last executing test programs: 3.108755388s ago: executing program 2 (id=8567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbfe}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x5, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="6627000800000000240012800900010078efd9071300a75f0aa88800001400"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe91}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r3, r3, 0x2f}, 0x20) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r12, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r12, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r13 = socket$inet_sctp(0x2, 0x5, 0x84) r14 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r15, 0x6, 0x100}, 0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r15, @ANYBLOB="0e050201000086f10e14e80700000000000000007977cf4f34c483441d8c4114d3982887ab0630cba9a13eb0290c9428a07247f8d011203a2a4d31c41ea0e5c68e8f5f96862f8cd081a59ed88ccf09e057cb71b914bf44c6c912b9889a8e55727536a5f8fc67abefd1469e33c9f8ce9198073b70050981a7be3284a4b8b912742a6f44637dfe66dbd3a1af6f51b2645e30387c0aa11a79c3c76c0f494449d34b22b097e7d305b4cc042623f75720330f85a5739ee297946b51479464c3764defd2b0"], 0x18) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0xa08e}, {r12, 0x14c8}], 0x3, 0x0, 0x0, 0x0) 2.627271398s ago: executing program 3 (id=8574): select(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 2.168842298s ago: executing program 2 (id=8581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0xfffffffffffffe77) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r4, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x80, 0x80000) (async) listen(r5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x15) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r12 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x12) (async) pread64(r12, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}, {&(0x7f0000000300)="f4bbfbc629db3fcffa896005ce5a8bd524d21e8283b1aff519c7", 0x1a}], 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r8) 2.125448083s ago: executing program 1 (id=8582): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400"], 0x5) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x40000) (async) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x7, 0x1}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @loopback}}]}}]}, 0x48}}, 0x4000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b0000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000004a2ec4994bd8458b36604125042caaff5c6cf5d88b3771575eaf62c6a437805e34e24fd6095b32ac8e1e6bd90f6ed4379258d22ad9236e23a5d3221d4d833745b2506846cf5443fa53b7f810bdd641"], 0x68}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r12, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7fff, 0xa88e, 0x1, 0x80000001}}}, [""]}, 0x30}}, 0x80) (async) r13 = socket$netlink(0x10, 0x3, 0x9) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.952070218s ago: executing program 2 (id=8583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x190, 0x30, 0x1, 0xfffffffc, 0x0, {}, [{0x17c, 0x1, [@m_skbmod={0x178, 0x1b, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x6, 0x8, 0x5, 0x9}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="7f5e217ff751"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0xca, 0x6, "9301be0d8f37ae4c08b0fd88115bab6fcd356e991d093a4c73629147e31b1b4a939697c3a8ea18563e6ff8619595602a1915310213a11465332722fbe6e7e85ce0af613ce3e05488076254e22889fbd530f1e260b1c3e8337babf005c23b2761a2bb91d331af41532f34b16fadc194c0e3b7b1271f3fae74f70785f85a1554d5449091a1524943103073e7391d84cd95c22020c4e50bbfe80e694c2e3b5cbe955958c5cd09387f801ef2d244963af4eed9f5ff7f7cb73cfd694b6ebd98d7e5679182b8a3c5ee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x190}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf2517000000440006803c000400676b6d286165732900000000000000000000000000000000000000000000000014000000bf1dddca2049e38b2f49083c278c97edd08cd4e8040005"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4014) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0xb4, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x99}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75af}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000001}, 0x400c085) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000129bd7000fbdbdf2502000000080004000100000008000200020000001400015dd7c6c027da5350b208000300ffffff6140faece8052dff08000300ac1414bb080002000100000008000200030000000502e7c698f18300150009000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3100000000000000000000000800090000000000e1153735134431d5485bab5041a0d822f2f8cd1181712e8e8ae1ff9002000000250af8c7b77b286f0d69983cfa16baa7f1c3cec4e5559b52703ccccdf49efaaeaf92942dceb1451e73adf4727b990444451edaff5e5b19f0b2df9c51e5f06d8e16425a304e3edd4473733e9287130b03a2af3553bb3deec0683392d91d1ec0a42b8eb6b28d4e22e4fc0bc00d2b48b2ca8c881c36dc2335c53785134bc4ba73b2b861e22f0d465c7575304481bf763c38913985d9fb33f406bf605b64f2d6bd"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.849302688s ago: executing program 1 (id=8586): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000e00000000001c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x15555555555556f6, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4041) 1.697108353s ago: executing program 3 (id=8588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 1.554219483s ago: executing program 0 (id=8589): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x4, @loopback, 0x0, 0x0, 'lc\x00', 0x12, 0x9, 0x54}, 0x2c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 1.404449916s ago: executing program 4 (id=8590): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0xfff3}, {0x0, 0xfff1}, {0x2, 0x1c}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffe00}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl(r6, 0x2, &(0x7f0000001a80)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7880, 0x7800, 0x0, 0x667, {{0x2d, 0x4, 0x0, 0x6, 0xb4, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x1c, 0x1, [{0x1, 0x2}, {0x2, 0x8, "c8b20dff1d0c"}, {0x5, 0x5, "cbd28c"}, {0x1, 0x7, "b418e9f1aa"}]}, @noop, @cipso={0x86, 0x16, 0x0, [{0x1, 0x7, "8459d2c49a"}, {0x1, 0x4, "7201"}, {0x0, 0x2}, {0x1, 0x3, "a2"}]}, @rr={0x7, 0xb, 0xbd, [@multicast2, @local]}, @timestamp_addr={0x44, 0x14, 0x94, 0x1, 0x6, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @timestamp_prespec={0x44, 0x44, 0x86, 0x3, 0x2, [{@empty, 0x2}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x8}, {@multicast2, 0xc}, {@remote, 0x80000000}, {@rand_addr=0x64010100, 0xdda}, {@empty, 0x7}, {@broadcast, 0x6}]}, @lsrr={0x83, 0x7, 0x6b, [@dev={0xac, 0x14, 0x14, 0x23}]}]}}}}}) unshare(0x20040600) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@deltclass={0x6c, 0x29, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xc}, {0x2, 0x10021}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x83, 0xc}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0xe2}]}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x4}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x22, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f00000003c0)={@loopback, r7}, 0x14) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x200, 0x0, 0x1, 0x7, 0x7, 0x4370, 0x7, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x10001, 0x10000, 0x8, 0x4, 0x1}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r8, 0x4c, &(0x7f0000000180)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x5ae5, @loopback, 0x57}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}]}, &(0x7f0000000240)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x1900, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}, @filter_kind_options=@f_basic={{0xa}, {0x1820, 0x2, [@TCA_BASIC_EMATCHES={0x20c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xfcf0, 0x2, 0x2}, {0x9, 0x3, 0x0, "5bde2d"}}}]}, @TCA_EMATCH_TREE_LIST={0x1c8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x28}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x60, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x9}, "46be282a8f07e8ddde299fb2d4c1971dd867e1644996a3bc468a31cf119eaab1d6f6ffc57ed3ad8099f2700298cc7e77f0266e2b120380cbcfa16f601d424ebaf3564bc929fe032a37f7794573cb6b9854"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfffb, 0x1, 0x77dc}, {0xd, 0x2, 0x7f2, 0x2, 0xe, 0x2, 0x1}}}, @TCF_EM_META={0x2c, 0x3, 0x0, 0x0, {{0xfffe, 0x4, 0xfffe}, [@TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9}, {0x1000, 0x85}}}]}}, @TCF_EM_META={0x90, 0x3, 0x0, 0x0, {{0xff, 0x4, 0x10}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x1}, {0x3, 0xf0, 0x1}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="efef92d8220577f63e", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x3a, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="969c6497", @TCF_META_TYPE_VAR="ef5b43aba96349", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="799321a11b53e879", @TCF_META_TYPE_VAR="d4be3604ac", @TCF_META_TYPE_VAR="fe11431b57eb", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="994d866318556a3c"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="48b1975893", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x11, 0x2, 0x2}, {0x8, 0x4}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2}, {0x0, 0x80, 0x0, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x7}, {0xff, 0x8000, 0x1000, 0x1, 0x5, 0xee1f2e7775a130cf, 0x2}}}, @TCF_EM_CONTAINER={0x48, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x400}, "ffd88cf6e193188a35db325aa3bb675f6eec03a4804f41128691a4b41f66f143abbd98e6c1b6d07c2337170d415ffe0fad372b7e0acb42fb269a6bf6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x1}, {0x7f, 0x7, 0x6, 0x3}}}]}]}, @TCA_BASIC_POLICE={0x410, 0x4, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80000000, 0xe0, 0x42, 0x1, 0xb4, 0x2, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x0, 0x7fff, 0x3, 0x19, 0xb67, 0x401, 0x3, 0x3, 0x3, 0x400, 0xa, 0x0, 0x6, 0x4f, 0x100, 0x1ff, 0x800, 0x7, 0x9, 0x6, 0x7, 0x2, 0xc, 0x8, 0xffffffff, 0x1, 0x10000, 0x6, 0x2, 0xf, 0x10, 0xfffffcb5, 0x4, 0x100, 0x9, 0xff, 0xfffffffe, 0x2, 0x30e, 0x3, 0x8, 0x81, 0x2852, 0x3, 0x7, 0x8, 0xfc, 0x5, 0xe, 0x80, 0x5, 0x9, 0x80, 0x7, 0x4, 0x168e, 0xf85, 0x7ff, 0x1ff, 0xfffffff8, 0x5, 0x5, 0x8, 0x8, 0x9, 0x2, 0x9, 0x6, 0x1, 0x4a63947a, 0x1, 0x4, 0x7, 0x6, 0x2, 0x62, 0x2, 0x7, 0x6, 0x7f8, 0x73d0, 0x3, 0x77, 0x0, 0x2, 0x1, 0x5, 0x3, 0x2, 0xe12, 0xff, 0x71b, 0xfffffff7, 0x2, 0x6eb, 0xd, 0x0, 0x59, 0x3, 0x5, 0x7fff, 0xffff0001, 0x0, 0x0, 0xb, 0x2dd9, 0x5, 0x1, 0xc, 0x7, 0x93, 0x3, 0x500000, 0xfffffff0, 0x7fff, 0x5, 0x7fff, 0x9, 0x2, 0x0, 0xff, 0x7, 0x7ff, 0x7, 0x310, 0x9, 0x5, 0x9, 0xb47, 0x9, 0x7, 0x6, 0x3c1, 0x8, 0x2, 0x7, 0xd1, 0x5, 0x42f5fb38, 0x6, 0xfffffff9, 0xe000, 0x1000, 0x5, 0x1, 0xb799, 0x5, 0x1, 0x8, 0xd, 0x8001, 0x0, 0x4, 0x6, 0x5, 0x6, 0x101, 0x1, 0xa8, 0x3d5, 0x4, 0x4, 0x7, 0x1a, 0x5, 0x6, 0x2, 0x2, 0x3, 0x7, 0xe, 0x4, 0x4, 0x6, 0x0, 0x2576, 0x0, 0x7, 0x0, 0x1, 0x9, 0x4, 0x1, 0xff, 0xc0000, 0x7, 0x0, 0x1, 0x1, 0x8000, 0x8, 0x9, 0x311, 0x6, 0x4, 0x7fff, 0x200, 0x80000001, 0x1, 0x6, 0x9, 0x8000, 0x3, 0x0, 0x7fffffff, 0x8001, 0x3ddd, 0x5, 0x0, 0xb7a, 0x2, 0x4, 0x3, 0x7, 0x101, 0x8000, 0xae, 0x3, 0x6, 0x0, 0x8, 0xf8be, 0xc0, 0x5, 0x3, 0xffff8000, 0x7, 0x401, 0xfffffff8, 0x9, 0x4, 0xbe8, 0x7, 0xff, 0x7, 0x10000, 0x9, 0x8, 0x7, 0x1, 0x8, 0x2, 0x3]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xf}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_BASIC_ACT={0x11f0, 0x3, [@m_mpls={0x14c, 0x18, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x93102}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfe0e5}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0xed, 0x6, "bd3923cb025368d274fafdfd2d75801661903b88fcef071ee54378fba4d96b637b8184371dd4bda7fce97b0ccd78bbdad9c649ce6cd6e4808cff26e4a76b86c2e6e51c126197dd9b3d5b82ee5eccae5c1fb85f547f9e0a0f07613088fadb5bd4697d42e1a68f1c60b50ad4f19251739ee584a7b75c362d87078c49f9af25561875480370ff8d41319b0215f94db89dc8b5fe875eba10a942939292f316dd4ee863e4bf9c6ebb89eaf866c24b5be4c21531bc6574fc1600c8af5e37683906e2d446f631af75dc5a806c099e0c209f5f082c7af675a83beadfb1402593a0abc56bbdaf728c73bdd97524"}, {0xc}, {0xc, 0x8, {0x4}}}}, @m_xt={0x140, 0x7, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd0, 0x6, {0x3, 'mangle\x00', 0x3, 0x5, "4fe84eaf6c7c5127bcdbf0f374956c2032996b5542ffd9655cfe821b2772e3a6aa43e173c9b49323a9043c327d94456f373169bfadc3e16f88d98448d7c6e8a60c324cda58d7851c39a61f595ba2151c45b48ce2045c65208e1dbaa35ee36513a88814f094229c5c7f61829304f717e20b568db2abc76f368c074c5168582838302030630f1e0ebdc7f7d57678b4b6ece24b0b4c2c59dc6f4d791fa605847f8d11d92cf0c249"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x401}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x2f, 0x6, "ded5c3272150d189a89ea38c78358617f61d33925ac741671d3df2824ff0b1913f089b8bffa4d5ea6ee10b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xa8, 0xf, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x61, 0x6, "aadb50100125efb7b711728a993c33a7c0df9dfe5a9baa670171a3fc396abf9c5081c1131282d4dd264c391a7234deeed871ee07d9957d252d347f7f6c957d93498103ebe7447ae9132943a23429f0064a5e9559b5a87020b87db8cf2a"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_police={0x170, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x4, 0x0, 0xc, {0x2, 0x2, 0x1, 0x3, 0xfffb, 0xffffffff}, {0x17, 0x1, 0xfe00, 0x14, 0x100, 0x1}, 0x0, 0x5, 0x100}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd66}]]}, {0xe2, 0x6, "b056a51399800e1192b298d21b58660e505af2aca5e611c30d5cb107861841fd59e5a46fb534b85334707022010760cbd77761f3354a10b7f3863f1d64d8bf584a5aad62e1ecd176d23719a28d6f59c7c4af04a98317f08d883dd7fcaf4cf5123d4c1f556cc96757bdebbd424ca1f29cd5bffe399bd694aa128672295498a776a29450b1ebc6e8c3794b5908161ee0e6a0387e72e9cadafcc7fd17329c6141f2f2b903b054e8624f464b9182e5cd43a53f8f9024ff045dee981354603603a0b947822b28c662ee6e36b98c0b2fa86b4437f64771a68e5f61790a2c5ac5ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x130, 0x11, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x7, 0x4, 0x6}, 0x904a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x1, 0x101, 0x1}, 0x5}}]}, {0xc5, 0x6, "e96e691f67714e9c4f59d08d73424c57be54345ba1d846c4c452bf71ce261b542c93b62e2016adfd6eb6a33dacd0b945c879a2f2104758d200027937d65d9e6f63bedd5a1971b46a51c1139258d885652270b28b162f51e5394f0f6ef97a8e8796441c4e9782de2e63f6f0ca9adf7d46c22aa1534f337ced6752c3dc17839346d0f43ce58e66a2352ed9e5ccdaf4540ba519eefb10a1d13944279812eeec616e2e7b12b66d9cf8a7ab579ed6d327938a590e09aad0b4f257b956243408936d15ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x138, 0x19, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10, 0xa120, 0x3, 0x3}}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x7, 0x9, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7, 0x20000000, 0xa16, 0xba}}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}]}, {0xb4, 0x6, "f8aa095058b78e98403d74cef8aef08a17c97ed5f67e70a3c2b7bc11b8babe16e25664ba68ca3a26becdad58bbf901504a56ed63bb29f5dcb72d7cf1922e8070a505af4c08e25a3f901aaabfb22071f819066d7e62e8fe90793f89b4866047ee9e22626b27db07c7244c0a4b73dbc02d941b75afb4bdab5eb54ae0605aa94459bf301ddca0d9bd57ac4a68fb60b96fddf1c7486068d3e4aff8d600c0b2f19c8d7934b1243b9854b88b31ddec725ae51e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x140, 0x19, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xae, 0x10000000, 0x2, 0xfffffc00}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x8, 0x6, 0x3f}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x6, 0x3ff, 0x9f92}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xeb7, 0x9, 0x5, 0x5, 0x3ff}, 0x4, r10}}]}, {0x92, 0x6, "98f5698c2e02741f4a5fd39b11ad63f22286befa6364545c3fe4c8c432eb2eb77ecc72981b7d6be500e870b4afbb458c7712ef79d0ffef28e88a4b31053cf8c5dfbdbab772e4c187f8c03a39751751bc98b6a86fe10b6aeb990100e8eed4898db9dc3f811583dc54537766ddedbceef249feb32be92f90894fbb54b567da9a6dd8e86b56cc315effae8416689173"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x9a0, 0x1c, 0x0, 0x0, {{0xb}, {0x96c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x8, 0x7, 0x3, {0x90, 0x2, 0xff, 0xe6c0, 0x5, 0x8f4b}, {0x2, 0x2, 0x9, 0xff01, 0x3, 0x3ff}, 0x7, 0x9, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffc01}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x1, 0x3, 0x4, 0x7, 0xfffff823, 0x7, 0xe6, 0x7f, 0xfffffff8, 0x0, 0x9, 0x8, 0x0, 0x80000000, 0x2, 0x3, 0xab7c, 0x80, 0x9, 0x10001, 0x1fffe00, 0x7, 0xc, 0xffffff3c, 0x8, 0x32, 0x6, 0x86, 0x3, 0xcc, 0x7, 0x3, 0x81, 0x10001, 0x0, 0x7fffffff, 0x8, 0x8, 0x10, 0xea, 0x9, 0xa, 0x1, 0x4, 0x6, 0xb2, 0x7, 0xa, 0xffffffff, 0xd2, 0x7, 0x3, 0x3, 0xfffffff0, 0xe6d, 0x10, 0x3, 0x4a52, 0x9, 0x4, 0x1000, 0x1, 0x8, 0x8, 0x8, 0x12a86fcc, 0x4, 0x80000000, 0x9, 0x8, 0x51b59235, 0xaa, 0x9, 0x3, 0x3bc7, 0x8, 0x2, 0x3, 0x8, 0x6, 0xe0a, 0x0, 0x9, 0x8, 0x800, 0x6, 0x1, 0x2, 0x80000001, 0x3, 0x74f, 0x2, 0x7, 0x8000000, 0x7, 0x4, 0x200, 0x401, 0xe, 0xd9, 0x3, 0x869c, 0x2, 0x9, 0xf, 0x10001, 0x47, 0x1, 0x0, 0x7, 0x3, 0x9742, 0xb6d4, 0xd65, 0x792, 0x8, 0x80, 0xc, 0x1000, 0x4, 0x7, 0x1, 0x6, 0xed2, 0x3, 0x8000, 0x2f00000, 0x6, 0xe, 0x1, 0x7f9c, 0x80000000, 0xb682, 0x5, 0xffffffff, 0xe, 0x8000, 0x7c37, 0xe, 0x2, 0x0, 0x1, 0x101, 0x2, 0x6, 0x4, 0x2, 0x4, 0x400, 0x0, 0xd, 0x3ff, 0x4, 0x35, 0x80000000, 0x2, 0x8, 0xbd98, 0x8a1, 0x0, 0x3, 0x8c, 0x4, 0x2, 0xe548, 0x1, 0xb, 0x0, 0x56e6, 0x80000000, 0x2, 0x0, 0xacde, 0x2, 0xfffffffb, 0x9, 0x6, 0x8, 0x1, 0xffffffff, 0xe, 0x1, 0x6d2, 0x1, 0xffff158d, 0x401, 0x3561, 0xc, 0x3, 0x531, 0x0, 0x3, 0xfffffff9, 0xfffffffe, 0xb34, 0x4, 0x9, 0xf78f, 0xfffffffe, 0xfffffff1, 0x4, 0x6, 0x38000000, 0x5, 0xf1, 0xfffff001, 0x6, 0xffffffff, 0x0, 0x40, 0x2, 0x7, 0x7f, 0x800, 0x2d7c, 0x1, 0x12, 0x10000, 0x6d4, 0x8, 0x4, 0x7f, 0x1, 0x40, 0x6, 0x0, 0x8, 0x4, 0x352, 0x6, 0x9932, 0x6, 0xd, 0x6e43, 0xffffffff, 0x80, 0x4, 0x4, 0xc8, 0x9, 0x7fff, 0x7, 0x4, 0x80000001, 0x4, 0x1ff, 0x10000, 0x4, 0x4, 0xe, 0x40, 0x1, 0x8, 0x0, 0x194]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0x5, 0xcc7, 0x6, {0x8, 0x1, 0x200, 0x6bf9, 0x800, 0x6a}, {0x0, 0x2, 0x8, 0x5, 0x401, 0xe}, 0x100, 0x8, 0x9}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xfff, 0x8, 0x4, 0x9, 0x332, 0x3, 0x8, 0x6, 0x2, 0x1ff, 0xace, 0x5, 0x3, 0xe0b, 0x3, 0x1, 0x10000, 0x400, 0x5, 0x7fff, 0x5, 0xfff, 0x3c, 0x4, 0xffffda3c, 0x0, 0xdc, 0xa68, 0xd7, 0x0, 0x8, 0x1, 0x3, 0x600000, 0x4, 0x8000, 0x1, 0xfffffff5, 0x2, 0x5, 0x5, 0x1, 0xffff, 0x3, 0x7, 0x2, 0x59ff, 0x9, 0x2, 0x80, 0x6, 0x4, 0x15f, 0x3c, 0x3e, 0x8000, 0x4d3edeac, 0xefa8, 0x8000, 0xe907, 0x8, 0xfffffffe, 0x7, 0xfffffffc, 0xfffffffe, 0xc, 0xfffffffb, 0x7, 0x3, 0x75e8a7f8, 0x12c3f743, 0x39d8, 0x10, 0x7, 0x4, 0x2, 0xfff, 0x3, 0x9, 0x7, 0xffff, 0x6, 0x0, 0xaa, 0x5, 0x80000000, 0x3, 0x101, 0x8, 0x9, 0xc, 0x0, 0xd5d, 0x2, 0x710, 0x8, 0x60, 0x2, 0xffff, 0x3, 0xff, 0xc25, 0x3, 0x3e, 0x4, 0x1, 0x5, 0x800000, 0x2, 0x40, 0x8, 0x3, 0xc, 0x4, 0x7, 0x6, 0x8, 0x5968, 0xfffffff9, 0x1, 0x5, 0x5, 0x0, 0x2, 0x10, 0x1, 0x2, 0xfffffbff, 0xff, 0xfffffffc, 0xfffffff9, 0x917, 0x0, 0x101, 0x0, 0x0, 0xa5, 0xfffffeb5, 0xf, 0x0, 0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x2, 0x3, 0x6, 0xc, 0x0, 0xc, 0x4, 0x8001, 0x1, 0xffffff9b, 0x5, 0x8, 0x7ff, 0x81, 0x4, 0x3, 0x7, 0xfa10, 0x0, 0xb5a, 0x9, 0x81, 0x5, 0x683, 0x0, 0xe8e, 0x0, 0x5, 0xfffffff5, 0x5, 0xfff, 0x0, 0x8, 0x4, 0xa, 0x4, 0x9, 0x1, 0x1, 0x81, 0x200, 0xffff0001, 0x3, 0xfffffffc, 0x8, 0x9, 0x3ff, 0x7, 0x5, 0x6, 0x4, 0xd, 0xe4d4, 0x6772ab3e, 0x4, 0x0, 0xfffffffc, 0x8, 0x1, 0x4, 0xfff, 0xcb, 0x8bb8, 0x38ca, 0x8, 0x4, 0x2, 0x7f, 0xd33, 0x3, 0x9, 0xb, 0x7fff, 0x5, 0x9, 0x7, 0x2, 0x8, 0x3, 0x0, 0x7fff, 0x1000, 