last executing test programs: 2.749913394s ago: executing program 3 (id=5472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000002000001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x58}}, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x143) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="e0ae2c3a1d4cd315bcbff7df978b24f56b894c0932e27de3adcfadce4bad4e2a23c70ac1e07461f9726a1075fdae34033f7dee7e6a13807c4223e4753bab89bdc725a1c8ba8c2bc2dd8a135fd44f9364badf85124c02dadd16e33a0d93f99b26", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100fff30000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000013000000", @ANYRES32=0x0, @ANYRES64=r4], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000d00)={'wg0\x00', 0x0}) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000f40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf250200000005000d00000000000800040064010102070000003020cea9eae5f85ab6a1194f178c16eb83576c7d86ca9d2088e8a56d", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0c000300020000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000c00fe8000000000000000000000000000bb14000c00fe8000000000000000000000000000bb14000b00fe800000000000000000000000000036"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x12, {0xa}}]}, 0x28}}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="64010000100001000000000000000000fe800000000000000000000000010000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000002c0017002d00000000000000000000000000000000000000000000000a000000000000000000000000000000480003006c7a6a6800"/284], 0x164}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r10, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvfrom$phonet(r11, &(0x7f00000003c0)=""/164, 0xa4, 0x2105, 0x0, 0x0) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="010027bd7000fcdbdf251b00000010002e800c0004000202aaaaaaaaaaaa0c0006000100000001000000"], 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.6423533s ago: executing program 3 (id=5474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005800800024000000000080001400080"], 0xa0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) sendmsg$AUDIT_USER(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x3ed, 0x2, 0x70bd27, 0x25dfdbfc, "09de053c77b0862ea6896b3e9b0ec4974151aeab409a77528d24656bc23cdb0090aa88a6baf1a3605029aa467c838915c49f5585790dba8ff3ca0d4c14a02c7f4716ff", [""]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.572964665s ago: executing program 3 (id=5476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000bc0)={'\x00', &(0x7f0000000b40)=@ethtool_coalesce={0xe, 0x2, 0x1, 0xffff, 0x1, 0x9, 0x4, 0x23f8, 0x0, 0x7ff, 0x6, 0xf, 0x4, 0x9, 0x10, 0x7ff, 0x40, 0x8, 0x1ff, 0xd, 0x5a9b, 0x9, 0x9}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x14, 0x4, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400dd}, 0x800) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='GPL\x00', 0x84000, &(0x7f00000000c0)={@_ha_fsid={[0xffff, 0x3]}, {0x2, 0x80, 0x101, 0xfffffffffffffffb}}, 0x9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xffffff01}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80080002, 0x4) listen(r6, 0x7fffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="660ac97693000054af7d6861114c0000000000850000001c000000181b0000", @ANYRES32=r5, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.81625679s ago: executing program 1 (id=5483): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x15}, 0x90) unshare(0x26020480) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000a30000000050a05000000000000000000020000080900010073797a30000000000900030073797a320000000004000480140000001100010000000000000000000000000a00"/88], 0x58}}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) sendto$unix(r6, &(0x7f00000004c0)="ebb567fa9b", 0x5, 0x4c010, 0x0, 0x0) (async) syz_emit_ethernet(0xb3, &(0x7f00000003c0)={@local, @broadcast, @val={@void, {0x8100, 0x7, 0x1, 0xb}}, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "1b6f90", 0x79, 0x21, 0x100, @empty, @remote, {[@routing={0x88, 0x4, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}]}], {{0x4e20, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x2, 0x1, "090a8d", 0x4, "82b4d9"}, "c627b85cfe405dfb4c926708b1cbff36f16d8ce2209cfbbcfcfcf68db7aab6aa76752b57885cfe14759ebc44f911b836c6dfeddc756c066024e66f597fed5dc17d"}}}}}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r11, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) 1.688386643s ago: executing program 3 (id=5484): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/180, 0xb4}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/186, 0xba}], 0x3}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.653042915s ago: executing program 1 (id=5485): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xfff1}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 1.628017706s ago: executing program 4 (id=5486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="73a951134514b78be106c385a40abcaa94ae009405fdbc9438fd70f2ffe9fb505d765ec768fa7d7de6f845c4f6ed4dba1f56f69444c5faf0f39f011d74d6a62dc5b1deeab18c509ca3ed82563e666ea2585fb26ec6dc90b1eae74c149698939cf1e18809759b098a1b0d5e023d4695c6ad571f253f671aa1e5700a21843c675efb7e5f28412ef23d181e3ef02d46b77b8317ec397d4a8c52d68226ad291b0107d3751a2d64e362a60fa072352521a89ec75f7bb3bad809bbbdf03487551bbc6a3f3bd2721de52bdcbd33125027fc12c4ccc947ceaccdc4faab7d879ebc0f", 0xde}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000980)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x50, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x21}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x35}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x117, 0x2, 0x401, 0x700, 0x7, 0x4200100, r8}) 1.477905525s ago: executing program 1 (id=5487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.477344354s ago: executing program 3 (id=5488): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200003b000000000000000000000100000000000000cc"], 0xfdef) 1.345551889s ago: executing program 4 (id=5490): r0 = socket(0x11, 0x800000003, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x101}, 0x20) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, 0x0) connect$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x2}, 0x20) getpeername$l2tp6(r1, 0x0, &(0x7f0000000140)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x1, 0x400, 0x33, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0xa, 0x8}}) socket(0x11, 0x800000003, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x101}, 0x20) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$int_in(r3, 0x5452, 0x0) (async) connect$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x2}, 0x20) (async) getpeername$l2tp6(r1, 0x0, &(0x7f0000000140)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x1, 0x400, 0x33, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0xa, 0x8}}) (async) 1.308741914s ago: executing program 1 (id=5491): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9}, 0x90) close(r0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) 1.206231738s ago: executing program 4 (id=5492): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb6, &(0x7f000000cf3d)=""/182, 0x41100, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000)="3a94ed25fbcee74b17ebcfb59bb6255a73e949c7285e51c067120ae6362050dee35073c25693c2734466df1b4d5462559557aa", &(0x7f0000000080)=@tcp6=r1, 0x2}, 0x20) 1.120925733s ago: executing program 4 (id=5494): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x6b, 0x4) (async, rerun: 32) r1 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x50, r4, 0x852dd6c070cd7e4b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x50}, 0x4, 0x700000000000000, 0x0, 0x4049055}, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r8, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) 1.03841843s ago: executing program 1 (id=5495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.037244832s ago: executing program 0 (id=5497): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @multicast1, @multicast, @rand_addr=0x64010100}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000940)={0x3, 0x83, 0x0, 0xfffffeff, 0xa, 0x0, [{0x4, 0x10000, 0x4, '\x00', 0x100}, {0x0, 0x7, 0xe, '\x00', 0x8}, {0x83e3, 0x8407, 0x4, '\x00', 0x2486}, {0xd960069, 0x1000, 0x4}, {0x1, 0x3}, {0x276c, 0x0, 0xd, '\x00', 0x102}, {0x6, 0x8, 0xfffffffffffff539, '\x00', 0x1602}, {0x400, 0x5, 0x7, '\x00', 0x2004}, {0x1, 0xe5, 0x0, '\x00', 0x800}, {0x80000001, 0xfffffffeffffffff, 0x8, '\x00', 0x2}]}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00$\t\x00', @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES8=r1, @ANYBLOB="08040000000000000000", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 1.036248839s ago: executing program 3 (id=5498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000340)="0c66bc7a0c6bce44fe30bf671cd7da4e8bdfc6087c7b60f93b57dbbf67191d597593a69387dc83b02e9d205407abc877e5488d8dbd4e4d087ee5", 0x3a}, {&(0x7f0000000580)="b6b8a8acdd4cca0a84cf6b158169f37c8cb20041dc5b9c0086565f00960b4d2c1e4cbe107a9f8d2f94846c222a053899a8edcd650c7027bca1e8c10c5108d0d4be2c6abed14860d31440589089af1c3191663bbb3148ba277298da07bf35bb29b91b7c43c6d4835cd77e42f2372a9a25a9553746e27e36db034390ecf99de88d3169839e1271991cdb647c56acf769890320062986f6441e4660dfbf7eb854c4df8bb98363a3342cb1cfcf63b2a83c275c5996f0c0b917a129d2d274561d", 0xbe}, {&(0x7f0000000640)="95227bbdaa4d1c2eedbc096016fcb808230842a0993d3601a4878fc9b4f865ae1df5358fd3fd267cbb360c4c", 0x2c}, {&(0x7f0000000680)="2b216e2789aa84f07e9f1f6f8d6e0d4e4b0b", 0x12}], 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newchain={0x704, 0x64, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0xe}, {0x1, 0x8}, {0xfff2, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x4b0f}, @filter_kind_options=@f_basic={{0xa}, {0x694, 0x2, [@TCA_BASIC_EMATCHES={0x210, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x974f}, {{0x2, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x68, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x1ff}, "bf3dc0b6f2fceab65c740a0392b3a3d0698e2fc23582e1cb4ed300fa851f646f9a7336d390dee4d1967a0c04c7e83c275827769b5f15a51ec27c202ca7a194158d377af14b6d23f5f049d3e7263e95a24d632f9890e5c15c1b23bd"}}]}, @TCA_EMATCH_TREE_LIST={0x184, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x3, 0x0, 0x0, {{0xd4, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="781b9111ca7b8fc12769", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4, 0x1}, {0x2e0, 0x2, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xcf9}, {0x4a8, 0x7, 0x1, 0x8, 0x5, 0x2}}}, @TCF_EM_META={0x68, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x7fff}, [@TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="f4aa191851ac4478d281", @TCF_META_TYPE_VAR="22ab08b9db7d0c30", @TCF_META_TYPE_VAR="e879b68593712f", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="928ea8", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="2cac709cca08e7465fb7", @TCF_META_TYPE_VAR="544e9f6dd03780b7"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="f5", @TCF_META_TYPE_VAR="38f6f5fe5f700c02"]}]}}, @TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x101}, "4e5d8583759f5f754668b24c3b02235ec5bd54ec5dbd2bfe49ad15493d4a41c231e92069fa3503301d3a904c1a6c4dee9668640b9e02297304956b827a99279805813718a51d19c085ac12d11f8d22509c7b5a9b80f2a83af0b14370233128544283b756b7b6131014f60b8347f3c7d01eeb056dadeb445aa8736051c100e73d5abf6ca796b54e68b2de2b7dc521fed3bc8d19824b0be4ef306c1da447fe7ff72c5b0e55a5324aecacb2c151de52f503fd235fcde0c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}]}, @TCA_BASIC_POLICE={0x1c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x50}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0x8}}, @TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x1c, 0x3, 0x0, 0x0, {{0x8e1, 0x0, 0x8}, "36d0b95feabe4d74a773a29190"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x7fff}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0xf0, 0x9, 0x3, 0xfffffffb, 0x0, 0x1, 0x2, 0xfffffff9, 0xd7f8, 0xc, 0x8919, 0x7, 0x101, 0x0, 0x5, 0x1, 0x5ab5f736, 0xffff, 0x7, 0x9, 0xfffffffb, 0x11, 0xffffd1f7, 0x6d, 0x1, 0x3, 0x80, 0x7, 0xd, 0x7, 0x1ff, 0xfffffff8, 0xf, 0x2, 0x7, 0x2, 0x7f, 0x8, 0x8, 0x3, 0x1f2, 0xfffffffa, 0xbdc9, 0x7ff, 0x9, 0xc5cd, 0x6, 0x9, 0x3, 0x4, 0xfffffc00, 0x3, 0x3, 0x1ff, 0x7411, 0x4, 0xc, 0xfffffff7, 0x4, 0x0, 0x9, 0xfffffffd, 0xffffffff, 0x3, 0x0, 0x8, 0x401, 0x5, 0x9ca2, 0xd, 0xf, 0x80000001, 0x2, 0x200, 0x3fb, 0x0, 0x8, 0x8, 0xffffffff, 0x800, 0x3ff, 0x2, 0x7, 0x1, 0x70, 0x5, 0x4, 0x8, 0x7, 0x5, 0x8, 0xa07, 0x7, 0xe, 0x19b6, 0xffffffff, 0x3, 0xeef, 0x29, 0x80000001, 0x1ff, 0x3, 0x10000, 0x8, 0x7f, 0x2, 0x6, 0x1, 0xb, 0x3, 0xfff, 0x0, 0xf4, 0x5, 0x1, 0x5, 0x10f4, 0xfffffffe, 0x3, 0x0, 0x4, 0x5, 0x2, 0x1, 0x2, 0xffff, 0x3, 0x5, 0x5, 0x0, 0x6, 0x8, 0x7, 0x1, 0x101, 0x4, 0x8, 0x5, 0x5, 0x6, 0x3, 0x7, 0x4, 0x80000001, 0x9, 0x0, 0xfffffff9, 0xce01, 0xae7, 0x6d28, 0x8, 0x3, 0xd, 0x6, 0x6, 0x1, 0x6f37, 0x6, 0xfffffffd, 0x7, 0x6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0x2, 0x854, 0x1ff, 0x8, 0x3, 0xffff, 0x2, 0x0, 0xb, 0x2, 0x96, 0xfffffffa, 0xfffffff4, 0x6, 0x4, 0x2, 0x1, 0x6, 0x0, 0x9, 0x8, 0x2, 0xc96, 0x8, 0x5, 0x1, 0x0, 0xa, 0x44d, 0x6bd, 0x6, 0x9, 0xa, 0x24af0322, 0x6, 0x3ff, 0x4, 0x3, 0xe, 0x1ff, 0x7fffffff, 0x9, 0x38, 0x3ff, 0xfff, 0x8, 0x100, 0xdc9, 0x95, 0x1, 0x6, 0xf5, 0x9, 0x7fff, 0x4, 0x65d, 0x7, 0x6, 0x7, 0x912, 0x7fffffff, 0x7, 0x9, 0x0, 0xfffffff9, 0x8, 0x0, 0x4, 0x400000, 0xfffffdba, 0x6, 0x7, 0xff, 0x9, 0xb2, 0x5, 0x8, 0x2, 0x4, 0x9, 0x0, 0x200, 0x0, 0x0, 0x9, 0x7f, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x80, 0x42}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x37}]}}]}, 0x704}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "a8a7403163bc6ead", "b2e2a13a62060a22b58a8ad0ad28fc9bb74cefe0c50626946f191d8f3b7ea41a", "e9fd1d00", "c2cc918355969578"}, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYRES16=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000001080)=ANY=[@ANYBLOB="7e9e2a9d679ba59f7ddb6e139e4dffc0691fdbf09297e27664d13a8c78e1e44128ed6b9b2f6071af70679310192b771192488c1c28ceddaa39bd9f1aa01a72e0baa095492676f5adc96657198f9b2618e9b26dac8de6855c71bdb955b1ce25307ea4ec9f40a98867e3f83a16eda4", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf25030000005800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020064756d6d793000000000000000000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4004000) r11 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 886.896303ms ago: executing program 0 (id=5499): socket$inet(0x2, 0x807, 0x2) 826.250572ms ago: executing program 0 (id=5500): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x48, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x34, 0x1, [@m_vlan={0x30, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa05000300020000002400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 692.566205ms ago: executing program 0 (id=5501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 642.18973ms ago: executing program 4 (id=5502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000b80)={0x40, 0x1, 0x44f2ade573ff9a8a}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x31503037eeca2b60}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb2a9, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) 641.79305ms ago: executing program 2 (id=5503): syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) 634.166848ms ago: executing program 1 (id=5504): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}}, 0x20000000) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239faa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000002c0)={'veth0_macvtap\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt(r2, 0x32, 0x6, &(0x7f0000000180)=""/64, &(0x7f0000000280)=0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0xf4, 0x0, 0xfffffffe}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x14, 0x4e25, 0x8}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0) 489.0803ms ago: executing program 2 (id=5505): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xab}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x1, 0xfadfde020cc0166d, 0x4, 0xe7a007d71fa5e994, 0xffffffffffffffa5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x76, &(0x7f0000000240)=""/118, 0x41100, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[r0, r0], &(0x7f00000003c0)=[{0x0, 0x3, 0x0, 0x3}, {0x5, 0x5, 0x6, 0xb}, {0x2, 0x5, 0x0, 0x8}, {0x5, 0x1, 0xb, 0x8}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x8f, 0xea, &(0x7f0000000600)="5f9c2f126b851b9974a6e379eda13c43f73270aaa65835c292bab79265ff0271f6022e493b78e3f86a5ce516d0a5a4ed2cec6d82f0a12119afcfc929b762b3beb91c9ccbfed6a38a54d97135f10c9d507adf12346019f4d242ccff9af83d83063ecbb41eed009e513d9e246b2c940245206e3c1b9d282f7c6c4e9e44f46d4fc3741d638141e1556eff1a2978083870", &(0x7f00000006c0)=""/234, 0x7, 0x0, 0xa, 0x11, &(0x7f00000007c0)="bef614cbb31f153d2122", &(0x7f0000000800)="d1bb19d80e05e1de021310e18f2f8aa3e9", 0x3, 0x0, 0xb}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000040)={{{@in=@initdev, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) 360.289871ms ago: executing program 0 (id=5506): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(r4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendto$packet(r8, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @local}, 0x14) 294.435437ms ago: executing program 2 (id=5507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1dc, 0x17, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14}, {0x14}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x14}, 0x20000044) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a010400000900030073797a31000000000900010073797a310000000028000480080002401886c3010800014000000005140003006d61637674617030000000000000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a00"/196], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800200600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907800f3fd02fe087701d734ec220000"], 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x200080c4) 281.6386ms ago: executing program 0 (id=5508): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200003c000000000000000000000100000000000000cc"], 0xfdef) 228.575777ms ago: executing program 4 (id=5509): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002080)=@delchain={0x140, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x108, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_EMATCHES={0xe4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x200}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="df504b", @TCF_META_TYPE_VAR="9c", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="4f65f6c06d4b55b3f0da"]}]}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3bb0"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x9, 0x2188e8564924fac6}, {0x8, 0x5}}}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x8001, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3d7fed9d34", @TCF_META_TYPE_VAR="3b9aa19a5093e4d1c834", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ae2eca", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR='\t', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="14", @TCF_META_TYPE_VAR="ccbcd1cc4e2b", @TCF_META_TYPE_VAR="92d134", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dc03f5473ce1", @TCF_META_TYPE_VAR="ea02908d", @TCF_META_TYPE_VAR="4ed11bc2035cdecc"]}]}}]}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, "787692f39421056673d3f9d28b4385b5e89079ab712f8cc552139450736a4f7e2acc3b8dae9df0e116d6c1a2d9436a6eea434eacc360b3fc2e511504c8aadc", 0x1b}, 0x80) (async) connect(r0, &(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, "787692f39421056673d3f9d28b4385b5e89079ab712f8cc552139450736a4f7e2acc3b8dae9df0e116d6c1a2d9436a6eea434eacc360b3fc2e511504c8aadc", 0x1b}, 0x80) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 181.661168ms ago: executing program 2 (id=5510): getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x7}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='veth1_virt_wifi\x00', 0x10002, &(0x7f0000000100)={@align=0xfffffffffffffeff, {0xe4c6, 0x100, 0x8, 0x100}}, 0xffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x3}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xde, "f1a28b43e4f5ef943d5628474f045bb30276957015854dc72798be00da04fe264207917e4a7194c1ddfb4a996c559cfb472dc812a2dc44dd05750a8f00d98326a9681a1fb8e2fcd681bf95972772a12ee234a6211835d98fd95626ec472c2b0c2cc980992ecde7c821038819516fb2211495b120d61a674810f1546622aba686e961f81aed3496c1112630e92bf5aa9c187ae9ad6eb8259db10e73a078ee2b43ea5060ff61fda9f1fa05546f577db403050eaab437e7addb3f72d969a4395092b43f97add878b590ec0193a8b39edce712697f0ce2e0cc7de67ee2d23df9"}, &(0x7f0000000300)=0xe6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf89}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080c0}, 0x4044092) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x97, 0x97, 0xc, [@func={0xc, 0x0, 0x0, 0xc, 0x2}, @const={0xb, 0x0, 0x0, 0xa, 0x3}, @const={0x3, 0x0, 0x0, 0xa, 0x1}, @datasec={0x9, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x5f, 0x7f}, {0x4, 0xff, 0x9}], "5d4da2"}, @func={0xf, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x1}}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x4a, 0x4}]}, {0x0, [0x61, 0x5f, 0x61, 0x61, 0x0, 0x61, 0x2e, 0x0, 0x61, 0x30]}}, &(0x7f0000000540)=""/200, 0xbc, 0xc8, 0x0, 0xd}, 0x28) recvfrom$ax25(r1, &(0x7f0000000680)=""/208, 0xd0, 0x0, &(0x7f0000000780)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@null, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000940)={0x1, 0x6, 0x7, 0x9b1e, 0x5, 0x4, 0xf}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000980)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x2, 0x2, 0x0, 0x8, 0x2}, &(0x7f00000009c0)=0x20) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7f}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x28854ca3245fb93e}, 0x40) r4 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@ifindex=0x0, 0x22, 0x1, 0x7ff, &(0x7f0000000b40)=[0x0], 0x1, 0x0, &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000ec0)={{r1, &(0x7f0000000cc0)='IPVS\x00', 0x240401, &(0x7f0000000d00)={@align=0x80000000, {0xea68, 0x96, 0xd68, 0x10000}}, 0x0, &(0x7f0000000d40)={@_ha_fsid}, &(0x7f0000000d80)=0x40}, {[0x1, 0x800, 0x3, 0x1]}, 0x2, 0xf2, &(0x7f0000000dc0)=""/242}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tracing}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@cgroup=r7, r1, 0x16, 0x2008, 0x0, @value=r8, @void, @void, @void, r6}, 0x20) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001000)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x10, 0x8, 0x9, 0x2, 0x1200d, r7, 0x31df, '\x00', r5, r7, 0x3, 0x4, 0x5, 0x0, @void, @value, @value=r9}, 0x50) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040c01}, 0x4) ioctl(r8, 0x1, &(0x7f0000001180)="8ed7698e0ae9079e9085ee9595a29d7c4c7978f227aa020ddb6550d9af9321ee1f1b30fed69f9210f4f8e9361e36aa59c7f21ccfccf62c06eccc140332fa3048198e2381b5953e6d5152179a8a33b62faf9c4ed3ef6c78366e028079b8078ca8603c264e64cf17f772fb935a91e20c9aa536c56d6f404432e9494886e17a") sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r10, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl(r11, 0xee6b, &(0x7f0000001300)="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") ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000001440)={0x1, 0x4, 0x1ff, 0x0, 0x3, 0x3, 0x0, &(0x7f0000001400)=[{0x1b, 0x101, 0x9}, {0x21, 0x101, 0x6}, {0x13, 0x101, 0x4}]}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001480)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, r5}, 0x14) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xd53a}}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8850}, 0x8000) 125.849548ms ago: executing program 2 (id=5511): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)={0x268, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x255, 0x20b1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x165, 0x1fc, 0x0, 0x1, [@generic="aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319", @generic="fae644f50596f81d9ad9081d397c66b15f5eaf36bc97fc82590eed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x268}], 0x1, 0x0, 0x0, 0x4008040}, 0x0) 0s ago: executing program 2 (id=5512): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0xc020400) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20) r2 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x6}}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x10, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x6c, 0x8, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x7fffffff}]}, @lsrr={0x83, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000901000000000000000000000000dddc7e7e67262a53ab26595fda653bff375bb2a36297b9d72a9ca316912f1d2114348c86e0c23c9fec6ad040cc79b1c976d7a5a916e08a07b1cf0020fbd346e033a94af452bf4726169bdbd6bc383ee4bcd5dd773517461fce9573d0503a885e1e", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.027116][T17889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.382327][T17889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.629184][T17889] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.681333][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.688572][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.724451][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.756699][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.763900][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.071997][T18186] netlink: 'syz.1.3363': attribute type 1 has an invalid length. [ 347.224315][T18204] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 347.392967][ T5828] Bluetooth: hci4: command tx timeout [ 347.535569][T18219] netlink: 'syz.3.3371': attribute type 9 has an invalid length. [ 347.589786][T18221] netlink: 'syz.4.3372': attribute type 1 has an invalid length. [ 347.614943][T18221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.705647][T17889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.840231][T17889] veth0_vlan: entered promiscuous mode [ 347.941034][T18233] syzkaller1: entered promiscuous mode [ 347.947124][T18233] syzkaller1: entered allmulticast mode [ 347.964610][T17889] veth1_vlan: entered promiscuous mode [ 348.026013][T17889] veth0_macvtap: entered promiscuous mode [ 348.057990][T17889] veth1_macvtap: entered promiscuous mode [ 348.134160][T17889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.180538][T17889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.230489][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.256118][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.368708][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.402056][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.407469][T18249] nbd: nbd0 already in use [ 348.428342][T18249] block nbd0: NBD_DISCONNECT [ 348.452000][T18249] block nbd0: Send disconnect failed -32 [ 348.474935][T18249] block nbd0: shutting down sockets [ 348.771888][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.806311][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.988123][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.033297][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.472882][ T5828] Bluetooth: hci4: command tx timeout [ 349.645764][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.658443][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.669291][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.685441][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.698457][ T148] tipc: Subscription rejected, illegal request [ 349.709503][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.731498][T18302] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 349.779930][T18298] tipc: Resetting bearer [ 349.795540][ T116] wlan1: Trigger new scan to find an IBSS to join [ 350.095760][T18314] netlink: 'syz.3.3402': attribute type 1 has an invalid length. [ 350.328467][T18324] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 350.356665][T18316] __nla_validate_parse: 17 callbacks suppressed [ 350.356685][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 350.404163][T18320] netlink: 'syz.2.3405': attribute type 39 has an invalid length. [ 350.550231][T18330] netlink: 'syz.4.3407': attribute type 1 has an invalid length. [ 350.599564][T18330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.731224][T18331] bond3: (slave veth0_to_bond): making interface the new active one [ 350.743466][T18331] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 350.807392][T18336] bond3: entered promiscuous mode [ 350.819539][T18336] veth0_to_bond: entered promiscuous mode [ 350.840027][T18336] bond3: entered allmulticast mode [ 350.853276][T18336] veth0_to_bond: entered allmulticast mode [ 350.952392][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3412'. [ 351.026361][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3412'. [ 351.273425][T18370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3417'. [ 351.472299][T18371] syzkaller0: entered promiscuous mode [ 351.485923][T18371] syzkaller0: entered allmulticast mode [ 351.537667][T18298] chnl_net:caif_netlink_parms(): no params data found [ 351.599316][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3425'. [ 351.795517][ T5828] Bluetooth: hci3: command tx timeout [ 352.201473][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'. [ 353.873848][ T5828] Bluetooth: hci3: command tx timeout [ 353.886977][T18415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.895096][T18415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.905898][T18415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.913710][T18415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.975977][T18427] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 353.980677][T18430] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 354.271666][T18298] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.313771][T18298] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.331413][T18298] bridge_slave_0: entered allmulticast mode [ 354.354689][T18298] bridge_slave_0: entered promiscuous mode [ 354.406954][T18298] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.417614][T18298] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.425826][T18298] bridge_slave_1: entered allmulticast mode [ 354.434451][T18298] bridge_slave_1: entered promiscuous mode [ 354.460558][T18461] syzkaller0: entered promiscuous mode [ 354.467236][T18461] syzkaller0: entered allmulticast mode [ 354.593185][T18298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.608482][T18298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.618914][T18467] 8021q: VLANs not supported on lo [ 354.750938][T18298] team0: Port device team_slave_0 added [ 354.757537][ T148] wlan1: Trigger new scan to find an IBSS to join [ 354.786534][T18298] team0: Port device team_slave_1 added [ 354.813499][T18489] xt_socket: unknown flags 0x50 [ 354.927238][T18298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.944227][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.014887][T18298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.048367][T18499] netlink: 'syz.2.3449': attribute type 5 has an invalid length. [ 355.063588][T18499] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3449'. [ 355.091618][T18298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.110697][T18502] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3450'. [ 355.120419][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.163463][T18505] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3450'. [ 355.183007][T18298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.218983][T18502] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.226369][T18502] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.298983][T18514] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.449585][T18298] hsr_slave_0: entered promiscuous mode [ 355.469472][T18298] hsr_slave_1: entered promiscuous mode [ 355.488730][T18298] debugfs: 'hsr0' already exists in 'hsr' [ 355.502096][T18298] Cannot create hsr debugfs directory [ 355.575120][T18529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.683363][ T116] wlan1: Creating new IBSS network, BSSID ee:86:32:92:f9:4c [ 355.806762][T18542] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3461'. [ 355.914702][T18542] netlink: 'syz.3.3461': attribute type 2 has an invalid length. [ 355.929301][T18298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.954119][ T5828] Bluetooth: hci3: command tx timeout [ 356.145912][T18298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.298787][T18298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.443955][T18567] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3468'. [ 356.470980][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3469'. [ 356.486570][T18298] bond0: (slave netdevsim0): Releasing backup interface [ 356.500611][T18298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.144119][T18298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.176969][T18298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.187278][T18298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.197111][T18298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.205548][T18298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.216010][T18298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.225787][T18578] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 357.239441][T18597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.248768][T18298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.266168][T18298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.414143][T18298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.460637][T18298] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.488438][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.495679][ T7675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.653417][T18614] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 357.682130][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.689332][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.730395][T18629] netlink: 'syz.1.3483': attribute type 26 has an invalid length. [ 357.791629][ T980] IPVS: starting estimator thread 0... [ 357.829290][T18633] netlink: 'syz.2.3487': attribute type 1 has an invalid length. [ 357.903434][T18631] IPVS: using max 29 ests per chain, 69600 per kthread [ 357.951589][T18636] nbd: nbd3 already in use [ 358.034904][ T5828] Bluetooth: hci3: command tx timeout [ 358.179057][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'. [ 358.208544][T18658] netlink: 'syz.3.3495': attribute type 4 has an invalid length. [ 358.244670][T18654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3493'. [ 358.310638][T18298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.476087][T18298] veth0_vlan: entered promiscuous mode [ 358.522447][T18298] veth1_vlan: entered promiscuous mode [ 358.649282][T18298] veth0_macvtap: entered promiscuous mode [ 358.690711][T18298] veth1_macvtap: entered promiscuous mode [ 358.730122][T18298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.761399][T18298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.769163][T18688] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3503'. [ 358.778921][T16798] IPVS: starting estimator thread 0... [ 358.812194][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.856001][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.882587][T18690] IPVS: using max 27 ests per chain, 64800 per kthread [ 358.890862][T18695] delete_channel: no stack [ 358.903136][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.970659][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.106125][T18706] xt_hashlimit: size too large, truncated to 1048576 [ 359.340759][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.381363][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.471751][T18727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3511'. [ 359.589175][T18730] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 359.599246][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.610706][T18730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3512'. [ 359.621842][T18730] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 359.631558][T18730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3512'. [ 359.635034][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.658550][T18730] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 359.667286][T18730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3512'. [ 359.677148][T18730] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 359.685577][T18730] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 359.880867][T18736] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 359.901763][T18736] bond1 (unregistering): Released all slaves [ 360.155819][T18764] validate_nla: 29 callbacks suppressed [ 360.155837][T18764] netlink: 