/0x330 [ 437.306987][ T31] chrdev_open+0x4c9/0x5e0 [ 437.311383][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 437.316533][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 437.322911][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 437.327826][ T31] do_dentry_open+0x950/0x13f0 [ 437.332724][ T31] vfs_open+0x3b/0x340 [ 437.336796][ T31] ? path_openat+0x2ecd/0x3830 [ 437.341558][ T31] path_openat+0x2ee5/0x3830 [ 437.346192][ T31] ? arch_stack_walk+0xfc/0x150 [ 437.351050][ T31] ? stack_depot_save_flags+0x40/0x860 [ 437.356647][ T31] ? __pfx_path_openat+0x10/0x10 [ 437.361573][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.367716][ T31] do_filp_open+0x1fa/0x410 [ 437.372335][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.377194][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 437.382240][ T31] ? _raw_spin_unlock+0x28/0x50 [ 437.387073][ T31] ? alloc_fd+0x64c/0x6c0 [ 437.391392][ T31] do_sys_openat2+0x121/0x1c0 [ 437.396141][ T31] ? __se_sys_futex+0x36f/0x400 [ 437.400996][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 437.406219][ T31] ? rcu_is_watching+0x15/0xb0 [ 437.410984][ T31] __x64_sys_openat+0x138/0x170 [ 437.415899][ T31] do_syscall_64+0xfa/0x3b0 [ 437.420383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.425785][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.431847][ T31] ? clear_bhb_loop+0x60/0xb0 [ 437.436581][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.442598][ T31] RIP: 0033:0x7fd760f8eec9 [ 437.447012][ T31] RSP: 002b:00007fd761eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 437.455532][ T31] RAX: ffffffffffffffda RBX: 00007fd7611e5fa0 RCX: 00007fd760f8eec9 [ 437.463517][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 437.471472][ T31] RBP: 00007fd761011f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.479556][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.487558][ T31] R13: 00007fd7611e6038 R14: 00007fd7611e5fa0 R15: 00007ffe76cb5998 [ 437.495596][ T31] [ 437.498618][ T31] INFO: task syz.1.2958:16737 blocked for more than 144 seconds. [ 437.506681][ T31] Not tainted syzkaller #0 [ 437.511609][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.520406][ T31] task:syz.1.2958 state:D stack:24776 pid:16737 tgid:16736 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 437.534096][ T31] Call Trace: [ 437.537394][ T31] [ 437.540313][ T31] __schedule+0x1798/0x4cc0 [ 437.544895][ T31] ? kasan_save_free_info+0x46/0x50 [ 437.550091][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.555181][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.560079][ T31] ? __pfx___schedule+0x10/0x10 [ 437.564970][ T31] ? schedule+0x91/0x360 [ 437.569211][ T31] schedule+0x165/0x360 [ 437.573434][ T31] schedule_preempt_disabled+0x13/0x30 [ 437.578891][ T31] __mutex_lock+0x7e6/0x1350 [ 437.583640][ T31] ? __mutex_lock+0x5bb/0x1350 [ 437.588411][ T31] ? misc_open+0x51/0x330 [ 437.592761][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 437.597779][ T31] misc_open+0x51/0x330 [ 437.601920][ T31] chrdev_open+0x4c9/0x5e0 [ 437.606465][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 437.611397][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 437.618030][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 437.623104][ T31] do_dentry_open+0x950/0x13f0 [ 437.627886][ T31] vfs_open+0x3b/0x340 [ 437.631962][ T31] ? path_openat+0x2ecd/0x3830 [ 437.636811][ T31] path_openat+0x2ee5/0x3830 [ 437.641402][ T31] ? arch_stack_walk+0xfc/0x150 [ 437.646400][ T31] ? stack_depot_save_flags+0x40/0x860 [ 437.651858][ T31] ? __pfx_path_openat+0x10/0x10 [ 437.656858][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.663079][ T31] do_filp_open+0x1fa/0x410 [ 437.667589][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.672504][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 437.677541][ T31] ? _raw_spin_unlock+0x28/0x50 [ 437.682518][ T31] ? alloc_fd+0x64c/0x6c0 [ 437.686871][ T31] do_sys_openat2+0x121/0x1c0 [ 437.691527][ T31] ? __se_sys_futex+0x36f/0x400 [ 437.696428][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 437.701635][ T31] ? rcu_is_watching+0x15/0xb0 [ 437.706489][ T31] __x64_sys_openat+0x138/0x170 [ 437.711332][ T31] do_syscall_64+0xfa/0x3b0 [ 437.715853][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.721042][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.727196][ T31] ? clear_bhb_loop+0x60/0xb0 [ 437.731881][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.737791][ T31] RIP: 0033:0x7fa5b658eec9 [ 437.742284][ T31] RSP: 002b:00007fa5b74a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 437.750723][ T31] RAX: ffffffffffffffda RBX: 00007fa5b67e5fa0 RCX: 00007fa5b658eec9 [ 437.758867][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 437.766943][ T31] RBP: 00007fa5b6611f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.774969][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.783009][ T31] R13: 00007fa5b67e6038 R14: 00007fa5b67e5fa0 R15: 00007fff41ba7228 [ 437.790996][ T31] [ 437.794056][ T31] [ 437.794056][ T31] Showing all locks held in the system: [ 437.801765][ T31] 3 locks held by kworker/0:0/9: [ 437.806840][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.817829][ T31] #1: ffffc900000e7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.831382][ T31] #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 437.842827][ T31] 1 lock held by khungtaskd/31: [ 437.847657][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 437.857568][ T31] 2 locks held by getty/5629: [ 437.862490][ T31] #0: ffff88814dbfa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 437.872337][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 437.882579][ T31] 4 locks held by kworker/u8:16/13688: [ 437.888032][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.898932][ T31] #1: ffffc9000c057bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.909523][ T31] #2: ffffffff8f52d1d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 437.918851][ T31] #3: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 437.929184][ T31] 2 locks held by kworker/u8:19/13696: [ 437.934677][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.946419][ T31] #1: ffffc9000bfe7bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.959122][ T31] 1 lock held by syz-executor/16505: [ 437.964449][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 437.973112][ T31] 2 locks held by syz.0.2943/16637: [ 437.978298][ T31] #0: ffff888056b35100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 437.988143][ T31] #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 437.998289][ T31] 2 locks held by syz.4.2944/16644: [ 438.004142][ T31] #0: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 438.015381][ T31] #1: ffff888056b35100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 438.025308][ T31] 3 locks held by syz.3.2947/16659: [ 438.030527][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.039018][ T31] #1: ffff888031d33100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 438.048986][ T31] #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.058956][ T31] 1 lock held by syz.1.2958/16737: [ 438.064146][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.072735][ T31] 1 lock held by syz-executor/16979: [ 438.078015][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.086804][ T31] 1 lock held by syz-executor/16980: [ 438.092163][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.100627][ T31] 1 lock held by syz-executor/16982: [ 438.106082][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.114590][ T31] 1 lock held by syz-executor/16984: [ 438.119868][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.128755][ T31] 1 lock held by syz-executor/16989: [ 438.134109][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.142724][ T31] 1 lock held by syz-executor/16992: [ 438.147998][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.156461][ T31] 1 lock held by syz-executor/16993: [ 438.161719][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.170833][ T31] 1 lock held by syz-executor/16995: [ 438.176996][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.185552][ T31] 1 lock held by syz-executor/16997: [ 438.190819][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.199268][ T31] 1 lock held by syz-executor/17002: [ 438.204866][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.214277][ T31] 1 lock held by syz-executor/17005: [ 438.219555][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.228009][ T31] 1 lock held by syz-executor/17006: [ 438.235049][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.243645][ T31] 1 lock held by syz-executor/17008: [ 438.248941][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.257548][ T31] 1 lock held by syz-executor/17010: [ 438.263179][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 438.271677][ T31] [ 438.274159][ T31] ============================================= [ 438.274159][ T31] [ 