0xfffffffb, 0x6, 0x6, 0x8e, 0x80000001, 0x0, 0x5, 0x81, 0xfff, 0xb, 0x2, 0x3, 0x6, 0x7800000, 0x18a000, 0x314, 0x4, 0x8, 0xfffffe00, 0x4, 0x800, 0x0, 0x6, 0x0, 0xfa66, 0x10000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x0, 0xffff7fff, 0x7, {0xad, 0x2, 0x2, 0x1, 0x1, 0x100}, {0xc, 0x2, 0x7, 0x8, 0x4, 0xfff}, 0x6, 0x7fffffff, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x401, 0x9, 0x804, {0x3, 0x0, 0xffff, 0x2, 0x5, 0x60}, {0x4, 0x2, 0xc4, 0x100, 0x7, 0xfffffff9}, 0x6, 0xf57, 0xb2b}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff00000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x2, 0x5, 0x80000001, {0x8, 0x0, 0xcf78, 0xf0b4, 0xffff, 0x8}, {0x4, 0x0, 0x3, 0x2f15, 0xb, 0x1}, 0xc, 0x4, 0x2}}]]}, {0xc, 0x6, "26a9dab98f335301"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xd481202f4754eb3c, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e23}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xd, 0x9}}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xd}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xe1}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x2e}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_FW_ACT={0x4}, @TCA_FW_MASK={0x8, 0x5, 0xa6f1}]}}]}, 0x1900}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000400)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) 1.394997343s ago: executing program 2 (id=8591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x3}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x20, 0x70bd25, 0x25dfdbfe, {0x80, 0x14, 0x14, 0x1, 0xfe, 0x4, 0xff, 0xa, 0x100}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) 1.294335619s ago: executing program 0 (id=8592): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) 1.291898028s ago: executing program 3 (id=8593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000014002101006119f9c4cb4f23007e0000", @ANYRES32=r0, @ANYBLOB="14000200200100"/20], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r1 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000240), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000240), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="dd8d000000000000000002001000fe04000100000020000000000020584ba9941c3c807c7126805dcb4e37b2f3d9a455e322"], 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001280)={0x0, @in6={{0xa, 0x4e23, 0xec, @remote, 0x1}}}, &(0x7f0000001340)=0x84) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00'}, 0x94) sendmmsg$inet_sctp(r1, &(0x7f0000003440)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc080}], 0x1, 0x4802) (async) sendmmsg$inet_sctp(r1, &(0x7f0000003440)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc080}], 0x1, 0x4802) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001640)={r3, r5, 0x25, 0x4, @val=@tcx={@void, @value=r3}}, 0x1c) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001640)={r3, r5, 0x25, 0x4, @val=@tcx={@void, @value=r3}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "659b78", 0xd47, 0x2f, 0x0, @empty, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc42, 0x2, [], "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"}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8f], "5ffecb5355a3f86d4bacc83f3e9a9ee4e47ae3cede6f3f54a97b36cf2c73a57f356e541cf2e271b8cd7edf7fb88a13cd0298d1810e78794dd8b71f594e3bd17f0b1bfb991ca745a037"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, 0x5}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x1, 0x6}, 0x2, {0x9, 0x6, 0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "090b48410100000000000000d8f505d7e11abce6d372df33a546b823641e47d483b455aaca8bc14ae0b7e0fbbf0fee27f2d934bb6d93467008c6ef5571fcccf2d961b489c65c8c3c8023759f19a2b126dbbbb1e14c95a0f3e53b86f8f2b4cdd6e5145248cb79a15859d5f445c8b4863a0fbee319029b"}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x14) (async) socket$netlink(0x10, 0x3, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000100)) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) 1.234154818s ago: executing program 4 (id=8594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0xac, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x90, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x17}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.161681726s ago: executing program 2 (id=8595): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x400442c9, 0x200000f3) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.105554098s ago: executing program 0 (id=8596): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r2, 0x200}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x4005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000480)={0x0, 0x7fffffff}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x44, 0x1, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8000, 0x8000, 0x5, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x2c, 0x29, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x13, 0xffff}, {0x10, 0xd}, {0xd, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x87, 0x2b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x11}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) 1.101454556s ago: executing program 1 (id=8597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x800, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) close(r1) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180600000000db0000bd700001000000081d0200a1c6e90fac0cc62850376daf54ef484f6c0000"], 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) r11 = socket$key(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$key(r11, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) 989.525691ms ago: executing program 3 (id=8598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x44000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(0x3) 786.372707ms ago: executing program 0 (id=8599): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x25, 0x4, 0xfffffffe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x8) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, 0x0, 0x2000) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @random="4e2df1d70cf2", 'batadv_slave_1\x00'}}, 0x1e) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8004) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="090000f908ad5bc60000000000049f4612194bf3095bbcfb4cadbbf182f8f0c9633e0257968a5b9c5fbc4c343c01726ea52213faf8befcb1b88e61acdd67e33b17d5c37dd97dac646c6491ae92d64337d2624427e30fa807fecdbec9"], 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r11, @ANYBLOB="16001300121b92c90398069296b600a40401091b049b0000060012000400000006001000df0000000a000600ffffffffffff00000600ab00010000000600120103000000"], 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x8050) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="d5572917", @ANYRES16=r10, @ANYBLOB="00042dbd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x4000) (async) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 771.681933ms ago: executing program 4 (id=8600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00fffc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00'], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4000}], 0x1, &(0x7f00000003c0), 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) 713.977582ms ago: executing program 2 (id=8601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x7, 0xfffffdfd, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r13], 0x50}, 0x1, 0xba01}, 0x0) r14 = socket(0x10, 0x3, 0x0) write(r14, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 552.618071ms ago: executing program 0 (id=8602): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x26, 0xfffffed1, 0x0, 0x0, 0xff, 0x0, 0x0, @multicast1, @private=0xa010100}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv4_getaddr={0x18, 0x16, 0x200, 0x70bd25, 0x25dfdbfb, {0x2, 0x18, 0x48, 0xfe, r4}}, 0x18}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x800) writev(r7, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0xcc, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x44}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8a}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}]}, @CTA_ID={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x61}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa00}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1ff}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0x200]}]}, 0xcc}}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 468.79218ms ago: executing program 4 (id=8603): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) close(0xffffffffffffffff) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1) (rerun: 32) 382.144604ms ago: executing program 1 (id=8604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000300)={0x4, 0x5}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b0029d77000fcdbdf000000000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000200000005000000"], 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 381.052255ms ago: executing program 4 (id=8605): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x0, @empty, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 379.928453ms ago: executing program 3 (id=8606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r5, &(0x7f0000000000)="3b000200", 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000013c0)={'team0\x00', &(0x7f00000012c0)=@ethtool_drvinfo={0x3, "b1015904849180e9a33bba5c09d84bcfaaf125ea71d525c3ca8d29f38ca7de3d", "3e905dc5345719d6c26ae7d6869eafe1308fbe9ec3937a088353ecc234c1b270", "e27209058368b97e07c6a36bd71bf50faaaa4cc459b461563d96fcf43cef9556", "cb2da74058cb8d204d1fcfe681724ba1c43f448a6dd17bc66b6ca749694f6aba", "942b254fd347c27ba8eac26cb159a5d6fca9f2ebd5f690c7d1aae8c50669cfb9", "5fc03157508709b83ecd0a7b"}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}}, 0x1) r6 = socket$inet6(0xa, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'bridge_slave_0\x00', &(0x7f0000000480)=@ethtool_perm_addr={0x20, 0xe3, "0349421395bdf5894c0b79e8177e25f0c452d47176c8613a6551b716648e0643a5332cf200852ad87c74db3917145afea8af4184278360809ba2d24ab6e2ebe49e333d0e5d942481387713298c2d8eff9b1ee5e8720b9491f42300b3fbd530e0ae07a4e2dd369149e33ebfaa3540a5b895b6183e5cd4ea73b7e182df8838ecd155e3df800e413923c90d5c515082b0c53658d846d6e622cd426b49c22d1e889bb4d545b768b13b8f7475aa34e63327916295dbf977f69df18784e1867c4b417501b27bf085a40294d2956572c920e7dd608cec300f9653776fcaa5059f7136beb0467e"}}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="a90d0100000000000000ef11f3c90ed7000005000000bdb26ec500001247c807662b5203fd5b7eae7a0b9e47a35e1b0cb39d6dcf134f21139356778f"], 0x14}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, 0x0, &(0x7f0000001040)) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000040), &(0x7f00000000c0)=0x14) 350.626324ms ago: executing program 0 (id=8607): sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x43}, 0x4008085) socket(0x1f, 0x5, 0x2000000) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0x0, @remote, @local, {[], @ndisc_na={0x90, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x7fff}, 0x8) 284.810176ms ago: executing program 1 (id=8608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0102000000000000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000b4000000000080002400000000010000380140001e67365616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140000000000", @ANYRES32=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20000084}, 0x4004001) 126.022838ms ago: executing program 1 (id=8609): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58c0a962", @ANYRES16=r7, @ANYBLOB="010000000000fcffffff040000002600070073797374656d5f753a6f626a6563745f723a706f6c6963795f7372635f743a73300000001400060076657468315f746f5f7465616d00000008000500e0000001"], 0x58}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="00022abd7000fcdbdf0008000400ac1e0101140006006272696467655f736c6176655f3100001400020000000000000000ff640a6e84551e6c00140006006d6163766c616e3000000000000000002b000700737973746523e7089b6f626a6563745f723a776972656c6573735f6465766963655f743a73300000050001000000000008000400ffffffff00000000"], 0x94}}, 0x40) close(r5) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5202) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000a410d9e876db9518e4c5f287e4000000000100000009000000000000", @ANYRESHEX=r9, @ANYRES32, @ANYRESHEX], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0xfffffffffffffffc, &(0x7f0000000880)="39b27c137469963b9085fbe829c4e579e16bd15c1b88d2745a345323403e", &(0x7f0000000580)="8d2fdf7c453e50e451fa963a9ef5b9565a1104ee7369eeb10e1439fc01ebb57309a1038a2fbeda586b4a95e72970abe42dcdc08e5c40353277ca828b9671321a5842c9c0504e6b4ddde95522c5bec09279459e4ec9836f27c6e25a9de8728be34085081d37ab69060ffe242015f9", 0xd9, r11}, 0x38) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x84140, 0x0) ioctl$PPPIOCATTACH(r12, 0x4004743d, &(0x7f0000000540)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000680)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xd}, {0xf, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.156159ms ago: executing program 3 (id=8610): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001a40), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x50}}, 0x0) sendmsg$netlink(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)={0x14, 0x69, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 0s ago: executing program 4 (id=8611): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000521b059b00dd00000095497483234007cf18ec2d5bcb958aa03fe4ee2426c3d3bd"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000521b059b00dd00000095497483234007cf18ec2d5bcb958aa03fe4ee2426c3d3bd"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES32=r0, @ANYRESOCT=r4, @ANYRES32=r1], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000140)='dvmrp1\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) (async) sendmmsg$alg(r7, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) recvmmsg(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r7, @ANYRES32=r6, @ANYRESHEX=r7, @ANYRESHEX=r6, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x240040c5) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socket(0x3b, 0x6, 0x8) (async) socket(0x3b, 0x6, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): d promiscuous mode [ 660.885391][T29042] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 660.946857][T29042] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 661.035273][T29071] tipc: Enabled bearer , priority 0 [ 661.063191][T29041] tipc: Resetting bearer [ 661.123711][T29041] tipc: Disabling bearer [ 661.163078][T29072] syzkaller0: entered promiscuous mode [ 661.186334][T29072] syzkaller0: entered allmulticast mode [ 661.232938][T29076] dvmrp1: entered allmulticast mode [ 661.251871][T29070] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 661.353080][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6488'. [ 661.402420][T29066] tipc: Resetting bearer [ 661.425027][T29074] C: renamed from lo (while UP) [ 661.448873][T29074] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 661.558918][T29063] tipc: Resetting bearer [ 661.663531][T29063] tipc: Disabling bearer [ 661.730464][T29093] nbd: must specify a device to reconfigure [ 661.804706][T29093] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6493'. [ 661.807867][T28737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.993653][T28737] veth0_vlan: entered promiscuous mode [ 662.047328][T28737] veth1_vlan: entered promiscuous mode [ 662.178974][T28737] veth0_macvtap: entered promiscuous mode [ 662.244512][ T9423] : left promiscuous mode [ 662.398207][T29117] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 662.446307][T28737] veth1_macvtap: entered promiscuous mode [ 662.492822][ T9423] tipc: Left network mode [ 662.528930][T28737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.571468][T28737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.594424][ T9423] IPVS: stopping backup sync thread 6054 ... [ 662.626185][ T2972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.644970][ T2972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.693744][ T2972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.723791][ T2972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.159934][ T9426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.180330][ T9426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.296631][T14793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.318244][T14793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.339774][T29157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6515'. [ 663.370015][T29157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6515'. [ 663.400749][T29157] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6515'. [ 663.417740][T29157] netlink: 'syz.2.6515': attribute type 6 has an invalid length. [ 663.438664][T29157] netlink: 'syz.2.6515': attribute type 5 has an invalid length. [ 663.447711][T29157] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6515'. [ 663.579068][T29166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6517'. [ 663.592000][T29169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6383'. [ 663.632413][T29167] netem: change failed [ 663.676000][T29166] xfrm1: entered promiscuous mode [ 663.681136][T29166] xfrm1: entered allmulticast mode [ 663.687011][T29169] bridge_slave_1: left allmulticast mode [ 663.702383][T29169] bridge_slave_1: left promiscuous mode [ 663.716335][T29169] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.750300][T29169] bridge_slave_0: left allmulticast mode [ 663.756768][T29169] bridge_slave_0: left promiscuous mode [ 663.762605][T29169] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.321163][T29199] netlink: 'syz.0.6526': attribute type 1 has an invalid length. [ 664.355334][T29199] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6526'. [ 664.420859][T29206] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 664.441867][ T9423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.450485][ T9423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.631167][ T9423] pim6reg527 (unregistering): left allmulticast mode [ 664.686636][ T9423] pimreg3 (unregistering): left allmulticast mode [ 665.355726][T29202] lo speed is unknown, defaulting to 1000 [ 665.510453][T29216] bond1: entered allmulticast mode [ 665.584496][T29216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.946780][T29216] bond1 (unregistering): Released all slaves [ 665.968581][T29241] dvmrp1: left allmulticast mode [ 666.188897][T29256] __nla_validate_parse: 1 callbacks suppressed [ 666.188915][T29256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6541'. [ 666.280339][T29256] bridge_slave_1: left allmulticast mode [ 666.297907][T29256] bridge_slave_1: left promiscuous mode [ 666.317249][T29256] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.387969][T29256] bridge_slave_0: left allmulticast mode [ 666.393927][T29256] bridge_slave_0: left promiscuous mode [ 666.409339][T29256] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.723509][T29275] tipc: Enabled bearer , priority 0 [ 666.733156][T29275] syzkaller0: entered promiscuous mode [ 666.758565][T29275] syzkaller0: entered allmulticast mode [ 666.837332][ T9423] IPVS: stop unused estimator thread 0... [ 666.848051][T29274] tipc: Resetting bearer [ 666.958247][T29274] tipc: Disabling bearer [ 667.293519][T29300] netlink: 'syz.1.6553': attribute type 12 has an invalid length. [ 667.490712][T29309] netlink: 'syz.1.6558': attribute type 1 has an invalid length. [ 