'syz.2.3519': attribute type 44 has an invalid length. [ 361.130930][T18802] can: request_module (can-proto-0) failed. [ 361.422512][T18821] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 361.890548][ T2065] block nbd1: Possible stuck request ffff888027685080: control (read@0,1024B). Runtime 270 seconds [ 361.902954][ T2065] block nbd1: Possible stuck request ffff888027685240: control (read@1024,1024B). Runtime 270 seconds [ 361.916968][ T2065] block nbd1: Possible stuck request ffff888027685400: control (read@2048,1024B). Runtime 270 seconds [ 361.928047][ T2065] block nbd1: Possible stuck request ffff8880276855c0: control (read@3072,1024B). Runtime 270 seconds [ 362.005436][ T5489] veth0_vlan: left promiscuous mode [ 362.046050][ T5489] veth0_vlan: entered promiscuous mode [ 362.146829][T18842] netlink: 'syz.2.3537': attribute type 4 has an invalid length. [ 362.481621][T18864] gre1: entered promiscuous mode [ 362.736295][T18886] netlink: 'syz.2.3549': attribute type 10 has an invalid length. [ 362.747546][T18872] bridge1: entered promiscuous mode [ 362.763325][T18872] bridge1: entered allmulticast mode [ 362.775692][T18872] team0: Port device bridge1 added [ 362.781512][T18879] bridge0: port 3(team0) entered blocking state [ 362.798557][T18879] bridge0: port 3(team0) entered disabled state [ 362.816857][T18879] team0: entered allmulticast mode [ 362.827695][T18879] team_slave_0: entered allmulticast mode [ 362.847136][T18879] team_slave_1: entered allmulticast mode [ 362.880389][T18879] team0: entered promiscuous mode [ 362.896924][T18879] team_slave_0: entered promiscuous mode [ 362.926651][T18879] team_slave_1: entered promiscuous mode [ 362.969012][T18879] bridge0: port 3(team0) entered blocking state [ 362.975554][T18879] bridge0: port 3(team0) entered forwarding state [ 363.076594][T18886] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 363.188301][T18898] team0: Port device gretap1 added [ 363.239753][T18912] __nla_validate_parse: 36 callbacks suppressed [ 363.239770][T18912] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3554'. [ 363.260620][T18911] netlink: 'syz.2.3555': attribute type 10 has an invalid length. [ 363.297110][T18912] 8021q: VLANs not supported on ip6_vti0 [ 363.330643][T18911] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.357981][T18911] bridge_slave_1: left allmulticast mode [ 363.379231][T18911] bridge_slave_1: left promiscuous mode [ 363.410693][T18911] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.487368][T18911] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 363.520753][T18924] netlink: 'syz.4.3559': attribute type 8 has an invalid length. [ 363.551670][T18924] netlink: 'syz.4.3559': attribute type 32 has an invalid length. [ 363.577797][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3559'. [ 363.671988][T18924] bond4: option coupled_control: invalid value (18) [ 363.681937][T18924] bond4 (unregistering): Released all slaves [ 363.755175][T18936] tipc: Enabled bearer , priority 0 [ 363.897643][T18936] syzkaller0: entered promiscuous mode [ 363.903463][T18936] syzkaller0: entered allmulticast mode [ 363.909972][T18936] tipc: Resetting bearer [ 364.296429][T18959] xt_socket: unknown flags 0xe4 [ 364.402345][T18966] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 364.410101][T18966] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.437627][T18928] tipc: Resetting bearer [ 364.511072][T18966] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3569'. [ 366.984874][T18928] tipc: Disabling bearer [ 367.048256][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3581'. [ 367.144470][T19024] netlink: 'syz.2.3582': attribute type 3 has an invalid length. [ 367.175922][T19024] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3582'. [ 367.237513][T19024] netlink: 'syz.2.3582': attribute type 10 has an invalid length. [ 367.394524][T19048] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3588'. [ 370.166433][T19028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.640489][T19078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3596'. [ 370.696089][T19078] netlink: 'syz.3.3596': attribute type 16 has an invalid length. [ 370.715993][T19078] netlink: 'syz.3.3596': attribute type 17 has an invalid length. [ 370.830007][T19078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.126947][T19105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3601'. [ 371.156671][T19108] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3603'. [ 371.193611][T19105] bond0: entered promiscuous mode [ 371.199003][T19111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3602'. [ 371.217861][T19105] bond_slave_0: entered promiscuous mode [ 371.243513][T19105] bond_slave_1: entered promiscuous mode [ 371.264814][T19105] gretap0: entered promiscuous mode [ 371.281929][T19105] debugfs: 'hsr1' already exists in 'hsr' [ 371.295930][T19105] Cannot create hsr debugfs directory [ 371.319356][T19105] hsr1: entered promiscuous mode [ 371.336513][T19072] netlink: 'syz.4.3595': attribute type 16 has an invalid length. [ 371.352921][T19072] netlink: 'syz.4.3595': attribute type 17 has an invalid length. [ 371.430317][T19072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.569774][T19125] netlink: 'syz.1.3607': attribute type 4 has an invalid length. [ 371.624671][T19128] netlink: 'syz.1.3607': attribute type 4 has an invalid length. [ 371.780642][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3609'. [ 371.820270][T19130] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 371.843260][T19130] bond1 (unregistering): Released all slaves [ 371.976989][T19134] bond4: option xmit_hash_policy: invalid value (64) [ 371.999765][T19134] bond4 (unregistering): Released all slaves [ 372.064077][T19138] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 372.158364][T19150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3612'. [ 372.630618][T19172] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 372.656988][T19172] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 372.690378][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3621'. [ 372.713683][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3621'. [ 373.319409][T19207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3636'. [ 373.336785][T19206] syzkaller0: entered promiscuous mode [ 373.349627][T19206] syzkaller0: entered allmulticast mode [ 373.403042][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.410297][ C1] bridge0: topology change detected, propagating [ 373.487906][T19207] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.712092][T19207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.759808][T19207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.824108][T19207] veth0_vlan: left promiscuous mode [ 374.047753][ T148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.091542][ T148] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.227305][ T148] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.249297][ T148] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.296342][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3649'. [ 374.484331][T19266] lo: entered allmulticast mode [ 374.883770][T19290] netlink: 'syz.0.3660': attribute type 8 has an invalid length. [ 375.648647][T19334] netlink: 'syz.4.3670': attribute type 11 has an invalid length. [ 375.670865][T19334] __nla_validate_parse: 1 callbacks suppressed [ 375.670882][T19334] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.3670'. [ 375.717661][T19343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3672'. [ 378.516744][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.993148][ T5193] udevd[5193]: worker [5832] /devices/virtual/block/nbd1 timeout; kill it [ 379.003267][ T5193] udevd[5193]: seq 11292 '/devices/virtual/block/nbd1' killed [ 379.153775][ T116] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 385.745010][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.954678][ T2065] block nbd1: Possible stuck request ffff888027685080: control (read@0,1024B). Runtime 300 seconds [ 391.965633][ T2065] block nbd1: Possible stuck request ffff888027685240: control (read@1024,1024B). Runtime 300 seconds [ 391.976776][ T2065] block nbd1: Possible stuck request ffff888027685400: control (read@2048,1024B). Runtime 300 seconds [ 391.987832][ T2065] block nbd1: Possible stuck request ffff8880276855c0: control (read@3072,1024B). Runtime 300 seconds [ 399.880385][T19418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3677'. [ 399.903738][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3678'. [ 399.924830][T19422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3677'. [ 399.982952][T19426] netlink: 'syz.0.3679': attribute type 12 has an invalid length. [ 400.010239][T19427] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 400.044944][T19426] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 400.160547][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 400.166304][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 400.204266][T19435] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.204442][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 400.280847][T19443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3683'. [ 400.494695][T19457] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3687'. [ 400.514226][T19457] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3687'. [ 400.659540][T19471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3692'. [ 400.784708][T19475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.864343][T19481] xt_hashlimit: size too large, truncated to 1048576 [ 400.890668][T19483] netlink: 'syz.0.3696': attribute type 22 has an invalid length. [ 400.919750][T19486] : renamed from vxcan1 (while UP) [ 401.031088][T19486] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 401.630186][T19513] xt_hashlimit: overflow, try lower: 3/0 [ 401.653183][T19513] xt_hashlimit: overflow, try lower: 3/0 [ 401.811734][T19520] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 401.838282][T19520] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 401.857961][T19520] netlink: 'syz.4.3709': attribute type 8 has an invalid length. [ 401.977408][T19525] xt_cgroup: xt_cgroup: no path or classid specified [ 402.898512][T19569] aD: renamed from lo (while UP) [ 402.991443][T19576] netlink: 'syz.1.3728': attribute type 142 has an invalid length. [ 403.183168][T19585] netlink: 'syz.0.3731': attribute type 1 has an invalid length. [ 403.594255][T19604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.038914][T19632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.724235][T19709] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 407.760876][T19709] __nla_validate_parse: 16 callbacks suppressed [ 407.760893][T19709] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3762'. [ 407.938296][T19722] netlink: 'syz.0.3767': attribute type 1 has an invalid length. [ 407.977410][T19729] nbd: must specify a size in bytes for the device [ 407.983795][T19730] netlink: 'syz.2.3770': attribute type 21 has an invalid length. [ 407.984568][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 408.010212][T19730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3770'. [ 408.024576][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 408.156427][T19735] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 408.246752][T19740] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3773'. [ 408.289383][T19746] netlink: 'syz.2.3774': attribute type 1 has an invalid length. [ 408.298868][T19740] bridge: RTM_NEWNEIGH with invalid ether address [ 408.407789][T19746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.451410][T19751] bond2: (slave gretap1): making interface the new active one [ 408.464197][T19751] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 408.507629][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'. [ 408.799598][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3788'. [ 408.830912][T19781] syzkaller1: entered promiscuous mode [ 408.839422][T19781] syzkaller1: entered allmulticast mode [ 409.079917][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3793'. [ 409.089301][T19804] netlink: 'syz.1.3795': attribute type 1 has an invalid length. [ 409.127250][T19804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 409.146896][T19799] macvlan2: entered allmulticast mode [ 409.153601][T19804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3795'. [ 409.165528][T19799] hsr0: entered allmulticast mode [ 409.183155][T19799] hsr_slave_0: entered allmulticast mode [ 409.201865][T19799] hsr_slave_1: entered allmulticast mode [ 409.212339][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'. [ 409.215187][T19799] hsr0: entered promiscuous mode [ 409.514633][T19829] syzkaller0: entered promiscuous mode [ 409.520327][T19829] syzkaller0: entered allmulticast mode [ 409.734523][T19838] syzkaller1: entered promiscuous mode [ 409.741347][T19838] syzkaller1: entered allmulticast mode [ 409.946160][T19857] netlink: 'syz.1.3809': attribute type 21 has an invalid length. [ 409.990140][T19857] netlink: 'syz.1.3809': attribute type 4 has an invalid length. [ 409.999393][T19857] netlink: 'syz.1.3809': attribute type 5 has an invalid length. [ 410.018702][T19857] netlink: 'syz.1.3809': attribute type 21 has an invalid length. [ 410.048802][T19857] netlink: 'syz.1.3809': attribute type 4 has an invalid length. [ 410.066093][T19857] netlink: 'syz.1.3809': attribute type 5 has an invalid length. [ 410.617367][T19912] aD: renamed from lo [ 411.153536][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.610529][T19956] syzkaller1: entered promiscuous mode [ 411.624446][T19956] syzkaller1: entered allmulticast mode [ 411.975398][T19990] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.027367][T20057] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 413.368962][T20073] netlink: 'syz.0.3871': attribute type 8 has an invalid length. [ 413.386802][T20073] __nla_validate_parse: 36 callbacks suppressed [ 413.386819][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 413.436107][T20073] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.443788][T20073] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.793573][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'. [ 413.800331][T20111] tipc: Enabled bearer , priority 10 [ 413.816409][T20111] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 413.827224][T20111] netlink: 'syz.3.3881': attribute type 2 has an invalid length. [ 413.836186][T20112] bridge_slave_0: left allmulticast mode [ 413.837980][T20106] netlink: 'syz.0.3879': attribute type 23 has an invalid length. [ 413.842069][T20112] bridge_slave_0: left promiscuous mode [ 413.869464][T20112] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.893070][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'. [ 413.912709][T20112] bridge_slave_1: left allmulticast mode [ 413.920226][T20112] bridge_slave_1: left promiscuous mode [ 413.926921][T20112] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.959154][T20112] bond0: (slave bond_slave_0): Releasing backup interface [ 414.000382][T20112] bond_slave_0: left allmulticast mode [ 414.022724][T20112] bond0: (slave bond_slave_1): Releasing backup interface [ 414.033544][T20112] bond_slave_1: left allmulticast mode [ 414.060579][T20112] team0: Port device team_slave_0 removed [ 414.117191][T20112] team0: Port device team_slave_1 removed [ 414.138276][T20112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.341821][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3884'. [ 414.529807][T20118] IPVS: persistence engine module ip_vs_pe_ not found [ 414.608652][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 414.632159][T20131] x_tables: duplicate underflow at hook 3 [ 414.649921][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 414.655708][T20125] macsec1: entered promiscuous mode [ 414.695515][T20125] bridge0: entered promiscuous mode [ 414.708165][T20125] macsec1: entered allmulticast mode [ 414.714007][T20125] bridge0: entered allmulticast mode [ 414.720148][T20125] bridge0: port 2(macsec1) entered blocking state [ 414.728970][T20125] bridge0: port 2(macsec1) entered disabled state [ 414.746421][T20125] bridge0: left allmulticast mode [ 414.761781][T20125] bridge0: left promiscuous mode [ 414.809551][T20128] macsec1: entered promiscuous mode [ 414.819098][T20128] bridge0: entered promiscuous mode [ 414.839260][T20128] macsec1: entered allmulticast mode [ 414.845198][T20128] bridge0: entered allmulticast mode [ 414.862130][T20128] bridge0: port 2(macsec1) entered blocking state [ 414.872696][T20128] bridge0: port 2(macsec1) entered disabled state [ 414.896940][T20128] bridge0: left allmulticast mode [ 414.904184][T20128] bridge0: left promiscuous mode [ 415.016533][T20144] bond0: entered allmulticast mode [ 415.044489][T20148] netlink: 'syz.4.3893': attribute type 1 has an invalid length. [ 415.064690][T20150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3892'. [ 415.069452][T20148] netlink: 'syz.4.3893': attribute type 4 has an invalid length. [ 415.091590][T20149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3892'. [ 415.101491][T20148] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.3893'. [ 415.244491][T20162] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3894'. [ 415.442064][T20171] syzkaller0: entered promiscuous mode [ 415.458033][T20171] syzkaller0: entered allmulticast mode [ 415.741273][T20190] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 416.088907][T20215] syz_tun: entered allmulticast mode [ 416.347311][T20229] : renamed from veth1_vlan (while UP) [ 416.772876][ T148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 416.907963][T20264] x9: renamed from bridge_slave_0 (while UP) [ 417.551863][T20292] team0: Port device team_slave_0 removed [ 417.596777][T20297] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 417.616698][T20297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.903490][T20311] syzkaller0: entered promiscuous mode [ 417.921510][T20311] syzkaller0: entered allmulticast mode [ 417.979267][T20311] netlink: 'syz.1.3937': attribute type 1 has an invalid length. [ 418.334097][T20334] netlink: 'syz.1.3944': attribute type 1 has an invalid length. [ 418.365258][T20338] netlink: 'syz.1.3944': attribute type 1 has an invalid length. [ 418.383101][T20334] netlink: 'syz.1.3944': attribute type 4 has an invalid length. [ 