438.282619][ T31] NMI backtrace for cpu 0 [ 438.282641][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 438.282654][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.282661][ T31] Call Trace: [ 438.282665][ T31] [ 438.282671][ T31] dump_stack_lvl+0x189/0x250 [ 438.282688][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.282700][ T31] ? __pfx__printk+0x10/0x10 [ 438.282720][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 438.282736][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 438.282751][ T31] ? __pfx__printk+0x10/0x10 [ 438.282767][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 438.282783][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 438.282799][ T31] watchdog+0xf93/0xfe0 [ 438.282815][ T31] ? watchdog+0x1de/0xfe0 [ 438.282832][ T31] kthread+0x70e/0x8a0 [ 438.282846][ T31] ? __pfx_watchdog+0x10/0x10 [ 438.282859][ T31] ? __pfx_kthread+0x10/0x10 [ 438.282871][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.282881][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.282891][ T31] ? __pfx_kthread+0x10/0x10 [ 438.282903][ T31] ret_from_fork+0x439/0x7d0 [ 438.282914][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.282927][ T31] ? __switch_to_asm+0x39/0x70 [ 438.282939][ T31] ? __switch_to_asm+0x33/0x70 [ 438.282950][ T31] ? __pfx_kthread+0x10/0x10 [ 438.282962][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.282983][ T31] [ 438.282986][ T31] Sending NMI from CPU 0 to CPUs 1: [ 438.429732][ C1] NMI backtrace for cpu 1 [ 438.429748][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 438.429765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.429776][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 438.429796][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 438.429810][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 438.429824][ C1] RAX: 8c5b83ca0ca45500 RBX: ffffffff819683f8 RCX: 8c5b83ca0ca45500 [ 438.429836][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba42d RDI: ffffffff8be33f00 [ 438.429847][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 438.429858][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a630 [ 438.429870][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 438.429880][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 438.429892][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.429903][ C1] CR2: 00007f2f74d17d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 438.429917][ C1] Call Trace: [ 438.429924][ C1] [ 438.429930][ C1] default_idle+0x13/0x20 [ 438.429947][ C1] default_idle_call+0x74/0xb0 [ 438.429965][ C1] do_idle+0x1e8/0x510 [ 438.429982][ C1] ? __pfx_do_idle+0x10/0x10 [ 438.430006][ C1] cpu_startup_entry+0x44/0x60 [ 438.430020][ C1] start_secondary+0x101/0x110 [ 438.430040][ C1] common_startup_64+0x13e/0x147 [ 438.430065][ C1] [ 438.430724][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 438.596359][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 438.605449][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.615492][ T31] Call Trace: [ 438.618768][ T31] [ 438.621684][ T31] dump_stack_lvl+0x99/0x250 [ 438.626266][ T31] ? __asan_memcpy+0x40/0x70 [ 438.630858][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.636054][ T31] ? __pfx__printk+0x10/0x10 [ 438.640645][ T31] vpanic+0x281/0x750 [ 438.644615][ T31] ? __pfx_vpanic+0x10/0x10 [ 438.649111][ T31] ? preempt_schedule+0xae/0xc0 [ 438.653947][ T31] ? preempt_schedule_common+0x83/0xd0 [ 438.659400][ T31] panic+0xb9/0xc0 [ 438.663113][ T31] ? __pfx_panic+0x10/0x10 [ 438.667521][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 438.672897][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 438.679045][ T31] watchdog+0xfd2/0xfe0 [ 438.683199][ T31] ? watchdog+0x1de/0xfe0 [ 438.687536][ T31] kthread+0x70e/0x8a0 [ 438.691613][ T31] ? __pfx_watchdog+0x10/0x10 [ 438.696288][ T31] ? __pfx_kthread+0x10/0x10 [ 438.700880][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.706074][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.711260][ T31] ? __pfx_kthread+0x10/0x10 [ 438.715839][ T31] ret_from_fork+0x439/0x7d0 [ 438.720418][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.725521][ T31] ? __switch_to_asm+0x39/0x70 [ 438.730272][ T31] ? __switch_to_asm+0x33/0x70 [ 438.735021][ T31] ? __pfx_kthread+0x10/0x10 [ 438.739604][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.744364][ T31] [ 438.747627][ T31] Kernel Offset: disabled [ 438.751939][ T31] Rebooting in 86400 seconds..