667.529133][T29309] netlink: 'syz.1.6558': attribute type 3 has an invalid length. [ 667.554765][T29307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6557'. [ 667.572500][T29309] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6558'. [ 667.604946][T29309] NCSI netlink: No device for ifindex 813332851 [ 668.063317][T29347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6570'. [ 668.067737][T29350] netlink: 'syz.3.6572': attribute type 13 has an invalid length. [ 668.080366][T29345] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20003 [ 668.276640][T29358] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6573'. [ 668.362339][T29365] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 668.389530][T29365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6576'. [ 668.637049][T29385] tipc: Started in network mode [ 668.642105][T29385] tipc: Node identity ac14140f, cluster identity 4711 [ 668.655199][T29385] tipc: New replicast peer: 255.255.255.255 [ 668.671897][T29385] tipc: Enabled bearer , priority 10 [ 668.696280][T29385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6582'. [ 668.894795][T29396] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6585'. [ 668.947128][T29396] gretap0: entered promiscuous mode [ 668.964960][T29396] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6585'. [ 668.997062][T29396] 0{X: renamed from gretap0 [ 669.032333][T29396] 0{X: left promiscuous mode [ 669.056099][T29396] 0{X: entered allmulticast mode [ 669.075660][T29396] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 669.207681][T29421] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 669.464572][T14789] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.480398][T14789] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.506086][T14789] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.536592][T14789] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.784445][T17625] tipc: Node number set to 2886997007 [ 669.897773][T29466] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 669.916969][T29468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6604'. [ 670.148836][T29475] nbd: nbd0 already in use [ 670.319736][T29483] Bluetooth: MGMT ver 1.23 [ 670.331381][T29483] tipc: Started in network mode [ 670.339166][T29483] tipc: Node identity ac14140f, cluster identity 4711 [ 670.345157][T29485] RDS: rds_bind could not find a transport for fe88::fd03, load rds_tcp or rds_rdma? [ 670.355224][T29483] tipc: New replicast peer: 255.255.255.255 [ 670.371644][T29483] tipc: Enabled bearer , priority 10 [ 670.473542][T29487] pimreg: entered allmulticast mode [ 670.509656][T29492] netlink: 'syz.2.6615': attribute type 27 has an invalid length. [ 670.531686][T29492] netlink: 'syz.2.6615': attribute type 27 has an invalid length. [ 670.566325][T29492] netlink: 'syz.2.6615': attribute type 27 has an invalid length. [ 670.587209][T29492] netlink: 'syz.2.6615': attribute type 27 has an invalid length. [ 670.850745][T29504] netlink: 'syz.1.6618': attribute type 1 has an invalid length. [ 670.859705][T29504] netlink: 'syz.1.6618': attribute type 4 has an invalid length. [ 670.961482][T29508] Bluetooth: MGMT ver 1.23 [ 671.494551][ T5937] tipc: Node number set to 2886997007 [ 671.587946][T29532] __nla_validate_parse: 5 callbacks suppressed [ 671.587963][T29532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6628'. [ 671.637207][T29532] netlink: 'syz.3.6628': attribute type 10 has an invalid length. [ 671.654763][T29532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6628'. [ 671.669638][T29532] batadv0: entered promiscuous mode [ 671.709417][T29532] batadv0: entered allmulticast mode [ 671.720484][T29532] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 671.760611][T29543] netlink: 'syz.0.6632': attribute type 29 has an invalid length. [ 671.825030][T29546] netlink: 'syz.0.6632': attribute type 29 has an invalid length. [ 671.876234][T29550] netlink: 'syz.2.6634': attribute type 7 has an invalid length. [ 672.423208][T29584] lo speed is unknown, defaulting to 1000 [ 672.804961][T29597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.903897][T29599] sctp: [Deprecated]: syz.4.6650 (pid 29599) Use of int in max_burst socket option. [ 672.903897][T29599] Use struct sctp_assoc_value instead [ 673.063509][ T9423] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 673.518184][T29614] sctp: [Deprecated]: syz.3.6654 (pid 29614) Use of int in maxseg socket option. [ 673.518184][T29614] Use struct sctp_assoc_value instead [ 673.574995][T29617] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 673.835602][T29634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6658'. [ 673.944386][T29629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6658'. [ 674.099362][T29643] team_slave_0: mtu greater than device maximum [ 674.163386][T29646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6664'. [ 674.356288][T29652] tipc: Enabled bearer , priority 0 [ 674.371462][T29652] syzkaller0: entered promiscuous mode [ 674.434135][T29652] syzkaller0: entered allmulticast mode [ 674.459324][T29652] tipc: Resetting bearer [ 674.486373][T29664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6672'. [ 674.497140][T29651] tipc: Resetting bearer [ 674.525348][T29651] tipc: Disabling bearer [ 674.540173][T29668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 674.547456][T29668] IPv6: NLM_F_CREATE should be set when creating new route [ 674.900959][T29687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6678'. [ 675.117570][T29694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6683'. [ 675.298491][T29705] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 675.369672][T29708] netlink: 788 bytes leftover after parsing attributes in process `syz.0.6690'. [ 675.539665][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6694'. [ 675.667762][T29730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 675.899817][ T55] block nbd5: Possible stuck request ffff8880250ee000: control (read@0,1024B). Runtime 210 seconds [ 675.911105][ T55] block nbd5: Possible stuck request ffff8880250ee1c0: control (read@1024,1024B). Runtime 210 seconds [ 675.923371][ T55] block nbd5: Possible stuck request ffff8880250ee380: control (read@2048,1024B). Runtime 210 seconds [ 675.934771][ T55] block nbd5: Possible stuck request ffff8880250ee540: control (read@3072,1024B). Runtime 210 seconds [ 676.183736][T29770] validate_nla: 6 callbacks suppressed [ 676.183754][T29770] netlink: 'syz.4.6707': attribute type 1 has an invalid length. [ 677.143134][T17625] IPVS: starting estimator thread 0... [ 677.245083][T29833] IPVS: using max 30 ests per chain, 72000 per kthread [ 677.419008][T29855] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 677.421814][T29851] __nla_validate_parse: 4 callbacks suppressed [ 677.421829][T29851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6732'. [ 677.511053][T29856] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6734'. [ 677.792809][T29875] netlink: 'syz.2.6740': attribute type 1 has an invalid length. [ 678.062460][T29858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.102021][T29858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.251238][T29858] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 678.276325][T29858] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 678.463478][T29878] netlink: 'syz.2.6740': attribute type 1 has an invalid length. [ 678.486032][T29878] netlink: 'syz.2.6740': attribute type 1 has an invalid length. [ 678.532593][T29875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.637753][T14786] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.671802][T14786] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.719629][T29894] tipc: Started in network mode [ 678.737084][T29894] tipc: Node identity 6e1a95e84a0d, cluster identity 4711 [ 678.752360][T29894] tipc: Enabled bearer , priority 0 [ 678.759895][T29907] netlink: 'syz.4.6744': attribute type 21 has an invalid length. [ 678.761821][T29899] syzkaller0: entered promiscuous mode [ 678.804141][T29899] syzkaller0: entered allmulticast mode [ 678.820922][T14786] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.840600][T14786] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.887018][T29907] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6744'. [ 678.897560][T29910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6746'. [ 678.915836][T29894] tipc: Resetting bearer [ 678.944906][T29890] tipc: Resetting bearer [ 679.033007][T29890] tipc: Disabling bearer [ 679.127818][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6751'. [ 679.252619][T29932] sctp: [Deprecated]: syz.3.6754 (pid 29932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 679.252619][T29932] Use struct sctp_sack_info instead [ 679.427390][T29941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.585240][T29954] netlink: 284 bytes leftover after parsing attributes in process `syz.1.6760'. [ 679.682897][T29960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6763'. [ 679.742380][T29960] openvswitch: netlink: IP tunnel dst address not specified [ 679.789410][ T5978] IPVS: starting estimator thread 0... [ 679.884123][T29965] IPVS: using max 29 ests per chain, 69600 per kthread [ 679.932898][T29971] netlink: 'syz.3.6767': attribute type 5 has an invalid length. [ 679.945942][T29971] syz.3.6767 uses old SIOCAX25GETINFO [ 680.269718][T29991] sctp: [Deprecated]: syz.2.6773 (pid 29991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.269718][T29991] Use struct sctp_sack_info instead [ 680.703648][T30021] tipc: Enabled bearer , priority 0 [ 680.714553][T30021] syzkaller0: entered promiscuous mode [ 680.736581][T30021] syzkaller0: entered allmulticast mode [ 680.764908][T30029] tipc: Resetting bearer [ 680.779191][T30020] tipc: Resetting bearer [ 680.827078][T30032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6785'. [ 680.869496][T30020] tipc: Disabling bearer [ 680.900754][T30032] bond0: entered promiscuous mode [ 680.910060][T30032] bond_slave_0: entered promiscuous mode [ 680.921058][T30032] bond_slave_1: entered promiscuous mode [ 680.954608][T30032] bond0: left promiscuous mode [ 680.964181][T30032] bond_slave_0: left promiscuous mode [ 680.981487][T30032] bond_slave_1: left promiscuous mode [ 681.139753][T30051] netlink: 'syz.1.6792': attribute type 10 has an invalid length. [ 681.179599][T30051] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 681.375112][T30063] netlink: 'syz.1.6797': attribute type 1 has an invalid length. [ 681.383079][T30064] netlink: 'syz.4.6796': attribute type 1 has an invalid length. [ 681.392379][T30063] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6797'. [ 681.463042][T30064] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 681.547080][T30080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.558102][T14792] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 681.582053][T30080] veth3: entered promiscuous mode [ 681.627076][T30080] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 681.705792][T14792] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 681.832363][T30096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6806'. [ 681.861082][T30096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.893206][T30102] netlink: 'syz.3.6809': attribute type 58 has an invalid length. [ 681.949326][T30096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.995316][T30104] macvlan0: entered promiscuous mode [ 682.006637][T30104] batadv0: entered promiscuous mode [ 682.012961][T30104] debugfs: 'hsr1' already exists in 'hsr' [ 682.027808][T30104] Cannot create hsr debugfs directory [ 682.033400][T30104] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 682.054862][T30104] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 682.081504][T30104] hsr1: entered allmulticast mode [ 682.098975][T30104] macvlan0: entered allmulticast mode [ 682.112064][T30104] batadv0: entered allmulticast mode [ 682.139806][T30104] macvlan0: left promiscuous mode [ 682.185086][T30104] batadv0: left promiscuous mode [ 682.415617][T30132] netlink: 'syz.2.6817': attribute type 3 has an invalid length. [ 682.423576][T30132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.683753][T30146] __nla_validate_parse: 3 callbacks suppressed [ 682.683766][T30146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6822'. [ 682.883309][T30156] block nbd2: Unsupported socket: shutdown callout must be supported. [ 683.041365][T30163] bond0: Error: Cannot enslave bond to itself. [ 683.093724][T30165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6827'. [ 683.115231][T30165] netlink: 'syz.2.6827': attribute type 30 has an invalid length. [ 683.169638][T30169] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6828'. [ 683.460704][T30195] netlink: 'syz.3.6837': attribute type 1 has an invalid length. [ 683.469314][T30180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6831'. [ 683.551752][T30195] bond1: entered promiscuous mode [ 683.558053][T30195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 683.582824][T30195] bond1: (slave bridge2): making interface the new active one [ 683.590631][T30195] bridge2: entered promiscuous mode [ 683.597338][T30195] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 683.609079][T30201] netlink: 'syz.3.6837': attribute type 1 has an invalid length. [ 684.024351][T30229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6843'. [ 684.054491][T30229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6843'. [ 684.080161][T30229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6843'. [ 684.109382][T30229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6843'. [ 684.133272][T30229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6843'. [ 684.172710][T30229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6843'. [ 684.331018][T30254] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 684.466451][T30258] tipc: Enabled bearer , priority 0 [ 684.483484][T30258] syzkaller0: entered promiscuous mode [ 684.493718][T30258] syzkaller0: entered allmulticast mode [ 684.644707][T30257] tipc: Resetting bearer [ 684.682368][T30257] tipc: Disabling bearer [ 684.858520][T30282] syzkaller0: entered promiscuous mode [ 684.904083][T30282] syzkaller0: entered allmulticast mode [ 686.139070][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.510385][T30339] netlink: 'syz.3.6879': attribute type 10 has an invalid length. [ 686.978952][T30382] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 686.997664][T30382] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 687.006571][T30382] gretap1: entered promiscuous mode [ 687.011806][T30382] gretap1: entered allmulticast mode [ 687.063470][T30387] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 687.414839][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 687.923433][T30406] netlink: 'syz.4.6901': attribute type 10 has an invalid length. [ 687.942473][T30406] __nla_validate_parse: 39 callbacks suppressed [ 687.942490][T30406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6901'. [ 687.977097][T30406] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 688.019417][T30406] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 688.049113][T30421] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 688.073437][T30419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6904'. [ 688.086663][T30406] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 688.282011][T26068] IPVS: starting estimator thread 0... [ 688.298279][T30436] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 688.307283][T30437] netem: unknown loss type 0 [ 688.312236][T30437] netem: change failed [ 688.376038][T30438] IPVS: using max 29 ests per chain, 69600 per kthread [ 688.404797][T30437] netem: unknown loss type 0 [ 688.424634][T30437] netem: change failed [ 688.437743][T30437] netem: unknown loss type 0 [ 688.442522][T30437] netem: change failed [ 688.482480][T30442] bond2: entered promiscuous mode [ 688.494162][T30442] bond2: entered allmulticast mode [ 688.499784][T30442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.508500][T30437] netem: unknown loss type 0 [ 688.513219][T30437] netem: change failed [ 688.530616][T30451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6914'. [ 688.559880][T30437] netem: unknown loss type 0 [ 688.609303][T30437] netem: change failed [ 688.696644][T30437] netem: unknown loss type 0 [ 688.704946][T30437] netem: change failed [ 688.767611][T30437] netem: unknown loss type 0 [ 688.772549][T30451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6914'. [ 688.782708][T30437] netem: change failed [ 688.815003][T30437] netem: unknown loss type 0 [ 688.837187][T30437] netem: change failed [ 688.853300][T30437] netem: unknown loss type 0 [ 688.873851][T30437] netem: change failed [ 688.892296][T14793] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.916108][T14793] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.956359][T30437] netem: unknown loss type 0 [ 688.961062][T30437] netem: change failed [ 689.011519][T14793] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.053428][T14793] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.099751][T30437] netem: unknown loss type 0 [ 689.105461][T30437] netem: change failed [ 689.135231][T30465] netlink: 'syz.3.6918': attribute type 4 has an invalid length. [ 689.183086][T30465] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6918'. [ 689.238393][T30469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6920'. [ 689.253558][T30471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6921'. [ 689.436385][T30476] netlink: 'syz.0.6924': attribute type 2 has an invalid length. [ 689.467519][T30478] syz.1.6925: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 689.493895][T30478] CPU: 0 UID: 0 PID: 30478 Comm: syz.1.6925 Not tainted syzkaller #0 PREEMPT(full) [ 689.493926][T30478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 689.493936][T30478] Call Trace: [ 689.493944][T30478] [ 689.493952][T30478] dump_stack_lvl+0x189/0x250 [ 689.493981][T30478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.494003][T30478] ? __pfx__printk+0x10/0x10 [ 689.494026][T30478] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 689.494046][T30478] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 689.494069][T30478] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 689.494091][T30478] warn_alloc+0x214/0x310 [ 689.494119][T30478] ? stack_depot_save_flags+0x40/0x860 [ 689.494147][T30478] ? __pfx_warn_alloc+0x10/0x10 [ 689.494173][T30478] ? kasan_save_track+0x4f/0x80 [ 689.494203][T30478] ? xskq_create+0x56/0x170 [ 689.494219][T30478] ? xsk_init_queue+0xb0/0x110 [ 689.494234][T30478] ? xsk_setsockopt+0x4dc/0x8d0 [ 689.494257][T30478] ? do_sock_setsockopt+0x179/0x1b0 [ 689.494276][T30478] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 689.494295][T30478] ? do_syscall_64+0xfa/0x3b0 [ 689.494313][T30478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.494339][T30478] __vmalloc_node_range_noprof+0x125/0x12f0 [ 689.494397][T30478] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 689.494429][T30478] ? __kasan_kmalloc+0x93/0xb0 [ 689.494456][T30478] vmalloc_user_noprof+0xad/0xf0 [ 689.494479][T30478] ? xskq_create+0xbf/0x170 [ 689.494498][T30478] xskq_create+0xbf/0x170 [ 689.494520][T30478] xsk_init_queue+0xb0/0x110 [ 689.494541][T30478] xsk_setsockopt+0x4dc/0x8d0 [ 689.494569][T30478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 