last executing test programs: 22.033976047s ago: executing program 1 (id=2445): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000140)=@ethtool_dump={0x40, 0xfffffffb, 0x8, 0x6d, "04b0354eb8593f0ac2e0fdbd2c9d3d6d9a1040323f2b8b6acc6bd0d1f92e7aa4da61651e862f10d627fcd77297fc01ac8b3412cd4c4f26fb222b8016fbc141e662a9e064d7c44bff8c0db5bb155f46a518533f8971518e8166e87847c20cd371b9e86ce8d21b841b44c1b15156"}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x22}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}}, 0xc000) 21.722015831s ago: executing program 1 (id=2449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c6}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 21.658207841s ago: executing program 1 (id=2451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c2"], 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x19c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0xfffffffffffffcd3}, @CTA_EXPECT_NAT={0xe4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000030101030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="bc04000000050102000000000000000000000009540201000200000005000000ff100104fdff230073797a3100000000000000000000000000000000000000000000000000000000c627a42bd2212ff958b819032dcf4506fcda4be0c236f0f454d8633dff45aee5bf0a247cfa0e98e4d0b615be0e93b81686545a5a271f3aa565e43aa4f6d24c234000fdff03000000ffffff7f050009000100000080010000f5ff03000100000001000000800008c80100000002000000f4ff070001000000ad0f0000d4000a00020000000400000001ff000401000000ffff00000002080001000000000400000500020000000000040000000700020003000000190000000400fbff0200000005000000ff00090001000000fbffffff06005204000000000900000009008c00000000000300000070fa3a04010000002c4d00000600af8500000000090000000100040001000000090000000700030002000000080000000b00ff7f03000000040000000900000103000000080000008001030002000000020000007f007e0002000000b000000000000c0001000000070000000800d05701000000000000000000f9ff01000000090000000a000300000000000100000005000101020000000700000002000f00020000004f0000000004826e0300000000000000140cff0f03000000000800000100080003000000090000000008ff030300000080000000050006000100000001000000ff7fff0f02000000300500000200010003000000fd5a00000600010002000000fc0c00000600050001000000030200000200010002000000030000000000090000000000000000000200020000000000020000005402010003000000d0000000070900107f00080073797a3000000000000000000000000000000000000000000000000000000000c9e089950b39ead779a58cf0f3bb34e55185d0164df2b6e1bbfa2b13230802308b0069252214f5f91b28b66d0e6864279397be298c45afb6e074e3e35ee196560700020003000000050000000f00050003000000020000000800060000000000070000000400020003000000010000007f00fbff02000000ca000000001006000100000006000000a8ec0900010000002e5b00000500ff7f0000000008000000d500050002000000000000180800008000000000070000000a000500030000000000000005000100020000000100010000000018030000000900000000100f0000000000000000007e09040002000000040000000000000001000000080000000400030002000000060000000000030003000000508f00000700070001000000010000001d00020001000000080000000b000400010000000c000000080000000100000001800000fae40900000000000200000000000001030000000100000084700c000100000000000000ff030500030000004e00000000000700000000001000000004000200000000000700000098000800030000004d0b00002409537901000000f8ffffffff00ff7f00000000ffffff7f0600090002000000050000001e007209020000000300000000010800010000000000000001000600000000000900000001000000020000000800000002000100020000001200000007000700010000000300000000100180000000000c0000000900550103000000ff010000"], 0x4bc}, 0x1, 0x0, 0x0, 0x80}, 0x4) socket(0x9, 0x7e67755fc11ea131, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c2"], 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x19c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0xfffffffffffffcd3}, @CTA_EXPECT_NAT={0xe4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) (async) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000030101030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) socket(0x9, 0x7e67755fc11ea131, 0x0) (async) 21.314102292s ago: executing program 1 (id=2456): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e044", 0x2}], 0x1}}], 0x1, 0x2000c000) sendto$inet(r0, &(0x7f0000000340)="1d2ac1816b19494f368f44dd9a975c8cb501040d5630c560138455da40869adc68c44485fa37da05040f3a947b1aa7e6acfc379c5adde4157e25be115a073a", 0x3f, 0x80, 0x0, 0x0) 21.225948933s ago: executing program 1 (id=2458): unshare(0x2c060000) unshare(0x24020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) unshare(0x0) 21.054180771s ago: executing program 1 (id=2461): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="710505010e030607037e050930ea56cc4e0b4b496d8c34e401eb"], 0x1a) socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 20.557959932s ago: executing program 3 (id=2467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000e91d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.377281882s ago: executing program 3 (id=2470): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) write$nci(0xffffffffffffffff, 0x0, 0x8) (async) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000e60000000000000000000000d7e500000000000000000000000002000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000b40)={0x414, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "6a463edacb9693c2207e1549163b10e3c8ed1bebeab4bfeacfbb2df8f68366"}}, @TIPC_NLA_NODE_ID={0x11, 0x3, "730332793fef8de57f59d2e3c0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d8776d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x261c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x24}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x61a30813}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xde}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @local, 0xfffffffc}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2419}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4379}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6af}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2eb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x414}}, 0x4810) (async) accept4$tipc(r1, 0x0, 0x0, 0x800) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) 20.301336601s ago: executing program 3 (id=2472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x80) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 20.144988734s ago: executing program 3 (id=2474): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9000000000000}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=@deltaction={0x1e8, 0x31, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0d9b}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x83}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x873}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008002}, 0x880) bind$unix(r9, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r14, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r14}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@delqdisc={0x98, 0x25, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff2, 0xe}, {0x4, 0xc}, {0xffe0, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9d8f}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8f88}, @TCA_RATE={0x6, 0x5, {0x8, 0x40}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x3ff}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xbb}]}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_INGRESS_BLOCK={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 19.932572673s ago: executing program 4 (id=2478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0xffffffffffffffff, {0x0, 0x0, 0x2}, {0x1, 0x1}, 0x0, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 19.81404394s ago: executing program 3 (id=2480): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) 19.662046521s ago: executing program 4 (id=2483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100003040000000000000700000004004535dd8b58e1b5a6b26dbbef1427a1658e068dfd4e1f979a21c2821a0acae583e6", @ANYRES32=r3, @ANYBLOB="0003000002800000140012800b000100697036767469000004000280"], 0x34}}, 0x0) r4 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r4, 0x891d, 0x0) 19.653733468s ago: executing program 3 (id=2484): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@bloom_filter={0x1e, 0x0, 0x1f, 0x0, 0x1005}, 0x48) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) read$nci(r3, &(0x7f0000000200)=""/100, 0x64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x31) listen(r8, 0x8) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6558}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 19.565994816s ago: executing program 4 (id=2486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.417865344s ago: executing program 4 (id=2489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYRESOCT=0x0], 0x184}}, 0x4000080) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0xf0400000, 0x0, 0x0, 0xfffffffe, 0x2007}, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0040000000000000000500000000000000000233004c4b8c6da02b35ed158b1d9592a2d54797eb30225d290563885161e38d5a96763f88989f10be70fb65d5f577555087913bdf4e1c732872f7d539227abc7b88f2bdb8b7799adf3ec18abfbc59ce548dc57a4f9ab0131eb67ee8518ddf938def6a886fcc4c67ff4b77449561644d51875c85e207fb705e22038868d2594be495fbca38836db9efccedc01f0047c127d165c0dd4830b95811008e5fbafe3d0f818bb526280d02a29696e547ee69", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r4, r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000006000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={0x0, r7, 0x4000, r6}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r5, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}}, 0x10) sendmmsg$inet6(r3, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x400000, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x2, 0xfe}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r10 = socket(0x40000000015, 0x5, 0x0) bind$qrtr(r10, 0x0, 0x0) shutdown(r3, 0x1) 19.385037363s ago: executing program 4 (id=2490): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0xffffffffffffffff, &(0x7f0000000580)=0x4e) ioctl$int_out(r0, 0x2, &(0x7f0000000200)) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010102, @broadcast, 0x0, "e419fb65791ff27c2303a633ac6b96afac72bed5378368cb6da975580db64ede", 0x5, 0x20, 0x4, 0x3}, 0x3c) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r1, 0x2b, 0x1, 0xc6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) r3 = socket$caif_seqpacket(0x25, 0x5, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r3, 0xffffffffffffffff, 0x4, 0x2000, 0x0, @value=r4, @void, @void, @void, r2}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001340), r7) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r9, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xffe0, 0x4}, {0xb, 0x4}, {0x9, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x2b1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8001) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)={0x20, r8, 0xa33, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x240400c0}, 0x8844) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) 19.234980195s ago: executing program 4 (id=2491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x100}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018000a8014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 18.285135109s ago: executing program 2 (id=2497): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e044", 0x2}], 0x1}}], 0x1, 0x2000c000) sendto$inet(r0, &(0x7f0000000340)="1d2ac1816b19494f368f44dd9a975c8cb501040d5630c560138455da40869adc68c44485fa37da05040f3a947b1aa7e6acfc379c5adde4157e25be115a073a", 0x3f, 0x80, 0x0, 0x0) 17.422998053s ago: executing program 2 (id=2501): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 17.372059627s ago: executing program 2 (id=2502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xc0, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0xc0}}, 0x8004) 17.254291869s ago: executing program 2 (id=2503): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000020c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000002100)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xc, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) 16.43783592s ago: executing program 2 (id=2511): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e044", 0x2}], 0x1}}], 0x1, 0x2000c000) sendto$inet(r0, &(0x7f0000000340)="1d2ac1816b19494f368f44dd9a975c8cb501040d5630c560138455da40869adc68c44485fa37da05040f3a947b1aa7e6acfc379c5adde4157e25be115a073a5cbcdca98e75e25eb393964f51d17d6800d9de290084d382f7ca69bd7d6e30b8", 0x5f, 0x80, 0x0, 0x0) 15.568364638s ago: executing program 2 (id=2515): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x1, 0x0, 0x5c, @dev={0xfe, 0x80, '\x00', 0x31}, @mcast1, 0x8000, 0x1, 0x8, 0xc0c}}) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@xdp={0x2c, 0x2, r1, 0x17}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0x88, 0x10f, 0x10000, "812d19c0986e57a3ee561eda963f9deb051d609927d9121a9c9adb36ad1f3fe01e5c236433c376e04322f2972b458adbe36a2b1c51c5b420ee92a9baa68785e7bb201361c9c9cccb21654de39bf9d570c6d2d9cc8e2228909370148a68a76c80b0293cbf35d986b2f142225174f470ff390a9643777563"}], 0x88}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x57, 0x5, "e6455e1c04cc96b2bcd0c63dd50fda29e24489640e13a9e8d29806d3371aab40d84da78332731f9e92c7b167bba37411a03bd2bc8051c798301e8a6fe48239d45c678470e1ddd2006a349871889811e27c73e5"}, @ETHTOOL_A_BITSET_MASK={0xfd, 0x5, "c7ae67d2047f91f284eb606a77d5f9d67f6096afc55f2c2824e158152532ee31c11d0f355f8aefa39b26369abbba269a5b069a6b4a26344c5bda33fae08730fb2f473b49cb3af72bbc86f0ca73f2fa56baf3fb0d32db544bde293d7ee9e3bd43a8efe7abc51b28ee068ec97d8dd978be039502a1fa319132a8814546dfee45e4c670856611e8cd872328f47c251aab4d1f6053ea93404d528ac2fbd4ae1330bd9c03e0e835f28ff7fcf7c0e8af4eb2f1c7f507fdbeb2606740a2bfdbd5f88214fd99388b7977e89571c955f3f7381a27f5e9f6c137b68ca35678286cfd51b188cb63585497e0000bf5c66de5c788edd74e78ae714291952532"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20040051}, 0x4c080) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x67fb25b70ce32d1b, &(0x7f0000000540)=0x3, 0x4) r4 = socket(0x18, 0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = accept4$bt_l2cap(r7, 0x0, &(0x7f0000000640), 0x80800) bind$bt_l2cap(r4, &(0x7f0000000680)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) sendmsg(r5, &(0x7f0000000940)={&(0x7f00000006c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}, 0x3}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000740)="929c6499418055f55c81d809c9a03b7e1f480f9137a0c8f5e9d6fd112d94721f2600b970d7ed1671a385e9af6af0055481fc073ce2b9d02a37d464799aa0437b4ee718b974a4ba71de8c1b7252d10c7cc2e4283261ad39aa019404613576784d02e0344c759cd0802afb8facfcc237754182341149fb71183875c92e0318e8848b31ee8a677bff105c0854fcc1d9ad337105892a08c6bac5d138df4dec9b7123f82052676fb2e6a4931486fe726c48e106fed597d7ea60e3ccfa8ed06d8b518aac67aef22265194eb7e182b41c4dc0e9c5463a24bfa3508803", 0xd9}, {&(0x7f0000000840)="4075186a086242bea3dd1346f10df76bf23e5f4e7e79e58199db5e7c043744b1f506c99e807dc0ebfeb77d432a05ceee3836ce6a640c134c2fb249aae954b9f331bf89314057fe9c358e18f062e628af99f8f8cb73bee0b97bccb483566a0ed686b868b4c6c38d9d6214e5d9ffa850c8e6355dd004bd46538505f227a0ff8422a7fdb93ae013437b52d3649c88742fd221ede1d5926016e6902bbe05a241366028e15fb1", 0xa4}], 0x2}, 0x44000804) sendfile(r8, r0, 0x0, 0x8839) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x41, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000009c0)={0x80, 0x6}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000a40)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, r1}, 0xc) r9 = accept4$inet(r5, &(0x7f0000000a80)={0x2, 0x0, @broadcast}, &(0x7f0000000ac0)=0x10, 0x800) sendmsg$sock(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)="9d1bca0b078f3cbd6560bf2038e83b79556f4daa1e3c27c251590478e56215b06bcc88fd180ef06c695688d3dafa4fa978094ec2e27bd982f0a57a1c1ac94d7386855d67940d08d54bd1edd3a69c628a8cf1a1512e35e1ad4be7e9402d2d883c0e2b40d51d892b1fa31c9dc51982ddff2fc0b22e66528c710644d560b2fc606cf999cd4eddf0f06c2c64e3662717f2b991feda4a4f4ebbedc13aed3153d1bf90bc0266649bdc3769418cea4a160e25496f806a06c848e7ffc2232b0b12597c4d55a30834948b59273383f6c963ae85526f30b029", 0xd4}, {&(0x7f0000000c00)="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", 0x1000}], 0x2, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}, 0x20000050) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000001cc0)={0x0, 'rose0\x00', {0x2}, 0xb}) getsockopt(r4, 0x2, 0xfff, 0xfffffffffffffffe, &(0x7f0000001d00)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001d40)={'veth1_macvtap\x00', 0x100}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x18, 0x140b, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r10 = openat$cgroup(r5, &(0x7f0000001e80)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000001ec0)='memory.swap.max\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xb96) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000001f00)={'icmp\x00'}, &(0x7f0000001f40)=0x1e) 15.463549397s ago: executing program 0 (id=2517): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x3c67032e14c713a, 0xffffffffffffffff, 0x16aa5000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000180)=0x80, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) accept4(r4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x2400c000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1d190000", @ANYRES16=r7, @ANYBLOB="050028bd7000fedbdf250600000008000300", @ANYRES32=r8, @ANYBLOB="08000500060000000500530000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10], 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0xc3d7, 0x5}, &(0x7f0000000040)=0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="100026bd7000fbdbdf25020000001f9cc20f48a1c6dfa0a4d53b1e695a21a4de273d27b53b03d304293e090a992b3452e6bd27a49aa7321be51567435c745f29f3bd4c0eab8163234ec248128af9ea3eeecb3eb9d1cf2338e73f1ba9af422f50e7f9db2e92006e8383a867789c0cec8a5b6860"], 0x14}, 0x1, 0x0, 0x0, 0x20044801}, 0x8000) r13 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local}}}}) socket$netlink(0x10, 0x3, 0x15) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r11, @in={{0x2, 0x4e23, @empty}}}, 0x84) 15.372375376s ago: executing program 0 (id=2518): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xffffff85, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {0xfff3, 0xffff}, {0x4, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x80000000}]}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) 15.307941376s ago: executing program 0 (id=2519): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000014000000040000000401000000000fbf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r3, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x1f, 0x1, 0xffffffff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200), 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYRES32=r7, @ANYBLOB='1\x00\x00\x00!