418.393577][T20338] netlink: 'syz.1.3944': attribute type 4 has an invalid length. [ 418.401677][T20334] __nla_validate_parse: 12 callbacks suppressed [ 418.401690][T20334] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.3944'. [ 418.420629][T20338] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.3944'. [ 418.621081][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 418.640539][T20346] netlink: 'syz.0.3949': attribute type 6 has an invalid length. [ 418.651100][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3949'. [ 418.673813][T20356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.714823][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3953'. [ 418.716290][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 418.749594][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.770453][T20346] netlink: 'syz.0.3949': attribute type 6 has an invalid length. [ 418.794317][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.803536][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3949'. [ 418.830086][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.867175][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.914943][T20368] veth1_to_bond: entered allmulticast mode [ 419.010142][T20375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3956'. [ 419.056513][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 419.110422][T20386] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 419.339067][T20368] veth1_to_bond: left allmulticast mode [ 419.345030][T20380] syz_tun: entered allmulticast mode [ 419.427085][T20397] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 419.465929][T20397] bond5 (unregistering): Released all slaves [ 419.650063][T20409] netlink: 'syz.2.3964': attribute type 1 has an invalid length. [ 419.711884][T20409] 8021q: adding VLAN 0 to HW filter on device bond4 [ 419.867160][T20412] bond4: (slave geneve2): making interface the new active one [ 419.876190][T20412] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 419.888865][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.919257][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.985070][T20438] FAULT_INJECTION: forcing a failure. [ 419.985070][T20438] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 419.999011][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.020392][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.029813][T20438] CPU: 0 UID: 0 PID: 20438 Comm: syz.2.3972 Not tainted syzkaller #0 PREEMPT(full) [ 420.029836][T20438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.029854][T20438] Call Trace: [ 420.029861][T20438] [ 420.029869][T20438] dump_stack_lvl+0xe8/0x150 [ 420.029901][T20438] should_fail_ex+0x412/0x560 [ 420.029932][T20438] _copy_to_user+0x31/0xb0 [ 420.029953][T20438] simple_read_from_buffer+0xe1/0x170 [ 420.029982][T20438] proc_fail_nth_read+0x1bb/0x230 [ 420.030010][T20438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.030035][T20438] ? rw_verify_area+0x2a6/0x4d0 [ 420.030059][T20438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.030084][T20438] vfs_read+0x20c/0xa70 [ 420.030114][T20438] ? __pfx___mutex_lock+0x10/0x10 [ 420.030147][T20438] ? __pfx_vfs_read+0x10/0x10 [ 420.030174][T20438] ? __fget_files+0x2a/0x420 [ 420.030199][T20438] ? __fget_files+0x3a0/0x420 [ 420.030219][T20438] ? __fget_files+0x2a/0x420 [ 420.030250][T20438] ksys_read+0x150/0x270 [ 420.030276][T20438] ? __pfx_ksys_read+0x10/0x10 [ 420.030309][T20438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.030330][T20438] do_syscall_64+0x15f/0xf80 [ 420.030352][T20438] ? trace_irq_disable+0x3b/0x140 [ 420.030371][T20438] ? clear_bhb_loop+0x40/0x90 [ 420.030393][T20438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.030416][T20438] RIP: 0033:0x7f28a8d5d04e [ 420.030437][T20438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.030452][T20438] RSP: 002b:00007f28a9cbcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.030477][T20438] RAX: ffffffffffffffda RBX: 00007f28a9cbd6c0 RCX: 00007f28a8d5d04e [ 420.030490][T20438] RDX: 000000000000000f RSI: 00007f28a9cbd0a0 RDI: 0000000000000006 [ 420.030502][T20438] RBP: 00007f28a9cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 420.030513][T20438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.030524][T20438] R13: 00007f28a9016038 R14: 00007f28a9015fa0 R15: 00007ffd4fb5c718 [ 420.030556][T20438] [ 420.258599][T20441] netlink: 'syz.3.3973': attribute type 8 has an invalid length. [ 420.326486][T20449] veth0: entered promiscuous mode [ 420.351438][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3976'. [ 420.787374][T20477] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 421.065143][T20495] netlink: 'syz.4.3991': attribute type 1 has an invalid length. [ 421.188731][T20501] netlink: ct family unspecified [ 421.604909][ T62] tipc: Subscription rejected, illegal request [ 421.740559][T20536] block nbd7: Unsupported socket: should be TCP or UNIX. [ 421.800085][T20541] netlink: 'syz.2.4006': attribute type 2 has an invalid length. [ 421.825259][T20536] syzkaller1: entered promiscuous mode [ 421.842055][T20536] syzkaller1: entered allmulticast mode [ 421.941046][T20549] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 422.036714][ T2065] block nbd1: Possible stuck request ffff888027685080: control (read@0,1024B). Runtime 330 seconds [ 422.057157][ T2065] block nbd1: Possible stuck request ffff888027685240: control (read@1024,1024B). Runtime 330 seconds [ 422.068334][ T2065] block nbd1: Possible stuck request ffff888027685400: control (read@2048,1024B). Runtime 330 seconds [ 422.079643][ T2065] block nbd1: Possible stuck request ffff8880276855c0: control (read@3072,1024B). Runtime 330 seconds [ 422.229902][T20571] gretap1: entered promiscuous mode [ 422.241996][T20571] batman_adv: batadv0: Adding interface: gretap1 [ 422.257568][T20571] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 422.280396][T20571] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 422.671938][T20594] netlink: 'syz.0.4024': attribute type 1 has an invalid length. [ 422.810527][T20611] SET target dimension over the limit! [ 423.245794][T20634] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 423.305482][T20637] netlink: 'syz.3.4038': attribute type 1 has an invalid length. [ 423.411083][T20641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.485732][T20645] : entered promiscuous mode [ 423.698967][T20662] __nla_validate_parse: 80 callbacks suppressed [ 423.698985][T20662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'. [ 423.720465][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4049'. [ 423.738306][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4049'. [ 423.748975][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4050'. [ 423.901424][T20670] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4052'. [ 423.946007][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4051'. [ 424.328279][T20677] infiniband syz1: set down [ 424.333170][T20677] infiniband syz1: added bond_slave_1 [ 424.384181][T20699] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4062'. [ 424.393741][T20699] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4062'. [ 424.453533][T20677] RDS/IB: syz1: added [ 424.458891][T20677] smc: adding ib device syz1 with port count 1 [ 424.466285][T20677] smc: ib device syz1 port 1 has no pnetid [ 424.821775][T20714] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 424.866010][T20716] validate_nla: 2 callbacks suppressed [ 424.866028][T20716] netlink: 'syz.3.4066': attribute type 1 has an invalid length. [ 425.388060][T20744] xt_hashlimit: size too large, truncated to 1048576 [ 425.615193][T20750] netlink: 'syz.3.4079': attribute type 4 has an invalid length. [ 425.807629][T20752] bond5 (unregistering): Released all slaves [ 425.941516][T20757] ieee802154 phy0 wpan0: encryption failed: -22 [ 426.236729][T20770] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4087'. [ 426.261942][T20768] bridge0: port 3(team0) entered disabled state [ 426.271323][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'. [ 426.306618][T20768] bridge0: port 1(1x9) entered disabled state [ 426.320286][T20768] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.357100][T20775] netlink: 'syz.0.4090': attribute type 1 has an invalid length. [ 426.482928][T20775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.632565][T20781] bond2: (slave veth1): Enslaving as an active interface with a down link [ 426.672048][T20775] geneve2: entered promiscuous mode [ 426.677527][T20775] geneve2: entered allmulticast mode [ 426.689854][ T1110] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 426.726802][ T1110] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 426.797852][T20781] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 426.817527][T20781] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 426.870279][ T1110] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 426.890667][ T1110] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 427.317990][T20809] netlink: 'syz.2.4100': attribute type 32 has an invalid length. [ 427.414570][T20809] bond5: Setting coupled_control to off (0) [ 427.446031][T20822] gretap2: entered promiscuous mode [ 427.451379][T20822] gretap2: entered allmulticast mode [ 427.604830][T20826] syzkaller1: entered promiscuous mode [ 427.625055][T20826] syzkaller1: entered allmulticast mode [ 428.004913][T20841] bond0: left allmulticast mode [ 428.225392][T20850] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 428.369249][T20858] openvswitch: netlink: Message has 5 unknown bytes. [ 428.426623][T20863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.772920][T20881] __nla_validate_parse: 13 callbacks suppressed [ 428.772939][T20881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4124'. [ 429.180944][T20898] netlink: 'syz.0.4129': attribute type 1 has an invalid length. [ 429.212608][T20898] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4129'. [ 429.539049][T20903] netlink: 'syz.3.4130': attribute type 1 has an invalid length. [ 429.607457][T20903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.621671][T20903] bond1: (slave bond2): making interface the new active one [ 429.631252][T20903] bond1: (slave bond2): Enslaving as an active interface with an up link [ 429.661423][T20903] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 429.676949][T20903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4130'. [ 429.690044][T20903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.837362][T20910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4132'. [ 430.088351][T20917] can: request_module (can-proto-0) failed. [ 430.116613][T20921] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4135'. [ 430.135893][T20921] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4135'. [ 430.160550][T20921] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4135'. [ 430.217595][T20928] Cannot find add_set index 2 as target [ 430.430120][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4138'. [ 430.550661][T20944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4142'. [ 430.602087][T20944] netlink: 'syz.3.4142': attribute type 12 has an invalid length. [ 430.648553][T20944] xt_cgroup: invalid path, errno=-2 [ 430.776230][T20955] netlink: 'syz.3.4146': attribute type 2 has an invalid length. [ 430.864583][T20962] netlink: 'syz.4.4148': attribute type 1 has an invalid length. [ 430.910136][T20962] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.952244][T20962] bond3: (slave veth0_to_bond): Releasing active interface [ 430.972221][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4150'. [ 430.985804][T20962] veth0_to_bond: left promiscuous mode [ 430.991646][T20962] veth0_to_bond: left allmulticast mode [ 431.006159][T20962] bond5: (slave veth0_to_bond): making interface the new active one [ 431.018080][T20962] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 431.035321][T20969] bond5: entered promiscuous mode [ 431.048812][T20975] netlink: 'syz.2.4150': attribute type 2 has an invalid length. [ 431.053991][T20969] veth0_to_bond: entered promiscuous mode [ 431.087776][T20969] bond5: entered allmulticast mode [ 431.104830][T20977] netlink: 'syz.1.4151': attribute type 11 has an invalid length. [ 431.105730][T20969] veth0_to_bond: entered allmulticast mode [ 431.253093][T20982] openvswitch: netlink: IP tunnel dst address not specified [ 431.376368][T20996] netlink: 'syz.4.4154': attribute type 1 has an invalid length. [ 431.669524][T20996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 431.696086][T21011] chnl_net:caif_netlink_parms(): no params data found [ 431.950771][T21037] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 432.128494][T21042] x_tables: duplicate underflow at hook 1 [ 432.634724][T21072] netlink: 'syz.2.4176': attribute type 75 has an invalid length. [ 432.940105][T21090] netlink: 'syz.4.4180': attribute type 1 has an invalid length. [ 433.099542][T21096] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 433.128471][T21096] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 433.150643][T21096] bond7: (slave ip6gre1): making interface the new active one [ 433.198519][T21096] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 433.392805][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 433.449907][T21119] netlink: 'syz.0.4188': attribute type 8 has an invalid length. [ 433.477330][T21117] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode [ 433.508236][T21117] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode [ 433.754160][T21131] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.919898][T21148] __nla_validate_parse: 19 callbacks suppressed [ 433.919916][T21148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4198'. [ 433.947398][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4197'. [ 433.962582][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4197'. [ 434.055593][T21148] bond6: (slave bond_slave_1): Device is not our slave [ 434.063771][T21148] bond6: option active_slave: invalid value (bond_slave_1) [ 434.080192][T21148] bond6 (unregistering): Released all slaves [ 434.118092][T21154] veth0: entered promiscuous mode [ 434.125903][T21153] veth0: left promiscuous mode [ 434.225203][T21162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4203'. [ 434.234922][T21162] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4203'. [ 434.244637][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'. [ 434.420861][T21173] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 434.438506][T21173] netlink: 'syz.4.4207': attribute type 4 has an invalid length. [ 434.447769][T21173] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4207'. [ 434.457365][T21177] netlink: 'syz.3.4208': attribute type 11 has an invalid length. [ 434.471767][T21173] .`: renamed from bond0 (while UP) [ 434.489921][T21174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4207'. [ 434.551677][T21177] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4208'. [ 435.092140][T21209] syzkaller0: entered promiscuous mode [ 435.105985][T21209] syzkaller0: entered allmulticast mode [ 435.120990][T21211] netlink: 'syz.4.4217': attribute type 3 has an invalid length. [ 435.142520][T21211] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4217'. [ 435.359063][T21222] syz_tun: entered allmulticast mode [ 435.515920][T21228] Cannot find set identified by id 3 to match [ 435.623415][T21236] netlink: 'syz.0.4227': attribute type 1 has an invalid length. [ 435.663395][T21238] netlink: 'syz.4.4228': attribute type 1 has an invalid length. [ 435.743775][T21236] bond5: entered promiscuous mode [ 435.759880][T21236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.890197][T21236] bond5: (slave bridge2): making interface the new active one [ 435.905639][T21236] bridge2: entered promiscuous mode [ 435.914438][T21236] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 436.151975][T21279] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 436.220569][T21288] x_tables: duplicate underflow at hook 3 [ 436.237111][T21289] x_tables: duplicate underflow at hook 3 [ 436.752105][T21325] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 436.875277][T21330] netlink: 'syz.1.4257': attribute type 1 has an invalid length. [ 436.913464][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 437.104254][T21340] netlink: 'syz.0.4261': attribute type 2 has an invalid length. [ 437.783072][T21390] netlink: 'syz.0.4275': attribute type 1 has an invalid length. [ 438.330395][T21425] netlink: 'syz.4.4286': attribute type 1 has an invalid length. [ 438.407173][T21432] netlink: 'syz.3.4288': attribute type 1 has an invalid length. [ 438.424398][T21432] netlink: 'syz.3.4288': attribute type 4 has an invalid length. [ 438.533065][T21425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.841256][T21452] nbd: must specify at least one socket [ 438.990204][T21462] openvswitch: netlink: IP tunnel dst address not specified [ 439.160400][T21474] __nla_validate_parse: 15 callbacks suppressed [ 439.160420][T21474] netlink: 209872 bytes leftover after parsing attributes in process `syz.2.4300'. [ 439.296447][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 439.339778][T21483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4301'. [ 439.358780][T21485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.451184][T21496] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4305'. [ 439.481231][T21496] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4305'. [ 439.496521][T21499] netlink: 'syz.2.4307': attribute type 1 has an invalid length. [ 439.697691][T21499] 8021q: adding VLAN 0 to HW filter on device bond6 [ 439.706862][T21515] netlink: 'syz.2.4307': attribute type 58 has an invalid length. [ 439.749453][T21515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4307'. [ 439.799819][T21508] vlan2: entered promiscuous mode [ 439.818209][T21508] bond6: entered promiscuous mode [ 439.835855][T21508] vlan2: entered allmulticast mode [ 439.842717][T21508] bond6: entered allmulticast mode [ 439.877935][T21512] bond6: (slave bridge2): making interface the new active one [ 439.888493][T21512] bridge2: entered promiscuous mode [ 439.899032][T21525] ipt_REJECT: TCP_RESET invalid for non-tcp [ 439.907047][T21512] bridge2: entered allmulticast mode [ 439.916197][T21512] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 439.959111][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.289745][T21547] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 