689.494592][T30478] ? __pfx_aa_sk_perm+0x10/0x10 [ 689.494619][T30478] ? aa_sock_opt_perm+0xff/0x1b0 [ 689.494639][T30478] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 689.494655][T30478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 689.494679][T30478] do_sock_setsockopt+0x179/0x1b0 [ 689.494704][T30478] __x64_sys_setsockopt+0x13f/0x1b0 [ 689.494730][T30478] do_syscall_64+0xfa/0x3b0 [ 689.494746][T30478] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.494762][T30478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.494778][T30478] ? clear_bhb_loop+0x60/0xb0 [ 689.494799][T30478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.494815][T30478] RIP: 0033:0x7f126c18eec9 [ 689.494831][T30478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.494846][T30478] RSP: 002b:00007f126d02c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 689.494864][T30478] RAX: ffffffffffffffda RBX: 00007f126c3e5fa0 RCX: 00007f126c18eec9 [ 689.494877][T30478] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 689.494888][T30478] RBP: 00007f126c211f91 R08: 0000000000000004 R09: 0000000000000000 [ 689.494900][T30478] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.494911][T30478] R13: 00007f126c3e6038 R14: 00007f126c3e5fa0 R15: 00007fff2264ff08 [ 689.494941][T30478] [ 689.505902][T30481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6926'. [ 689.559002][T30478] Mem-Info: [ 689.605774][T30484] netlink: 51 bytes leftover after parsing attributes in process `syz.1.6925'. [ 689.652702][T30476] openvswitch: netlink: Actions may not be safe on all matching packets [ 689.659288][T30478] active_anon:5173 inactive_anon:0 isolated_anon:0 [ 689.659288][T30478] active_file:3403 inactive_file:40115 isolated_file:0 [ 689.659288][T30478] unevictable:768 dirty:58 writeback:0 [ 689.659288][T30478] slab_reclaimable:14611 slab_unreclaimable:151483 [ 689.659288][T30478] mapped:29504 shmem:1401 pagetables:1390 [ 689.659288][T30478] sec_pagetables:0 bounce:0 [ 689.659288][T30478] kernel_misc_reclaimable:0 [ 689.659288][T30478] free:1266101 free_pcp:13272 free_cma:0 [ 689.888334][T30478] Node 0 active_anon:21092kB inactive_anon:0kB active_file:13612kB inactive_file:160260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118016kB dirty:232kB writeback:0kB shmem:4268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17428kB pagetables:5608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 689.921820][T30478] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 689.984362][T30478] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.058598][T30478] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 690.065197][T30478] Node 0 DMA32 free:1155352kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20344kB inactive_anon:0kB active_file:13612kB inactive_file:158692kB unevictable:1536kB writepending:232kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:42140kB local_pcp:20256kB free_cma:0kB [ 690.128277][T30478] lowmem_reserve[]: 0 0 1 1 1 [ 690.133752][T30500] netlink: 'syz.3.6931': attribute type 1 has an invalid length. [ 690.148126][T30478] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 690.161908][T30500] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6931'. [ 690.188293][T30478] lowmem_reserve[]: 0 0 0 0 0 [ 690.193096][T30478] Node 1 Normal free:3893180kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11936kB local_pcp:4640kB free_cma:0kB [ 690.242428][T30478] lowmem_reserve[]: 0 0 0 0 0 [ 690.264357][T30500] nbd: couldn't find a device at index 1 [ 690.268928][T30478] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 690.371983][T30478] Node 0 DMA32: 1990*4kB (UM) 647*8kB (UM) 104*16kB (UM) 158*32kB (UME) 88*64kB (UME) 88*128kB (UM) 379*256kB (UME) 289*512kB (UM) 118*1024kB (UME) 2*2048kB (U) 183*4096kB (UM) = 1156240kB [ 690.453679][T30478] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 690.479261][T30478] Node 1 Normal: 193*4kB (UME) 69*8kB (UME) 39*16kB (UME) 223*32kB (UME) 69*64kB (UME) 14*128kB (UME) 2*256kB (M) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3893180kB [ 690.514988][T30478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.555719][T30478] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 690.574148][T30478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.588247][T30478] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 690.600877][T30478] 44907 total pagecache pages [ 690.605993][T30527] netlink: 'syz.2.6937': attribute type 25 has an invalid length. [ 690.615871][T30478] 0 pages in swap cache [ 690.620216][T30478] Free swap = 124996kB [ 690.623720][T30528] netlink: 'syz.2.6937': attribute type 25 has an invalid length. [ 690.625960][T30478] Total swap = 124996kB [ 690.637112][T30478] 2097051 pages RAM [ 690.641012][T30478] 0 pages HighMem/MovableOnly [ 690.646206][T30478] 425672 pages reserved [ 690.650606][T30478] 0 pages cma reserved [ 690.838133][T30536] netlink: 'syz.0.6940': attribute type 3 has an invalid length. [ 690.995857][T30549] IPVS: ip_vs_add_dest(): server weight less than zero [ 691.004593][T26067] IPVS: starting estimator thread 0... [ 691.046756][T30549] netlink: 'syz.2.6945': attribute type 1 has an invalid length. [ 691.072623][T30554] netlink: 'syz.4.6946': attribute type 2 has an invalid length. [ 691.084325][T30554] bridge_slave_1: default FDB implementation only supports local addresses [ 691.114245][T30551] IPVS: using max 30 ests per chain, 72000 per kthread [ 691.647908][T30576] IPVS: length: 164 != 24 [ 691.662787][T30576] sctp: [Deprecated]: syz.0.6951 (pid 30576) Use of int in maxseg socket option. [ 691.662787][T30576] Use struct sctp_assoc_value instead [ 691.766017][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880266d0000: rx timeout, send abort [ 691.774830][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880266d0000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 691.789258][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880266d1800: rx timeout, send abort [ 691.798431][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880266d1800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 692.144924][T30604] macvtap1: entered promiscuous mode [ 692.168650][T30604] vlan0: entered promiscuous mode [ 692.188625][T30604] macvtap1: entered allmulticast mode [ 692.216601][T30604] vlan0: entered allmulticast mode [ 692.226565][T30604] veth0_vlan: entered allmulticast mode [ 692.281200][T30618] validate_nla: 3 callbacks suppressed [ 692.281219][T30618] netlink: 'syz.4.6961': attribute type 21 has an invalid length. [ 692.321428][T30618] netlink: 'syz.4.6961': attribute type 4 has an invalid length. [ 692.329268][T30618] netlink: 'syz.4.6961': attribute type 5 has an invalid length. [ 692.406168][T30623] syzkaller1: entered promiscuous mode [ 692.412458][T30623] syzkaller1: entered allmulticast mode [ 692.639730][T30635] netlink: 'syz.1.6967': attribute type 1 has an invalid length. [ 692.678590][T30635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.769091][T30644] nbd: nbd0 already in use [ 692.783785][T30644] veth0: entered promiscuous mode [ 692.797934][T30642] veth0: left promiscuous mode [ 692.964914][T30657] tipc: Enabled bearer , priority 0 [ 692.992928][T30657] syzkaller0: entered promiscuous mode [ 693.015469][T30657] syzkaller0: entered allmulticast mode [ 693.048344][T30657] tipc: Resetting bearer [ 693.066419][T30651] tipc: Resetting bearer [ 693.121370][T30651] tipc: Disabling bearer [ 693.351726][T30678] __nla_validate_parse: 11 callbacks suppressed [ 693.351739][T30678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6983'. [ 693.378368][T14789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.399989][T14789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.467273][T30686] C: renamed from lo [ 693.584896][T30695] netlink: 'syz.1.6987': attribute type 18 has an invalid length. [ 693.674584][T30699] netlink: 'syz.3.6989': attribute type 11 has an invalid length. [ 693.682582][T30699] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6989'. [ 693.684880][T30701] FAULT_INJECTION: forcing a failure. [ 693.684880][T30701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.730835][T30701] CPU: 0 UID: 0 PID: 30701 Comm: syz.0.6990 Not tainted syzkaller #0 PREEMPT(full) [ 693.730861][T30701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 693.730872][T30701] Call Trace: [ 693.730880][T30701] [ 693.730888][T30701] dump_stack_lvl+0x189/0x250 [ 693.730913][T30701] ? __pfx____ratelimit+0x10/0x10 [ 693.730932][T30701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.730952][T30701] ? __pfx__printk+0x10/0x10 [ 693.730975][T30701] ? __might_fault+0xb0/0x130 [ 693.731009][T30701] should_fail_ex+0x414/0x560 [ 693.731038][T30701] _copy_from_user+0x2d/0xb0 [ 693.731061][T30701] __sys_bpf+0x1ed/0x870 [ 693.731083][T30701] ? __pfx___sys_bpf+0x10/0x10 [ 693.731116][T30701] ? ksys_write+0x22a/0x250 [ 693.731142][T30701] ? __pfx_ksys_write+0x10/0x10 [ 693.731160][T30701] ? rcu_is_watching+0x15/0xb0 [ 693.731185][T30701] __x64_sys_bpf+0x7c/0x90 [ 693.731206][T30701] do_syscall_64+0xfa/0x3b0 [ 693.731224][T30701] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.731242][T30701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.731259][T30701] ? clear_bhb_loop+0x60/0xb0 [ 693.731280][T30701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.731297][T30701] RIP: 0033:0x7fd5fc38eec9 [ 693.731314][T30701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.731329][T30701] RSP: 002b:00007fd5fa5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.731348][T30701] RAX: ffffffffffffffda RBX: 00007fd5fc5e5fa0 RCX: 00007fd5fc38eec9 [ 693.731361][T30701] RDX: 0000000000000020 RSI: 00002000000004c0 RDI: 0000000000000009 [ 693.731373][T30701] RBP: 00007fd5fa5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 693.731384][T30701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.731413][T30701] R13: 00007fd5fc5e6038 R14: 00007fd5fc5e5fa0 R15: 00007ffde5283218 [ 693.731444][T30701] [ 693.765989][T30706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6991'. [ 694.031575][T30715] tipc: Enabling of bearer rejected, failed to enable media [ 694.139578][T30724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6994'. [ 694.237998][T30724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 694.319962][T30733] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6996'. [ 694.367175][T30738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6999'. [ 694.443885][T30736] syzkaller0: entered promiscuous mode [ 694.455062][T30736] syzkaller0: entered allmulticast mode [ 694.482611][T30734] tipc: Enabled bearer , priority 0 [ 694.491374][T30744] netlink: 'syz.2.7001': attribute type 1 has an invalid length. [ 694.501128][T30744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7001'. [ 694.612169][T30734] tipc: Resetting bearer [ 695.474360][T26067] tipc: Node number set to 605525480 [ 695.937666][T30774] netlink: 'syz.3.7008': attribute type 11 has an invalid length. [ 697.445549][T30734] tipc: Disabling bearer [ 697.461578][T30753] sit1: entered promiscuous mode [ 697.467952][T30753] sit1: entered allmulticast mode [ 697.860119][T30801] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7016'. [ 697.870341][T30799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7017'. [ 697.880055][T30795] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7018'. [ 698.150678][T30811] openvswitch: netlink: Multiple metadata blocks provided [ 698.320780][T30817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.338347][T30823] netlink: 'syz.2.7027': attribute type 1 has an invalid length. [ 698.359154][T30823] __nla_validate_parse: 4 callbacks suppressed [ 698.359173][T30823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7027'. [ 698.611608][T30839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7032'. [ 698.643335][T30842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7030'. [ 698.825180][T30849] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7034'. [ 698.858078][T30849] vlan2: entered allmulticast mode [ 698.866570][T30849] gretap0: entered allmulticast mode [ 698.917815][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7037'. [ 698.927259][T30855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7037'. [ 700.085995][T30902] syzkaller0: entered promiscuous mode [ 700.092197][T30902] syzkaller0: entered allmulticast mode [ 700.437791][T30910] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7052'. [ 700.462973][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7052'. [ 701.623162][T30936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7057'. [ 701.914848][ T5885] Bluetooth: hci1: command 0x0405 tx timeout [ 702.388153][T30932] delete_channel: no stack [ 702.594609][T30921] syz_tun: entered allmulticast mode [ 702.689852][T30921] syz_tun: left allmulticast mode [ 702.692575][T30942] netlink: 'syz.4.7059': attribute type 1 has an invalid length. [ 702.705457][T30942] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7059'. [ 702.793482][T30947] netlink: 'syz.1.7062': attribute type 1 has an invalid length. [ 702.851534][T30945] syzkaller1: entered promiscuous mode [ 702.876664][T30945] syzkaller1: entered allmulticast mode [ 702.918814][T14793] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 703.110601][T30965] netlink: 'syz.1.7065': attribute type 1 has an invalid length. [ 703.160812][T30965] netlink: 'syz.1.7065': attribute type 2 has an invalid length. [ 703.331553][T30990] IPVS: ip_vs_edit_dest(): server weight less than zero [ 703.391738][T30997] __nla_validate_parse: 1 callbacks suppressed [ 703.391758][T30997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7071'. [ 703.968561][T31016] lo speed is unknown, defaulting to 1000 [ 703.996875][T31021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7077'. [ 704.006890][T31021] sit0: entered promiscuous mode [ 704.011869][T31021] sit0: entered allmulticast mode [ 704.078240][T31023] netlink: 'syz.1.7079': attribute type 15 has an invalid length. [ 704.149432][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7080'. [ 704.479431][T31041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7086'. [ 704.543342][T31046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7087'. [ 704.577115][T31047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7087'. [ 704.692640][T31055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7089'. [ 704.832933][T31054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7089'. [ 705.084124][T31065] 0{X: left allmulticast mode [ 705.136065][T31072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7093'. [ 705.164597][T31072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7093'. [ 705.242564][T31078] netlink: 'syz.4.7096': attribute type 2 has an invalid length. [ 705.454654][T31065] batadv0: left promiscuous mode [ 705.459753][T31065] batadv0: left allmulticast mode [ 705.611663][T31065] bond0: (slave bond_slave_0): Releasing backup interface [ 705.647230][T31065] bond0: (slave bond_slave_1): Releasing backup interface [ 705.720587][T31065] team0: Port device team_slave_0 removed [ 705.730763][T31065] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 705.986572][ T55] block nbd5: Possible stuck request ffff8880250ee000: control (read@0,1024B). Runtime 240 seconds [ 705.997703][ T55] block nbd5: Possible stuck request ffff8880250ee1c0: control (read@1024,1024B). Runtime 240 seconds [ 706.008916][ T55] block nbd5: Possible stuck request ffff8880250ee380: control (read@2048,1024B). Runtime 240 seconds [ 706.020000][ T55] block nbd5: Possible stuck request ffff8880250ee540: control (read@3072,1024B). Runtime 240 seconds [ 706.112088][T31099] netlink: 'syz.2.7104': attribute type 29 has an invalid length. [ 706.243710][T31107] netlink: 'syz.3.7105': attribute type 14 has an invalid length. [ 706.283481][T31111] netlink: 'syz.3.7105': attribute type 14 has an invalid length. [ 706.312231][T31109] delete_channel: no stack [ 706.384602][T31118] netlink: 'syz.1.7108': attribute type 1 has an invalid length. [ 706.756081][T31140] pim6reg1: entered promiscuous mode [ 706.769002][T31140] pim6reg1: entered allmulticast mode [ 706.841530][T31147] team0: Device gtp1 is of different type [ 707.296084][T31173] tls_set_device_offload_rx: netdev not found [ 707.592915][T31198] wg1 speed is unknown, defaulting to 1000 [ 707.626928][T31198] wg1 speed is unknown, defaulting to 1000 [ 707.672564][T31198] wg1 speed is unknown, defaulting to 1000 [ 707.761753][T31198] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 707.874828][T31198] wg1 speed is unknown, defaulting to 1000 [ 707.882495][T31198] wg1 speed is unknown, defaulting to 1000 [ 707.935338][T31198] wg1 speed is unknown, defaulting to 1000 [ 707.952637][T31198] wg1 speed is unknown, defaulting to 1000 [ 707.963246][T31198] wg1 speed is unknown, defaulting to 1000 [ 707.975621][T31198] wg1 speed is unknown, defaulting to 1000 [ 707.993567][T31198] wg1 speed is unknown, defaulting to 1000 [ 708.003086][T31198] wg1 speed is unknown, defaulting to 1000 [ 708.022464][T31198] wg1 speed is unknown, defaulting to 1000 [ 708.037018][T31198] wg1 speed is unknown, defaulting to 1000 [ 708.064046][T31198] wg1 speed is unknown, defaulting to 1000 [ 708.072924][T31198] wg1 speed is unknown, defaulting to 1000 [ 708.532743][T31244] __nla_validate_parse: 12 callbacks suppressed [ 708.532763][T31244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7149'. [ 708.639837][T31247] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 708.652369][T31247] bond3: (slave vcan1): Error -95 calling set_mac_address [ 708.662845][T31244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7149'. [ 708.735730][T31254] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 708.812567][T31254] bond3: (slave vcan1): Error -95 calling set_mac_address [ 709.050319][T31275] openvswitch: netlink: IP tunnel dst address not specified [ 709.101903][T31275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7155'. [ 709.279331][T31296] netlink: 'syz.2.7164': attribute type 13 has an invalid length. [ 709.303558][T31296] netlink: 'syz.2.7164': attribute type 58 has an invalid length. [ 709.313668][T31296] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7164'. [ 709.598302][T31318] tipc: Enabling of bearer rejected, failed to enable media [ 709.975056][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 710.108054][T31354] netlink: 'syz.2.7178': attribute type 2 has an invalid length. [ 710.116235][T31354] netlink: 179436 bytes leftover after parsing attributes in process `syz.2.7178'. [ 710.130309][T31354] nbd: must specify a device to reconfigure [ 710.428941][T31381] syzkaller0: entered promiscuous mode [ 710.438476][T31381] syzkaller0: entered allmulticast mode [ 710.769094][T31388] netlink: 'syz.0.7189': attribute type 5 has an invalid length. [ 710.788150][T31397] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7191'. [ 710.810603][T31397] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 710.823226][T31397] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 711.790573][T31457] netlink: 'syz.3.7206': attribute type 10 has an invalid length. [ 711.800757][T31457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7206'. [ 711.872890][T31457] team0: Port device geneve0 added [ 712.058847][ T5885] Bluetooth: hci1: command 0x0405 tx timeout [ 712.457240][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 712.536559][T31504] syzkaller1: entered promiscuous mode [ 712.563192][T31504] syzkaller1: entered