\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="41a0b0274bc6ccf8f52bfd40043ce2d5fdf76da736d55ab0ed9d20ae4ab3ef2f000000006a0ef882f55602ff2ef7ff48d6e38c5f5dfd66e6064a9532a78ba4e5e9892e8b7ae6cac8f44808876c02a9cecc94e05c416decc29fd71b5d9ae6bae20d", @ANYRES32=r9, @ANYRES64=r8], 0x20) write$6lowpan_enable(r5, 0x0, 0x2b) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r9}, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r13, 0x660c) 15.290006s ago: executing program 0 (id=2520): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r3, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report}}}}}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1ff, 0xa, 0xfff, 0x4fb4, 0x40, 0xb6b, 0x40}, &(0x7f00000000c0)=0x9c) 15.153218204s ago: executing program 0 (id=2521): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000040088520300300012800b0001006970366772650000200002800600030007000000060002000400000008000d000700000004001200"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000004040)={'sit0\x00', &(0x7f0000003fc0)={'tunl0\x00', 0x0, 0x700, 0x700, 0x4, 0x1, {{0x18, 0x4, 0x1, 0x4, 0x60, 0x66, 0x0, 0xc, 0x2f, 0x0, @empty, @empty, {[@ra={0x94, 0x4}, @cipso={0x86, 0x33, 0x0, [{0x5, 0x5, "aef81f"}, {0x6, 0x4, "1dea"}, {0x7, 0x6, "774cee79"}, {0x1, 0xb, "082e6e9f9bd58cae5f"}, {0x2, 0xd, "35bab744ab38db93d34298"}, {0x5, 0x6, "09bfd12e"}]}, @generic={0x94, 0xe, "e44944dbcef1face589940ab"}, @noop, @end, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00000000000061117100000000009500"], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000004100)={'erspan0\x00', &(0x7f0000004080)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x5, 0x5, {{0xa, 0x4, 0x1, 0x17, 0x28, 0x65, 0x0, 0xf, 0x2f, 0x0, @local, @multicast2, {[@rr={0x7, 0x13, 0xd4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}}}) sendmmsg$inet6(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="f66d75c30b9314", 0x7}, {&(0x7f0000000140)="f08771613602669954f29794d2344d7d9413a44ca0785ffcac94e7f6f579ce7f953573160a49bbdfceb0a63cf79aca50a01ec90a02ec2c4038d016f82ccac0540746bcd4ef9dcd308f7206151b7f0e333f9c3977e76f5f6c5d9b7929951dcfef64e9b5a305b56b2c7c5fc1a261afb8e6b89114c0a2c7d61e170310160e67a49749160f695282c1457cd9989f16f381a4f9e6cac581554a2401d8fba45eb28af3cd2d22bbad1322dbcb3534e490ba3c16abe6d60c26610d255d8ef2f9ab4f52f607b45fd39403102feb7dc16c9d8a219c3d27b46f29", 0xd5}], 0x2, &(0x7f0000000580)=[@dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts={{0x58, 0x29, 0x36, {0x1, 0x7, '\x00', [@generic={0x1, 0x2c, "87ea6f5e557b2e050352baee0db88334af868068c51e8839b76aaf38b13156afbf744d604aa889b311c28bce"}, @enc_lim={0x4, 0x1, 0xf}, @pad1, @pad1, @jumbo]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdr={{0xb8, 0x29, 0x39, {0x1d, 0x14, 0x2, 0xe0, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @local, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x30}, @loopback, @rand_addr=' \x01\x00']}}}, @dstopts={{0xf0, 0x29, 0x37, {0xff, 0x1a, '\x00', [@generic={0x6, 0x6, "b8e82a1a3445"}, @ra={0x5, 0x2, 0x758}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb9, "14a45cc56be25e804e8fd0fc1cfac4b7dc05573ab7feb25df501af468f9ccbcc7d1993259fceac1fca84511a258a3553d25675ad1369d98cf2096b982a468f6d6fe676531cd5d2a8c95e3fda0bd7b6df6246e936268ba46b7d1eb8bbe733cffefa9e8ba8deb1f36672b81d39770a5b989413d2730ed630c1dc2b8e04969cfbb3982839b9d5d5a4c845d31c7bfcea3235715b4effec3261a938412387951a8ce75fa45953bb90bbf745f851138621b113e163aaf199aa4ad2b6"}, @jumbo={0xc2, 0x4, 0xec75}]}}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0xc, 0x17, '\x00', [@ra={0x5, 0x2, 0x3ff}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1d}, @generic={0x1, 0x8e, "b7edd07ba17c8e09a2b93a5f542231d99a1102a40ae9e4ec0856d07565d55fb854506de3c6b52fc6803183d5f8640b28b74e1e1bbf606e2210df36ea3897d6f17699cd556e0ce208c660e94c09f80e5471b1d535b1ce79e72c97038a3c2e3e28297b53c828839b3a5d9dd5147dc06a2c3f252a8aa3bbb3a376cdd2e3ebe21cf05126c1c843ba94e3d82db1849158"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x4663, [0x200, 0x7]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x338}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000003c0)="9871ce812a6290ba74e2c2f4d6d2bc26929ad4e93d9a3a675bf7d47f1074e69a23fa6226ef6ab9532ec097a577d32402a6e6975d8b2e7aff451a81349ea59c66e52bb0dfadf1be11fd7d4aa1a5f26785b9eb576d74ec52df1ffb5e6eca1a173bbd71d66ab5a96af99d4e1685da9650b8fd00e754633ad5ab1423022349923f9c4f90b9a6ca563477486f7d150d5adcef6af699d81dd7ab38cb2b788ba8e001d027d80ba0f4724231d9e9a2c9ad8db4fb87c0b6775a52d2291da2e1", 0xbb}], 0x1, &(0x7f00000008c0)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x89, 0xe, 0x2, 0x7b, 0x0, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, @empty, @remote, @remote, @local]}}}, @hopopts={{0x30, 0x29, 0x36, {0x21, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @dstopts_2292={{0x158, 0x29, 0x4, {0x0, 0x27, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @generic={0x72, 0x7b, "291abe75622e83b8f2b6b3fd4b2a2937d09dd6c2742131cc78485548021620e4945b61c608521bf2f84faf1448893b002444ebd3d35301ab3c2ce49eed796b4d61f28f546903962795745c26acde7424ef5622593cfc1bd723cee4d54c7f5b2789b9599f785fec1529368fdbeca6d1d9040cd7b249b451b2ba1019"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x81, 0xa1, "2fed4c110d2ae3cddb15c3c786579f8bd178473a96e5115917cba9745bf6e3c757913d0bc1f49457681b9b967df2db1dbf99a2503eb8859834f56bd69a28a19f3b034a7ef6bb6511aec59e88111fb58fc0cc190b39a968566508fd3cc7e3b2557c709c028be50e68f1cde8ec0edb4ecb351e0ec9113e573fda7e09be5265bd69156d8e9fe088689c49d89d4d36bdb2cd789fc1e2b58e6675b214ab4b0b0fdf3b64"}]}}}, @rthdr={{0x28, 0x29, 0x39, {0xbd, 0x2, 0x0, 0xf7, 0x0, [@mcast2]}}}], 0x238}}, {{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x30}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0x0, @private1}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b00)="643287d7f7643586505fac7ff30cc9bc474d1e16b305e51bee0b8d95b8d131bc578e81cd6c0c6c99ade7f3508038", 0x2e}], 0x1}}, {{&(0x7f0000000b80)={0xa, 0x4e21, 0x80, @private0, 0x3}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000000bc0)="3698a573f411eabfbccd92f210e5d5cd3401be76e73b15aa6f470df1af96c6611cbfa90102fe", 0x26}, {&(0x7f0000000c00)="7216e31a0384fc7e5a0da84f9abaa56cb45caf1a3ef7bf653bfe207c63b8fa38c07775004ab878c50abd2a57350cddc8bbd971a96720c868e0aad20619001ecccf44e74a1fdb5aeabf7cf47bc3bcdcac44c9b42d3d8301f9ca1519f52b12a3c9d2a222d8e29548d97207353ae4784c04b741b1667baee27e84fb384c05abe70049e43de0b794192a77dc78bb7bffe82bf0e13c11a31cbdd362724f065a2af90f72b235fe9af95f5a2aafd6a287194a2d7a8f4a323a732cf5201379e8bdc988e3906792bd3fd0dc5fe67baed4b5d1d29fd6a27bcc542a784e47581db4", 0xdc}, {&(0x7f0000000d00)="e17e28f6f888d0c8c092f8ab287dab6407d4f3a2f1f6bf24b0d630abc2f948408d3c2323b5761d1d01a79122493d94d906358ae18d8e5f7adf45b29ee55a5baf39c31d774ab0bbea9a82fa98c2cca2707fd1f56de1d6e4e1196446c074d62cc843d9699f1032783f7df8a076ec1252a98722354ce486e7be0c403cec917d4ea2eb1536979c194c5f50c4ff3328bf3c51fa09ac202b9734fa05438774c4dac500b4a000", 0xa3}, {&(0x7f0000000dc0)="b26c954bfc9bf92eba3a4d75fbf8e92bc2a4f866dcf76b791078a4c073cc78a8aade65631fe5fa5250c397bd212ad535f9414cd1ee31206bd3ded52be2bfceeb81278a57aaa4039ef19923cb281c11b685b35e76dbee5aa1eec9652cd3fc0d4e2668a6b27adff5acda262932ddd576ec95998507df16c1db82907ff6df8137a9c8f0e10764b1782e05b5da3b24167436af79df56dccd942fc74145f326f2653404a2c62547dedb378a1fc716adc42f35d6f182", 0xb3}, {&(0x7f0000000e80)="a9ad8c5e3d12c40553b7a419e2d7da2dfb8a809b0f51cb1935d69494ff27faa275df072e1c9d054f50698265191ae88b874c22ba5747c450d594d8b19a4ee57c97e0b97511727eac6be30ff904c26ddfaad1b78dbb8e12aa816f7c1a4c3f1d02b4f94d8609925c4518c485ac63755b57bb2856bdbd6e75a009fbaaa3a97b7c15100df51a963adff90c6a7dd3b45407281698b8d79616dc483b7ccdffac858ff7a9ae85f1e2070808d3a6d0b02a3bee966a59891ab94768e4a0290bf9ca1902803a1fa5ea98db67dc6f704cefc434dd829ddb25b00b0e4011bbabd5be10f4804d6e41b7e94641cde15545120e605a", 0xee}, {&(0x7f0000000f80)="65026617e76ef2468fac52ea1e43fb55cbda6b9eef0da64cfffd96837beb1e6b5411943330b4b5fc12dc54ef12839d2744cb0dd83374809052f4953c904943e009b90e64a77f93deafe361abcbb9cee6e2fb5c7e74bf0f00907e733495e6a8493950384606e0608350c4285d4a82e2b5d799fa67252e22dcf9affa12edb60a1506a3", 0x82}, {&(0x7f0000001040)="de41cbff8392ed9f62ecd40acb41d2f40511ba565afa67a9aea4d44d5ef023425b0b91416583163bc8cb02dc996d7896302bfcede8634aa920892663e8d3", 0x3e}, {&(0x7f0000001080)}], 0x8, &(0x7f0000001140)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x29, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x3b, 0x8, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x9ae, [0x2, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0xff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0xb0}}, {{&(0x7f0000001200)={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001280)="e5908a12b1eb5fc403bd5b54c4fbcc2cf9a549fc4ae9b63fccd4eb195ddd73a74bfe018a9ae4c7e352aa87f2aa94057002c2722c38ee44d78101b42a838f55d5988d4a0a0c34172769a70038787d6d3673a94c333f64f9708eae210d8f2be91c34c071ae8e2eaa4d659dacd52be938f7c522889744daa69307f5484d2545848dc26f62a1efc6eea03a6a45841a739cba6954fc8a40b19b790835a268acd58273eaf265c32318b6b942ae3f715dee8366388f9c4fcd1ddc37edb2ecd9ff0e09c8a4797787b313a88f3b66edc7dc7d96a6485011b836098bcb3c7fe6a5b242327151bee2bd773184698b22ac73d2b3", 0xee}, {&(0x7f0000001380)="e8aefbcf84a64b67c26c08e637584d1a8adf065834f5ded15eb77be52f881f9ef09ecb246d96348213b2dca1333d83153fe716dea02ec94e2d2fefc9e043750d62e5707ce07474363dc8caee0060e0dca0b280d285ee426e057ca048efe46769cbbdfebf0847f37c58ba83d59fc138444bdcc0b3cfb6ee06cb3e6b517035a32a9967f1416dde8eaf1169", 0x8a}, {&(0x7f0000001440)="cc3453439648a6456a25063c8a2ff56f7fd5", 0x12}], 0x3, &(0x7f00000014c0)=[@dstopts={{0x1040, 0x29, 0x37, {0x32, 0x204, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x1, [0x8, 0xffffffff, 0xffffffffffff8001]}}, @pad1, @generic={0x0, 0x1000, "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"}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x0, 0x0, 0x0, [@private2, @private2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8000}}], 0x1090}}, {{&(0x7f0000002580)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000003780)=[{&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)}, {&(0x7f0000003600)="07479406b5a59869df7fcd82626ec46dc70708441a5664f3ed429eaf355bbd8462c3e22607bbe736c3346e6f967deb3f336d859e2da7e7096d2a42fe81f81b9070a312ca577fd3e582021f64d69f53e28ad41428df65001368f5f81bf0b7a72553f9dc5a87fd7bdf2ea0985e0a988e1d2411affa424da70c177a1d05ccfc4f62a3ef1b17280a396ea9eeebed83af13511bf1", 0x92}, {&(0x7f00000036c0)="1479e04cb198484bb63875fe2bbff55a8a530b238c6469b4245db4db6ea4cf778305389b531274eec7323f9587196fb3fe3d5dab0acc2879cd8f1550ecc06beb05d6b453eadac62c2ef9a54c724fb8e4c4e9af2f21facc3ec1afc345235a6a1a71bcfe44a78f370fffb4e53d1bc146a923373e1f4c48009bfc0b5efed6381a43d6d2dedd53e8d73b9b", 0x89}], 0x4, &(0x7f00000037c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xa78}}, @rthdr={{0x68, 0x29, 0x39, {0x87, 0xa, 0x1, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x28}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x90}}, @rthdr={{0x68, 0x29, 0x39, {0x5c, 0xa, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x34}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}}}], 0x118}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003900)="34d915f6cdc5f0d3ba94c90098baea347ea535752197848b9431259681d14aebf58bc9d456f175e2502385694889f7778195d5df5562a6d9f793b0866516533d1b7588d2a53087c5fae417365eaa35d631ed44ffdb0b414d6d630697aff3219f0675c748ea2ee39b7f47587c5805288a98451afc", 0x74}, {&(0x7f0000003980)="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", 0xfa}, {&(0x7f0000003a80)="edb9a567a1b8e3ab8fcdf4f0bdd7daa215cdc2f8ac00601f6158db8e854f92ec0339894b18a1cc616721f1e64395abc2fb90b7bac1", 0x35}, {&(0x7f0000003ac0)="11922832e79c108094f55fe99ff38f47533ed2285193bf26387373c9b8289582bd30bc9a8740e70a9f76867b9754531be5fb2acf5ba5cc9392e1622a2fd7229d457555dc1b199a08add965276ab194d9e6a79b2eb10b2e993f2936", 0x5b}, {&(0x7f0000003b40)="b76421b4a168257c6f1cd3ead36245dc752284988a64bfc4742366365e203f8a8b6293aecea9902fd95f98908c98f3fcfead5cc8ce00661e31da51a5281638b9e5f790878f6d63069c64c2d8f8c4e5c4a8d78241c7cddb66635e40c880733109dbc983b8dc7391441c0e07435cfafdc60f076446049dd1c58fa727639cf58b26212b358745758592b63004bba6b98b5c86c536b496f7040e21381c8bff833030d72b0c9cf823d4889487ce3ddd241dc88d134e33312fa8aee5faae7891df31f86fe74d7bc96a6e6c8f1d3533e3167dcdbcc4e47f26", 0xd5}, {&(0x7f0000003c40)="82b6a8e5b872f50ee1afe09d45192eab52a36688b9a85f69efe887b6ad2ea67853254d24bd59720a749b9c104449b0bc825b63e4aa1fdc0149e885be30825158e3cb5f78ae49d70ed99911b83cd97bd8c9d928fcb72b8f1683e8769cbfa52de046f2ec088b83492826f76a89dea8651e2fd4a5f66de8011b11afb2a180ec1543ea675b183556e3", 0x87}, {&(0x7f0000003d00)="d73cb08ee43f506f55e51e", 0xb}, {&(0x7f0000003d40)="c9d37e2e5ab7178b736e8a25c4626d5d8c3fe740297fb080a013f85c262753c626a7788b7a0c5abe56b19e906cba1e", 0x2f}, {&(0x7f0000003d80)="17d0b7e8649589f9e4d6273f5e61f9a5d3018807cac0f8535834097e9da35b892bf67a2eeaf9e4d2b453df329714a4ffb4416c8642490ea4eaf72b8f17dded1e1dc00dac456e7385f03130d114c27048d1d28488aeda6e4d331d427b9ec3c4007ab0e995cbb7f8e81aac0e5c4c0152c7da6f3996dc70e2bbcfd7ad6347718407194159b8c238638242e5f4459d2b29bf953b87977f486b5bbb8b27e602b1b3c85ecb78dabfc7e9f3cb5130f534de010d9f06b890b493b86efedb5c3abdb97f32645309a669855fbd522e7a7b3259bffca361a070535863b6a5b3065ddecc915c814cd8eae7f1ea0bff16beb75e6c0be907b540909de15bf2", 0xf8}, {&(0x7f0000003e80)="5fe038beb62f07f9de13f72319899654527ec6a07d3adf9e934ec8f3c9c2644a5948392b7d5eaf751a4ce7ceff97b42e0645acabbfd030934bf47aa10c3651496a59b83fd986fab7f118f97a136091b0b7ec9ea223d3b4b812ba66a69010f0b46102ebed7ce4c9f5581143613d8b11425f43", 0x72}], 0xa, &(0x7f0000004140)=[@rthdr={{0x38, 0x29, 0x39, {0x11, 0x4, 0x0, 0x46, 0x0, [@dev={0xfe, 0x80, '\x00', 0x43}, @empty]}}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0xff, 0x1b, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x1, [0x0]}, @pad1, @ra, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0xffff, [0xfff]}}, @generic={0x8, 0x9e, "1de34f684c36ef1b53a8fb393c06a105f195d65aff4d51bf35007852890cf3d0b4e03b1c481d328bb35ddf957361b508f841f205cb2ee3d7148a9a08e085637673e55da6aecdb600e82608747af2e87058aff40f21fd5f7e31beec38eef6d278baea6d82d29e3749afe1b88a88110da9abb9678ca5bf5659255b179c64d1ec9200f9af44cc948e99695d789c317f5fb865010611b06faa18a3cd4bcf80e8"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0xc0, 0x29, 0x37, {0x3c, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x2, 0x84, "66fa40de2254f9bc9ee2af291cf11110770e1a4205081e23532994ec7da3b3cade3c98cc6cabc4c7acdde2630490b21f1fef26f0d24a13f314eb68a1c6d64bfb07e327e5f8a45370540e56792bd82ef2bff3000b43abc00eba474a4e999362d093a52946167db3cb880c3c78bb64b479ed17db43e146272a13d3711bb1ccb421af294580"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast1}, r5}}}, @dstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0xa13f}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r6}}}, @rthdrdstopts={{0x158, 0x29, 0x37, {0x0, 0x27, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xff}, @generic={0x8, 0x17, "6852bbf29b300ec0689920bc0714f0891ce4bc04a83b1a"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x7, 0xfc01, [0x7, 0xc, 0x1ff, 0x8000000000000000, 0x6, 0x8000000000000001, 0x9, 0x9, 0xa987]}}, @generic={0x1, 0xc0, "1089d3b3232ed69c96850ffbeeed9d9291bb34712bd6632106ef8ea7dd55fbb4e6345a6b355328e6fd2342a960aad15a6bbf5e5c059b0bc665826eab6e7583521eada6c7f44e13c19466bbbfc0ce621dcd8cd4e9b4900760f76bf03be97690681b295ddb894761303450b87b7ae61bf73c7c77f70c8ae3ced0db5858fbd9e37dbd90da2320f6d7ec9955239e10902660d9d2d78e6f63594fb7229f569005b4ce897d32710a24f195130383d219ff672cbac2bcb3de737b17c8f025defae17243"}]}}}], 0x3e8}}], 0x8, 0x44008004) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r7, 0x89f0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x8041, &(0x7f0000000540)={0xc9, 0x88a8, r8, 0x1, 0x7, 0x6, @random="4dae65c28e22"}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 15.137078721s ago: executing program 0 (id=2522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000800)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @map_fd={0x18, 0x7}, @exit, @alu={0x4, 0x1, 0x9, 0x6, 0x6, 0x30, 0xfffffffffffffff8}, @ringbuf_query, @ldst={0x3, 0x0, 0x2, 0x4, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff7}], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400ffff00000000000000000a407800", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000000000000001"], 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff6, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004004) 5.108274226s ago: executing program 32 (id=2461): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="710505010e030607037e050930ea56cc4e0b4b496d8c34e401eb"], 0x1a) socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 4.083239755s ago: executing program 33 (id=2484): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@bloom_filter={0x1e, 0x0, 0x1f, 0x0, 0x1005}, 0x48) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) read$nci(r3, &(0x7f0000000200)=""/100, 0x64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x31) listen(r8, 0x8) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6558}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 4.053956035s ago: executing program 34 (id=2491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x100}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018000a8014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 32.213562ms ago: executing program 35 (id=2522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000800)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @map_fd={0x18, 0x7}, @exit, @alu={0x4, 0x1, 0x9, 0x6, 0x6, 0x30, 0xfffffffffffffff8}, @ringbuf_query, @ldst={0x3, 0x0, 0x2, 0x4, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff7}], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400ffff00000000000000000a407800", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000000000000001"], 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff6, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004004) 0s ago: executing program 36 (id=2515): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x1, 0x0, 0x5c, @dev={0xfe, 0x80, '\x00', 0x31}, @mcast1, 0x8000, 0x1, 0x8, 0xc0c}}) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@xdp={0x2c, 0x2, r1, 0x17}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0x88, 0x10f, 0x10000, "812d19c0986e57a3ee561eda963f9deb051d609927d9121a9c9adb36ad1f3fe01e5c236433c376e04322f2972b458adbe36a2b1c51c5b420ee92a9baa68785e7bb201361c9c9cccb21654de39bf9d570c6d2d9cc8e2228909370148a68a76c80b0293cbf35d986b2f142225174f470ff390a9643777563"}], 0x88}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x57, 0x5, "e6455e1c04cc96b2bcd0c63dd50fda29e24489640e13a9e8d29806d3371aab40d84da78332731f9e92c7b167bba37411a03bd2bc8051c798301e8a6fe48239d45c678470e1ddd2006a349871889811e27c73e5"}, @ETHTOOL_A_BITSET_MASK={0xfd, 0x5, "c7ae67d2047f91f284eb606a77d5f9d67f6096afc55f2c2824e158152532ee31c11d0f355f8aefa39b26369abbba269a5b069a6b4a26344c5bda33fae08730fb2f473b49cb3af72bbc86f0ca73f2fa56baf3fb0d32db544bde293d7ee9e3bd43a8efe7abc51b28ee068ec97d8dd978be039502a1fa319132a8814546dfee45e4c670856611e8cd872328f47c251aab4d1f6053ea93404d528ac2fbd4ae1330bd9c03e0e835f28ff7fcf7c0e8af4eb2f1c7f507fdbeb2606740a2bfdbd5f88214fd99388b7977e89571c955f3f7381a27f5e9f6c137b68ca35678286cfd51b188cb63585497e0000bf5c66de5c788edd74e78ae714291952532"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20040051}, 0x4c080) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x67fb25b70ce32d1b, &(0x7f0000000540)=0x3, 0x4) r4 = socket(0x18, 0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = accept4$bt_l2cap(r7, 0x0, &(0x7f0000000640), 0x80800) bind$bt_l2cap(r4, &(0x7f0000000680)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) sendmsg(r5, &(0x7f0000000940)={&(0x7f00000006c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}, 0x3}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000740)="929c6499418055f55c81d809c9a03b7e1f480f9137a0c8f5e9d6fd112d94721f2600b970d7ed1671a385e9af6af0055481fc073ce2b9d02a37d464799aa0437b4ee718b974a4ba71de8c1b7252d10c7cc2e4283261ad39aa019404613576784d02e0344c759cd0802afb8facfcc237754182341149fb71183875c92e0318e8848b31ee8a677bff105c0854fcc1d9ad337105892a08c6bac5d138df4dec9b7123f82052676fb2e6a4931486fe726c48e106fed597d7ea60e3ccfa8ed06d8b518aac67aef22265194eb7e182b41c4dc0e9c5463a24bfa3508803", 0xd9}, {&(0x7f0000000840)="4075186a086242bea3dd1346f10df76bf23e5f4e7e79e58199db5e7c043744b1f506c99e807dc0ebfeb77d432a05ceee3836ce6a640c134c2fb249aae954b9f331bf89314057fe9c358e18f062e628af99f8f8cb73bee0b97bccb483566a0ed686b868b4c6c38d9d6214e5d9ffa850c8e6355dd004bd46538505f227a0ff8422a7fdb93ae013437b52d3649c88742fd221ede1d5926016e6902bbe05a241366028e15fb1", 0xa4}], 0x2}, 0x44000804) sendfile(r8, r0, 0x0, 0x8839) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x41, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000009c0)={0x80, 0x6}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000a40)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, r1}, 0xc) r9 = accept4$inet(r5, &(0x7f0000000a80)={0x2, 0x0, @broadcast}, &(0x7f0000000ac0)=0x10, 0x800) sendmsg$sock(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)="9d1bca0b078f3cbd6560bf2038e83b79556f4daa1e3c27c251590478e56215b06bcc88fd180ef06c695688d3dafa4fa978094ec2e27bd982f0a57a1c1ac94d7386855d67940d08d54bd1edd3a69c628a8cf1a1512e35e1ad4be7e9402d2d883c0e2b40d51d892b1fa31c9dc51982ddff2fc0b22e66528c710644d560b2fc606cf999cd4eddf0f06c2c64e3662717f2b991feda4a4f4ebbedc13aed3153d1bf90bc0266649bdc3769418cea4a160e25496f806a06c848e7ffc2232b0b12597c4d55a30834948b59273383f6c963ae85526f30b029", 0xd4}, {&(0x7f0000000c00)="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", 0x1000}], 0x2, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}, 0x20000050) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000001cc0)={0x0, 'rose0\x00', {0x2}, 0xb}) getsockopt(r4, 0x2, 0xfff, 0xfffffffffffffffe, &(0x7f0000001d00)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001d40)={'veth1_macvtap\x00', 0x100}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x18, 0x140b, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r10 = openat$cgroup(r5, &(0x7f0000001e80)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000001ec0)='memory.swap.max\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xb96) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000001f00)={'icmp\x00'}, &(0x7f0000001f40)=0x1e) kernel console output (not intermixed with test programs): ] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.614872][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.632766][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.673196][ T2995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.772611][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.781173][ T2995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.806887][ T2995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.816104][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.862256][ T2995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.037612][ T5875] Bluetooth: hci0: command tx timeout [ 95.051964][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.073740][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.178568][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.191506][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.206035][ T5875] Bluetooth: hci1: command tx timeout [ 95.235549][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.243788][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.258417][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.266682][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.276038][ T5875] Bluetooth: hci3: command tx timeout [ 95.360055][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.366172][ T5875] Bluetooth: hci2: command tx timeout [ 95.436506][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.516474][ T5875] Bluetooth: hci4: command tx timeout [ 95.683917][ T5991] infiniband syz2: set active [ 95.690080][ T5991] infiniband syz2: added bond_slave_1 [ 95.802301][ T5991] RDS/IB: syz2: added [ 95.821704][ T5991] smc: adding ib device syz2 with port count 1 [ 95.889231][ T5991] smc: ib device syz2 port 1 has pnetid [ 95.989049][ T6005] netlink: 'syz.0.8': attribute type 33 has an invalid length. [ 96.030965][ T6005] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 96.097388][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.329395][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.469731][ T6017] nbd: must specify at least one socket [ 96.523759][ T6019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 96.556856][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.771603][ T6024] tipc: Can't bind to reserved service type 1 [ 96.808526][ T6009] Zero length message leads to an empty skb [ 96.817305][ T6024] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13'. [ 97.182704][ T6038] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 97.190748][ T6038] netlink: 'syz.4.18': attribute type 3 has an invalid length. [ 97.206681][ T6038] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18'. [ 97.403954][ T6041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20'. [ 97.447184][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 97.570737][ T6047] tipc: Started in network mode [ 97.595156][ T6047] tipc: Node identity 2a9e40000276, cluster identity 4711 [ 97.622544][ T6047] tipc: Enabled bearer , priority 0 [ 97.633593][ T24] IPVS: starting estimator thread 0... [ 97.659075][ T6050] syzkaller0: entered promiscuous mode [ 97.665570][ T6050] syzkaller0: entered allmulticast mode [ 97.765984][ T6054] IPVS: using max 27 ests per chain, 64800 per kthread [ 97.788976][ T6047] tipc: Resetting bearer [ 97.811122][ T6061] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 97.841245][ T6046] tipc: Resetting bearer [ 97.924020][ T6046] tipc: Disabling bearer [ 98.043589][ T6063] can: request_module (can-proto-4) failed. [ 98.211822][ T6076] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.29'. [ 98.494161][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 98.724100][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.34'. [ 98.735751][ T6087] IPVS: length: 34 != 8 [ 99.153573][ T6101] netlink: 156 bytes leftover after parsing attributes in process `syz.0.38'. [ 99.166484][ T6102] openvswitch: netlink: Missing key (keys=40, expected=80) [ 99.183590][ T6101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.339167][ T6107] tipc: Failed to obtain node identity [ 99.344903][ T6107] tipc: Enabling of bearer rejected, failed to enable media [ 99.362846][ T6107] netlink: 'syz.0.39': attribute type 2 has an invalid length. [ 100.034507][ T6127] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 100.039050][ T9] IPVS: starting estimator thread 0... [ 100.068348][ T6129] pim6reg: entered allmulticast mode [ 100.136107][ T6134] IPVS: using max 25 ests per chain, 60000 per kthread [ 100.293030][ T6138] sctp: [Deprecated]: syz.0.47 (pid 6138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.293030][ T6138] Use struct sctp_sack_info instead [ 100.450270][ T6144] netlink: 'syz.4.49': attribute type 62 has an invalid length. [ 100.531142][ T6149] warning: `syz.2.50' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.761978][ T6078] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 101.119851][ T6173] __nla_validate_parse: 7 callbacks suppressed [ 101.119872][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 101.335792][ T6176] netlink: 76 bytes leftover after parsing attributes in process `syz.3.60'. [ 101.382262][ T6176] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 101.414157][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 101.703397][ T6189] syzkaller0: entered promiscuous mode [ 101.719865][ T6189] syzkaller0: entered allmulticast mode [ 101.784715][ T6197] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 101.803495][ T6199] netlink: 'syz.1.66': attribute type 4 has an invalid length. [ 101.939812][ T6200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.67'. [ 102.043129][ T6209] netlink: 'syz.4.72': attribute type 29 has an invalid length. [ 102.096338][ T6209] netlink: 'syz.4.72': attribute type 29 has an invalid length. [ 102.130529][ T6209] netlink: 500 bytes leftover after parsing attributes in process `syz.4.72'. [ 102.168100][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 102.169452][ T6209] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 102.204815][ T6210] vlan2: entered allmulticast mode [ 102.221537][ T6210] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 102.672759][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'. [ 103.055597][ T6258] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 103.078975][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 103.151637][ T6264] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 103.188938][ T6264] syzkaller0: linktype set to 264 [ 103.227043][ T6267] netlink: zone id is out of range [ 103.232231][ T6267] netlink: zone id is out of range [ 103.274270][ T6267] netlink: zone id is out of range [ 103.309413][ T6267] netlink: zone id is out of range [ 103.321479][ T6267] netlink: zone id is out of range [ 103.354903][ T6267] netlink: del zone limit has 4 unknown bytes [ 103.364537][ T6275] netlink: 'syz.2.92': attribute type 3 has an invalid length. [ 103.427540][ T6262] syzkaller0: entered promiscuous mode [ 103.433319][ T6262] syzkaller0: entered allmulticast mode [ 103.562023][ T6279] netlink: 'syz.0.94': attribute type 10 has an invalid length. [ 103.802815][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.98'. [ 104.182354][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 104.979653][ T6279] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.579128][ T6327] tipc: Started in network mode [ 105.584154][ T6327] tipc: Node identity , cluster identity 4711 [ 105.619062][ T6327] tipc: Failed to obtain node identity [ 105.624628][ T6327] tipc: Enabling of bearer rejected, failed to enable media [ 105.791462][ T6347] raw_sendmsg: syz.0.112 forgot to set AF_INET. Fix it! [ 105.883226][ T6340] syzkaller0: entered promiscuous mode [ 105.889273][ T6340] syzkaller0: entered allmulticast mode [ 106.007280][ T6351] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 106.029030][ T6358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.041642][ T6351] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 106.057901][ T6351] gretap1: entered promiscuous mode [ 106.071399][ T6351] gretap1: entered allmulticast mode [ 106.232360][ T6362] __nla_validate_parse: 2 callbacks suppressed [ 106.232381][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 106.396631][ T6371] trusted_key: syz.0.117 sent an empty control message without MSG_MORE. [ 107.416102][ T6370] netlink: 'syz.2.118': attribute type 33 has an invalid length. [ 107.422588][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 107.595109][ T6382] syzkaller0: entered promiscuous mode [ 107.642304][ T6382] syzkaller0: entered allmulticast mode [ 107.701206][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 107.768813][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.122'. [ 107.845844][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 108.333021][ T6419] net_ratelimit: 1 callbacks suppressed [ 108.333040][ T6419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.541243][ T6424] sctp: [Deprecated]: syz.0.130 (pid 6424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.541243][ T6424] Use struct sctp_sack_info instead [ 109.454733][ T6405] bond0: entered promiscuous mode [ 109.459904][ T6405] bond_slave_0: entered promiscuous mode [ 109.466516][ T6405] bond_slave_1: entered promiscuous mode [ 109.474382][ T6405] bond0: left promiscuous mode [ 109.479305][ T6405] bond_slave_0: left promiscuous mode [ 109.484863][ T6405] bond_slave_1: left promiscuous mode [ 109.648853][ T6436] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 109.746788][ T6441] netlink: 'syz.1.136': attribute type 9 has an invalid length. [ 109.881845][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 110.012122][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 110.128448][ T6463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.170772][ T6463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.210377][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.142'. [ 110.269877][ T6468] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 110.372117][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'. [ 111.008556][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 111.149830][ T6506] netlink: 'syz.3.153': attribute type 7 has an invalid length. [ 111.196368][ T6508] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 111.204389][ T6508] dummy0: entered promiscuous mode [ 111.223956][ T6508] bridge0: port 3(dummy0) entered blocking state [ 111.232853][ T6508] bridge0: port 3(dummy0) entered disabled state [ 111.242989][ T6508] dummy0: entered allmulticast mode [ 111.264473][ T6508] bridge0: port 3(dummy0) entered blocking state [ 111.271274][ T6508] bridge0: port 3(dummy0) entered forwarding state [ 111.340211][ T6519] __nla_validate_parse: 3 callbacks suppressed [ 111.340228][ T6519] netlink: 348 bytes leftover after parsing attributes in process `syz.2.154'. [ 111.345581][ T6518] netlink: 18 bytes leftover after parsing attributes in process `syz.3.157'. [ 111.538628][ T6522] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.159'. [ 111.719049][ T6526] openvswitch: netlink: Key type 6672 is out of range max 32 [ 111.736502][ T4443] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 111.787317][ T6528] : entered promiscuous mode [ 111.793506][ T6531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.818400][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'. [ 111.855605][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 112.123659][ T6554] delete_channel: no stack [ 112.250374][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 112.291276][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 112.365519][ T6566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.172'. [ 112.480928][ T6569] netlink: 388 bytes leftover after parsing attributes in process `syz.4.173'. [ 112.522106][ T6576] netlink: 388 bytes leftover after parsing attributes in process `syz.4.173'. [ 112.912107][ T6613] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 112.925356][ T6613] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 113.103469][ T6618] delete_channel: no stack [ 113.706370][ T6627] infiniband syz!: set active [ 113.711216][ T6627] infiniband syz!: added team_slave_0 [ 113.765951][ T6627] RDS/IB: syz!: added [ 113.770096][ T6627] smc: adding ib device syz! with port count 1 [ 113.777040][ T6627] smc: ib device syz! port 1 has pnetid [ 113.956486][ T6658] bridge_slave_1: left allmulticast mode [ 113.962243][ T6658] bridge_slave_1: left promiscuous mode [ 113.968648][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.984898][ T6658] bridge_slave_0: left allmulticast mode [ 113.992748][ T6658] bridge_slave_0: left promiscuous mode [ 114.000659][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.466446][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.617528][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.549975][ T6730] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 115.664000][ T6733] netlink: 'syz.4.216': attribute type 4 has an invalid length. [ 116.043547][ T6754] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.250385][ T6799] tipc: Started in network mode [ 117.258446][ T6799] tipc: Node identity fa10e1b5429b, cluster identity 4711 [ 117.271783][ T6799] tipc: Enabled bearer , priority 0 [ 117.283612][ T6808] __nla_validate_parse: 10 callbacks suppressed [ 117.283635][ T6808] netlink: 9 bytes leftover after parsing attributes in process `syz.2.239'. [ 117.336210][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 117.353752][ T6811] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.372394][ T6802] tipc: Enabling of bearer rejected, already enabled [ 117.392369][ T6808] gretap0: entered promiscuous mode [ 117.447763][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 117.464214][ T6802] tipc: Resetting bearer [ 118.336785][ T24] tipc: Node number set to 3096175029 [ 119.070305][ T6802] tipc: Disabling bearer [ 119.457494][ T6839] netlink: 236 bytes leftover after parsing attributes in process `syz.2.246'. [ 119.813684][ T6851] syzkaller0: entered promiscuous mode [ 119.821720][ T6851] syzkaller0: entered allmulticast mode [ 119.832286][ T6855] 8021q: VLANs not supported on gre0 [ 121.770667][ T6906] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.261'. [ 122.303527][ T6911] team0 (unregistering): Port device team_slave_0 removed [ 122.342064][ T6911] team0 (unregistering): Port device team_slave_1 removed [ 122.608078][ T6943] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 122.633845][ T6946] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 122.635780][ T6945] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 122.650286][ T6946] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 122.685550][ T6945] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 122.690251][ T6946] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 122.705715][ T6943] netlink: 'syz.0.273': attribute type 11 has an invalid length. [ 122.706501][ T6948] netlink: 'syz.3.274': attribute type 15 has an invalid length. [ 122.730757][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 122.768421][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 122.831545][ T6953] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 122.857038][ T6606] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 122.858066][ T6953] netlink: 172 bytes leftover after parsing attributes in process `syz.4.277'. [ 122.889458][ T6606] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 122.890068][ T6953] netlink: 72 bytes leftover after parsing attributes in process `syz.4.277'. [ 122.911239][ T6606] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 122.914585][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.277'. [ 122.942083][ T6953] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 122.952427][ T6606] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 122.954675][ T6953] netlink: 224 bytes leftover after parsing attributes in process `syz.4.277'. [ 122.982983][ T6956] openvswitch: netlink: Message has 4 unknown bytes. [ 122.992835][ T6957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.278'. [ 123.154493][ T6959] netlink: 156 bytes leftover after parsing attributes in process `syz.0.280'. [ 123.173721][ T6959] netlink: 156 bytes leftover after parsing attributes in process `syz.0.280'. [ 123.239985][ T6968] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 123.307339][ T6973] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 123.319010][ T6968] bond1 (unregistering): Released all slaves [ 123.370071][ T6974] ip6tnl1: entered promiscuous mode [ 123.385948][ T6974] ip6tnl1: entered allmulticast mode [ 123.463546][ T6976] tipc: Enabling of bearer rejected, media not registered [ 123.502677][ T6979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.654954][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.723851][ T6982] bond0: (slave rose0): Enslaving as an active interface with an up link [ 123.916785][ T6994] syzkaller0: create flow: hash 4267766101 index 1 [ 124.223764][ T6985] syzkaller0: delete flow: hash 4267766101 index 1 [ 124.234115][ T7018] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 124.309373][ T7018] netlink: 'syz.3.296': attribute type 83 has an invalid length. [ 124.795789][ T5875] Bluetooth: hci4: command tx timeout [ 125.973875][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 125.997414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.677346][ T7097] kthread_run failed with err -4 [ 126.741086][ T7096] team0: Device gtp0 is of different type [ 127.294782][ T6592] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 128.095957][ T7163] __nla_validate_parse: 2 callbacks suppressed [ 128.095974][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 128.129552][ T7167] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 128.193200][ T7169] netlink: 'syz.1.328': attribute type 12 has an invalid length. [ 128.263435][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'. [ 128.266911][ T7171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.282068][ T7171] bond2: (slave bond3): making interface the new active one [ 128.292822][ T7171] bond2: (slave bond3): Enslaving as an active interface with an up link [ 128.304893][ T7173] netlink: 'syz.3.330': attribute type 29 has an invalid length. [ 128.332076][ T7175] netlink: 'syz.3.330': attribute type 29 has an invalid length. [ 128.355335][ T7173] netlink: 500 bytes leftover after parsing attributes in process `syz.3.330'. [ 128.374286][ T7167] bond2: entered promiscuous mode [ 128.382012][ T7167] bond3: entered promiscuous mode [ 128.382716][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.392136][ T7167] bond2: entered allmulticast mode [ 128.399697][ T7167] bond3: entered allmulticast mode [ 128.406635][ T7167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.415928][ T7173] unsupported nla_type 58 [ 128.448062][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.470032][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.496674][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.518101][ T7173] tipc: Started in network mode [ 128.518186][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.534786][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.535587][ T7173] tipc: Node identity ac1414aa, cluster identity 4711 [ 128.542485][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.557458][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.564198][ T7173] tipc: Enabled bearer , priority 10 [ 128.565063][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.578667][ T7180] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.603516][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 128.917519][ T7204] netlink: 104 bytes leftover after parsing attributes in process `syz.4.341'. [ 128.945973][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 128.973731][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 128.995958][ T7208] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 129.016568][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 129.057416][ T7213] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 129.234274][ T7213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.248278][ T7213] bond1: (slave bond2): making interface the new active one [ 129.260743][ T7213] bond1: (slave bond2): Enslaving as an active interface with an up link [ 129.281459][ T7208] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 129.282962][ T7231] xt_l2tp: missing protocol rule (udp|l2tpip) [ 129.676986][ T48] tipc: Node number set to 2886997162 [ 129.727636][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 129.756076][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.355'. [ 129.885121][ T7265] lo: entered allmulticast mode [ 129.899521][ T7265] lo: left allmulticast mode [ 129.929950][ T7269] gretap0: entered promiscuous mode [ 131.206338][ T7331] IPv6: Can't replace route, no match found [ 132.392699][ T7388] tipc: Enabling of bearer rejected, media not registered [ 133.047937][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.187221][ T7431] __nla_validate_parse: 12 callbacks suppressed [ 133.187243][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 133.278559][ T7431] tipc: Started in network mode [ 133.304518][ T7431] tipc: Node identity beeba018a457, cluster identity 4711 [ 133.330916][ T7431] tipc: Enabled bearer , priority 0 [ 133.363178][ T7439] syzkaller0: entered promiscuous mode [ 133.406056][ T7439] syzkaller0: entered allmulticast mode [ 133.424526][ T7431] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 133.507550][ T7431] tipc: Resetting bearer [ 133.529606][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 133.551983][ T7430] tipc: Resetting bearer [ 133.552249][ T7451] net_ratelimit: 56 callbacks suppressed [ 133.552263][ T7451] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 133.648979][ T7457] netlink: 'syz.3.411': attribute type 1 has an invalid length. [ 133.661888][ T7430] tipc: Disabling bearer [ 133.687727][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'. [ 133.765338][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 133.799196][ T7460] tipc: Enabling of bearer rejected, failed to enable media [ 133.827059][ T7462] netlink: 'syz.4.413': attribute type 39 has an invalid length. [ 134.047549][ T7471] netlink: 244 bytes leftover after parsing attributes in process `syz.2.417'. [ 134.397387][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 134.517763][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 134.577870][ T7489] Bluetooth: MGMT ver 1.23 [ 134.640016][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.426'. [ 134.654045][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 134.797275][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 134.980924][ T7519] openvswitch: netlink: Unknown nsh attribute 0 [ 134.987480][ T7519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.999697][ T7519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.101005][ T7521] tap0: tun_chr_ioctl cmd 1074025677 [ 135.106663][ T7521] tap0: linktype set to 65534 [ 135.218271][ T51] block nbd2: Receive control failed (result -32) [ 135.219826][ T5875] block nbd0: Receive control failed (result -32) [ 135.225083][ T5187] block nbd3: Receive control failed (result -32) [ 135.231825][ T7525] block nbd7: Receive control failed (result -32) [ 135.233276][ T7525] block nbd8: Receive control failed (result -32) [ 135.240250][ T7516] block nbd5: Receive control failed (result -32) [ 135.261042][ T5866] block nbd1: Receive control failed (result -32) [ 135.265599][ T5874] block nbd4: Receive control failed (result -32) [ 135.269756][ T7522] block nbd6: Receive control failed (result -32) [ 135.492016][ T7546] dvmrp0: entered allmulticast mode [ 135.513883][ T7546] dvmrp0: left allmulticast mode [ 135.626570][ T7545] netlink: 'syz.2.438': attribute type 2 has an invalid length. [ 135.677076][ T7545] syz.2.438 (7545) used greatest stack depth: 17864 bytes left [ 135.973646][ T7570] delete_channel: no stack [ 136.143427][ T7581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.231068][ T7587] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 136.256269][ T7590] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 136.490120][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.502618][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.512943][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.520950][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.582891][ T7609] veth1_macvtap: left promiscuous mode [ 136.600797][ T7609] macsec0: entered promiscuous mode [ 136.610347][ T7609] macsec0: entered allmulticast mode [ 136.652625][ T7610] veth1_macvtap: entered promiscuous mode [ 136.678856][ T7610] veth1_macvtap: entered allmulticast mode [ 136.705055][ T7610] macsec0: left promiscuous mode [ 136.714924][ T7610] macsec0: left allmulticast mode [ 136.724793][ T7610] veth1_macvtap: left allmulticast mode [ 137.527670][ T7645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 137.881851][ T7656] syzkaller0: entered promiscuous mode [ 137.901171][ T7656] syzkaller0: entered allmulticast mode [ 137.986383][ T7664] vlan2: entered promiscuous mode [ 138.477797][ T7684] __nla_validate_parse: 49 callbacks suppressed [ 138.477820][ T7684] netlink: 277 bytes leftover after parsing attributes in process `syz.1.478'. [ 138.523183][ T7693] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 138.616642][ T7696] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.478'. [ 138.708254][ T7698] netlink: 96 bytes leftover after parsing attributes in process `syz.0.480'. [ 157.355851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.804399][ T7708] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.889621][ T7702] tipc: Invalid UDP bearer configuration [ 157.889690][ T7702] tipc: Enabling of bearer rejected, failed to enable media [ 157.907695][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'. [ 158.304010][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.492'. [ 158.402051][ T7734] tipc: Enabled bearer , priority 0 [ 158.432938][ T7736] tipc: Enabling of bearer rejected, already enabled [ 158.450752][ T7733] syzkaller0: entered promiscuous mode [ 158.462389][ T7739] netlink: 'syz.1.494': attribute type 32 has an invalid length. [ 158.470873][ T7733] syzkaller0: entered allmulticast mode [ 158.522151][ T7734] netlink: 108 bytes leftover after parsing attributes in process `syz.3.493'. [ 158.553774][ T7734] netlink: 108 bytes leftover after parsing attributes in process `syz.3.493'. [ 158.585186][ T7734] netlink: 84 bytes leftover after parsing attributes in process `syz.3.493'. [ 158.603673][ T7733] netlink: 108 bytes leftover after parsing attributes in process `syz.3.493'. [ 158.614860][ T7733] netlink: 108 bytes leftover after parsing attributes in process `syz.3.493'. [ 158.625095][ T7733] netlink: 84 bytes leftover after parsing attributes in process `syz.3.493'. [ 158.682336][ T7733] tipc: Resetting bearer [ 158.701560][ T7733] tipc: Disabling bearer [ 158.780854][ T7751] Illegal XDP return value 1772507209 on prog (id 175) dev N/A, expect packet loss! [ 158.901389][ T7758] block nbd9: Unsupported socket: shutdown callout must be supported. [ 159.640735][ T7773] only policy match revision 0 supported [ 159.640759][ T7773] unable to load match [ 159.786866][ T7786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.832391][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 159.961989][ T7801] openvswitch: netlink: Key type 29 is not supported [ 160.001188][ T7802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 160.273442][ T7822] netlink: 'syz.4.513': attribute type 4 has an invalid length. [ 161.193681][ T7859] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 161.336496][ T7865] netlink: 'syz.0.523': attribute type 7 has an invalid length. [ 161.355720][ T7865] netlink: 'syz.0.523': attribute type 8 has an invalid length. [ 161.383058][ T7865] netlink: 'syz.0.523': attribute type 7 has an invalid length. [ 161.395924][ T7865] netlink: 'syz.0.523': attribute type 8 has an invalid length. [ 161.678000][ T7876] syzkaller0: create flow: hash 4267766101 index 1 [ 161.935917][ T7869] syzkaller0: delete flow: hash 4267766101 index 1 [ 162.170196][ T7912] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 163.451290][ T7918] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 163.528098][ T7918] bond5: entered promiscuous mode [ 163.533633][ T7918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.536375][ T7922] __nla_validate_parse: 6 callbacks suppressed [ 163.536391][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 163.612928][ T7923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.642237][ T7923] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 163.665329][ T7923] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 163.735034][ T7923] bond5: (slave wireguard0): making interface the new active one [ 163.747680][ T7923] wireguard0: entered promiscuous mode [ 163.790463][ T7923] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 163.924751][ T7918] vlan2: entered promiscuous mode [ 163.955602][ T7918] bridge0: entered promiscuous mode [ 163.967793][ T7916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.023666][ T7941] netlink: 'syz.1.543': attribute type 12 has an invalid length. [ 164.031549][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.544'. [ 164.042867][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.544'. [ 164.344551][ T7955] netlink: 'syz.3.547': attribute type 25 has an invalid length. [ 164.353364][ T7956] netlink: 'syz.3.547': attribute type 25 has an invalid length. [ 164.541112][ T5943] IPVS: starting estimator thread 0... [ 164.620772][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 164.630036][ T7971] netlink: 'syz.2.551': attribute type 7 has an invalid length. [ 164.638272][ T7971] netlink: 'syz.2.551': attribute type 8 has an invalid length. [ 164.646707][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 164.655702][ T7964] IPVS: using max 24 ests per chain, 57600 per kthread [ 164.702122][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 164.708267][ T7971] pim6reg: entered allmulticast mode [ 164.747239][ T7971] pim6reg: left allmulticast mode [ 164.909222][ T7979] tipc: Enabling of bearer rejected, failed to enable media [ 165.094556][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 165.115868][ T7982] netlink: 'syz.3.555': attribute type 3 has an invalid length. [ 165.146614][ T7982] Bluetooth: MGMT ver 1.23 [ 165.162163][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.226819][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.261501][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.297653][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.333255][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.375885][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.435990][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.444435][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.486392][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.551426][ T7999] netlink: 'syz.3.559': attribute type 11 has an invalid length. [ 165.565752][ T7986] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 165.590408][ T7999] netlink: 224 bytes leftover after parsing attributes in process `syz.3.559'. [ 166.024905][ T8019] netlink: 'syz.3.565': attribute type 10 has an invalid length. [ 166.054248][ T8019] team0: Port device dummy0 added [ 166.160788][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 166.179463][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 167.197396][ T8060] only policy match revision 0 supported [ 167.197418][ T8060] unable to load match [ 167.474512][ T8080] netlink: 'syz.4.581': attribute type 21 has an invalid length. [ 168.007470][ T8110] netem: change failed [ 168.026931][ T8110] netem: change failed [ 194.481791][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.293984][ T8120] netlink: 'syz.4.595': attribute type 10 has an invalid length. [ 199.313196][ T8123] __nla_validate_parse: 6 callbacks suppressed [ 199.313215][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 199.332059][ T8120] net_ratelimit: 23 callbacks suppressed [ 199.332079][ T8120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.396564][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.595'. [ 199.506887][ T8141] netlink: 'syz.2.599': attribute type 10 has an invalid length. [ 199.514741][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.599'. [ 199.553334][ T8141] team0: Port device geneve0 added [ 199.562843][ T8145] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20003 [ 199.754238][ T8152] netlink: 'syz.4.603': attribute type 21 has an invalid length. [ 199.768441][ T8152] netlink: 128 bytes leftover after parsing attributes in process `syz.4.603'. [ 199.778351][ T8152] netlink: 3 bytes leftover after parsing attributes in process `syz.4.603'. [ 199.973973][ T8167] netlink: 'syz.2.608': attribute type 7 has an invalid length. [ 199.991502][ T8167] : entered promiscuous mode [ 199.997187][ T8167] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 200.051604][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 200.302494][ T8182] sctp: Trying to GSO but underlying device doesn't support it. [ 200.327405][ T8183] netlink: 148 bytes leftover after parsing attributes in process `syz.3.611'. [ 200.419545][ T8192] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.614'. [ 200.543669][ T8199] netlink: 112 bytes leftover after parsing attributes in process `syz.3.618'. [ 200.662175][ T8199] syzkaller0: entered promiscuous mode [ 200.678124][ T8199] syzkaller0: entered allmulticast mode [ 200.709828][ T8200] syzkaller0: entered promiscuous mode [ 200.725890][ T8200] syzkaller0: entered allmulticast mode [ 200.868561][ T8221] netem: incorrect gi model size [ 200.874167][ T8221] netem: change failed [ 200.902448][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 201.492507][ T8253] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 201.938207][ T8277] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 202.115300][ T8290] nftables ruleset with unbound set [ 202.359299][ T8305] netlink: 'syz.2.654': attribute type 3 has an invalid length. [ 202.463236][ T8314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.780440][ T8325] tipc: Enabled bearer , priority 0 [ 202.829108][ T8325] tipc: Resetting bearer [ 202.874181][ T8323] tipc: Disabling bearer [ 203.422042][ T8355] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 203.437864][ T8355] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 203.445783][ T8355] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 203.491384][ T8361] team0: Device gtp0 is of different type [ 203.611372][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.759932][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.876317][ T8373] openvswitch: netlink: Message has 5 unknown bytes. [ 203.898546][ T8377] tipc: Enabled bearer , priority 0 [ 203.920674][ T8377] syzkaller0: entered promiscuous mode [ 203.956759][ T8377] syzkaller0: entered allmulticast mode [ 203.981362][ T8377] tipc: Resetting bearer [ 204.009461][ T8374] tipc: Resetting bearer [ 204.054794][ T8374] tipc: Disabling bearer [ 204.808139][ T8409] __nla_validate_parse: 17 callbacks suppressed [ 204.808220][ T8409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.684'. [ 204.867888][ T8414] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 204.897622][ T8414] netlink: 'syz.4.684': attribute type 2 has an invalid length. [ 204.907439][ T8415] netlink: 9 bytes leftover after parsing attributes in process `syz.1.686'. [ 204.916274][ T8406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.919162][ T8416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.687'. [ 204.948708][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.684'. [ 204.970857][ T8413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.687'. [ 205.016614][ T8419] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.688'. [ 205.095515][ T8419] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 205.107496][ T8419] openvswitch: netlink: Message has 6332 unknown bytes. [ 205.234661][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 205.260475][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 205.287962][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.690'. [ 205.670072][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.699'. [ 205.763521][ T8463] netlink: 'syz.2.701': attribute type 1 has an invalid length. [ 205.872501][ T8463] bond7 (unregistering): Released all slaves [ 205.926001][ T8468] unsupported nlmsg_type 40 [ 205.932142][ T8474] netlink: 'syz.2.701': attribute type 21 has an invalid length. [ 205.973920][ T8470] ip6tnl1: entered promiscuous mode [ 206.010486][ T8470] ip6tnl1: entered allmulticast mode [ 206.012846][ T8480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 206.054882][ T8480] tipc: Enabled bearer , priority 0 [ 206.130605][ T8464] tipc: Disabling bearer [ 206.721922][ T8529] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 206.741729][ T8529] dummy0: entered promiscuous mode [ 206.751193][ T8529] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 206.929835][ T8539] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 206.959871][ T8539] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 206.980105][ T8539] netlink: 'syz.0.724': attribute type 2 has an invalid length. [ 208.336699][ T8601] netlink: 'syz.3.744': attribute type 1 has an invalid length. [ 208.421386][ T8601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.469569][ T8605] bond1: (slave veth5): Enslaving as an active interface with a down link [ 208.498977][ T8602] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 208.515674][ T8602] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 208.542058][ T8609] bond1: (slave veth7): Enslaving as an active interface with a down link [ 208.597057][ T8601] bond1: (slave veth0_to_bond): making interface the new active one [ 208.610549][ T8601] veth0_to_bond: entered promiscuous mode [ 208.617022][ T8601] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 208.648873][ T8612] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 209.011451][ T8629] bond0: entered promiscuous mode [ 209.029787][ T8629] bond_slave_0: entered promiscuous mode [ 209.037881][ T8629] bond_slave_1: entered promiscuous mode [ 209.057167][ T8629] bond0: left promiscuous mode [ 209.068235][ T8629] bond_slave_0: left promiscuous mode [ 209.082404][ T8629] bond_slave_1: left promiscuous mode [ 210.079907][ T8666] __nla_validate_parse: 81 callbacks suppressed [ 210.079925][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 210.103305][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.766'. [ 210.348706][ T8678] tipc: Enabled bearer , priority 0 [ 210.386905][ T8678] syzkaller0: entered promiscuous mode [ 210.392436][ T8678] syzkaller0: entered allmulticast mode [ 210.449800][ T8680] netlink: 'syz.4.770': attribute type 1 has an invalid length. [ 210.476248][ T5187] Bluetooth: hci4: command 0x0405 tx timeout [ 210.570657][ T8687] netlink: 'syz.3.774': attribute type 21 has an invalid length. [ 210.583333][ T8678] tipc: Resetting bearer [ 210.591216][ T8687] netlink: 156 bytes leftover after parsing attributes in process `syz.3.774'. [ 210.624035][ T8675] tipc: Resetting bearer [ 210.692413][ T8675] tipc: Disabling bearer [ 210.751771][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.775'. [ 211.195131][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 211.363026][ T8724] delete_channel: no stack [ 211.730974][ T8751] tipc: Enabled bearer , priority 0 [ 211.853131][ T8761] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 211.861794][ T8761] netlink: 'syz.3.796': attribute type 4 has an invalid length. [ 211.870249][ T8761] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.796'. [ 211.931596][ T7535] Bluetooth: hci2: command 0x0406 tx timeout [ 212.046866][ T5187] Bluetooth: hci3: command 0x0406 tx timeout [ 212.054523][ T7535] Bluetooth: hci1: command 0x0406 tx timeout [ 212.341928][ T8751] syzkaller0: entered promiscuous mode [ 212.348266][ T8751] syzkaller0: entered allmulticast mode [ 212.387351][ T8774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.408099][ T8774] batadv_slave_0: entered promiscuous mode [ 212.424351][ T7283] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.466117][ T7283] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.544451][ T8751] tipc: Resetting bearer [ 212.593091][ T8751] tipc: Disabling bearer [ 212.631689][ T7283] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.658591][ T7283] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.105800][ T8817] netlink: 'syz.0.810': attribute type 58 has an invalid length. [ 213.114725][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.810'. [ 213.378657][ T8828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.812'. [ 213.556008][ T8832] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 213.638083][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'. [ 213.671376][ T8836] netlink: 'syz.4.816': attribute type 29 has an invalid length. [ 213.690066][ T8836] netlink: 'syz.4.816': attribute type 29 has an invalid length. [ 213.716419][ T8836] netlink: 500 bytes leftover after parsing attributes in process `syz.4.816'. [ 214.174100][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.192103][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.220453][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.240576][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.262028][ T8857] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 214.268830][ T8857] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 215.137101][ T8899] __nla_validate_parse: 9 callbacks suppressed [ 215.137123][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 215.153072][ T8900] tipc: Enabled bearer , priority 0 [ 215.181092][ T8900] syzkaller0: entered promiscuous mode [ 215.187651][ T8900] syzkaller0: entered allmulticast mode [ 215.227562][ T8900] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 215.258780][ T8901] tipc: Resetting bearer [ 215.330979][ T8900] tipc: Resetting bearer [ 215.375639][ T8900] tipc: Disabling bearer [ 215.473897][ T8912] netlink: 56 bytes leftover after parsing attributes in process `syz.1.839'. [ 215.488570][ T8912] netlink: 56 bytes leftover after parsing attributes in process `syz.1.839'. [ 215.574089][ T8916] erspan1: entered allmulticast mode [ 215.648579][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 215.692945][ T8919] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 215.741172][ T8919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.844'. [ 216.195747][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.851'. [ 216.219366][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 216.386440][ T8956] netlink: 96 bytes leftover after parsing attributes in process `syz.1.856'. [ 216.458769][ T8954] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 216.970306][ T8985] tipc: Enabled bearer , priority 0 [ 216.980583][ T8985] syzkaller0: entered promiscuous mode [ 216.987683][ T8985] syzkaller0: entered allmulticast mode [ 217.042625][ T8985] tipc: Resetting bearer [ 217.065327][ T8984] tipc: Resetting bearer [ 217.096114][ T8992] sctp: [Deprecated]: syz.4.869 (pid 8992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.096114][ T8992] Use struct sctp_sack_info instead [ 217.141014][ T8984] tipc: Disabling bearer [ 217.247331][ T8998] IPv6: addrconf: prefix option has invalid lifetime [ 217.280713][ T8998] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.871'. [ 217.408339][ T7529] block nbd9: Receive control failed (result -32) [ 217.628263][ T9022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.880'. [ 217.655210][ T9026] gre0: entered promiscuous mode [ 217.719066][ T9027] tipc: Enabling of bearer rejected, failed to enable media [ 218.290038][ T9063] lo speed is unknown, defaulting to 1000 [ 218.337652][ T9063] lo speed is unknown, defaulting to 1000 [ 218.367769][ T9063] lo speed is unknown, defaulting to 1000 [ 218.724351][ T7287] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 218.751375][ T7287] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 218.821301][ T7287] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 218.850434][ T7287] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 