440.307764][T21547] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 440.319082][T21551] IPVS: length: 80 != 8 [ 440.431403][ T29] audit: type=1804 audit(1776958549.084:7): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4323" name="/newroot/188/cgroup.controllers" dev="tmpfs" ino=973 res=1 errno=0 [ 440.479299][T21558] xt_hashlimit: size too large, truncated to 1048576 [ 440.499484][ T29] audit: type=1800 audit(1776958549.084:8): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4323" name="cgroup.controllers" dev="tmpfs" ino=973 res=0 errno=0 [ 440.566301][T21565] openvswitch: netlink: Duplicate or invalid key (type 0). [ 440.580570][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4326'. [ 440.589903][T21565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.916856][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4333'. [ 441.061775][T21584] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 441.077357][T21584] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 441.098773][T21589] netlink: 'syz.0.4336': attribute type 12 has an invalid length. [ 441.277247][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'. [ 441.310349][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'. [ 441.335550][T21607] netlink: 'syz.4.4342': attribute type 1 has an invalid length. [ 441.930876][T21656] netlink: 'syz.2.4358': attribute type 1 has an invalid length. [ 441.956573][T21656] netlink: 'syz.2.4358': attribute type 30 has an invalid length. [ 442.087804][T21660] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 442.126082][T21663] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 442.365310][T21683] tipc: Started in network mode [ 442.370384][T21683] tipc: Node identity , cluster identity 4711 [ 442.378978][T21683] tipc: Failed to set node id, please configure manually [ 442.388041][T21683] tipc: Enabling of bearer rejected, failed to enable media [ 442.540605][T21691] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 442.576819][T21695] netlink: 'syz.3.4370': attribute type 1 has an invalid length. [ 443.108316][T21716] syzkaller0: entered promiscuous mode [ 443.128872][T21716] syzkaller0: entered allmulticast mode [ 443.155413][ T116] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 445.227776][T21741] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 445.514779][T21753] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 445.548590][T21764] __nla_validate_parse: 6 callbacks suppressed [ 445.548609][T21764] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4387'. [ 445.681998][T21769] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4388'. [ 445.941114][T21789] syz_tun: entered allmulticast mode [ 446.013745][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4394'. [ 446.129931][T21797] team0: Device gtp0 is up. Set it down before adding it as a team port [ 446.173721][T21803] bond1: (slave 26aD): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 446.235888][T21803] bond1: (slave 26aD): Enslaving as an active interface with an up link [ 446.267997][T21803] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 446.292726][T21808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4401'. [ 446.395626][T21819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4404'. [ 446.501741][T21826] netlink: 'syz.1.4406': attribute type 7 has an invalid length. [ 446.581318][T21826] netlink: 'syz.1.4406': attribute type 7 has an invalid length. [ 446.733221][T21840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4409'. [ 446.750656][T21847] syzkaller1: entered promiscuous mode [ 446.756806][T21847] syzkaller1: entered allmulticast mode [ 446.844440][T21853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4409'. [ 447.152948][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 447.585681][T21900] bond4: Removing last arp target with arp_interval on [ 447.802346][ T1110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 447.867249][T21921] netlink: 'syz.1.4436': attribute type 1 has an invalid length. [ 448.054328][T21921] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.285994][T21941] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4441'. [ 448.318702][T21944] netlink: 'syz.3.4442': attribute type 83 has an invalid length. [ 448.414549][T21943] netlink: 'syz.0.4440': attribute type 3 has an invalid length. [ 448.425258][T21943] netlink: 'syz.0.4440': attribute type 1 has an invalid length. [ 448.444115][T21943] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4440'. [ 448.465867][T21950] siw: device registration error -23 [ 448.482609][T21943] NCSI netlink: No device for ifindex 813332851 [ 448.656785][T21954] xt_bpf: check failed: parse error [ 449.121087][T21980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4453'. [ 449.348704][T21989] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 449.376240][T21989] bond6: (slave lo): Enslaving as an active interface with an up link [ 449.421396][T21989] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 449.661159][T22002] tipc: Enabled bearer , priority 0 [ 449.974834][T22024] openvswitch: netlink: Flow actions attr not present in new flow. [ 450.049249][T22022] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 450.060133][T22028] netlink: 'syz.4.4469': attribute type 1 has an invalid length. [ 450.128557][T22028] 8021q: adding VLAN 0 to HW filter on device bond10 [ 450.231030][T22034] bond10: (slave ip6erspan0): making interface the new active one [ 450.248414][T22034] bond10: (slave ip6erspan0): Enslaving as an active interface with an up link [ 450.808620][T22068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.842964][T22074] __nla_validate_parse: 4 callbacks suppressed [ 450.842985][T22074] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4484'. [ 450.847133][T22067] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4483'. [ 451.124637][T22086] 8021q: adding VLAN 0 to HW filter on device bond7 [ 451.140329][T22092] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4491'. [ 451.241171][T22099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 451.333195][T22104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4495'. [ 451.348066][T22108] netlink: 'syz.2.4493': attribute type 1 has an invalid length. [ 451.646524][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4499'. [ 451.735632][T22136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4502'. [ 451.773221][T22139] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4500'. [ 451.948799][T22154] netlink: 'syz.3.4505': attribute type 1 has an invalid length. [ 451.967996][T22135] syzkaller0: entered promiscuous mode [ 451.973896][T22135] syzkaller0: entered allmulticast mode [ 451.985966][T22154] netlink: 'syz.3.4505': attribute type 2 has an invalid length. [ 452.117699][ T2065] block nbd1: Possible stuck request ffff888027685080: control (read@0,1024B). Runtime 360 seconds [ 452.128724][ T2065] block nbd1: Possible stuck request ffff888027685240: control (read@1024,1024B). Runtime 360 seconds [ 452.136274][T22159] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 452.139866][ T2065] block nbd1: Possible stuck request ffff888027685400: control (read@2048,1024B). Runtime 360 seconds [ 452.158785][ T2065] block nbd1: Possible stuck request ffff8880276855c0: control (read@3072,1024B). Runtime 360 seconds [ 454.336947][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4512'. [ 454.567152][T22196] netlink: 'syz.0.4518': attribute type 4 has an invalid length. [ 454.576018][T22196] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4518'. [ 454.591062][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c [ 454.598495][T22196] .`: renamed from bond0 (while UP) [ 454.985791][T22227] ipvlan3: entered promiscuous mode [ 455.158339][T22246] netlink: 'syz.2.4528': attribute type 29 has an invalid length. [ 455.207359][T22248] wireguard0: entered promiscuous mode [ 455.223105][T22248] wireguard0: entered allmulticast mode [ 455.292535][T22186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.065269][T22303] __nla_validate_parse: 7 callbacks suppressed [ 456.065287][T22303] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4547'. [ 456.100387][T22307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4549'. [ 456.280301][T22313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4552'. [ 456.747087][T22342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4563'. [ 456.955389][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4568'. [ 457.024106][T22361] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4571'. [ 457.056167][T22365] openvswitch: netlink: IP tunnel dst address not specified [ 457.144033][T22372] xt_l2tp: missing protocol rule (udp|l2tpip) [ 457.174003][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4573'. [ 457.222342][T22372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4573'. [ 457.245006][T22376] netlink: 'syz.3.4575': attribute type 3 has an invalid length. [ 457.397458][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 457.461588][T22394] bridge0: port 1(ipvlan0) entered blocking state [ 457.475906][T22394] bridge0: port 1(ipvlan0) entered disabled state [ 457.483454][T22394] ipvlan0: entered allmulticast mode [ 457.489174][T22394] bridge0: entered allmulticast mode [ 457.506000][T22394] ipvlan0: left allmulticast mode [ 457.511238][T22394] bridge0: left allmulticast mode [ 457.560238][T22388] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 457.777790][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4585'. [ 457.802091][T22410] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 457.934936][T22416] bond0: option xmit_hash_policy: invalid value (64) [ 457.973746][T22416] bond0 (unregistering): Released all slaves [ 458.008005][T22426] syzkaller0: entered promiscuous mode [ 458.029483][T22426] syzkaller0: entered allmulticast mode [ 458.079576][T22429] tipc: Enabling of bearer rejected, already enabled [ 458.098271][T22426] tipc: Enabling of bearer rejected, already enabled [ 458.340457][T22450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4593'. [ 458.353722][T22445] xt_hashlimit: size too large, truncated to 1048576 [ 458.607788][T22465] netlink: 'syz.4.4597': attribute type 1 has an invalid length. [ 458.726840][T22465] 8021q: adding VLAN 0 to HW filter on device bond12 [ 459.098005][T22493] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.228139][T22493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.241616][T22493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.332800][T22493] hsr0: left allmulticast mode [ 459.337806][T22493] hsr_slave_0: left allmulticast mode [ 459.345544][T22493] hsr_slave_1: left allmulticast mode [ 459.372603][T22498] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 459.515945][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.535158][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 459.544325][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.554400][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 459.573340][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.598627][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 459.621465][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.631742][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 460.021148][T22542] netlink: 'syz.1.4618': attribute type 12 has an invalid length. [ 460.078909][T22542] bond8: option primary_reselect: invalid value (255) [ 460.089334][T22542] bond8 (unregistering): Released all slaves [ 460.490611][T22572] netlink: 'syz.0.4627': attribute type 5 has an invalid length. [ 460.503249][T22573] netlink: 'syz.0.4627': attribute type 5 has an invalid length. [ 461.385619][T22595] __nla_validate_parse: 11 callbacks suppressed [ 461.385635][T22595] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4634'. [ 461.414022][T22597] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4634'. [ 461.481249][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4636'. [ 461.501163][T22606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4636'. [ 461.642349][T22613] sock: sock_timestamping_bind_phc: sock not bind to device [ 461.908669][T22628] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.4645'. [ 461.983480][T22638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4648'. [ 462.070086][T22645] netlink: 'syz.3.4650': attribute type 10 has an invalid length. [ 462.101109][T22645] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.122345][T22645] bridge_slave_1: left allmulticast mode [ 462.135681][T22645] bridge_slave_1: left promiscuous mode [ 462.143925][T22645] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.151855][T22652] netlink: 'syz.2.4651': attribute type 1 has an invalid length. [ 462.165663][T22645] bridge_slave_1: entered promiscuous mode [ 462.173067][T22645] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 462.177048][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4652'. [ 462.196982][T22643] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4649'. [ 462.235970][T22652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.252251][T22652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4651'. [ 462.310330][T22652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4651'. [ 462.466061][ T29] audit: type=1107 audit(1776958571.124:9): pid=22668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='8YCKDxB"y-3K_S.m'C>R5#m2|@k)ߪ}!'2C4؎' [ 462.535372][ T29] audit: type=1107 audit(1776958571.124:10): pid=22668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='PaoM"1v0_zK .Z [ 462.535372][ T29] ҙW^-e]G^VPvѸ%^W) [ 462.535372][ T29] U8.tr~Lj3'c()Ԏ&b, b1 a{}f`Ɵ[7fSoN dϒ̰[uB!18n;eʯ*`ޜ%𹹬qEaC&\?0G7+o%(%2@' [ 462.624599][T22681] netlink: 'syz.3.4660': attribute type 1 has an invalid length. [ 462.728468][T22676] syzkaller0: entered promiscuous mode [ 462.734516][T22676] syzkaller0: entered allmulticast mode [ 463.211618][T22718] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 463.224755][T22718] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 463.329070][T22723] netlink: 'syz.1.4672': attribute type 1 has an invalid length. [ 464.237098][T22761] IPVS: length: 8 != 1152 [ 465.839521][T22769] aD: entered promiscuous mode [ 465.857177][T22769] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 466.480285][T22824] x_tables: duplicate underflow at hook 2 [ 466.552329][T22833] __nla_validate_parse: 3 callbacks suppressed [ 466.552346][T22833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4704'. [ 466.638280][T22836] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4705'. [ 466.658343][T22836] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 466.790333][T22842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4707'. [ 466.859243][T22846] sit2: entered promiscuous mode [ 466.877002][T22846] sit2: entered allmulticast mode [ 467.032253][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4713'. [ 467.098912][T22865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4714'. [ 467.430224][T22883] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4720'. [ 467.632536][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 467.750216][T22915] netlink: 'syz.1.4730': attribute type 10 has an invalid length. [ 467.758400][T22915] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 467.779852][T22917] IPv6: NLM_F_CREATE should be specified when creating new route [ 467.807264][T22919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4731'. [ 470.278942][T22882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.288181][T22907] netlink: 'syz.3.4728': attribute type 1 has an invalid length. [ 470.298723][T22907] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4728'. [ 470.308106][T22907] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4728'. [ 470.317802][T22907] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4728'. [ 470.331117][T22908] netlink: 'syz.3.4728': attribute type 1 has an invalid length. [ 470.669248][T22939] syzkaller0: entered promiscuous mode [ 470.684395][T22939] syzkaller0: entered allmulticast mode [ 470.828910][T22957] netlink: 'syz.3.4739': attribute type 1 has an invalid length. [ 470.988848][T22970] netlink: 'syz.4.4744': attribute type 1 has an invalid length. [ 471.046824][T22971] netlink: 'syz.1.4746': attribute type 61 has an invalid length. [ 471.077626][T22982] SET target dimension over the limit! [ 471.710130][T23016] netlink: 'syz.0.4757': attribute type 11 has an invalid length. [ 471.726899][T23013] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 471.730919][T23016] __nla_validate_parse: 8 callbacks suppressed [ 471.730933][T23016] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4757'. [ 471.742862][T23013] bond0: (slave lo): Error: Device can not be enslaved while up [ 471.750244][T23016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4757'. [ 471.773437][T23020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4758'. [ 471.775990][T23019] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4759'. [ 472.066758][T23038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4762'. [ 474.691687][T23016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.882887][T23048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4764'. [ 474.941094][T23052] ip6gre1: entered allmulticast mode [ 474.999965][T23058] netlink: 'syz.4.4768': attribute type 178 has an invalid length. [ 475.015002][T23059] netlink: 'syz.4.4768': attribute type 178 has an invalid length. [ 475.077801][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4769'. [ 475.155005][ T62] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 475.184382][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4771'. [ 475.237293][T23074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4771'. [ 475.257192][T23073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4773'. [ 475.830532][ T148] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.842131][ T148] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.851680][ T148] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.881243][ T148] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.250748][T23129] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 478.568304][T23091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.778080][T23140] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.786325][T23140] netlink: 'syz.3.4790': attribute type 1 has an invalid length. [ 