allmulticast mode [ 712.580893][T31513] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7218'. [ 712.736208][T31521] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20004 [ 712.860741][T31527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7222'. [ 713.146700][T31534] pimreg: entered allmulticast mode [ 713.339587][T31546] syzkaller0: entered promiscuous mode [ 713.352701][T31546] syzkaller0: entered allmulticast mode [ 713.381873][T31549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7231'. [ 713.565648][T31555] __nla_validate_parse: 2 callbacks suppressed [ 713.565668][T31555] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7234'. [ 713.566207][T31553] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 713.603023][T31558] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7235'. [ 713.709362][T31564] netlink: 'syz.3.7237': attribute type 10 has an invalid length. [ 713.770196][T31564] hsr0: mtu greater than device maximum [ 713.797617][T31574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7234'. [ 713.862052][T31574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.872505][T31575] netlink: 'syz.2.7239': attribute type 3 has an invalid length. [ 713.897099][T31575] netlink: 'syz.2.7239': attribute type 3 has an invalid length. [ 713.917777][T31575] netlink: 'syz.2.7239': attribute type 3 has an invalid length. [ 713.932916][T31575] netlink: 'syz.2.7239': attribute type 3 has an invalid length. [ 713.988142][T31581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 714.018832][T31581] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 714.045228][T31581] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 714.177347][T31598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.583210][T31620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7249'. [ 714.605466][T31621] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.614018][T31621] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.733031][T31628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7251'. [ 714.754555][T31628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7251'. [ 714.907357][T31641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7256'. [ 714.916849][T31638] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7255'. [ 714.938323][T31638] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 715.202836][T31650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7258'. [ 715.207941][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7260'. [ 715.297329][T31659] validate_nla: 43 callbacks suppressed [ 715.297349][T31659] netlink: 'syz.0.7264': attribute type 2 has an invalid length. [ 715.320153][T31659] netlink: 'syz.0.7264': attribute type 2 has an invalid length. [ 715.328095][T31659] netlink: 'syz.0.7264': attribute type 2 has an invalid length. [ 715.336508][T31659] netlink: 'syz.0.7264': attribute type 2 has an invalid length. [ 715.355450][T31665] 8021q: VLANs not supported on ip_vti0 [ 715.361668][T31663] 8021q: VLANs not supported on ip_vti0 [ 715.368826][T31665] netlink: 'syz.4.7262': attribute type 1 has an invalid length. [ 715.511425][T31677] openvswitch: netlink: IP tunnel dst address not specified [ 715.600019][T31680] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.610658][T31681] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.829625][T31693] netlink: 'syz.3.7274': attribute type 1 has an invalid length. [ 715.868653][T31690] bond4: entered allmulticast mode [ 715.880576][T31690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 715.920488][T31690] bridge0: port 2(bond4) entered blocking state [ 715.942918][T31690] bridge0: port 2(bond4) entered disabled state [ 715.969457][T31690] bond4: entered promiscuous mode [ 715.978306][T31690] bridge0: port 2(bond4) entered blocking state [ 715.984741][T31690] bridge0: port 2(bond4) entered forwarding state [ 716.038831][T31693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 716.123321][T31698] bond3: (slave veth3): Enslaving as an active interface with a down link [ 716.143723][T31700] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 716.194152][T31719] netlink: 'syz.1.7281': attribute type 1 has an invalid length. [ 716.306883][T31709] bond3: (slave veth5): Enslaving as an active interface with a down link [ 716.356486][T31726] tipc: Enabled bearer , priority 0 [ 716.374991][T31724] syzkaller0: entered promiscuous mode [ 716.393656][T31724] syzkaller0: entered allmulticast mode [ 716.736711][T14786] bridge0: port 2(bond4) entered disabled state [ 716.799007][T31731] tipc: Resetting bearer [ 716.847359][T31731] tipc: Disabling bearer [ 717.026146][T31760] netlink: 'syz.3.7293': attribute type 1 has an invalid length. [ 717.155007][T31761] bond4: (slave bridge3): making interface the new active one [ 717.165166][T31761] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 717.669578][T31789] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 718.393103][T31834] netlink: 'syz.1.7311': attribute type 1 has an invalid length. [ 718.501276][T31837] netlink: 'syz.2.7312': attribute type 11 has an invalid length. [ 718.509358][T31837] netlink: 'syz.2.7312': attribute type 4 has an invalid length. [ 718.516147][T31839] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 718.529484][T31839] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 718.637314][T31844] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 718.817237][T31852] __nla_validate_parse: 16 callbacks suppressed [ 718.817254][T31852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7317'. [ 718.837247][T31852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7317'. [ 718.986429][T31861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.253874][T31873] bridge_slave_0: entered promiscuous mode [ 719.282439][T31875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7324'. [ 719.315509][T31875] xfrm1: entered promiscuous mode [ 719.329892][T31875] xfrm1: entered allmulticast mode [ 719.358399][T31880] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7326'. [ 719.359645][T31875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7324'. [ 719.469011][T31887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.522047][T31893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7330'. [ 719.567149][T31893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.716442][T31895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7332'. [ 720.330391][T31932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.550487][T31937] block nbd2: server does not support multiple connections per device. [ 721.574515][T31937] block nbd2: shutting down sockets [ 721.587870][T31948] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 722.168230][T31983] validate_nla: 1 callbacks suppressed [ 722.168247][T31983] netlink: 'syz.1.7357': attribute type 12 has an invalid length. [ 722.327374][T31999] netlink: 'syz.1.7362': attribute type 3 has an invalid length. [ 722.380890][T14800] tipc: Subscription rejected, illegal request [ 722.401993][T31997] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7361'. [ 722.425938][T31997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7361'. [ 722.440917][T32009] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 722.485383][T32004] netlink: 'syz.0.7364': attribute type 1 has an invalid length. [ 722.493287][T32004] netlink: 'syz.0.7364': attribute type 2 has an invalid length. [ 722.509330][T32008] netlink: 'syz.2.7365': attribute type 21 has an invalid length. [ 722.509643][T32005] netlink: 'syz.0.7364': attribute type 1 has an invalid length. [ 722.526988][T32005] netlink: 'syz.0.7364': attribute type 2 has an invalid length. [ 722.565362][T32013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7366'. [ 723.225313][T32046] syzkaller0: entered promiscuous mode [ 723.230823][T32046] syzkaller0: entered allmulticast mode [ 723.241137][T32050] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 723.503266][T32069] netlink: 'syz.0.7383': attribute type 21 has an invalid length. [ 725.237244][T32069] __nla_validate_parse: 5 callbacks suppressed [ 725.237263][T32069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7383'. [ 725.620563][T32095] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7389'. [ 725.706320][T32098] tipc: Enabled bearer , priority 0 [ 725.721433][T32103] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7393'. [ 725.735542][T32098] syzkaller0: entered promiscuous mode [ 725.746597][T32098] syzkaller0: entered allmulticast mode [ 725.798466][T32108] netlink: 'syz.1.7394': attribute type 1 has an invalid length. [ 725.829647][T32098] tipc: Resetting bearer [ 725.952437][T32108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 726.006669][T32108] netlink: 'syz.1.7394': attribute type 1 has an invalid length. [ 726.014809][T32108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7394'. [ 726.025897][T32108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7394'. [ 726.039511][T32097] tipc: Resetting bearer [ 726.103353][T32097] tipc: Disabling bearer [ 726.554481][T32150] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7405'. [ 726.993283][T32174] bond3: entered promiscuous mode [ 727.000588][T32174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 727.135483][T32180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 727.172976][T32180] bond3: (slave bond4): making interface the new active one [ 727.193187][T32180] bond4: entered promiscuous mode [ 727.209884][T32180] bond3: (slave bond4): Enslaving as an active interface with an up link [ 727.753704][T32220] bond0: entered promiscuous mode [ 727.764465][T32220] bond_slave_0: entered promiscuous mode [ 727.798190][T32220] bond_slave_1: entered promiscuous mode [ 727.913769][T32242] IPVS: set_ctl: invalid protocol: 183 0.0.0.0:0 [ 727.923495][T32237] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7428'. [ 728.090925][T32237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7428'. [ 728.285547][T32252] vlan3: entered allmulticast mode [ 728.290706][T32252] bond0: entered allmulticast mode [ 728.334495][T32252] bond_slave_0: entered allmulticast mode [ 728.350755][T32252] bond_slave_1: entered allmulticast mode [ 728.523562][T32270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7438'. [ 729.010229][T32303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7449'. [ 729.039588][T32303] validate_nla: 2 callbacks suppressed [ 729.039606][T32303] netlink: 'syz.4.7449': attribute type 7 has an invalid length. [ 729.179188][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 729.211859][T32320] netlink: 'syz.2.7452': attribute type 10 has an invalid length. [ 729.318948][T32324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.342497][T32321] can: request_module (can-proto-0) failed. [ 729.355944][T32329] can: request_module (can-proto-0) failed. [ 729.490416][T32320] batman_adv: batadv0: Adding interface: team0 [ 729.503571][T32320] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.530236][T32320] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 730.165266][T32376] netlink: 'syz.1.7466': attribute type 1 has an invalid length. [ 730.173554][T32378] netlink: 'syz.3.7468': attribute type 58 has an invalid length. [ 730.227236][ T5885] Bluetooth: hci1: link tx timeout [ 730.233081][ T5885] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 730.243377][ T5885] Bluetooth: hci1: link tx timeout [ 730.248591][ T5885] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 730.391929][T32386] __nla_validate_parse: 5 callbacks suppressed [ 730.391947][T32386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7472'. [ 730.423426][T32390] netlink: 788 bytes leftover after parsing attributes in process `syz.0.7471'. [ 730.513359][T32402] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 730.526046][T32403] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 730.963632][T32421] ip6gre1: entered allmulticast mode [ 731.081083][T32429] tipc: Enabling of bearer rejected, failed to enable media [ 731.120298][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7485'. [ 731.379539][T32450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7489'. [ 731.530075][T32458] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 731.558704][T32458] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 731.601310][T32462] netlink: 152064 bytes leftover after parsing attributes in process `syz.2.7494'. [ 731.623433][T32462] netlink: zone id is out of range [ 731.625798][T32463] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7496'. [ 731.631639][T32462] netlink: zone id is out of range [ 731.656824][T32462] netlink: zone id is out of range [ 731.662330][T32462] netlink: zone id is out of range [ 731.677656][T32462] netlink: zone id is out of range [ 731.682867][T32462] netlink: zone id is out of range [ 731.698450][T32462] netlink: zone id is out of range [ 731.703658][T32462] netlink: zone id is out of range [ 732.294282][ T5885] Bluetooth: hci1: command 0x0405 tx timeout [ 732.436285][T32486] netlink: 'syz.0.7504': attribute type 1 has an invalid length. [ 732.461143][T32486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7504'. [ 732.758965][T32488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7506'. [ 732.944043][T17625] IPVS: starting estimator thread 0... [ 733.001518][T32508] IPVS: set_ctl: invalid protocol: 58 172.20.20.26:20003 [ 733.047021][T32505] IPVS: using max 26 ests per chain, 62400 per kthread [ 733.154414][T32518] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7511'. [ 733.235711][T32523] batadv_slave_0: entered promiscuous mode [ 733.250238][T32523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7512'. [ 733.662836][T14784] tipc: Subscription rejected, illegal request [ 733.955532][T32513] batadv_slave_0: left promiscuous mode [ 734.367155][T32572] C: renamed from lo [ 734.620331][T32587] tipc: Enabled bearer , priority 0 [ 734.640897][T32590] macsec2: entered promiscuous mode [ 734.652847][T32590] macsec2: entered allmulticast mode [ 734.658831][T32587] syzkaller0: entered promiscuous mode [ 734.666381][T32587] syzkaller0: entered allmulticast mode [ 734.747783][T32587] tipc: Resetting bearer [ 734.761779][T32586] tipc: Resetting bearer [ 734.775383][ T5885] Bluetooth: hci1: command 0x0405 tx timeout [ 734.845003][T32586] tipc: Disabling bearer [ 735.056129][T32615] syzkaller0: entered promiscuous mode [ 735.068293][T32615] syzkaller0: entered allmulticast mode [ 735.335601][T32626] sctp: [Deprecated]: syz.4.7545 (pid 32626) Use of int in maxseg socket option. [ 735.335601][T32626] Use struct sctp_assoc_value instead [ 735.377772][T32626] bond0: entered allmulticast mode [ 735.402481][T32626] bond_slave_0: entered allmulticast mode [ 735.427207][T32626] bond_slave_1: entered allmulticast mode [ 735.448679][T32626] bridge_slave_1: entered allmulticast mode [ 735.612246][T32645] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 735.701763][T32650] tipc: Enabled bearer , priority 0 [ 735.719265][T32650] syzkaller0: entered promiscuous mode [ 735.727866][T32650] syzkaller0: entered allmulticast mode [ 735.761697][T32650] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 735.800185][T32651] tipc: Resetting bearer [ 735.821237][T32657] __nla_validate_parse: 6 callbacks suppressed [ 735.821254][T32657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7557'. [ 735.831159][T32659] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7558'. [ 735.851532][T32657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7557'. [ 735.864912][T32657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7557'. [ 735.868691][T32659] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7558'. [ 735.883160][T32648] tipc: Resetting bearer [ 735.912052][T32648] tipc: Disabling bearer [ 736.054818][ T55] block nbd5: Possible stuck request ffff8880250ee000: control (read@0,1024B). Runtime 270 seconds [ 736.065768][ T55] block nbd5: Possible stuck request ffff8880250ee1c0: control (read@1024,1024B). Runtime 270 seconds [ 736.077249][ T55] block nbd5: Possible stuck request ffff8880250ee380: control (read@2048,1024B). Runtime 270 seconds [ 736.088494][ T55] block nbd5: Possible stuck request ffff8880250ee540: control (read@3072,1024B). Runtime 270 seconds [ 736.202725][T32677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7564'. [ 736.209568][T14800] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.240711][T14800] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.251149][ T9423] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.260300][ T9423] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.310768][T32680] IPv6: sit2: Disabled Multicast RS [ 736.394732][T32687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7567'. [ 736.415270][T32687] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7567'. [ 736.844919][T32714] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 736.898509][T32709] netlink: 'syz.4.7576': attribute type 1 has an invalid length. [ 736.914199][T32709] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7576'. [ 736.936717][T32709] nbd: couldn't find a device at index 1 [ 736.942458][T32712] netlink: 'syz.4.7576': attribute type 1 has an invalid length. [ 736.954032][T32712] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7576'. [ 736.963147][T32712] nbd: couldn't find a device at index 1 [ 737.100377][T32721] netlink: 'syz.3.7580': attribute type 1 has an invalid length. [ 737.268605][T32721] 8021q: adding VLAN 0 to HW filter on device bond5 [ 737.387626][T32743] veth0: entered promiscuous mode [ 737.489951][T32752] veth0_to_bond: entered allmulticast mode [ 737.620318][T32766] netlink: 'syz.1.7592': attribute type 1 has an invalid length. [ 737.669971][T32766] bond5: entered promiscuous mode [ 737.676597][T32766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 737.804629][ T309] xt_HMARK: spi-set and port-set can't be combined [ 737.859818][ T311] 8021q: adding VLAN 0 to HW filter on device bond5 [ 737.868058][ T311] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 737.879203][ T311] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 737.916193][ T311] bond5: (slave wireguard0): making interface the new active one [ 737.968928][ T315] netlink: 'syz.3.7595': attribute type 21 has an invalid length. [ 737.979786][ T311] wireguard0: entered promiscuous mode [ 737.997575][ T311] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 738.106934][T32741] veth0: left promiscuous mode [ 738.531362][ T350] netlink: 'syz.1.7605': attribute type 39 has an invalid length. [ 738.780133][ T368] net_ratelimit: 221 callbacks suppressed [ 738.780152][ T368] netlink: zone id is out of range [ 738.792750][ T368] netlink: zone id is out of range [ 738.803680][ T368] netlink: zone id is out of range [ 738.817148][ T368] netlink: zone id is out of range [ 738.822692][ T368] netlink: zone id is out of range [ 738.846819][ T368] netlink: zone id is out of range [ 738.851953][ T368] netlink: zone id is out of range [ 738.896385][ T368] netlink: zone id is out of range [ 738.901838][ T368] netlink: zone id is out of range [ 738.908243][ T368] netlink: zone id is out of range [ 739.847495][ T424] nbd: must specify at least one socket [ 739.913199][ T427] netlink: 'syz.4.7628': attribute type 2 has an invalid length. [ 740.463379][ T464] netlink: 'syz.0.7636': attribute type 1 has an invalid length. [ 740.487632][ T462] netlink: 'syz.2.7637': attribute type 1 has an invalid length. [ 740.773752][ T481] tipc: Enabled bearer , priority 0 [ 