219.008509][ T48] lo speed is unknown, defaulting to 1000 [ 219.020244][ T9063] infiniband syz0: set down [ 219.030382][ T9063] infiniband syz0: added lo [ 219.046358][ T9063] syz0: rxe_create_cq: returned err = -12 [ 219.053338][ T9103] openvswitch: netlink: Message has 8 unknown bytes. [ 219.059228][ T9063] infiniband syz0: Couldn't create ib_mad CQ [ 219.076275][ T9063] infiniband syz0: Couldn't open port 1 [ 219.102617][ T9105] netlink: 'syz.1.901': attribute type 5 has an invalid length. [ 219.164961][ T9063] RDS/IB: syz0: added [ 219.184574][ T9063] smc: adding ib device syz0 with port count 1 [ 219.206695][ T9063] smc: ib device syz0 port 1 has pnetid [ 219.219251][ T48] lo speed is unknown, defaulting to 1000 [ 219.229810][ T9063] lo speed is unknown, defaulting to 1000 [ 220.603544][ T9125] __nla_validate_parse: 6 callbacks suppressed [ 220.603566][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'. [ 220.659021][ T9126] IPVS: rr: FWM 3 0x00000003 - no destination available [ 220.670906][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'. [ 220.879844][ T9063] lo speed is unknown, defaulting to 1000 [ 220.923197][ T9126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.011861][ T6592] veth0_to_bond: left promiscuous mode [ 221.209021][ T9129] bridge0: port 3(dummy0) entered disabled state [ 221.215672][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.224292][ T9129] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.286696][ T9129] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 221.408277][ T9144] veth0: entered promiscuous mode [ 221.489689][ T9142] syzkaller0: entered promiscuous mode [ 221.502660][ T9142] syzkaller0: entered allmulticast mode [ 221.528934][ T9063] lo speed is unknown, defaulting to 1000 [ 221.584757][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 221.733969][ T9157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.915'. [ 221.746464][ T9141] veth0: left promiscuous mode [ 221.844220][ T9159] tipc: Enabled bearer , priority 0 [ 221.887390][ T9159] syzkaller0: entered allmulticast mode [ 221.888751][ T9161] netlink: 696 bytes leftover after parsing attributes in process `syz.3.917'. [ 222.011305][ T9166] syzkaller0: entered promiscuous mode [ 222.018674][ T9166] syzkaller0: entered allmulticast mode [ 222.169558][ T9158] tipc: Disabling bearer [ 222.318032][ T9063] lo speed is unknown, defaulting to 1000 [ 222.391844][ T9176] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 222.516321][ T9186] netlink: 11 bytes leftover after parsing attributes in process `syz.3.924'. [ 222.543146][ T9180] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 222.651232][ T9184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.660641][ T9184] bond2: (slave bond3): making interface the new active one [ 222.668709][ T9184] bond2: (slave bond3): Enslaving as an active interface with an up link [ 222.690620][ T9187] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.703530][ T9187] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 222.903806][ T9200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 222.919916][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 222.924431][ T9063] lo speed is unknown, defaulting to 1000 [ 223.103862][ T9209] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 223.135925][ T9211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'. [ 223.157487][ T9208] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 223.185818][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 223.239168][ T9217] netlink: 'syz.1.934': attribute type 23 has an invalid length. [ 223.457380][ T9223] openvswitch: netlink: Message has -1 unknown bytes. [ 223.581887][ T9236] tipc: Enabled bearer , priority 0 [ 223.591246][ T9238] netlink: 'syz.2.940': attribute type 6 has an invalid length. [ 223.604251][ T9236] syzkaller0: entered promiscuous mode [ 223.610729][ T9236] syzkaller0: entered allmulticast mode [ 223.679922][ T9236] tipc: Resetting bearer [ 223.738728][ T9235] tipc: Resetting bearer [ 223.786206][ T9235] tipc: Disabling bearer [ 223.976241][ T9257] sch_tbf: burst 0 is lower than device lo mtu (24) ! [ 224.280981][ T9268] netlink: 'syz.4.949': attribute type 8 has an invalid length. [ 224.416556][ T9280] netlink: 'syz.4.953': attribute type 30 has an invalid length. [ 224.441805][ T9284] netlink: 'syz.4.953': attribute type 30 has an invalid length. [ 224.600664][ T9295] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 224.841330][ T9300] tap0: tun_chr_ioctl cmd 2148553947 [ 225.212361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.456749][ T9329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 225.467428][ T9329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 225.479426][ T9329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.639247][ T9329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 225.654714][ T9329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 225.666380][ T9329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.686040][ T9348] __nla_validate_parse: 7 callbacks suppressed [ 225.686059][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 225.706355][ T9348] nbd: nbd0 already in use [ 225.723094][ T9348] netlink: 11 bytes leftover after parsing attributes in process `syz.1.974'. [ 225.746902][ T9350] netlink: 11 bytes leftover after parsing attributes in process `syz.4.976'. [ 225.754264][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 225.771003][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 225.809999][ T9347] veth0: entered promiscuous mode [ 225.857197][ T9329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 225.868774][ T9329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 225.882425][ T9329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.900070][ T5943] IPVS: starting estimator thread 0... [ 225.911618][ T9346] veth0: left promiscuous mode [ 225.995849][ T9359] IPVS: using max 24 ests per chain, 57600 per kthread [ 226.016962][ T9329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 226.031798][ T9329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 226.044552][ T9329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.089800][ T9362] netlink: 'syz.4.981': attribute type 6 has an invalid length. [ 226.228230][ T9372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.229305][ T9369] vlan3: entered promiscuous mode [ 226.408753][ T6591] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.448874][ T6591] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 226.477914][ T6591] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.542678][ T6591] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.574141][ T6591] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 226.584381][ T6591] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.639583][ T7286] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.649639][ T7286] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 226.664041][ T7286] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.673265][ T9396] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 226.703640][ T7286] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.727941][ T7286] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 226.746205][ T7286] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.810675][ T9404] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.865071][ T9396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.009429][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 227.019565][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 227.153903][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 227.183359][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 227.227739][ T9421] netlink: 'syz.0.997': attribute type 39 has an invalid length. [ 227.354172][ T9426] netlink: 'syz.2.998': attribute type 10 has an invalid length. [ 227.484371][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 227.507059][ T9431] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 227.618238][ T9431] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 227.954300][ T9457] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 228.021108][ T9459] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.029225][ T9459] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.070441][ T9463] openvswitch: netlink: IPv4 tun info is not correct [ 228.087502][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.094834][ T9459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.102547][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.109787][ T9459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.192488][ T9459] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 228.202691][ T9465] bridge_slave_1: left allmulticast mode [ 228.213365][ T9465] bridge_slave_1: left promiscuous mode [ 228.220930][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.237268][ T9465] bridge_slave_0: left allmulticast mode [ 228.243210][ T9465] bridge_slave_0: left promiscuous mode [ 228.250697][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.301738][ T9465] bond0: (slave bridge0): Releasing backup interface [ 228.424293][ T9471] tipc: Started in network mode [ 228.433316][ T9471] tipc: Node identity 26b71547fc27, cluster identity 4711 [ 228.444865][ T9471] tipc: Enabled bearer , priority 0 [ 228.501953][ T9471] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 228.562492][ T9480] syzkaller0: entered promiscuous mode [ 228.574731][ T9480] syzkaller0: entered allmulticast mode [ 228.594391][ T9470] tipc: Resetting bearer [ 228.657200][ T9470] tipc: Disabling bearer [ 228.894319][ T30] audit: type=1800 audit(1757555621.995:2): pid=9503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1018" name="memory.events" dev="tmpfs" ino=1067 res=0 errno=0 [ 229.053543][ T9507] ve: renamed from veth0_macvtap [ 229.635110][ T9537] validate_nla: 3 callbacks suppressed [ 229.635131][ T9537] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 229.851155][ T9513] lo speed is unknown, defaulting to 1000 [ 230.139489][ T9560] tipc: Enabling of bearer rejected, failed to enable media [ 230.154529][ T9561] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 230.212089][ T9562] bond1 (unregistering): Released all slaves [ 230.263326][ T9561] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 230.739188][ T9586] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 230.853617][ T9585] __nla_validate_parse: 12 callbacks suppressed [ 230.853637][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 230.882410][ T9585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1045'. [ 230.927119][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 230.977455][ T9589] bond2: (slave gretap1): making interface the new active one [ 231.004414][ T9589] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 231.023565][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 231.043713][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 231.235146][ T9597] openvswitch: netlink: Key type 16144 is out of range max 32 [ 231.480060][ T9612] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1055'. [ 231.606709][ T9620] sctp: [Deprecated]: syz.3.1057 (pid 9620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.606709][ T9620] Use struct sctp_sack_info instead [ 232.348513][ T9649] syzkaller0: entered promiscuous mode [ 232.354148][ T9649] syzkaller0: entered allmulticast mode [ 232.412027][ T9671] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.510855][ T9677] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.515044][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'. [ 232.579573][ T9679] netlink: 'syz.1.1074': attribute type 24 has an invalid length. [ 234.051764][ T9693] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1078'. [ 234.244494][ T9707] netlink: 'syz.3.1084': attribute type 3 has an invalid length. [ 234.271313][ T9711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1082'. [ 234.281602][ T9707] netlink: 'syz.3.1084': attribute type 3 has an invalid length. [ 234.303955][ T9714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.432141][ T9722] netlink: 'syz.2.1086': attribute type 11 has an invalid length. [ 234.441606][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 234.455269][ T9722] netlink: 'syz.2.1086': attribute type 11 has an invalid length. [ 234.522479][ T9721] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 234.712193][ T9728] netlink: 'syz.4.1088': attribute type 4 has an invalid length. [ 236.202485][ T9725] netlink: 'syz.2.1086': attribute type 11 has an invalid length. [ 236.204508][ T9728] `: renamed from bond0 [ 236.210451][ T9725] netlink: 'syz.2.1086': attribute type 11 has an invalid length. [ 236.210469][ T9725] __nla_validate_parse: 3 callbacks suppressed [ 236.210479][ T9725] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1086'. [ 236.242934][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 236.254186][ T9748] ve: renamed from veth0_vlan (while UP) [ 236.775663][ T9776] netlink: 'syz.0.1102': attribute type 7 has an invalid length. [ 236.777107][ T9778] netlink: 'syz.4.1099': attribute type 1 has an invalid length. [ 236.821938][ T9780] netlink: 'syz.2.1101': attribute type 5 has an invalid length. [ 236.868269][ T9778] bond0: entered promiscuous mode [ 236.873897][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.941862][ T9790] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 237.406415][ T9811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1110'. [ 237.523319][ T9820] Unsupported ieee802154 address type: 0 [ 237.727451][ T9829] tipc: Enabled bearer , priority 0 [ 237.748454][ T9829] syzkaller0: entered promiscuous mode [ 237.754090][ T9829] syzkaller0: entered allmulticast mode [ 237.761676][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 237.778618][ T9838] netlink: 584 bytes leftover after parsing attributes in process `syz.4.1120'. [ 237.839571][ T9838] veth5: entered allmulticast mode [ 237.858832][ T9829] tipc: Resetting bearer [ 237.890630][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 237.900106][ T9828] tipc: Resetting bearer [ 237.972810][ T9828] tipc: Disabling bearer [ 238.014601][ T9844] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1122'. [ 238.037473][ T9844] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1122'. [ 238.321722][ T9872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1129'. [ 238.371031][ T9880] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1132'. [ 238.397572][ T6591] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.419099][ T6591] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.430331][ T6591] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.450717][ T6591] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.572072][ T9893] sctp: [Deprecated]: syz.1.1136 (pid 9893) Use of int in max_burst socket option deprecated. [ 238.572072][ T9893] Use struct sctp_assoc_value instead [ 238.743924][ T9904] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 238.802395][ T9904] bond5: (slave gretap1): making interface the new active one [ 238.812343][ T9904] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 240.114700][ T9975] tunl0: entered promiscuous mode [ 240.122564][ T9975] netlink: 'syz.0.1160': attribute type 3 has an invalid length. [ 240.431858][ T9996] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 240.451645][ T9998] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.628187][T10004] xt_socket: unknown flags 0xd0 [ 241.351036][T10063] netlink: 'syz.4.1190': attribute type 5 has an invalid length. [ 241.360494][T10063] __nla_validate_parse: 12 callbacks suppressed [ 241.360513][T10063] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1190'. [ 241.476669][T10068] netlink: 'syz.1.1191': attribute type 11 has an invalid length. [ 241.484668][T10068] netlink: 'syz.1.1191': attribute type 11 has an invalid length. [ 241.493708][T10068] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1191'. [ 241.558769][T10054] team0 (unregistering): Port device team_slave_0 removed [ 241.579375][T10054] team0 (unregistering): Port device team_slave_1 removed [ 241.593491][T10054] team0 (unregistering): Port device dummy0 removed [ 241.790640][T10073] netlink: 'syz.0.1193': attribute type 21 has an invalid length. [ 241.824103][T10073] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1193'. [ 241.835149][T10073] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1193'. [ 241.962893][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1197'. [ 242.310075][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 242.312006][T10101] netlink: 'syz.0.1203': attribute type 4 has an invalid length. [ 242.462471][T10109] netlink: 'syz.1.1208': attribute type 11 has an invalid length. [ 242.623715][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'. [ 242.811831][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 242.980439][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 243.095686][T10149] netlink: 'syz.0.1221': attribute type 17 has an invalid length. [ 243.155600][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 243.366696][T10149] gretap0: entered promiscuous mode [ 243.385046][T10149] gretap0: left promiscuous mode [ 244.009394][T10200] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20003 [ 244.024454][T10200] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20003 [ 244.510958][ T7287] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 244.852336][T10251] vlan1: entered allmulticast mode [ 244.857977][T10251] ve: entered allmulticast mode [ 245.132601][T10249] netlink: 'syz.0.1249': attribute type 2 has an invalid length. [ 245.159852][T10249] nbd: must specify a device to reconfigure [ 245.341062][T10259] netlink: 'syz.3.1252': attribute type 10 has an invalid length. [ 245.411217][T10259] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 245.430100][T10256] gretap0: entered promiscuous mode [ 245.446256][T10257] 0ªî{X¹¦: renamed from gretap0 [ 245.477714][T10257] 0ªî{X¹¦: left promiscuous mode [ 245.489867][T10257] 0ªî{X¹¦: entered allmulticast mode [ 245.507973][T10257] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 245.565706][T10277] tipc: Enabled bearer , priority 12 [ 245.885007][T10293] tipc: Enabled bearer , priority 0 [ 245.903186][T10293] syzkaller0: entered promiscuous mode [ 245.921110][T10293] syzkaller0: entered allmulticast mode [ 246.003672][T10293] tipc: Resetting bearer [ 246.017213][T10290] tipc: Resetting bearer [ 246.052876][T10290] tipc: Disabling bearer [ 246.496054][T10322] sctp: [Deprecated]: syz.3.1272 (pid 10322) Use of int in maxseg socket option. [ 246.496054][T10322] Use struct sctp_assoc_value instead [ 246.680698][T10336] __nla_validate_parse: 40 callbacks suppressed [ 246.680720][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 246.685972][ T5950] tipc: Node number set to 3666875719 [ 246.729035][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 246.757390][T10336] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1276'. [ 246.775141][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1278'. [ 246.857668][T10342] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 246.885982][T10344] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 246.918818][T10347] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1281'. [ 246.965657][T10347] xt_policy: neither incoming nor outgoing policy selected [ 247.151876][T10365] netlink: 'syz.3.1287': attribute type 12 has an invalid length. [ 247.165980][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 247.186257][T10365] netlink: 'syz.3.1287': attribute type 12 has an invalid length. [ 247.234997][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 247.325504][T10384] netlink: 'syz.1.1290': attribute type 83 has an invalid length. [ 247.366173][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 247.492347][T10388] tipc: Enabled bearer , priority 0 [ 247.521652][T10394] netlink: 'syz.0.1293': attribute type 9 has an invalid length. [ 247.528159][T10388] syzkaller0: entered promiscuous mode [ 247.565665][T10388] syzkaller0: entered allmulticast mode [ 247.680573][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1296'. [ 247.698836][T10388] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 247.721825][T10409] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1295'. [ 247.756486][T10388] tipc: Resetting bearer [ 247.796691][T10386] tipc: Resetting bearer [ 247.868121][T10386] tipc: Disabling bearer [ 247.891213][T10404] tipc: Enabled bearer , priority 0 [ 247.911621][T10416] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 247.921317][T10416] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 247.948446][T10404] tipc: Disabling bearer [ 248.087638][T10419] netlink: 'syz.3.1299': attribute type 6 has an invalid length. [ 248.101551][T10422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.186696][T10426] veth5: entered promiscuous mode [ 248.519064][T10437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.554573][T10437] atomic_op ffff88801e28a998 conn xmit_atomic 0000000000000000 [ 248.729415][T10446] netlink: 'syz.1.1306': attribute type 2 has an invalid length. [ 249.268407][T10466] openvswitch: netlink: Missing key (keys=40, expected=80) [ 250.143109][T10520] netlink: 'syz.2.1332': attribute type 7 has an invalid length. [ 250.799723][T10540] team0: Device vti0 is of different type [ 