478.828086][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 478.843872][T23135] bond0 (unregistering): Released all slaves [ 479.003090][T23156] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode [ 479.056897][T23156] __nla_validate_parse: 5 callbacks suppressed [ 479.056914][T23156] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4797'. [ 479.094461][T23156] openvswitch: netlink: Missing key (keys=40, expected=100) [ 479.106147][T23159] netlink: 'syz.1.4798': attribute type 1 has an invalid length. [ 479.528041][T23195] bond13: entered promiscuous mode [ 479.533700][T23195] bond13: entered allmulticast mode [ 479.539361][T23195] 8021q: adding VLAN 0 to HW filter on device bond13 [ 479.578914][T23209] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 479.594444][T23204] vcan0: entered promiscuous mode [ 479.613539][T23204] vcan0: entered allmulticast mode [ 479.781077][T23220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4814'. [ 479.897947][T23223] netlink: 'syz.1.4815': attribute type 1 has an invalid length. [ 480.025462][T23223] bond10: (slave geneve3): making interface the new active one [ 480.040523][T23223] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 480.053800][ T62] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 480.089806][ T62] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 480.116860][ T62] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 480.133962][ T62] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 480.168924][T23235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4815'. [ 480.199127][T23235] 8021q: adding VLAN 0 to HW filter on device bond10 [ 480.205680][T23241] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4820'. [ 480.225032][T23241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4820'. [ 480.370560][T23247] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 480.390234][T23250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4823'. [ 480.720400][T23271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4826'. [ 480.908499][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4829'. [ 480.957501][T23286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4829'. [ 481.157355][T23306] xt_hashlimit: size too large, truncated to 1048576 [ 481.187174][T23307] x_tables: duplicate underflow at hook 3 [ 481.408539][T23324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4837'. [ 481.537719][T23329] bridge_slave_0: left allmulticast mode [ 481.546851][T23329] bridge_slave_0: left promiscuous mode [ 481.553616][T23329] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.565920][T23329] bond0: (slave bridge_slave_1): Releasing backup interface [ 481.576292][T23329] bond0: (slave bond_slave_0): Releasing backup interface [ 481.587000][T23329] bond0: (slave bond_slave_1): Releasing backup interface [ 481.599878][T23331] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 481.600562][T23329] team0: Port device team_slave_1 removed [ 481.628020][T23329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.645736][T23329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.664338][T23329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 481.701069][T23330] netlink: 'syz.2.4839': attribute type 15 has an invalid length. [ 481.757292][T23327] syzkaller0: entered promiscuous mode [ 481.763155][T23327] syzkaller0: entered allmulticast mode [ 481.781089][T23330] netlink: 'syz.2.4839': attribute type 15 has an invalid length. [ 481.781537][ T148] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.807413][ T148] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.818267][ T148] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.821670][T23339] netlink: 'syz.3.4840': attribute type 4 has an invalid length. [ 481.837861][ T148] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.209852][ T2065] block nbd1: Possible stuck request ffff888027685080: control (read@0,1024B). Runtime 390 seconds [ 482.221455][ T2065] block nbd1: Possible stuck request ffff888027685240: control (read@1024,1024B). Runtime 390 seconds [ 482.233008][ T2065] block nbd1: Possible stuck request ffff888027685400: control (read@2048,1024B). Runtime 390 seconds [ 482.244662][ T2065] block nbd1: Possible stuck request ffff8880276855c0: control (read@3072,1024B). Runtime 390 seconds [ 482.752827][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 483.911473][T23339] .`: renamed from bond0 (while UP) [ 484.132104][T23355] tipc: Enabling of bearer rejected, failed to enable media [ 484.362249][T23367] netlink: 'syz.0.4851': attribute type 12 has an invalid length. [ 484.712052][T23380] tipc: Failed to remove unknown binding: 66,0,0/0:423103999/423104000 [ 484.754321][T23380] tipc: Failed to remove unknown binding: 66,0,0/0:423103999/423104000 [ 484.784916][T23380] netlink: 'syz.0.4855': attribute type 11 has an invalid length. [ 484.788141][T23385] __nla_validate_parse: 6 callbacks suppressed [ 484.788173][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4857'. [ 484.802547][T23380] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4855'. [ 484.835251][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 485.185649][T23405] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 485.201724][T23400] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.208990][T23400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.216567][T23400] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.223747][T23400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.240079][T23400] 8021q: adding VLAN 0 to HW filter on device .` [ 485.249336][T23400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.356739][T23408] netlink: 'syz.2.4863': attribute type 1 has an invalid length. [ 485.380594][T23408] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4863'. [ 485.401335][T23408] netlink: 'syz.2.4863': attribute type 1 has an invalid length. [ 485.410357][T23408] netlink: 'syz.2.4863': attribute type 8 has an invalid length. [ 485.447108][T23408] netlink: 606 bytes leftover after parsing attributes in process `syz.2.4863'. [ 485.471258][T23408] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4863'. [ 485.697511][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4869'. [ 485.715626][T23411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4854'. [ 485.733416][T23413] netlink: 'syz.0.4866': attribute type 4 has an invalid length. [ 485.786010][T23430] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4871'. [ 485.800398][T23426] syz.0.4866 uses old SIOCAX25GETINFO [ 485.825701][T23430] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 485.840533][T23432] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4870'. [ 485.875477][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.038540][T23437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4872'. [ 486.048912][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.058073][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.068366][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.077882][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.087262][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.097929][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.077614][T23478] x_tables: duplicate underflow at hook 1 [ 487.155365][ T10] net_ratelimit: 3 callbacks suppressed [ 487.155381][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.442335][T23493] syzkaller1: entered promiscuous mode [ 487.470530][T23493] syzkaller1: entered allmulticast mode [ 487.520877][T23492] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 487.808141][T23513] netlink: 'syz.3.4895': attribute type 1 has an invalid length. [ 487.832882][T23514] IPVS: length: 239 != 24 [ 487.893955][T23519] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 488.195675][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.127475][T23537] xt_hashlimit: size too large, truncated to 1048576 [ 489.234817][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.242997][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.515553][T23553] openvswitch: netlink: Flow actions attr not present in new flow. [ 489.748239][T23556] netlink: 'syz.4.4910': attribute type 1 has an invalid length. [ 490.275102][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.347448][T23582] __nla_validate_parse: 8 callbacks suppressed [ 490.347467][T23582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4917'. [ 490.507464][T23588] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 491.315888][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.472164][T23651] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4930'. [ 491.796154][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.819204][ T598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.828571][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.843020][T23656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4933'. [ 491.889508][T23656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4933'. [ 491.927332][T23661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.991911][T23663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4933'. [ 492.030684][T23663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4933'. [ 492.066714][T23665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4933'. [ 492.360032][ T5827] net_ratelimit: 3 callbacks suppressed [ 492.360050][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.389028][T23681] netlink: 'syz.0.4939': attribute type 1 has an invalid length. [ 492.431727][T23682] tipc: Started in network mode [ 492.440226][T23683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4939'. [ 492.448041][T23682] tipc: Node identity 72f8aedccaf9, cluster identity 4711 [ 492.479580][T23682] tipc: Enabled bearer , priority 0 [ 492.507137][T23681] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 492.528406][T23678] +: renamed from syzkaller0 [ 492.569169][T23690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4941'. [ 492.579978][T23691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4941'. [ 492.590540][T23678] tipc: Disabling bearer [ 492.884602][T23706] netlink: 'syz.4.4944': attribute type 2 has an invalid length. [ 493.114475][T23718] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 493.258451][T23729] FAULT_INJECTION: forcing a failure. [ 493.258451][T23729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.312332][T23733] netlink: 'syz.2.4948': attribute type 21 has an invalid length. [ 493.329959][T23729] CPU: 1 UID: 0 PID: 23729 Comm: syz.4.4949 Not tainted syzkaller #0 PREEMPT(full) [ 493.329987][T23729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 493.329998][T23729] Call Trace: [ 493.330005][T23729] [ 493.330012][T23729] dump_stack_lvl+0xe8/0x150 [ 493.330045][T23729] should_fail_ex+0x412/0x560 [ 493.330076][T23729] _copy_from_user+0x2d/0xb0 [ 493.330096][T23729] ___sys_recvmsg+0x175/0x590 [ 493.330121][T23729] ? __pfx____sys_recvmsg+0x10/0x10 [ 493.330143][T23729] ? __fget_files+0x2a/0x420 [ 493.330182][T23729] ? __fget_files+0x3a0/0x420 [ 493.330214][T23729] do_recvmmsg+0x334/0x800 [ 493.330239][T23729] ? __pfx_do_recvmmsg+0x10/0x10 [ 493.330269][T23729] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 493.330310][T23729] __x64_sys_recvmmsg+0x198/0x250 [ 493.330332][T23729] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 493.330348][T23729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.330376][T23729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.330395][T23729] do_syscall_64+0x15f/0xf80 [ 493.330417][T23729] ? trace_irq_disable+0x3b/0x140 [ 493.330436][T23729] ? clear_bhb_loop+0x40/0x90 [ 493.330458][T23729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.330476][T23729] RIP: 0033:0x7fe663f9c819 [ 493.330493][T23729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.330508][T23729] RSP: 002b:00007fe664dc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 493.330526][T23729] RAX: ffffffffffffffda RBX: 00007fe664215fa0 RCX: 00007fe663f9c819 [ 493.330539][T23729] RDX: 0000000000000001 RSI: 0000200000004cc0 RDI: 0000000000000003 [ 493.330549][T23729] RBP: 00007fe664dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 493.330560][T23729] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 493.330569][T23729] R13: 00007fe664216038 R14: 00007fe664215fa0 R15: 00007ffd4bae6bd8 [ 493.330597][T23729] [ 493.987399][T23768] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 494.146315][T23772] netlink: 'syz.3.4959': attribute type 8 has an invalid length. [ 494.457517][T23791] FAULT_INJECTION: forcing a failure. [ 494.457517][T23791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.480570][T23791] CPU: 0 UID: 0 PID: 23791 Comm: syz.0.4966 Not tainted syzkaller #0 PREEMPT(full) [ 494.480595][T23791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.480606][T23791] Call Trace: [ 494.480613][T23791] [ 494.480620][T23791] dump_stack_lvl+0xe8/0x150 [ 494.480655][T23791] should_fail_ex+0x412/0x560 [ 494.480685][T23791] _copy_to_iter+0x1e4/0x17d0 [ 494.480707][T23791] ? lockdep_hardirqs_on+0x7a/0x110 [ 494.480730][T23791] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 494.480751][T23791] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 494.480771][T23791] ? __pfx__copy_to_iter+0x10/0x10 [ 494.480798][T23791] ? skb_recv_datagram+0x145/0x190 [ 494.480821][T23791] raw_recvmsg+0x1e1/0x5c0 [ 494.480845][T23791] ? __pfx_raw_recvmsg+0x10/0x10 [ 494.480864][T23791] ? __lock_acquire+0x6b5/0x2cf0 [ 494.480884][T23791] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.480909][T23791] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 494.480933][T23791] ? security_socket_recvmsg+0x7e/0x2c0 [ 494.480958][T23791] ? __pfx_raw_recvmsg+0x10/0x10 [ 494.480979][T23791] sock_recvmsg+0x172/0x1b0 [ 494.481002][T23791] ____sys_recvmsg+0x1e6/0x4a0 [ 494.481027][T23791] ? __pfx_____sys_recvmsg+0x10/0x10 [ 494.481065][T23791] ? import_iovec+0x73/0xa0 [ 494.481086][T23791] ___sys_recvmsg+0x215/0x590 [ 494.481108][T23791] ? __pfx____sys_recvmsg+0x10/0x10 [ 494.481130][T23791] ? __fget_files+0x2a/0x420 [ 494.481166][T23791] ? __fget_files+0x3a0/0x420 [ 494.481197][T23791] do_recvmmsg+0x334/0x800 [ 494.481221][T23791] ? __pfx_do_recvmmsg+0x10/0x10 [ 494.481249][T23791] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.481293][T23791] __x64_sys_recvmmsg+0x198/0x250 [ 494.481312][T23791] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 494.481337][T23791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.481354][T23791] do_syscall_64+0x15f/0xf80 [ 494.481377][T23791] ? clear_bhb_loop+0x40/0x90 [ 494.481397][T23791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.481414][T23791] RIP: 0033:0x7ff84ed9c819 [ 494.481431][T23791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.481445][T23791] RSP: 002b:00007ff84fc69028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 494.481464][T23791] RAX: ffffffffffffffda RBX: 00007ff84f015fa0 RCX: 00007ff84ed9c819 [ 494.481476][T23791] RDX: 0000000000000001 RSI: 0000200000004cc0 RDI: 0000000000000003 [ 494.481487][T23791] RBP: 00007ff84fc69090 R08: 0000000000000000 R09: 0000000000000000 [ 494.481497][T23791] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 494.481507][T23791] R13: 00007ff84f016038 R14: 00007ff84f015fa0 R15: 00007ffcde91a318 [ 494.481535][T23791] [ 494.760692][T23798] openvswitch: netlink: Multiple metadata blocks provided [ 495.265441][T23837] sock: sock_timestamping_bind_phc: sock not bind to device [ 495.379477][T23849] FAULT_INJECTION: forcing a failure. [ 495.379477][T23849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.384304][T23841] netlink: 'syz.1.4980': attribute type 7 has an invalid length. [ 495.392988][T23849] CPU: 1 UID: 0 PID: 23849 Comm: syz.0.4982 Not tainted syzkaller #0 PREEMPT(full) [ 495.393012][T23849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.393021][T23849] Call Trace: [ 495.393028][T23849] [ 495.393035][T23849] dump_stack_lvl+0xe8/0x150 [ 495.393064][T23849] should_fail_ex+0x412/0x560 [ 495.393093][T23849] _copy_to_user+0x31/0xb0 [ 495.393113][T23849] simple_read_from_buffer+0xe1/0x170 [ 495.393138][T23849] proc_fail_nth_read+0x1bb/0x230 [ 495.393161][T23849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.393185][T23849] ? rw_verify_area+0x2a6/0x4d0 [ 495.393208][T23849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.393233][T23849] vfs_read+0x20c/0xa70 [ 495.393261][T23849] ? __pfx___mutex_lock+0x10/0x10 [ 495.393284][T23849] ? __pfx_vfs_read+0x10/0x10 [ 495.393309][T23849] ? __fget_files+0x2a/0x420 [ 495.393334][T23849] ? __fget_files+0x3a0/0x420 [ 495.393354][T23849] ? __fget_files+0x2a/0x420 [ 495.393390][T23849] ksys_read+0x150/0x270 [ 495.393416][T23849] ? __pfx_ksys_read+0x10/0x10 [ 495.393449][T23849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.393468][T23849] do_syscall_64+0x15f/0xf80 [ 495.393488][T23849] ? trace_irq_disable+0x3b/0x140 [ 495.393507][T23849] ? clear_bhb_loop+0x40/0x90 [ 495.393529][T23849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.393546][T23849] RIP: 0033:0x7ff84ed5d04e [ 495.393563][T23849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 495.393579][T23849] RSP: 002b:00007ff84fc68fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 495.393597][T23849] RAX: ffffffffffffffda RBX: 00007ff84fc696c0 RCX: 00007ff84ed5d04e [ 495.393609][T23849] RDX: 000000000000000f RSI: 00007ff84fc690a0 RDI: 0000000000000004 [ 495.393620][T23849] RBP: 00007ff84fc69090 R08: 0000000000000000 R09: 0000000000000000 [ 495.393631][T23849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.393641][T23849] R13: 00007ff84f016038 R14: 00007ff84f015fa0 R15: 00007ffcde91a318 [ 495.393671][T23849] [ 495.580639][T23857] __nla_validate_parse: 8 callbacks suppressed [ 495.580656][T23857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4983'. [ 495.839004][T23863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4986'. [ 495.984755][T23865] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4985'. [ 496.350589][T23893] netem: unknown loss type 0 [ 496.376821][T23893] netem: change failed [ 496.389177][T23893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'. [ 496.433480][T23888] netlink: 'syz.4.4992': attribute type 1 has an invalid length. [ 496.516205][T23888] bond14: entered promiscuous mode [ 496.523848][T23888] 8021q: adding VLAN 0 to HW filter on device bond14 [ 496.537590][T23906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4998'. [ 496.595092][T23887] 8021q: adding VLAN 0 to HW filter on