740.782157][ T481] syzkaller0: entered promiscuous mode [ 740.788168][ T481] syzkaller0: entered allmulticast mode [ 740.892095][ T481] tipc: Resetting bearer [ 740.912782][ T480] tipc: Resetting bearer [ 740.980253][ T480] tipc: Disabling bearer [ 741.090009][ T494] __nla_validate_parse: 16 callbacks suppressed [ 741.090028][ T494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7647'. [ 741.206001][ T502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7651'. [ 741.462154][ T518] netlink: 'syz.4.7654': attribute type 23 has an invalid length. [ 741.526273][ T522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7655'. [ 741.537190][ T521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7657'. [ 741.558414][ T521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7657'. [ 741.790835][ T534] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7661'. [ 741.808530][ T535] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.7660'. [ 742.136721][ T554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7666'. [ 742.152618][ T554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7666'. [ 742.220569][ T559] net veth1_virt_wifi .: renamed from virt_wifi0 [ 742.254682][ T559] nbd: nbd3 already in use [ 742.259480][ T559] nbd: nbd3 already in use [ 742.367509][ T567] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 743.541900][ T602] geneve2: entered promiscuous mode [ 743.548839][ T602] geneve2: entered allmulticast mode [ 743.564296][T14786] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 743.585278][T14786] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 743.604234][T14786] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 743.624921][T14786] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 743.707391][ T613] validate_nla: 2 callbacks suppressed [ 743.707410][ T613] netlink: 'syz.2.7680': attribute type 83 has an invalid length. [ 743.803215][ T617] netlink: 'syz.0.7681': attribute type 4 has an invalid length. [ 743.867240][ T619] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 743.911900][ T622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7683'. [ 743.993317][ T628] netlink: 'syz.2.7685': attribute type 7 has an invalid length. [ 744.954393][ T659] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 745.024563][ T660] netlink: 'syz.4.7692': attribute type 11 has an invalid length. [ 745.640624][ T679] netlink: 'syz.2.7697': attribute type 1 has an invalid length. [ 745.701858][ T679] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 745.716030][T14800] net_ratelimit: 34 callbacks suppressed [ 745.716049][T14800] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 745.716954][ T679] 8021q: adding VLAN 0 to HW filter on device bond7 [ 745.773587][ T679] veth3: entered promiscuous mode [ 745.788957][ T679] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 745.865657][T14792] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 746.112754][ T699] __nla_validate_parse: 6 callbacks suppressed [ 746.112995][ T699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7705'. [ 746.115210][ T702] netlink: 'syz.0.7706': attribute type 1 has an invalid length. [ 746.162093][ T706] x_tables: ip_tables: udp match: only valid for protocol 17 [ 746.295634][ T704] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.7707'. [ 746.312408][ T704] openvswitch: netlink: Message has 5 unknown bytes. [ 746.382350][ T720] mac80211_hwsim hwsim76 pim6reg0: entered promiscuous mode [ 746.389892][ T720] mac80211_hwsim hwsim76 pim6reg0: entered allmulticast mode [ 746.689897][ T735] sctp: [Deprecated]: syz.4.7715 (pid 735) Use of int in maxseg socket option. [ 746.689897][ T735] Use struct sctp_assoc_value instead [ 746.719144][ T735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7715'. [ 746.733690][ T735] bond4: left promiscuous mode [ 746.749107][ T735] bridge0: port 2(bond4) entered disabled state [ 746.789089][ T735] bridge_slave_0: left allmulticast mode [ 746.798277][ T735] bridge_slave_0: left promiscuous mode [ 746.812872][ T735] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.395780][ T772] netlink: 'syz.2.7722': attribute type 11 has an invalid length. [ 747.641627][ T784] netlink: 'syz.3.7726': attribute type 5 has an invalid length. [ 747.660170][ T785] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7727'. [ 747.701871][ T785] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 747.741532][ T785] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 747.764251][ T792] netlink: 'syz.4.7729': attribute type 3 has an invalid length. [ 747.772025][ T792] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7729'. [ 747.992930][ T799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7730'. [ 748.035029][ T799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7730'. [ 748.269953][ T811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7733'. [ 748.290956][ T811] netlink: 'syz.0.7733': attribute type 7 has an invalid length. [ 748.312159][ T811] netlink: 'syz.0.7733': attribute type 8 has an invalid length. [ 748.321123][ T811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7733'. [ 748.333073][ T817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7735'. [ 748.712653][ T840] tap0: tun_chr_ioctl cmd 1074025677 [ 748.723402][ T840] tap0: linktype set to 65534 [ 748.875418][ T851] validate_nla: 1 callbacks suppressed [ 748.875437][ T851] netlink: 'syz.2.7747': attribute type 18 has an invalid length. [ 750.124347][ T919] netlink: 'syz.1.7767': attribute type 1 has an invalid length. [ 750.153133][ T919] netlink: 'syz.1.7767': attribute type 1 has an invalid length. [ 750.752561][T22536] udevd[22536]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 752.379557][ T925] veth1_macvtap: left promiscuous mode [ 752.385333][ T925] macsec0: entered promiscuous mode [ 752.390543][ T925] macsec0: entered allmulticast mode [ 752.402564][ T929] veth1_macvtap: entered promiscuous mode [ 752.409826][ T929] veth1_macvtap: entered allmulticast mode [ 752.416269][ T929] macsec0: left promiscuous mode [ 752.421352][ T929] macsec0: left allmulticast mode [ 752.427705][ T929] veth1_macvtap: left allmulticast mode [ 752.665930][ T975] __nla_validate_parse: 12 callbacks suppressed [ 752.665949][ T975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7779'. [ 752.680588][ T977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7780'. [ 752.804674][ T984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7780'. [ 752.841163][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.043547][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.317795][ T1014] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7789'. [ 753.354303][ T1014] 0{X: renamed from gretap0 (while UP) [ 753.370605][ T1023] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 753.396441][ T1014] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 753.414394][ T1023] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 753.433468][ T1023] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 753.558025][ T1031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7794'. [ 753.943018][ T1065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7801'. [ 753.975546][ T1063] syz.4.7802: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 753.975928][ T1070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7803'. [ 754.004538][ T1063] CPU: 1 UID: 0 PID: 1063 Comm: syz.4.7802 Not tainted syzkaller #0 PREEMPT(full) [ 754.004562][ T1063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 754.004584][ T1063] Call Trace: [ 754.004591][ T1063] [ 754.004600][ T1063] dump_stack_lvl+0x189/0x250 [ 754.004629][ T1063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.004649][ T1063] ? __pfx__printk+0x10/0x10 [ 754.004671][ T1063] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 754.004691][ T1063] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 754.004713][ T1063] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 754.004736][ T1063] warn_alloc+0x214/0x310 [ 754.004766][ T1063] ? __pfx_warn_alloc+0x10/0x10 [ 754.004803][ T1063] ? __get_vm_area_node+0x28f/0x300 [ 754.004824][ T1063] ? xskq_create+0xbf/0x170 [ 754.004844][ T1063] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 754.004898][ T1063] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 754.004927][ T1063] ? __kasan_kmalloc+0x93/0xb0 [ 754.004952][ T1063] vmalloc_user_noprof+0xad/0xf0 [ 754.004974][ T1063] ? xskq_create+0xbf/0x170 [ 754.004992][ T1063] xskq_create+0xbf/0x170 [ 754.005012][ T1063] xsk_init_queue+0xb0/0x110 [ 754.005030][ T1063] xsk_setsockopt+0x57b/0x8d0 [ 754.005057][ T1063] ? __pfx_xsk_setsockopt+0x10/0x10 [ 754.005078][ T1063] ? __pfx_aa_sk_perm+0x10/0x10 [ 754.005106][ T1063] ? __fget_files+0x2a/0x420 [ 754.005119][ T1063] ? aa_sock_opt_perm+0xff/0x1b0 [ 754.005139][ T1063] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 754.005156][ T1063] ? __pfx_xsk_setsockopt+0x10/0x10 [ 754.005180][ T1063] do_sock_setsockopt+0x179/0x1b0 [ 754.005203][ T1063] __x64_sys_setsockopt+0x13f/0x1b0 [ 754.005228][ T1063] do_syscall_64+0xfa/0x3b0 [ 754.005245][ T1063] ? lockdep_hardirqs_on+0x9c/0x150 [ 754.005260][ T1063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.005276][ T1063] ? clear_bhb_loop+0x60/0xb0 [ 754.005295][ T1063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.005312][ T1063] RIP: 0033:0x7fc803f8eec9 [ 754.005329][ T1063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.005343][ T1063] RSP: 002b:00007fc804e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 754.005362][ T1063] RAX: ffffffffffffffda RBX: 00007fc8041e5fa0 RCX: 00007fc803f8eec9 [ 754.005375][ T1063] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 754.005387][ T1063] RBP: 00007fc804011f91 R08: 0000000000000004 R09: 0000000000000000 [ 754.005398][ T1063] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 754.005409][ T1063] R13: 00007fc8041e6038 R14: 00007fc8041e5fa0 R15: 00007fff30f3aab8 [ 754.005456][ T1063] [ 754.005531][ T1063] Mem-Info: [ 754.081629][ T1077] netlink: 'syz.2.7803': attribute type 1 has an invalid length. [ 754.082346][ T1063] active_anon:5619 inactive_anon:0 isolated_anon:0 [ 754.082346][ T1063] active_file:3403 inactive_file:40139 isolated_file:0 [ 754.082346][ T1063] unevictable:802 dirty:42 writeback:0 [ 754.082346][ T1063] slab_reclaimable:14546 slab_unreclaimable:154977 [ 754.082346][ T1063] mapped:29503 shmem:1389 pagetables:1357 [ 754.082346][ T1063] sec_pagetables:0 bounce:0 [ 754.082346][ T1063] kernel_misc_reclaimable:0 [ 754.082346][ T1063] free:1261955 free_pcp:13796 free_cma:0 [ 754.337276][ T1063] Node 0 active_anon:22572kB inactive_anon:0kB active_file:13612kB inactive_file:160356kB unevictable:1672kB isolated(anon):0kB isolated(file):0kB mapped:118008kB dirty:176kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17896kB pagetables:5664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 754.370824][ T1063] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 754.401803][ T1063] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 754.431785][ T1063] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 754.441023][ T1063] Node 0 DMA32 free:1139096kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22524kB inactive_anon:0kB active_file:13612kB inactive_file:158788kB unevictable:1672kB writepending:176kB present:3129332kB managed:2557412kB mlocked:136kB bounce:0kB free_pcp:43272kB local_pcp:21364kB free_cma:0kB [ 754.475836][ T1063] lowmem_reserve[]: 0 0 1 1 1 [ 754.480581][ T1063] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 754.511672][ T1063] lowmem_reserve[]: 0 0 0 0 0 [ 754.524255][ T30] audit: type=1107 audit(1758688314.991:12): pid=1084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 754.534733][ T1063] Node 1 Normal free:3893180kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11968kB local_pcp:7296kB free_cma:0kB [ 754.667548][ T1063] lowmem_reserve[]: 0 0 0 0 0 [ 754.686808][ T1063] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 754.714982][ T1095] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7809'. [ 754.749311][ T1101] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7808'. [ 754.769251][ T1063] Node 0 DMA32: 1437*4kB (UME) 725*8kB (UME) 354*16kB (UME) 445*32kB (UME) 117*64kB (UME) 42*128kB (UME) 309*256kB (UME) 287*512kB (UME) 117*1024kB (UM) 2*2048kB (U) 182*4096kB (UM) = 1139740kB [ 754.795484][ T5885] Bluetooth: hci4: command 0x041b tx timeout [ 754.821631][ T1063] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 754.856576][ T1063] Node 1 Normal: 193*4kB (UME) 69*8kB (UME) 39*16kB (UME) 223*32kB (UME) 69*64kB (UME) 14*128kB (UME) 2*256kB (M) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3893180kB [ 754.880874][ T1104] delete_channel: no stack [ 754.905749][ T1063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.913505][ T1106] netlink: 'syz.0.7812': attribute type 13 has an invalid length. [ 754.916267][ T1063] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 754.933602][ T1063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.946058][ T1063] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 754.955948][ T1063] 44928 total pagecache pages [ 754.960705][ T1063] 0 pages in swap cache [ 754.965033][ T1063] Free swap = 124996kB [ 754.968014][ T1106] netlink: 'syz.0.7812': attribute type 58 has an invalid length. [ 754.969189][ T1063] Total swap = 124996kB [ 754.969201][ T1063] 2097051 pages RAM [ 755.009190][ T1063] 0 pages HighMem/MovableOnly [ 755.019329][ T1063] 425672 pages reserved [ 755.020984][ T1106] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7812'. [ 755.035007][ T1063] 0 pages cma reserved [ 755.566467][ T1146] vlan2: entered promiscuous mode [ 755.571964][ T1146] 0{X: entered promiscuous mode [ 755.638535][ T1148] tipc: Enabled bearer , priority 0 [ 755.661855][ T1148] syzkaller0: entered promiscuous mode [ 755.680893][ T1148] syzkaller0: entered allmulticast mode [ 755.785435][ T1148] tipc: Resetting bearer [ 755.796995][ T1147] tipc: Resetting bearer [ 755.834773][ T1147] tipc: Disabling bearer [ 755.982600][ T1169] gre0: entered promiscuous mode [ 756.060318][ T1172] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 756.243648][ T1177] netlink: 'syz.1.7832': attribute type 2 has an invalid length. [ 756.559666][ T1207] netlink: 'syz.2.7840': attribute type 1 has an invalid length. [ 756.631524][ T1211] netlink: 'syz.2.7840': attribute type 1 has an invalid length. [ 756.642831][ T1211] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 757.140449][ T1241] netlink: 'syz.4.7849': attribute type 1 has an invalid length. [ 757.282719][ T1247] tipc: Enabled bearer , priority 0 [ 757.310024][ T1247] syzkaller0: entered promiscuous mode [ 757.320772][ T1247] syzkaller0: entered allmulticast mode [ 757.347369][ T1247] tipc: Resetting bearer [ 757.401942][ T1246] tipc: Resetting bearer [ 757.455008][ T1246] tipc: Disabling bearer [ 757.490356][ T1258] tipc: Enabled bearer , priority 0 [ 757.503715][ T1258] syzkaller0: entered promiscuous mode [ 757.520861][ T1258] syzkaller0: entered allmulticast mode [ 757.547791][ T1258] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 757.578727][ T1258] tipc: Resetting bearer [ 757.633402][ T1267] tipc: Enabled bearer , priority 0 [ 757.651056][ T1267] syzkaller0: entered promiscuous mode [ 757.661015][ T1267] syzkaller0: entered allmulticast mode [ 757.772179][ T1267] tipc: Resetting bearer [ 757.805873][ T1266] tipc: Resetting bearer [ 757.860528][ T1266] tipc: Disabling bearer [ 758.051333][ T1296] netlink: 'syz.2.7864': attribute type 1 has an invalid length. [ 758.106140][ T1305] __nla_validate_parse: 8 callbacks suppressed [ 758.106157][ T1305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7864'. [ 758.125478][ T1296] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 758.142431][ T1248] tipc: Resetting bearer [ 758.226232][ T1248] tipc: Disabling bearer [ 758.394483][ T1322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7869'. [ 758.403642][ T1322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7869'. [ 758.445266][ T1321] tipc: Enabled bearer , priority 10 [ 758.552664][ T1332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.585581][ T1335] tipc: Enabling of bearer rejected, failed to enable media [ 758.637383][ T1339] netlink: 'syz.0.7875': attribute type 1 has an invalid length. [ 758.653687][ T1339] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7875'. [ 758.821554][ T1348] netlink: 'syz.0.7878': attribute type 2 has an invalid length. [ 758.836458][ T1347] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7877'. [ 758.911325][ T1353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7879'. [ 759.008244][ T1358] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7881'. [ 759.071327][ T1358] 8021q: VLANs not supported on gre0 [ 759.095848][ T1362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7882'. [ 759.217889][ T1368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.366134][ T1381] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7888'. [ 759.739779][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7896'. [ 759.821239][ T1409] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20004 [ 759.835707][ T1414] validate_nla: 1 callbacks suppressed [ 759.835723][ T1414] netlink: 'syz.3.7900': attribute type 5 has an invalid length. [ 760.059339][ T1426] netlink: 'syz.4.7902': attribute type 2 has an invalid length. [ 760.159291][ T1433] syzkaller0: entered allmulticast mode [ 760.882437][ T1472] tipc: Enabled bearer , priority 0 [ 760.901381][ T1472] syzkaller0: entered promiscuous mode [ 760.909188][ T1472] syzkaller0: entered allmulticast mode [ 760.949197][ T1472] tipc: Resetting bearer [ 760.977529][ T1471] tipc: Resetting bearer [ 761.022034][ T1471] tipc: Disabling bearer [ 761.039526][ T1479] netlink: 'syz.3.7920': attribute type 18 has an invalid length. [ 761.079200][ T1479] netlink: 'syz.3.7920': attribute type 18 has an invalid length. [ 761.304698][ T1485] tipc: Enabled bearer , priority 0 [ 761.332886][ T1485] syzkaller0: MTU too low for tipc bearer [ 761.339024][ T1485] tipc: Disabling bearer [ 761.563117][ T1507] netlink: 'syz.4.7930': attribute type 1 has an invalid length. [ 761.574206][ T1511] netlink: 'syz.0.7931': attribute type 21 has an invalid length. [ 761.591640][ T1507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.598981][ T1511] netlink: 'syz.0.7931': attribute type 13 has an invalid length. [ 761.623729][ T1511] veth0_macvtap: left promiscuous mode [ 761.674575][ T1511] macvtap0: entered allmulticast mode [ 761.711595][ T1511] macvtap0: refused to change device tx_queue_len [ 761.968626][ T1536] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 761.992189][ T1536] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 762.082967][ T1539] sock: sock_timestamping_bind_phc: sock not bind to device [ 762.443416][ T1555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.490894][ T1555] netlink: 'syz.0.7942': attribute type 4 has an invalid length. [ 762.492773][ T1557] ip6gre2: entered allmulticast mode [ 762.547449][ T1559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.558267][ T1555] `: renamed from bond0 (while UP) [ 762.595275][ T1558] netlink: 'syz.0.7942': attribute type 4 has an invalid length. [ 762.936256][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 763.138394][ T1592] macvtap1: entered promiscuous mode [ 763.153256][ T1592] macvtap1: entered allmulticast mode [ 763.158879][ T1594] netlink: 'syz.1.7956': attribute