250.939150][T10567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.975780][T10564] netlink: 'syz.3.1342': attribute type 4 has an invalid length. [ 251.171978][T10581] macsec0: entered promiscuous mode [ 251.183160][T10581] macsec0: entered allmulticast mode [ 251.190881][T10581] veth1_macvtap: entered allmulticast mode [ 251.200275][T10581] bridge0: port 4(macsec0) entered blocking state [ 251.212686][T10581] bridge0: port 4(macsec0) entered disabled state [ 252.133525][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.184797][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 252.220562][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 252.228596][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.231482][ T1168] wlan1: authenticated [ 252.267351][ T1168] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 252.275086][ T1168] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 252.298552][ T1168] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 252.307645][ T1168] wlan1: association with 08:02:11:00:00:00 timed out [ 252.372012][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.590576][T10657] __nla_validate_parse: 20 callbacks suppressed [ 252.590596][T10657] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1367'. [ 252.606990][T10659] netlink: 'syz.2.1366': attribute type 15 has an invalid length. [ 252.620075][T10663] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1367'. [ 252.814045][T10672] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1370'. [ 252.833227][T10672] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1370'. [ 253.746787][T10710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1378'. [ 253.933279][T10710] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 254.037216][T10721] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1385'. [ 254.116705][T10661] lo speed is unknown, defaulting to 1000 [ 254.537851][T10736] syzkaller1: entered promiscuous mode [ 254.543699][T10736] syzkaller1: entered allmulticast mode [ 254.591628][T10741] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 254.722523][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'. [ 254.805647][T10751] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 254.825170][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'. [ 254.844363][T10751] sctp: [Deprecated]: syz.2.1392 (pid 10751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.844363][T10751] Use struct sctp_sack_info instead [ 255.415644][T10764] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1397'. [ 255.475181][T10766] IPv6: sit1: Disabled Multicast RS [ 255.500827][T10766] sit1: entered allmulticast mode [ 255.923655][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.021595][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 256.022472][T10787] netlink: 'syz.2.1403': attribute type 11 has an invalid length. [ 256.054443][T10787] netlink: 'syz.2.1403': attribute type 11 has an invalid length. [ 256.258440][T10742] lo speed is unknown, defaulting to 1000 [ 256.479379][ T24] IPVS: starting estimator thread 0... [ 256.500366][T10814] IPVS: set_ctl: invalid protocol: 174 10.1.1.1:20001 [ 256.508440][T10814] IPVS: lc: FWM 3 0x00000003 - no destination available [ 256.605526][T10815] IPVS: using max 28 ests per chain, 67200 per kthread [ 257.244526][T10840] geneve2: entered promiscuous mode [ 257.253913][T10840] geneve2: entered allmulticast mode [ 257.305044][T10849] NCSI netlink: No device for ifindex 0 [ 257.320269][T10849] netlink: 'syz.4.1421': attribute type 33 has an invalid length. [ 257.593679][T10855] lo: entered promiscuous mode [ 257.672141][T10855] tunl0: entered promiscuous mode [ 257.702348][T10858] nbd: nbd4 already in use [ 257.720200][T10858] block nbd4: NBD_DISCONNECT [ 257.760976][T10858] block nbd4: Send disconnect failed -32 [ 257.790463][T10855] erspan0: entered promiscuous mode [ 257.792666][T10858] block nbd4: shutting down sockets [ 257.910052][T10855] ip_vti0: entered promiscuous mode [ 258.123838][T10873] __nla_validate_parse: 10 callbacks suppressed [ 258.123859][T10873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1426'. [ 258.683130][T10899] tipc: Enabled bearer , priority 0 [ 258.693141][T10899] syzkaller0: entered promiscuous mode [ 258.698873][T10899] syzkaller0: entered allmulticast mode [ 258.741515][T10899] tipc: Resetting bearer [ 258.780200][T10898] tipc: Resetting bearer [ 258.872786][T10898] tipc: Disabling bearer [ 258.976640][T10911] syzkaller0: entered promiscuous mode [ 258.982189][T10911] syzkaller0: entered allmulticast mode [ 259.473732][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1446'. [ 259.589727][T10950] netlink: 'syz.0.1448': attribute type 16 has an invalid length. [ 259.622784][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 259.647589][T10950] netlink: 'syz.0.1448': attribute type 17 has an invalid length. [ 259.736980][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.755753][T10958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.914731][T10950] tunl0: left promiscuous mode [ 260.009907][T10950] batadv_slave_0: left promiscuous mode [ 260.019721][T10950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.083425][T10950] veth1_macvtap: left allmulticast mode [ 260.265915][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.287253][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.301733][T10975] sch_fq: defrate 0 ignored. [ 260.319517][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.328994][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 260.340531][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.361040][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 260.375160][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.413591][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.469751][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.482445][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.500789][T10986] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1459'. [ 260.611034][T10993] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 260.626039][T10993] netlink: 'syz.1.1462': attribute type 11 has an invalid length. [ 260.645619][T10993] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1462'. [ 260.807620][T11000] syzkaller0: entered promiscuous mode [ 260.815142][T11000] syzkaller0: entered allmulticast mode [ 260.842554][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 260.912197][T11010] netlink: 'syz.1.1469': attribute type 1 has an invalid length. [ 260.921169][T11010] netlink: 'syz.1.1469': attribute type 2 has an invalid length. [ 260.930252][T11010] netlink: 'syz.1.1469': attribute type 1 has an invalid length. [ 260.940034][T11010] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.1469'. [ 260.973400][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 261.747924][T11048] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 262.224479][T11080] C: renamed from lo [ 262.249225][T11080] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 262.514066][T11098] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 262.829607][T11113] xfrm1: entered allmulticast mode [ 262.943818][T11126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.960206][T11070] delete_channel: no stack [ 262.977051][T11126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.108229][T11132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.132501][T11132] vlan2: entered allmulticast mode [ 263.140591][T11132] bond0: entered allmulticast mode [ 263.146223][T11132] bond_slave_0: entered allmulticast mode [ 263.153011][T11132] bond_slave_1: entered allmulticast mode [ 263.161891][T11132] geneve1: entered allmulticast mode [ 263.255692][T11139] __nla_validate_parse: 12 callbacks suppressed [ 263.255712][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1513'. [ 263.466872][T11137] bridge4: entered promiscuous mode [ 263.472728][T11137] bridge4: entered allmulticast mode [ 263.488613][T11153] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 263.741663][T11162] sctp: [Deprecated]: syz.1.1520 (pid 11162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.741663][T11162] Use struct sctp_sack_info instead [ 263.779588][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 263.832128][T11172] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1521'. [ 263.970770][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 263.990905][T11175] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1525'. [ 264.214678][T11186] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 264.228317][T11186] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1527'. [ 264.250671][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1527'. [ 264.264080][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1527'. [ 264.303141][T11186] 0ªî{X¹¦: entered promiscuous mode [ 264.320428][T11191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1527'. [ 264.372413][T11186] 0ªî{X¹¦: left promiscuous mode [ 264.417971][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1530'. [ 264.777299][T11201] bridge4: port 1(veth7) entered blocking state [ 264.783974][T11201] bridge4: port 1(veth7) entered disabled state [ 264.794183][T11201] veth7: entered allmulticast mode [ 264.832217][T11201] veth7: entered promiscuous mode [ 264.899674][T11143] lo speed is unknown, defaulting to 1000 [ 265.685298][T11267] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 265.741337][T11268] pim6reg1: entered promiscuous mode [ 265.801012][T11268] pim6reg1: entered allmulticast mode [ 266.089877][T11287] netlink: 'syz.1.1550': attribute type 5 has an invalid length. [ 266.098166][T11288] netlink: 'syz.1.1550': attribute type 5 has an invalid length. [ 266.129952][T11287] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 266.514766][T11301] netlink: 'syz.1.1555': attribute type 11 has an invalid length. [ 266.754727][T11316] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000 [ 267.051040][T11326] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 267.152972][T11334] nbd: couldn't find a device at index -373156329 [ 267.533431][T11349] netlink: 'syz.1.1568': attribute type 8 has an invalid length. [ 267.882348][T11374] hsr0 speed is unknown, defaulting to 1000 [ 267.925513][T11374] hsr0 speed is unknown, defaulting to 1000 [ 267.937738][T11374] hsr0 speed is unknown, defaulting to 1000 [ 267.963021][T11374] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 267.993614][T11374] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 268.041466][T11374] hsr0 speed is unknown, defaulting to 1000 [ 268.052918][T11374] hsr0 speed is unknown, defaulting to 1000 [ 268.062352][T11374] hsr0 speed is unknown, defaulting to 1000 [ 268.072457][T11374] hsr0 speed is unknown, defaulting to 1000 [ 268.081644][T11374] hsr0 speed is unknown, defaulting to 1000 [ 268.600038][T11420] __nla_validate_parse: 22 callbacks suppressed [ 268.600061][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1588'. [ 268.903553][T11432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1590'. [ 269.118246][ T7529] Bluetooth: hci0: command tx timeout [ 269.124516][T11443] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1595'. [ 269.179614][T11439] veth9: entered allmulticast mode [ 269.211225][T11448] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 269.635794][T11461] tipc: Enabled bearer , priority 0 [ 269.680597][T11456] netlink: 'syz.0.1597': attribute type 23 has an invalid length. [ 269.725221][T11451] tipc: Resetting bearer [ 270.227487][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 271.200154][T11502] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 271.768166][T11451] tipc: Disabling bearer [ 271.777540][T11473] !: renamed from dummy0 [ 271.795756][T11489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1606'. [ 271.947590][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 272.132510][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'. [ 272.468689][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1622'. [ 272.492199][T11548] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1622'. [ 272.957247][T11569] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1630'. [ 272.998045][T11574] tipc: Enabled bearer , priority 0 [ 273.008108][T11574] syzkaller0: entered promiscuous mode [ 273.015248][T11574] syzkaller0: entered allmulticast mode [ 273.163451][T11574] tipc: Resetting bearer [ 273.205820][T11572] tipc: Resetting bearer [ 273.264537][T11572] tipc: Disabling bearer [ 273.779402][T11615] __nla_validate_parse: 5 callbacks suppressed [ 273.779424][T11615] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1642'. [ 273.803519][T11620] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1645'. [ 273.865598][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 274.156262][T11632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1647'. [ 274.503264][T11648] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 274.653363][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 274.847229][T11664] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1658'. [ 275.040234][T11664] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 275.053072][T11664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1658'. [ 275.055727][T11677] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 275.108987][T11677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1660'. [ 275.154208][T11678] veth13: entered promiscuous mode [ 275.273615][T11678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1661'. [ 275.953639][T11703] netlink: 'syz.0.1668': attribute type 8 has an invalid length. [ 275.980711][T11703] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1668'. [ 276.073059][T11706] syzkaller0: entered promiscuous mode [ 276.081149][T11706] syzkaller0: entered allmulticast mode [ 276.090735][T11706] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 277.103422][T11768] netlink: 'syz.1.1689': attribute type 7 has an invalid length. [ 277.128617][T11768] : entered promiscuous mode [ 277.248898][T11774] syzkaller1: entered promiscuous mode [ 277.258344][T11774] syzkaller1: entered allmulticast mode [ 278.207942][T11832] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 278.421228][T11849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.437386][T11849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.355066][T11899] tipc: Enabling of bearer rejected, failed to enable media [ 279.546319][T11915] __nla_validate_parse: 39 callbacks suppressed [ 279.546350][T11915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1739'. [ 279.729768][T11907] netlink: 'syz.2.1736': attribute type 23 has an invalid length. [ 280.013738][T11944] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1745'. [ 280.023880][T11941] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1744'. [ 280.094426][T11942] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1744'. [ 280.759615][T11980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.813357][T11979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.910655][T12004] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1760'. [ 281.247079][T12025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1769'. [ 281.590080][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1774'. [ 281.650407][T12055] TCP: TCP_TX_DELAY enabled [ 281.703098][T12059] netlink: 'syz.0.1777': attribute type 2 has an invalid length. [ 281.712573][T12059] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 281.729028][T12059] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 281.756440][T12059] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 281.769436][T12059] netlink: 'syz.0.1777': attribute type 2 has an invalid length. [ 281.792599][T12059] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 282.003136][T12081] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 282.073879][ T7522] Bluetooth: hci4: link tx timeout [ 282.081630][ T7522] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.180908][T12088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1787'. [ 282.187131][T12092] nbd: couldn't find a device at index -373156329 [ 282.200293][T12092] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1788'. [ 283.004253][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880579ab800: rx timeout, send abort [ 283.486741][T12149] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 283.513827][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880579ab800: abort rx timeout. Force session deactivation [ 283.930467][T12178] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 284.158492][ T7529] Bluetooth: hci4: command 0x0405 tx timeout [ 284.230373][T12194] dvmrp0: entered allmulticast mode [ 284.257249][T12194] dvmrp0: left allmulticast mode [ 284.607276][T12220] netlink: 'syz.2.1824': attribute type 10 has an invalid length. [ 284.645669][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.653518][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.700822][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 284.722525][T12220] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.729841][T12220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.737803][T12220] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.745016][T12220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.809169][T12220] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 284.852047][T12234] bridge_slave_1: left allmulticast mode [ 284.874828][T12234] bridge_slave_1: left promiscuous mode [ 284.881969][T12234] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.934551][T12234] bridge_slave_0: left allmulticast mode [ 284.940667][T12234] bridge_slave_0: left promiscuous mode [ 284.949033][T12234] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.005211][T12234] bond0: (slave bridge0): Releasing backup interface [ 285.091761][T12238] tipc: Enabling of bearer rejected, failed to enable media [ 285.217941][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1833'. [ 285.270257][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 285.288070][T12263] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1834'. [ 317.360146][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.170511][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 341.193434][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 341.257199][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 341.275556][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 341.281236][ T6601] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.325082][T12313] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1851'. [ 341.325400][ T6601] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.346347][T12313] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1851'. [ 341.356723][T12313] netlink: 'syz.2.1851': attribute type 5 has an invalid length. [ 341.375112][ T6601] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.384585][T12313] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1851'. [ 341.398438][ T6601] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.634932][T12327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1855'. [ 342.019629][T12344] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1862'. [ 342.121265][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 342.124456][T12349] netlink: 'syz.0.1865': attribute type 83 has an invalid length. [ 342.436995][T12378] netlink: 'syz.2.1872': attribute type 4 has an invalid length. [ 342.672667][T12394] netlink: 'syz.0.1876': attribute type 1 has an invalid length. [ 342.691161][T12394] netlink: 'syz.0.1876': attribute type 3 has an invalid length. [ 342.822377][T12404] pim6reg1: entered promiscuous mode [ 342.840138][T12404] pim6reg1: entered allmulticast mode [ 342.868141][T12402] netlink: 'syz.0.1881': attribute type 1 has an invalid length. [ 342.947931][T12408] 8021q: adding VLAN 0 to HW filter on device bond12 [ 343.000856][T12402] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 343.923526][T12463] netlink: 'syz.0.1893': attribute type 17 has an invalid length. [ 343.993389][T12463] gretap0: entered promiscuous mode [ 344.038313][T12463] gretap0: left promiscuous mode [ 344.052498][T12472] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 344.097847][T12472] netlink: 'syz.2.1896': attribute type 16 has an invalid length. [ 344.114977][T12475] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 344.118604][T12472] netlink: 'syz.2.1896': attribute type 16 has an invalid length. [ 344.283067][T12484] tipc: Enabled bearer , priority 0 [ 344.308119][T12484] syzkaller0: entered promiscuous mode [ 344.313865][T12484] syzkaller0: entered allmulticast mode [ 344.361492][T12484] tipc: Resetting bearer [ 344.603587][T12482] tipc: Resetting bearer [ 344.711151][T12482] tipc: Disabling bearer [ 345.347563][T12544] tipc: Enabled bearer , priority 0 [ 345.377387][T12544] syzkaller0: entered promiscuous mode [ 345.404566][T12544] syzkaller0: entered allmulticast mode [ 345.440786][T12550] netlink: 'syz.2.1915': attribute type 1 has an invalid length. [ 345.451781][T12544] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 345.464738][T12549] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 345.947158][ T1168] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 346.038281][T12536] tipc: Resetting bearer [ 346.133656][T12536] tipc: Disabling bearer [ 346.450341][T12584] bridge_slave_0: left allmulticast mode [ 346.479335][T12584] bridge_slave_0: left promiscuous mode [ 