device bond14 [ 496.602286][T23887] bond14: (slave vti0): The slave device specified does not support setting the MAC address [ 496.616166][T23887] bond14: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 496.654012][T23887] bond14: (slave vti0): making interface the new active one [ 496.661580][T23887] vti0: entered promiscuous mode [ 496.669050][T23887] bond14: (slave vti0): Enslaving as an active interface with an up link [ 496.684973][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4999'. [ 496.819756][T23912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5001'. [ 496.897362][T23921] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.919075][T23921] bond0: (slave lo): Enslaving as an active interface with an up link [ 496.930039][T23921] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 496.978300][T23930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5005'. [ 496.987748][T23930] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 497.008936][T23922] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 497.021498][T23922] team0 (unregistering): Port device team_slave_0 removed [ 497.041522][T23922] team0 (unregistering): Failed to send options change via netlink (err -105) [ 497.050788][T23922] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 497.061752][T23922] team0 (unregistering): Port device team_slave_1 removed [ 497.082949][T23922] team0 (unregistering): Failed to send options change via netlink (err -105) [ 497.096416][T23922] team0 (unregistering): Failed to send port change of device gretap1 via netlink (err -105) [ 497.107564][T23922] team0 (unregistering): Port device gretap1 removed [ 497.117612][T23929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5005'. [ 497.174182][T23937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5007'. [ 497.217747][T23937] bond0: entered promiscuous mode [ 497.236310][T23937] bond0: left promiscuous mode [ 497.287621][T23941] netlink: 'syz.3.5009': attribute type 4 has an invalid length. [ 497.296290][T23941] netlink: 'syz.3.5009': attribute type 1 has an invalid length. [ 498.197112][T23993] netlink: 'syz.3.5026': attribute type 1 has an invalid length. [ 498.206747][T23993] netlink: 'syz.3.5026': attribute type 83 has an invalid length. [ 498.488117][T24012] syz.1.5034: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 498.564610][T24012] CPU: 1 UID: 0 PID: 24012 Comm: syz.1.5034 Not tainted syzkaller #0 PREEMPT(full) [ 498.564637][T24012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.564650][T24012] Call Trace: [ 498.564658][T24012] [ 498.564666][T24012] dump_stack_lvl+0xe8/0x150 [ 498.564702][T24012] warn_alloc+0x249/0x340 [ 498.564735][T24012] ? stack_trace_save+0xa9/0x100 [ 498.564761][T24012] ? __pfx_warn_alloc+0x10/0x10 [ 498.564799][T24012] ? kasan_save_track+0x4f/0x80 [ 498.564827][T24012] ? kasan_save_track+0x3e/0x80 [ 498.564854][T24012] ? __kasan_kmalloc+0x93/0xb0 [ 498.564870][T24012] ? __kmalloc_cache_noprof+0x31c/0x660 [ 498.564898][T24012] ? xskq_create+0x56/0x170 [ 498.564921][T24012] ? xsk_setsockopt+0x54c/0x990 [ 498.564940][T24012] ? do_sock_setsockopt+0x17c/0x1b0 [ 498.564968][T24012] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 498.564996][T24012] ? do_syscall_64+0x15f/0xf80 [ 498.565025][T24012] __vmalloc_node_range_noprof+0x132/0x1730 [ 498.565089][T24012] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 498.565138][T24012] ? __kasan_kmalloc+0x93/0xb0 [ 498.565163][T24012] vmalloc_user_noprof+0xad/0xe0 [ 498.565194][T24012] ? xskq_create+0xbf/0x170 [ 498.565217][T24012] xskq_create+0xbf/0x170 [ 498.565243][T24012] xsk_init_queue+0x8a/0xe0 [ 498.565267][T24012] xsk_setsockopt+0x54c/0x990 [ 498.565291][T24012] ? __pfx_xsk_setsockopt+0x10/0x10 [ 498.565312][T24012] ? __pfx_aa_sk_perm+0x10/0x10 [ 498.565342][T24012] ? aa_sock_opt_perm+0xff/0x1a0 [ 498.565372][T24012] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 498.565402][T24012] ? __pfx_xsk_setsockopt+0x10/0x10 [ 498.565424][T24012] do_sock_setsockopt+0x17c/0x1b0 [ 498.565458][T24012] __x64_sys_setsockopt+0x13d/0x1b0 [ 498.565490][T24012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.565512][T24012] do_syscall_64+0x15f/0xf80 [ 498.565537][T24012] ? trace_irq_disable+0x3b/0x140 [ 498.565559][T24012] ? clear_bhb_loop+0x40/0x90 [ 498.565584][T24012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.565605][T24012] RIP: 0033:0x7f357839c819 [ 498.565623][T24012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.565641][T24012] RSP: 002b:00007f35792ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 498.565662][T24012] RAX: ffffffffffffffda RBX: 00007f3578615fa0 RCX: 00007f357839c819 [ 498.565677][T24012] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 498.565689][T24012] RBP: 00007f3578432c91 R08: 0000000000000004 R09: 0000000000000000 [ 498.565702][T24012] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.565714][T24012] R13: 00007f3578616038 R14: 00007f3578615fa0 R15: 00007ffe179149f8 [ 498.565748][T24012] [ 498.565766][T24012] Mem-Info: [ 498.815569][T24022] IPVS: length: 205 != 24 [ 498.822427][T24012] active_anon:6348 inactive_anon:0 isolated_anon:0 [ 498.822427][T24012] active_file:3145 inactive_file:40105 isolated_file:0 [ 498.822427][T24012] unevictable:768 dirty:86 writeback:0 [ 498.822427][T24012] slab_reclaimable:13041 slab_unreclaimable:142644 [ 498.822427][T24012] mapped:29468 shmem:1365 pagetables:1438 [ 498.822427][T24012] sec_pagetables:0 bounce:0 [ 498.822427][T24012] kernel_misc_reclaimable:0 [ 498.822427][T24012] free:1273649 free_pcp:9796 free_cma:0 [ 498.922939][T24012] Node 0 active_anon:25492kB inactive_anon:0kB active_file:12580kB inactive_file:160220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117908kB dirty:340kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17344kB pagetables:5792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 498.954683][T24012] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 499.006758][T24012] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.046250][T24012] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 499.047656][T24026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.052073][T24012] Node 0 DMA32 free:1137396kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25192kB inactive_anon:0kB active_file:12580kB inactive_file:160220kB unevictable:1536kB writepending:340kB zspages:0kB present:3129332kB managed:2551504kB mlocked:0kB bounce:0kB free_pcp:37776kB local_pcp:21096kB free_cma:0kB [ 499.141507][T24012] lowmem_reserve[]: 0 0 0 0 0 [ 499.146892][T24012] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 499.191244][T24012] lowmem_reserve[]: 0 0 0 0 0 [ 499.261015][T24012] Node 1 Normal free:3942304kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 499.381107][T24012] lowmem_reserve[]: 0 0 0 0 0 [ 499.398600][T24012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 499.459356][T24012] Node 0 DMA32: 10439*4kB (UME) 6226*8kB (UME) 1978*16kB (UME) 481*32kB (UM) 192*64kB (UM) 93*128kB (UM) 602*256kB (UME) 276*512kB (UME) 138*1024kB (U) 38*2048kB (UME) 112*4096kB (UM) = 1136108kB [ 499.504430][T24012] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 499.551016][T24012] Node 1 Normal: 0*4kB 2*8kB (UM) 3*16kB (UM) 3*32kB (UM) 8*64kB (UM) 6*128kB (UM) 6*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3942304kB [ 499.581884][T24012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.597571][T24012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 499.607302][T24012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.618596][T24012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 499.630249][T24012] 44611 total pagecache pages [ 499.637981][T24012] 0 pages in swap cache [ 499.642651][T24012] Free swap = 124996kB [ 499.647405][T24012] Total swap = 124996kB [ 499.651588][T24012] 2097051 pages RAM [ 499.655995][T24012] 0 pages HighMem/MovableOnly [ 499.660788][T24012] 427407 pages reserved [ 499.665196][T24012] 0 pages cma reserved [ 500.323028][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 500.512996][T24099] nbd: must specify a size in bytes for the device [ 500.602573][T24099] __nla_validate_parse: 11 callbacks suppressed [ 500.602593][T24099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5065'. [ 500.631768][T24110] netlink: 'syz.1.5067': attribute type 2 has an invalid length. [ 500.643542][T24111] netlink: 'syz.1.5067': attribute type 2 has an invalid length. [ 500.891997][T24127] openvswitch: netlink: IP tunnel TTL not specified. [ 501.538960][T24151] syzkaller0: entered promiscuous mode [ 501.544846][T24151] syzkaller0: entered allmulticast mode [ 502.014644][T24178] netlink: 'syz.4.5084': attribute type 3 has an invalid length. [ 502.022451][T24178] netlink: 'syz.4.5084': attribute type 3 has an invalid length. [ 502.030761][T24178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5084'. [ 504.469603][T24185] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 504.907877][T24208] IPVS: length: 239 != 24 [ 504.941436][ T10] IPVS: starting estimator thread 0... [ 505.064292][T24193] syzkaller0: entered promiscuous mode [ 505.070185][T24193] syzkaller0: entered allmulticast mode [ 505.082812][T24211] IPVS: using max 30 ests per chain, 72000 per kthread [ 507.161856][ T7675] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 507.800583][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5099'. [ 507.811278][T24239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.823924][T24240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5098'. [ 508.175768][T24257] netlink: 'syz.1.5103': attribute type 5 has an invalid length. [ 508.930016][T24273] netlink: 'syz.1.5106': attribute type 29 has an invalid length. [ 508.938195][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5106'. [ 509.854301][ T148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 511.407624][T24233] delete_channel: no stack [ 511.587547][T24296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5113'. [ 511.599748][T24291] netlink: 'syz.1.5114': attribute type 1 has an invalid length. [ 511.620470][T24291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5114'. [ 511.777083][T24304] netlink: 516 bytes leftover after parsing attributes in process `syz.4.5117'. [ 511.788286][T24300] syzkaller0: entered promiscuous mode [ 511.812374][T24300] syzkaller0: entered allmulticast mode [ 511.840816][T24306] syzkaller0: entered promiscuous mode [ 511.846322][T24306] syzkaller0: entered allmulticast mode [ 511.948140][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5120'. [ 511.975209][T24310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5120'. [ 512.013052][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5120'. [ 512.021956][T24310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5120'. [ 512.325744][ T2065] block nbd1: Possible stuck request ffff888027685080: control (read@0,1024B). Runtime 420 seconds [ 512.336519][ T2065] block nbd1: Possible stuck request ffff888027685240: control (read@1024,1024B). Runtime 420 seconds [ 512.347887][ T2065] block nbd1: Possible stuck request ffff888027685400: control (read@2048,1024B). Runtime 420 seconds [ 512.361558][ T2065] block nbd1: Possible stuck request ffff8880276855c0: control (read@3072,1024B). Runtime 420 seconds [ 512.978219][ T5896] IPVS: starting estimator thread 0... [ 513.010583][T24363] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5134'. [ 513.023629][T24363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5134'. [ 513.073559][T24361] IPVS: using max 26 ests per chain, 62400 per kthread [ 513.248558][T24374] netlink: 'syz.1.5137': attribute type 1 has an invalid length. [ 513.305557][T24376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.390990][T24374] bond11: entered promiscuous mode [ 513.415538][T24374] 8021q: adding VLAN 0 to HW filter on device bond11 [ 513.459707][T24379] bond11: (slave bridge5): making interface the new active one [ 513.467308][T24379] bridge5: entered promiscuous mode [ 513.476349][T24379] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 513.512094][T24384] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5138'. [ 513.646178][T24393] syzkaller1: entered promiscuous mode [ 513.651701][T24393] syzkaller1: entered allmulticast mode [ 513.940351][T24414] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5149'. [ 514.068821][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5151'. [ 514.384246][T24437] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5156'. [ 514.492712][T24445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.568694][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5158'. [ 514.583346][T24450] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5160'. [ 514.585497][T24448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5158'. [ 514.603255][T24448] netlink: 'syz.0.5158': attribute type 12 has an invalid length. [ 514.624312][T24448] netlink: 'syz.0.5158': attribute type 11 has an invalid length. [ 514.700355][T24458] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5162'. [ 515.334094][T24493] sch_fq: defrate 0 ignored. [ 515.810702][T24513] syzkaller0: entered promiscuous mode [ 515.816222][T24513] syzkaller0: entered allmulticast mode [ 516.239678][T24535] netlink: 'syz.3.5181': attribute type 1 has an invalid length. [ 516.408504][T24535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.469328][T24544] vlan2: entered promiscuous mode [ 516.476274][T24544] bond4: entered promiscuous mode [ 516.489501][T24544] vlan2: entered allmulticast mode [ 516.499405][T24544] bond4: entered allmulticast mode [ 517.508583][T24595] syzkaller0: entered promiscuous mode [ 517.529802][T24595] syzkaller0: entered allmulticast mode [ 517.774607][T24570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.041134][T24624] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 518.159196][T24632] __nla_validate_parse: 9 callbacks suppressed [ 518.159215][T24632] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5212'. [ 518.259558][T24642] Bluetooth: MGMT ver 1.23 [ 518.420322][T24647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5214'. [ 518.907974][T24659] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.5218'. [ 519.230410][T24672] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5223'. [ 519.299055][T24677] netlink: 'syz.3.5225': attribute type 1 has an invalid length. [ 519.340163][T24677] 8021q: adding VLAN 0 to HW filter on device bond5 [ 519.361317][T24677] bond5: (slave geneve2): making interface the new active one [ 519.370906][T24677] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 519.418518][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5228'. [ 519.483976][T24683] xt_connbytes: Forcing CT accounting to be enabled [ 519.527023][T24683] xt_CT: No such helper "netbios-ns" [ 519.697706][T24692] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5232'. [ 519.838138][T24697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5235'. [ 519.871361][T24697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5235'. [ 519.942812][T24708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5238'. [ 520.150307][T24724] syz_tun: left allmulticast mode [ 520.255867][T24726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.468475][T24743] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5249'. [ 520.483960][T24749] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 520.493860][T24743] netlink: 'syz.0.5249': attribute type 2 has an invalid length. [ 520.664259][T24760] syzkaller0: left promiscuous mode [ 520.675863][T24760] syzkaller0: left allmulticast mode [ 520.779099][T24760] bond12: Invalid ad_actor_system MAC address. [ 520.785308][T24760] bond12: option ad_actor_system: invalid value (1) [ 520.794714][T24767] openvswitch: netlink: IP tunnel dst address not specified [ 520.804498][T24760] bond12 (unregistering): Released all slaves [ 521.427356][T24799] bond12: entered promiscuous mode [ 521.951536][T24815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.656500][T24843] xfrm0: entered allmulticast mode [ 522.810079][T24847] macsec1: entered promiscuous mode [ 523.646395][T24897] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 523.668184][T24897] __nla_validate_parse: 16 callbacks suppressed [ 523.668200][T24897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5296'. [ 523.683398][T24897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5296'. [ 523.830943][T24902] netlink: 'syz.0.5297': attribute type 1 has an invalid length. [ 523.850145][T24902] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5297'. [ 523.887661][T24910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5300'. [ 523.909117][T24910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5300'. [ 523.936984][T24914] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 524.127091][T24929] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5303'. [ 524.182071][T24930] macsec1: entered promiscuous mode [ 524.388743][T24943] netlink: 'syz.2.5308': attribute type 10 has an invalid length. [ 524.426496][T24946] x9: renamed from bridge_slave_0 [ 524.491338][T24957] netlink: 'syz.1.5312': attribute type 3 has an invalid length. [ 524.501519][T24957] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5312'. [ 525.014827][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5322'. [ 525.026384][T24990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5322'. [ 525.108302][T24984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5319'. [ 525.152781][T24992] netlink: 'syz.0.5323': attribute type 10 has an invalid length. [ 525.232074][T24998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.268263][T24995] team0: No ports can be present during mode change [ 525.311291][T25002] tipc: Enabled bearer , priority 11 [ 525.434540][T25011] netlink: 'syz.4.5327': attribute type 9 has an invalid length. [ 525.492688][T25016] netlink: 'syz.1.5330': attribute type 11 has an invalid length. [ 525.582376][T25022] netlink: 'syz.4.5331': attribute type 10 has an invalid length. [ 525.614318][T25024] gtp1: entered promiscuous mode [ 525.619460][T25024] gtp1: entered allmulticast mode [ 525.757920][T25030] team0: No ports can be present during mode change [ 525.963923][T25041] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 526.008633][T25043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.395880][T25072] team0: No ports can be present during mode change [ 526.422719][ T5827] tipc: Node number set to 