type 1 has an invalid length. [ 763.183215][ T1592] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 763.200197][ T1592] team0: Device macvtap1 failed to register rx_handler [ 763.218418][ T1597] __nla_validate_parse: 26 callbacks suppressed [ 763.218435][ T1597] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7956'. [ 763.327822][ T1596] lo speed is unknown, defaulting to 1000 [ 763.410671][ T1600] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7958'. [ 763.899095][ T1610] tipc: Enabled bearer , priority 0 [ 763.938173][ T1596] wg1 speed is unknown, defaulting to 1000 [ 764.023563][ T1610] tipc: Disabling bearer [ 764.208875][ T1624] veth1_to_bond: entered allmulticast mode [ 764.243725][ T1627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7969'. [ 764.358202][ T1637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.418269][ T1621] veth1_to_bond: left allmulticast mode [ 764.566424][ T1642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7972'. [ 764.866017][ T1659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7978'. [ 765.211055][ T1658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7979'. [ 765.438696][ T1687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7982'. [ 766.050693][ T1724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7993'. [ 766.122687][ T1727] veth9: entered allmulticast mode [ 766.137682][ T55] block nbd5: Possible stuck request ffff8880250ee000: control (read@0,1024B). Runtime 300 seconds [ 766.148711][ T55] block nbd5: Possible stuck request ffff8880250ee1c0: control (read@1024,1024B). Runtime 300 seconds [ 766.161276][ T55] block nbd5: Possible stuck request ffff8880250ee380: control (read@2048,1024B). Runtime 300 seconds [ 766.172745][ T55] block nbd5: Possible stuck request ffff8880250ee540: control (read@3072,1024B). Runtime 300 seconds [ 766.354842][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7996'. [ 766.664106][ T1751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8002'. [ 766.906446][ T1765] lo speed is unknown, defaulting to 1000 [ 767.620629][ T1811] hsr_slave_0: left promiscuous mode [ 767.630474][ T1811] hsr_slave_1: left promiscuous mode [ 767.727130][ T1765] wg1 speed is unknown, defaulting to 1000 [ 768.151971][ T1843] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 768.170530][ T1843] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 768.381790][ T1854] validate_nla: 3 callbacks suppressed [ 768.381810][ T1854] netlink: 'syz.1.8023': attribute type 10 has an invalid length. [ 768.405509][ T1859] netlink: 'syz.0.8024': attribute type 2 has an invalid length. [ 768.422809][ T1854] __nla_validate_parse: 11 callbacks suppressed [ 768.422826][ T1854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8023'. [ 768.642373][ T1854] team0: Port device geneve0 added [ 768.658480][ T1854] netlink: 'syz.1.8023': attribute type 10 has an invalid length. [ 768.693579][ T1854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8023'. [ 768.708548][T14792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.718053][T14792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.898512][ T1854] netlink: 'syz.1.8023': attribute type 10 has an invalid length. [ 768.908431][ T1854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8023'. [ 768.922723][T14792] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.935268][T14792] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.143754][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 770.903531][ T1891] sctp: [Deprecated]: syz.1.8033 (pid 1891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.903531][ T1891] Use struct sctp_sack_info instead [ 771.109886][ T1897] gre0: left promiscuous mode [ 771.116468][ T1903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8036'. [ 771.137633][ T1906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8040'. [ 771.248954][ T1897] sit0: left promiscuous mode [ 771.274533][ T1897] sit0: left allmulticast mode [ 771.366551][ T1897] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.374316][ T1897] bridge0: port 1() entered disabled state [ 771.401643][ T1897] bond0: left promiscuous mode [ 771.409830][ T1897] bond_slave_0: left promiscuous mode [ 771.416926][ T1897] bond_slave_1: left promiscuous mode [ 771.559898][ T1897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.685204][ T1897] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 771.756961][ T1897] geneve2: left promiscuous mode [ 771.762226][ T1897] geneve2: left allmulticast mode [ 771.809035][ T1897] gretap1: left promiscuous mode [ 771.816061][ T1897] gretap1: left allmulticast mode [ 771.863708][ T1897] bond3: left promiscuous mode [ 771.888837][ T1897] bond4: left promiscuous mode [ 771.945290][ T1897] veth3: left promiscuous mode [ 771.957661][ T1897] ip6gre2: left allmulticast mode [ 771.972388][ T1919] netlink: 'syz.4.8041': attribute type 4 has an invalid length. [ 772.001140][T14793] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.037659][T14793] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.102004][T14793] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 772.150379][T14793] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.189403][T14793] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.214910][T14793] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 772.232384][T14793] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.250975][T14793] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.280193][T14793] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 772.285296][ T1946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8044'. [ 772.386400][T14793] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.418674][T14793] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.446600][T14793] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 772.636163][ T1966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8055'. [ 772.662784][ T1969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8054'. [ 772.710393][ T1969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8054'. [ 772.815379][ T1976] netlink: 'syz.4.8058': attribute type 1 has an invalid length. [ 772.841788][ T1976] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8058'. [ 773.085227][ T1998] caif0: entered promiscuous mode [ 773.096503][ T1998] caif0: entered allmulticast mode [ 773.279480][ T2003] netlink: 'syz.1.8065': attribute type 1 has an invalid length. [ 773.510909][ T2023] tipc: Enabling of bearer rejected, failed to enable media [ 773.712542][ T2032] __nla_validate_parse: 2 callbacks suppressed [ 773.712561][ T2032] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.8075'. [ 774.091866][ T2046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8079'. [ 774.191912][ T2048] netlink: 'syz.4.8080': attribute type 1 has an invalid length. [ 774.199962][ T2048] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8080'. [ 774.691110][ T2074] pimreg3: entered allmulticast mode [ 774.703849][ T2071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.742268][ T2074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.842444][ T2071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8088'. [ 774.843472][ T2075] lo speed is unknown, defaulting to 1000 [ 775.027986][ T2092] netlink: 'syz.2.8089': attribute type 2 has an invalid length. [ 775.429404][ T2075] wg1 speed is unknown, defaulting to 1000 [ 775.506630][ T2120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8100'. [ 775.695212][ T2124] netlink: 'syz.0.8101': attribute type 11 has an invalid length. [ 775.781894][ T2129] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 775.900012][ T2138] netlink: 'syz.1.8107': attribute type 1 has an invalid length. [ 776.301520][ T2144] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 776.359649][ T2145] veth11: entered promiscuous mode [ 776.551800][ T2152] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8108'. [ 776.821387][ T2155] team0 (unregistering): Port device team_slave_0 removed [ 776.830683][ T2155] team0 (unregistering): Port device team_slave_1 removed [ 776.839362][ T2155] team0 (unregistering): Port device geneve0 removed [ 776.860722][ T2165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8112'. [ 776.870515][ T2165] netlink: 'syz.4.8112': attribute type 11 has an invalid length. [ 776.948040][ T2165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8112'. [ 776.976684][ T2168] sctp: [Deprecated]: syz.3.8114 (pid 2168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.976684][ T2168] Use struct sctp_sack_info instead [ 777.003005][ T2165] netlink: 'syz.4.8112': attribute type 11 has an invalid length. [ 777.078013][ T2175] netlink: 'syz.2.8116': attribute type 1 has an invalid length. [ 777.190092][ T2184] netlink: 'syz.4.8118': attribute type 4 has an invalid length. [ 777.218262][ T2187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8119'. [ 777.228953][ T2187] openvswitch: netlink: nsh attr 8083 is out of range max 3 [ 777.241401][ T2178] tipc: Enabling of bearer rejected, failed to enable media [ 777.242440][ T2187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.268042][ T2187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8119'. [ 777.737387][ T2216] xt_l2tp: missing protocol rule (udp|l2tpip) [ 777.944085][ T2226] tipc: Enabling of bearer rejected, already enabled [ 778.208496][ T2226] tipc: Enabling of bearer rejected, already enabled [ 778.227647][ T2239] netlink: 'syz.3.8134': attribute type 1 has an invalid length. [ 778.238955][ T2236] netem: invalid attributes len -24 [ 778.254989][ T2236] netem: change failed [ 778.924677][ T2271] __nla_validate_parse: 4 callbacks suppressed [ 778.924695][ T2271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8143'. [ 779.020985][ T2280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8143'. [ 779.053265][ T2280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8143'. [ 779.084070][ T2280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8143'. [ 779.226141][ T2290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8148'. [ 779.259801][ T2290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8148'. [ 779.303051][ T2290] netlink: 'syz.3.8148': attribute type 13 has an invalid length. [ 779.335145][ T2290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8148'. [ 779.346723][ T2290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8148'. [ 779.346856][ T2295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8151'. [ 779.373491][ T2290] netlink: 'syz.3.8148': attribute type 13 has an invalid length. [ 779.392482][ T2290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8148'. [ 779.849810][ T2326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.370516][ T2354] team0: entered promiscuous mode [ 780.378482][ T2354] team_slave_0: entered promiscuous mode [ 780.385851][ T2354] team_slave_1: entered promiscuous mode [ 780.391654][ T2354] veth1_macvtap: entered promiscuous mode [ 780.404545][ T2354] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.420743][ T2362] netlink: 'syz.3.8169': attribute type 11 has an invalid length. [ 780.422835][ T2354] batman_adv: batadv0: Interface activated: team0 [ 780.457228][ T2354] netlink: 'syz.2.8168': attribute type 23 has an invalid length. [ 780.547758][ T2362] netlink: 'syz.3.8169': attribute type 11 has an invalid length. [ 780.826309][ T2386] lo: entered promiscuous mode [ 780.907071][ T2386] tunl0: entered promiscuous mode [ 780.953402][ T2386] gre0: entered promiscuous mode [ 781.043424][ T2386] gretap0: entered promiscuous mode [ 781.097272][ T2386] erspan0: entered promiscuous mode [ 781.129674][ T2386] ip_vti0: entered promiscuous mode [ 781.236878][ T2412] tipc: Enabled bearer , priority 0 [ 781.307959][ T2412] syzkaller0: entered promiscuous mode [ 781.313515][ T2412] syzkaller0: entered allmulticast mode [ 781.333132][ T2422] netlink: 'syz.0.8184': attribute type 7 has an invalid length. [ 781.343858][ T2422] netlink: 'syz.0.8184': attribute type 8 has an invalid length. [ 781.386953][ T2420] netlink: 'syz.2.8182': attribute type 1 has an invalid length. [ 781.404315][ T2427] : entered promiscuous mode [ 781.490901][ T2433] bond12: (slave gretap3): making interface the new active one [ 781.517051][ T2433] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 781.986769][ T2411] tipc: Resetting bearer [ 782.018895][ T2411] tipc: Disabling bearer [ 782.036206][ T2487] netlink: 'syz.1.8196': attribute type 1 has an invalid length. [ 782.146423][ T2485] veth11: entered promiscuous mode [ 783.045654][ T2553] netlink: 'syz.2.8214': attribute type 2 has an invalid length. [ 783.472988][ T2578] netlink: 'syz.1.8221': attribute type 10 has an invalid length. [ 783.500161][ T2578] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 783.540801][ T2581] xfrm1: entered promiscuous mode [ 783.546507][ T2581] xfrm1: entered allmulticast mode [ 783.861083][ T2602] macvlan0: entered promiscuous mode [ 783.913364][ T2602] batadv_slave_0: entered promiscuous mode [ 783.945943][ T2602] debugfs: 'hsr0' already exists in 'hsr' [ 783.951704][ T2602] Cannot create hsr debugfs directory [ 784.056409][ T2614] Z: renamed from gre0 [ 784.094666][ T2613] sctp: [Deprecated]: syz.1.8230 (pid 2613) Use of int in max_burst socket option. [ 784.094666][ T2613] Use struct sctp_assoc_value instead [ 784.123015][ T2616] sctp: [Deprecated]: syz.1.8230 (pid 2616) Use of int in max_burst socket option. [ 784.123015][ T2616] Use struct sctp_assoc_value instead [ 784.426050][ T2643] tipc: New replicast peer: 255.255.255.255 [ 784.432357][ T2643] tipc: Enabled bearer , priority 10 [ 784.581362][ T2643] bridge0: port 1(veth0_to_bridge) entered blocking state [ 784.594835][ T2643] bridge0: port 1(veth0_to_bridge) entered disabled state [ 784.602329][ T2643] veth0_to_bridge: entered allmulticast mode [ 784.624508][ T2643] veth0_to_bridge: entered promiscuous mode [ 784.632945][ T2651] __nla_validate_parse: 14 callbacks suppressed [ 784.632964][ T2651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8242'. [ 784.642615][ T2661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8245'. [ 784.725002][ T2662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8242'. [ 784.755197][ T2665] netlink: 'syz.4.8246': attribute type 21 has an invalid length. [ 784.783432][ T2665] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8246'. [ 784.949722][ T2667] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8247'. [ 785.447907][ T2699] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8253'. [ 785.738768][ T2713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8255'. [ 785.801027][ T2713] dvmrp0: entered allmulticast mode [ 785.916099][ T2724] netlink: 'syz.1.8259': attribute type 1 has an invalid length. [ 786.161337][ T2739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8261'. [ 786.374958][ T2753] netlink: 'syz.3.8261': attribute type 29 has an invalid length. [ 786.499067][ T2760] netlink: 'syz.0.8268': attribute type 1 has an invalid length. [ 786.534660][ T2760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8268'. [ 786.603072][ T2769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8269'. [ 786.612584][ T2761] netlink: 'syz.0.8268': attribute type 1 has an invalid length. [ 787.038634][ T2781] netlink: 'syz.0.8272': attribute type 10 has an invalid length. [ 787.072462][ T2781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.095116][ T2781] `: (slave batadv0): Enslaving as an active interface with an up link [ 787.268496][ T2787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.282429][ T2787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.394843][ T2787] `: (slave batadv0): Releasing backup interface [ 787.491028][ T2805] team0: Device wireguard0 is of different type [ 788.331669][ T2863] netlink: 'syz.4.8289': attribute type 2 has an invalid length. [ 788.895561][ T2884] team0: Device wireguard0 is of different type [ 789.010373][ T2892] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 789.290478][ T2905] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 789.358270][ T2901] bond0: (slave bridge_slave_1): Releasing backup interface [ 789.546171][ T2911] tipc: Enabled bearer , priority 0 [ 789.560190][ T2911] syzkaller0: entered promiscuous mode [ 789.604003][ T2911] syzkaller0: entered allmulticast mode [ 789.700054][ T2911] tipc: Resetting bearer [ 789.732577][ T2910] tipc: Resetting bearer [ 789.805060][ T2910] tipc: Disabling bearer [ 789.896773][ T2922] netlink: 'syz.1.8303': attribute type 21 has an invalid length. [ 790.117733][ T2936] __nla_validate_parse: 5 callbacks suppressed [ 790.117752][ T2936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8308'. [ 790.221453][ T2940] lo speed is unknown, defaulting to 1000 [ 790.324705][ T2943] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8310'. [ 790.353193][ T2943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8310'. [ 790.942502][ T2943] vlan0 (unregistering): left allmulticast mode [ 790.951615][ T2943] veth0_vlan (unregistering): left allmulticast mode [ 790.963437][ T2943] vlan0 (unregistering): left promiscuous mode [ 791.109289][ T2940] wg1 speed is unknown, defaulting to 1000 [ 791.481684][ T2974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8317'. [ 792.879217][ T3057] netlink: 'syz.0.8341': attribute type 1 has an invalid length. [ 792.897509][ T3057] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8341'. [ 792.990423][ T3059] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 792.999606][ T3059] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 793.040267][ T3059] netlink: 236 bytes leftover after parsing attributes in process `syz.4.8342'. [ 793.075187][ T3061] netlink: 288 bytes leftover after parsing attributes in process `syz.3.8343'. [ 793.106003][ T3063] netlink: 'syz.1.8344': attribute type 1 has an invalid length. [ 793.200869][ T3067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8345'. [ 793.232580][ T3063] 8021q: adding VLAN 0 to HW filter on device bond10 [ 793.280269][ T3067] netlink: 'syz.0.8345': attribute type 8 has an invalid length. [ 793.298455][ T3072] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 793.529401][ T3076] tipc: Enabled bearer , priority 0 [ 793.556668][ T3080] IPVS: set_ctl: invalid protocol: 62 172.20.20.38:20001 [ 793.750496][ T3080] syzkaller0: entered promiscuous mode [ 793.785558][ T3080] syzkaller0: entered allmulticast mode [ 796.220290][ T55] block nbd5: Possible stuck request ffff8880250ee000: control (read@0,1024B). Runtime 330 seconds [ 796.233962][ T55] block nbd5: Possible stuck request ffff8880250ee1c0: control (read@1024,1024B). Runtime 330 seconds [ 796.247486][ T55] block nbd5: Possible stuck request ffff8880250ee380: control (read@2048,1024B). Runtime 330 seconds [ 796.258927][ T55] block nbd5: Possible stuck request ffff8880250ee540: control (read@3072,1024B). Runtime 330 seconds [ 797.676466][ T3090] syzkaller0: entered promiscuous mode [ 797.694896][ T3090] syzkaller0: entered allmulticast mode [ 799.841963][ T3145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8359'. [ 799.856268][ T3145] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.8359'. [ 799.873487][ T3145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8359'. [ 799.897898][ T3145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8359'. [ 799.926013][ T3149] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.8362'. [ 799.936428][ T3149] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8362'. [ 