346.514086][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.561426][T12584] bridge_slave_1: left allmulticast mode [ 346.569514][T12596] netlink: 'syz.4.1925': attribute type 1 has an invalid length. [ 346.570088][T12584] bridge_slave_1: left promiscuous mode [ 346.583412][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.613618][T12584] bond1: (slave veth0_to_bond): Releasing active interface [ 346.635035][T12584] bond0: (slave bond_slave_0): Releasing backup interface [ 346.645085][T12584] bond_slave_0: left allmulticast mode [ 346.659534][T12584] bond0: (slave bond_slave_1): Releasing backup interface [ 346.668367][T12593] __nla_validate_parse: 19 callbacks suppressed [ 346.668386][T12593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1924'. [ 346.691265][T12584] bond_slave_1: left allmulticast mode [ 346.733993][T12584] bond0: (slave geneve1): Releasing backup interface [ 346.768681][T12584] geneve1: left allmulticast mode [ 346.799924][T12584] bond1: (slave veth5): Releasing active interface [ 346.813626][T12584] bond1: (slave veth5): the permanent HWaddr of slave - ee:dd:22:6e:94:86 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 346.833948][T12584] bond1: (slave veth7): Releasing active interface [ 346.845038][T12584] bond2: (slave gretap1): Releasing active interface [ 346.863953][T12596] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 346.876720][T12601] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1923'. [ 346.945283][T12615] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1927'. [ 346.958873][T12615] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1927'. [ 346.989984][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 347.586399][T12659] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 347.824692][T12622] lo speed is unknown, defaulting to 1000 [ 347.967995][T12622] hsr0 speed is unknown, defaulting to 1000 [ 348.235636][T12668] netlink: 'syz.2.1939': attribute type 1 has an invalid length. [ 349.042385][T12693] netlink: 'syz.0.1948': attribute type 9 has an invalid length. [ 349.051815][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 349.103199][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 349.116731][T12695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1947'. [ 349.164737][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 349.431799][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1951'. [ 349.613126][T12715] netlink: 'syz.3.1955': attribute type 4 has an invalid length. [ 350.058147][T12735] tipc: Enabled bearer , priority 0 [ 350.081507][T12741] syzkaller0: entered promiscuous mode [ 350.107811][T12741] syzkaller0: entered allmulticast mode [ 350.170968][T12738] syzkaller1: entered promiscuous mode [ 350.177119][T12738] syzkaller1: entered allmulticast mode [ 350.315514][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 350.552706][T12729] tipc: Resetting bearer [ 350.616298][T12729] tipc: Disabling bearer [ 351.147549][T12795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.301893][T12800] IPVS: length: 27 != 8 [ 351.363012][T12802] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 351.956102][T12813] syzkaller1: entered promiscuous mode [ 351.964664][T12813] syzkaller1: entered allmulticast mode [ 351.989102][T12828] __nla_validate_parse: 8 callbacks suppressed [ 351.989123][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 352.546389][T12856] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1998'. [ 352.557285][T12858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1997'. [ 352.576236][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1997'. [ 352.674625][T12859] IPv6: sit1: Disabled Multicast RS [ 352.697083][T12859] sit1: entered allmulticast mode [ 352.820174][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2000'. [ 352.931901][T12870] nbd: couldn't find a device at index -373156329 [ 353.017959][T12872] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 353.172712][T12872] gretap2: entered promiscuous mode [ 353.180395][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2003'. [ 353.317235][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 353.326255][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2005'. [ 353.497695][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 353.900212][T12910] netlink: 'syz.0.2014': attribute type 10 has an invalid length. [ 353.937691][T12915] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2015'. [ 353.986290][T12910] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.032274][T12910] bond0: (slave team0): Enslaving as an active interface with an up link [ 354.035932][ T6592] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 354.532240][T12938] syzkaller1: entered promiscuous mode [ 354.542886][T12938] syzkaller1: entered allmulticast mode [ 354.682864][T12946] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 354.702695][T12946] netlink: 'syz.2.2025': attribute type 4 has an invalid length. [ 355.905013][T13012] netlink: 'syz.0.2046': attribute type 12 has an invalid length. [ 355.929060][T13012] netlink: 'syz.0.2046': attribute type 12 has an invalid length. [ 356.184094][T13029] netlink: 'syz.2.2052': attribute type 1 has an invalid length. [ 356.806859][T13066] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 356.866144][T13066] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 357.247266][T13096] __nla_validate_parse: 12 callbacks suppressed [ 357.247290][T13096] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2069'. [ 357.550984][T13111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.568694][T13111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.605933][T13118] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 357.617836][T13115] netlink: 'syz.3.2075': attribute type 58 has an invalid length. [ 357.628259][T13115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2075'. [ 357.877850][T13134] netem: change failed [ 357.882866][T13134] netlink: 'syz.3.2081': attribute type 1 has an invalid length. [ 357.894477][T13134] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2081'. [ 358.404956][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 358.461713][T13161] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 358.508158][T13161] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 358.521076][T13161] gretap2: entered promiscuous mode [ 358.531130][T13161] gretap2: entered allmulticast mode [ 358.695145][T13182] validate_nla: 1 callbacks suppressed [ 358.695173][T13182] netlink: 'syz.1.2094': attribute type 4 has an invalid length. [ 358.726544][T13182] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2094'. [ 358.749378][T13189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2095'. [ 358.868627][T13189] bond15: entered allmulticast mode [ 358.874501][T13193] lo: entered promiscuous mode [ 358.883807][T13193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.223078][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'. [ 359.233722][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 359.269584][T13224] netlink: 'syz.2.2105': attribute type 10 has an invalid length. [ 359.300163][T13224] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 359.311292][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'. [ 359.313926][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 359.394528][T13229] netlink: 'syz.2.2107': attribute type 21 has an invalid length. [ 359.471531][T13236] netlink: 'syz.2.2107': attribute type 4 has an invalid length. [ 359.595518][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 360.358228][T13284] netlink: 'syz.2.2123': attribute type 1 has an invalid length. [ 360.376224][T13284] netlink: 'syz.2.2123': attribute type 3 has an invalid length. [ 360.602168][T13298] netlink: 'syz.0.2126': attribute type 5 has an invalid length. [ 360.709225][T13309] netlink: 'syz.3.2128': attribute type 1 has an invalid length. [ 361.413713][T13336] sctp: [Deprecated]: syz.0.2133 (pid 13336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.413713][T13336] Use struct sctp_sack_info instead [ 362.439776][T13309] tipc: Enabling of bearer rejected, failed to enable media [ 362.459456][T13315] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 362.472216][T13315] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 362.495082][T13315] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 362.662830][T13338] veth7: entered promiscuous mode [ 362.673879][T13345] __nla_validate_parse: 5 callbacks suppressed [ 362.673900][T13345] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2136'. [ 362.678101][T13338] veth7: entered allmulticast mode [ 362.891699][T13365] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2143'. [ 362.900448][T13362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2142'. [ 362.904999][T13365] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2143'. [ 362.923862][T13363] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 363.054643][T13372] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 363.068678][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'. [ 363.125803][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'. [ 363.334445][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2151'. [ 363.380857][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2152'. [ 363.437014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.490242][T13401] tipc: Enabled bearer , priority 0 [ 363.541167][T13400] tipc: Disabling bearer [ 363.636767][T13413] netlink: 211280 bytes leftover after parsing attributes in process `syz.1.2158'. [ 364.347465][T13404] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 365.009857][T13427] netlink: 'syz.1.2162': attribute type 1 has an invalid length. [ 365.066763][T13427] sctp: [Deprecated]: syz.1.2162 (pid 13427) Use of int in max_burst socket option. [ 365.066763][T13427] Use struct sctp_assoc_value instead [ 365.216911][T13445] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2168'. [ 365.371033][T13452] netlink: 'syz.4.2170': attribute type 29 has an invalid length. [ 365.400527][T13452] netlink: 'syz.4.2170': attribute type 29 has an invalid length. [ 365.522349][T13461] netlink: 'syz.0.2174': attribute type 1 has an invalid length. [ 365.551545][T13461] netlink: 'syz.0.2174': attribute type 1 has an invalid length. [ 365.575224][T13461] netlink: 'syz.0.2174': attribute type 2 has an invalid length. [ 365.600041][ T7522] Bluetooth: hci2: command 0x0406 tx timeout [ 365.765233][T13478] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.802206][T13476] gtp0: entered promiscuous mode [ 366.133148][T13501] netlink: 'syz.1.2186': attribute type 3 has an invalid length. [ 366.412223][T13520] netlink: 'syz.4.2190': attribute type 25 has an invalid length. [ 366.532737][T13523] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 366.551388][T13523] openvswitch: netlink: Duplicate key (type 0). [ 366.562099][T13523] IPVS: ip_vs_add_dest(): server weight less than zero [ 366.761724][T13542] netlink: 'syz.0.2198': attribute type 13 has an invalid length. [ 366.773729][T13542] netlink: 'syz.0.2198': attribute type 13 has an invalid length. [ 367.398428][T13587] openvswitch: netlink: IP tunnel dst address not specified [ 367.666463][T13602] pim6reg527: entered allmulticast mode [ 367.888270][T13623] __nla_validate_parse: 15 callbacks suppressed [ 367.888290][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2219'. [ 367.964672][T13621] !: renamed from dummy0 (while UP) [ 368.466373][T13651] veth1_to_bond: entered allmulticast mode [ 368.492171][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'. [ 368.673585][T13651] veth1_to_bond (unregistering): left allmulticast mode [ 369.068106][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2235'. [ 369.131537][T13675] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2235'. [ 369.211041][T13685] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2239'. [ 369.222167][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 369.271730][T13683] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 369.299987][T13683] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2237'. [ 369.641569][T13715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2247'. [ 369.726354][T13719] sctp: [Deprecated]: syz.2.2247 (pid 13719) Use of int in maxseg socket option. [ 369.726354][T13719] Use struct sctp_assoc_value instead [ 370.061530][T13737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2255'. [ 370.081464][T13736] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2251'. [ 370.169337][T13745] 8021q: VLANs not supported on pim6reg [ 370.588504][T13773] openvswitch: netlink: IP tunnel attribute has 145 unknown bytes. [ 371.281174][T13802] tipc: Enabled bearer , priority 0 [ 371.443600][T13802] syzkaller0: entered promiscuous mode [ 371.449595][T13802] syzkaller0: entered allmulticast mode [ 371.456702][T13802] tipc: Resetting bearer [ 371.508402][T13797] pim6reg1: entered promiscuous mode [ 371.547478][T13797] pim6reg1: entered allmulticast mode [ 371.618048][T13796] tipc: Resetting bearer [ 372.325837][ T5950] tipc: Node number set to 448569368 [ 373.238499][T13796] tipc: Disabling bearer [ 373.400483][T13848] __nla_validate_parse: 4 callbacks suppressed [ 373.400505][T13848] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2284'. [ 373.863116][T13870] syzkaller0: entered promiscuous mode [ 373.868954][T13870] syzkaller0: entered allmulticast mode [ 374.411505][T13890] 8021q: VLANs not supported on ip6_vti0 [ 374.500694][T13911] validate_nla: 3 callbacks suppressed [ 374.500713][T13911] netlink: 'syz.4.2298': attribute type 21 has an invalid length. [ 374.514400][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 374.529252][T13916] netlink: 'syz.4.2298': attribute type 21 has an invalid length. [ 374.556251][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 374.623653][T13920] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2300'. [ 374.657658][T13920] vlan2: entered allmulticast mode [ 374.663014][T13920] gretap0: entered allmulticast mode [ 374.710618][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'. [ 375.100190][T13940] ip6gre1: entered allmulticast mode [ 375.288236][T13913] lo speed is unknown, defaulting to 1000 [ 375.506069][T13959] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 375.604601][T13964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2313'. [ 375.798710][T13974] netlink: 'syz.2.2317': attribute type 4 has an invalid length. [ 375.889166][T13980] netlink: 'syz.2.2317': attribute type 4 has an invalid length. [ 375.904215][T13979] netlink: set zone limit has 8 unknown bytes [ 375.929610][T13979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2319'. [ 376.010765][T13985] netlink: 'syz.4.2318': attribute type 11 has an invalid length. [ 376.018890][T13985] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2318'. [ 376.187574][T13913] hsr0 speed is unknown, defaulting to 1000 [ 376.396571][ T7529] Bluetooth: hci4: command 0x0405 tx timeout [ 376.644162][T14009] 8021q: VLANs not supported on ip6_vti0 [ 376.678951][T14017] ip6gre1: entered allmulticast mode [ 377.131993][T14037] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 377.221836][T14044] dvmrp0: entered allmulticast mode [ 377.286469][T13974] lo speed is unknown, defaulting to 1000 [ 377.525526][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 377.774962][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 378.082363][T13974] hsr0 speed is unknown, defaulting to 1000 [ 378.226351][T14072] tipc: Enabled bearer , priority 0 [ 378.290111][T14069] tipc: Disabling bearer [ 378.364100][T14078] netlink: 'syz.0.2344': attribute type 33 has an invalid length. [ 378.379210][T14078] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2344'. [ 378.427118][T14077] netlink: 'syz.0.2344': attribute type 33 has an invalid length. [ 378.448473][T14077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2344'. [ 378.804520][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.364572][T14104] netlink: 'syz.1.2352': attribute type 2 has an invalid length. [ 379.708841][T14123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2358'. [ 379.740774][T14123] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 379.750902][T14125] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2359'. [ 379.781386][T14123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2358'. [ 379.795995][T14130] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2359'. [ 379.798016][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'. [ 380.194581][T14147] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2363'. [ 380.373819][T14161] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2368'. [ 380.441444][T14161] xt_l2tp: missing protocol rule (udp|l2tpip) [ 380.462238][T14158] IPVS: persistence engine module ip_vs_pe_À not found [ 380.494887][T14168] netlink: 'syz.1.2370': attribute type 11 has an invalid length. [ 380.505241][T14168] netlink: 'syz.1.2370': attribute type 11 has an invalid length. [ 380.510852][T14165] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 380.513533][T14168] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2370'. [ 380.634400][T14164] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 380.851636][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 381.175644][T14199] ip6gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 381.189124][T14207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.350490][T14219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.749945][T14240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.775524][T14244] veth0: entered promiscuous mode [ 381.797784][T14244] veth0 (unregistering): left promiscuous mode [ 381.901017][T14253] openvswitch: netlink: Flow key attr not present in new flow. [ 382.104589][ T6593] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 382.121665][T14264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.564284][T14297] tipc: Enabled bearer , priority 0 [ 382.577582][T14297] syzkaller0: entered promiscuous mode [ 382.583201][T14297] syzkaller0: entered allmulticast mode [ 382.598192][T14297] sch_tbf: peakrate 9 is lower than or equals to rate 129 ! [ 382.614215][T14297] tipc: Resetting bearer [ 382.624486][T14296] tipc: Resetting bearer [ 382.641134][T14301] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.663492][T14296] tipc: Disabling bearer [ 383.500252][T14355] __nla_validate_parse: 7 callbacks suppressed [ 383.500271][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'. [ 383.543373][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'. [ 383.827349][T14370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.855141][T14370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.889157][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 383.903913][T14379] netlink: 'syz.0.2430': attribute type 11 has an invalid length. [ 383.940603][T14379] netlink: 'syz.0.2430': attribute type 3 has an invalid length. [ 383.956046][T14379] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2430'. [ 384.054287][T14385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.179183][T14396] netlink: 'syz.1.2437': attribute type 1 has an invalid length. [ 384.189454][T14396] netlink: 'syz.1.2437': attribute type 2 has an invalid length. [ 384.200546][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 384.887758][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2447'. [ 385.056585][T14445] netlink: 384 bytes leftover after parsing attributes in process `syz.1.2451'. [ 385.114153][T14445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2451'. [ 385.115753][T14447] netlink: 'syz.0.2452': attribute type 1 has an invalid length. [ 385.599319][T14439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.606329][T14439] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 385.640299][T14439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.652830][T14439] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 385.691940][T14439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 385.707723][T14439] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 385.742147][T14439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.767552][T14439] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 385.822338][T14481] IPVS: Scheduler module ip_vs_sip not found [ 386.218594][T14506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.241862][T14506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.468133][T14522] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2473'. [ 386.481578][T14522] nbd: illegal input index -8454144 [ 386.779001][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2478'. [ 387.216024][T14567] team0: Port device team_slave_1 removed [ 388.269769][T14594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.369861][T14599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.382531][T14599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.227494][T14610] veth0: entered promiscuous mode [ 389.240100][T14609] veth0: left promiscuous mode [ 389.289207][T14613] vlan1: entered allmulticast mode [ 389.294387][T14613] veth0_vlan: entered allmulticast mode [ 389.303485][T14613] __nla_validate_parse: 5 callbacks suppressed [ 389.303499][T14613] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2502'. [ 389.351316][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 389.368666][T14616] netlink: 'syz.2.2503': attribute type 1 has an invalid