3087118044 [ 526.490299][T25077] 8021q: VLANs not supported on bond0 [ 527.133487][T25114] team0: Mode "broadcap" not found [ 527.379619][T25131] netlink: 'syz.2.5370': attribute type 4 has an invalid length. [ 527.599011][T25139] syz.0.5372 (25139) used obsolete PPPIOCDETACH ioctl [ 527.884127][T25155] team0: No ports can be present during mode change [ 527.958446][T25157] netlink: 'syz.3.5378': attribute type 2 has an invalid length. [ 527.967572][T25157] netlink: 'syz.3.5378': attribute type 5 has an invalid length. [ 528.238947][T25163] netlink: 'syz.4.5381': attribute type 29 has an invalid length. [ 528.269218][T25163] netlink: 'syz.4.5381': attribute type 29 has an invalid length. [ 528.698895][ T62] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 528.701637][T25183] __nla_validate_parse: 17 callbacks suppressed [ 528.701683][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5384'. [ 528.849308][T25193] team0: Mode "broadc" not found [ 528.963477][T25202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.080783][T25203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5391'. [ 529.125797][T25203] bond0: entered promiscuous mode [ 529.134899][T25203] bond0: left promiscuous mode [ 529.150978][T25212] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.5389'. [ 529.213948][T25219] xt_l2tp: v2 doesn't support IP mode [ 529.460770][T25229] validate_nla: 5 callbacks suppressed [ 529.460787][T25229] netlink: 'syz.0.5398': attribute type 1 has an invalid length. [ 529.470521][T25231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5399'. [ 529.487134][T25231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5399'. [ 529.497498][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5398'. [ 529.579947][T25229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.600701][T25234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5399'. [ 529.706814][T25234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5399'. [ 529.735966][T25247] netlink: 'syz.3.5401': attribute type 4 has an invalid length. [ 529.765344][T25247] netlink: 'syz.3.5401': attribute type 4 has an invalid length. [ 529.824002][T25250] tipc: Started in network mode [ 529.864840][T25250] tipc: Node identity fa2f046f07ab, cluster identity 4711 [ 529.872137][T25250] tipc: Enabled bearer , priority 0 [ 529.957860][T25261] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5403'. [ 529.978109][T25250] tipc: Disabling bearer [ 530.005640][T25264] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5403'. [ 530.529717][T25302] pimreg: entered allmulticast mode [ 530.555924][T25308] syzkaller1: entered promiscuous mode [ 530.579505][T25308] syzkaller1: entered allmulticast mode [ 530.650533][T25313] netlink: 'syz.1.5418': attribute type 1 has an invalid length. [ 530.676572][T25313] netlink: 'syz.1.5418': attribute type 2 has an invalid length. [ 530.737729][T25317] netlink: 'syz.1.5418': attribute type 1 has an invalid length. [ 530.792188][T25317] netlink: 'syz.1.5418': attribute type 2 has an invalid length. [ 531.931216][T25381] netlink: 'syz.4.5440': attribute type 1 has an invalid length. [ 531.978363][T25386] netlink: 'syz.1.5439': attribute type 1 has an invalid length. [ 532.172130][T25381] bond15: (slave bridge11): making interface the new active one [ 532.180834][T25381] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 532.336875][T25399] veth3: entered allmulticast mode [ 532.621526][T25420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.641571][T25420] sctp: [Deprecated]: syz.0.5447 (pid 25420) Use of int in maxseg socket option. [ 532.641571][T25420] Use struct sctp_assoc_value instead [ 532.670281][T25422] sctp: [Deprecated]: syz.0.5447 (pid 25422) Use of int in maxseg socket option. [ 532.670281][T25422] Use struct sctp_assoc_value instead [ 532.821503][T25431] netlink: 'syz.0.5451': attribute type 4 has an invalid length. [ 533.191462][T25455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.221090][T25455] .`: (slave batadv0): Enslaving as an active interface with an up link [ 533.280479][T25455] batadv0: entered promiscuous mode [ 533.291300][T25455] batadv0: entered allmulticast mode [ 533.300929][T25455] .`: (slave batadv0): Releasing backup interface [ 533.338269][T25455] bridge0: port 2(batadv0) entered blocking state [ 533.347089][T25455] bridge0: port 2(batadv0) entered disabled state [ 533.466559][T25464] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.810508][T25494] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 533.845075][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 533.855272][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 534.534797][T25534] __nla_validate_parse: 17 callbacks suppressed [ 534.534817][T25534] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5479'. [ 534.597467][T25540] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5479'. [ 534.599940][T25539] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004 [ 534.885932][T25554] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5482'. [ 534.997925][T25563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5485'. [ 535.627953][T25601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5497'. [ 535.829787][T25614] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5498'. [ 536.021663][T25629] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.050099][T25629] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.053303][T25630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5504'. [ 536.073686][T25629] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.091467][T25630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5504'. [ 536.101058][T25629] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.102730][T25629] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.138525][T25630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5504'. [ 536.150378][T25629] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.173541][T25629] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.174825][T25633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5504'. [ 536.185213][T25629] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.203000][T25629] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.515935][T25650] validate_nla: 5 callbacks suppressed [ 536.515954][T25650] netlink: 'syz.2.5511': attribute type 1 has an invalid length. [ 536.666339][ T30] INFO: task udevd:5832 blocked for more than 143 seconds. [ 536.673587][ T30] Not tainted syzkaller #0 [ 536.678534][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.690037][ T30] task:udevd state:D stack:21368 pid:5832 tgid:5832 ppid:5193 task_flags:0x400140 flags:0x00080802 [ 536.702007][ T30] Call Trace: [ 536.705303][ T30] [ 536.708252][ T30] __schedule+0x17b4/0x5680 [ 536.712780][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 536.717755][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 536.723580][ T30] ? __pfx___schedule+0x10/0x10 [ 536.728468][ T30] ? schedule+0x90/0x360 [ 536.732730][ T30] schedule+0x164/0x360 [ 536.736906][ T30] io_schedule+0x7f/0xd0 [ 536.741168][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 536.746491][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 536.814656][ T30] ? filemap_read_folio+0x23e/0x3b0 [ 536.819912][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 536.825463][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 536.831183][ T30] do_read_cache_folio+0x1ad/0x590 [ 536.836289][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 536.841747][ T30] read_part_sector+0xb6/0x2b0 [ 536.846504][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 536.851868][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 536.858204][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 536.871120][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 536.877716][ T30] bdev_disk_changed+0x817/0x1770 [ 536.885362][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 536.892006][ T30] blkdev_get_whole+0x380/0x510 [ 536.897505][ T30] bdev_open+0x31e/0xd30 [ 536.902192][ T30] blkdev_open+0x470/0x610 [ 536.907351][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 536.914355][ T30] do_dentry_open+0x785/0x14e0 [ 536.921295][ T30] vfs_open+0x3b/0x340 [ 536.925851][ T30] ? path_openat+0x2df0/0x3860 [ 536.930724][ T30] path_openat+0x2e08/0x3860 [ 536.935592][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 536.941020][ T30] ? stack_depot_save_flags+0x33/0x810 [ 536.946692][ T30] ? __pfx_path_openat+0x10/0x10 [ 536.951675][ T30] ? __x64_sys_openat+0x138/0x170 [ 536.957231][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 536.962227][ T30] do_file_open+0x23e/0x4a0 [ 536.966947][ T30] ? __pfx_do_file_open+0x10/0x10 [ 536.972042][ T30] ? _raw_spin_unlock+0x28/0x50 [ 536.977530][ T30] ? alloc_fd+0x64b/0x6c0 [ 536.981919][ T30] do_sys_openat2+0x113/0x200 [ 536.987044][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 536.994699][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 536.999958][ T30] ? rcu_is_watching+0x15/0xb0 [ 537.004925][ T30] __x64_sys_openat+0x138/0x170 [ 537.009829][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.016377][ T30] do_syscall_64+0x15f/0xf80 [ 537.021016][ T30] ? clear_bhb_loop+0x40/0x90 [ 537.025966][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.031901][ T30] RIP: 0033:0x7fda93ea7407 [ 537.036539][ T30] RSP: 002b:00007ffd72f3f400 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 537.045395][ T30] RAX: ffffffffffffffda RBX: 00007fda94603880 RCX: 00007fda93ea7407 [ 537.053743][ T30] RDX: 00000000000a0800 RSI: 0000559fcbc20820 RDI: ffffffffffffff9c [ 537.061777][ T30] RBP: 0000559fcbc14910 R08: 0000000000000000 R09: 0000000000000000 [ 537.070025][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559fcbc31f10 [ 537.081176][ T30] R13: 0000559fcbc22190 R14: 0000000000000000 R15: 0000559fcbc31f10 [ 537.089341][ T30] [ 537.095443][ T30] [ 537.095443][ T30] Showing all locks held in the system: [ 537.103725][ T30] 1 lock held by khungtaskd/30: [ 537.108826][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 537.140512][ T30] 2 locks held by getty/5580: [ 537.150092][ T30] #0: ffff888032b200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 537.161147][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 537.171633][ T30] 1 lock held by udevd/5832: [ 537.176566][ T30] #0: ffff88802759e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 537.185989][ T30] 3 locks held by kworker/1:8/16798: [ 537.191310][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 537.203393][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 537.212476][ T30] #2: ffff8880b87271d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 537.221531][ T30] 1 lock held by syz.1.5504/25628: [ 537.228580][ T30] #0: ffff888058018840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 537.240972][ T30] [ 537.243498][ T30] ============================================= [ 537.243498][ T30] [ 537.251982][ T30] NMI backtrace for cpu 0 [ 537.251999][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 537.252019][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 537.252030][ T30] Call Trace: [ 537.252038][ T30] [ 537.252047][ T30] dump_stack_lvl+0xe8/0x150 [ 537.252077][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 537.252098][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 537.252125][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 537.252146][ T30] sys_info+0x135/0x170 [ 537.252170][ T30] watchdog+0xfaa/0x1000 [ 537.252194][ T30] ? watchdog+0x209/0x1000 [ 537.252222][ T30] kthread+0x388/0x470 [ 537.252240][ T30] ? __pfx_watchdog+0x10/0x10 [ 537.252257][ T30] ? __pfx_kthread+0x10/0x10 [ 537.252277][ T30] ret_from_fork+0x514/0xb70 [ 537.252304][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 537.252331][ T30] ? __switch_to+0xc79/0x1410 [ 537.252354][ T30] ? __pfx_kthread+0x10/0x10 [ 537.252372][ T30] ret_from_fork_asm+0x1a/0x30 [ 537.252412][ T30] [ 537.357820][ T30] Sending NMI from CPU 0 to CPUs 1: [ 537.363472][ C1] NMI backtrace for cpu 1 [ 537.363487][ C1] CPU: 1 UID: 0 PID: 5810 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 537.363505][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 537.363514][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x70 [ 537.363536][ C1] Code: a8 16 00 00 83 fa 02 75 21 48 8b 91 b0 16 00 00 48 8b 32 48 8d 7e 01 8b 89 ac 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 8f e9 f0 09 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 537.363551][ C1] RSP: 0018:ffffc90000a089c8 EFLAGS: 00000006 [ 537.363565][ C1] RAX: ffffffff81b24717 RBX: 1ffff1100f7f7547 RCX: ffff88807bfb9ec0 [ 537.363577][ C1] RDX: 0000000000010100 RSI: ffffffff8e22a959 RDI: ffff88807bfb9ec0 [ 537.363588][ C1] RBP: ffff88802c21d300 R08: ffffffff90321ab7 R09: 1ffffffff2064356 [ 537.363599][ C1] R10: dffffc0000000000 R11: fffffbfff2064357 R12: ffff88807bfbaa38 [ 537.363610][ C1] R13: 1ffff110170e507a R14: ffff8880b8728420 R15: 0000000000000001 [ 537.363621][ C1] FS: 000055557ae71540(0000) GS:ffff888125343000(0000) knlGS:0000000000000000 [ 537.363634][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.363645][ C1] CR2: 00007f715fde92f8 CR3: 0000000078e3e000 CR4: 00000000003526f0 [ 537.363658][ C1] Call Trace: [ 537.363664][ C1] [ 537.363670][ C1] __hrtimer_run_queues+0x3e7/0xa20 [ 537.363702][ C1] hrtimer_interrupt+0x44b/0x950 [ 537.363739][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 537.363763][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 537.363781][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.363798][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 537.363816][ C1] Code: f7 e8 0d 1c ec f5 f7 c3 00 02 00 00 74 05 e8 10 38 17 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a4 ad dd f5 65 8b 05 9d d0 87 07 85 c0 74 18 5b 41 5e e9 41 48 [ 537.363830][ C1] RSP: 0018:ffffc90000a08cb8 EFLAGS: 00000206 [ 537.363842][ C1] RAX: 0000000000000006 RBX: 0000000000000296 RCX: 0000000000000101 [ 537.363851][ C1] RDX: 0000000000000000 RSI: ffffffff8dfb7147 RDI: 0000000000000001 [ 537.363861][ C1] RBP: 0000000000000000 R08: ffffffff90321ab7 R09: 1ffffffff2064356 [ 537.363871][ C1] R10: dffffc0000000000 R11: fffffbfff2064357 R12: ffff8880964cfb40 [ 537.363882][ C1] R13: ffff8880964cfaf0 R14: ffffffff9a762d90 R15: 0000000000000001 [ 537.363903][ C1] debug_check_no_obj_freed+0x52e/0x550 [ 537.363930][ C1] ? rcu_core+0x7cd/0x1070 [ 537.363949][ C1] kmem_cache_free+0xfb/0x630 [ 537.363971][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 537.363988][ C1] ? rcu_core+0x751/0x1070 [ 537.364006][ C1] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 537.364033][ C1] rcu_core+0x7cd/0x1070 [ 537.364059][ C1] ? __pfx_rcu_core+0x10/0x10 [ 537.364076][ C1] ? sched_balance_domains+0x7ea/0x900 [ 537.364097][ C1] ? sched_balance_domains+0xf9/0x900 [ 537.364119][ C1] handle_softirqs+0x22a/0x840 [ 537.364139][ C1] ? __irq_exit_rcu+0xca/0x220 [ 537.364162][ C1] __irq_exit_rcu+0xca/0x220 [ 537.364181][ C1] irq_exit_rcu+0x9/0x30 [ 537.364199][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 537.364217][ C1] [ 537.364222][ C1] [ 537.364228][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.364243][ C1] RIP: 0010:apparmor_file_permission+0x32/0x300 [ 537.364260][ C1] Code: 56 41 55 41 54 53 50 89 74 24 04 48 89 fd 49 bd 00 00 00 00 00 fc ff df e8 0b c3 5a fd e8 b6 bf 48 07 65 4c 8b 35 16 35 d3 0e <49> 81 c6 08 09 00 00 4d 89 f7 49 c1 ef 03 43 80 3c 2f 00 74 08 4c [ 537.364273][ C1] RSP: 0018:ffffc90003a67bf0 EFLAGS: 00000246 [ 537.364285][ C1] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffff88807bfb9ec0 [ 537.364294][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888026007dc0 [ 537.364304][ C1] RBP: ffff888026007dc0 R08: ffff888028ee52c3 R09: 1ffff110051dca58 [ 537.364315][ C1] R10: dffffc0000000000 R11: ffffed10051dca59 R12: ffff888026007dc0 [ 537.364326][ C1] R13: dffffc0000000000 R14: ffff88807bfb9ec0 R15: 0000000000000000 [ 537.364348][ C1] security_file_permission+0x8d/0x260 [ 537.364366][ C1] rw_verify_area+0xbb/0x4d0 [ 537.364388][ C1] vfs_read+0x160/0xa70 [ 537.364407][ C1] ? debug_object_free+0x2d7/0x490 [ 537.364431][ C1] ? __pfx_vfs_read+0x10/0x10 [ 537.364450][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 537.364474][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 537.364495][ C1] ksys_read+0x150/0x270 [ 537.364516][ C1] ? __pfx_ksys_read+0x10/0x10 [ 537.364541][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.364557][ C1] do_syscall_64+0x15f/0xf80 [ 537.364576][ C1] ? clear_bhb_loop+0x40/0x90 [ 537.364593][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.364608][ C1] RIP: 0033:0x7f2c34f57997 [ 537.364622][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 537.364634][ C1] RSP: 002b:00007ffe1807f5b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 537.364648][ C1] RAX: ffffffffffffffda RBX: 000055557ae71540 RCX: 00007f2c34f57997 [ 537.364659][ C1] RDX: 0000000000000004 RSI: 00007ffe1807f60c RDI: 0000000000000003 [ 537.364669][ C1] RBP: 00007ffe1807fab0 R08: 0000000000000000 R09: 0000000000000000 [ 537.364678][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 537.364687][ C1] R13: 00007ffe1807f60c R14: 00007ffe1807f6a0 R15: 0000000000000000 [ 537.364707][ C1] [ 537.901546][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 537.908411][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 537.917526][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 537.927586][ T30] Call Trace: [ 537.930856][ T30] [ 537.933783][ T30] vpanic+0x56c/0xa60 [ 537.937776][ T30] ? __pfx___schedule+0x10/0x10 [ 537.942624][ T30] ? __pfx_vpanic+0x10/0x10 [ 537.947124][ T30] ? __pfx_console_unlock+0x10/0x10 [ 537.952326][ T30] panic+0xc5/0xd0 [ 537.956043][ T30] ? __pfx_panic+0x10/0x10 [ 537.960453][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 537.965819][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 537.971972][ T30] watchdog+0xff4/0x1000 [ 537.976217][ T30] ? watchdog+0x209/0x1000 [ 537.980669][ T30] kthread+0x388/0x470 [ 537.984738][ T30] ? __pfx_watchdog+0x10/0x10 [ 537.989409][ T30] ? __pfx_kthread+0x10/0x10 [ 537.993997][ T30] ret_from_fork+0x514/0xb70 [ 537.998590][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 538.003746][ T30] ? __switch_to+0xc79/0x1410 [ 538.008420][ T30] ? __pfx_kthread+0x10/0x10 [ 538.013006][ T30] ret_from_fork_asm+0x1a/0x30 [ 538.017802][ T30] [ 538.020960][ T30] Kernel Offset: disabled [ 538.025277][ T30] Rebooting in 86400 seconds..