800.067687][ T3158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8366'. [ 800.083432][ T3158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8366'. [ 800.103841][ T3160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8365'. [ 800.217164][ T3171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8367'. [ 800.516557][ T3184] netlink: 'syz.3.8372': attribute type 2 has an invalid length. [ 800.620565][ T3191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.860934][ T3209] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 800.998343][ T3219] netlink: 'syz.3.8385': attribute type 1 has an invalid length. [ 801.045757][ T3219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 801.052864][ T3221] netlink: 'syz.0.8386': attribute type 4 has an invalid length. [ 801.280867][ T3237] netlink: 'syz.2.8391': attribute type 10 has an invalid length. [ 801.302867][ T3237] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode [ 801.311279][ T3237] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 802.215715][ T3168] Bluetooth: hci1: command 0x0405 tx timeout [ 802.360603][ T3312] delete_channel: no stack [ 802.923035][ T3343] netlink: 'syz.2.8422': attribute type 27 has an invalid length. [ 803.520155][ T3372] netdevsim netdevsim1: Direct firmware load for /. failed with error -2 [ 803.530018][ T3372] netdevsim netdevsim1: Falling back to sysfs fallback for: /. [ 803.591403][ T3379] sit0: entered promiscuous mode [ 803.620304][ T3379] netlink: 'syz.0.8433': attribute type 1 has an invalid length. [ 803.658434][ T3383] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 803.685192][ T3383] netlink: 'syz.3.8435': attribute type 1 has an invalid length. [ 803.750590][ T3383] 8021q: adding VLAN 0 to HW filter on device bond7 [ 803.818678][ T3392] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 804.108376][ T3406] sit2: entered allmulticast mode [ 804.491812][ T3434] netlink: 'syz.1.8450': attribute type 11 has an invalid length. [ 805.213717][ T3478] __nla_validate_parse: 33 callbacks suppressed [ 805.213736][ T3478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8460'. [ 805.330242][ T3483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 805.337537][ T3483] IPv6: NLM_F_CREATE should be set when creating new route [ 805.344798][ T3483] IPv6: NLM_F_CREATE should be set when creating new route [ 805.383828][ T3483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 805.519703][ T3484] lo speed is unknown, defaulting to 1000 [ 805.669462][ T3501] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 805.827011][ T3513] tipc: Enabling of bearer rejected, already enabled [ 805.904216][ T5885] Bluetooth: hci0: command tx timeout [ 806.019398][ T3526] netlink: 'syz.4.8471': attribute type 1 has an invalid length. [ 806.060336][ T3526] netlink: 'syz.4.8471': attribute type 1 has an invalid length. [ 806.071028][ T3525] netlink: 'syz.4.8471': attribute type 1 has an invalid length. [ 806.126342][ T3525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 806.133644][ T3512] lo speed is unknown, defaulting to 1000 [ 806.146033][ T3525] bond5: (slave gretap0): making interface the new active one [ 806.156255][ T3525] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 806.181313][ T3484] wg1 speed is unknown, defaulting to 1000 [ 806.397500][ T3534] syzkaller1: entered promiscuous mode [ 806.403102][ T3534] syzkaller1: entered allmulticast mode [ 806.450556][ T3534] syzkaller1: left promiscuous mode [ 806.484213][ T3534] syzkaller1: left allmulticast mode [ 806.567131][ T3512] wg1 speed is unknown, defaulting to 1000 [ 806.997648][ T3559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.596602][ T3594] netlink: 'syz.1.8491': attribute type 1 has an invalid length. [ 807.641018][ T3595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8492'. [ 807.854924][ T3603] netlink: 'syz.2.8496': attribute type 7 has an invalid length. [ 807.863041][ T3603] netlink: 'syz.2.8496': attribute type 8 has an invalid length. [ 807.891920][ T3603] netem: change failed [ 808.059561][ T3616] netlink: 'syz.3.8502': attribute type 29 has an invalid length. [ 808.073065][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8502'. [ 808.086238][ T3616] netlink: 'syz.3.8502': attribute type 29 has an invalid length. [ 808.114608][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8502'. [ 808.257320][ T3631] netlink: 'syz.2.8506': attribute type 26 has an invalid length. [ 808.278770][ T3631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8506'. [ 808.319550][ T3631] netlink: 'syz.2.8506': attribute type 26 has an invalid length. [ 808.346864][ T3631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8506'. [ 808.358139][ T3639] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8508'. [ 808.380884][ T3639] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8508'. [ 808.817379][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8516'. [ 808.955348][ T3666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8518'. [ 809.220192][ T3683] tipc: Enabled bearer , priority 0 [ 809.236689][ T3683] syzkaller0: entered promiscuous mode [ 809.243797][ T3683] syzkaller0: entered allmulticast mode [ 809.296111][ T3681] tipc: Resetting bearer [ 809.408105][ T3681] tipc: Disabling bearer [ 809.420417][ T3694] netlink: 'syz.0.8528': attribute type 11 has an invalid length. [ 810.843253][ T3767] __nla_validate_parse: 3 callbacks suppressed [ 810.843272][ T3767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8548'. [ 810.964422][ T3773] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8550'. [ 811.092468][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8553'. [ 811.111791][ T3783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8551'. [ 811.150251][ T3786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8552'. [ 811.163199][ T3786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8552'. [ 811.202700][ T3786] bridge0: port 3(vlan0) entered blocking state [ 811.226628][ T3791] validate_nla: 2 callbacks suppressed [ 811.226646][ T3791] netlink: 'syz.3.8554': attribute type 39 has an invalid length. [ 811.248296][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8552'. [ 811.255944][ T3786] bridge0: port 3(vlan0) entered disabled state [ 811.264706][ T3786] vlan0: entered allmulticast mode [ 811.271723][ T3786] bridge0: entered allmulticast mode [ 811.315855][ T3786] vlan0: left allmulticast mode [ 811.327234][ T3786] bridge0: left allmulticast mode [ 811.572115][ T3805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8560'. [ 811.708454][ T3812] netlink: 'syz.3.8561': attribute type 1 has an invalid length. [ 811.926104][ T3830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8567'. [ 812.119168][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8569'. [ 812.136517][ T3845] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 812.262972][ T3852] openvswitch: netlink: Flow actions attr not present in new flow. [ 812.725961][ T3879] openvswitch: netlink: IP tunnel TTL not specified. [ 812.771208][ T3881] tipc: Enabling of bearer rejected, already enabled [ 812.813756][ T3881] netlink: 'syz.4.8578': attribute type 15 has an invalid length. [ 813.489728][ T3938] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:0 [ 813.527898][ T3941] tipc: Enabled bearer , priority 10 [ 813.765376][ T3950] netlink: 'syz.3.8593': attribute type 21 has an invalid length. [ 813.797389][ T3950] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 813.904707][ T3960] netlink: 'syz.2.8595': attribute type 1 has an invalid length. [ 813.919606][ T3961] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 813.953343][ T3961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.061691][ T3965] bond13: (slave geneve3): making interface the new active one [ 814.071153][ T3965] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 814.131668][ T9423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 814.189539][ T9423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 814.236379][ T9423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 814.312636][ T3983] netlink: 'syz.4.8600': attribute type 12 has an invalid length. [ 814.344826][ T3982] 8021q: adding VLAN 0 to HW filter on device bond7 [ 814.377449][ T9423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 814.432180][ T3990] tipc: Enabled bearer , priority 0 [ 814.443281][ T3990] syzkaller0: entered promiscuous mode [ 814.455645][ T3990] syzkaller0: entered allmulticast mode [ 814.598263][ T3990] tipc: Resetting bearer [ 814.627509][ T3990] bridge_slave_1: left allmulticast mode [ 814.644500][ T3990] bridge_slave_1: left promiscuous mode [ 814.646851][ T4002] netlink: 'syz.4.8605': attribute type 13 has an invalid length. [ 814.663968][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.691099][ T3990] : left allmulticast mode [ 814.696936][ T3990] : left promiscuous mode [ 814.701720][ T3990] bridge0: port 1() entered disabled state [ 814.892008][ T4002] veth0_macvtap: left promiscuous mode [ 814.901909][ T4002] macvtap0: entered allmulticast mode [ 814.924810][ T4002] macvtap0: refused to change device tx_queue_len [ 814.957392][ T4010] syzkaller1: entered promiscuous mode [ 814.973107][ T4010] syzkaller1: entered allmulticast mode [ 814.999022][ T3988] tipc: Resetting bearer [ 815.031847][ T3988] tipc: Disabling bearer [ 815.051338][ T4020] tipc: Enabled bearer , priority 0 [ 815.105100][ T4022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.143726][ T4017] tipc: Disabling bearer [ 815.217632][ T4032] tipc: Enabling of bearer rejected, media not registered [ 815.392180][ T4049] netlink: 'syz.2.8620': attribute type 64 has an invalid length. [ 815.432867][ T4050] syzkaller1: entered promiscuous mode [ 815.433458][ T4051] netlink: 'syz.2.8620': attribute type 64 has an invalid length. [ 815.451083][ T4050] syzkaller1: entered allmulticast mode [ 819.256787][ T31] INFO: task udevd:19241 blocked for more than 143 seconds. [ 819.265788][ T31] Not tainted syzkaller #0 [ 819.270740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.279514][ T31] task:udevd state:D stack:22632 pid:19241 tgid:19241 ppid:5238 task_flags:0x400140 flags:0x00004006 [ 819.291800][ T31] Call Trace: [ 819.295551][ T31] [ 819.298477][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 819.302975][ T31] ? __pfx___schedule+0x10/0x10 [ 819.314586][ T31] ? schedule+0x91/0x360 [ 819.319098][ T31] schedule+0x165/0x360 [ 819.323263][ T31] io_schedule+0x80/0xd0 [ 819.328853][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 819.344411][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 819.350252][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 819.404340][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 819.409794][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 819.467751][ T31] do_read_cache_folio+0x1aa/0x590 [ 819.472910][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 819.504902][ T31] read_part_sector+0xb6/0x2b0 [ 819.509720][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 819.524490][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 819.530064][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 819.554484][ T31] bdev_disk_changed+0x75f/0x14b0 [ 819.559577][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 819.575835][ T31] ? wait_on_inode+0xc0/0x230 [ 819.580558][ T31] blkdev_get_whole+0x380/0x510 [ 819.594749][ T31] bdev_open+0x31e/0xd30 [ 819.599043][ T31] blkdev_open+0x457/0x600 [ 819.603468][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 819.624837][ T31] do_dentry_open+0x950/0x13f0 [ 819.629662][ T31] vfs_open+0x3b/0x340 [ 819.633734][ T31] ? path_openat+0x2ecd/0x3830 [ 819.655647][ T31] path_openat+0x2ee5/0x3830 [ 819.660285][ T31] ? arch_stack_walk+0xfc/0x150 [ 819.674274][ T31] ? stack_depot_save_flags+0x40/0x860 [ 819.679785][ T31] ? __pfx_path_openat+0x10/0x10 [ 819.694204][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.700320][ T31] do_filp_open+0x1fa/0x410 [ 819.714749][ T31] ? __lock_acquire+0xab9/0xd20 [ 819.719627][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 819.734401][ T31] ? _raw_spin_unlock+0x28/0x50 [ 819.739286][ T31] ? alloc_fd+0x64c/0x6c0 [ 819.743636][ T31] do_sys_openat2+0x121/0x1c0 [ 819.784370][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 819.789887][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 819.804882][ T31] ? rcu_is_watching+0x15/0xb0 [ 819.809679][ T31] __x64_sys_openat+0x138/0x170 [ 819.824454][ T31] do_syscall_64+0xfa/0x3b0 [ 819.828986][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 819.844365][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.850454][ T31] ? clear_bhb_loop+0x60/0xb0 [ 819.872338][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.884699][ T31] RIP: 0033:0x7f7b834a7407 [ 819.889139][ T31] RSP: 002b:00007ffc60825390 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 819.914237][ T31] RAX: ffffffffffffffda RBX: 00007f7b83b72880 RCX: 00007f7b834a7407 [ 819.922241][ T31] RDX: 00000000000a0800 RSI: 0000560b97bbb840 RDI: ffffffffffffff9c [ 819.930787][ T31] RBP: 0000560b97baf910 R08: 0000000000000000 R09: 0000000000000000 [ 819.939231][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560b97bfb4c0 [ 819.947444][ T31] R13: 0000560b97bbd190 R14: 0000000000000000 R15: 0000560b97bfb4c0 [ 819.956206][ T31] [ 819.959596][ T31] [ 819.959596][ T31] Showing all locks held in the system: [ 819.988196][ T31] 1 lock held by khungtaskd/31: [ 819.993075][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 820.042820][ T31] 2 locks held by getty/5633: [ 820.074359][ T31] #0: ffff88814d09b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 820.101612][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 820.145064][ T31] 2 locks held by kworker/1:0/17625: [ 820.150386][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 820.205048][ T31] #1: ffffc90003fefbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 820.244322][ T31] 1 lock held by udevd/19241: [ 820.249031][ T31] #0: ffff888024f69358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 820.286535][ T31] 5 locks held by syz-executor/26595: [ 820.291941][ T31] #0: ffff88804d060dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 820.316652][ T31] #1: ffff88804d0600b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 820.327439][ T31] #2: ffffffff8f69eea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 820.345226][ T31] #3: ffff8880294d7338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 820.356125][ T31] #4: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 820.367581][ T31] 1 lock held by syz-executor/27390: [ 820.372868][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 820.385152][ T31] 3 locks held by syz-executor/27797: [ 820.398938][ T31] [ 820.401283][ T31] ============================================= [ 820.401283][ T31] [ 820.442338][ T31] NMI backtrace for cpu 1 [ 820.442357][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 820.442377][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 820.442388][ T31] Call Trace: [ 820.442395][ T31] [ 820.442404][ T31] dump_stack_lvl+0x189/0x250 [ 820.442433][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.442453][ T31] ? __pfx__printk+0x10/0x10 [ 820.442488][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 820.442516][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 820.442541][ T31] ? __pfx__printk+0x10/0x10 [ 820.442568][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 820.442594][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 820.442620][ T31] watchdog+0xf93/0xfe0 [ 820.442648][ T31] ? watchdog+0x1de/0xfe0 [ 820.442675][ T31] kthread+0x70e/0x8a0 [ 820.442700][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.442721][ T31] ? __pfx_kthread+0x10/0x10 [ 820.442744][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.442761][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.442777][ T31] ? __pfx_kthread+0x10/0x10 [ 820.442798][ T31] ret_from_fork+0x439/0x7d0 [ 820.442819][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.442843][ T31] ? __switch_to_asm+0x39/0x70 [ 820.442862][ T31] ? __switch_to_asm+0x33/0x70 [ 820.442880][ T31] ? __pfx_kthread+0x10/0x10 [ 820.442901][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.442937][ T31] [ 820.442944][ T31] Sending NMI from CPU 1 to CPUs 0: [ 820.597972][ C0] NMI backtrace for cpu 0 [ 820.597990][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 820.598007][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 820.598018][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 820.598039][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 820.598052][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 820.598067][ C0] RAX: db31d635da146500 RBX: ffffffff819683f8 RCX: db31d635da146500 [ 820.598080][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba39a RDI: ffffffff8be33f00 [ 820.598091][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 820.598104][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a630 [ 820.598115][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 820.598126][ C0] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 820.598139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.598151][ C0] CR2: 00007fd5fd117d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 820.598165][ C0] Call Trace: [ 820.598173][ C0] [ 820.598180][ C0] default_idle+0x13/0x20 [ 820.598197][ C0] default_idle_call+0x74/0xb0 [ 820.598216][ C0] do_idle+0x1e8/0x510 [ 820.598239][ C0] ? __pfx_do_idle+0x10/0x10 [ 820.598263][ C0] cpu_startup_entry+0x44/0x60 [ 820.598277][ C0] rest_init+0x2de/0x300 [ 820.598297][ C0] start_kernel+0x3a9/0x410 [ 820.598316][ C0] x86_64_start_reservations+0x24/0x30 [ 820.598336][ C0] x86_64_start_kernel+0x143/0x1c0 [ 820.598354][ C0] common_startup_64+0x13e/0x147 [ 820.598381][ C0] [ 820.599237][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 820.779403][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 820.788592][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 820.798651][ T31] Call Trace: [ 820.801927][ T31] [ 820.804853][ T31] dump_stack_lvl+0x99/0x250 [ 820.809440][ T31] ? __asan_memcpy+0x40/0x70 [ 820.814024][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.819213][ T31] ? __pfx__printk+0x10/0x10 [ 820.823805][ T31] vpanic+0x281/0x750 [ 820.827781][ T31] ? __pfx_vpanic+0x10/0x10 [ 820.832271][ T31] ? preempt_schedule+0xae/0xc0 [ 820.837113][ T31] ? preempt_schedule_common+0x83/0xd0 [ 820.842563][ T31] panic+0xb9/0xc0 [ 820.846278][ T31] ? __pfx_panic+0x10/0x10 [ 820.850682][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 820.856057][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 820.862217][ T31] watchdog+0xfd2/0xfe0 [ 820.866369][ T31] ? watchdog+0x1de/0xfe0 [ 820.870694][ T31] kthread+0x70e/0x8a0 [ 820.874758][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.879435][ T31] ? __pfx_kthread+0x10/0x10 [ 820.884019][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.889203][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.894382][ T31] ? __pfx_kthread+0x10/0x10 [ 820.898958][ T31] ret_from_fork+0x439/0x7d0 [ 820.903536][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.908636][ T31] ? __switch_to_asm+0x39/0x70 [ 820.913389][ T31] ? __switch_to_asm+0x33/0x70 [ 820.918138][ T31] ? __pfx_kthread+0x10/0x10 [ 820.922717][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.927482][ T31] [ 820.930744][ T31] Kernel Offset: disabled [ 820.935050][ T31] Rebooting in 86400 seconds..