length. [ 389.379091][T14616] netlink: 'syz.2.2503': attribute type 2 has an invalid length. [ 389.854731][T14621] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2505'. [ 389.951311][T14626] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2507'. [ 390.214141][T14634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.227074][T14634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.971219][ T6605] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.982854][ T6605] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.991738][ T6605] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.002840][ T6605] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.190150][T14649] netlink: 'syz.0.2517': attribute type 1 has an invalid length. [ 391.220178][T14649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.233531][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 391.453764][T14659] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 391.461809][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 391.618793][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 405.995565][ T1228] page_pool_release_retry() stalled pool shutdown: id 39, 1 inflight 60 sec [ 414.635876][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 440.239262][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 491.435561][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 501.680057][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.035870][ T31] INFO: task kworker/0:6:5950 blocked for more than 143 seconds. [ 533.043787][ T31] Not tainted syzkaller #0 [ 533.049173][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.057979][ T31] task:kworker/0:6 state:D stack:23264 pid:5950 tgid:5950 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 533.070124][ T31] Workqueue: events rfkill_sync_work [ 533.075594][ T31] Call Trace: [ 533.078908][ T31] [ 533.081837][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 533.086470][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 533.092017][ T31] ? __pfx___schedule+0x10/0x10 [ 533.097390][ T31] ? irqentry_exit+0x74/0x90 [ 533.102061][ T31] ? schedule+0x91/0x360 [ 533.106542][ T31] schedule+0x165/0x360 [ 533.110834][ T31] schedule_preempt_disabled+0x13/0x30 [ 533.116588][ T31] __mutex_lock+0x7e6/0x1350 [ 533.121216][ T31] ? __mutex_lock+0x5bb/0x1350 [ 533.126082][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 533.174800][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.182429][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.188168][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 533.195741][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 533.202124][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 533.208899][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 533.214053][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 533.220610][ T31] rfkill_set_block+0x1d2/0x440 [ 533.225883][ T31] rfkill_sync_work+0x114/0x200 [ 533.231132][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 533.237467][ T31] process_scheduled_works+0xae1/0x17b0 [ 533.243051][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 533.249353][ T31] worker_thread+0x8a0/0xda0 [ 533.253982][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 533.260514][ T31] ? __kthread_parkme+0x7b/0x200 [ 533.266134][ T31] kthread+0x70e/0x8a0 [ 533.270214][ T31] ? __pfx_worker_thread+0x10/0x10 [ 533.275394][ T31] ? __pfx_kthread+0x10/0x10 [ 533.280024][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.285334][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.290693][ T31] ? __pfx_kthread+0x10/0x10 [ 533.295951][ T31] ret_from_fork+0x3fc/0x770 [ 533.300581][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 533.305822][ T31] ? __switch_to_asm+0x39/0x70 [ 533.310726][ T31] ? __switch_to_asm+0x33/0x70 [ 533.315725][ T31] ? __pfx_kthread+0x10/0x10 [ 533.320361][ T31] ret_from_fork_asm+0x1a/0x30 [ 533.325295][ T31] [ 533.328380][ T31] INFO: task syz.1.2461:14479 blocked for more than 143 seconds. [ 533.337693][ T31] Not tainted syzkaller #0 [ 533.342632][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.351395][ T31] task:syz.1.2461 state:D stack:25096 pid:14479 tgid:14479 ppid:5863 task_flags:0x400040 flags:0x00004004 [ 533.363496][ T31] Call Trace: [ 533.367205][ T31] [ 533.370141][ T31] __schedule+0x1798/0x4cc0 [ 533.374648][ T31] ? validate_chain+0x897/0x2140 [ 533.379730][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.384625][ T31] ? __pfx___schedule+0x10/0x10 [ 533.389649][ T31] ? schedule+0x91/0x360 [ 533.393939][ T31] schedule+0x165/0x360 [ 533.398506][ T31] schedule_timeout+0x9a/0x270 [ 533.403275][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 533.408728][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.413947][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.419213][ T31] ? wait_for_completion+0x267/0x5d0 [ 533.424530][ T31] wait_for_completion+0x2bf/0x5d0 [ 533.430081][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 533.439720][ T31] ? __flush_work+0xd2/0xbc0 [ 533.444357][ T31] ? __flush_work+0xd2/0xbc0 [ 533.449091][ T31] __flush_work+0x9b9/0xbc0 [ 533.453620][ T31] ? __flush_work+0xd2/0xbc0 [ 533.458473][ T31] ? __pfx___flush_work+0x10/0x10 [ 533.463556][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 533.469396][ T31] ? __pfx___cancel_work+0x10/0x10 [ 533.474513][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 533.480320][ T31] __cancel_work_sync+0xbe/0x110 [ 533.485339][ T31] rfkill_unregister+0x92/0x220 [ 533.490240][ T31] nfc_unregister_device+0x96/0x2a0 [ 533.496020][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 533.501784][ T31] virtual_ncidev_close+0x56/0x90 [ 533.506885][ T31] __fput+0x449/0xa70 [ 533.510910][ T31] task_work_run+0x1d1/0x260 [ 533.515942][ T31] ? __pfx_task_work_run+0x10/0x10 [ 533.521189][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 533.527351][ T31] exit_to_user_mode_loop+0xec/0x110 [ 533.532672][ T31] do_syscall_64+0x2bd/0x3b0 [ 533.537456][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.542737][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.548873][ T31] ? clear_bhb_loop+0x60/0xb0 [ 533.553576][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.559862][ T31] RIP: 0033:0x7f059298eba9 [ 533.564367][ T31] RSP: 002b:00007ffd21ad8bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 533.572937][ T31] RAX: 0000000000000000 RBX: 00007f0592bd7da0 RCX: 00007f059298eba9 [ 533.581228][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 533.589811][ T31] RBP: 00007f0592bd7da0 R08: 0000000000000184 R09: 0000001621ad8eaf [ 533.597876][ T31] R10: 00000000003ffc58 R11: 0000000000000246 R12: 000000000005e583 [ 533.605986][ T31] R13: 00007f0592bd5fa0 R14: ffffffffffffffff R15: 00007ffd21ad8cd0 [ 533.614009][ T31] [ 533.617571][ T31] INFO: task syz.3.2484:14554 blocked for more than 143 seconds. [ 533.625427][ T31] Not tainted syzkaller #0 [ 533.630499][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.639552][ T31] task:syz.3.2484 state:D stack:26792 pid:14554 tgid:14553 ppid:5876 task_flags:0x400140 flags:0x00004004 [ 533.651958][ T31] Call Trace: [ 533.655517][ T31] [ 533.658573][ T31] __schedule+0x1798/0x4cc0 [ 533.663094][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.668081][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.673044][ T31] ? __pfx___schedule+0x10/0x10 [ 533.678102][ T31] ? schedule+0x91/0x360 [ 533.682373][ T31] schedule+0x165/0x360 [ 533.686661][ T31] schedule_preempt_disabled+0x13/0x30 [ 533.692191][ T31] __mutex_lock+0x7e6/0x1350 [ 533.696942][ T31] ? __mutex_lock+0x5bb/0x1350 [ 533.701751][ T31] ? rfkill_register+0x37/0x8e0 [ 533.706979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.712136][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 533.717715][ T31] ? device_initialize+0x24b/0x440 [ 533.722863][ T31] rfkill_register+0x37/0x8e0 [ 533.727670][ T31] nfc_register_device+0x14a/0x320 [ 533.732809][ T31] nci_register_device+0x87f/0x9d0 [ 533.738230][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 533.743913][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 533.749789][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 533.755340][ T31] virtual_ncidev_open+0x129/0x1a0 [ 533.760490][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 533.766284][ T31] misc_open+0x2bc/0x330 [ 533.770566][ T31] chrdev_open+0x4cc/0x5e0 [ 533.775025][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 533.780435][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 533.786848][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 533.791825][ T31] do_dentry_open+0x953/0x13f0 [ 533.796688][ T31] vfs_open+0x3b/0x340 [ 533.800778][ T31] ? path_openat+0x2ecd/0x3830 [ 533.806345][ T31] path_openat+0x2ee5/0x3830 [ 533.810968][ T31] ? arch_stack_walk+0xfc/0x150 [ 533.816076][ T31] ? stack_depot_save_flags+0x40/0x860 [ 533.821571][ T31] ? __pfx_path_openat+0x10/0x10 [ 533.826672][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.832780][ T31] do_filp_open+0x1fa/0x410 [ 533.837850][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.842717][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 533.847874][ T31] ? _raw_spin_unlock+0x28/0x50 [ 533.852754][ T31] ? alloc_fd+0x64c/0x6c0 [ 533.857144][ T31] do_sys_openat2+0x121/0x1c0 [ 533.861845][ T31] ? __se_sys_futex+0x36f/0x400 [ 533.867167][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 533.872381][ T31] ? rcu_is_watching+0x15/0xb0 [ 533.877237][ T31] __x64_sys_openat+0x138/0x170 [ 533.882145][ T31] do_syscall_64+0xfa/0x3b0 [ 533.886713][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.891943][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.898421][ T31] ? clear_bhb_loop+0x60/0xb0 [ 533.903138][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.909067][ T31] RIP: 0033:0x7f7159f8eba9 [ 533.913497][ T31] RSP: 002b:00007f715adb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.922160][ T31] RAX: ffffffffffffffda RBX: 00007f715a1d5fa0 RCX: 00007f7159f8eba9 [ 533.930444][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 533.938554][ T31] RBP: 00007f715a011e19 R08: 0000000000000000 R09: 0000000000000000 [ 533.946598][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.954675][ T31] R13: 00007f715a1d6038 R14: 00007f715a1d5fa0 R15: 00007fffbfd64c18 [ 533.963107][ T31] [ 533.966211][ T31] INFO: task syz.4.2491:14580 blocked for more than 144 seconds. [ 533.973936][ T31] Not tainted syzkaller #0 [ 533.981731][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.990891][ T31] task:syz.4.2491 state:D stack:28328 pid:14580 tgid:14579 ppid:5870 task_flags:0x400040 flags:0x00004004 [ 534.002941][ T31] Call Trace: [ 534.006316][ T31] [ 534.009280][ T31] __schedule+0x1798/0x4cc0 [ 534.013828][ T31] ? kasan_save_free_info+0x46/0x50 [ 534.019480][ T31] ? __lock_acquire+0xab9/0xd20 [ 534.024379][ T31] ? __lock_acquire+0xab9/0xd20 [ 534.029477][ T31] ? __pfx___schedule+0x10/0x10 [ 534.034367][ T31] ? schedule+0x91/0x360 [ 534.038709][ T31] schedule+0x165/0x360 [ 534.042901][ T31] schedule_preempt_disabled+0x13/0x30 [ 534.048852][ T31] __mutex_lock+0x7e6/0x1350 [ 534.053473][ T31] ? __mutex_lock+0x5bb/0x1350 [ 534.058325][ T31] ? misc_open+0x51/0x330 [ 534.062688][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 534.067784][ T31] misc_open+0x51/0x330 [ 534.072017][ T31] chrdev_open+0x4cc/0x5e0 [ 534.076983][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 534.081938][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 534.088334][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 534.093381][ T31] do_dentry_open+0x953/0x13f0 [ 534.098206][ T31] vfs_open+0x3b/0x340 [ 534.102295][ T31] ? path_openat+0x2ecd/0x3830 [ 534.107454][ T31] path_openat+0x2ee5/0x3830 [ 534.112045][ T31] ? arch_stack_walk+0xfc/0x150 [ 534.116995][ T31] ? stack_depot_save_flags+0x40/0x860 [ 534.122503][ T31] ? __pfx_path_openat+0x10/0x10 [ 534.127515][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.133632][ T31] do_filp_open+0x1fa/0x410 [ 534.138681][ T31] ? __lock_acquire+0xab9/0xd20 [ 534.143551][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 534.148659][ T31] ? _raw_spin_unlock+0x28/0x50 [ 534.153545][ T31] ? alloc_fd+0x64c/0x6c0 [ 534.158162][ T31] do_sys_openat2+0x121/0x1c0 [ 534.162855][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 534.168493][ T31] ? exc_page_fault+0x76/0xf0 [ 534.173213][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 534.178674][ T31] __x64_sys_openat+0x138/0x170 [ 534.183580][ T31] do_syscall_64+0xfa/0x3b0 [ 534.188160][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.193408][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.200042][ T31] ? clear_bhb_loop+0x60/0xb0 [ 534.204734][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.210671][ T31] RIP: 0033:0x7f9cff18eba9 [ 534.215114][ T31] RSP: 002b:00007f9cfff38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.223591][ T31] RAX: ffffffffffffffda RBX: 00007f9cff3d5fa0 RCX: 00007f9cff18eba9 [ 534.231872][ T31] RDX: 00000000000a8442 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 534.239968][ T31] RBP: 00007f9cff211e19 R08: 0000000000000000 R09: 0000000000000000 [ 534.248231][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.256710][ T31] R13: 00007f9cff3d6038 R14: 00007f9cff3d5fa0 R15: 00007fff8ed8b788 [ 534.265330][ T31] [ 534.268446][ T31] [ 534.268446][ T31] Showing all locks held in the system: [ 534.276251][ T31] 1 lock held by khungtaskd/31: [ 534.281144][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 534.291542][ T31] 2 locks held by getty/5627: [ 534.296308][ T31] #0: ffff88803351e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 534.306138][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 534.316793][ T31] 4 locks held by kworker/0:6/5950: [ 534.322009][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 534.333020][ T31] #1: ffffc90004857bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 534.346078][ T31] #2: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 534.356507][ T31] #3: ffff8880510ed100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 534.366291][ T31] 1 lock held by syz.1.2461/14479: [ 534.371412][ T31] #0: ffff8880510ed100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 534.381686][ T31] 3 locks held by syz.3.2484/14554: [ 534.386950][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.395456][ T31] #1: ffff88805161f100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 534.405129][ T31] #2: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 534.415626][ T31] 1 lock held by syz.4.2491/14580: [ 534.420731][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.429231][ T31] 1 lock held by syz.2.2515/14644: [ 534.434359][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.442928][ T31] 1 lock held by syz.0.2522/14661: [ 534.448357][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.456856][ T31] 1 lock held by syz-executor/14667: [ 534.462238][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.470917][ T31] 1 lock held by syz-executor/14670: [ 534.479801][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.488358][ T31] 1 lock held by syz-executor/14671: [ 534.493664][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.502247][ T31] 1 lock held by syz-executor/14674: [ 534.508044][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.516596][ T31] 1 lock held by syz-executor/14675: [ 534.521889][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.530412][ T31] 1 lock held by syz-executor/14677: [ 534.536220][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.544709][ T31] 1 lock held by syz-executor/14680: [ 534.550048][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.558672][ T31] 1 lock held by syz-executor/14681: [ 534.564146][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.573129][ T31] 1 lock held by syz-executor/14684: [ 534.578522][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.587447][ T31] 1 lock held by syz-executor/14685: [ 534.592753][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.601632][ T31] 1 lock held by syz-executor/14687: [ 534.607053][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.615644][ T31] 1 lock held by syz-executor/14690: [ 534.620958][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.629685][ T31] 1 lock held by syz-executor/14691: [ 534.635109][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.644212][ T31] 1 lock held by syz-executor/14694: [ 534.649745][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.658292][ T31] 1 lock held by syz-executor/14695: [ 534.663579][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 534.672301][ T31] [ 534.674661][ T31] ============================================= [ 534.674661][ T31] [ 534.683674][ T31] NMI backtrace for cpu 1 [ 534.683692][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 534.683713][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 534.683724][ T31] Call Trace: [ 534.683732][ T31] [ 534.683739][ T31] dump_stack_lvl+0x189/0x250 [ 534.683771][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.683793][ T31] ? __pfx__printk+0x10/0x10 [ 534.683834][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 534.683862][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 534.683890][ T31] ? __pfx__printk+0x10/0x10 [ 534.683921][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 534.683952][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 534.683980][ T31] watchdog+0xf93/0xfe0 [ 534.684012][ T31] ? watchdog+0x1de/0xfe0 [ 534.684045][ T31] kthread+0x70e/0x8a0 [ 534.684071][ T31] ? __pfx_watchdog+0x10/0x10 [ 534.684094][ T31] ? __pfx_kthread+0x10/0x10 [ 534.684116][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.684134][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.684149][ T31] ? __pfx_kthread+0x10/0x10 [ 534.684163][ T31] ret_from_fork+0x3fc/0x770 [ 534.684176][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 534.684191][ T31] ? __switch_to_asm+0x39/0x70 [ 534.684204][ T31] ? __switch_to_asm+0x33/0x70 [ 534.684217][ T31] ? __pfx_kthread+0x10/0x10 [ 534.684231][ T31] ret_from_fork_asm+0x1a/0x30 [ 534.684253][ T31] [ 534.684258][ T31] Sending NMI from CPU 1 to CPUs 0: [ 534.831922][ C0] NMI backtrace for cpu 0 [ 534.831939][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 534.831956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 534.831965][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 534.831991][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 27 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 534.832003][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 534.832018][ C0] RAX: aa887ae23d790800 RBX: ffffffff819683f8 RCX: aa887ae23d790800 [ 534.832030][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b8d2c RDI: ffffffff8be33880 [ 534.832040][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 534.832050][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa39830 [ 534.832061][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 534.832071][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 534.832083][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.832094][ C0] CR2: 000055df600b0fb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 534.832109][ C0] Call Trace: [ 534.832116][ C0] [ 534.832121][ C0] default_idle+0x13/0x20 [ 534.832137][ C0] default_idle_call+0x74/0xb0 [ 534.832152][ C0] do_idle+0x1e8/0x510 [ 534.832170][ C0] ? __pfx_do_idle+0x10/0x10 [ 534.832192][ C0] cpu_startup_entry+0x44/0x60 [ 534.832206][ C0] rest_init+0x2de/0x300 [ 534.832222][ C0] start_kernel+0x3a9/0x410 [ 534.832244][ C0] x86_64_start_reservations+0x24/0x30 [ 534.832260][ C0] x86_64_start_kernel+0x143/0x1c0 [ 534.832276][ C0] common_startup_64+0x13e/0x147 [ 534.832302][ C0] [ 534.832961][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 535.013840][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 535.022957][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 535.033016][ T31] Call Trace: [ 535.036300][ T31] [ 535.039235][ T31] dump_stack_lvl+0x99/0x250 [ 535.043835][ T31] ? __asan_memcpy+0x40/0x70 [ 535.048449][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.053680][ T31] ? __pfx__printk+0x10/0x10 [ 535.058306][ T31] vpanic+0x281/0x750 [ 535.062304][ T31] ? __pfx_vpanic+0x10/0x10 [ 535.066820][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 535.072401][ T31] ? preempt_schedule+0xae/0xc0 [ 535.077269][ T31] ? preempt_schedule_common+0x83/0xd0 [ 535.082917][ T31] panic+0xb9/0xc0 [ 535.086734][ T31] ? __pfx_panic+0x10/0x10 [ 535.091156][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 535.096542][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 535.102707][ T31] watchdog+0xfd2/0xfe0 [ 535.106895][ T31] ? watchdog+0x1de/0xfe0 [ 535.111266][ T31] kthread+0x70e/0x8a0 [ 535.115369][ T31] ? __pfx_watchdog+0x10/0x10 [ 535.120077][ T31] ? __pfx_kthread+0x10/0x10 [ 535.124674][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 535.129885][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.135243][ T31] ? __pfx_kthread+0x10/0x10 [ 535.139846][ T31] ret_from_fork+0x3fc/0x770 [ 535.144445][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 535.149570][ T31] ? __switch_to_asm+0x39/0x70 [ 535.154348][ T31] ? __switch_to_asm+0x33/0x70 [ 535.159121][ T31] ? __pfx_kthread+0x10/0x10 [ 535.163719][ T31] ret_from_fork_asm+0x1a/0x30 [ 535.168503][ T31] [ 535.171794][ T31] Kernel Offset: disabled [ 535.176113][ T31] Rebooting in 86400 seconds..